42 lines
1.4 KiB
TypeScript
42 lines
1.4 KiB
TypeScript
import { loginWithPassword, setSessionCookie } from "@/modules/core/server/auth";
|
|
import { jsonFailure, jsonSuccess, readJsonBody } from "@/modules/core/server/api";
|
|
import { recordAuditLog } from "@/modules/core/server/audit";
|
|
|
|
function isRecord(value: unknown): value is Record<string, unknown> {
|
|
return typeof value === "object" && value !== null && !Array.isArray(value);
|
|
}
|
|
|
|
function readString(source: Record<string, unknown>, key: string): string {
|
|
const value = source[key];
|
|
return typeof value === "string" ? value.trim() : "";
|
|
}
|
|
|
|
export async function POST(request: Request): Promise<Response> {
|
|
const body = await readJsonBody(request);
|
|
if (!isRecord(body)) {
|
|
return jsonFailure("请求数据格式无效");
|
|
}
|
|
|
|
const email = readString(body, "email");
|
|
const password = readString(body, "password");
|
|
|
|
if (!email || !password) {
|
|
return jsonFailure("邮箱和密码不能为空");
|
|
}
|
|
|
|
try {
|
|
const result = await loginWithPassword({ email, password });
|
|
await setSessionCookie(result.session.id);
|
|
return jsonSuccess("登录成功", { account: result.account });
|
|
} catch (error) {
|
|
await recordAuditLog({
|
|
action: "account.login",
|
|
targetType: "account",
|
|
result: "failure",
|
|
reason: `登录失败：${email}`,
|
|
});
|
|
const reason = error instanceof Error ? error.message : "登录失败";
|
|
return jsonFailure(reason, 401);
|
|
}
|
|
}
|