新增本地认证与管理接口服务

server/local-auth/auth.cjs

@@ -0,0 +1,33 @@
+const { verifyToken } = require("./security.cjs");
+
+function publicUser(user) {
+    if (!user) return null;
+    const { password, current_token, ...safeUser } = user;
+    return safeUser;
+}
+
+function findUserByToken(db, token) {
+    const payload = verifyToken(token);
+    if (!payload?.userId) return null;
+    return db.users.find(user => Number(user.id) === Number(payload.userId)) || null;
+}
+
+function getBearerToken(req) {
+    const header = req.headers.authorization || "";
+    const match = String(header).match(/^Bearer\s+(.+)$/i);
+    return match ? match[1] : "";
+}
+
+function requireAdmin(db, req) {
+    const user = findUserByToken(db, getBearerToken(req));
+    if (!user || user.status !== "active") return null;
+    if (user.role !== "admin" && Number(user.is_super_admin || 0) !== 1) return null;
+    return user;
+}
+
+module.exports = {
+    publicUser,
+    findUserByToken,
+    getBearerToken,
+    requireAdmin,
+};