POST
/api/auth/login
用户登录,获取访问令牌
请求参数:
usernameOrEmail
(string, required) - 用户名或邮箱
password
(string, required) - 密码
POST /api/auth/login
Content-Type: application/json
{
"usernameOrEmail": "admin",
"password": "123456"
}
# 响应
{
"success": true,
"message": "登录成功",
"data": {
"token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
"user": {
"id": 1,
"username": "admin",
"email": "admin@example.com",
"roles": ["admin"]
},
"expires_at": "2024-01-16T12:00:00Z"
}
}
POST
/api/auth/register
用户注册
请求参数:
username
(string, required) - 用户名
email
(string, required) - 邮箱
password
(string, required) - 密码
real_name
(string, optional) - 真实姓名
nickname
(string, optional) - 昵称
phone
(string, optional) - 手机号
referral_code
(string, optional) - 推荐码
POST /api/auth/register
Content-Type: application/json
{
"username": "newuser",
"email": "newuser@example.com",
"password": "password123",
"real_name": "新用户",
"nickname": "小新",
"phone": "13800138000",
"referral_code": "USR12345"
}
POST
/api/auth/logout
用户登出
请求头:
Authorization
(string, required) - Bearer {token}
X-Session-ID
(string, required) - 会话ID
POST
/api/auth/refresh
刷新访问令牌
请求参数:
token
(string, required) - 当前token