初次提交

2026-09-06 08:19:02 +08:00
commit 4ce4649aaf
1061 changed files with 337258 additions and 0 deletions
@@ -0,0 +1,56 @@
+import { updateUserPassword } from '~~/server/services/userService'
+
+export default defineEventHandler(async (event) => {
+  // 检查认证和权限
+  const user = event.context.user
+  if (!user || !['ADMIN', 'SUPER_ADMIN'].includes(user.role)) {
+    throw createError({
+      statusCode: 403,
+      message: '没有权限访问'
+    })
+  }
+
+  // 安全获取ID参数
+  const params = event.context.params || {}
+  const id = parseInt(params.id || '')
+
+  if (isNaN(id)) {
+    throw createError({
+      statusCode: 400,
+      message: '无效的用户ID'
+    })
+  }
+
+  const body = await readBody(event)
+
+  if (!body.newPassword) {
+    throw createError({
+      statusCode: 400,
+      message: '新密码不能为空'
+    })
+  }
+
+  try {
+    // 禁止对自身进行密码重置（通过用户管理界面）
+    if (id === user.id) {
+      throw createError({
+        statusCode: 400,
+        message: '禁止在用户管理中重置自己的密码'
+      })
+    }
+    
+    // 使用统一服务重置密码 (forceReset = true)
+    await updateUserPassword(id, body.newPassword, true)
+
+    return {
+      success: true,
+      message: '密码重置成功'
+    }
+  } catch (error) {
+    console.error('重置密码失败:', error)
+    throw createError({
+      statusCode: 500,
+      message: '重置密码失败'
+    })
+  }
+})