feat: 更新数据模型和API路由,优化用户信息获取及设置管理
This commit is contained in:
@@ -22,7 +22,7 @@ async def AuthRequired(
|
||||
AuthRequired 需要登录
|
||||
"""
|
||||
try:
|
||||
payload = jwt.decode(token, JWT.SECRET_KEY, algorithms="HS256")
|
||||
payload = jwt.decode(token, JWT.SECRET_KEY, algorithms=["HS256"])
|
||||
username = payload.get("sub")
|
||||
|
||||
if username is None:
|
||||
@@ -56,8 +56,7 @@ async def AdminRequired(
|
||||
使用方法:
|
||||
>>> APIRouter(dependencies=[Depends(AdminRequired)])
|
||||
"""
|
||||
# TODO: 跨表联查时需要使用 awaitable_attrs
|
||||
# if await user.awaitable_attrs.group.admin:
|
||||
if user.group.admin:
|
||||
group = await user.awaitable_attrs.group
|
||||
if group.admin:
|
||||
return user
|
||||
raise HTTPException(status_code=403, detail="Admin Required")
|
||||
Reference in New Issue
Block a user