feat: AI套图分层方案 + Gemini集成 - 4种图案类型处理 + 正片叠底 + 宽高比 + 模型选择

Co-authored-by: Cursor <cursoragent@cursor.com>

Server/app/api/v1/auth.py

@@ -55,13 +55,14 @@ async def reset_password(body: ResetPasswordRequest, db: Session = Depends(get_d
     return auth_service.reset_password(db, body.token, body.new_password, body.email)
 
 @router.post("/logout")
-async def logout(body: UserLogout, db: Session = Depends(get_db)):
-    # 登出接口：将指定设备会话置为非活跃
-    return auth_service.logout(db, body.username, body.device_id)
+async def logout(body: UserLogout, db: Session = Depends(get_db), current_username: str = Depends(get_current_user)):
+    # 登出接口：只允许登出自己的会话
+    return auth_service.logout(db, current_username, body.device_id)
 
-@router.get("/online-time/{username}")
-async def get_online_time(username: str, db: Session = Depends(get_db)):
-    # 在线时长统计：累计历史会话的时长（秒），以及当前活跃会话的实时时长（秒）
+@router.get("/online-time")
+async def get_online_time(db: Session = Depends(get_db), current_username: str = Depends(get_current_user)):
+    # 在线时长统计：只查自己的数据
+    username = current_username
     user = db.query(User).filter(User.username == username).first()
     if not user:
         return {"username": username, "total_seconds": 0, "active_seconds": 0}
@@ -104,8 +105,8 @@ async def get_online_time(username: str, db: Session = Depends(get_db)):
     return {"username": username, "total_seconds": total_seconds, "active_seconds": active_seconds}
     
 @router.post("/heartbeat")
-async def heartbeat(body: UserHeartbeat, db: Session = Depends(get_db)):
-    # 心跳接口：更新会话的最近在线时间
-    return auth_service.heartbeat(db, body.username, body.device_id)
+async def heartbeat(body: UserHeartbeat, db: Session = Depends(get_db), current_username: str = Depends(get_current_user)):
+    # 心跳接口：只更新自己的会话
+    return auth_service.heartbeat(db, current_username, body.device_id)