import { Req, Res, ReturnValue } from "#/global"; import { LoginUserSchema, RegisterUserSchema, UserSchema } from "@/schema"; import { gFail, gSuccess } from "@/util"; import { auth, config, method, route, validate } from "@noderun/hapi-router"; import * as bcrypt from "bcrypt"; /** * 登录界面 */ export default class { @route("/login") @auth("try") @method("GET") async login_GET(request: Req, h: Res): ReturnValue { if (request.auth.isAuthenticated) { request.yar.flash('warning', '您已经登陆'); return h.redirect("/") } else { logger.debug("未登录"); } return h.view("views/login.pug"); } @validate({ payload: LoginUserSchema, $errto: '/login', // failAction: 'log' failAction: 'function' }) @method("POST") @route("/login") async login_POST(request: Req, h: Res): ReturnValue { const { username, password, referrer } = request.payload as any; if(!username || !password ){ request.yar.flash('error', 'username or password can not be empty.'); return h.redirect("/login"); } const User = request.getModel("User"); const account = await User.findOne({ where: { username: username } }); if (!account || !(await bcrypt.compare(password, account.password))) { request.yar.flash('error', 'Invalid username or password'); return h.redirect("/login"); } request.cookieAuth.set({ id: account.id, nickname: account.nickname }); console.log(account.nickname); request.yar.flash('success', '用户已登录'); return h.redirect(referrer ? referrer : "/"); } @method("GET") @auth() async logout(request: Req, h: Res): ReturnValue { request.yar.flash('success', '用户已退出'); request.cookieAuth.clear(); return h.redirect('/'); } @route("/register") @auth("try") @method("GET") async registerView(request: Req, h: Res): ReturnValue { if (request.auth.isAuthenticated) { request.yar.flash('warning', '您已经登陆'); return h.redirect("/") } else { logger.debug("未登录"); } return h.view("views/login.pug"); } @validate({ payload: RegisterUserSchema, }) @method("POST") async register(request: Req, h: Res): ReturnValue { let { username, password, email, nickname } = request.payload as any; if(!email){ request.yar.flash('error', '必须填写邮箱'); return h.redirect("/login"); } if (!username) username = email; if (!nickname) nickname = username; const User = request.getModel("User") logger.trace(username, email); try { const result = await User.findOne({ where: { username: username } }); if (result != null) { request.yar.flash('error', '已存在该用户'); return h.redirect("/login"); } let salt = bcrypt.genSaltSync(10); let pwdLock = bcrypt.hashSync(password, salt); await User.create({ username, nickname, password: pwdLock, email }); return h.redirect("/") } catch (e) { request.yar.flash('error', '注册用户失败'); return h.redirect("/login"); } } }