update backend p20.1 p20.2

backend/app/Middleware/AuthMiddleware.php

@@ -77,6 +77,11 @@ class AuthMiddleware implements MiddlewareInterface
             ])->withStatus(500);
         }
 
+        // 统一存入 request attribute
+        $request = $request->withAttribute('auth_user', $user);
+        $request = $request->withAttribute('auth_type', 'jwt');
+        \Hyperf\Context\Context::set(ServerRequestInterface::class, $request);
+
         return $handler->handle($request);
     }
 
@@ -121,11 +126,9 @@ class AuthMiddleware implements MiddlewareInterface
         $api_key->last_used_at = \Carbon\Carbon::now();
         $api_key->save();
 
-        // 通过 JWT guard 登录用户，生成 token 并注入请求头，使后续代码可通过 auth->guard('jwt')->user() 获取用户
-        $token = $this->auth->guard('jwt')->login($user);
-        $request = $request->withHeader('Authorization', 'Bearer ' . $token);
-
-        // 将带 Authorization 头的新请求写回协程 Context，确保 JwtGuard 代理对象能读到
+        // 将用户存入 request attribute（不再生成临时 JWT）
+        $request = $request->withAttribute('auth_user', $user);
+        $request = $request->withAttribute('auth_type', 'api_key');
         \Hyperf\Context\Context::set(ServerRequestInterface::class, $request);
 
         return $handler->handle($request);