fix: apiToken 无法获取工具&api-token 页面不能刷新 #51

.dockerignore

@@ -5,3 +5,4 @@ public
 .dev
 *.py
 requirements.txt
+.DS_Store

.gitignore

@@ -123,3 +123,5 @@ act.secret
 .dev
 *.py
 requirements.txt
+
+.DS_Store

database/operations.go

@@ -1,7 +1,7 @@
 package database
 
 func HasApiToken(token string) bool {
-	sql := `SELECT value FROM nav_api_token WHERE value = ?`
+	sql := `SELECT value FROM nav_api_token WHERE value = ? and disabled = 0`
 	rows, err := DB.Query(sql, token)
 	if err != nil {
 		return false

middleware/auth.go

@@ -23,6 +23,8 @@ func JWTMiddleware() gin.HandlerFunc {
 		}
 
 		if database.HasApiToken(rawToken) {
+			c.Set("username", "apiToken")
+			c.Set("uid", 1)
 			c.Next()
 			return
 		}

serve.go

@@ -25,7 +25,7 @@ func Serve(urlPrefix string, fs ServeFileSystem) gin.HandlerFunc {
 			c.Abort()
 		} else {
 			path := c.Request.URL.Path
-			pathHasAPI := strings.Contains(path, "/api")
+			pathHasAPI := strings.Contains(path, "/api") && !strings.Contains(path, "/api-token")
 			// pathHasAdmin := strings.Contains(path, "/admin")
 			// pathHasLogin := strings.Contains(path, "/login")
 			if pathHasAPI {