init: add workspace files

2026-05-26 16:41:20 +08:00
commit f4f2393f72
1041 changed files with 67405 additions and 0 deletions
--- a/api/base.js
+++ b/api/base.js
@@ -0,0 +1,145 @@
+
+
+const crypto = require('crypto');
+const desvi = __CONFIG.DESIV;
+const md5add = __CONFIG.MD5;
+const SessionKey = 'u';
+const SessionToken = 'p';
+
+class Apibase {
+    constructor(req, res) {
+
+        this.loginUser = null;
+        this.req = req;
+        this.res = res;
+    }
+    error(code = 500, message) {
+        return this.res.status(code).json({ error: message });
+    }
+    signIn(id, uname, pwd, level) {
+        if (!(id > 0)) return null;
+        let key = this.req.cookies[SessionKey];
+        if (!key) {
+            key = this.sessionKey();
+            this.res.cookie(SessionKey, key, {
+                maxAge: 3600000 * 24 * 180
+            });
+        }
+        let cert = this.encryptUser(id, uname, pwd, key, level);
+        if (!cert) return null;
+        this.res.cookie(SessionToken, cert, {
+            maxAge: 3600000 * 24 * 180
+        });
+        return cert;
+    }
+    sessionKey() {
+        return this.req.session.id;
+    }
+
+    getUser() {
+        if (this.loginUser) return this.loginUser;
+
+        let key = this.req.cookies[SessionKey];
+        if (!key) {
+            this.res.cookie(SessionKey, this.sessionKey(), {
+                maxAge: 3600000 * 24 * 180
+            });
+        }
+        let str = this.req.cookies[SessionToken];
+        if (!str) return;
+        this.loginUser = this.deEncryptUser(key, str);
+        return this.loginUser;
+    }
+    deEncryptUser(key, cert) {
+        let txt = this.deEncrypt(key, cert);
+        let str = txt.split("%");
+        if (str.length !== 5) return null;
+        let id = parseInt(str[0]);
+        if (id > 0)
+            return {
+                id: id,
+                name: str[1],
+                pwd: str[2],
+                time: parseInt(str[3]),
+                level: str[4],
+            };
+        return null;
+    }
+    deEncrypt(key, str) {
+
+        if (!key || !str) return;
+        if (key.length > 16) key = key.substr(0, 16);
+        key = Buffer.from(key, 'utf8');
+        let decipher = crypto.createDecipheriv('aes-128-cbc', key, desvi);
+        //decipher.setAutoPadding(true);
+        let txt = decipher.update(str, 'base64', 'utf8');
+        txt += decipher.final('utf8');
+
+        return txt;
+    }
+
+
+
+    MD5(str) {
+        let md5 = crypto.createHash('md5');
+        let result = md5.update(str + md5add).digest('hex');
+        return result.toUpperCase();
+    }
+    encrypt(str, key) {
+        if (!key || !str) return;
+        if (key.length > 16) key = key.substr(0, 16);
+        key = Buffer.from(key, 'utf8');
+        let decipher = crypto.createCipheriv('aes-128-cbc', key, desvi);
+
+        // decipher.setAutoPadding(true);
+
+        let txt = decipher.update(str, 'utf8', 'base64');
+
+        txt += decipher.final('base64');
+        return txt;
+    }
+    encryptUser(id, uname, pwd, key, level) {
+        return this.encrypt([id, uname, pwd,
+            Date.now(), level].join('%'), key);
+    }
+
+    setSession(key, value) {
+        this.req.session[key] = value;
+    }
+    getSession(key) {
+        return this.req.session[key];
+    }
+    deleteSession(key) {
+        delete this.req.session[key];
+    }
+
+
+    start_sse() {
+        if (this.res.headersSent) {
+            throw new Error('已经发送响应头');
+        }
+        this.res.setHeader('Content-Type', 'text/event-stream');
+        this.res.setHeader('Cache-Control', 'no-cache');
+        this.res.setHeader('Connection', 'keep-alive');
+        this.res.flushHeaders(); // 发送响应头
+    }
+    sse(data) {
+        this.res.write(`data: ${JSON.stringify(data)}\n\n`); // 发送数据
+    }
+    end_sse() {
+        this.res.end();
+    }
+    guid() {
+        var str = [];
