From 948149cd449dd79e6dc100f053d953247f08b22d Mon Sep 17 00:00:00 2001
From: dxc <duxingchen@iris-rs.cn>
Date: Wed, 25 Feb 2026 10:01:03 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E6=94=B9=E7=99=BB=E5=BD=95=E9=AA=8C?=
 =?UTF-8?q?=E8=AF=81=EF=BC=8C=E4=BF=AE=E6=94=B9=E4=B8=BA7=E5=A4=A9?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 inventory-backend/app/services/auth_service.py | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/inventory-backend/app/services/auth_service.py b/inventory-backend/app/services/auth_service.py
index 4dc8c31..33be58e 100644
--- a/inventory-backend/app/services/auth_service.py
+++ b/inventory-backend/app/services/auth_service.py
@@ -3,7 +3,7 @@ from app.models.system import SysUser
 from app.extensions import db
 from flask_jwt_extended import create_access_token
 from app.utils.constants import UserRole
-
+from datetime import timedelta  # [修改点1] 引入 timedelta 用于设置过期时间
 
 class AuthService:
     # 硬编码的超级管理员凭证
@@ -50,9 +50,11 @@ class AuthService:
             user_info = user.to_dict()
 
         # 3. 生成 Token
+        # [修改点2] 增加 expires_delta 参数，设置为 7 天（可根据需要修改为 days=1 或 days=30）
         access_token = create_access_token(
             identity=user_id,
-            additional_claims={'role': user_role, 'username': username}
+            additional_claims={'role': user_role, 'username': username},
+            expires_delta=timedelta(days=7)
         )
 
         return {