fix: strip Bearer prefix from Authorization header in auth middleware

2026-07-03 00:09:25 +08:00
parent f0fff0b113
commit fcd4ad3d1e
1 changed files with 1 additions and 1 deletions
@@ -49,7 +49,7 @@ export class BaseAuthorityMiddleware
      let statusCode = 200;
      let { url } = ctx;
      url = url.replace(this.prefix, '').split('?')[0];
-      const token = ctx.get('Authorization');
+      const token = ctx.get('Authorization')?.replace('Bearer ', '');
      const adminUrl = '/admin/';
      // 路由地址为 admin前缀的 需要权限校验
      if (_.startsWith(url, adminUrl)) {