2026-05-05 05:54:59 +08:00

28 lines
741 B
TypeScript

import { createMiddleware } from 'hono/factory'
import jwt from 'jsonwebtoken'
export type JwtPayload = { userId: string; username: string }
declare module 'hono' {
interface ContextVariableMap {
userId: string
username: string
}
}
export const requireAuth = createMiddleware(async (c, next) => {
const header = c.req.header('Authorization')
if (!header?.startsWith('Bearer ')) {
return c.json({ error: '未登录' }, 401)
}
const token = header.slice(7)
try {
const payload = jwt.verify(token, process.env.JWT_SECRET!) as JwtPayload
c.set('userId', payload.userId)
c.set('username', payload.username)
await next()
} catch {
return c.json({ error: 'Token 无效或已过期' }, 401)
}
})