From d03ce79653469a9aea691e8d7dc2385cc4e07adb Mon Sep 17 00:00:00 2001
From: tone <3341154833@qq.com>
Date: Wed, 7 May 2025 13:37:05 +0800
Subject: [PATCH] =?UTF-8?q?=E5=AE=9E=E7=8E=B0auth=E6=A8=A1=E5=9D=97?=
 =?UTF-8?q?=E7=9A=84=E7=99=BB=E5=BD=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 tone-page-server/src/auth/auth.service.ts | 83 ++++++++++++++++++++---
 1 file changed, 75 insertions(+), 8 deletions(-)

diff --git a/tone-page-server/src/auth/auth.service.ts b/tone-page-server/src/auth/auth.service.ts
index 0864e84..907b0b6 100644
--- a/tone-page-server/src/auth/auth.service.ts
+++ b/tone-page-server/src/auth/auth.service.ts
@@ -1,38 +1,105 @@
+import { createHash } from 'crypto';
 import { BadRequestException, Injectable } from '@nestjs/common';
 import { LoginDto } from './dto/login.dto';
+import { UserService } from 'src/user/user.service';
+import { User } from 'src/user/entities/user.entity';
+import { JwtService } from '@nestjs/jwt';
+import { UserSessionService } from 'src/user/services/user-session.service';
+import { v4 as uuidv4 } from 'uuid';
 
 @Injectable()
 export class AuthService {
+
+    constructor(
+        private readonly userService: UserService,
+        private readonly jwtService: JwtService,
+        private readonly userSessionService: UserSessionService,
+    ) { }
+
     async loginWithPassword(loginDto: LoginDto) {
         const { account, password } = loginDto;
-        // 依次使用账号、手机号、邮箱登录
+        // 依次使用邮箱登录、手机号、账号
+        const user = await this.userService.findOne([
+            { email: account },
+            { phone: account },
+            { username: account },
+        ]);
 
-        return { message: 'Logged in with password', data: loginDto };
+        if (user === null || !user.password_hash || !user.salt) {
+            throw new BadRequestException('账户或密码错误');
+        }
+
+        // 判断密码是否正确
+        const hashedPassword = this.hashPassword(password, user.salt);
+        if (hashedPassword !== user.password_hash) {
+            throw new BadRequestException('账户或密码错误');
+        }
+
+        // 登录成功，颁发token
+        return {
+            token: await this.generateToken(user),
+        }
     }
 
     async loginWithPhone(loginDto: LoginDto) {
         const { phone, code } = loginDto;
         // 先判断验证码是否正确
-
+        // TODO
 
         // 判断用户是否存在，若不存在则进行注册
+        let user = await this.userService.findOne({ phone });
+        if (!user) {
+            // 执行注册操作
+            user = await this.userService.create({ phone: phone });
+        }
 
+        if (!user || !user.userId) {// 注册失败或用户信息错误
+            throw new BadRequestException('请求失败，请稍后再试');
+        }
 
         // 登录，颁发token
-
-        return { message: 'Logged in with phone', data: loginDto };
+        return {
+            token: await this.generateToken(user),
+        }
     }
 
     async loginWithEmail(loginDto: LoginDto) {
         const { email, code } = loginDto;
         // 先判断验证码是否正确
-
+        // TODO
 
         // 判断用户是否存在，若不存在则进行注册
+        let user = await this.userService.findOne({ email });
+        if (!user) {
+            // 执行注册操作
+            user = await this.userService.create({ email: email });
+        }
 
+        if (!user || !user.userId) {// 注册失败或用户信息错误
+            throw new BadRequestException('请求失败，请稍后再试');
+        }
 
         // 登录，颁发token
-
-        return { message: 'Logged in with email', data: loginDto };
+        return {
+            token: await this.generateToken(user),
+        }
     }
+
+    private hashPassword(password: string, salt: string): string {
+        return createHash('sha256').update(`${password}${salt}`).digest('hex');
+    }
+
+    private async generateToken(user: User) {
+        const payload = {
+            userId: user.userId,
+            sessionId: uuidv4(),
+        }
+
+        // 存储
+        await this.userSessionService.createSession(payload.userId, payload.sessionId);
+
+        // 颁发token
+        return this.jwtService.sign(payload);
+    }
+
 }
\ No newline at end of file