feat: add web backend — Express REST API, WebSocket, full wiring in entry point

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/web/api/auth.ts

@@ -0,0 +1,104 @@
+import { Router } from "express";
+import type { MusicProvider } from "../../music/provider.js";
+import type { Logger } from "../../logger.js";
+
+export function createAuthRouter(
+  neteaseProvider: MusicProvider,
+  qqProvider: MusicProvider,
+  logger: Logger
+): Router {
+  const router = Router();
+
+  function getProvider(platform?: string): MusicProvider {
+    return platform === "qq" ? qqProvider : neteaseProvider;
+  }
+
+  router.get("/status", async (req, res) => {
+    try {
+      const platform = req.query.platform as string;
+      const provider = getProvider(platform);
+      const status = await provider.getAuthStatus();
+      res.json({ platform: provider.platform, ...status });
+    } catch (err) {
+      res.status(500).json({ error: (err as Error).message });
+    }
+  });
+
+  router.post("/qrcode", async (req, res) => {
+    try {
+      const { platform } = req.body;
+      const provider = getProvider(platform);
+      const qr = await provider.getQrCode();
+      res.json(qr);
+    } catch (err) {
+      logger.error({ err }, "QR code generation failed");
+      res.status(500).json({ error: (err as Error).message });
+    }
+  });
+
+  router.get("/qrcode/status", async (req, res) => {
+    try {
+      const { key, platform } = req.query;
+      if (!key) {
+        res.status(400).json({ error: "key is required" });
+        return;
+      }
+      const provider = getProvider(platform as string);
+      const status = await provider.checkQrCodeStatus(key as string);
+      res.json({ status });
+    } catch (err) {
+      res.status(500).json({ error: (err as Error).message });
+    }
+  });
+
+  router.post("/sms/send", async (req, res) => {
+    try {
+      const { phone } = req.body;
+      if (!phone) {
+        res.status(400).json({ error: "phone is required" });
+        return;
+      }
+      if (!neteaseProvider.sendSmsCode) {
+        res
+          .status(400)
+          .json({ error: "SMS login not supported for this platform" });
+        return;
+      }
+      const success = await neteaseProvider.sendSmsCode(phone);
+      res.json({ success });
+    } catch (err) {
+      res.status(500).json({ error: (err as Error).message });
+    }
+  });
+
+  router.post("/sms/verify", async (req, res) => {
+    try {
+      const { phone, code } = req.body;
+      if (!phone || !code) {
+        res.status(400).json({ error: "phone and code are required" });
+        return;
+      }
+      if (!neteaseProvider.loginWithSms) {
+        res.status(400).json({ error: "SMS login not supported" });
+        return;
+      }
+      const success = await neteaseProvider.loginWithSms(phone, code);
+      res.json({ success });
+    } catch (err) {
+      res.status(500).json({ error: (err as Error).message });
+    }
+  });
+
+  router.post("/cookie", (req, res) => {
+    const { platform, cookie } = req.body;
+    if (!cookie) {
+      res.status(400).json({ error: "cookie is required" });
+      return;
+    }
+    const provider = getProvider(platform);
+    provider.setCookie(cookie);
+    res.json({ success: true });
+  });
+
+  return router;
+}