Function decode_token

backend/auth.py:58–60

解码并校验 JWT（过期/篡改会抛出异常）。

(token)

def decode_token(token):
    """解码并校验 JWT（过期/篡改会抛出异常）。"""
    return jwt.decode(token, jwt_secret(), algorithms=[JWT_ALGORITHM])

# 匿名可访问的精确路径与前缀白名单
PUBLIC_PATHS = {"/", "/api/health", "/favicon.ico", "/api/auth/login", "/api/auth/refresh", "/api/openapi.json", "/docs", "/api/livez", "/api/readyz"}