算法评测平台前端。
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

303 lines
9.4 KiB

8 years ago
let User = syzoj.model('user');
let Problem = syzoj.model('problem');
let File = syzoj.model('file');
const Email = require('../libs/email');
const jwt = require('jsonwebtoken');
8 years ago
function setLoginCookie(username, password, res) {
res.cookie('login', JSON.stringify([username, password]));
}
8 years ago
// Login
app.post('/api/login', async (req, res) => {
try {
res.setHeader('Content-Type', 'application/json');
let user = await User.fromName(req.body.username);
if (!user) throw 1001;
else if (user.password == null || user.password === '') res.send({ error_code: 1003 });
8 years ago
else if (user.password !== req.body.password) res.send({ error_code: 1002 });
else {
req.session.user_id = user.id;
setLoginCookie(user.username, user.password, res);
const userQuery = await User.createQueryBuilder();
const userId = user.id;
const userInfo = await userQuery.where("id = :id", { id:userId }).getOne();
if (!userInfo.anonymous_name || userInfo.anonymous_name.length === 0){
await userQuery.update(User).set({anonymous_name: require('randomstring').generate(6)}).where("id = :id", { id:userId }).execute();
}
8 years ago
res.send({ error_code: 1 });
}
} catch (e) {
syzoj.log(e);
res.send({ error_code: e });
}
});
app.post('/api/forget', async (req, res) => {
try {
res.setHeader('Content-Type', 'application/json');
let user = await User.fromEmail(req.body.email);
if (!user) throw 1001;
let sendObj = {
userId: user.id,
};
const token = jwt.sign(sendObj, syzoj.config.email_jwt_secret, {
subject: 'forget',
expiresIn: '12h'
});
const vurl = syzoj.utils.getCurrentLocation(req, true) + syzoj.utils.makeUrl(['api', 'forget_confirm'], { token: token });
try {
7 years ago
await Email.send(user.email,
`${user.username}${syzoj.config.title} 密码重置邮件`,
`<p>请点击该链接来重置密码:</p><p><a href="${vurl}">${vurl}</a></p><p>链接有效期为 12h。如果您不是 ${user.username},请忽略此邮件。</p>`
);
} catch (e) {
return res.send({
error_code: 2010,
message: require('util').inspect(e)
});
return null;
}
7 years ago
res.send({ error_code: 1 });
} catch (e) {
syzoj.log(e);
res.send(JSON.stringify({ error_code: e }));
}
});
8 years ago
// Sign up
app.post('/api/sign_up', async (req, res) => {
try {
res.setHeader('Content-Type', 'application/json');
let user = await User.fromName(req.body.username);
if (user) throw 2008;
user = await User.findOne({ where: { email: req.body.email } });
if (user) throw 2009;
if (!req.body.nickname.trim()) {
res.send({
error_code: 2300,
message : "昵称不能为空"
});
return;
}
8 years ago
// Because the salt is "syzoj2_xxx" and the "syzoj2_xxx" 's md5 is"59cb..."
// the empty password 's md5 will equal "59cb.."
let syzoj2_xxx_md5 = '59cb65ba6f9ad18de0dcd12d5ae11bd2';
if (req.body.password === syzoj2_xxx_md5) throw 2007;
if (!(req.body.email = req.body.email.trim())) throw 2006;
if (!syzoj.utils.isValidUsername(req.body.username)) throw 2002;
if (!syzoj.utils.isValidEmail(req.body.email)) {
res.send({
error_code: 2300,
message : "邮箱需要以" + syzoj.config.email_suffix + "结尾"
});
return;
}
8 years ago
7 years ago
if (syzoj.config.register_mail) {
let sendObj = {
username: req.body.username,
password: req.body.password,
email: req.body.email,
};
const token = jwt.sign(sendObj, syzoj.config.email_jwt_secret, {
subject: 'register',
expiresIn: '2d'
});
const vurl = syzoj.utils.getCurrentLocation(req, true) + syzoj.utils.makeUrl(['api', 'sign_up_confirm'], { token: token });
try {
await Email.send(req.body.email,
`${req.body.username}${syzoj.config.title} 注册验证邮件`,
`<p>请点击该链接完成您在 ${syzoj.config.title} 的注册:</p><p><a href="${vurl}">${vurl}</a></p><p>如果您不是 ${req.body.username},请忽略此邮件。</p>`
);
} catch (e) {
return res.send({
error_code: 2010,
message: require('util').inspect(e)
});
}
res.send(JSON.stringify({ error_code: 2 }));
} else {
user = await User.create({
username: req.body.username,
password: req.body.password,
nickname:req.body.nickname,
email: req.body.email,
6 years ago
is_show: syzoj.config.default.user.show,
rating: syzoj.config.default.user.rating,
register_time: parseInt((new Date()).getTime() / 1000),
anonymous_name: require('randomstring').generate(6)
});
await user.save();
req.session.user_id = user.id;
