sec commit

shared/code/backend/middleware/auth.js

@@ -0,0 +1,26 @@
+const jwt = require('jsonwebtoken');
+const path = require('path');
+
+const JWT_SECRET = process.env.JWT_SECRET || 'openclaw-secret-key-2026';
+const JWT_EXPIRES_IN = process.env.JWT_EXPIRES_IN || '7d';
+
+function authMiddleware(req, res, next) {
+  const authHeader = req.headers.authorization;
+  if (!authHeader || !authHeader.startsWith('Bearer ')) {
+    return res.status(401).json({ code: 401, message: '未授权，请先登录' });
+  }
+
+  const token = authHeader.slice(7);
+  try {
+    const decoded = jwt.verify(token, JWT_SECRET);
+    req.user = decoded;
+    next();
+  } catch (err) {
+    if (err.name === 'TokenExpiredError') {
+      return res.status(401).json({ code: 401, message: 'Token 已过期，请重新登录' });
+    }
+    return res.status(401).json({ code: 401, message: 'Token 无效' });
+  }
+}
+
+module.exports = { authMiddleware, JWT_SECRET, JWT_EXPIRES_IN };