SEEC-Portal-Front/server/controller/user.js

const userModel = require('../model/user');
const jwt = require('jsonwebtoken');
const bcrypt = require('bcrypt');
const secret = require('../config/secret');
const Response = require('../util/response');
const aliClient = require('../util/aliClient');
const getTokenUser = require('../util/tokenProcessor');


class UserController {
    /**
     * 登录
     * @param ctx
     * @returns {Promise.<void>}
     */
    static async login(ctx) {
        const data = ctx.request.body;
        const user = await userModel.findByPhone(data.phone);
        if (user) {
            const confirmRes = bcrypt.compareSync(data.password, user.password);
            if(!confirmRes){
              ctx.body = Response.failed('密码错误，请重试')
            }else if(!user.isValid){
              ctx.body = Response.failed('账号封禁中')
            }else{
                // console.log('ctx',ctx);
              // console.log('ctx.cookies.redirect_uri',ctx.cookies.get('redirect_uri'));
              let redirect_uri = ctx.cookies.get('redirect_uri');
              let client_id = ctx.cookies.get('client_id');

              if(!redirect_uri){
                redirect_uri = ctx.origin+"/api/receiveIDToken";
              }
              if(!client_id){
                client_id = 'seec-portal';
              }

              let data = {
                iss : 'p.seecoder.cn',
                sub: user.phone,
                aud: client_id,
                auth_time: Math.floor(new Date().getTime() / 1000),
                iat: Math.floor(new Date().getTime() / 1000),
                exp: Math.floor(new Date().getTime() / 1000 + 24 * 60 * 60),
                user_info: {phone: user.phone, email: user.email, id: user.id, name: user.name ,role: user.role}
              };
              const token = jwt.sign(data, secret.sign);

              //ctx.redirect(redirect_uri + "?id_token=" + token);
              ctx.cookies.set('redirect_uri', '', {
                maxAge:0
              });
              ctx.cookies.set('client_id', '', {
                maxAge:0
              });

              ctx.body = Response.success({token: token, name: user.name, path:redirect_uri});
            }
        } else {
            ctx.body = Response.failed('此账号不存在');
        }
    }


    /**
     * 注册
     * @param ctx
     * @returns {Promise.<void>}
     */
    static async register(ctx) {
        const myReg=/^[a-zA-Z0-9_-]+@([a-zA-Z0-9]+\.)+(com|cn|net|org)$/;
        const myReg2=/^\w+$/;
        const data = ctx.request.body;

        if(!ctx.session.verification_phone || !ctx.session.verification_code){
          ctx.body = Response.failed('请重新获取验证码');
        }else if(ctx.session.verification_code !== data.identifyCode || ctx.session.verification_phone !== data.phone){
          ctx.body = Response.failed('验证码错误');
        }else if(!myReg.test(data.email)){
          ctx.body = Response.failed('邮箱格式有误');
        }else if(data.name.length<1 || data.name.length>10 || data.password.length<6 || data.password.length>20 || data.phone.length !== 11 || !myReg2.test(data.name)){
          ctx.body = Response.failed('参数非法');
        }else{
          const hashPassword = bcrypt.hashSync(data.password, 10);
          const result = await userModel.create(data.name, hashPassword, data.phone, data.email);
          ctx.session.verification_phone = undefined;
          ctx.session.verification_code = undefined;
          if (result.code === 0) {
            ctx.body = Response.success({name: result.data.name});
          } else if(result.code === -2){
            ctx.body = Response.failed('此手机号已注册');
          } else if(result.code === -1){
            ctx.body = Response.failed('此用户名已使用');
          }
        }
    }

    static async sendMessage(ctx){
      let {phone} = ctx.request.body;


