feat: Add authentication endpoints and JWT support

- Implemented JWT authentication with auto-generated secret if not provided.
- Added API token management functionality.
- Created authentication endpoints for login, token refresh, verification, and password change.
- Introduced API documentation endpoints for Swagger UI and OpenAPI spec.
- Enhanced CORS support for API and documentation endpoints.
- Updated OpenAPI specification to include new authentication and system endpoints.

repeater/web/auth/cherrypy_tool.py

@@ -0,0 +1,66 @@
+import logging
+import cherrypy
+
+logger = logging.getLogger("HTTPServer")
+
+
+def check_auth():
+    """
+    CherryPy tool to check authentication before processing request.
+    
+    Checks for either JWT in Authorization header or API token in X-API-Key header.
+    Sets cherrypy.request.user on success.
+    Returns 401 JSON response on failure.
+    """
+    # Skip auth check for OPTIONS requests (CORS preflight)
+    if cherrypy.request.method == "OPTIONS":
+        return
+    
+    # Skip auth check for /auth/login endpoint
+    if cherrypy.request.path_info == "/auth/login":
+        return
+    
+    # Get auth handlers from config
+    jwt_handler = cherrypy.config.get("jwt_handler")
+    token_manager = cherrypy.config.get("token_manager")
+    
+    if not jwt_handler or not token_manager:
+        logger.error("Auth handlers not initialized in cherrypy.config")
+        cherrypy.response.status = 500
+        return {"success": False, "error": "Authentication system not configured"}
+    
+    # Check for JWT token first
+    auth_header = cherrypy.request.headers.get("Authorization", "")
+    if auth_header.startswith("Bearer "):
+        token = auth_header[7:]  # Remove "Bearer " prefix
+        payload = jwt_handler.verify_jwt(token)
+        
+        if payload:
+            cherrypy.request.user = {
+                "username": payload.get("sub"),
+                "client_id": payload.get("client_id"),
+                "auth_type": "jwt"
+            }
+            return
+    
+    # Check for API token
+    api_key = cherrypy.request.headers.get("X-API-Key", "")
+    if api_key:
+        token_info = token_manager.verify_token(api_key)
+        
+        if token_info:
+            cherrypy.request.user = {
+                "token_id": token_info["id"],
+                "token_name": token_info["name"],
+                "auth_type": "api_token"
+            }
+            return
+    
+    # No valid authentication found
+    logger.warning(f"Unauthorized access attempt to {cherrypy.request.path_info}")
+    raise cherrypy.HTTPError(401, "Unauthorized - Valid JWT or API token required")
+
+
+# Register the tool
+cherrypy.tools.require_auth = cherrypy.Tool('before_handler', check_auth)
+logger.info("CherryPy require_auth tool registered")