kplam
dce9e31bde
- 新增 JWT 认证模块，支持登录/注册/用户管理 - 新增文件上传接口，支持 .txt/.md/.html/.pdf/.docx 等格式解析入库 - 新增检索结果 AI 总结功能 - 新增文本去重缓存机制 - 新增全局认证夹具简化测试 - 新增配置项与环境变量支持 - 完善文档与测试覆盖
63 lines
2.0 KiB
Python
63 lines
2.0 KiB
Python
"""认证 API：POST /auth/login、POST /auth/register、GET /auth/me"""
|
||
|
||
from typing import Any
|
||
|
||
import structlog
|
||
from fastapi import APIRouter, Depends
|
||
|
||
from app.api.response import ApiError, ok
|
||
from app.config import settings
|
||
from app.core.auth import (
|
||
ERR_REGISTER_DISABLED,
|
||
UserStore,
|
||
create_access_token,
|
||
get_current_user,
|
||
get_user_store,
|
||
)
|
||
from app.models.auth import (
|
||
AuthUser,
|
||
LoginRequest,
|
||
RegisterRequest,
|
||
TokenResponse,
|
||
)
|
||
|
||
logger = structlog.get_logger()
|
||
|
||
router = APIRouter(prefix="/api/v1", tags=["auth"])
|
||
|
||
|
||
def _build_token_response(user, store: UserStore) -> dict[str, Any]:
|
||
"""签发 token 并构造统一响应 data"""
|
||
token, expires_in = create_access_token(user.username, user.role)
|
||
auth_user = AuthUser(username=user.username, role=user.role, created_at=user.created_at)
|
||
resp = TokenResponse(access_token=token, expires_in=expires_in, user=auth_user)
|
||
return resp.model_dump(mode="json")
|
||
|
||
|
||
@router.post("/auth/login")
|
||
async def login(req: LoginRequest) -> dict[str, Any]:
|
||
"""用户名密码登录，返回 JWT access_token"""
|
||
store = get_user_store()
|
||
user = await store.authenticate(req.username, req.password)
|
||
logger.info("用户登录成功", username=user.username)
|
||
return ok(_build_token_response(user, store))
|
||
|
||
|
||
@router.post("/auth/register")
|
||
async def register(req: RegisterRequest) -> dict[str, Any]:
|
||
"""注册新用户（role=user），注册后自动签发 token
|
||
|
||
受 settings.auth_register_enabled 控制，关闭时返回 ERR_REGISTER_DISABLED。
|
||
"""
|
||
if not settings.auth_register_enabled:
|
||
raise ApiError(ERR_REGISTER_DISABLED, "注册已关闭")
|
||
store = get_user_store()
|
||
user = await store.create(req.username, req.password, role="user")
|
||
return ok(_build_token_response(user, store))
|
||
|
||
|
||
@router.get("/auth/me")
|
||
async def me(user: AuthUser = Depends(get_current_user)) -> dict[str, Any]:
|
||
"""返回当前登录用户信息"""
|
||
return ok(user.model_dump(mode="json"))
|