Upload routes.py

app/web/routes.py

@@ -121,8 +121,14 @@ async def login_for_access_token(
     try:
         access_token = create_access_token(data=access_token_data)
         login_type = "管理员" if is_admin_login else "普通用户"
-        logger.info(f"Web UI {login_type}登录成功，用户 Key: {password_value[:8]}... 已签发 JWT。")
-        response = JSONResponse(content={"access_token": access_token, "token_type": "bearer"})
+        logger.info(f"Web UI {login_type}登录成功，用户 Key: {password_value[:8]}... 已签发 JWT，将通过头部返回。")
+        
+        # 返回 204 No Content，并将 token 放在头部
+        response = Response(status_code=status.HTTP_204_NO_CONTENT)
+        response.headers["X-Access-Token"] = access_token
+        response.headers["X-Token-Type"] = "bearer"
+        # 需要允许前端JS访问这些自定义头部
+        response.headers["Access-Control-Expose-Headers"] = "X-Access-Token, X-Token-Type"
         return response
     except ValueError as e:
         logger.error(f"无法创建 JWT: {e}")