31 lines
1.1 KiB
TypeScript
31 lines
1.1 KiB
TypeScript
// import { defineEventHandler, readBody, createError } from 'h3';
|
|
import bcrypt from 'bcryptjs';
|
|
import BetterSqlite3 from 'better-sqlite3';
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
const body = await readBody(event);
|
|
const { oldPassword, newPassword } = body;
|
|
const userId = event.context.user.id;
|
|
|
|
// 查询用户
|
|
const userDB = new BetterSqlite3('./userData/db/user.db');
|
|
const user: any = userDB.prepare('SELECT * FROM user WHERE id = ?').get(userId);
|
|
if (!user || !bcrypt.compareSync(oldPassword, user.password)) {
|
|
userDB.close();
|
|
throw createError({ statusCode: 401, statusMessage: 'Invalid old password' });
|
|
}
|
|
|
|
// 哈希新密码
|
|
const salt = bcrypt.genSaltSync(10);
|
|
const hashedPassword = bcrypt.hashSync(newPassword, salt);
|
|
|
|
// 更新密码
|
|
userDB.prepare('UPDATE user SET password = ? WHERE id = ?').run(hashedPassword, userId);
|
|
|
|
// 生成新的 JWT
|
|
const token = createToken(userId);
|
|
|
|
userDB.close();
|
|
|
|
return { token , expiresIn: Date.now() + 168 * 60 * 60 * 1000 };
|
|
}); |