124 lines
3.5 KiB
TypeScript
124 lines
3.5 KiB
TypeScript
import { Router, Request, Response } from 'express';
|
|
import { sendVerificationCode, verifyCode } from '../services/smsService';
|
|
import { createUser, findUserByPhone, updateLastLogin } from '../services/notionService';
|
|
import { generateToken } from '../middleware/authMiddleware';
|
|
import { rateLimiter } from '../middleware/rateLimiter';
|
|
|
|
const router = Router();
|
|
|
|
function maskPhone(phone: string): string {
|
|
if (phone.length >= 7) {
|
|
return phone.slice(0, 3) + '****' + phone.slice(-4);
|
|
}
|
|
return '***';
|
|
}
|
|
|
|
// Send verification code
|
|
router.post('/send-code', rateLimiter(5, 60000), async (req: Request, res: Response): Promise<void> => {
|
|
const { phone } = req.body;
|
|
if (!phone) {
|
|
res.status(400).json({ error: true, code: 'MISSING_PHONE', message: '请提供手机号' });
|
|
return;
|
|
}
|
|
|
|
const result = await sendVerificationCode(phone);
|
|
if (result.success) {
|
|
res.json(result);
|
|
} else {
|
|
res.status(400).json({ error: true, code: 'SMS_FAILED', message: result.message });
|
|
}
|
|
});
|
|
|
|
// Register
|
|
router.post('/register', rateLimiter(5, 60000), async (req: Request, res: Response): Promise<void> => {
|
|
const { phone, code, nickname, realName, role } = req.body;
|
|
|
|
// Validation
|
|
if (!phone || !code || !nickname || !role) {
|
|
res.status(400).json({ error: true, code: 'MISSING_FIELDS', message: '请填写所有必填字段' });
|
|
return;
|
|
}
|
|
|
|
if (!['author', 'editor', 'operator'].includes(role)) {
|
|
res.status(400).json({ error: true, code: 'INVALID_ROLE', message: '无效的角色类型' });
|
|
return;
|
|
}
|
|
|
|
if ((role === 'editor' || role === 'operator') && !realName) {
|
|
res.status(400).json({ error: true, code: 'MISSING_REALNAME', message: '编辑和运营需要填写真实姓名' });
|
|
return;
|
|
}
|
|
|
|
// Verify SMS code
|
|
if (!verifyCode(phone, code)) {
|
|
res.status(400).json({ error: true, code: 'INVALID_CODE', message: '验证码无效或已过期' });
|
|
return;
|
|
}
|
|
|
|
// Check if user already exists
|
|
const existing = await findUserByPhone(phone);
|
|
if (existing) {
|
|
res.status(409).json({ error: true, code: 'USER_EXISTS', message: '该手机号已注册，请直接登录' });
|
|
return;
|
|
}
|
|
|
|
// Create user
|
|
const user = await createUser({ phone, nickname, realName, role });
|
|
const token = generateToken(user);
|
|
|
|
res.json({
|
|
success: true,
|
|
token,
|
|
user: {
|
|
id: user.id,
|
|
nickname: user.nickname,
|
|
role: user.role,
|
|
phone: maskPhone(user.phone),
|
|
aiCompanion: user.aiCompanion,
|
|
creditScore: user.creditScore,
|
|
},
|
|
});
|
|
});
|
|
|
|
// Login
|
|
router.post('/login', rateLimiter(10, 60000), async (req: Request, res: Response): Promise<void> => {
|
|
const { phone, code } = req.body;
|
|
|
|
if (!phone || !code) {
|
|
res.status(400).json({ error: true, code: 'MISSING_FIELDS', message: '请提供手机号和验证码' });
|
|
return;
|
|
}
|
|
|
|
// Verify SMS code
|
|
if (!verifyCode(phone, code)) {
|
|
res.status(400).json({ error: true, code: 'INVALID_CODE', message: '验证码无效或已过期' });
|
|
return;
|
|
}
|
|
|
|
// Find user
|
|
const user = await findUserByPhone(phone);
|
|
if (!user) {
|
|
res.status(404).json({ error: true, code: 'USER_NOT_FOUND', message: '用户不存在，请先注册' });
|
|
return;
|
|
}
|
|
|
|
// Update last login
|
|
await updateLastLogin(user.id, phone);
|
|
|
|
const token = generateToken(user);
|
|
res.json({
|
|
success: true,
|
|
token,
|
|
user: {
|
|
id: user.id,
|
|
nickname: user.nickname,
|
|
role: user.role,
|
|
phone: maskPhone(user.phone),
|
|
aiCompanion: user.aiCompanion,
|
|
creditScore: user.creditScore,
|
|
},
|
|
});
|
|
});
|
|
|
|
export default router;
|