feat: 完成用户鉴权相关api

server/api/user/refreshToken.ts

@@ -0,0 +1,20 @@
+import { defineEventHandler, readBody, createError } from 'h3';
+import jwt from 'jsonwebtoken';
+
+export default defineEventHandler(async (event) => {
+    const body = await readBody(event);
+    const { token } = body;
+
+    const jwtSecret = getKey();
+
+    try {
+        // 验证旧的 Token
+        const decoded = jwt.verify(token, jwtSecret) as { userId: number };
+        // 生成新的 Token
+        const newToken = jwt.sign({ userId: decoded.userId }, jwtSecret, { expiresIn: '168h' });
+
+        return { token: newToken, expiresIn: Date.now() + 168 * 60 * 60 * 1000 };
+    } catch (err) {
+        throw createError({ statusCode: 401, statusMessage: 'Token invalid or expired', data: { err, token } });
+    }
+});