From 32f7b86f28339fc1db09838a69ad77b982f8dc86 Mon Sep 17 00:00:00 2001
From: "ethan.chen" <ethan.chen@sangoai.cn>
Date: Mon, 23 Jun 2025 16:57:22 +0800
Subject: [PATCH] feat: implement authentication middleware and routes

- Added `auth.ts` for JWT authentication middleware.
- Created `auth` route to handle authentication and token verification.
- Integrated authentication middleware into `media.ts` for protected routes.
- Updated `main.ts` to register the new authentication route.
---
 auth.ts         | 29 +++++++++++++++++++++++++++++
 deploy.sh       | 12 +++---------
 main.ts         |  4 ++++
 routes/auth.ts  | 20 ++++++++++++++++++++
 routes/media.ts |  3 +++
 5 files changed, 59 insertions(+), 9 deletions(-)
 create mode 100644 auth.ts
 create mode 100644 routes/auth.ts

diff --git a/auth.ts b/auth.ts
new file mode 100644
index 0000000..5808259
--- /dev/null
+++ b/auth.ts
@@ -0,0 +1,29 @@
+/*
+ * @Date: 2025-06-23 14:36:45
+ * @LastEditors: 陈子健
+ * @LastEditTime: 2025-06-23 14:37:26
+ * @FilePath: /my-score/honoback/auth.ts
+ */
+import { createMiddleware } from 'hono/factory'
+import { verify } from 'hono/jwt'
+
+const AUTH_SECRET = 'it-is-a-secret'
+
+export const authMiddleware = createMiddleware(async (c, next) => {
+  const authHeader = c.req.header('Authorization')
+
+  if (!authHeader || !authHeader.startsWith('Basic ')) {
+    return c.json({ message: 'Unauthorized' }, 401)
+  }
+
+  const token = authHeader.substring(6).trim()
+
+  try {
+    const payload = await verify(token, AUTH_SECRET)
+    c.set('jwtPayload', payload)
+  } catch (error) {
+    return c.json({ message: 'Invalid token' }, 401)
+  }
+
+  await next()
+}) 
\ No newline at end of file
diff --git a/deploy.sh b/deploy.sh
index b24e1c1..ba508a4 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -2,7 +2,7 @@
 ###
  # @Date: 2025-06-13 16:11:38
  # @LastEditors: 陈子健
- # @LastEditTime: 2025-06-18 16:46:20
+ # @LastEditTime: 2025-06-23 16:56:58
  # @FilePath: /my-score/honoback/deploy.sh
 ### 
 
@@ -25,12 +25,6 @@ rsync -avz --exclude 'db/media.db' \
     --exclude '.git' \
     ./ $USER@$SERVER:$REMOTE_DIR/
 
-# 在服务器上安装依赖并启动服务
+# 在服务器上安装依赖并重启服务
 echo "Installing and starting systemd service..."
-ssh $USER@$SERVER "cd $REMOTE_DIR && \
-    deno cache main.ts && \
-    sudo cp my-score.service /etc/systemd/system/ && \
-    sudo systemctl daemon-reload && \
-    sudo systemctl enable my-score.service && \
-    sudo systemctl restart my-score.service && \
-    sudo systemctl status my-score.service" 
\ No newline at end of file
+ssh $USER@$SERVER "systemctl restart my-score"
\ No newline at end of file
diff --git a/main.ts b/main.ts
index 5568eae..14e84bc 100644
--- a/main.ts
+++ b/main.ts
@@ -9,6 +9,7 @@ import { jwt } from 'hono/jwt'
 import type { JwtVariables } from 'hono/jwt'
 import user from './routes/user.ts'
 import media from './routes/media.ts'
+import auth from './routes/auth.ts'
 
 const app = new Hono<{ Variables: JwtVariables }>()
 
@@ -20,6 +21,9 @@ app.use('*', async (c, next) => {
   await next()
 })
 
+// 注册认证路由
+app.route('/api/auth', auth)
+
 // 注册用户路由
 app.route('/api/user', user)
 
diff --git a/routes/auth.ts b/routes/auth.ts
new file mode 100644
index 0000000..112b12a
--- /dev/null
+++ b/routes/auth.ts
@@ -0,0 +1,20 @@
+import { Hono } from 'hono'
+import type { JwtVariables } from 'hono/jwt'
+import { authMiddleware } from '../auth.ts'
+
+const auth = new Hono<{ Variables: JwtVariables }>()
+
+auth.use('/*', authMiddleware)
+
+auth.get('/verify', (c) => {
+  const payload = c.get('jwtPayload')
+  return c.json({
+    code: 0,
+    data: {
+      username: payload.username,
+    },
+    message: '认证成功',
+  })
+})
+
+export default auth 
\ No newline at end of file
diff --git a/routes/media.ts b/routes/media.ts
index e258ad3..ef7ccbd 100644
--- a/routes/media.ts
+++ b/routes/media.ts
@@ -1,9 +1,12 @@
 import { Hono } from 'hono'
 import { db } from '../db/index.ts'
 import type { JwtVariables } from 'hono/jwt'
+import { authMiddleware } from '../auth.ts'
 
 const media = new Hono<{ Variables: JwtVariables }>()
 
+media.use('/*', authMiddleware)
+
 // 获取所有媒体记录
 media.get('/list', (c) => {
   try {