feat: 双Token认证(Access 2h/Refresh 7d) + 通知系统(转交/驳回自动推送)

2026-08-07 11:44:04 +08:00
parent dc97a7385f
commit b71c5a2d07
16 changed files with 426 additions and 41 deletions
--- a/backend/app/core/config.py
+++ b/backend/app/core/config.py
@ -9,7 +9,8 @@ class Settings(BaseSettings):

    # ---- JWT ----
    SECRET_KEY: str = "change-me-in-production"
-    ACCESS_TOKEN_EXPIRE_MINUTES: int = 30
+    ACCESS_TOKEN_EXPIRE_MINUTES: int = 120      # Access Token: 2 小时
+    REFRESH_TOKEN_EXPIRE_DAYS: int = 7           # Refresh Token: 7 天

    # ---- 调试 ----
    DEBUG: bool = True