From fcd4ad3d1ed04e937ee64d8ae0f2b7984cc0f0e0 Mon Sep 17 00:00:00 2001
From: Jony <jony@example.com>
Date: Fri, 3 Jul 2026 00:09:25 +0800
Subject: [PATCH] fix: strip Bearer prefix from Authorization header in auth
 middleware

---
 src/modules/base/middleware/authority.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/modules/base/middleware/authority.ts b/src/modules/base/middleware/authority.ts
index c2cea8a..78292c1 100644
--- a/src/modules/base/middleware/authority.ts
+++ b/src/modules/base/middleware/authority.ts
@@ -49,7 +49,7 @@ export class BaseAuthorityMiddleware
       let statusCode = 200;
       let { url } = ctx;
       url = url.replace(this.prefix, '').split('?')[0];
-      const token = ctx.get('Authorization');
+      const token = ctx.get('Authorization')?.replace('Bearer ', '');
       const adminUrl = '/admin/';
       // 路由地址为 admin前缀的 需要权限校验
       if (_.startsWith(url, adminUrl)) {