初次提交

server/api/user/email/send-code.post.ts

@@ -0,0 +1,78 @@
+import { db } from '~/drizzle/db'
+import { users } from '~/drizzle/schema'
+import { eq } from 'drizzle-orm'
+import { SmtpService } from '~~/server/services/smtpService'
+import { getClientIP } from '~~/server/utils/ip-utils'
+
+// 简易验证码存储（如需分布式/重启持久，建议迁移到Redis）
+const emailVerificationCodes = new Map<
+  string,
+  { code: string; userId: number | null; expiresAt: number }
+>()
+
+function generateCode(): string {
+  return Math.floor(100000 + Math.random() * 900000).toString()
+}
+
+export async function sendEmailVerificationCode(
+  userId: number | null,
+  email: string,
+  name?: string,
+  ipAddress?: string
+) {
+  const code = generateCode()
+  const expiresAt = Date.now() + 5 * 60 * 1000
+  emailVerificationCodes.set(email, { code, userId, expiresAt })
+
+  const smtp = SmtpService.getInstance()
+  await smtp.initializeSmtpConfig()
+  const sent = await smtp.renderAndSend(
+    email,
+    'verification.code',
+    {
+      name: name || '用户',
+      email,
+      code,
+      expiresInMinutes: 5
+    },
+    ipAddress
+  )
+  if (!sent) {
+    throw createError({ statusCode: 500, message: '验证码发送失败，请稍后重试' })
+  }
+}
+
+export default defineEventHandler(async (event) => {
+  if (getMethod(event) !== 'POST') {
+    throw createError({ statusCode: 405, message: '方法不被允许' })
+  }
+
+  const user = event.context.user
+  if (!user) {
+    throw createError({ statusCode: 401, message: '未授权访问' })
+  }
+
+  const body = await readBody(event)
+  const emailRaw = (body?.email || '').toString().trim().toLowerCase()
+  const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/
+
+  if (!emailRaw || !emailRegex.test(emailRaw)) {
+    throw createError({ statusCode: 400, message: '请输入有效的邮箱地址' })
+  }
+
+  // 确认邮箱未被其他用户占用
+  const existing = await db.select().from(users).where(eq(users.email, emailRaw)).limit(1)
+  if (existing.length > 0 && existing[0].id !== user.id) {
+    throw createError({ statusCode: 400, message: '该邮箱已被其他用户绑定' })
+  }
+
+  // 获取客户端IP地址
+  const clientIP = getClientIP(event)
+
+  // 发送邮件验证码
+  await sendEmailVerificationCode(user.id, emailRaw, user.name, clientIP)
+
+  return { success: true, message: '验证码已发送，请查收邮箱' }
+})
+
+export { emailVerificationCodes }