```

feat(auth): 添加用户权限获取接口并完善JWT令牌角色信息

- 在JWT令牌中添加用户角色信息
- 新增get_my_permissions接口用于获取当前用户权限码列表
- 重构认证回调逻辑，增加错误日志记录
- 更新用户信息获取接口使用Authorization头验证
```

backend/app/api/v1/auth.py

@@ -1,12 +1,12 @@
 """认证 API"""
 import base64
 import json
-from fastapi import APIRouter, Depends, HTTPException
+from fastapi import APIRouter, Depends, HTTPException, Header
 from pydantic import BaseModel
 from sqlalchemy.orm import Session
 from app.core.database import get_db
 from app.core.casdoor import casdoor_sdk
-from app.core.security import create_access_token
+from app.core.security import create_access_token, verify_token
 from app.core.config import settings
 from app.models.user import User
 from app.schemas.auth import Token, UserInfo
@@ -62,19 +62,48 @@ def callback(body: CallbackRequest, db: Session = Depends(get_db)):
         user.last_login = datetime.utcnow()
         db.commit()
 
-        jwt_token = create_access_token({"sub": str(user.id), "username": user.username})
+        jwt_token = create_access_token({
+            "sub": str(user.id),
+            "username": user.username,
+            "role": user.role or "user",
+        })
         return {"access_token": jwt_token}
     except HTTPException:
         raise
     except Exception as e:
+        import traceback
+        import logging
+        logging.getLogger(__name__).error("callback error: %s\n%s", e, traceback.format_exc())
         raise HTTPException(status_code=500, detail=str(e))
 
 
-@router.get("/profile", response_model=UserInfo)
-def get_profile(token: str, db: Session = Depends(get_db)):
-    """获取当前用户信息"""
-    from app.core.security import verify_token
+@router.get("/permissions")
+def get_my_permissions(
+    authorization: str = Header(..., alias="Authorization"),
+    db: Session = Depends(get_db)
+):
+    """获取当前用户的权限码列表"""
+    from app.middleware.permission_middleware import get_role_permissions
+    if not authorization.startswith("Bearer "):
+        raise HTTPException(status_code=401, detail="未授权")
+    token = authorization[7:]
+    payload = verify_token(token)
+    if not payload:
+        raise HTTPException(status_code=401, detail="无效的令牌")
+    role = payload.get('role', 'user')
+    perms = get_role_permissions(role, db)
+    return {"role": role, "permissions": perms}
 
+
+@router.get("/profile")
+def get_profile(
+    authorization: str = Header(..., alias="Authorization"),
+    db: Session = Depends(get_db)
+):
+    """获取当前用户信息"""
+    if not authorization.startswith("Bearer "):
+        raise HTTPException(status_code=401, detail="未授权")
+    token = authorization[7:]
     payload = verify_token(token)
     if not payload:
         raise HTTPException(status_code=401, detail="无效的令牌")