feat: 优化项目目录结构

2025-12-12 17:25:26 +08:00
parent ae627d0496
commit b89f83291e
235 changed files with 0 additions and 0 deletions
--- a/apps/backend/src/auth/auth.service.ts
+++ b/apps/backend/src/auth/auth.service.ts
@@ -0,0 +1,155 @@
+import { createHash } from 'crypto';
+import { BadRequestException, Injectable } from '@nestjs/common';
+import { LoginDto } from './dto/login.dto';
+import { UserService } from 'src/user/user.service';
+import { User } from 'src/user/entities/user.entity';
+import { JwtService } from '@nestjs/jwt';
+import { UserSessionService } from 'src/user/services/user-session.service';
+import { v4 as uuidv4 } from 'uuid';
+import { VerificationService } from 'src/verification/verification.service';
+
+@Injectable()
+export class AuthService {
+  constructor(
+    private readonly userService: UserService,
+    private readonly jwtService: JwtService,
+    private readonly userSessionService: UserSessionService,
+    private readonly verificationService: VerificationService,
+  ) {}
+
+  async loginWithPassword(loginDto: LoginDto) {
+    const { account, password } = loginDto;
+    // 依次使用邮箱登录、手机号、账号
+    const user = await this.userService.findOne(
+      [{ email: account }, { phone: account }, { username: account }],
+      {
+        withDeleted: true,
+      },
+    );
+
+    if (user && user.deletedAt !== null) {
+      throw new BadRequestException('该账号注销中');
+    }
+
+    if (user === null || !user.password_hash || !user.salt) {
+      throw new BadRequestException('账户或密码错误');
+    }
+
+    // 判断密码是否正确
+    const hashedPassword = this.hashPassword(password, user.salt);
+    if (hashedPassword !== user.password_hash) {
+      throw new BadRequestException('账户或密码错误');
+    }
+
+    // 登录成功，颁发token
+    return {
+      token: await this.generateToken(user),
+    };
+  }
+
+  async loginWithPhone(loginDto: LoginDto) {
+    const { phone, code } = loginDto;
+    // 先判断验证码是否正确
+    const isValid = this.verificationService.verifyPhoneCode(
+      phone,
+      code,
+      'login',
+    );
+    switch (isValid) {
+      case 0:
+        break;
+      case -1:
+        throw new BadRequestException('验证码已过期');
+      case -2:
+        throw new BadRequestException('验证码错误');
+      case -3:
+        throw new BadRequestException('验证码已失效');
+      default:
+        throw new BadRequestException('验证码错误');
+    }
+
+    // 判断用户是否存在，若不存在则进行注册
+    let user = await this.userService.findOne({ phone }, { withDeleted: true });
+    if (user && user.deletedAt !== null) {
+      throw new BadRequestException('该账号注销中，请使用其他手机号');
+    }
+
+    if (!user) {
+      // 执行注册操作
+      user = await this.userService.create({ phone: phone });
+    }
+
+    if (!user || !user.userId) {
+      // 注册失败或用户信息错误
+      throw new BadRequestException('请求失败，请稍后再试');
+    }
+
+    // 登录，颁发token
+    return {
+      token: await this.generateToken(user),
+    };
+  }
+
+  async loginWithEmail(loginDto: LoginDto) {
+    const { email, code } = loginDto;
+    // 先判断验证码是否正确
+    const isValid = this.verificationService.verifyEmailCode(
+      email,
+      code,
+      'login',
+    );
+    switch (isValid) {
+      case 0:
+        break;
+      case -1:
+        throw new BadRequestException('验证码已过期，请重新获取');
+      case -2:
+        throw new BadRequestException('验证码错误');
+      case -3:
+        throw new BadRequestException('验证码已失效，请重新获取');
+      default:
+        throw new BadRequestException('验证码错误，请稍后再试');
+    }
+
+    // 判断用户是否存在，若不存在则进行注册
+    let user = await this.userService.findOne({ email }, { withDeleted: true });
+    if (user && user.deletedAt !== null) {
+      throw new BadRequestException('该账号注销中，请使用其他邮箱');
+    }
+
+    if (!user) {
+      // 执行注册操作
+      user = await this.userService.create({ email: email });
+    }
+
+    if (!user || !user.userId) {
+      // 注册失败或用户信息错误
+      throw new BadRequestException('请求失败，请稍后再试');
+    }
+
+    // 登录，颁发token
+    return {
+      token: await this.generateToken(user),
+    };
+  }
+
+  private hashPassword(password: string, salt: string): string {
+    return createHash('sha256').update(`${password}${salt}`).digest('hex');
+  }
+
+  private async generateToken(user: User) {
+    const payload = {
+      userId: user.userId,
+      sessionId: uuidv4(),
+    };
+
+    // 存储
+    await this.userSessionService.createSession(
+      payload.userId,
+      payload.sessionId,
+    );
+
+    // 颁发token
+    return this.jwtService.sign(payload);
+  }
+}