用户登录功能

backend/app.py

@@ -6,16 +6,21 @@ import os
 
 def create_app():
     app = Flask(__name__)
-    
+
     # 配置
-    app.config['SECRET_KEY'] = 'your-secret-key-here'
+    app.config['SECRET_KEY'] = 'your-secret-key-here-change-in-production'
     app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///worklist.db'
     app.config['SQLALCHEMY_TRACK_MODIFICATIONS'] = False
-    
+
+    # Session配置
+    app.config['SESSION_COOKIE_SAMESITE'] = 'Lax'
+    app.config['SESSION_COOKIE_HTTPONLY'] = True
+    app.config['PERMANENT_SESSION_LIFETIME'] = 86400  # 24小时
+
     # 初始化扩展
     db.init_app(app)
-    CORS(app)  # 允许跨域请求
-    
+    CORS(app, supports_credentials=True)  # 允许跨域请求并支持凭证
+
     # 注册蓝图
     app.register_blueprint(api, url_prefix='/api')