wsmud/api/user.js

const APIBASE = require('./base');
const svgCaptcha = require('svg-captcha');
const { DB } = __CONFIG;
const CODEREG = /^[A-Za-z0-9_]{3,20}$/;
class UserAPI extends APIBASE {

    async login(user) {
        let { code, pwd } = user;

        if (!code || !pwd) {
            return { code: 0, result: "用户名或密码错误" };
        }
        code = code.toLowerCase();
        if (!CODEREG.test(code))
            return { code: 0, result: "用户名格式错误" };
        pwd = this.MD5(pwd);
        let result = await DB.getUserBy("name", code);
        if (!result)
            return { code: 0, result: "用户不存在" };
        if (result.pwd !== pwd)
            return { code: 0, result: "用户密码错误" };
        let cert = this.signIn(result.id, result.name, pwd, result.level);
        if (cert)
            return { code: 1, p: cert, u: this.sessionKey() };
        return { code: 0, result: "登陆失败" };
    }
    checkValCode(code) {
        if (!code) return false;
        let num = this.getSession("valno");
        if (!num) return false;

        return code.toLowerCase() == num.toLowerCase();
    }
    async regist(user) {
        if (!user.name || !user.pwd) {
            return { code: 0, result: "注册失败，缺少数据" };
        }
        if (user.name.length > 15 || user.name.length < 3) {
            return { code: 0, result: "注册失败，缺少数据" };
        }
        if (user.pwd.length < 5) {
            return { code: 0, result: "注册失败，缺少数据" };
        }
        if (!this.checkValCode(user.valno)) {
            return { code: 0, result: "验证码输入错误" };
        }
        user.pwd = this.MD5(user.pwd);
        user.name = user.name.toLowerCase();
        user.phone = user.phone ?? null;
        user.link_user = user.guider > 0 ? user.guider : 0;
        if (await DB.getUserBy("name", user.name)) {
            return { code: 0, result: "注册失败，账号已经有人使用" };
        }
        if (!await DB.createUser(user)) {
            return { code: 0, result: "注册失败" };
        }
        this.deleteSession("valno");
        this.signIn(user.id, user.name, user.pwd);
        return { code: 1 };
    }
    async validimage() {
        const captcha = svgCaptcha.create({
            size: 4,           // 验证码长度
            noise: 2,          // 干扰线条数量
            color: true,       // 文字是否彩色
            background: '#337AB7', // 背景色
        });

        this.setSession('valno', captcha.text)
        return Buffer.from(captcha.data).toString('base64');
    }
    async getphone() {
        const user = this.getUser();
        if (!user)
            return { code: 0, result: "未登录" };
        let result = await DB.getUserBy("id", user.id);
        if (!result) return { code: 0, result: "不存在的用户" };
        return { code: 1, result: result.phone ? result.phone.substring(0, 3) + "********" : "" };
    }
    async bindphone(data) {
        const user = this.getUser();
        if (!user)
            return { code: 0, result: "未登录" };
        let { code, no, pwd } = data;
        let result = await DB.getUserBy("id", user.id);
        if (!result) return { code: 0, result: "不存在的用户" };
        if (result.phone) {
            if (!code || code.length !== 4)
                return { code: 0, result: "手机尾号格式错误" };
            if (!result.phone.endsWith(code))
                return { code: 0, result: "错误的手机尾号" };
            user.phone = null;
        } else {
            if (!no || !/^1\d{10}$/.test(no))
                return { code: 0, result: "手机号格式错误" };
            user.phone = no;
        }
        pwd = this.MD5(pwd);
        if (pwd !== user.pwd)
            return { code: 0, result: "密码错误" };
        if (await DB.updateUser(user))
            return { code: 1 };
        return { code: 0 };
    }

    async resetpwd(paras) {
        let {
            name, phone, vcode, pwd
        } = paras;
        if (!name || !phone || !pwd)
            return { code: 0 };
        const result = await DB.getUserBy("name", name);
        if (!result)
            return { code: 0, result: "账号不存在" };
        if (!result.phone || result.phone !== phone) {
            return { code: 0, result: "手机号验证失败" };
        }
        pwd = this.MD5(pwd);
        result.pwd = pwd;
        if (!await DB.updateUser(result)) {
            return { code: 0, result: "密码重置失败。" };
        }
        return { code: 1 };
    }
    async changepassword(data) {
        let { oldpwd, pwd, no } = data;
        if (!oldpwd || !pwd)
            return { code: 0 };
        oldpwd = this.MD5(oldpwd);
        pwd = this.MD5(pwd);
        const user = this.getUser();
        if (!user)
            return { code: 0, result: "未登录" };
        const result = await DB.getUserBy("id", user.id);
        if (!result)
            return { code: 0, result: "账号不存在" };

        if (result.pwd !== oldpwd) {
            return { code: 0, result: "原始密码输入错误。" };
        }
        if (result.phone) {
            if (!no || no.length !== 4)
                return { code: 0, result: "手机尾号格式错误" };
            if (!result.phone.endsWith(no))
                return { code: 0, result: "错误的手机尾号" };
        }
        user.pwd = pwd;
        result.pwd = pwd;
        if (!await DB.updateUser(result)) {
            return { code: 0, result: "密码修改失败。" };
        }
        let cert = this.signIn(user.id, user.name, pwd, user.level);
        if (cert)
            return { code: 1, p: cert, u: this.sessionKey() };
        return { code: 0, result: "登陆凭证更新失败" };


    }

    async GetPhone2(paras) {
        let { uid, cert } = paras; debugger
        if (!uid || cert !== 'transrole_service') return;
        let user = await DB.getUserByID(uid);
        if (!user) return "";
        return user.phone;
    }
}

module.exports = UserAPI;












// this.inherits('api/base');

// this.define = {
//     Login: { method: "Post", paras: ["code", "pwd"] }
// }
// const DB = this.import('/lib/mysql');
// let servers = null;

// this.Login = async function (code, pwd) {


// }

// this.GetUser = async function (cond, pars) {

//     let sql = "select ID,Name,EMAIL,PHone,State,Developer,IsFirst from users";
//     if (cond) {
//         sql += " where " + cond;
//     }
//     return await DB.query(sql, pars);

// }