Function auth_login

backend/api.py:1516–1528

账号密码登录，签发 access/refresh JWT。

()

@app.route('/api/auth/login', methods=['POST'])
def auth_login():
    """账号密码登录，签发 access/refresh JWT。"""
    data = request.get_json(silent=True) or {}
    role = authenticate_user(data.get('username'), data.get('password'))
    if not role:
        return error_response("UNAUTHORIZED", "用户名或密码错误")
    sub = data.get('username')
    return jsonify({
        'token_type': 'Bearer',
        'access_token': create_access_token(sub, role),
        'refresh_token': create_refresh_token(sub, role),
        'role': role,
    })


@app.route('/api/auth/refresh', methods=['POST'])