修复数据库调用问题

middleware/admin.py

@@ -0,0 +1,34 @@
+from typing import Annotated, Literal
+from fastapi import Depends
+from fastapi import HTTPException
+import JWT
+import jwt
+from jwt import InvalidTokenError
+from model import database
+from sqlmodel.ext.asyncio.session import AsyncSession
+from model import User
+from .user import get_current_user
+
+# 验证是否为管理员
+async def is_admin(
+        token: Annotated[str, Depends(get_current_user)],
+        session: Annotated[AsyncSession, Depends(database.Database.get_session)],
+) -> Literal[True]:
+    '''
+    验证是否为管理员。
+    
+    使用方法：
+    >>> APIRouter(dependencies=[Depends(is_admin)])
+    '''
+
+    not_admin_exception = HTTPException(
+        status_code=403,
+        detail="Admin access required",
+        headers={"WWW-Authenticate": "Bearer"},
+    )
+
+    user = await get_current_user(token, session)
+    if not user.is_admin:
+        raise not_admin_exception
+    else:
+        return True

middleware/user.py

@@ -0,0 +1,33 @@
+from typing import Annotated, Literal
+from fastapi import Depends
+from fastapi import HTTPException
+import JWT
+import jwt
+from jwt import InvalidTokenError
+from model import database
+from sqlmodel.ext.asyncio.session import AsyncSession
+from model import User
+
+# 验证是否为管理员
+async def get_current_user(
+        token: Annotated[str, Depends(JWT.oauth2_scheme)],
+        session: Annotated[AsyncSession, Depends(database.Database.get_session)],
+) -> User:
+    '''
+    验证用户身份并返回当前用户信息。
+    '''
+    not_login_exception = HTTPException(
+        status_code=401,
+        detail="Login required",
+        headers={"WWW-Authenticate": "Bearer"},
+    )
+
+    try:
+        payload = jwt.decode(token, await JWT.get_secret_key(), algorithms=[JWT.ALGORITHM])
+        username = payload.get("sub")
+        stored_account = await User.get(session, User.email == username)
+        if username is None or not stored_account.email == username:
+            raise not_login_exception
+        return stored_account
+    except InvalidTokenError:
+        raise not_login_exception