update backend p20.1 p20.2

2026-04-16 13:16:43 +08:00
parent a870793704
commit ff9951bb43
11 changed files with 440 additions and 21 deletions
@@ -31,8 +31,8 @@ class PermissionMiddleware implements MiddlewareInterface

    public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
    {
-        // 获取已认证用户（由 AuthMiddleware 预先认证）
-        $user = $this->auth->guard('jwt')->user();
+        // 获取已认证用户（优先从 attribute 获取，兼容 JWT guard）
+        $user = $request->getAttribute('auth_user') ?? $this->auth->guard('jwt')->user();
        if (!$user) {
            return $this->forbiddenResponse('用户认证异常');
        }