+        str.push(parseInt((Date.now() - 1598376101624) / 1000).toString(16));
+        let length = 32 - str[0].length;
+        for (var i = 0; i < length; i++) {
+            str.push(idstr[parseInt(Math.random() * idstr.length)]);
+        }
+        return str.join('');
+    }
+}
+
+const idstr = "abcdefghijklmnopqrstuvwxwz0123456789";
+
+module.exports = Apibase;
--- a/api/game.js
+++ b/api/game.js
@@ -0,0 +1,47 @@
+
+
+
+const APIBASE = require('./base');
+let SERVERS = null;
+const { DB } = __CONFIG;
+class GameAPI extends APIBASE {
+
+    async servers(user) {
+        if (!SERVERS) {
+            SERVERS = await DB.getServers();
+        }
+        return SERVERS;
+    }
+    async reload() {
+        SERVERS = null;
+    }
+    async search_role(paras) {
+        const { type, value } = paras;
+        if (!type || !value) return { code: 0, result: "错误参数" };
+        if (!ALLOW_TYPES[type]) return { code: 0, result: "错误参数" };
+        let cond = "";
+        paras = [value]
+        if (type === "uname") {
+            cond = "where a.name=?";
+        } else if (type === 'name') cond = 'where b.name=? or b.name is null'
+        else if (type === 'phone') cond = 'where a.phone=?';
+
+        let result = await DB.query_role(cond, paras);
+        return { code: 1, result: result };
+    }
+}
+
+const ALLOW_TYPES = {
+    uname: true,
+    name: true,
+    phone: true
+};
+module.exports = GameAPI;
+
+
+
+
+
+
+
+
--- a/api/user.js
+++ b/api/user.js
@@ -0,0 +1,206 @@
+
+
+
+const APIBASE = require('./base');
+const svgCaptcha = require('svg-captcha');
+const { DB } = __CONFIG;
+const CODEREG = /^[A-Za-z0-9_]{3,20}$/;
+class UserAPI extends APIBASE {
+
+    async login(user) {
+        let { code, pwd } = user;
+
+        if (!code || !pwd) {
+            return { code: 0, result: "用户名或密码错误" };
+        }
+        code = code.toLowerCase();
+        if (!CODEREG.test(code))
+            return { code: 0, result: "用户名格式错误" };
+        pwd = this.MD5(pwd);
+        let result = await DB.getUserBy("name", code);
+        if (!result)
+            return { code: 0, result: "用户不存在" };
+        if (result.pwd !== pwd)
+            return { code: 0, result: "用户密码错误" };
+        let cert = this.signIn(result.id, result.name, pwd, result.level);
+        if (cert)
+            return { code: 1, p: cert, u: this.sessionKey() };
+        return { code: 0, result: "登陆失败" };
+    }
+    checkValCode(code) {
+        if (!code) return false;
+        let num = this.getSession("valno");
+        if (!num) return false;
+
+        return code.toLowerCase() == num.toLowerCase();
+    }
+    async regist(user) {
+        if (!user.name || !user.pwd) {
+            return { code: 0, result: "注册失败，缺少数据" };
+        }
+        if (user.name.length > 15 || user.name.length < 3) {
+            return { code: 0, result: "注册失败，缺少数据" };
+        }
+        if (user.pwd.length < 5) {
+            return { code: 0, result: "注册失败，缺少数据" };
+        }
+        if (!this.checkValCode(user.valno)) {
+            return { code: 0, result: "验证码输入错误" };
+        }
+        user.pwd = this.MD5(user.pwd);
+        user.name = user.name.toLowerCase();
+        user.phone = user.phone ?? null;
+        user.link_user = user.guider > 0 ? user.guider : 0;
+        if (await DB.getUserBy("name", user.name)) {
+            return { code: 0, result: "注册失败，账号已经有人使用" };
+        }
+        if (!await DB.createUser(user)) {
+            return { code: 0, result: "注册失败" };
+        }
+        this.deleteSession("valno");
+        this.signIn(user.id, user.name, user.pwd);
+        return { code: 1 };
+    }
+    async validimage() {
+        const captcha = svgCaptcha.create({
+            size: 4,           // 验证码长度
+            noise: 2,          // 干扰线条数量
+            color: true,       // 文字是否彩色
+            background: '#337AB7', // 背景色
+        });
+
+        this.setSession('valno', captcha.text)
