migration: preserve startup accounts and system slice

2026-07-31 00:42:06 +08:00
parent 4083dceba3
commit 4002f096f4
37 changed files with 6821 additions and 6327 deletions
@@ -0,0 +1,110 @@
+from __future__ import annotations
+
+import json
+from http import HTTPStatus
+
+
+class AccountHttpMixin:
+    def auth_register(self) -> None:
+        try:
+            body = self.read_json_body()
+            result = self.application_service.register_account(
+                str(body.get("username") or ""),
+                str(body.get("password") or ""),
+            )
+            self.send_json(
+                {
+                    "ok": True,
+                    "authenticated": True,
+                    "user": result["user"],
+                    "csrf_token": result["csrf_token"],
+                },
+                HTTPStatus.CREATED,
+                {"Set-Cookie": self.session_cookie(result["session_token"])},
+            )
+        except (ValueError, json.JSONDecodeError) as exc:
+            self.send_json({"error": str(exc)}, HTTPStatus.BAD_REQUEST)
+
+    def auth_login(self) -> None:
+        try:
+            body = self.read_json_body()
+            result = self.application_service.login_account(
+                str(body.get("username") or ""),
+                str(body.get("password") or ""),
+            )
+            self.send_json(
+                {
+                    "ok": True,
+                    "authenticated": True,
+                    "user": result["user"],
+                    "csrf_token": result["csrf_token"],
+                },
+                headers={"Set-Cookie": self.session_cookie(result["session_token"])},
+            )
+        except (ValueError, json.JSONDecodeError) as exc:
+            self.send_json({"error": str(exc)}, HTTPStatus.UNAUTHORIZED)
+
+    def auth_me(self) -> None:
+        service = self.application_service
+        if not self.require_auth(send_error=False):
+            self.send_json(
+                {
+                    "ok": True,
+                    "authenticated": False,
+                    "registration_required": service.database.count_users() == 0,
+                }
+            )
+            return
+        self.send_json(
+            {
+                "ok": True,
+                "authenticated": True,
+                "user": {
+                    "id": int(self.auth_user["id"]),
+                    "username": str(self.auth_user["username"]),
+                    "role": str(self.auth_user.get("role") or "user"),
+                    "membership": service.membership(),
+                },
+                "csrf_token": str(self.auth_user["csrf_token"]),
+            }
+        )
+
+    def auth_logout(self) -> None:
+        raw_token = self.session_token()
+        if raw_token:
+            from backend.features.accounts.security import token_hash
+
+            self.application_service.database.delete_session(token_hash(raw_token))
+        self.send_json(
+            {"ok": True},
+            headers={"Set-Cookie": self.session_cookie("", clear=True)},
+        )
+
+    def save_birth_profile(self) -> None:
+        try:
+            body = self.read_json_body()
+            personal = self.application_service.save_birth_profile(body)
+            self.send_json({"ok": True, "personal": personal})
+        except (ValueError, json.JSONDecodeError) as exc:
+            self.send_json({"error": str(exc)}, HTTPStatus.BAD_REQUEST)
+
+    def change_password(self) -> None:
+        try:
+            body = self.read_json_body()
+            current = str(body.get("current_password") or "")
+            new = str(body.get("new_password") or "")
+            confirmation = str(body.get("confirm_password") or "")
+            if new != confirmation:
+                raise ValueError("两次输入的新密码不一致。")
+            self.application_service.change_password(current, new)
+            self.send_json({"ok": True})
+        except (ValueError, json.JSONDecodeError) as exc:
+            self.send_json({"error": str(exc)}, HTTPStatus.BAD_REQUEST)
+
+    def save_membership(self) -> None:
+        try:
+            service = self.application_service
+            service.update_membership(self.read_json_body())
+            self.send_json({"ok": True, "users": service.admin_users()})
+        except (ValueError, json.JSONDecodeError) as exc:
+            self.send_json({"error": str(exc)}, HTTPStatus.BAD_REQUEST)