迁移后端认证与拆分 Spacetime 客户端

server-rs/crates/api-server/src/app.rs

@@ -73,6 +73,7 @@ use crate::{
     logout::logout,
     logout_all::logout_all,
     password_entry::password_entry,
+    password_management::{change_password, reset_password},
     phone_auth::{phone_login, send_phone_code},
     puzzle::{
         advance_puzzle_next_level, create_puzzle_agent_session, drag_puzzle_piece_or_group,
@@ -887,6 +888,14 @@ pub fn build_router(state: AppState) -> Router {
             )),
         )
         .route("/api/auth/entry", post(password_entry))
+        .route(
+            "/api/auth/password/change",
+            post(change_password).route_layer(middleware::from_fn_with_state(
+                state.clone(),
+                require_bearer_auth,
+            )),
+        )
+        .route("/api/auth/password/reset", post(reset_password))
         // 错误归一化层放在 tracing 里侧，让 tracing 记录到最终对外返回的状态与错误体形态。
         .layer(middleware::from_fn(normalize_error_response))
         // 响应头回写放在错误归一化外侧，确保最终写回的是归一化后的最终响应。