feat: api秘钥只能访问api接口，access token只能访问内部接口

2025-09-25 13:55:06 +08:00
parent 1ef96d533a
commit af63d44478
5 changed files with 27 additions and 16 deletions
@@ -20,7 +20,7 @@ class ApiSecretModel(BasicModel, table=True):
 # 插入数据之前，查询当前用户信息，使用username生成一个access_token作为秘钥保存到 ApiSecretModel中
 async def before_insert(row_dict, session):
  user: UserServiceModel = await UserService.query_item(session, {"id": row_dict.get("created_by")})
-  row_dict["secret"] = CryptUtils.create_token(user.username, "access", timedelta(days=9999))
+  row_dict["secret"] = CryptUtils.create_token(user.username, "api", timedelta(days=9999))


 # 删除ApiSecret凭据之前，先清理掉缓存中的秘钥信息