xiaoxia/xiaoxia-saas
1
0
Fork 0
Code Issues 8 Pull Requests 5 Actions 1 Packages Projects Releases 7 Wiki Activity

feat(auth): Refresh Token 机制实现 #63

Merged
xiaoxia merged 1 commits from feature/refresh-token-mechanism into develop 2026-06-27 22:58:03 +08:00
Conversation 0 Commits 1 Files Changed 2
+35 -2
xiaoxia commented 2026-06-27 22:57:56 +08:00
Owner
Copy Link
Copy Source

变更内容

  • 新增 /auth/refresh 端点：客户端可通过 refresh_token 获取新的 access_token
  • Login 响应增加 refresh_token：登录时同时返回 access_token 和 refresh_token
  • Token 有效期调整：access_token 15 分钟，refresh_token 7 天

技术细节

  • 复用已有的 RefreshTokenUseCase（Redis session store 存储 refresh_token）
  • LoginResponse Pydantic 模型新增 refresh_token: str 字段
  • JWTConfig 默认值从 30min/30days 改为 15min/7days

文件变更

  • apps/api/app/api/routes/auth.py — 新增 RefreshRequest 模型、/auth/refresh 端点、LoginResponse 增加 refresh_token
  • packages/application/auth/jwt_service.py — 更新默认过期时间
## 变更内容 - **新增 `/auth/refresh` 端点**：客户端可通过 refresh_token 获取新的 access_token - **Login 响应增加 refresh_token**：登录时同时返回 access_token 和 refresh_token - **Token 有效期调整**：access_token 15 分钟，refresh_token 7 天 ## 技术细节 - 复用已有的 `RefreshTokenUseCase`（Redis session store 存储 refresh_token） - `LoginResponse` Pydantic 模型新增 `refresh_token: str` 字段 - `JWTConfig` 默认值从 30min/30days 改为 15min/7days ## 文件变更 - `apps/api/app/api/routes/auth.py` — 新增 RefreshRequest 模型、/auth/refresh 端点、LoginResponse 增加 refresh_token - `packages/application/auth/jwt_service.py` — 更新默认过期时间
xiaoxia added 1 commit 2026-06-27 22:57:56 +08:00
feat(auth): implement refresh token mechanism
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
Details
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
Details
Deploy / Deploy Staging (push) Has been cancelled
Details
Deploy / Build Production Runtime Images (push) Has been cancelled
Details
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
Details
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
Details
Deploy / Deploy Production (push) Has been cancelled
Details
Deploy / Production Browser E2E (push) Has been cancelled
Details
e90076f794 
- Add /auth/refresh endpoint for token renewal
- Login response now includes refresh_token
- Update JWT defaults: access_token 15min, refresh_token 7days
- Reuse existing RefreshTokenUseCase with Redis session store
xiaoxia merged commit 0f5b777043 into develop 2026-06-27 22:58:03 +08:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
P0
阻塞性，必须立即处理
 P1
高优先级
 P2
中优先级
 P3
低优先级/后考虑
 architecture
架构设计
 backend
后端相关
 blocked
阻塞中
 bug
Bug修复
 ci-bug
CI本身的bug
 ci-optimization
CI优化类任务
 ci-pipeline
CI流水线/workflow相关
 cleanup
代码清理
 devops
运维/部署/CI
 documentation
文档相关
 feature
新功能
 frontend
前端相关
 question
需要讨论确认
 ready
PR CI通过，可合并
 refactor
代码重构
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
auto-approve-bot xiaoxia
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: xiaoxia/xiaoxia-saas#63
Delete Branch "feature/refresh-token-mechanism"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?