simpleCA/auth_middleware.py

from functools import wraps
from flask import request, jsonify
from utils.auth_utils import verify_token
from models import User

def login_required(f):
    """登录验证装饰器"""
    @wraps(f)
    def decorated_function(*args, **kwargs):
        token = request.headers.get('Authorization')
        if not token:
            return jsonify({'code': 401, 'message': '未提供Token'}), 401
        
        # 移除Bearer前缀（如果有）
        if token.startswith('Bearer '):
            token = token[7:]
        
        payload = verify_token(token)
        if not payload:
            return jsonify({'code': 401, 'message': 'Token无效或已过期'}), 401
        
        # 将用户信息添加到request中
        request.user_id = payload['user_id']
        request.username = payload['username']
        
        return f(*args, **kwargs)
    
    return decorated_function

def admin_required(f):
    """管理员权限验证装饰器"""
    @wraps(f)
    @login_required
    def decorated_function(*args, **kwargs):
        user = User.query.get(request.user_id)
        if not user or user.authority != 1:
            return jsonify({'code': 403, 'message': '需要管理员权限'}), 403
        
        return f(*args, **kwargs)
    
    return decorated_function