Henry_Du/BYW-VoiceHub
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: 迁移自定义功能至 1.5.9.9 版本

Browse Source 
包含音乐源限制、CI 防 OOM 优化、数据库连接池优化、管理端权限及 UI 细节定制等功能
This commit is contained in:
Henry_Du
2026-09-12 19:26:42 +08:00
parent 34f0679117
commit 1106aeea6c
161 changed files with 18963 additions and 27900 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/api/admin/users/[id]/reset-password.post.ts
+46 -58
View File
@@ -1,26 +1,18 @@
import { eq } from 'drizzle-orm'
import { updateUserPassword } from '~~/server/services/userService'
import { db } from '~/drizzle/db'
import { users } from '~/drizzle/schema'
import { updateUserPassword } from '~~/server/services/userService'
import {
PASSWORD_AUDIT_ACTIONS,
getPasswordAuditContext,
recordPasswordAudit
} from '~~/server/services/passwordSecurityService'
import { createApiError } from '~~/server/utils/apiError'
import { getAdminPasswordViolation } from '~~/server/utils/admin-password-policy'
import { eq } from 'drizzle-orm'
import { canResetPasswordFor, getRoleLevel } from '~~/server/utils/permissions'
export default defineEventHandler(async (event) => {
// 检查认证和权限
const user = event.context.user
if (!user || !['ADMIN', 'SUPER_ADMIN'].includes(user.role)) {
const currentUser = event.context.user
if (!currentUser || !['ADMIN', 'SUPER_ADMIN'].includes(currentUser.role)) {
throw createError({
statusCode: 403,
message: '没有权限访问'
})
}
// 安全获取ID参数
const params = event.context.params || {}
const id = parseInt(params.id || '')
@@ -31,39 +23,38 @@ export default defineEventHandler(async (event) => {
})
}
const body = await readBody<Record<string, unknown> | null>(event)
const newPassword = typeof body?.newPassword === 'string' ? body.newPassword.trim() : ''
const body = await readBody(event)
// 管理员重置为临时密码且 forceReset 强制用户登录后修改，仅做基础校验不要求完整复杂度
const violation = getAdminPasswordViolation(newPassword)
if (violation) {
throw createApiError(400, violation.code, violation.message)
if (!body.newPassword) {
throw createError({
statusCode: 400,
message: '新密码不能为空'
})
}
try {
// 查询目标用户用于越级保护
const targetUsers = await db
.select({ id: users.id, role: users.role })
.from(users)
.where(eq(users.id, id))
.limit(1)
const targetUser = targetUsers[0]
if (!targetUser) {
throw createError({
statusCode: 404,
message: '用户不存在'
})
}
// 禁止对自身进行密码重置（通过用户管理界面）
if (id === user.id) {
if (id === currentUser.id) {
throw createError({
statusCode: 400,
message: '禁止在用户管理中重置自己的密码'
})
}
// 禁止重置系统初始超级管理员 (ID: 1)
const targetUserResult = await db
.select({ id: users.id, role: users.role, username: users.username })
.from(users)
.where(eq(users.id, id))
.limit(1)
if (targetUserResult.length === 0) {
throw createError({
statusCode: 404,
message: '用户不存在'
})
}
const targetUser = targetUserResult[0]
if (targetUser.id === 1) {
throw createError({
statusCode: 403,
@@ -71,39 +62,36 @@ export default defineEventHandler(async (event) => {
})
}
// 越级保护：目标用户是 SUPER_ADMIN 时，操作者必须是 SUPER_ADMIN
if (targetUser.role === 'SUPER_ADMIN' && user.role !== 'SUPER_ADMIN') {
const currentLevel = getRoleLevel(currentUser.role)
const targetLevel = getRoleLevel(targetUser.role)
if (currentUser.role !== 'SUPER_ADMIN') {
if (currentLevel <= targetLevel) {
throw createError({
statusCode: 403,
message: '权限不足：不能重置角色级别大于等于自己的用户密码'
})
}
}
if (!canResetPasswordFor(currentUser, targetUser)) {
throw createError({
statusCode: 403,
message: '权限不足：普通管理员无法重置超级管理员密码'
message: '权限不足：当前角色无法重置该用户的密码'
})
}
// 使用统一服务重置密码 (forceReset = true)
await updateUserPassword(id, newPassword, {
forceReset: true,
auditContext: {
action: PASSWORD_AUDIT_ACTIONS.RESET_PASSWORD,
actorId: user.id,
...getPasswordAuditContext(event)
}
})
await updateUserPassword(id, body.newPassword, true)
return {
success: true,
message: '密码重置成功'
}
} catch (error) {
await recordPasswordAudit(
event,
id,
PASSWORD_AUDIT_ACTIONS.RESET_PASSWORD,
false,
error instanceof Error ? error.message : '管理员重置密码失败',
user.id
)
console.error('重置密码失败:', error)
if (error && typeof error === 'object' && 'statusCode' in error) throw error
console.error('[ResetPassword] 失败:', error)
if (error.statusCode) {
throw error
}
throw createError({
statusCode: 500,
message: '重置密码失败'
server/api/admin/users/[id]/songs.get.ts
+6 -7
View File
@@ -9,7 +9,7 @@ export default defineEventHandler(async (event) => {
if (!currentUser) {
throw createError({
statusCode: 401,
message: '未授权访问'
statusMessage: '未授权访问'
})
}
