初始化本地仓库

backend/app/adminapi/middleware/AccessTokenMiddleware.php

@@ -0,0 +1,69 @@
+<?php
+declare(strict_types=1);
+/**
+ *+------------------
+ * madong
+ *+------------------
+ * Copyright (c) https://gitee.com/motion-code  All rights reserved.
+ *+------------------
+ * Author: Mr. April (405784684@qq.com)
+ *+------------------
+ * Official Website: http://www.madong.tech
+ */
+
+namespace app\adminapi\middleware;
+
+
+use app\adminapi\middleware\helper\SseHelper;
+use core\exception\handler\UnauthorizedHttpException;
+use core\jwt\JwtToken;
+use core\tool\Json;
+use madong\swagger\attribute\AllowAnonymous;
+use madong\swagger\helper\AnnotationHelper;
+use Webman\Http\Request;
+use Webman\Http\Response;
+use Webman\MiddlewareInterface;
+
+/**
+ * AccessToken 中间件（JWT Token 验证）
+ * 功能：
+ * 1. 检查请求是否需要跳过 Token 验证（通过 AllowAnonymous 注解）
+ * 2. 验证 JWT Token 有效性，无效则返回 401
+ */
+#\[\Attribute\]
+final class AccessTokenMiddleware implements MiddlewareInterface
+{
+    public function process(Request $request, callable $handler): Response
+    {
+        $route = $request->route;
+        if (!$route || !isset($request->action)) {
+            return $handler($request);
+        }
+
+        $controllerClass = $request->controller;
+        $action          = $request->action;
+
+        $skipAuth = AnnotationHelper::getMethodAnnotation($controllerClass, $action, AllowAnonymous::class);
+        if ($skipAuth && !$skipAuth->requireToken) {
+            return $handler($request);
+        }
+
+        try {
+            $jwt = new JwtToken();
+            $payload = $jwt->verify();
+            $userId = $payload['id'] ?? null;
+            if (empty($userId)) {
+                throw new UnauthorizedHttpException();
+            }
+            $jwt->touchCurrentToken();
+        } catch (\Exception $e) {
+            // 检查是否为SSE请求
+            if (SseHelper::isSseRequest($request)) {
+                return SseHelper::sendSseErrorViaConnection($request, $e->getMessage());
+            }
+            return Json::fail($e->getMessage(), [], 401);
+        }
+        return $handler($request);
+    }
+
+}