+        return Buffer.from(captcha.data).toString('base64');
+    }
+    async getphone() {
+        const user = this.getUser();
+        if (!user)
+            return { code: 0, result: "未登录" };
+        let result = await DB.getUserBy("id", user.id);
+        if (!result) return { code: 0, result: "不存在的用户" };
+        return { code: 1, result: result.phone ? result.phone.substring(0, 3) + "********" : "" };
+    }
+    async bindphone(data) {
+        const user = this.getUser();
+        if (!user)
+            return { code: 0, result: "未登录" };
+        let { code, no, pwd } = data;
+        let result = await DB.getUserBy("id", user.id);
+        if (!result) return { code: 0, result: "不存在的用户" };
+        if (result.phone) {
+            if (!code || code.length !== 4)
+                return { code: 0, result: "手机尾号格式错误" };
+            if (!result.phone.endsWith(code))
+                return { code: 0, result: "错误的手机尾号" };
+            user.phone = null;
+        } else {
+            if (!no || !/^1\d{10}$/.test(no))
+                return { code: 0, result: "手机号格式错误" };
+            user.phone = no;
+        }
+        pwd = this.MD5(pwd);
+        if (pwd !== user.pwd)
+            return { code: 0, result: "密码错误" };
+        if (await DB.updateUser(user))
+            return { code: 1 };
+        return { code: 0 };
+    }
+
+    async resetpwd(paras) {
+        let {
+            name, phone, vcode, pwd
+        } = paras;
+        if (!name || !phone || !pwd)
+            return { code: 0 };
+        const result = await DB.getUserBy("name", name);
+        if (!result)
+            return { code: 0, result: "账号不存在" };
+        if (!result.phone || result.phone !== phone) {
+            return { code: 0, result: "手机号验证失败" };
+        }
+        pwd = this.MD5(pwd);
+        result.pwd = pwd;
+        if (!await DB.updateUser(result)) {
+            return { code: 0, result: "密码重置失败。" };
+        }
+        return { code: 1 };
+    }
+    async changepassword(data) {
+        let { oldpwd, pwd, no } = data;
+        if (!oldpwd || !pwd)
+            return { code: 0 };
+        oldpwd = this.MD5(oldpwd);
+        pwd = this.MD5(pwd);
+        const user = this.getUser();
+        if (!user)
+            return { code: 0, result: "未登录" };
+        const result = await DB.getUserBy("id", user.id);
+        if (!result)
+            return { code: 0, result: "账号不存在" };
+
+        if (result.pwd !== oldpwd) {
+            return { code: 0, result: "原始密码输入错误。" };
+        }
+        if (result.phone) {
+            if (!no || no.length !== 4)
+                return { code: 0, result: "手机尾号格式错误" };
+            if (!result.phone.endsWith(no))
+                return { code: 0, result: "错误的手机尾号" };
+        }
+        user.pwd = pwd;
+        result.pwd = pwd;
+        if (!await DB.updateUser(result)) {
+            return { code: 0, result: "密码修改失败。" };
+        }
+        let cert = this.signIn(user.id, user.name, pwd, user.level);
+        if (cert)
+            return { code: 1, p: cert, u: this.sessionKey() };
+        return { code: 0, result: "登陆凭证更新失败" };
+
+
+    }
+
+    async GetPhone2(paras) {
+        let { uid, cert } = paras; debugger
+        if (!uid || cert !== 'transrole_service') return;
+        let user = await DB.getUserByID(uid);
+        if (!user) return "";
+        return user.phone;
+    }
+}
+
+module.exports = UserAPI;
+
+
+
+
+
+
+
+
+
+
+
+
+// this.inherits('api/base');
+
+// this.define = {
+//     Login: { method: "Post", paras: ["code", "pwd"] }
+// }
+// const DB = this.import('/lib/mysql');
+// let servers = null;
+
+// this.Login = async function (code, pwd) {
+
+
+// }
+
+// this.GetUser = async function (cond, pars) {
+
+//     let sql = "select ID,Name,EMAIL,PHone,State,Developer,IsFirst from users";
+//     if (cond) {
+//         sql += " where " + cond;
+//     }
+//     return await DB.query(sql, pars);
+
+// }