276 lines
8.4 KiB
Python
276 lines
8.4 KiB
Python
"""
|
||
用户认证 API
|
||
提供用户注册、登录、登出等功能
|
||
"""
|
||
|
||
import logging
|
||
import hashlib
|
||
import time
|
||
import random
|
||
from typing import Optional
|
||
from fastapi import APIRouter, HTTPException, status
|
||
from pydantic import BaseModel, Field
|
||
|
||
from database import query, insert, update
|
||
|
||
logger = logging.getLogger(__name__)
|
||
router = APIRouter()
|
||
|
||
|
||
# ==================== 数据模型 ====================
|
||
|
||
class UserRegisterRequest(BaseModel):
|
||
"""用户注册请求"""
|
||
username: str = Field(..., min_length=3, max_length=50, description="用户名")
|
||
password: str = Field(..., min_length=6, description="密码")
|
||
email: Optional[str] = Field(None, description="邮箱")
|
||
phone: Optional[str] = Field(None, description="手机号")
|
||
nickname: Optional[str] = Field(None, description="昵称")
|
||
|
||
|
||
class UserLoginRequest(BaseModel):
|
||
"""用户登录请求"""
|
||
username: str = Field(..., description="用户名")
|
||
password: str = Field(..., description="密码")
|
||
|
||
|
||
class UserResponse(BaseModel):
|
||
"""用户信息响应"""
|
||
id: int
|
||
username: str
|
||
nickname: Optional[str] = None
|
||
email: Optional[str] = None
|
||
phone: Optional[str] = None
|
||
avatar: Optional[str] = None
|
||
created_at: str
|
||
|
||
|
||
class LoginResponse(BaseModel):
|
||
"""登录响应"""
|
||
success: bool
|
||
message: str
|
||
token: Optional[str] = None
|
||
user: Optional[UserResponse] = None
|
||
xiaomi_bound: bool = False # 是否已绑定小米账号
|
||
|
||
|
||
# ==================== 辅助函数 ====================
|
||
|
||
def hash_password(password: str) -> str:
|
||
"""密码加密"""
|
||
return hashlib.sha256(password.encode()).hexdigest()
|
||
|
||
|
||
def generate_token(user_id: int) -> str:
|
||
"""生成简单的token（生产环境应使用JWT）"""
|
||
import uuid
|
||
return f"{user_id}_{uuid.uuid4().hex}"
|
||
|
||
|
||
def generate_user_id() -> int:
|
||
"""生成用户ID"""
|
||
return int(time.time() * 1000) + random.randint(1000, 9999)
|
||
|
||
|
||
# ==================== API 端点 ====================
|
||
|
||
@router.post("/register", response_model=LoginResponse)
|
||
async def register(data: UserRegisterRequest):
|
||
"""
|
||
用户注册
|
||
"""
|
||
try:
|
||
# 检查用户名是否已存在
|
||
check_sql = "SELECT id FROM users WHERE username = %s"
|
||
existing_user = query(check_sql, (data.username,))
|
||
|
||
if existing_user:
|
||
raise HTTPException(
|
||
status_code=status.HTTP_400_BAD_REQUEST,
|
||
detail="用户名已存在"
|
||
)
|
||
|
||
# 检查邮箱是否已存在
|
||
if data.email:
|
||
check_email_sql = "SELECT id FROM users WHERE email = %s"
|
||
existing_email = query(check_email_sql, (data.email,))
|
||
if existing_email:
|
||
raise HTTPException(
|
||
status_code=status.HTTP_400_BAD_REQUEST,
|
||
detail="邮箱已被注册"
|
||
)
|
||
|
||
# 生成用户ID
|
||
user_id = generate_user_id()
|
||
|
||
# 加密密码
|
||
hashed_password = hash_password(data.password)
|
||
|
||
# 插入用户记录
|
||
insert_sql = """
|
||
INSERT INTO users
|
||
(id, username, password, email, phone, nickname, status, created_at, updated_at)
|
||
VALUES (%s, %s, %s, %s, %s, %s, 1, NOW(), NOW())
|
||
"""
|
||
insert(insert_sql, (
|
||
user_id,
|
||
data.username,
|
||
hashed_password,
|
||
data.email,
|
||
data.phone,
|
||
data.nickname or data.username
|
||
))
|
||
|
||
# 生成token
|
||
token = generate_token(user_id)
|
||
|
||
# 返回用户信息
|
||
user_info = UserResponse(
|
||
id=user_id,
|
||
username=data.username,
|
||
nickname=data.nickname or data.username,
|
||
email=data.email,
|
||
phone=data.phone,
|
||
avatar=None,
|
||
created_at=str(time.strftime("%Y-%m-%d %H:%M:%S"))
|
||
)
|
||
|
||
logger.info(f"用户注册成功: {data.username}")
|
||
|
||
return LoginResponse(
|
||