      let code = "";
      for(let i = 0; i < 6; i++){
        code+=Math.floor(Math.random()*10)
      }
      let params =  {
        PhoneNumbers: phone,
        SignName: 'SEECODER',
        TemplateCode: 'SMS_253920073',
        TemplateParam: '{"code":"' + code + '"}'
      };
      let options = {
        timeout: 3000, // default 3000 ms
        formatAction: true, // default true, format the action to Action
        formatParams: true, // default true, format the parameter name to first letter upper case
        method: 'GET', // set the http method, default is GET
        headers: {}, // set the http request headers
      };
      try{
        const result = await aliClient.request('SendSms', params);
        // console.log("result:", result);
        if(result.Code === "OK"){
          ctx.session.maxAge = 5 * 60 * 1000;
          ctx.session.verification_code = code;
          ctx.session.verification_phone = phone;
          // console.log('verification_code:', ctx.session.verification_code);
          ctx.body = Response.success({message: '发送成功'});
        }else{
          console.log("error:", result.message);
          ctx.body = Response.failed("发送失败，请重试");
        }

      }catch (e) {
        console.log(e);
        ctx.body = Response.failed("发送失败，请重试");
      }

    }

  static async getInfo(ctx) {
    let theUser = await getTokenUser(ctx);
    if(!theUser){
      ctx.status = 401;
    }else{
      let id = theUser.id;
      const user = await userModel.findByUid(id);
      if (user) {
        ctx.body = Response.success({phone: user.phone, email: user.email, id: user.id, name: user.name, signature: user.signature});
      } else {
        ctx.body = Response.failed('用户信息获取失败');
      }
    }

  }

  static async saveName(ctx){
    let theUser = await getTokenUser(ctx);
    if(!theUser){
      ctx.status = 401;
    }else{
      let id = theUser.id;
      let newName = ctx.request.body.newName;
      let result = await userModel.updateName(id, newName);
      if(result.code === 0){
        ctx.body = Response.success({});
      }else{
        ctx.body = Response.failed('此昵称已被占用');
      }
    }
  }

  static async saveEmail(ctx){
    let theUser = await getTokenUser(ctx);
    if(!theUser){
      ctx.status = 401;
    }else{
      let id = theUser.id;
      let newEmail = ctx.request.body.newEmail;

      const myReg=/^[a-zA-Z0-9_-]+@([a-zA-Z0-9]+\.)+(com|cn|net|org)$/;

      if(!myReg.test(newEmail)){
        ctx.body = Response.failed('邮箱格式有误');
      }else{
        let result = await userModel.updateEmail(id, newEmail);
        if(result.code === 0){
          ctx.body = Response.success({});
        }else{
          ctx.body = Response.failed('修改失败');
        }
      }

    }
  }

  static async saveSignature(ctx){
    let theUser = await getTokenUser(ctx);
    if(!theUser){
      ctx.status = 401;
    }else{
      let id = theUser.id;
      let newSignature = ctx.request.body.newSignature;

      if(newSignature === 0){
        ctx.body = Response.failed('个性签名不得为空');
      }else if(newSignature > 20){
        ctx.body = Response.failed('个性签名过长');
      }else {
        let result = await userModel.updateSignature(id, newSignature);
        if(result.code === 0){
          ctx.body = Response.success({});
        }else{
          ctx.body = Response.failed('修改失败');
        }
      }
    }
  }

  static async resetPassword(ctx) {
    const data = ctx.request.body;

    if(!ctx.session.verification_phone || !ctx.session.verification_code){
      ctx.body = Response.failed('请重新获取验证码');
    }else if(ctx.session.verification_code !== data.identifyCode || ctx.session.verification_phone !== data.phone){
      ctx.body = Response.failed('验证码错误');
    }else if( data.password.length<6 || data.password.length>20 || data.phone.length !== 11){
      ctx.body = Response.failed('参数非法');
    }else{
      const hashPassword = bcrypt.hashSync(data.password, 10);
      const result = await userModel.resetPassword(data.phone, hashPassword);
      ctx.session.verification_phone = undefined;
      ctx.session.verification_code = undefined;
      if (result) {
        ctx.body = Response.success({});
      }  else {
        ctx.body = Response.failed('此手机号未注册');
      }
    }
  }

}

module.exports = UserController;