前台登陆逻辑修改，请帮我实现“单设备登录（同端互斥）”功能

video-gen-api/app/api/v1/auth.py

@@ -58,7 +58,9 @@ def _validate_captcha_if_needed(captcha_token: str | None) -> None:
 
 def _token_response(user: User, remember_me: bool = False) -> dict:
     user.credits = round(user.credits, 2)
-    token = create_access_token(user.id, remember_me)
+    # 递增 token_version — 单设备登录（全局互斥），使旧 token 全部失效
+    user.token_version = (user.token_version or 0) + 1
+    token = create_access_token(user.id, remember_me, user.token_version)
     return {
         "access_token": token,
         "token_type": "bearer",
@@ -237,7 +239,9 @@ async def register(req: RegisterRequest, db: AsyncSession = Depends(get_db)):
     await _assign_default_frontend_menus(db, user)
 
     user.credits = round(user.credits, 2)
-    token = create_access_token(user.id)
+    # 递增 token_version — 单设备登录
+    user.token_version = (user.token_version or 0) + 1
+    token = create_access_token(user.id, False, user.token_version)
     return {
         "access_token": token,
         "token_type": "bearer",
@@ -247,7 +251,13 @@ async def register(req: RegisterRequest, db: AsyncSession = Depends(get_db)):
 
 
 @router.post("/logout")
-async def logout(current_user: User = Depends(get_current_user_allow_password_pending)):
+async def logout(
+    current_user: User = Depends(get_current_user_allow_password_pending),
+    db: AsyncSession = Depends(get_db),
+):
+    # 递增 token_version — 使当前 token 失效，实现主动退出后不可再用
+    current_user.token_version = (current_user.token_version or 0) + 1
+    await db.flush()
     return {"message": "ok"}