setLoginCookie(user.username, user.password, res);
res.send(JSON.stringify({ error_code: 1 }));
}
} catch (e) {
syzoj.log(e);
res.send(JSON.stringify({ error_code: e }));
}
});
app.get('/api/forget_confirm', async (req, res) => {
try {
7 years ago
try {
jwt.verify(req.query.token, syzoj.config.email_jwt_secret, { subject: 'forget' });
7 years ago
} catch (e) {
throw new ErrorMessage("Token 不正确。");
}
res.render('forget_confirm', {
token: req.query.token
});
} catch (e) {
syzoj.log(e);
res.render('error', {
err: e
});
}
});
app.post('/api/reset_password', async (req, res) => {
try {
7 years ago
res.setHeader('Content-Type', 'application/json');
let obj;
try {
obj = jwt.verify(req.body.token, syzoj.config.email_jwt_secret, { subject: 'forget' });
} catch (e) {
throw 3001;
}
let syzoj2_xxx_md5 = '59cb65ba6f9ad18de0dcd12d5ae11bd2';
7 years ago
if (req.body.password === syzoj2_xxx_md5) throw new ErrorMessage('密码不能为空。');
6 years ago
const user = await User.findById(obj.userId);
7 years ago
user.password = req.body.password;
await user.save();
res.send(JSON.stringify({ error_code: 1 }));
} catch (e) {
syzoj.log(e);
7 years ago
if (typeof e === 'number') {
res.send(JSON.stringify({ error_code: e }));
} else {
res.send(JSON.stringify({ error_code: 1000 }));
}
}
});
app.get('/api/sign_up_confirm', async (req, res) => {
try {
let obj;
try {
obj = jwt.verify(req.query.token, syzoj.config.email_jwt_secret, { subject: 'register' });
} catch (e) {
7 years ago
throw new ErrorMessage('无效的注册验证链接: ' + e.toString());
}
let user = await User.fromName(obj.username);
if (user) throw new ErrorMessage('用户名已被占用。');
user = await User.findOne({ where: { email: obj.email } });
if (user) throw new ErrorMessage('邮件地址已被占用。');
// Because the salt is "syzoj2_xxx" and the "syzoj2_xxx" 's md5 is"59cb..."
// the empty password 's md5 will equal "59cb.."
let syzoj2_xxx_md5 = '59cb65ba6f9ad18de0dcd12d5ae11bd2';
if (obj.password === syzoj2_xxx_md5) throw new ErrorMessage('密码不能为空。');
if (!(obj.email = obj.email.trim())) throw new ErrorMessage('邮件地址不能为空。');
if (!syzoj.utils.isValidUsername(obj.username)) throw new ErrorMessage('用户名不合法。');
user = await User.create({
username: obj.username,
password: obj.password,
email: obj.email,
6 years ago
is_show: syzoj.config.default.user.show,
rating: syzoj.config.default.user.rating,
register_time: parseInt((new Date()).getTime() / 1000)
});
await user.save();
req.session.user_id = user.id;
setLoginCookie(user.username, user.password, res);
res.redirect(obj.prevUrl || '/');
} catch (e) {
syzoj.log(e);
res.render('error', {
err: e
});
}
});
// Obslete!!!
app.get('/api/sign_up/:token', async (req, res) => {
try {
let obj;
try {
let decrypted = syzoj.utils.decrypt(Buffer.from(req.params.token, 'base64'), syzoj.config.email_jwt_secret).toString();
obj = JSON.parse(decrypted);
} catch (e) {
throw new ErrorMessage('无效的注册验证链接。');
}
let user = await User.fromName(obj.username);
if (user) throw new ErrorMessage('用户名已被占用。');
user = await User.findOne({ where: { email: obj.email } });
if (user) throw new ErrorMessage('邮件地址已被占用。');
// Because the salt is "syzoj2_xxx" and the "syzoj2_xxx" 's md5 is"59cb..."
// the empty password 's md5 will equal "59cb.."
let syzoj2_xxx_md5 = '59cb65ba6f9ad18de0dcd12d5ae11bd2';
if (obj.password === syzoj2_xxx_md5) throw new ErrorMessage('密码不能为空。');
if (!(obj.email = obj.email.trim())) throw new ErrorMessage('邮件地址不能为空。');
if (!syzoj.utils.isValidUsername(obj.username)) throw new ErrorMessage('用户名不合法。');
8 years ago
user = await User.create({
username: obj.username,
password: obj.password,
email: obj.email,
public_email: true
8 years ago
});
await user.save();
req.session.user_id = user.id;
setLoginCookie(user.username, user.password, res);
res.redirect(obj.prevUrl || '/');
8 years ago
} catch (e) {
syzoj.log(e);
res.render('error', {
err: e
});
8 years ago
}
});
// Markdown
app.post('/api/markdown', async (req, res) => {
try {
let s = await syzoj.utils.markdown(req.body.s.toString());
res.send(s);
} catch (e) {
syzoj.log(e);
res.send(e);
}
});
app.get('/static/uploads/answer/:md5', async (req, res) => {
8 years ago
try {
res.sendFile(File.resolvePath('answer', req.params.md5));
8 years ago
} catch (e) {
res.status(500).send(e);
}
});