aicodeswitch 4.0.1 → 4.0.2

package/dist/server/auth.js

@@ -10,14 +10,20 @@ exports.verifyToken = verifyToken;
 exports.authMiddleware = authMiddleware;
 const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
 const crypto_1 = __importDefault(require("crypto"));
-const AUTH_CODE = process.env.AUTH || '';
-const JWT_SECRET = process.env.JWT_SECRET || (AUTH_CODE ? crypto_1.default.createHash('sha256').update(AUTH_CODE).digest('hex') : '');
+// 延迟读取 process.env.AUTH，避免模块加载时 dotenv 尚未执行导致值始终为空
+function getAuthCode() {
+    return process.env.AUTH || '';
+}
+function getJwtSecret() {
+    const authCode = getAuthCode();
+    return process.env.JWT_SECRET || (authCode ? crypto_1.default.createHash('sha256').update(authCode).digest('hex') : '');
+}
 const TOKEN_EXPIRY = '7d'; // 7天有效期
 /**
  * 检查是否启用鉴权
  */
 function isAuthEnabled() {
-    return AUTH_CODE.trim().length > 0;
+    return getAuthCode().trim().length > 0;
 }
 /**
  * 验证鉴权码
@@ -26,7 +32,7 @@ function verifyAuthCode(authCode) {
     if (!isAuthEnabled()) {
         return true; // 未启用鉴权,直接通过
     }
-    return authCode === AUTH_CODE;
+    return authCode === getAuthCode();
 }
 /**
  * 生成 JWT Token
@@ -35,14 +41,14 @@ function generateToken() {
     const payload = {
         authenticated: true,
     };
-    return jsonwebtoken_1.default.sign(payload, JWT_SECRET, { expiresIn: TOKEN_EXPIRY });
+    return jsonwebtoken_1.default.sign(payload, getJwtSecret(), { expiresIn: TOKEN_EXPIRY });
 }
 /**
  * 验证 JWT Token
  */
 function verifyToken(token) {
     try {
-        jsonwebtoken_1.default.verify(token, JWT_SECRET);
+        jsonwebtoken_1.default.verify(token, getJwtSecret());
         return true;
     }
     catch (error) {