第 1 阶段：用户与认证, mock登陆ok

backend/internal/router/router.go

@@ -4,12 +4,14 @@ import (
 	"hfb_sys/backend/internal/config"
 	"hfb_sys/backend/internal/handler"
 	"hfb_sys/backend/internal/middleware"
+	"hfb_sys/backend/internal/modules/auth"
+	"hfb_sys/backend/internal/modules/user"
 
 	"github.com/gin-gonic/gin"
 	"go.uber.org/zap"
 )
 
-func New(cfg config.Config, logger *zap.Logger) *gin.Engine {
+func New(cfg config.Config, deps Dependencies, logger *zap.Logger) *gin.Engine {
 	if cfg.AppEnv == "production" {
 		gin.SetMode(gin.ReleaseMode)
 	}
@@ -21,9 +23,29 @@ func New(cfg config.Config, logger *zap.Logger) *gin.Engine {
 	health := handler.NewHealthHandler()
 	engine.GET("/health", health.Check)
 
+	jwtManager := auth.NewJWTManager(cfg.JWTSecret)
+	var userRepo *auth.UserRepository
+	if deps.DB != nil {
+		userRepo = auth.NewUserRepository(deps.DB)
+	}
+	authService := auth.NewService(userRepo, deps.Redis, jwtManager, logger)
+	authHandler := auth.NewHandler(authService)
+	userHandler := user.NewHandler(userRepo)
+	requireAuth := middleware.Auth(jwtManager)
+
 	api := engine.Group("/api")
 	{
 		api.GET("/health", health.Check)
+
+		authRoutes := api.Group("/auth")
+		{
+			authRoutes.POST("/sms/send", authHandler.SendSMS)
+			authRoutes.POST("/sms/login", authHandler.Login)
+			authRoutes.POST("/refresh", authHandler.Refresh)
+			authRoutes.POST("/logout", authHandler.Logout)
+		}
+
+		api.GET("/me", requireAuth, userHandler.Me)
 	}
 
 	return engine