feat: 完成用户鉴权相关api

server/api/user/updatePassword.ts

@@ -0,0 +1,31 @@
+// import { defineEventHandler, readBody, createError } from 'h3';
+import bcrypt from 'bcryptjs';
+import BetterSqlite3 from 'better-sqlite3';
+
+export default defineEventHandler(async (event) => {
+    const body = await readBody(event);
+    const { oldPassword, newPassword } = body;
+    const userId = event.context.user.id;
+
+    // 查询用户
+    const userDB = new BetterSqlite3('./userData/db/user.db');
+    const user: any = userDB.prepare('SELECT * FROM user WHERE id = ?').get(userId);
+    if (!user || !bcrypt.compareSync(oldPassword, user.password)) {
+        userDB.close();
+        throw createError({ statusCode: 401, statusMessage: 'Invalid old password' });
+    }
+
+    // 哈希新密码
+    const salt = bcrypt.genSaltSync(10);
+    const hashedPassword = bcrypt.hashSync(newPassword, salt);
+
+    // 更新密码
+    userDB.prepare('UPDATE user SET password = ? WHERE id = ?').run(hashedPassword, userId);
+
+    // 生成新的 JWT
+    const token = createToken(userId);
+
+    userDB.close();
+
+    return { token , expiresIn: Date.now() + 168 * 60 * 60 * 1000 };
+});