Update api/index.js

api/index.js

@@ -63,15 +63,19 @@ const withAuth = (request) => {
 const logger = (res, req) => {
 	console.log(req.method, res.status, req.url, Date.now() - req.start, 'ms');
 };
+
 const router = AutoRouter({
-	before: [preflight, withAuth],
-	missing: () => error(404, '404 not found.'),
-	finally: [corsify, logger],
+  before: [preflight], // 只保留 CORS preflight 检查
+  missing: () => error(404, '404 not found.'),
+  finally: [corsify, logger],
 });
-// Router路径
+
+// 不需要验证的路由
 router.get('/', () => json({ message: 'API 服务运行中~' }));
 router.get('/ping', () => json({ message: 'pong' }));
-router.get(config.API_PREFIX + '/v1/models', () =>
+
+// 需要验证的路由单独添加 withAuth 中间件
+router.get(config.API_PREFIX + '/v1/models', withAuth, () =>
     json({
             object: 'list',
             data: [
@@ -91,7 +95,8 @@ router.get(config.API_PREFIX + '/v1/models', () =>
             ],
     })
 );
-router.post(config.API_PREFIX + '/v1/chat/completions', (req) => handleCompletion(req));
+
+router.post(config.API_PREFIX + '/v1/chat/completions', withAuth, (req) => handleCompletion(req));
 
 async function GrpcToPieces(models, message, rules, stream, temperature, top_p) {
         // 在非GPT类型的模型中，temperature和top_p是无效的