@@ -18,16 +18,16 @@ export default defineEventHandler(async (event) => {
if (!allowedRoles.includes(currentUser.role)) {
throw createError({
statusCode: 403,
message: '权限不足'
statusMessage: '权限不足'
})
}
// 获取用户 ID
// 获取用户ID
const userId = parseInt(getRouterParam(event, 'id') as string)
if (!userId || isNaN(userId)) {
throw createError({
statusCode: 400,
message: '无效的用户 ID'
statusMessage: '无效的用户ID'
})
}
@@ -49,7 +49,7 @@ export default defineEventHandler(async (event) => {
if (!user) {
throw createError({
statusCode: 404,
message: '用户不存在'
statusMessage: '用户不存在'
})
}
@@ -60,7 +60,6 @@ export default defineEventHandler(async (event) => {
title: songs.title,
artist: songs.artist,
semester: songs.semester,
durationSeconds: songs.durationSeconds,
createdAt: songs.createdAt,
played: songs.played
})
@@ -267,7 +266,7 @@ export default defineEventHandler(async (event) => {
throw createError({
statusCode: 500,
message: '服务器内部错误'
statusMessage: '服务器内部错误'
})
}
})
server/api/admin/users/[id]/status-logs.get.ts
+5 -5
View File
@@ -11,7 +11,7 @@ export default defineEventHandler(async (event) => {
if (!user || !['ADMIN', 'SUPER_ADMIN'].includes(user.role)) {
throw createError({
statusCode: 403,
message: '没有权限访问'
statusMessage: '没有权限访问'
})
}
@@ -19,12 +19,12 @@ export default defineEventHandler(async (event) => {
const query = getQuery(event)
const { page = '1', limit = '20' } = query
// 验证用户 ID
// 验证用户ID
const numUserId = parseInt(userId)
if (isNaN(numUserId) || numUserId <= 0) {
throw createError({
statusCode: 400,
message: '无效的用户 ID'
statusMessage: '无效的用户ID'
})
}
@@ -42,7 +42,7 @@ export default defineEventHandler(async (event) => {
if (existingUser.length === 0) {
throw createError({
statusCode: 404,
message: '用户不存在'
statusMessage: '用户不存在'
})
}
@@ -117,7 +117,7 @@ export default defineEventHandler(async (event) => {
throw createError({
statusCode: 500,
message: '获取用户状态变更日志失败：' + error.message
statusMessage: '获取用户状态变更日志失败: ' + error.message
})
}
})
server/api/admin/users/[id]/status.put.ts
+16 -14
View File
@@ -4,8 +4,6 @@ import { users, userStatusLogs } from '~/drizzle/schema'
import { eq } from 'drizzle-orm'
import { getBeijingTime } from '~/utils/timeUtils'
import { getStatusText } from '~~/server/utils/user'
import { createApiError } from '~~/server/utils/apiError'
import { SERVER_ERROR_CODES } from '~~/server/config/constants'
export default defineEventHandler(async (event) => {
try {
@@ -14,7 +12,7 @@ export default defineEventHandler(async (event) => {
if (!user || !['ADMIN', 'SUPER_ADMIN'].includes(user.role)) {
throw createError({
statusCode: 403,
message: '没有权限访问'
statusMessage: '没有权限访问'
})
}
@@ -26,14 +24,14 @@ export default defineEventHandler(async (event) => {
if (!status || !['active', 'withdrawn', 'graduate'].includes(status)) {
throw createError({
statusCode: 400,
message: '状态必须为 active, withdrawn 或 graduate'
statusMessage: '状态必须为 active, withdrawn 或 graduate'
})
}
if (!reason || reason.trim().length === 0) {
throw createError({
statusCode: 400,
message: '变更原因为必填项'
statusMessage: '变更原因为必填项'
})
}
@@ -53,22 +51,17 @@ export default defineEventHandler(async (event) => {
if (existingUser.length === 0) {
throw createError({
statusCode: 404,
message: '用户不存在'
statusMessage: '用户不存在'
})
}
const targetUser = existingUser[0]
// 待审核用户不得通过状态接口直接置为 active（须走注册审核流程）
if (targetUser.status === 'pending' && status === 'active') {
throw createApiError(400, SERVER_ERROR_CODES.USER_NOT_PENDING, '待审核用户需通过注册审核流程处理')
}
// 检查是否为学生用户
if (targetUser.role !== 'USER') {
throw createError({
statusCode: 400,
message: '只能修改学生用户的状态'
statusMessage: '只能修改学生用户的状态'
})
}
@@ -76,7 +69,7 @@ export default defineEventHandler(async (event) => {
if (targetUser.status === status) {
throw createError({
statusCode: 400,
message: '用户状态未发生变化'
statusMessage: '用户状态未发生变化'
})
}
@@ -106,6 +99,15 @@ export default defineEventHandler(async (event) => {
})
})
// 清除相关缓存
try {
const { cache } = await import('~~/server/utils/cache-helpers')
await cache.delete(`auth:user:${parseInt(userId)}`)
console.log('[Cache] 用户认证缓存已清除（状态更新）')
} catch (cacheError) {
console.warn('[Cache] 清除缓存失败:', cacheError)
}
return {
success: true,
message: `用户状态已更新为${getStatusText(status)}`,
@@ -126,7 +128,7 @@ export default defineEventHandler(async (event) => {
throw createError({
statusCode: 500,
message: '更新用户状态失败: ' + error.message
statusMessage: '更新用户状态失败: ' + error.message
})
}
})