feat: 完成用户登录界面，api还需完善

server/api/user/login.ts

@@ -19,7 +19,7 @@ export default defineEventHandler(async (event) => {
     userDB.prepare('UPDATE user SET lastLoginTime = ? WHERE id = ?').run(Date.now(), user.id);
 
     // 生成 JWT
-    const token = createToken(user.id);
+    const token = createToken({ userId: user.id, password: user.password, username: user.username });
 
     userDB.close();
 

server/api/user/needRegister.ts

@@ -0,0 +1,16 @@
+// import bcrypt from 'bcryptjs';
+import BetterSqlite3 from 'better-sqlite3';
+
+export default defineEventHandler(async (event) => {
+    // const body = await readBody(event);
+    const userDB = BetterSqlite3('./userData/db/user.db');
+
+    // 临时使用，若表中已有用户，则拒绝创建新的用户
+    const existingUser = userDB.prepare('SELECT * FROM user').get();
+    userDB.close();
+    if (existingUser) {
+        return true
+    } else {
+        return false
+    }
+});

server/api/user/refreshToken.ts

@@ -9,9 +9,13 @@ export default defineEventHandler(async (event) => {
 
     try {
         // 验证旧的 Token
-        const decoded = jwt.verify(token, jwtSecret) as { userId: number };
+        const decoded = jwt.verify(token, jwtSecret) as any;
         // 生成新的 Token
-        const newToken = jwt.sign({ userId: decoded.userId }, jwtSecret, { expiresIn: '168h' });
+        const newToken = jwt.sign({
+            username: decoded.username,
+            password: decoded.password,
+            userId: decoded.userId,
+        }, jwtSecret, { expiresIn: '168h' });
 
         return { token: newToken, expiresIn: Date.now() + 168 * 60 * 60 * 1000 };
     } catch (err) {

server/api/user/register.ts

@@ -4,16 +4,23 @@ import BetterSqlite3 from 'better-sqlite3';
 export default defineEventHandler(async (event) => {
     const body = await readBody(event);
     const { username, password } = body;
-
-    // 检查用户名是否已存在
     const userDB = BetterSqlite3('./userData/db/user.db');
-    const existingUser = userDB.prepare('SELECT * FROM user WHERE username = ?').get(username);
+
+    // 临时使用，若表中已有用户，则拒绝创建新的用户
+    const existingUser = userDB.prepare('SELECT * FROM user').get();
     if (existingUser) {
         userDB.close();
-        throw createError({ statusCode: 400, statusMessage: 'Username already exists' });
+        throw createError({ statusCode: 400, statusMessage: 'User already exists' });
     }
 
-    // 哈希密码
+    // // 检查用户名是否已存在
+    // const existingUser = userDB.prepare('SELECT * FROM user WHERE username = ?').get(username);
+    // if (existingUser) {
+    //     userDB.close();
+    //     throw createError({ statusCode: 400, statusMessage: 'Username already exists' });
+    // }
+
+    // 哈希密码，暂未实现，未来实现
     // const salt = getKey().substring(0, 10);
     // const hashedPassword = bcrypt.hashSync(password, salt);
     const hashedPassword = password
@@ -26,7 +33,7 @@ export default defineEventHandler(async (event) => {
 
     // 生成 JWT
     const userId = result.lastInsertRowid as number;
-    const token = createToken(userId);
+    const token = createToken({ userId, password: hashedPassword, username });
 
     userDB.close();
 

server/api/user/updatePassword.ts

@@ -2,6 +2,8 @@
 import bcrypt from 'bcryptjs';
 import BetterSqlite3 from 'better-sqlite3';
 
+// 暂未实现
+
 export default defineEventHandler(async (event) => {
     const body = await readBody(event);
     const { oldPassword, newPassword } = body;
@@ -23,7 +25,7 @@ export default defineEventHandler(async (event) => {
     userDB.prepare('UPDATE user SET password = ? WHERE id = ?').run(hashedPassword, userId);
 
     // 生成新的 JWT
-    const token = createToken(userId);
+    const token = createToken({ userId, password: user.password, username: user.username });
 
     userDB.close();
 

server/middleware/auth.ts

@@ -5,21 +5,29 @@ import getKey from "../utils/getKey"
 
 const pathNeedAuth = serverConfig.auth.api
 
-export default defineEventHandler((event) => {
-    const key = getKey()
+export default defineEventHandler(async (event) => {
     const path = getRequestURL(event).pathname
+    // console.log(path)
     if (pathNeedAuth.has(path)) {
-        const authHeader = event.node.req.headers.authorization
+        const key = getKey()
+        // @ts-ignore
+        const authHeader = event.headers.get('authorization');
+        // console.log(authHeader)
         if (!authHeader || !authHeader.startsWith('Bearer ')) {
             throw createError({ statusCode: 401, statusMessage: 'Unauthorized' })
         }
         const token = authHeader.split('Bearer ')[1].trim()
         try {
-            const decoded = jwt.verify(token, key)
+            const decoded = jwt.verify(token, key) as { userId: number, password: string, username: string, exp: number }
+            if (decoded.exp > Date.now()) {
+                // console.log('token expired')
+                throw createError({ statusCode: 401, statusMessage: 'Token invalid or expired', data: { err: 'token expired', token } })
+            }
+            // console.log(decoded)
             // 将用户ID挂载到事件对象，供后续使用
             // event.context.userId = decoded.userId
         } catch (err) {
-            throw createError({ statusCode: 401, statusMessage: 'Token invalid or expired' })
+            throw createError({ statusCode: 401, statusMessage: 'Token invalid or expired', data: { err, token } })
         }
     }
 })

server/server.config.ts

@@ -2,7 +2,10 @@ export default {
     auth: {
         // 需要进行鉴权的api
         api: new Set([
-            '/api/test/testDir'
+            '/api/test/testDir',
+            '/api/posts/editPost',
+            '/api/posts/uploadPost',
+            '/api/user/updatePassword'
         ])
     }
 }

server/utils/createToken.ts

@@ -2,7 +2,7 @@ import jwt from "jsonwebtoken"
 import getKey from "./getKey"
 
 
-export default function createToken(userId: number): string {
+export default function createToken(payload: { userId: number, password: string, username: string }): string {
     const key = getKey()
-    return jwt.sign({ userId }, key, { expiresIn: '168h' })
+    return jwt.sign(payload, key, { expiresIn: '168h' })
 }