76 lines
2.8 KiB
JavaScript
76 lines
2.8 KiB
JavaScript
import { Router } from 'express';
|
|
import bcrypt from 'bcryptjs';
|
|
import db from '../db.js';
|
|
import { auth, sign } from '../middleware.js';
|
|
|
|
const router = Router();
|
|
|
|
// 注册
|
|
router.post('/register', (req, res) => {
|
|
const { username, password, nickname, phone, building } = req.body;
|
|
if (!username || !password || !nickname) {
|
|
return res.status(400).json({ message: '请填写完整信息' });
|
|
}
|
|
if (username.length < 3 || password.length < 6) {
|
|
return res.status(400).json({ message: '用户名至少3位，密码至少6位' });
|
|
}
|
|
const exists = db.prepare('SELECT id FROM users WHERE username = ?').get(username);
|
|
if (exists) {
|
|
return res.status(400).json({ message: '用户名已存在' });
|
|
}
|
|
const hash = bcrypt.hashSync(password, 10);
|
|
const info = db
|
|
.prepare('INSERT INTO users (username, password, nickname, phone, building) VALUES (?, ?, ?, ?, ?)')
|
|
.run(username, hash, nickname, phone || '', building || '');
|
|
const user = db.prepare('SELECT * FROM users WHERE id = ?').get(info.lastInsertRowid);
|
|
res.json({ token: sign(user), user: safeUser(user) });
|
|
});
|
|
|
|
// 登录
|
|
router.post('/login', (req, res) => {
|
|
const { username, password } = req.body;
|
|
const user = db.prepare('SELECT * FROM users WHERE username = ?').get(username);
|
|
if (!user || !bcrypt.compareSync(password, user.password)) {
|
|
return res.status(401).json({ message: '用户名或密码错误' });
|
|
}
|
|
res.json({ token: sign(user), user: safeUser(user) });
|
|
});
|
|
|
|
// 获取当前用户
|
|
router.get('/me', auth, (req, res) => {
|
|
const user = db.prepare('SELECT * FROM users WHERE id = ?').get(req.user.id);
|
|
if (!user) return res.status(404).json({ message: '用户不存在' });
|
|
res.json(safeUser(user));
|
|
});
|
|
|
|
// 更新个人资料
|
|
router.put('/me', auth, (req, res) => {
|
|
const { nickname, phone, building, bio } = req.body;
|
|
db.prepare('UPDATE users SET nickname = ?, phone = ?, building = ?, bio = ? WHERE id = ?')
|
|
.run(nickname, phone || '', building || '', bio || '', req.user.id);
|
|
const user = db.prepare('SELECT * FROM users WHERE id = ?').get(req.user.id);
|
|
res.json(safeUser(user));
|
|
});
|
|
|
|
// 修改密码
|
|
router.put('/password', auth, (req, res) => {
|
|
const { oldPassword, newPassword } = req.body;
|
|
const user = db.prepare('SELECT * FROM users WHERE id = ?').get(req.user.id);
|
|
if (!bcrypt.compareSync(oldPassword, user.password)) {
|
|
return res.status(400).json({ message: '原密码错误' });
|
|
}
|
|
if (newPassword.length < 6) {
|
|
return res.status(400).json({ message: '新密码至少6位' });
|
|
}
|
|
const hash = bcrypt.hashSync(newPassword, 10);
|
|
db.prepare('UPDATE users SET password = ? WHERE id = ?').run(hash, req.user.id);
|
|
res.json({ message: '修改成功' });
|
|
});
|
|
|
|
function safeUser(u) {
|
|
const { password, ...rest } = u;
|
|
return rest;
|
|
}
|
|
|
|
export default router;
|