feat(auth): support bearer token pass via query parameter

middleware/auth.go

@@ -14,9 +14,13 @@ func Auth(cfg *config.Config) gin.HandlerFunc {
 	return func(c *gin.Context) {
 		authHeader := c.GetHeader("Authorization")
 		if authHeader == "" {
-			c.JSON(http.StatusUnauthorized, gin.H{"code": 401, "message": "missing authorization header"})
-			c.Abort()
-			return
+			if queryToken := c.Query("token"); queryToken != "" {
+				authHeader = "Bearer " + queryToken
+			} else {
+				c.JSON(http.StatusUnauthorized, gin.H{"code": 401, "message": "missing authorization header"})
+				c.Abort()
+				return
+			}
 		}
 
 		parts := strings.Split(authHeader, " ")