feat: 完善登录等接口鉴权

apps/api/test/modules/user/user.service.integration.spec.ts

@@ -229,7 +229,7 @@ describe('UserService (集成测试)', () => {
                     password: 'password123',
                     email: 'findall3@example.com',
                     nickname: '查询测试用户3',
-                    role: 'admin',
+                    // 注意：注册时不允许传入 role，所有注册用户的 role 固定为 'user'
                 },
             ];
 
@@ -288,7 +288,7 @@ describe('UserService (集成测试)', () => {
                 nickname: '完整信息用户',
                 avatarUrl: 'https://example.com/avatar.jpg',
                 phone: '13800138000',
-                role: 'admin',
+                // 注意：注册时不允许传入 role，所有注册用户的 role 固定为 'user'
             };
 
             await service.create(createUserDto);
@@ -307,7 +307,7 @@ describe('UserService (集成测试)', () => {
             expect(foundUser?.nickname).toBe(createUserDto.nickname);
             expect(foundUser?.avatarUrl).toBe(createUserDto.avatarUrl);
             expect(foundUser?.phone).toBe(createUserDto.phone);
-            expect(foundUser?.role).toBe(createUserDto.role);
+            expect(foundUser?.role).toBe('user'); // 注册用户的 role 固定为 'user'
             expect(foundUser?.status).toBe('active');
             expect(foundUser?.createdAt).toBeDefined();
             expect(foundUser?.updatedAt).toBeDefined();