完善认证逻辑，添加用户信息 introspect 接口，更新 .gitignore 忽略 scripts 目录

web/auth/auth.go

@@ -111,18 +111,24 @@ func Protect(c *fiber.Ctx, types []services.PayloadType, permissions []string) (
 	var auth *services.AuthContext
 	var err error
 	switch split[0] {
+
 	case "Bearer":
 		auth, err = authBearer(c.Context(), token)
+		if err != nil {
+			return nil, fiber.NewError(fiber.StatusUnauthorized, "没有权限")
+		}
+
 	case "Basic":
 		if !slices.Contains(types, services.PayloadClientConfidential) {
 			return nil, fiber.NewError(fiber.StatusForbidden, "没有权限")
 		}
 		auth, err = authBasic(c.Context(), token)
+		if err != nil {
+			return nil, fiber.NewError(fiber.StatusUnauthorized, "没有权限")
+		}
+
 	default:
-		return nil, fiber.NewError(fiber.StatusUnauthorized, "没有权限")
-	}
-	if err != nil {
-		return nil, fiber.NewError(fiber.StatusUnauthorized, "没有权限")
+		return nil, fiber.NewError(fiber.StatusForbidden, "没有权限")
 	}
 
 	// 检查权限