给所有请求都加上jwt，隐藏生成jwt的secret（放到.env中）,隐藏app-secret（放在pm2运行配置文件中，后续直接读取环境配置即可）

app/components/reviews/FilePreview.tsx

@@ -414,7 +414,7 @@ export function FilePreview({ fileContent, activeReviewPointResultId, targetPage
         }}
       >
         <Document
-          file={DOCUMENT_URL+real_path}
+          file={`/api/pdf-proxy?path=${encodeURIComponent(real_path)}`}
           onLoadSuccess={onDocumentLoadSuccess}
           onLoadError={(error) => {
             console.error("PDF加载错误:", error);

app/components/reviews/ReviewTabs.tsx

@@ -9,7 +9,7 @@ import { Modal } from '~/components/ui/Modal';
 import { UploadArea, type UploadAreaRef } from '~/components/ui/UploadArea';
 import { Button } from '~/components/ui/Button';
 import { toastService } from '~/components/ui/Toast';
-import { DOCUMENT_URL } from "~/api/axios-client";
+// import { DOCUMENT_URL } from "~/api/axios-client";
 import { uploadFileToBinary, uploadDocumentToServer } from '~/api/files/files-upload';
 
 interface ReviewTabsProps {
@@ -61,7 +61,8 @@ export function ReviewTabs({ activeTab, onTabChange, children, fileInfo, onConfi
   // 下载原文件
   const handleDownloadFile = async () => {
     try {
-      const downloadUrl = `${DOCUMENT_URL}${fileInfo.path}`;
+      // 使用 PDF 代理路由获取文件，自动添加 JWT 认证
+      const downloadUrl = `/api/pdf-proxy?path=${encodeURIComponent(fileInfo.path || '')}`;
 
       // 使用fetch获取文件内容
       const response = await fetch(downloadUrl);