feat(auth): enterprise authentication and user management

backend/hermes/app/api/auth.py

@@ -1,10 +1,14 @@
-from fastapi import APIRouter, Depends, HTTPException, Response
+from fastapi import APIRouter, Depends, HTTPException
 from sqlalchemy.orm import Session
 
-from app.core.security import create_access_token, verify_password
+from app.core.security import (
+    create_access_token,
+    get_access_token_expire_seconds,
+    verify_password,
+)
 from app.db.database import get_db
 from app.models.user import User
-from app.schemas.user import LoginRequest
+from app.schemas.user import LoginRequest, LoginResponse
 
 router = APIRouter(
     prefix="/auth",
@@ -12,32 +16,30 @@ router = APIRouter(
 )
 
 
-@router.post("/login")
+@router.post("/login", response_model=LoginResponse)
 def login(
     login: LoginRequest,
-    response: Response,
     db: Session = Depends(get_db),
 ):
     user = db.query(User).filter(User.username == login.username).first()
 
     if not user:
-        raise HTTPException(status_code=401, detail="Ungültige Anmeldedaten")
+        raise HTTPException(
+            status_code=401,
+            detail="Ungültige Anmeldedaten",
+        )
 
     if not verify_password(login.password, user.password_hash):
-        raise HTTPException(status_code=401, detail="Ungültige Anmeldedaten")
+        raise HTTPException(
+            status_code=401,
+            detail="Ungültige Anmeldedaten",
+        )
 
     token = create_access_token(user.username)
 
-    response.set_cookie(
-        key="access_token",
-        value=token,
-        httponly=True,
-        secure=False,
-        samesite="lax",
-        max_age=3600,
-    )
-
     return {
-        "message": "Login erfolgreich",
-        "user": user.username,
-    }
+        "access_token": token,
+        "token_type": "bearer",
+        "expires_in": get_access_token_expire_seconds(),
+        "user": user,
+    }