Joey
24 lines
817 B
Python
24 lines
817 B
Python
"""鉴权路由。"""
|
|
from __future__ import annotations
|
|
|
|
import secrets
|
|
|
|
from fastapi import APIRouter, HTTPException
|
|
|
|
from config import get_settings
|
|
from core.security import create_access_token
|
|
from schemas.auth import LoginRequest, LoginResponse
|
|
|
|
router = APIRouter(prefix="/api/auth", tags=["auth"])
|
|
|
|
|
|
@router.post("/login", response_model=LoginResponse)
|
|
async def login(body: LoginRequest) -> LoginResponse:
|
|
settings = get_settings()
|
|
if not settings.app_token:
|
|
raise HTTPException(status_code=500, detail="服务端未配置 APP_TOKEN")
|
|
if not secrets.compare_digest(body.token, settings.app_token):
|
|
raise HTTPException(status_code=401, detail="Token 不正确")
|
|
token, expires_at = create_access_token("app")
|
|
return LoginResponse(access_token=token, expires_at=expires_at)
|