Function logViewerAuth

src/index.ts:46–65

(req: express.Request, res: express.Response, next: express.NextFunction)

// ★ 日志查看器鉴权中间件：配置了 authTokens 时需要验证
const logViewerAuth = (req: express.Request, res: express.Response, next: express.NextFunction) => {
    const tokens = getConfig().authTokens;
    if (!tokens || tokens.length === 0) return next(); // 未配置 token 则放行

    // 支持多种传入方式: query ?token=xxx, Authorization header, x-api-key header
    const tokenFromQuery = req.query.token as string | undefined;
    const authHeader = req.headers['authorization'] || req.headers['x-api-key'];
    const tokenFromHeader = authHeader ? String(authHeader).replace(/^Bearer\s+/i, '').trim() : undefined;
    const token = tokenFromQuery || tokenFromHeader;

    if (!token || !tokens.includes(token)) {
        // HTML 页面请求 → 返回登录页; API 请求 → 返回 JSON 错误
        if (req.path === '/logs') {
            return serveLogViewerLogin(req, res);
        }
        res.status(401).json({ error: { message: 'Unauthorized. Provide token via ?token=xxx or Authorization header.', type: 'auth_error' } });
        return;
    }
    next();
};

// ★ 日志查看器路由（带鉴权）
app.get('/logs', logViewerAuth, serveLogViewer);