""" 认证相关路由 """ from fastapi import APIRouter, Depends, HTTPException, status from fastapi.security import OAuth2PasswordRequestForm from sqlalchemy.orm import Session from ..core.database import get_db from ..core.security import create_access_token from ..schemas.user import UserCreate, UserResponse, UserLogin from ..services.user_service import UserService from ..utils.deps import get_current_user router = APIRouter(prefix="/api/auth", tags=["auth"]) @router.post("/register", response_model=UserResponse) def register(user_data: UserCreate, db: Session = Depends(get_db)): """ 用户注册 """ try: user = UserService.create_user(db, user_data) return user except ValueError as e: raise HTTPException(status_code=400, detail=str(e)) @router.post("/login") def login(form_data: OAuth2PasswordRequestForm = Depends(), db: Session = Depends(get_db)): """ 用户登录 """ user = UserService.authenticate_user(db, form_data.username, form_data.password) if not user: raise HTTPException( status_code=status.HTTP_401_UNAUTHORIZED, detail="Incorrect username or password", headers={"WWW-Authenticate": "Bearer"}, ) access_token = create_access_token(subject=user.id) return { "access_token": access_token, "token_type": "bearer", "user": { "id": user.id, "username": user.username, "email": user.email, "role": user.role.value, "balance": user.balance } } @router.get("/me", response_model=UserResponse) def get_me(current_user: UserService = Depends(get_current_user)): """ 获取当前用户信息 """ return current_user