feat: align with upstream 1.5.9.9

2026-09-12 18:21:11 +08:00
commit 34f0679117
805 changed files with 376275 additions and 0 deletions
@@ -0,0 +1,83 @@
+import { apiKeyPermissions, apiKeys, db } from '~/drizzle/db'
+import { and, eq, sql } from 'drizzle-orm'
+import { z } from 'zod'
+import { createApiError } from '~~/server/utils/apiError'
+
+const PERSONAL_PERMISSION = 'songs:request'
+const apiKeyIdSchema = z.string().uuid('无效的令牌 ID')
+
+export default defineEventHandler(async (event) => {
+  const user = event.context.user
+  if (!user) {
+    throw createApiError(401, 'AUTH_LOGIN_REQUIRED', '请先登录')
+  }
+
+  const apiKeyIdRaw = getRouterParam(event, 'id')
+  if (!apiKeyIdRaw) {
+    throw createApiError(400, 'USER_API_KEY_ID_REQUIRED', '令牌 ID 不能为空')
+  }
+
+  const parsedApiKeyId = apiKeyIdSchema.safeParse(apiKeyIdRaw)
+  if (!parsedApiKeyId.success) {
+    throw createApiError(
+      400,
+      'USER_API_KEY_ID_INVALID',
+      parsedApiKeyId.error.issues[0]?.message || '无效的令牌 ID'
+    )
+  }
+
+  const apiKeyId = parsedApiKeyId.data
+
+  try {
+    const existingApiKey = await db
+      .select({
+        id: apiKeys.id,
+        name: apiKeys.name
+      })
+      .from(apiKeys)
+      .innerJoin(apiKeyPermissions, eq(apiKeyPermissions.apiKeyId, apiKeys.id))
+      .where(
+        and(
+          eq(apiKeys.id, apiKeyId),
+          eq(apiKeys.createdByUserId, user.id),
+          eq(apiKeyPermissions.permission, PERSONAL_PERMISSION),
+          sql`NOT EXISTS (
+            SELECT 1
+            FROM ${apiKeyPermissions}
+            WHERE ${apiKeyPermissions.apiKeyId} = ${apiKeys.id}
+              AND ${apiKeyPermissions.permission} != ${PERSONAL_PERMISSION}
+          )`
+        )
+      )
+      .limit(1)
+
+    if (existingApiKey.length === 0) {
+      throw createApiError(404, 'USER_API_KEY_NOT_FOUND', '个人集成令牌不存在')
+    }
+
+    const apiKey = existingApiKey[0]
+    if (!apiKey) {
+      throw createApiError(404, 'USER_API_KEY_NOT_FOUND', '个人集成令牌不存在')
+    }
+
+    await db.transaction(async (tx) => {
+      await tx.delete(apiKeyPermissions).where(eq(apiKeyPermissions.apiKeyId, apiKeyId))
+      await tx.delete(apiKeys).where(eq(apiKeys.id, apiKeyId))
+    })
+
+    return {
+      success: true,
+      message: `个人集成令牌 "${apiKey.name}" 已删除`,
+      data: {
+        id: apiKeyId,
+        name: apiKey.name
+      }
+    }
+  } catch (error: any) {
+    if (error.statusCode) {
+      throw error
+    }
+
+    throw createApiError(500, 'USER_API_KEY_DELETE_FAILED_DETAIL', `删除个人集成令牌失败：${error.message}`, { params: [error.message] })
+  }
+})