golangci lint 적용

backend/internal/middleware/audit_middleware.go

@@ -99,7 +99,7 @@ func AuditMiddleware(config AuditConfig) fiber.Handler {
 		// 4. Gather Metrics & Context
 		latency := time.Since(start)
 		status := c.Response().StatusCode()
-		
+
 		// If Fiber handler returned an error, status might default to 500 or be in the error
 		if err != nil {
 			if fiberErr, ok := err.(*fiber.Error); ok {
@@ -120,7 +120,7 @@ func AuditMiddleware(config AuditConfig) fiber.Handler {
 		tenantID, _ := c.Locals("tenant_id").(string)
 		sessionID, _ := c.Locals("session_id").(string)
 		clientIP := extractClientIP(c)
-		
+
 		// 6. Capture & Mask Body
 		var maskedBody string
 		if config.BodyDump {
@@ -187,7 +187,7 @@ func AuditMiddleware(config AuditConfig) fiber.Handler {
 
 		// 9. Store Log (Policy Enforcement)
 		_, isWrite := writeMethods[c.Method()]
-		
+
 		if isNil(config.Repo) {
 			if isWrite {
 				slog.Error("Audit repository missing for command", "req_id", reqID)

backend/internal/middleware/audit_middleware_test.go

@@ -43,7 +43,7 @@ func TestAuditMiddleware(t *testing.T) {
 	t.Run("POST request - Sync Success", func(t *testing.T) {
 		app := fiber.New()
 		mockRepo := new(MockAuditRepository)
-		
+
 		app.Use(AuditMiddleware(AuditConfig{
 			Repo:     mockRepo,
 			BodyDump: true,
@@ -56,14 +56,14 @@ func TestAuditMiddleware(t *testing.T) {
 		mockRepo.On("Create", mock.MatchedBy(func(log *domain.AuditLog) bool {
 			var details map[string]any
 			json.Unmarshal([]byte(log.Details), &details)
-			return log.Status == "success" && 
-				details["method"] == "POST" && 
+			return log.Status == "success" &&
+				details["method"] == "POST" &&
 				details["request_body"] == `{"password":"*****","user":"test"}`
 		})).Return(nil)
 
 		req := httptest.NewRequest("POST", "/test", strings.NewReader(`{"user": "test", "password": "mypassword"}`))
 		req.Header.Set("Content-Type", "application/json")
-		
+
 		resp, _ := app.Test(req)
 		assert.Equal(t, fiber.StatusOK, resp.StatusCode)
 		mockRepo.AssertExpectations(t)
@@ -72,7 +72,7 @@ func TestAuditMiddleware(t *testing.T) {
 	t.Run("POST request - Sync Failure (Strict Mode)", func(t *testing.T) {
 		app := fiber.New()
 		mockRepo := new(MockAuditRepository)
-		
+
 		app.Use(AuditMiddleware(AuditConfig{
 			Repo: mockRepo,
 		}))
@@ -85,7 +85,7 @@ func TestAuditMiddleware(t *testing.T) {
 
 		req := httptest.NewRequest("POST", "/test", nil)
 		resp, _ := app.Test(req)
-		
+
 		// Should return 503 because Audit failed on a Write method
 		assert.Equal(t, fiber.StatusServiceUnavailable, resp.StatusCode)
 	})
@@ -93,7 +93,7 @@ func TestAuditMiddleware(t *testing.T) {
 	t.Run("GET request - Async Load Shedding", func(t *testing.T) {
 		app := fiber.New()
 		mockRepo := new(MockAuditRepository)
-		
+
 		// Set very small queue and no workers to force load shedding
 		app.Use(AuditMiddleware(AuditConfig{
 			Repo:        mockRepo,
@@ -107,16 +107,16 @@ func TestAuditMiddleware(t *testing.T) {
 
 		// 1. First request fills the queue
 		mockRepo.On("Create", mock.Anything).Return(nil)
-		
+
 		req1 := httptest.NewRequest("GET", "/test", nil)
 		resp1, _ := app.Test(req1)
 		assert.Equal(t, fiber.StatusOK, resp1.StatusCode)
 
 		// 2. Second request should be dropped (load shedding) if workers are slow
-		// Since we can't easily pause workers without modifying code, 
+		// Since we can't easily pause workers without modifying code,
 		// this test mostly ensures the non-blocking send doesn't hang.
 		req2 := httptest.NewRequest("GET", "/test", nil)
 		resp2, _ := app.Test(req2)
 		assert.Equal(t, fiber.StatusOK, resp2.StatusCode)
 	})
-}
+}

backend/internal/middleware/rbac.go

@@ -3,8 +3,9 @@ package middleware
 import (
 	"baron-sso-backend/internal/domain"
 	"baron-sso-backend/internal/service"
-	"github.com/gofiber/fiber/v2"
 	"log/slog"
+
+	"github.com/gofiber/fiber/v2"
 )
 
 // RBACConfig defines the configuration for RBAC middleware
@@ -89,9 +90,9 @@ func RequireRole(config RBACConfig) fiber.Handler {
 		}
 
 		if !roleAllowed {
-			slog.Warn("RBAC access denied", 
-				"userID", profile.ID, 
-				"userRole", profile.Role, 
+			slog.Warn("RBAC access denied",
+				"userID", profile.ID,
+				"userRole", profile.Role,
 				"allowedRoles", config.AllowedRoles,
 				"path", c.Path(),
 			)