39 lines
1.4 KiB
TypeScript
39 lines
1.4 KiB
TypeScript
import { db } from '~/drizzle/db'
|
|
import { users } from '~/drizzle/schema'
|
|
import { eq } from 'drizzle-orm'
|
|
import { getClientIP } from '~~/server/utils/ip-utils'
|
|
import { sendEmailVerificationCode } from '~~/server/api/user/email/send-code.post'
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
if (getMethod(event) !== 'POST') {
|
|
throw createError({ statusCode: 405, message: '方法不被允许' })
|
|
}
|
|
|
|
const body = await readBody(event)
|
|
const emailRaw = (body?.email || '').toString().trim().toLowerCase()
|
|
const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/
|
|
|
|
if (!emailRaw || !emailRegex.test(emailRaw)) {
|
|
throw createError({ statusCode: 400, message: '请输入有效的邮箱地址' })
|
|
}
|
|
|
|
// 确认邮箱未被占用
|
|
const existing = await db.select().from(users).where(eq(users.email, emailRaw)).limit(1)
|
|
|
|
// 检查是否为已登录用户的修改邮箱请求
|
|
const user = event.context.user
|
|
if (existing.length > 0) {
|
|
if (!user || existing[0].id !== user.id) {
|
|
throw createError({ statusCode: 400, message: '该邮箱已被其他用户绑定' })
|
|
}
|
|
}
|
|
|
|
// 获取客户端IP地址
|
|
const clientIP = getClientIP(event)
|
|
|
|
// 发送邮件验证码
|
|
await sendEmailVerificationCode(user?.id || null, emailRaw, user?.name || '新用户', clientIP)
|
|
|
|
return { success: true, message: '验证码已发送，请查收邮箱' }
|
|
})
|