- login
+
+
+
+
\ No newline at end of file
diff --git a/pages/user/register.vue b/pages/user/register.vue
new file mode 100644
index 0000000..77c2225
--- /dev/null
+++ b/pages/user/register.vue
@@ -0,0 +1,172 @@
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/pages/user/test.vue b/pages/user/test.vue
new file mode 100644
index 0000000..0dbbd28
--- /dev/null
+++ b/pages/user/test.vue
@@ -0,0 +1,99 @@
+
+
+ its the page which is used to test the api
+
+
+ uploadPostTest
+
+
+ editPostTest
+
+
+ testLogin
+
+
+ testRegister
+
+
+ testRefreshToken
+
+
+ testAuth
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/server/api/user/login.ts b/server/api/user/login.ts
index 3c26926..7dea17a 100644
--- a/server/api/user/login.ts
+++ b/server/api/user/login.ts
@@ -19,7 +19,7 @@ export default defineEventHandler(async (event) => {
userDB.prepare('UPDATE user SET lastLoginTime = ? WHERE id = ?').run(Date.now(), user.id);
// 生成 JWT
- const token = createToken(user.id);
+ const token = createToken({ userId: user.id, password: user.password, username: user.username });
userDB.close();
diff --git a/server/api/user/needRegister.ts b/server/api/user/needRegister.ts
new file mode 100644
index 0000000..9e5d4e4
--- /dev/null
+++ b/server/api/user/needRegister.ts
@@ -0,0 +1,16 @@
+// import bcrypt from 'bcryptjs';
+import BetterSqlite3 from 'better-sqlite3';
+
+export default defineEventHandler(async (event) => {
+ // const body = await readBody(event);
+ const userDB = BetterSqlite3('./userData/db/user.db');
+
+ // 临时使用，若表中已有用户，则拒绝创建新的用户
+ const existingUser = userDB.prepare('SELECT * FROM user').get();
+ userDB.close();
+ if (existingUser) {
+ return true
+ } else {
+ return false
+ }
+});
\ No newline at end of file
diff --git a/server/api/user/refreshToken.ts b/server/api/user/refreshToken.ts
index 0f3f183..34b61c0 100644
--- a/server/api/user/refreshToken.ts
+++ b/server/api/user/refreshToken.ts
@@ -9,9 +9,13 @@ export default defineEventHandler(async (event) => {
try {
// 验证旧的 Token
- const decoded = jwt.verify(token, jwtSecret) as { userId: number };
+ const decoded = jwt.verify(token, jwtSecret) as any;
// 生成新的 Token
- const newToken = jwt.sign({ userId: decoded.userId }, jwtSecret, { expiresIn: '168h' });
+ const newToken = jwt.sign({
+ username: decoded.username,
+ password: decoded.password,
+ userId: decoded.userId,
+ }, jwtSecret, { expiresIn: '168h' });
return { token: newToken, expiresIn: Date.now() + 168 * 60 * 60 * 1000 };
} catch (err) {
diff --git a/server/api/user/register.ts b/server/api/user/register.ts
index 8cee05e..15b15b7 100644
--- a/server/api/user/register.ts
+++ b/server/api/user/register.ts
@@ -4,16 +4,23 @@ import BetterSqlite3 from 'better-sqlite3';
export default defineEventHandler(async (event) => {
const body = await readBody(event);
const { username, password } = body;
-
- // 检查用户名是否已存在
const userDB = BetterSqlite3('./userData/db/user.db');
- const existingUser = userDB.prepare('SELECT * FROM user WHERE username = ?').get(username);
+
+ // 临时使用，若表中已有用户，则拒绝创建新的用户
+ const existingUser = userDB.prepare('SELECT * FROM user').get();
if (existingUser) {
userDB.close();
- throw createError({ statusCode: 400, statusMessage: 'Username already exists' });
+ throw createError({ statusCode: 400, statusMessage: 'User already exists' });
}
- // 哈希密码
+ // // 检查用户名是否已存在
+ // const existingUser = userDB.prepare('SELECT * FROM user WHERE username = ?').get(username);
+ // if (existingUser) {
+ // userDB.close();
+ // throw createError({ statusCode: 400, statusMessage: 'Username already exists' });
+ // }
+
+ // 哈希密码，暂未实现，未来实现
