第一次提交

backend/app/modules/auth/deps.py

@@ -0,0 +1,20 @@
+from __future__ import annotations
+
+from fastapi import Depends, Header, HTTPException, status
+
+from app.db.platform_store import get_platform_store
+from app.modules.auth.service import decode_access_token
+
+
+def get_current_user(authorization: str | None = Header(default=None)) -> dict:
+    """从 Bearer 令牌解析出当前登录用户，供受保护接口依赖使用。"""
+    if not authorization or not authorization.lower().startswith("bearer "):
+        raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail="缺少认证令牌")
+    token = authorization.split(" ", 1)[1].strip()
+    user_id = decode_access_token(token)
+    if not user_id:
+        raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail="令牌无效或已过期")
+    user = get_platform_store().user_by_id(user_id)
+    if not user:
+        raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail="用户不存在")
+    return user