68 lines
1.6 KiB
TypeScript
68 lines
1.6 KiB
TypeScript
import bcrypt from 'bcrypt'
|
|
import { db } from '~/drizzle/db'
|
|
import { users } from '~/drizzle/schema'
|
|
import { eq } from 'drizzle-orm'
|
|
import { getBeijingTime } from '~/utils/timeUtils'
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
try {
|
|
// 检查认证
|
|
const user = event.context.user
|
|
if (!user) {
|
|
throw createError({
|
|
statusCode: 401,
|
|
message: '未授权'
|
|
})
|
|
}
|
|
|
|
const body = await readBody(event)
|
|
if (!body.newPassword) {
|
|
throw createError({
|
|
statusCode: 400,
|
|
message: '新密码不能为空'
|
|
})
|
|
}
|
|
|
|
// 获取用户信息
|
|
const currentUserResult = await db.select().from(users).where(eq(users.id, user.id)).limit(1)
|
|
const currentUser = currentUserResult[0]
|
|
if (!currentUser) {
|
|
throw createError({
|
|
statusCode: 404,
|
|
message: '用户不存在'
|
|
})
|
|
}
|
|
|
|
// 检查是否需要设置初始密码
|
|
if (currentUser.passwordChangedAt) {
|
|
throw createError({
|
|
statusCode: 400,
|
|
message: '您已经设置过密码，请使用修改密码功能'
|
|
})
|
|
}
|
|
|
|
// 加密新密码
|
|
const hashedPassword = await bcrypt.hash(body.newPassword, 10)
|
|
|
|
// 更新密码
|
|
await db
|
|
.update(users)
|
|
.set({
|
|
password: hashedPassword,
|
|
passwordChangedAt: getBeijingTime(),
|
|
forcePasswordChange: false
|
|
})
|
|
.where(eq(users.id, user.id))
|
|
|
|
return {
|
|
success: true,
|
|
message: '初始密码设置成功'
|
|
}
|
|
} catch (error: any) {
|
|
throw createError({
|
|
statusCode: error.statusCode || 500,
|
|
message: error.message || '初始密码设置失败'
|
|
})
|
|
}
|
|
})
|