chore: initial import

internal/handler/auth_handler.go

@@ -0,0 +1,59 @@
+package handler
+
+import (
+	"net/http"
+
+	"github.com/company/ai-ops/internal/service"
+	"github.com/company/ai-ops/pkg/errors"
+	"github.com/company/ai-ops/pkg/response"
+)
+
+// AuthHandler 是认证 HTTP 处理器
+type AuthHandler struct {
+	authSvc *service.AuthService
+}
+
+func NewAuthHandler(authSvc *service.AuthService) *AuthHandler {
+	return &AuthHandler{authSvc: authSvc}
+}
+
+func (h *AuthHandler) RegisterRoutes(mux *http.ServeMux) {
+	mux.HandleFunc("POST /api/v1/ai-ops/login", h.Login)
+}
+
+func (h *AuthHandler) Login(w http.ResponseWriter, r *http.Request) {
+	var req struct {
+		Username string `json:"username"`
+		Password string `json:"password"`
+	}
+	if err := decodeJSON(r, &req); err != nil {
+		response.Error(w, errors.ErrBadRequest.WithDetail(map[string]any{"error": err.Error()}))
+		return
+	}
+
+	// TODO: 实现真实的用户验证（当前为简化实现）
+	if req.Username == "" || req.Password == "" {
+		response.Error(w, errors.ErrBadRequest.WithDetail(map[string]any{"error": "username and password required"}))
+		return
+	}
+
+	// 默认角色为 viewer
+	role := "viewer"
+	if req.Username == "admin" {
+		role = "admin"
+	} else if req.Username == "ops" {
+		role = "operator"
+	}
+
+	token, err := h.authSvc.IssueToken(req.Username, role)
+	if err != nil {
+		response.Error(w, errors.Wrap(err, errors.ErrInternal))
+		return
+	}
+
+	response.Success(w, map[string]any{
+		"token":      token,
+		"expires_in": 28800,
+		"role":       role,
+	})
+}