初次提交

server/api/user/profile.put.ts

@@ -0,0 +1,108 @@
+import { and, db, eq, sql, users } from '~/drizzle/db'
+import { emailVerificationCodes } from '~~/server/api/user/email/send-code.post'
+
+export default defineEventHandler(async (event) => {
+  const user = event.context.user
+  if (!user) {
+    throw createError({
+      statusCode: 401,
+      message: '未登录'
+    })
+  }
+
+  const body = await readBody(event)
+
+  if (body.name) {
+    const chineseRegex = /^[\u4e00-\u9fa5]+$/
+    if (!chineseRegex.test(body.name)) {
+      throw createError({
+        statusCode: 400,
+        message: '姓名/昵称只能包含汉字'
+      })
+    }
+  }
+
+  const rawEmail = typeof body.email === 'string' ? body.email.trim() : ''
+  const email = rawEmail ? rawEmail.toLowerCase() : null
+
+  if (email) {
+    const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/
+    if (!emailRegex.test(email)) {
+      throw createError({
+        statusCode: 400,
+        message: '邮箱格式不正确'
+      })
+    }
+
+    const existingEmailUser = await db
+      .select({ id: users.id })
+      .from(users)
+      .where(and(eq(users.email, email), sql`${users.id} != ${user.id}`))
+      .limit(1)
+
+    if (existingEmailUser.length > 0) {
+      throw createError({
+        statusCode: 409,
+        message: '邮箱已被绑定'
+      })
+    }
+  }
+
+  try {
+    const current = await db
+      .select({ email: users.email })
+      .from(users)
+      .where(eq(users.id, user.id))
+      .limit(1)
+    const currentEmail = current[0]?.email || null
+
+    if (email !== currentEmail && email) {
+      if (!body.emailCode) {
+        throw createError({ statusCode: 400, message: '请提供邮箱验证码' })
+      }
+      
+      const storedData = emailVerificationCodes.get(email)
+      
+      if (!storedData) {
+        throw createError({ statusCode: 400, message: '请先获取邮箱验证码' })
+      }
+      if (Date.now() > storedData.expiresAt) {
+        emailVerificationCodes.delete(email)
+        throw createError({ statusCode: 400, message: '验证码已过期，请重新获取' })
+      }
+      if (storedData.code !== body.emailCode.trim()) {
+        throw createError({ statusCode: 400, message: '邮箱验证码不正确' })
+      }
+      
+      // 验证通过，清理验证码
+      emailVerificationCodes.delete(email)
+    }
+
+    const updateData: any = {
+      name: body.name || null,
+      grade: body.grade || null,
+      class: body.class || null,
+      studentId: body.studentId || null,
+      updatedAt: new Date()
+    }
+
+    if (email !== currentEmail) {
+      updateData.email = email
+      updateData.emailVerified = !!email // 修改后，如果有email说明已经通过验证码验证
+    } else {
+      updateData.email = email
+    }
+
+    await db
+      .update(users)
+      .set(updateData)
+      .where(eq(users.id, user.id))
+
+    return { success: true }
+  } catch (error: any) {
+    throw createError({
+      statusCode: 500,
+      message: '更新个人信息失败'
+    })
+  }
+})