39 lines
868 B
JavaScript
39 lines
868 B
JavaScript
|
/**
|
|||
|
|
* API鉴权中间件
|
|||
|
|
* Phase A：简单Token鉴权
|
|||
|
|
* Token通过环境变量 BRAIN_API_TOKEN 配置
|
|||
|
|
*/
|
|||
|
|
|
|||
|
|
module.exports = function authMiddleware(req, res, next) {
|
|||
|
|
const authHeader = req.headers.authorization;
|
|||
|
|
|
|||
|
|
if (!authHeader || !authHeader.startsWith('Bearer ')) {
|
|||
|
|
return res.status(401).json({
|
|||
|
|
error: true,
|
|||
|
|
code: 'UNAUTHORIZED',
|
|||
|
|
message: 'Missing or invalid Authorization header'
|
|||
|
|
});
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
const token = authHeader.slice(7);
|
|||
|
|
const expectedToken = process.env.BRAIN_API_TOKEN;
|
|||
|
|
|
|||
|
|
if (!expectedToken) {
|
|||
|
|
return res.status(500).json({
|
|||
|
|
error: true,
|
|||
|
|
code: 'CONFIG_ERROR',
|
|||
|
|
message: 'BRAIN_API_TOKEN not configured on server'
|
|||
|
|
});
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (token !== expectedToken) {
|
|||
|
|
return res.status(403).json({
|
|||
|
|
error: true,
|
|||
|
|
code: 'FORBIDDEN',
|
|||
|
|
message: 'Invalid API token'
|
|||
|
|
});
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
next();
|
|||
|
|
};
|