首个可运行的版本

backend/app/routers/auth.py

@@ -0,0 +1,56 @@
+"""认证路由"""
+
+from fastapi import APIRouter, Depends, HTTPException, status
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from app.dependencies import get_db
+from app.schemas.auth import RegisterRequest, LoginRequest, TokenResponse, RefreshRequest
+from app.services.auth_service import AuthService
+from app.utils.security import decode_refresh_token
+
+router = APIRouter()
+
+
+@router.post("/register", response_model=TokenResponse)
+async def register(req: RegisterRequest, db: AsyncSession = Depends(get_db)):
+    """用户注册"""
+    service = AuthService(db)
+    try:
+        result = await service.register(req.username, req.email, req.password)
+        return TokenResponse(
+            access_token=result["access_token"],
+            refresh_token=result["refresh_token"],
+            user=result["user"],
+        )
+    except ValueError as e:
+        raise HTTPException(status_code=400, detail=str(e))
+
+
+@router.post("/login", response_model=TokenResponse)
+async def login(req: LoginRequest, db: AsyncSession = Depends(get_db)):
+    """用户登录"""
+    service = AuthService(db)
+    try:
+        result = await service.login(req.username, req.password)
+        return TokenResponse(
+            access_token=result["access_token"],
+            refresh_token=result["refresh_token"],
+            user=result["user"],
+        )
+    except ValueError as e:
+        raise HTTPException(status_code=401, detail=str(e))
+
+
+@router.post("/refresh", response_model=dict)
+async def refresh_token(req: RefreshRequest, db: AsyncSession = Depends(get_db)):
+    """刷新 Token"""
+    payload = decode_refresh_token(req.refresh_token)
+    if not payload:
+        raise HTTPException(status_code=401, detail="无效的 Refresh Token")
+
+    service = AuthService(db)
+    try:
+        result = await service.refresh_token(payload.get("sub"))
+        return result
+    except ValueError as e:
+        raise HTTPException(status_code=401, detail=str(e))