You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 

96 lines
2.9 KiB

import { Req, Res, ReturnValue } from "#/global";
import { LoginUserSchema, RegisterUserSchema, UserSchema } from "@/schema";
import { gFail, gSuccess } from "@/util";
import { auth, config, method, route, validate } from "@noderun/hapi-router";
import * as bcrypt from "bcrypt";
/**
* 登录界面
*/
export default class {
@route("/login")
@auth("try")
@method("GET")
async login_GET(request: Req, h: Res): ReturnValue {
if (request.auth.isAuthenticated) {
request.yar.flash('warning', '您已经登陆');
return h.redirect("/")
} else {
logger.debug("未登录");
}
return h.view("views/login.pug");
}
@validate({
payload: LoginUserSchema,
$errto: '/login',
// failAction: 'log'
failAction: 'function',
failReason: '用户名或密码错误,请重试',
})
@method("POST")
@route("/login")
async login_POST(request: Req, h: Res): ReturnValue {
const { username, password, referrer } = request.payload as any;
const User = request.getModel("User");
const account = <any>await User.findOne({ where: { username: username } });
if (!account || !(await bcrypt.compare(password, account.password))) {
request.yar.flash('error', 'Invalid username or password');
return h.redirect("/login");
}
request.cookieAuth.set({ id: account.id, nickname: account.nickname });
request.yar.flash('success', '用户已登录');
return h.redirect(referrer ? referrer : "/");
}
@method("GET")
@auth()
async logout(request: Req, h: Res): ReturnValue {
request.yar.flash('success', '用户已退出');
request.cookieAuth.clear();
return h.redirect('/');
}
@route("/register")
@auth("try")
@method("GET")
async registerView(request: Req, h: Res): ReturnValue {
if (request.auth.isAuthenticated) {
request.yar.flash('warning', '您已经登陆');
return h.redirect("/")
} else {
logger.debug("未登录");
}
return h.view("views/login.pug");
}
@validate({
payload: RegisterUserSchema,
})
@method("POST")
async register(request: Req, h: Res): ReturnValue {
let { username, password, email, nickname } = request.payload as any;
if(!email){
request.yar.flash('error', '必须填写邮箱');
return h.redirect("/login");
}
if (!username) username = email;
if (!nickname) nickname = username;
const User = request.getModel("User")
logger.trace(username, email);
try {
const result = await User.findOne({ where: { username: username } });
if (result != null) {
request.yar.flash('error', '已存在该用户');
return h.redirect("/login");
}
let salt = bcrypt.genSaltSync(10);
let pwdLock = bcrypt.hashSync(password, salt);
await User.create({ username, nickname, password: pwdLock, email });
return h.redirect("/")
} catch (e) {
request.yar.flash('error', '注册用户失败');
return h.redirect("/login");
}
}
}