111 lines
4.1 KiB
Python
111 lines
4.1 KiB
Python
from __future__ import annotations
|
|
|
|
import json
|
|
from http import HTTPStatus
|
|
|
|
|
|
class AccountHttpMixin:
|
|
def auth_register(self) -> None:
|
|
try:
|
|
body = self.read_json_body()
|
|
result = self.application_service.register_account(
|
|
str(body.get("username") or ""),
|
|
str(body.get("password") or ""),
|
|
)
|
|
self.send_json(
|
|
{
|
|
"ok": True,
|
|
"authenticated": True,
|
|
"user": result["user"],
|
|
"csrf_token": result["csrf_token"],
|
|
},
|
|
HTTPStatus.CREATED,
|
|
{"Set-Cookie": self.session_cookie(result["session_token"])},
|
|
)
|
|
except (ValueError, json.JSONDecodeError) as exc:
|
|
self.send_json({"error": str(exc)}, HTTPStatus.BAD_REQUEST)
|
|
|
|
def auth_login(self) -> None:
|
|
try:
|
|
body = self.read_json_body()
|
|
result = self.application_service.login_account(
|
|
str(body.get("username") or ""),
|
|
str(body.get("password") or ""),
|
|
)
|
|
self.send_json(
|
|
{
|
|
"ok": True,
|
|
"authenticated": True,
|
|
"user": result["user"],
|
|
"csrf_token": result["csrf_token"],
|
|
},
|
|
headers={"Set-Cookie": self.session_cookie(result["session_token"])},
|
|
)
|
|
except (ValueError, json.JSONDecodeError) as exc:
|
|
self.send_json({"error": str(exc)}, HTTPStatus.UNAUTHORIZED)
|
|
|
|
def auth_me(self) -> None:
|
|
service = self.application_service
|
|
if not self.require_auth(send_error=False):
|
|
self.send_json(
|
|
{
|
|
"ok": True,
|
|
"authenticated": False,
|
|
"registration_required": service.database.count_users() == 0,
|
|
}
|
|
)
|
|
return
|
|
self.send_json(
|
|
{
|
|
"ok": True,
|
|
"authenticated": True,
|
|
"user": {
|
|
"id": int(self.auth_user["id"]),
|
|
"username": str(self.auth_user["username"]),
|
|
"role": str(self.auth_user.get("role") or "user"),
|
|
"membership": service.membership(),
|
|
},
|
|
"csrf_token": str(self.auth_user["csrf_token"]),
|
|
}
|
|
)
|
|
|
|
def auth_logout(self) -> None:
|
|
raw_token = self.session_token()
|
|
if raw_token:
|
|
from backend.features.accounts.security import token_hash
|
|
|
|
self.application_service.database.delete_session(token_hash(raw_token))
|
|
self.send_json(
|
|
{"ok": True},
|
|
headers={"Set-Cookie": self.session_cookie("", clear=True)},
|
|
)
|
|
|
|
def save_birth_profile(self) -> None:
|
|
try:
|
|
body = self.read_json_body()
|
|
personal = self.application_service.save_birth_profile(body)
|
|
self.send_json({"ok": True, "personal": personal})
|
|
except (ValueError, json.JSONDecodeError) as exc:
|
|
self.send_json({"error": str(exc)}, HTTPStatus.BAD_REQUEST)
|
|
|
|
def change_password(self) -> None:
|
|
try:
|
|
body = self.read_json_body()
|
|
current = str(body.get("current_password") or "")
|
|
new = str(body.get("new_password") or "")
|
|
confirmation = str(body.get("confirm_password") or "")
|
|
if new != confirmation:
|
|
raise ValueError("两次输入的新密码不一致。")
|
|
self.application_service.change_password(current, new)
|
|
self.send_json({"ok": True})
|
|
except (ValueError, json.JSONDecodeError) as exc:
|
|
self.send_json({"error": str(exc)}, HTTPStatus.BAD_REQUEST)
|
|
|
|
def save_membership(self) -> None:
|
|
try:
|
|
service = self.application_service
|
|
service.update_membership(self.read_json_body())
|
|
self.send_json({"ok": True, "users": service.admin_users()})
|
|
except (ValueError, json.JSONDecodeError) as exc:
|
|
self.send_json({"error": str(exc)}, HTTPStatus.BAD_REQUEST)
|