PumpStation/api/app/lib/controllers/auth/index.js

'use strict';
const Hex = require('crypto-js/enc-hex');
const SHA1 = require('crypto-js/sha1');
const MD5 = require('crypto-js/md5');
const moment = require('moment');
const uuid = require('uuid');

async function login (ctx, next) {
   try {
      // const transaction = await ctx.fs.dc.orm.transaction();

      const models = ctx.fs.dc.models;
      const params = ctx.request.body;
      let password = Hex.stringify(MD5(params.password));
      const userRes = await models.User.findOne({
         where: {
            username: params.username,
            password: password,
         }
      });


      if (userRes) {
         const token = uuid.v4();
         const userInfo = {
            authorized: true,
            ...userRes.dataValues,
            token,
         };
         // 记录token
         const expiredDay = 7;
         const expired = moment().add(expiredDay, 'day').format('YYYY-MM-DD HH:mm:ss')
         await models.UserToken.create({
            token: token,
            userInfo: userInfo,
            expired: expired
         });
         ctx.status = 200;
         ctx.body = userInfo;
      } else {
         ctx.status = 400;
         ctx.body = {
            "message": "账号或密码错误"
         }
      }
      // await transaction.commit();
   } catch (error) {
      // await transaction.rollback();
      ctx.fs.logger.error(`path: ${ctx.path}, error: ${error}`);
      ctx.status = 400;
      ctx.body = {
         "message": "登录失败"
      }
   }
}

async function varfiyCode (ctx) {
   try {
      const { models } = ctx.fs.dc;
      const { pushBySms, pushByEmail } = ctx.app.fs.utils
      const { phone, sig, r } = ctx.request.body

      // 伪造的请求可能由相同的sig参数组成
      const checkSigUsed = await models.PhoneValidateCode.findOne({
         where: { sig: sig }
      });
      if (checkSigUsed) {
         throw '参数错误！'
      }

      // 验证sig正确性            
      const checkSig = Hex.stringify(SHA1(phone + r));
      if (!r || !sig || sig != checkSig) {
         throw '参数错误！'
      }

      let varifyCode = ''
      for (let i = 0; i < 6; i++) {
         varifyCode += Math.floor(Math.random() * 10)
      }

      // await pushBySms({
      //     phone: phone,
      //     templateCode: 'SMS_248250074',
      //     templateParam: {
      //         code: varifyCode
      //     },
      // })

      await models.PhoneValidateCode.create({
         phone: phone,
         code: varifyCode,
         sig: sig,
         expired: moment().add(10, 'minutes').format('YYYY-MM-DD HH:mm:ss')
      })

      ctx.status = 204;
   } catch (error) {
      ctx.fs.logger.error(`path: ${ctx.path}, error: ${error}`);
      ctx.status = 400;
      ctx.body = {
         message: typeof error == 'string' ? error : '获取验证码失败'
      }
   }
}

async function logout (ctx) {
   try {
      const models = ctx.fs.dc.models;
      const params = ctx.request.body;

      await models.UserToken.destroy({
         where: {
            token: params.token,
         }
      });

      ctx.status = 204;
   } catch (error) {
      ctx.fs.logger.error(`path: ${ctx.path}, error: ${error}`);
      ctx.status = 400;
      ctx.body = {
         message: typeof error == 'string' ? error : undefined
      }
   }
}

module.exports = {
   login,
   varfiyCode,
   logout,
};