feat(security): add resource token authentication using HttpOnly Cookie

app/schemas/token.py

@@ -4,11 +4,17 @@ from pydantic import BaseModel
 
 
 class Token(BaseModel):
+    # 令牌
     access_token: str
+    # 令牌类型
     token_type: str
+    # 超级用户
     super_user: bool
+    # 用户名
     user_name: str
+    # 头像
     avatar: Optional[str] = None
+    # 权限级别
     level: int = 1
 
 
@@ -19,3 +25,7 @@ class TokenPayload(BaseModel):
     username: Optional[str] = None
     # 超级用户
     super_user: Optional[bool] = None
+    # 权限级别
+    level: Optional[int] = None
+    # 令牌用途 authentication\resource
+    purpose: Optional[str] = None