success=True,
|
||
message="注册成功",
|
||
token=token,
|
||
user=user_info
|
||
)
|
||
|
||
except HTTPException:
|
||
raise
|
||
except Exception as e:
|
||
logger.error(f"用户注册失败: {e}", exc_info=True)
|
||
raise HTTPException(
|
||
status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
|
||
detail=f"注册失败: {str(e)}"
|
||
)
|
||
|
||
|
||
@router.post("/login", response_model=LoginResponse)
|
||
async def login(data: UserLoginRequest):
|
||
"""
|
||
用户登录
|
||
"""
|
||
try:
|
||
# 查询用户
|
||
sql = """
|
||
SELECT id, username, password, nickname, email, phone, avatar,
|
||
status, created_at
|
||
FROM users
|
||
WHERE username = %s
|
||
"""
|
||
users = query(sql, (data.username,))
|
||
|
||
if not users:
|
||
raise HTTPException(
|
||
status_code=status.HTTP_401_UNAUTHORIZED,
|
||
detail="用户名或密码错误"
|
||
)
|
||
|
||
user = users[0]
|
||
|
||
# 检查状态
|
||
if user.get("status") != 1:
|
||
raise HTTPException(
|
||
status_code=status.HTTP_403_FORBIDDEN,
|
||
detail="账号已被禁用"
|
||
)
|
||
|
||
# 验证密码
|
||
hashed_password = hash_password(data.password)
|
||
if user.get("password") != hashed_password:
|
||
raise HTTPException(
|
||
status_code=status.HTTP_401_UNAUTHORIZED,
|
||
detail="用户名或密码错误"
|
||
)
|
||
|
||
# 注意：StarRocks DUPLICATE KEY 表不支持 UPDATE，跳过更新最后登录时间
|
||
# TODO: 如果需要记录登录时间，可以改用 PRIMARY KEY 表或单独的登录日志表
|
||
|
||
# 生成token
|
||
token = generate_token(user["id"])
|
||
|
||
# 检查是否绑定小米账号（先试带 is_active=1 的条件）
|
||
xiaomi_check_sql = "SELECT id, xiaomi_username, is_active FROM xiaomi_account WHERE system_user_id = %s AND is_active = 1"
|
||
xiaomi_result = query(xiaomi_check_sql, (user["id"],))
|
||
xiaomi_bound = len(xiaomi_result) > 0
|
||
logger.info(f"🔍 用户 {user['id']} 绑定检查 (is_active=1): {xiaomi_result}, xiaomi_bound={xiaomi_bound}")
|
||
|
||
# 如果查不到，尝试不带 is_active 条件
|
||
if not xiaomi_bound:
|
||
xiaomi_check_sql_no_active = "SELECT id, xiaomi_username, is_active FROM xiaomi_account WHERE system_user_id = %s ORDER BY updated_at DESC LIMIT 1"
|
||
xiaomi_result_no_active = query(xiaomi_check_sql_no_active, (user["id"],))
|
||
xiaomi_bound = len(xiaomi_result_no_active) > 0
|
||
logger.info(f"🔍 用户 {user['id']} 绑定检查 (不带is_active): {xiaomi_result_no_active}, xiaomi_bound={xiaomi_bound}")
|
||
|
||
# 返回用户信息
|
||
user_info = UserResponse(
|
||
id=user["id"],
|
||
username=user["username"],
|
||
nickname=user.get("nickname"),
|
||
email=user.get("email"),
|
||
phone=user.get("phone"),
|
||
avatar=user.get("avatar"),
|
||
created_at=str(user.get("created_at", ""))
|
||
)
|
||
|
||
logger.info(f"用户登录成功: {data.username}, 小米绑定状态: {xiaomi_bound}")
|
||
|
||
return LoginResponse(
|
||
success=True,
|
||
message="登录成功",
|
||
token=token,
|
||
user=user_info,
|
||
xiaomi_bound=xiaomi_bound
|
||
)
|
||
|
||
except HTTPException:
|
||
raise
|
||
except Exception as e:
|
||
logger.error(f"用户登录失败: {e}", exc_info=True)
|
||
raise HTTPException(
|
||
status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
|
||
detail=f"登录失败: {str(e)}"
|
||
)
|
||
|
||
|
||
@router.post("/logout")
|
||
async def logout():
|
||
"""
|
||
用户登出
|
||
"""
|
||
return {
|
||
"success": True,
|
||
"message": "登出成功"
|
||
}
|
||
|
||
|
||
@router.get("/check-username/{username}")
|
||
async def check_username(username: str):
|
||
"""
|
||
检查用户名是否可用
|
||
"""
|
||
try:
|
||
sql = "SELECT id FROM users WHERE username = %s"
|
||
result = query(sql, (username,))
|
||
|
||
return {
|
||
"available": len(result) == 0,
|
||
"message": "用户名可用" if len(result) == 0 else "用户名已存在"
|
||
}
|
||
except Exception as e:
|
||
logger.error(f"检查用户名失败: {e}")
|
||
raise HTTPException(
|
||
status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
|
||
detail=str(e)
|
||
)
|
||
|