63 lines
1.9 KiB
TypeScript
63 lines
1.9 KiB
TypeScript
import { createSessionRecord, normalizeEmail, setSessionCookie, toPublicAccount, verifyPassword } from "@/modules/core/server/auth";
|
|
import { jsonFailure, jsonSuccess, readJsonBody } from "@/modules/core/server/api";
|
|
import { recordAuditLog } from "@/modules/core/server/audit";
|
|
import { updateData } from "@/modules/core/server/store";
|
|
|
|
function isRecord(value: unknown): value is Record<string, unknown> {
|
|
return typeof value === "object" && value !== null && !Array.isArray(value);
|
|
}
|
|
|
|
function readString(source: Record<string, unknown>, key: string): string {
|
|
const value = source[key];
|
|
return typeof value === "string" ? value.trim() : "";
|
|
}
|
|
|
|
export async function POST(request: Request): Promise<Response> {
|
|
const body = await readJsonBody(request);
|
|
if (!isRecord(body)) {
|
|
return jsonFailure("请求数据格式无效");
|
|
}
|
|
|
|
const email = normalizeEmail(readString(body, "email"));
|
|
const password = readString(body, "password");
|
|
|
|
if (!email || !password) {
|
|
return jsonFailure("邮箱和密码不能为空");
|
|
}
|
|
|
|
const result = await updateData((data) => {
|
|
const account = data.accounts.find((item) => item.email === email);
|
|
if (!account || account.status !== "active" || !verifyPassword(password, account)) {
|
|
return null;
|
|
}
|
|
|
|
const session = createSessionRecord(account.id);
|
|
data.sessions.push(session);
|
|
return { account, session };
|
|
});
|
|
|
|
if (!result) {
|
|
await recordAuditLog({
|
|
action: "auth.login",
|
|
targetType: "account",
|
|
result: "failure",
|
|
reason: `登录失败：${email}`,
|
|
});
|
|
return jsonFailure("账号或密码错误", 401);
|
|
}
|
|
|
|
await setSessionCookie(result.session.id);
|
|
const account = toPublicAccount(result.account);
|
|
await recordAuditLog({
|
|
actor: account,
|
|
action: "auth.login",
|
|
targetType: "account",
|
|
targetId: account.id,
|
|
result: "success",
|
|
reason: "登录成功",
|
|
});
|
|
|
|
return jsonSuccess("登录成功", { account });
|
|
}
|
|
|