Hoàn thành chức năng collaborative

backend/app/routers/auth.py

@@ -1,4 +1,4 @@
-from fastapi import APIRouter, Depends, HTTPException, Response, status
+from fastapi import APIRouter, Cookie, Depends, HTTPException, Response, status
 from sqlalchemy.orm import Session
 import os
 
@@ -84,3 +84,16 @@ def logout(response: Response):
 @router.get("/me", response_model=UserOut)
 def me(current_user: User = Depends(get_current_user)):
     return current_user
+
+
+# ── GET /auth/token  (return raw JWT for WebSocket auth) ─────────────────────
+
+@router.get("/token")
+def get_token(access_token: str | None = Cookie(default=None)):
+    """
+    Returns the current JWT so the frontend can pass it as a WebSocket
+    query param (browsers can't send cookies on WS upgrade in all cases).
+    """
+    if not access_token:
+        raise HTTPException(status_code=401, detail="Not authenticated.")
+    return {"access_token": access_token}