from flask import Flask, request, jsonify

from functools import wraps

app = Flask(__name__)

# 模擬用戶數(shù)據(jù)庫(kù)

users = {

"alice": {"password": "123456", "role": "developer"},

"bob": {"password": "654321", "role": "admin"}

}

def token_required(f):

@wraps(f)

def decorated(*args, **kwargs):

token = request.headers.get('Authorization')

if not token:

return jsonify({"message": "Token is missing!"}), 401

try:

data = jwt.decode(token, app.config['SECRET_KEY'], algorithms=["HS256"])

current_user = users[data['username']]

except Exception as e:

return jsonify({"message": "Invalid token!", "error": str(e)}), 401

return f(current_user, *args, **kwargs)

return decorated

@app.route('/download', methods=['GET'])

@token_required

def download(current_user):

if current_user['role'] == 'developer':

return jsonify({"message": "Download allowed.", "file": "soft_copyright_certificate.pdf"})

else:

return jsonify({"message": "Access denied."}), 403

if __name__ == '__main__':

app.run(debug=True)

科研項(xiàng)目管理系統(tǒng)

]]>