async function handleRequest(request) {
  // 远程鉴权 API 地址
  const checkAuthUrl = 'https://www.example.com/';
  // 发起远程鉴权
  const checkAuthRes = await fetch(checkAuthUrl);

  // 鉴权通过，正常访问资源
  if (checkAuthRes.status === 200) {
    return fetch(request, {
      headers: request.headers,
    });
  }
  
  // 鉴权不通过，禁止访问资源
  return new Response(null, {
    status: 403
  });
}

addEventListener('fetch', e => {
  e.respondWith(handleRequest(e.request));
});