X-Financial/server/src/app/api/v1/endpoints/auth.py

from __future__ import annotations

from typing import Annotated

from fastapi import APIRouter, Depends, HTTPException, status
from sqlalchemy.orm import Session

from app.api.deps import get_db
from app.schemas.auth import LoginRequest, LoginResponse
from app.schemas.common import ErrorResponse
from app.services.auth import AuthService

router = APIRouter(prefix="/auth")
DbSession = Annotated[Session, Depends(get_db)]


@router.post(
    "/login",
    response_model=LoginResponse,
    summary="用户登录",
    description="支持管理员账号和员工账号登录，成功后返回前端会话所需的用户信息。",
    responses={
        status.HTTP_401_UNAUTHORIZED: {
            "model": ErrorResponse,
            "description": "账号或密码错误。",
        }
    },
)
def login(payload: LoginRequest, db: DbSession) -> LoginResponse:
    try:
        return AuthService(db).login(payload)
    except ValueError as exc:
        raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail=str(exc)) from exc