feat: 新增设备登录开关配置，优化 CI Go 模块缓存机制，并添加解密中间件调试日志。

apps/api/etc/api-dev.yaml

@@ -49,6 +49,9 @@ Security:
   Enable: true
   SecuritySecret: "uB4G,XxL2{7b"
 
+Device:
+  Enable: true
+
 Asynq:
   Addr: 127.0.0.1:6379
 

apps/api/internal/config/config.go

@@ -23,4 +23,7 @@ type Config struct {
 		Enable         bool
 		SecuritySecret string
 	}
+	Device struct {
+		Enable bool
+	}
 }

apps/api/internal/logic/auth/deviceLoginLogic.go

@@ -34,6 +34,11 @@ func NewDeviceLoginLogic(ctx context.Context, svcCtx *svc.ServiceContext) *Devic
 }
 
 func (l *DeviceLoginLogic) DeviceLogin(req *types.DeviceLoginReq) (resp *types.LoginResp, err error) {
+	// todo: 新建设备登录是否禁用逻辑
+	if !l.svcCtx.Config.Device.Enable {
+		return nil, xerr.NewErrCode(xerr.DeviceLoginDisabled)
+	}
+
 	// 1. 调用 Core RPC 设备登录
 	rpcResp, err := l.svcCtx.CoreRpc.DeviceLogin(l.ctx, &core.DeviceLoginReq{
 		Identifier: req.Identifier,

apps/api/internal/middleware/decryptMiddleware.go

@@ -8,6 +8,7 @@ import (
 	"io"
 	"net"
 	"net/http"
+	"net/url"
 	"strings"
 
 	"github.com/zero-ppanel/zero-ppanel/apps/api/internal/config"
@@ -26,6 +27,8 @@ func NewDecryptMiddleware(c config.Config) *DecryptMiddleware {
 
 func (m *DecryptMiddleware) Handle(next http.HandlerFunc) http.HandlerFunc {
 	return func(w http.ResponseWriter, r *http.Request) {
+		fmt.Printf("[DEBUG] DecryptMiddleware entered, Security.Enable=%v, Login-Type=%q\n",
+			m.conf.Security.Enable, r.Header.Get("Login-Type"))
 		if !m.conf.Security.Enable {
 			next(w, r)
 			return
@@ -86,7 +89,12 @@ func (m *DecryptMiddleware) Handle(next http.HandlerFunc) http.HandlerFunc {
 				httpx.Error(w, xerr.NewErrCode(xerr.DecryptFailed))
 				return
 			}
+			fmt.Printf("[DEBUG] decrypted body: %s\n", string(plain))
 			r.Body = io.NopCloser(bytes.NewBuffer(plain))
+			// 防止 httpx.Parse 内部的 r.ParseForm() 消费已替换的 body：
+			// ParseForm 首行检查 r.PostForm == nil，置空后它不会再读 body。
+			r.PostForm = url.Values{}
+			r.ContentLength = int64(len(plain))
 		}
 
 		next(rw, r)