// const salt = getKey().substring(0, 10);
// const hashedPassword = bcrypt.hashSync(password, salt);
const hashedPassword = password
@@ -26,7 +33,7 @@ export default defineEventHandler(async (event) => {
// 生成 JWT
const userId = result.lastInsertRowid as number;
- const token = createToken(userId);
+ const token = createToken({ userId, password: hashedPassword, username });
userDB.close();
diff --git a/server/api/user/updatePassword.ts b/server/api/user/updatePassword.ts
index 58adc2f..b0d151b 100644
--- a/server/api/user/updatePassword.ts
+++ b/server/api/user/updatePassword.ts
@@ -2,6 +2,8 @@
import bcrypt from 'bcryptjs';
import BetterSqlite3 from 'better-sqlite3';
+// 暂未实现
+
export default defineEventHandler(async (event) => {
const body = await readBody(event);
const { oldPassword, newPassword } = body;
@@ -23,7 +25,7 @@ export default defineEventHandler(async (event) => {
userDB.prepare('UPDATE user SET password = ? WHERE id = ?').run(hashedPassword, userId);
// 生成新的 JWT
- const token = createToken(userId);
+ const token = createToken({ userId, password: user.password, username: user.username });
userDB.close();
diff --git a/server/middleware/auth.ts b/server/middleware/auth.ts
index b4d31e1..810cc93 100644
--- a/server/middleware/auth.ts
+++ b/server/middleware/auth.ts
@@ -5,21 +5,29 @@ import getKey from "../utils/getKey"
const pathNeedAuth = serverConfig.auth.api
-export default defineEventHandler((event) => {
- const key = getKey()
+export default defineEventHandler(async (event) => {
const path = getRequestURL(event).pathname
+ // console.log(path)
if (pathNeedAuth.has(path)) {
- const authHeader = event.node.req.headers.authorization
+ const key = getKey()
+ // @ts-ignore
+ const authHeader = event.headers.get('authorization');
+ // console.log(authHeader)
if (!authHeader || !authHeader.startsWith('Bearer ')) {
throw createError({ statusCode: 401, statusMessage: 'Unauthorized' })
}
const token = authHeader.split('Bearer ')[1].trim()
try {
- const decoded = jwt.verify(token, key)
+ const decoded = jwt.verify(token, key) as { userId: number, password: string, username: string, exp: number }
+ if (decoded.exp > Date.now()) {
+ // console.log('token expired')
+ throw createError({ statusCode: 401, statusMessage: 'Token invalid or expired', data: { err: 'token expired', token } })
+ }
+ // console.log(decoded)
// 将用户ID挂载到事件对象，供后续使用
// event.context.userId = decoded.userId
} catch (err) {
- throw createError({ statusCode: 401, statusMessage: 'Token invalid or expired' })
+ throw createError({ statusCode: 401, statusMessage: 'Token invalid or expired', data: { err, token } })
}
}
})
\ No newline at end of file
diff --git a/server/server.config.ts b/server/server.config.ts
index 78204db..8f98d03 100644
--- a/server/server.config.ts
+++ b/server/server.config.ts
@@ -2,7 +2,10 @@ export default {
auth: {
// 需要进行鉴权的api
api: new Set([
- '/api/test/testDir'
+ '/api/test/testDir',
+ '/api/posts/editPost',
+ '/api/posts/uploadPost',
+ '/api/user/updatePassword'
])
}
}
\ No newline at end of file
diff --git a/server/utils/createToken.ts b/server/utils/createToken.ts
index 6367e5f..7754d6e 100644
--- a/server/utils/createToken.ts
+++ b/server/utils/createToken.ts
@@ -2,7 +2,7 @@ import jwt from "jsonwebtoken"
import getKey from "./getKey"
-export default function createToken(userId: number): string {
+export default function createToken(payload: { userId: number, password: string, username: string }): string {
const key = getKey()
- return jwt.sign({ userId }, key, { expiresIn: '168h' })
+ return jwt.sign(payload, key, { expiresIn: '168h' })
}
\ No newline at end of file