tonePage/tone-page-server/src/auth/auth.service.ts

import { createHash } from 'crypto';
import { BadRequestException, Injectable } from '@nestjs/common';
import { LoginDto } from './dto/login.dto';
import { UserService } from 'src/user/user.service';
import { User } from 'src/user/entities/user.entity';
import { JwtService } from '@nestjs/jwt';
import { UserSessionService } from 'src/user/services/user-session.service';
import { v4 as uuidv4 } from 'uuid';
import { VerificationService } from 'src/verification/verification.service';

@Injectable()
export class AuthService {
  constructor(
    private readonly userService: UserService,
    private readonly jwtService: JwtService,
    private readonly userSessionService: UserSessionService,
    private readonly verificationService: VerificationService,
  ) {}

  async loginWithPassword(loginDto: LoginDto) {
    const { account, password } = loginDto;
    // 依次使用邮箱登录、手机号、账号
    const user = await this.userService.findOne(
      [{ email: account }, { phone: account }, { username: account }],
      {
        withDeleted: true,
      },
    );

    if (user && user.deletedAt !== null) {
      throw new BadRequestException('该账号注销中');
    }

    if (user === null || !user.password_hash || !user.salt) {
      throw new BadRequestException('账户或密码错误');
    }

    // 判断密码是否正确
    const hashedPassword = this.hashPassword(password, user.salt);
    if (hashedPassword !== user.password_hash) {
      throw new BadRequestException('账户或密码错误');
    }

    // 登录成功，颁发token
    return {
      token: await this.generateToken(user),
    };
  }

  async loginWithPhone(loginDto: LoginDto) {
    const { phone, code } = loginDto;
    // 先判断验证码是否正确
    const isValid = this.verificationService.verifyPhoneCode(
      phone,
      code,
      'login',
    );
    switch (isValid) {
      case 0:
        break;
      case -1:
        throw new BadRequestException('验证码已过期');
      case -2:
        throw new BadRequestException('验证码错误');
      case -3:
        throw new BadRequestException('验证码已失效');
      default:
        throw new BadRequestException('验证码错误');
    }

    // 判断用户是否存在，若不存在则进行注册
    let user = await this.userService.findOne({ phone }, { withDeleted: true });
    if (user && user.deletedAt !== null) {
      throw new BadRequestException('该账号注销中，请使用其他手机号');
    }

    if (!user) {
      // 执行注册操作
      user = await this.userService.create({ phone: phone });
    }

    if (!user || !user.userId) {
      // 注册失败或用户信息错误
      throw new BadRequestException('请求失败，请稍后再试');
    }

    // 登录，颁发token
    return {
      token: await this.generateToken(user),
    };
  }

  async loginWithEmail(loginDto: LoginDto) {
    const { email, code } = loginDto;
    // 先判断验证码是否正确
    const isValid = this.verificationService.verifyEmailCode(
      email,
      code,
      'login',
    );
    switch (isValid) {
      case 0:
        break;
      case -1:
        throw new BadRequestException('验证码已过期，请重新获取');
      case -2:
        throw new BadRequestException('验证码错误');
      case -3:
        throw new BadRequestException('验证码已失效，请重新获取');
      default:
        throw new BadRequestException('验证码错误，请稍后再试');
    }

    // 判断用户是否存在，若不存在则进行注册
    let user = await this.userService.findOne({ email }, { withDeleted: true });
    if (user && user.deletedAt !== null) {
      throw new BadRequestException('该账号注销中，请使用其他邮箱');
    }

    if (!user) {
      // 执行注册操作
      user = await this.userService.create({ email: email });
    }

    if (!user || !user.userId) {
      // 注册失败或用户信息错误
      throw new BadRequestException('请求失败，请稍后再试');
    }

    // 登录，颁发token
    return {
      token: await this.generateToken(user),
    };
  }

  private hashPassword(password: string, salt: string): string {
    return createHash('sha256').update(`${password}${salt}`).digest('hex');
  }

  private async generateToken(user: User) {
    const payload = {
      userId: user.userId,
      sessionId: uuidv4(),
    };

    // 存储
    await this.userSessionService.createSession(
      payload.userId,
      payload.sessionId,
    );

    // 颁发token
    return this.jwtService.sign(payload);
  }
}