diff --git a/backend/services/contribution-service/src/shared/guards/jwt-auth.guard.ts b/backend/services/contribution-service/src/shared/guards/jwt-auth.guard.ts index 2892f3d4..b3ea4231 100644 --- a/backend/services/contribution-service/src/shared/guards/jwt-auth.guard.ts +++ b/backend/services/contribution-service/src/shared/guards/jwt-auth.guard.ts @@ -13,9 +13,9 @@ export const IS_PUBLIC_KEY = 'isPublic'; export const Public = () => SetMetadata(IS_PUBLIC_KEY, true); export interface JwtPayload { - sub: string; - accountSequence: string; - type: 'access' | 'refresh'; + sub: string; // accountSequence + phone?: string; + source?: string; iat: number; exp: number; } @@ -49,14 +49,13 @@ export class JwtAuthGuard implements CanActivate { const secret = this.configService.get('JWT_SECRET', 'default-secret'); const payload = jwt.verify(token, secret) as JwtPayload; - if (payload.type !== 'access') { - throw new UnauthorizedException('Invalid token type'); - } - // 将用户信息附加到请求对象 + // payload.sub 是 accountSequence (由 auth-service 签发) request.user = { userId: payload.sub, - accountSequence: payload.accountSequence, + accountSequence: payload.sub, + phone: payload.phone, + source: payload.source, }; return true;