'use strict'; const Hex = require('crypto-js/enc-hex'); const MD5 = require('crypto-js/md5'); const moment = require('moment'); const uuid = require('uuid'); async function login (ctx, next) { const transaction = await ctx.fs.dc.orm.transaction(); try { const models = ctx.fs.dc.models; const params = ctx.request.body; let password = Hex.stringify(MD5(params.password)); const userRes = await models.User.findOne({ attributes: { exclude: ['password'] }, where: { username: params.username, password: password, delete: false, }, }); if (!userRes) { ctx.status = 400; ctx.body = { "message": "账号或密码错误" } } else if (!userRes.enable) { ctx.status = 400; ctx.body = { message: "该用户已被禁用" } } else { const token = uuid.v4(); let userRslt = Object.assign( userRes.dataValues, { authorized: true, token: token, } ); await models.UserToken.create({ token: token, userInfo: userRslt, expired: moment().add(30, 'days').format() }); ctx.status = 200; ctx.body = userRslt; } await transaction.commit(); } catch (error) { await transaction.rollback(); ctx.fs.logger.error(`path: ${ctx.path}, error: ${error}`); ctx.status = 400; ctx.body = { "message": "登录失败" } } } async function logout (ctx) { try { const { token } = ctx.request.body; const models = ctx.fs.dc.models; await models.UserToken.destroy({ where: { token: token, }, }); ctx.status = 204; } catch (error) { ctx.fs.logger.error(`path: ${ctx.path}, error: ${error}`); ctx.status = 400; ctx.body = { "message": "退出失败" } } } module.exports = { login, logout, };