feat: align with upstream 1.5.9.9

server/api/auth/webauthn/rename.post.ts

@@ -0,0 +1,52 @@
+import { db, eq, and, userIdentities, sql } from '~/drizzle/db'
+import { createApiError } from '~~/server/utils/apiError'
+
+export default defineEventHandler(async (event) => {
+  const user = event.context.user
+  if (!user) {
+    throw createApiError(401, 'AUTH_UNAUTHORIZED_ACCESS', '未授权访问')
+  }
+
+  interface RenameRequestBody {
+    id: string
+    name: string
+  }
+  const body = await readBody<RenameRequestBody>(event)
+  const { id, name: rawName } = body
+  const name = typeof rawName === 'string' ? rawName.trim() : ''
+
+  if (!id || !name) {
+    throw createApiError(400, 'COMMON_INVALID_PARAMS', '参数错误')
+  }
+
+  if (name.length > 50) {
+    throw createApiError(400, 'AUTH_DEVICE_NAME_TOO_LONG', '设备名称过长')
+  }
+
+  // 查找对应的 Passkey
+  const identity = await db.query.userIdentities.findFirst({
+    where: and(
+      eq(userIdentities.id, id),
+      eq(userIdentities.userId, user.id),
+      eq(userIdentities.provider, 'webauthn')
+    )
+  })
+
+  if (!identity) {
+    throw createApiError(404, 'AUTH_DEVICE_NOT_FOUND', '未找到该设备')
+  }
+
+  try {
+    // 使用 jsonb_set 原子更新 label，避免覆盖 concurrent login 产生的 counter 更新
+    await db.update(userIdentities)
+      .set({ 
+        providerUsername: sql`jsonb_set(${userIdentities.providerUsername}::jsonb, '{label}', ${JSON.stringify(name)}::jsonb)::text` 
+      })
+      .where(eq(userIdentities.id, id))
+
+    return { success: true }
+  } catch (e) {
+    console.error('更新设备名称失败:', e)
+    throw createApiError(500, 'AUTH_UPDATE_FAILED', '更新失败')
+  }
+})