first commit

2026-03-06 17:57:44 +08:00
commit 6685bdb9a8
41 changed files with 3891 additions and 0 deletions
@@ -0,0 +1,134 @@
+from fastapi import APIRouter, Depends, HTTPException, status, Request
+from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from ...core.database import get_session
+from ...core.jwt_cache import get_jwt_cache, TokenData
+from ...core.security import verify_password
+from ...service.user import UserService
+from ...service.auth import get_auth_service
+from ...model.user import UserCreate, UserRead, UserLogin
+from ..deps import get_current_user
+
+
+router = APIRouter(tags=["authentication"])
+
+security = HTTPBearer()
+
+
+@router.post("/register", response_model=UserRead)
+async def register(
+    user_data: UserCreate,
+    session: AsyncSession = Depends(get_session),
+):
+    print(user_data.password)
+
+    existing = await UserService.get_user_by_email(user_data.email, session)
+    if existing:
+        raise HTTPException(status_code=400, detail="邮箱已被注册")
+
+    user = await UserService.create_user(
+        session=session,
+        email=user_data.email,
+        password=user_data.password,
+        username=user_data.username,
+        full_name=user_data.full_name,
+    )
+    return user
+
+
+@router.post("/login")
+async def login(
+    user_data: UserLogin,
+    request: Request,
+    session: AsyncSession = Depends(get_session),
+):
+    user = await UserService.get_user_by_email(user_data.email, session)
+    if not user:
+        raise HTTPException(status_code=400, detail="邮箱或密码错误")
+    if not verify_password(user_data.password, user.hashed_password):
+        raise HTTPException(status_code=400, detail="邮箱或密码错误")
+    if not user.is_active:
+        raise HTTPException(status_code=400, detail="用户被禁用")
+
+    cache = get_jwt_cache()
+    user_data_dict = {
+        "sub": str(user.id),
+        "email": user.email,
+        "username": user.username,
+    }
+    token = cache.create_token(
+        user_id=str(user.id),
+        user_data=user_data_dict,
+        token_type="access",
+        device_id=None,
+        user_agent=request.headers.get("user-agent") if request else None,
+        ip_address=request.client.host if request else None,  # type: ignore
+    )
+
+    return {"access_token": token, "token_type": "bearer"}
+
+
+@router.post("/refresh", response_model=dict, summary="刷新访问令牌")
+async def refresh_token(
+    request: Request,
+    credentials: HTTPAuthorizationCredentials = Depends(security),
+    session: AsyncSession = Depends(get_session),
+):
+    auth_service = get_auth_service()
+
+    refresh_token = credentials.credentials
+    new_access_token = await auth_service.refresh_access_token(
+        refresh_token, session, request
+    )
+    if not new_access_token:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="无效的刷新令牌",
+            headers={"WWW-Authenticate": "Bearer"},
+        )
+    return {"access_token": new_access_token, "token_type": "bearer"}
+
+
+@router.post("/logout")
+async def logout(
+    credentials: HTTPAuthorizationCredentials = Depends(security),
+):
+    auth_service = get_auth_service()
+    token = credentials.credentials
+    await auth_service.logout(token)
+    return {"message": "登出成功"}
+
+
+@router.post("/logout-all", summary="等出所有设备")
+async def logout_all(current_user: TokenData = Depends(get_current_user)):
+    auth_service = get_auth_service()
+    await auth_service.logout_all(current_user.user_id)
+
+    return {"message": "所有设备已登出"}
+
+
+@router.get("/sessions", summary="获取用户会话")
+async def get_sessions(current_user: TokenData = Depends(get_current_user)):
+    """获取用户的所有活跃会话"""
+    auth_service = get_auth_service()
+    sessions = await auth_service.get_user_sessions(current_user.user_id)
+
+    return {
+        "user_id": current_user.user_id,
+        "sessions": sessions,
+        "count": len(sessions),
+    }
+
+
+@router.get("/me", response_model=UserRead, summary="获取当前用户信息")
+async def get_current_user_info(
+    session: AsyncSession = Depends(get_session),
+    current_user: TokenData = Depends(get_current_user),
+):
+    """获取当前登录用户的信息"""
+    user = await UserService.get_user_by_id(int(current_user.user_id), session)
+    if not user:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="用户不存在")
+
+    return user