From 4acf10ef79499b5e25bf73e96c2ed6cddb4eb35e Mon Sep 17 00:00:00 2001
From: kkfluous <kkfluous@kdemacbook-air.local>
Date: Wed, 15 Apr 2026 16:53:01 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E4=BF=AE=E5=A4=8D=E6=89=93=E5=8C=85=20l?=
 =?UTF-8?q?int=20=E6=8A=A5=E9=94=99=EF=BC=8C=E7=89=88=E6=9C=AC=E5=8F=B7=20?=
 =?UTF-8?q?1.1.1?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

middleware.ts 临时跳过认证的早 return 导致后续代码 unreachable，
TS 在不可达分支里不做类型 narrowing 触发 TS18048；
改为 BYPASS_AUTH 常量分支保留完整鉴权逻辑便于恢复。

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 package.json                  | 2 +-
 src/server/auth/middleware.ts | 9 ++++++++-
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/package.json b/package.json
index 5e4e171..a1a0fb7 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "ln-bi",
   "private": true,
-  "version": "1.1.0",
+  "version": "1.1.1",
   "type": "module",
   "scripts": {
     "dev": "concurrently -n server,client -c blue,green \"npm run dev:server\" \"npm run dev:client\"",
diff --git a/src/server/auth/middleware.ts b/src/server/auth/middleware.ts
index b0db96b..eba6c5b 100644
--- a/src/server/auth/middleware.ts
+++ b/src/server/auth/middleware.ts
@@ -4,16 +4,23 @@ import type { JwtPayload, AuthUser } from './types.js';
 
 const JWT_SECRET = process.env.JWT_SECRET || 'ln-bi-default-secret';
 
+// 临时：跳过所有认证（保留完整逻辑便于快速恢复）
+const BYPASS_AUTH = true;
+
 export async function authMiddleware(c: Context, next: Next) {
   const path = c.req.path;
 
+  if (BYPASS_AUTH) {
+    return next();
+  }
+
   // 跳过不需要认证的路径
   if (path === '/api/health' || path.startsWith('/api/auth/')) {
     return next();
   }
 
   const authHeader = c.req.header('Authorization');
-  if (!authHeader?.startsWith('Bearer ')) {
+  if (!authHeader || !authHeader.startsWith('Bearer ')) {
     return c.json({ error: 'Unauthorized' }, 401);
   }