Merge branch 'main' of https://github.com/DiskNext/Server

2026-01-13 15:30:57 +08:00
parent b12aad4e73 d2c914cff8
commit c6f16de569
28 changed files with 811 additions and 201 deletions
--- a/middleware/auth.py
+++ b/middleware/auth.py
@@ -60,10 +60,10 @@ def verify_download_token(token: str) -> tuple[str, UUID, UUID] | None:
    try:
        payload = jwt.decode(token, JWT.SECRET_KEY, algorithms=["HS256"])
        if payload.get("type") != "download":
-            return None
+            http_exceptions.raise_unauthorized("Download token required")
        jti = payload.get("jti")
        if not jti:
-            return None
+            http_exceptions.raise_unauthorized("Download token required")
        return jti, UUID(payload["file_id"]), UUID(payload["owner_id"])
-    except (jwt.ExpiredSignatureError, jwt.InvalidTokenError):
-        return None
+    except jwt.InvalidTokenError:
+        http_exceptions.raise_unauthorized("Download token required")