feat:增加权限控制

api/blog.py

@@ -3,6 +3,7 @@ from typing import List
 from fastapi import APIRouter, Depends, Query, Request
 from sqlalchemy.orm import Session
 
+from config.auth import verify_token
 from schemas.blog import BlogResponse, BlogQuery, BlogCategoryResponse, BlogStatsResponse, \
     BlogLatestResponse, BlogCommentCreate, BlogCommentResponse, BlogVisitResponse, BlogCreate, BlogUpdate
 from schemas.pagination import PageResult
@@ -35,17 +36,17 @@ def query_blog_by_id(blog_id: int, db: Session = Depends(get_db)):
 
 
 @router.post("", summary="新增博客内容", response_model=bool)
-def add_blog(blog: BlogCreate, db: Session = Depends(get_db)):
+def add_blog(blog: BlogCreate, db: Session = Depends(get_db), _ = Depends(verify_token)):
     return blog_service.add_blog(db, blog)
 
 
 @router.put("/{blog_id}", summary="更新博客内容", response_model=bool)
-def update_blog(blog_id: int, blog: BlogUpdate, db: Session = Depends(get_db)):
+def update_blog(blog_id: int, blog: BlogUpdate, db: Session = Depends(get_db), _ = Depends(verify_token)):
     return blog_service.update_blog(db, blog_id, blog)
 
 
 @router.delete("/{blog_id}", summary="删除博客内容", response_model=bool)
-def delete_blog(blog_id: int, db: Session = Depends(get_db)):
+def delete_blog(blog_id: int, db: Session = Depends(get_db), _ = Depends(verify_token)):
     return blog_service.delete_blog(db, blog_id)