搭建用户体系

2026-07-03 23:40:33 +08:00
parent 37a9f865ed
commit 2df19fcd02
40 changed files with 2622 additions and 0 deletions
@@ -0,0 +1,178 @@
+package handlers
+
+import (
+	"fmt"
+	"net/http"
+	"strings"
+
+	"stock-user-system/internal/config"
+	"stock-user-system/internal/middleware"
+	"stock-user-system/internal/models"
+
+	"github.com/gin-gonic/gin"
+	"golang.org/x/crypto/bcrypt"
+	"gorm.io/gorm"
+)
+
+type AuthHandler struct {
+	DB  *gorm.DB
+	CFG *config.Config
+}
+
+func (h *AuthHandler) Register(c *gin.Context) {
+	var req struct {
+		Username string  `json:"username" binding:"required"`
+		Email    *string `json:"email"`
+		Password string  `json:"password" binding:"required"`
+	}
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "请求参数错误"})
+		return
+	}
+
+	if err := validateUsername(req.Username); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": err.Error()})
+		return
+	}
+	if len(req.Password) < 6 {
+		c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "密码长度至少 6 位"})
+		return
+	}
+
+	username := strings.ToLower(strings.TrimSpace(req.Username))
+
+	var role models.Role
+	if err := h.DB.Where("name = ?", models.RoleUser).First(&role).Error; err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"success": false, "error": "internal server error"})
+		return
+	}
+
+	hash, err := hashPassword(req.Password)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"success": false, "error": "internal server error"})
+		return
+	}
+
+	var email *string
+	if req.Email != nil && *req.Email != "" {
+		e := strings.ToLower(strings.TrimSpace(*req.Email))
+		email = &e
+	}
+
+	user := models.User{
+		Username:     username,
+		Email:        email,
+		PasswordHash: hash,
+		RoleID:       role.ID,
+		Status:       "active",
+	}
+
+	if err := h.DB.Create(&user).Error; err != nil {
+		if strings.Contains(err.Error(), "duplicate key") {
+			c.JSON(http.StatusConflict, gin.H{"success": false, "error": "用户名或邮箱已存在"})
+			return
+		}
+		c.JSON(http.StatusInternalServerError, gin.H{"success": false, "error": "internal server error"})
+		return
+	}
+
+	if err := h.DB.Preload("Role").First(&user, "id = ?", user.ID).Error; err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"success": false, "error": "internal server error"})
+		return
+	}
+
+	token, err := middleware.GenerateToken(user.ID, models.RoleUser, h.CFG)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"success": false, "error": "internal server error"})
+		return
+	}
+
+	c.JSON(http.StatusOK, gin.H{
+		"token": token,
+		"user":  user.ToPublicInfo(),
+	})
+}
+
+func (h *AuthHandler) Login(c *gin.Context) {
+	var req struct {
+		Username string `json:"username" binding:"required"`
+		Password string `json:"password" binding:"required"`
+	}
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "请求参数错误"})
+		return
+	}
+
+	username := strings.ToLower(strings.TrimSpace(req.Username))
+
+	var user models.User
+	if err := h.DB.Preload("Role").Where("LOWER(username) = ?", username).First(&user).Error; err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "用户名或密码错误"})
+		return
+	}
+
+	if user.Status != "active" {
+		c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "账号已被禁用"})
+		return
+	}
+
+	if err := bcrypt.CompareHashAndPassword([]byte(user.PasswordHash), []byte(req.Password)); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "用户名或密码错误"})
+		return
+	}
+
+	token, err := middleware.GenerateToken(user.ID, user.Role.NameEnum(), h.CFG)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"success": false, "error": "internal server error"})
+		return
+	}
+
+	c.JSON(http.StatusOK, gin.H{
+		"token": token,
+		"user":  user.ToPublicInfo(),
+	})
+}
+
+func (h *AuthHandler) Me(c *gin.Context) {
+	current, ok := middleware.GetCurrentUser(c)
+	if !ok {
+		c.JSON(http.StatusUnauthorized, gin.H{"success": false, "error": "访问令牌无效或已过期"})
+		return
+	}
+
+	var user models.User
+	if err := h.DB.Preload("Role").Where("id = ?", current.ID).First(&user).Error; err != nil {
+		c.JSON(http.StatusNotFound, gin.H{"success": false, "error": "not found"})
+		return
+	}
+
+	c.JSON(http.StatusOK, user.ToPublicInfo())
+}
+
+func (h *AuthHandler) Logout(c *gin.Context) {
+	c.JSON(http.StatusOK, gin.H{"message": "登出成功"})
+}
+
+func (h *AuthHandler) PublicInfo(c *gin.Context) {
+	c.JSON(http.StatusOK, gin.H{
+		"message":       "欢迎访问 A股工具公开信息",
+		"guest_allowed": true,
+	})
+}
+
+func hashPassword(password string) (string, error) {
+	bytes, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
+	return string(bytes), err
+}
+
+func validateUsername(username string) error {
+	if len(username) < 3 || len(username) > 32 {
+		return fmt.Errorf("用户名长度需在 3-32 位之间")
+	}
+	for _, r := range username {
+		if !(r >= 'a' && r <= 'z') && !(r >= 'A' && r <= 'Z') && !(r >= '0' && r <= '9') && r != '_' && r != '-' {
+			return fmt.Errorf("用户名只能包含字母、数字、下划线和短横线")
+		}
+	}
+	return nil
+}