deliveryman/deliveryman-api
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update

Browse Source
This commit is contained in:
aaron 2025-03-06 14:45:34 +08:00
parent 61603f1981
commit b8631c8c73
2 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
app/api/deps.py
View File

@ -18,12 +18,14 @@ async def get_current_user(
token = None token = None
if authorization and authorization.startswith("Bearer "): if authorization and authorization.startswith("Bearer "):
token = authorization.split(" ")[1] token = authorization.split(" ")[1]
elif access_token and access_token.startswith("Bearer "): elif access_token:
token = access_token.split(" ")[1] token = access_token
if not token: if not token:
raise HTTPException(status_code=401, detail="未提供有效的认证信息") raise HTTPException(status_code=401, detail="未提供有效的认证信息")
print(f"token: {token}")
sub, phone = verify_token(token) sub, phone = verify_token(token)
if not sub: if not sub:
raise HTTPException(status_code=401, detail="Token已过期或无效") raise HTTPException(status_code=401, detail="Token已过期或无效")

3
app/core/security.py
View File

@ -25,7 +25,7 @@ def set_jwt_cookie(response: Response, token: str):
"""设置JWT cookie""" """设置JWT cookie"""
response.set_cookie( response.set_cookie(
key="access_token", key="access_token",
value=f"Bearer {token}", value=token,
httponly=True, # 防止JavaScript访问 httponly=True, # 防止JavaScript访问
# secure=not settings.DEBUG, # 生产环境使用HTTPS # secure=not settings.DEBUG, # 生产环境使用HTTPS
samesite="lax", # CSRF保护 samesite="lax", # CSRF保护
@ -47,6 +47,7 @@ def verify_token(token: str) -> Optional[str]:
payload = jwt.decode(token, settings.SECRET_KEY, algorithms=["HS256"]) payload = jwt.decode(token, settings.SECRET_KEY, algorithms=["HS256"])
sub: str = payload.get("sub") sub: str = payload.get("sub")
phone: str = payload.get("phone") phone: str = payload.get("phone")
print(f"payload: {payload}")
return sub, phone return sub, phone
except JWTError: except JWTError:
return None, None return None, None