type: 收敛测试 schemas 与协议层类型

web/backend/security.py

@@ -17,6 +17,8 @@ if not SECRET_KEY:
         stacklevel=2,
     )
     SECRET_KEY = secrets.token_urlsafe(32)
+assert SECRET_KEY is not None
+SECRET_KEY_TYPED: str = SECRET_KEY
 ALGORITHM = "HS256"
 ACCESS_TOKEN_EXPIRE_HOURS = int(os.getenv("ACCESS_TOKEN_EXPIRE_HOURS", "24"))
 
@@ -35,15 +37,17 @@ def verify_password(plain: str, hashed: str) -> bool:
         return False
 
 
-def create_access_token(data: dict, expires_hours: int = ACCESS_TOKEN_EXPIRE_HOURS) -> str:
+def create_access_token(
+    data: dict, expires_hours: int = ACCESS_TOKEN_EXPIRE_HOURS
+) -> str:
     to_encode = data.copy()
     expire = datetime.now(timezone.utc) + timedelta(hours=expires_hours)
     to_encode.update({"exp": expire})
-    return jwt.encode(to_encode, SECRET_KEY, algorithm=ALGORITHM)
+    return jwt.encode(to_encode, SECRET_KEY_TYPED, algorithm=ALGORITHM)
 
 
 def decode_access_token(token: str) -> Optional[dict]:
     try:
-        return jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
+        return jwt.decode(token, SECRET_KEY_TYPED, algorithms=[ALGORITHM])
     except JWTError:
         return None