From fb58d91e50a9bb67370e8b4174de18af3447d1ce Mon Sep 17 00:00:00 2001
From: abearxiong <xiongxiao@xiongxiao.me>
Date: Fri, 6 Mar 2026 13:20:41 +0800
Subject: [PATCH] =?UTF-8?q?feat:=20=E4=BC=98=E5=8C=96token=E9=AA=8C?=
 =?UTF-8?q?=E8=AF=81=E9=80=BB=E8=BE=91=EF=BC=8C=E6=B7=BB=E5=8A=A0=E5=BC=82?=
 =?UTF-8?q?=E5=B8=B8=E5=A4=84=E7=90=86=E4=BB=A5=E5=A2=9E=E5=BC=BA=E7=A8=B3?=
 =?UTF-8?q?=E5=AE=9A=E6=80=A7?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/auth/models/user-secret.ts | 34 ++++++++++++++++++++--------------
 1 file changed, 20 insertions(+), 14 deletions(-)

diff --git a/src/auth/models/user-secret.ts b/src/auth/models/user-secret.ts
index e2fcd24..46880c2 100644
--- a/src/auth/models/user-secret.ts
+++ b/src/auth/models/user-secret.ts
@@ -56,22 +56,28 @@ export class UserSecret {
     if (oauth.getTokenType(token) === 'jwks') {
       // 先尝试作为jwt token验证，如果验证成功则直接返回用户信息
       console.log('[jwksManager] 验证token');
-      const verified = await jwksManager.verify(token);
-      if (verified) {
-        const sub = verified.sub;
-        const userId = sub.split(':')[1];
-        const user = await User.findByPk(userId);
-        if (!user) {
-          console.warn(`[jwksManager] 验证token成功，但用户不存在，userId: ${userId}`);
+      try {
+
+        const verified = await jwksManager.verify(token);
+        if (verified) {
+          const sub = verified.sub;
+          const userId = sub.split(':')[1];
+          const user = await User.findByPk(userId);
+          if (!user) {
+            console.warn(`[jwksManager] 验证token成功，但用户不存在，userId: ${userId}`);
+            return null;
+          }
+          const oauthUser = oauth.getOauthUser({
+            id: user.id,
+            username: user.username,
+            type: user.type,
+          });
+          return oauthUser;
+        } else {
           return null;
         }
-        const oauthUser = oauth.getOauthUser({
-          id: user.id,
-          username: user.username,
-          type: user.type,
-        });
-        return oauthUser;
-      } else {
+      } catch (e) {
+        console.error('[jwksManager] 验证token失败', e);
         return null;
       }
     }