fix(security): security audit fixes for API vulnerabilities

Security fixes:
- Fix sensitive data exposure: UserResponse no longer contains email/phone
- Add UserSelfResponse for authenticated user's own data
- Protect Gorse endpoints with admin role requirement
- Add rate limiting (10 req/min) to auth endpoints
- Fix CORS configuration to use allowed origins list
- Add pagination parameter validation (max 100 per page)

Changes:
- dto/dto.go: Add UserSelfResponse type
- dto/user_converter.go: Add ConvertUserToSelfResponse
- handler/user_handler.go: Use secure response types
- middleware/cors.go: Implement origin whitelist
- middleware/ratelimit.go: Enhance rate limiter
- router/router.go: Add auth rate limit, protect Gorse
- service/admin_*.go: Use ConvertUserToResponse

internal/middleware/ratelimit.go

@@ -8,7 +8,6 @@ import (
 	"github.com/gin-gonic/gin"
 )
 
-// RateLimiter 限流器
 type RateLimiter struct {
 	requests map[string][]time.Time
 	mu       sync.Mutex
@@ -16,7 +15,6 @@ type RateLimiter struct {
 	window   time.Duration
 }
 
-// NewRateLimiter 创建限流器
 func NewRateLimiter(limit int, window time.Duration) *RateLimiter {
 	rl := &RateLimiter{
 		requests: make(map[string][]time.Time),
@@ -24,7 +22,6 @@ func NewRateLimiter(limit int, window time.Duration) *RateLimiter {
 		window:   window,
 	}
 
-	// 定期清理过期的记录
 	go func() {
 		for {
 			time.Sleep(window)
@@ -35,7 +32,6 @@ func NewRateLimiter(limit int, window time.Duration) *RateLimiter {
 	return rl
 }
 
-// cleanup 清理过期的记录
 func (rl *RateLimiter) cleanup() {
 	rl.mu.Lock()
 	defer rl.mu.Unlock()
@@ -56,7 +52,6 @@ func (rl *RateLimiter) cleanup() {
 	}
 }
 
-// isAllowed 检查是否允许请求
 func (rl *RateLimiter) isAllowed(key string) bool {
 	rl.mu.Lock()
 	defer rl.mu.Unlock()
@@ -64,7 +59,6 @@ func (rl *RateLimiter) isAllowed(key string) bool {
 	now := time.Now()
 	times := rl.requests[key]
 
-	// 过滤掉过期的
 	var valid []time.Time
 	for _, t := range times {
 		if now.Sub(t) < rl.window {
@@ -81,7 +75,6 @@ func (rl *RateLimiter) isAllowed(key string) bool {
 	return true
 }
 
-// RateLimit 限流中间件
 func RateLimit(requestsPerMinute int) gin.HandlerFunc {
 	limiter := NewRateLimiter(requestsPerMinute, time.Minute)
 
@@ -91,7 +84,29 @@ func RateLimit(requestsPerMinute int) gin.HandlerFunc {
 		if !limiter.isAllowed(ip) {
 			c.JSON(http.StatusTooManyRequests, gin.H{
 				"code":    429,
-				"message": "too many requests",
+				"message": "too many requests, please try again later",
+			})
+			c.Abort()
+			return
+		}
+
+		c.Next()
+	}
+}
+
+func RateLimitWithKey(requestsPerMinute int, keyFunc func(c *gin.Context) string) gin.HandlerFunc {
+	limiter := NewRateLimiter(requestsPerMinute, time.Minute)
+
+	return func(c *gin.Context) {
+		key := keyFunc(c)
+		if key == "" {
+			key = c.ClientIP()
+		}
+
+		if !limiter.isAllowed(key) {
+			c.JSON(http.StatusTooManyRequests, gin.H{
+				"code":    429,
+				"message": "too many requests, please try again later",
 			})
 			c.Abort()
 			return