feat: add unified authorization middleware

scripts/api-docgen/main.go

@@ -90,7 +90,7 @@ func renderModule(module moduleInfo, services []protoreflect.ServiceDescriptor)
 	fmt.Fprintf(&out, "- 动态 HTTP：`POST /rpc/%s/{Service}/{Method}`\n", module.Package)
 	fmt.Fprintf(&out, "- 原生 gRPC：`/%s.{Service}/{Method}`\n", module.Package)
 	fmt.Fprintf(&out, "- grpc-gateway：`POST /%s.{Service}/{Method}`\n", module.Package)
-	out.WriteString("- 鉴权：需要登录的接口通过 `Authorization: Bearer <token>` 传递凭证。\n")
+	out.WriteString("- 鉴权：需要登录的接口通过 `Authorization: <JWT>` 传递裸 JWT，不添加 `Bearer` 前缀。\n")
 	out.WriteString("- 动态 HTTP 成功或失败均返回 HTTP 200，业务状态见 `code`、`message`、`details`。\n\n")
 
 	out.WriteString("## 服务概览\n\n")
@@ -122,7 +122,6 @@ func renderModule(module moduleInfo, services []protoreflect.ServiceDescriptor)
 			fmt.Fprintf(&out, "\n### %s.%s\n\n", service.Name(), method.Name())
 			fmt.Fprintf(&out, "- 动态 HTTP：`POST /rpc/%s/%s/%s`\n", module.Package, service.Name(), method.Name())
 			fmt.Fprintf(&out, "- gRPC：`/%s/%s`\n", service.FullName(), method.Name())
-			fmt.Fprintf(&out, "- 白名单键：`%s.%s`\n", service.FullName(), method.Name())
 			out.WriteString("- 请求示例：\n\n```json\n")
 			out.Write(exampleJSON(method.Input()))
 			out.WriteString("\n```\n")