给所有请求都加上jwt，隐藏生成jwt的secret（放到.env中）,隐藏app-secret（放在pm2运行配置文件中，后续直接读取环境配置即可）

app/routes/contract-template.detail.$id.tsx

@@ -4,6 +4,7 @@ import { getContractTemplate } from '~/api/contract-template/templates';
 import type { ContractTemplate } from '~/api/contract-template/templates';
 import styles from '~/styles/pages/contract-template.css?url';
 import filePreviewStyles from '~/styles/components/file-preview-isolation.css?url';
+import { getUserSession } from '~/api/login/auth.server';
 
 // 导入FilePreview组件
 import { FilePreview } from '~/components/reviews';
@@ -30,20 +31,24 @@ export const handle = {
   }
 };
 
-export async function loader({ params }: LoaderFunctionArgs) {
+export async function loader({ params, request }: LoaderFunctionArgs) {
   const templateId = params.id!;
   
+  // 获取 JWT
+  const { frontendJWT } = await getUserSession(request);
+  const jwt = frontendJWT || undefined;
+  
   try {
-    const response = await getContractTemplate(templateId);
-    
-    if (response.error) {
-      throw new Response(response.error, { status: response.status || 404 });
-    }
-    
-    if (!response.data) {
-      throw new Response('模板未找到', { status: 404 });
-    }
-    
+    const response = await getContractTemplate(templateId, jwt);
+      
+      if (response.error) {
+        throw new Response(response.error, { status: response.status || 404 });
+      }
+      
+      if (!response.data) {
+        throw new Response('模板未找到', { status: 404 });
+      }
+      
     // 添加调试信息
     // console.log('模板详情数据:', response.data);
     // console.log('分类信息:', response.data.category);