执行 Ruff 安全自动修复

web/backend/deps.py

@@ -1,15 +1,15 @@
 """FastAPI 依赖注入"""
 
-from typing import Optional
-from fastapi import Depends, HTTPException, Request, status, WebSocket
-from fastapi.security import OAuth2PasswordBearer
-from sqlalchemy.orm import Session
-from jose import JWTError
 
-from .database import get_db, SessionLocal
-from .security import decode_access_token
+from fastapi import Depends, HTTPException, Request, WebSocket, status
+from fastapi.security import OAuth2PasswordBearer
+from jose import JWTError
+from sqlalchemy.orm import Session
+
+from .database import SessionLocal, get_db
 from .models import User
 from .permissions import get_user_permissions
+from .security import decode_access_token
 
 # auto_error=False: 允许 token 为空（后续从 cookie 读取）
 oauth2_scheme = OAuth2PasswordBearer(tokenUrl="/api/auth/login", auto_error=False)
@@ -17,7 +17,7 @@ oauth2_scheme = OAuth2PasswordBearer(tokenUrl="/api/auth/login", auto_error=Fals
 
 def get_current_user(
     request: Request,
-    token: Optional[str] = Depends(oauth2_scheme),
+    token: str | None = Depends(oauth2_scheme),
     db: Session = Depends(get_db),
 ) -> User:
     credentials_exc = HTTPException(
@@ -61,7 +61,7 @@ def require_permission(permission: str):
     return checker
 
 
-def authenticate_websocket(websocket: WebSocket) -> Optional[User]:
+def authenticate_websocket(websocket: WebSocket) -> User | None:
     """WebSocket 认证：从 cookie 或 query param token 中验证用户身份。
 
     Returns: