update

backend/app/modules/auth/router.py

@@ -16,13 +16,25 @@ class LoginBody(BaseModel):
     password: str
 
 
+class LogoutBody(BaseModel):
+    session_id: str | None = None
+
+
 @router.post("/login")
 def login(body: LoginBody) -> dict:
-    user = get_platform_store().login(body.username, body.password)
+    store = get_platform_store()
+    user = store.login(body.username, body.password)
     if not user:
         raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail="用户名或密码错误")
     token = create_access_token(user["id"])
-    return {"code": 0, "message": "ok", "data": {"token": token, "user": user}}
+    session_id = store.create_session(user)
+    return {"code": 0, "message": "ok", "data": {"token": token, "user": user, "session_id": session_id}}
+
+
+@router.post("/logout")
+def logout(body: LogoutBody) -> dict:
+    get_platform_store().close_session(body.session_id)
+    return {"code": 0, "message": "ok", "data": None}
 
 
 @router.get("/me")