e18f33d60f
- 实现 JWT 认证中间件，保护配置管理和任务删除接口 - 修复 ConfigView 登录按钮（Vue 3 inject 替代 $root） - 页面刷新时通过 /api/auth/me 校验 token 有效性 - max_concurrent_builds 修改后运行时即时生效 - 实现钉钉 webhook 通知（构建成功/失败自动推送） - 删除未使用的 useWebSocket composable - log_streamer 使用 LOG_QUEUE_MAX_SIZE 配置常量
21 lines
863 B
Python
21 lines
863 B
Python
"""认证依赖"""
|
||
import jwt
|
||
from fastapi import Depends, HTTPException, status
|
||
from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
|
||
|
||
from .config import JWT_SECRET, JWT_ALGORITHM
|
||
|
||
security = HTTPBearer()
|
||
|
||
|
||
def get_current_user(credentials: HTTPAuthorizationCredentials = Depends(security)) -> dict:
|
||
"""验证 JWT token，返回用户信息"""
|
||
token = credentials.credentials
|
||
try:
|
||
payload = jwt.decode(token, JWT_SECRET, algorithms=[JWT_ALGORITHM])
|
||
return {"username": payload["sub"], "is_admin": payload.get("is_admin", False)}
|
||
except jwt.ExpiredSignatureError:
|
||
raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail="登录已过期，请重新登录")
|
||
except jwt.InvalidTokenError:
|
||
raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail="无效的认证凭据")
|