更新

backend/app/middleware/JwtAuth.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace app\middleware;
+
+use app\model\User;
+use app\service\JwtService;
+use app\service\UserContextService;
+use think\exception\HttpResponseException;
+use think\Response;
+
+class JwtAuth
+{
+    public function handle($request, \Closure $next)
+    {
+        $token = $request->header('Authorization', '');
+        $payload = JwtService::verifyToken($token);
+
+        if (!$payload || empty($payload['user_id'])) {
+            $this->abort('请先登录', 401);
+        }
+
+        $user = User::with(['membership', 'roleModel', 'department'])->find($payload['user_id']);
+        if (!$user || $user->status !== 'active') {
+            $this->abort('请先登录', 401);
+        }
+
+        $request->authUser = UserContextService::formatAuthUser($user);
+
+        return $next($request);
+    }
+
+    private function abort(string $message, int $httpCode = 400): void
+    {
+        throw new HttpResponseException(json([
+            'code'    => 1,
+            'message' => $message,
+            'data'    => null,
+        ], $httpCode));
+    }
+}