试图通过第一次提到就踢用户

from flask import Flask, request, jsonify

app = Flask(__name__)

users = {
    'user1': {'password': 'pass1', 'role': 'admin'},
    'user2': {'password': 'pass2', 'role': 'user'}
}

@app.route('/login', methods=['POST'])
def login():
    data = request.get_json()
    username = data.get('username')
    password = data.get('password')
    
    if username in users and users[username]['password'] == password:
        return jsonify({'message': 'Login successful', 'role': users[username]['role']})
    else:
        return jsonify({'message': 'Invalid credentials'}), 401

@app.route('/protected', methods=['GET'])
def protected():
    auth_header = request.headers.get('Authorization')
    if auth_header and auth_header == 'Bearer admin':
        return jsonify({'message': 'Access granted'})
    else:
        return jsonify({'message': 'Access denied'}), 403

if __name__ == '__main__':
    app.run(debug=True)