qinglong/back/api/auth.ts

import { Router, Request, Response, NextFunction } from 'express';
import { Container } from 'typedi';
import { Logger } from 'winston';
import * as fs from 'fs';
import config from '../config';
import jwt from 'jsonwebtoken';
import { createRandomString } from '../config/util';
import crypto from 'crypto';
const route = Router();

export default (app: Router) => {
  app.use('/', route);
  route.post(
    '/login',
    async (req: Request, res: Response, next: NextFunction) => {
      const logger: Logger = Container.get('logger');
      try {
        let username = req.body.username;
        let password = req.body.password;
        fs.readFile(config.authConfigFile, 'utf8', function (err, data) {
          if (err) console.log(err);
          const authInfo = JSON.parse(data);
          if (username && password) {
            if (
              authInfo.username === 'admin' &&
              authInfo.password === 'adminadmin'
            ) {
              const newPassword = createRandomString(16, 22);
              fs.writeFileSync(
                config.authConfigFile,
                JSON.stringify({
                  username: authInfo.username,
                  password: newPassword,
                }),
              );
              return res.send({
                code: 100,
                msg: '已初始化密码，请前往auth.json查看并重新登录',
              });
            }
            if (
              username == authInfo.username &&
              password == authInfo.password
            ) {
              const data = createRandomString(50, 100);
              let token = jwt.sign({ data }, config.secret as any, {
                expiresIn: 60 * 60 * 24 * 3,
                algorithm: 'HS384',
              });
              fs.writeFileSync(
                config.authConfigFile,
                JSON.stringify({
                  username: authInfo.username,
                  password: authInfo.password,
                  token,
                }),
              );
              res.send({ code: 200, token });
            } else {
              res.send({ code: 400, msg: config.authError });
            }
          } else {
            res.send({ err: 400, msg: '请输入用户名密码!' });
          }
        });
      } catch (e) {
        logger.error('🔥 error: %o', e);
        return next(e);
      }
    },
  );

  route.post(
    '/logout',
    async (req: Request, res: Response, next: NextFunction) => {
      const logger: Logger = Container.get('logger');
      try {
        fs.readFile(config.authConfigFile, 'utf8', function (err, data) {
          if (err) console.log(err);
          const authInfo = JSON.parse(data);
          fs.writeFileSync(
            config.authConfigFile,
            JSON.stringify({
              username: authInfo.username,
              password: authInfo.password,
            }),
          );
          res.send({ code: 200 });
        });
      } catch (e) {
        logger.error('🔥 error: %o', e);
        return next(e);
      }
    },
  );

  route.post(
    '/user',
    async (req: Request, res: Response, next: NextFunction) => {
      const logger: Logger = Container.get('logger');
      try {
        fs.writeFile(config.authConfigFile, JSON.stringify(req.body), (err) => {
          if (err) console.log(err);
          res.send({ code: 200, msg: '更新成功' });
        });
      } catch (e) {
        logger.error('🔥 error: %o', e);
        return next(e);
      }
    },
  );

  route.get(
    '/user',
    async (req: Request, res: Response, next: NextFunction) => {
      const logger: Logger = Container.get('logger');
      try {
        fs.readFile(config.authConfigFile, 'utf8', (err, data) => {
          if (err) console.log(err);
          const authInfo = JSON.parse(data);
          res.send({ code: 200, data: { username: authInfo.username } });
        });
      } catch (e) {
        logger.error('🔥 error: %o', e);
        return next(e);
      }
    },
  );
};