87 lines
2.6 KiB
JavaScript
87 lines
2.6 KiB
JavaScript
const express = require('express');
|
|
const router = express.Router();
|
|
const bcrypt = require('bcryptjs');
|
|
const jwt = require('jsonwebtoken');
|
|
const db = require('../db');
|
|
|
|
// JWT Secret from env or default
|
|
const JWT_SECRET = process.env.JWT_SECRET || 'super_secret_api_debug_key';
|
|
|
|
// 用户登录
|
|
router.post('/login', async (req, res) => {
|
|
try {
|
|
const { username, password } = req.body;
|
|
|
|
if (!username || !password) {
|
|
return res.status(400).json({ error: '请输入用户名和密码' });
|
|
}
|
|
|
|
const [users] = await db.query('SELECT * FROM users WHERE username = ?', [username]);
|
|
if (users.length === 0) {
|
|
return res.status(401).json({ error: '用户名或密码错误' });
|
|
}
|
|
|
|
const user = users[0];
|
|
const isMatch = await bcrypt.compare(password, user.password);
|
|
|
|
if (!isMatch) {
|
|
return res.status(401).json({ error: '用户名或密码错误' });
|
|
}
|
|
|
|
// 签发 Token
|
|
const token = jwt.sign(
|
|
{ id: user.id, username: user.username },
|
|
JWT_SECRET,
|
|
{ expiresIn: '7d' } // 7天有效
|
|
);
|
|
|
|
res.json({
|
|
success: true,
|
|
token,
|
|
user: { id: user.id, username: user.username }
|
|
});
|
|
|
|
} catch (err) {
|
|
console.error('Login error:', err);
|
|
res.status(500).json({ error: '服务器内部错误' });
|
|
}
|
|
});
|
|
|
|
// 用户注册 (仅供演示，生产环境应限制注册)
|
|
router.post('/register', async (req, res) => {
|
|
try {
|
|
const { username, password } = req.body;
|
|
|
|
if (!username || !password) {
|
|
return res.status(400).json({ error: '请输入用户名和设置密码' });
|
|
}
|
|
|
|
// 检查用户是否已存在
|
|
const [existing] = await db.query('SELECT id FROM users WHERE username = ?', [username]);
|
|
if (existing.length > 0) {
|
|
return res.status(400).json({ error: '该用户名已被使用' });
|
|
}
|
|
|
|
// 密码加密
|
|
const salt = await bcrypt.genSalt(10);
|
|
const hashedPassword = await bcrypt.hash(password, salt);
|
|
|
|
// 插入数据库
|
|
const [result] = await db.query(
|
|
'INSERT INTO users (username, password) VALUES (?, ?)',
|
|
[username, hashedPassword]
|
|
);
|
|
|
|
res.status(201).json({
|
|
success: true,
|
|
message: '注册成功，请去登录'
|
|
});
|
|
|
|
} catch (err) {
|
|
console.error('Registration error:', err);
|
|
res.status(500).json({ error: '服务器内部错误' });
|
|
}
|
|
});
|
|
|
|
module.exports = router;
|