fix: persist runtime proxy token

2026-06-06 17:11:51 +08:00
parent b3eb86d5ea
commit f026582008
17 changed files with 276 additions and 27 deletions
@@ -97,7 +97,8 @@ fn bearer(headers: &HeaderMap) -> Option<&str> {
 fn resolve_caller(headers: &HeaderMap, state: &AppState) -> AppResult<WorkflowCaller> {
    let token = bearer(headers)
        .ok_or_else(|| AppError::Unauthorized("Missing Authorization header".into()))?;
-    if token == state.config.auth.auth_token || token == state.config.auth.proxy_token {
+    let proxy_token = state.runtime_proxy_token();
+    if token == state.config.auth.auth_token || token == proxy_token {
        return Ok(WorkflowCaller::Admin);
    }
    let claims = validate_jwt(&state.config.auth.jwt_secret, token)