import { Req, Res, ReturnValue } from "#/global"; import { UserSchema } from "@/schema"; import { gFail, gSuccess } from "@/util"; import { auth, config, method, route, validate } from "@noderun/hapi-router"; import * as bcrypt from "bcrypt"; /** * 登录界面 */ export default class { @route("/login") @auth("try") @method("GET") async login_GET(request: Req, h: Res): ReturnValue { if (request.auth.isAuthenticated) { request.yar.flash('warning', '您已经登陆'); return h.redirect("/") } else { logger.debug("未登录"); } return h.view("views/login.pug"); } @method("POST") @route("/login") async login_POST(request: Req, h: Res): ReturnValue { const { username, password, referrer } = request.payload as any; if(!username || !password ){ request.yar.flash('error', 'username or password can not be empty.'); return h.redirect("/login"); } const User = request.getModel("User"); const account = await User.findOne({ where: { username: username } }); if (!account || !(await bcrypt.compare(password, account.password))) { request.yar.flash('error', 'Invalid username or password'); return h.redirect("/login"); } request.cookieAuth.set({ id: account.id }); request.yar.flash('success', '用户已登录'); return h.redirect(referrer ? referrer : "/"); } @method("GET") @auth() async logout(request: Req, h: Res): ReturnValue { request.yar.flash('success', '用户已退出'); request.cookieAuth.clear(); return h.redirect('/'); } @route("/register") @auth("try") @method("GET") async registerView(request: Req, h: Res): ReturnValue { if (request.auth.isAuthenticated) { request.yar.flash('warning', '您已经登陆'); return h.redirect("/") } else { logger.debug("未登录"); } return h.view("views/login.pug"); } @method("POST") async register(request: Req, h: Res): ReturnValue { let { username, password, email } = request.payload as any; if (!username) username = email; const User = request.getModel("User") logger.trace(username, email); try { const result = await User.findOne({ where: { username: username } }); if (result != null) { request.yar.flash('error', '已存在该用户'); return h.redirect("/login"); } let salt = bcrypt.genSaltSync(10); let pwdLock = bcrypt.hashSync(password, salt); await User.create({ username, password: pwdLock, email }); return h.redirect("/") } catch (e) { request.yar.flash('error', '注册用户失败'); return h.redirect("/login"); } } }