增强后端 TypeScript 严格类型检查

apps/backend/src/routes/admin/session.ts

@@ -123,5 +123,13 @@ export function extractBearerToken(req: Request): string {
     })
   }
 
-  return matched[1]
+  const token = matched[1]?.trim()
+  if (!token) {
+    throw createHttpError('未登录或登录已失效', {
+      statusCode: 401,
+      errorCode: 'admin_auth_required',
+    })
+  }
+
+  return token
 }

apps/backend/src/routes/open-91.ts

@@ -16,6 +16,14 @@ const open91RateLimit = createRateLimitMiddleware({
   },
 })
 
+function resolveErrorStatusCode(error: unknown): number {
+  if (!error || typeof error !== 'object' || !('statusCode' in error)) {
+    return 500
+  }
+
+  return Number(error.statusCode || 500)
+}
+
 router.post('/orders/create', open91RateLimit, async (req, res) => {
   const requestId = createRequestId('91')
   const startedAt = Date.now()
@@ -38,7 +46,7 @@ router.post('/orders/create', open91RateLimit, async (req, res) => {
     res.status(200).json(result)
   } catch (error) {
     const message = error instanceof Error ? error.message : '系统错误'
-    const code = Number(error?.statusCode || 500) >= 500 ? 500 : 400
+    const code = resolveErrorStatusCode(error) >= 500 ? 500 : 400
     logIntegration('[open-91/create]', '91卡券异步下单处理失败', {
       requestId,
       durationMs: Date.now() - startedAt,
@@ -70,7 +78,7 @@ router.post('/orders/query', open91RateLimit, async (req, res) => {
     res.status(200).json(result)
   } catch (error) {
     const message = error instanceof Error ? error.message : '系统错误'
-    const code = Number(error?.statusCode || 500) >= 500 ? 500 : 400
+    const code = resolveErrorStatusCode(error) >= 500 ? 500 : 400
     logIntegration('[open-91/query]', '91卡券订单查询处理失败', {
       requestId,
       durationMs: Date.now() - startedAt,