feat: add customer authentication and scoped RBAC

2026-07-16 13:58:28 +08:00
parent 6d6c9ce534
commit a1195fb97d
28 changed files with 1738 additions and 97 deletions
--- a/vehicle-data-platform/apps/api/internal/platform/profile.go
+++ b/vehicle-data-platform/apps/api/internal/platform/profile.go
@@ -29,6 +29,9 @@ var vehicleProfileSourceSystemPattern = regexp.MustCompile(`^[a-z0-9][a-z0-9._:-

 func (s *Service) VehicleProfile(ctx context.Context, vin string) (VehicleProfile, error) {
 	vin = strings.TrimSpace(vin)
+	if err := authorizeVehicleVIN(ctx, vin); err != nil {
+		return VehicleProfile{}, err
+	}
 	if err := validateProfileVIN(vin); err != nil {
 		return VehicleProfile{}, err
 	}