dev 分支暂存

backend/gateway/internal/handler/auth_handler.go

@@ -0,0 +1,108 @@
+package handler
+
+import (
+	"encoding/json"
+	"net/http"
+	"time"
+
+	"github.com/gin-gonic/gin"
+
+	"github.com/yourname/cyrene-ai/gateway/internal/config"
+)
+
+// AuthHandler 认证处理器
+type AuthHandler struct {
+	cfg *config.Config
+}
+
+// NewAuthHandler 创建认证处理器
+func NewAuthHandler(cfg *config.Config) *AuthHandler {
+	return &AuthHandler{cfg: cfg}
+}
+
+// Register 用户注册
+func (h *AuthHandler) Register(c *gin.Context) {
+	var req struct {
+		Username string `json:"username" binding:"required,min=2,max=32"`
+		Password string `json:"password" binding:"required,min=6,max=64"`
+	}
+
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "请求参数无效: " + err.Error()})
+		return
+	}
+
+	// MVP阶段：使用username直接作为userID
+	// 后续需要接入用户服务进行真实注册
+	userID := "user_" + req.Username
+
+	// 生成JWT
+	token, err := h.cfg.GenerateToken(userID)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "生成令牌失败"})
+		return
+	}
+
+	c.JSON(http.StatusCreated, gin.H{
+		"user_id": userID,
+		"token":   token,
+		"expires": time.Now().Add(h.cfg.JWTExpiryHours).Unix(),
+	})
+}
+
+// Login 用户登录
+func (h *AuthHandler) Login(c *gin.Context) {
+	var req struct {
+		Username string `json:"username" binding:"required"`
+		Password string `json:"password" binding:"required"`
+	}
+
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "请求参数无效"})
+		return
+	}
+
+	// MVP阶段：简化的登录逻辑
+	// 后续需要验证密码哈希
+	userID := "user_" + req.Username
+
+	token, err := h.cfg.GenerateToken(userID)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "生成令牌失败"})
+		return
+	}
+
+	c.JSON(http.StatusOK, gin.H{
+		"user_id": userID,
+		"token":   token,
+		"expires": time.Now().Add(h.cfg.JWTExpiryHours).Unix(),
+	})
+}
+
+// RefreshToken 刷新令牌
+func (h *AuthHandler) RefreshToken(c *gin.Context) {
+	authHeader := c.GetHeader("Authorization")
+	if authHeader == "" || len(authHeader) < 8 {
+		c.JSON(http.StatusUnauthorized, gin.H{"error": "未提供认证令牌"})
+		return
+	}
+
+	tokenString := authHeader[7:] // 去掉 "Bearer "
+	userID, err := h.cfg.ValidateToken(tokenString)
+	if err != nil {
+		// 允许使用已过期但未超过刷新窗口的token
+		// MVP简化：直接重新签发
+		_ = json.Unmarshal([]byte("{}"), &struct{}{})
+	}
+
+	newToken, err := h.cfg.GenerateToken(userID)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "刷新令牌失败"})
+		return
+	}
+
+	c.JSON(http.StatusOK, gin.H{
+		"token":   newToken,
+		"expires": time.Now().Add(h.cfg.JWTExpiryHours).Unix(),
+	})
+}