完善后台分页与令牌刷新

backend/internal/modules/adminauth/handler.go

@@ -65,10 +65,30 @@ func (h *Handler) Logout(c *gin.Context) {
 	response.OK(c, gin.H{"logged_out": true})
 }
 
+type AdminRefreshRequest struct {
+	RefreshToken string `json:"refresh_token" binding:"required"`
+}
+
+func (h *Handler) Refresh(c *gin.Context) {
+	var req AdminRefreshRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		response.BadRequest(c, "refresh_token 不能为空")
+		return
+	}
+	tokens, err := h.service.Refresh(req.RefreshToken)
+	if err != nil {
+		writeAdminAuthError(c, err)
+		return
+	}
+	response.OK(c, tokens)
+}
+
 func writeAdminAuthError(c *gin.Context, err error) {
 	switch {
 	case errors.Is(err, ErrDependencyUnavailable):
 		response.ServiceUnavailable(c, "数据库未连接")
+	case errors.Is(err, ErrInvalidRefreshToken):
+		response.Unauthorized(c, "刷新令牌无效或已过期")
 	case errors.Is(err, ErrInvalidCredential):
 		response.BadRequest(c, "用户名或密码错误")
 	case errors.Is(err, ErrCaptchaInvalid):

backend/internal/modules/adminauth/service.go

@@ -1,20 +1,41 @@
 package adminauth
 
-import "errors"
+import (
+	"errors"
+
+	"hfb_sys/backend/internal/modules/auth"
+)
 
 var (
 	ErrDependencyUnavailable = errors.New("dependency unavailable")
 	ErrInvalidCredential     = errors.New("invalid credential")
 	ErrCaptchaInvalid        = errors.New("captcha invalid")
 	ErrAdminDisabled         = errors.New("admin disabled")
+	ErrInvalidRefreshToken   = errors.New("invalid refresh token")
 )
 
 type Service struct {
 	repo *Repository
+	jwt  *auth.JWTManager
 }
 
-func NewService(repo *Repository) *Service {
-	return &Service{repo: repo}
+func NewService(repo *Repository, jwt *auth.JWTManager) *Service {
+	return &Service{repo: repo, jwt: jwt}
+}
+
+func (s *Service) Refresh(refreshToken string) (*auth.TokenPair, error) {
+	if s.jwt == nil {
+		return nil, ErrDependencyUnavailable
+	}
+	claims, err := s.jwt.ParseSubject(refreshToken, "refresh", "admin")
+	if err != nil {
+		return nil, ErrInvalidRefreshToken
+	}
+	pair, err := s.jwt.GenerateSubjectPair(claims.UserID, claims.Phone, "admin")
+	if err != nil {
+		return nil, err
+	}
+	return &pair, nil
 }
 
 func (s *Service) Captcha() (*CaptchaDTO, error) {