feat: 双Token认证(Access 2h/Refresh 7d) + 通知系统(转交/驳回自动推送)

backend/app/api/v1/endpoints/auth.py

@@ -1,20 +1,32 @@
-"""认证 API — 对接 MOM sys_user"""
+"""认证 API — 对接 MOM sys_user + 双 Token 刷新"""
 from fastapi import APIRouter, Depends
-from app.schemas.user import LoginRequest, LoginResponse, UserResponse
-from app.services.auth_service import login, get_current_user
+from app.schemas.user import (
+    LoginRequest,
+    LoginResponse,
+    RefreshRequest,
+    RefreshResponse,
+    UserResponse,
+)
+from app.services.auth_service import login, refresh_access_token, get_current_user
 
 router = APIRouter(prefix="/auth", tags=["认证"])
 
 
 @router.post("/login", response_model=LoginResponse)
 def login_endpoint(data: LoginRequest):
-    """登录 — 验证 MOM sys_user 表，返回 JWT"""
+    """登录 — 验证 MOM sys_user 表，返回 Access + Refresh 双 Token"""
     return login(data.username, data.password)
 
 
+@router.post("/refresh", response_model=RefreshResponse)
+def refresh_endpoint(data: RefreshRequest):
+    """刷新 Access Token — 使用 Refresh Token 换取新的 Access Token"""
+    return refresh_access_token(data.refresh_token)
+
+
 @router.get("/me", response_model=UserResponse)
 def get_me(current_user: dict = Depends(get_current_user)):
-    """获取当前用户信息（从 JWT 解析）"""
+    """获取当前用户信息（从 Access Token 解析）"""
     return UserResponse(
         id=current_user["sub"],
         username=current_user.get("username", ""),