Function require_api_auth

src/web/auth.py:72–83

(request: Request)

def require_api_auth(request: Request) -> bool:
    if is_default_security_config_active():
        raise HTTPException(
            status_code=423,
            detail={
                "code": "password_change_required",
                "message": "首次启动请先访问 /setup-password 修改访问密码",
            },
        )
    if not is_request_authenticated(request):
        raise HTTPException(status_code=401, detail="未登录或登录已失效")
    return True


def is_websocket_authenticated(websocket: WebSocket) -> bool: