Upload 2 files

云端_定时版本检测引擎.py

@@ -57,7 +57,7 @@ async def fetch_latest_github_hash(repo_url, token):
         api_url = f"https://api.github.com/repos/{owner}/{repo}/commits"
         headers = {"Accept": "application/vnd.github.v3+json", "User-Agent": "ComfyUI-Hub"}
         if token:
-            headers["Authorization"] = f"token {token}"
+            headers["Authorization"] = f"Bearer {token}"
         
         # 🛡️ 稳定性优化：超时 + 重试
         async with httpx.AsyncClient(follow_redirects=True, timeout=httpx.Timeout(15.0, connect=5.0)) as client:

安全认证.py

@@ -302,13 +302,12 @@ async def require_auth(authorization: str = Header(None, alias="Authorization"))
     
     token = parts[1]
     
-    # 验证 Token
-    is_valid, payload, error_msg = verify_token(token)
+    # 验证 Token（使用 fallback 兼容旧版 mock_token）
+    is_valid, account, error_msg = verify_token_with_fallback(token)
     
     if not is_valid:
         raise HTTPException(status_code=401, detail=error_msg)
     
-    account = payload.get("sub")
     if not account:
         raise HTTPException(status_code=401, detail="Token 中缺少用户信息")