feat: 开发采集、采集箱和商品编辑功能

server/api/auth.py

@@ -0,0 +1,23 @@
+"""鉴权路由。"""
+from __future__ import annotations
+
+import secrets
+
+from fastapi import APIRouter, HTTPException
+
+from config import get_settings
+from core.security import create_access_token
+from schemas.auth import LoginRequest, LoginResponse
+
+router = APIRouter(prefix="/api/auth", tags=["auth"])
+
+
+@router.post("/login", response_model=LoginResponse)
+async def login(body: LoginRequest) -> LoginResponse:
+    settings = get_settings()
+    if not settings.app_token:
+        raise HTTPException(status_code=500, detail="服务端未配置 APP_TOKEN")
+    if not secrets.compare_digest(body.token, settings.app_token):
+        raise HTTPException(status_code=401, detail="Token 不正确")
+    token, expires_at = create_access_token("app")
+    return LoginResponse(access_token=token, expires_at=expires_at)