Victor_Jay
6229c81f6e
- 修复注册关闭时标题“创建账号”和副标题仍显示的问题，三态互斥（维护中 > 关闭注册 > 正常） - 新增 maintenance.enabled 站点设置，默认关闭，仅 Owner 可见可调节 - 维护中间件：全局拦截，维护期间仅站长可访问，白名单放行登录相关路径 - 登录服务：维护期间仅 Owner 角色可登录，Register 优先检查维护状态 - Nav 模板新增维护通知条（黄色横幅） - 管理后台站点设置新增“启用维护模式”开关 - BuildPageData 自动注入 IsMaintenance 到所有页面模板
101 lines
2.8 KiB
Go
101 lines
2.8 KiB
Go
package controller
|
||
|
||
import (
|
||
"net/http"
|
||
|
||
"metazone.cc/metalab/internal/common"
|
||
"metazone.cc/metalab/internal/model"
|
||
|
||
"github.com/gin-gonic/gin"
|
||
)
|
||
|
||
// CheckEmail 检查邮箱是否已注册
|
||
func (ac *AuthController) CheckEmail(c *gin.Context) {
|
||
var req model.CheckEmailRequest
|
||
if err := c.ShouldBindJSON(&req); err != nil {
|
||
common.Error(c, http.StatusBadRequest, "请提供有效的邮箱地址")
|
||
return
|
||
}
|
||
|
||
exists, err := ac.authService.CheckEmail(req.Email)
|
||
if err != nil {
|
||
common.Error(c, http.StatusInternalServerError, "检查失败")
|
||
return
|
||
}
|
||
|
||
common.Ok(c, gin.H{"exists": exists})
|
||
}
|
||
|
||
// Register 注册 API
|
||
func (ac *AuthController) Register(c *gin.Context) {
|
||
var req model.RegisterRequest
|
||
if err := c.ShouldBindJSON(&req); err != nil {
|
||
common.Error(c, http.StatusBadRequest, "请检查输入："+err.Error())
|
||
return
|
||
}
|
||
|
||
// 注册 IP 限流：1 分钟 5 次
|
||
regResult, recordReg := ac.rateLimiter.AllowIP(clientIP(c) + ":register")
|
||
if regResult.Blocked {
|
||
common.Error(c, http.StatusTooManyRequests, "注册请求过于频繁，请稍后重试")
|
||
return
|
||
}
|
||
|
||
accessToken, refreshToken, user, err := ac.authService.Register(req, clientIP(c))
|
||
if err != nil {
|
||
if recordReg != nil {
|
||
recordReg()
|
||
}
|
||
switch err {
|
||
case common.ErrMaintenanceMode:
|
||
common.Error(c, http.StatusForbidden, "社区正在维护中，暂不支持注册")
|
||
case common.ErrEmailExists:
|
||
common.Error(c, http.StatusConflict, "该邮箱已注册")
|
||
case common.ErrWeakPassword:
|
||
common.Error(c, http.StatusBadRequest, err.Error())
|
||
case common.ErrRegistrationDisabled:
|
||
common.Error(c, http.StatusForbidden, "注册功能已关闭")
|
||
default:
|
||
common.Error(c, http.StatusInternalServerError, "注册失败，请稍后重试")
|
||
}
|
||
return
|
||
}
|
||
|
||
common.SetAuthCookies(c, accessToken, refreshToken, req.RememberMe, ac.cfg)
|
||
|
||
common.OkWithMessage(c, user, "注册成功！欢迎加入 MetaLab")
|
||
}
|
||
|
||
// Logout 退出登录：清除所有认证 Cookie
|
||
func (ac *AuthController) Logout(c *gin.Context) {
|
||
common.ClearAuthCookies(c, ac.cfg)
|
||
common.OkMessage(c, "已退出登录")
|
||
}
|
||
|
||
// RefreshToken 用 refresh token 换取新的 access token
|
||
func (ac *AuthController) RefreshToken(c *gin.Context) {
|
||
refreshToken, err := c.Cookie(common.RefreshCookieName)
|
||
if err != nil {
|
||
common.Error(c, http.StatusUnauthorized, "请重新登录")
|
||
return
|
||
}
|
||
|
||
accessToken, _, err := ac.tokenService.RefreshAccessToken(refreshToken)
|
||
if err != nil {
|
||
common.ClearAuthCookies(c, ac.cfg)
|
||
switch err {
|
||
case common.ErrTokenExpired, common.ErrTokenRevoked:
|
||
common.Error(c, http.StatusUnauthorized, "登录凭证已失效，请重新登录")
|
||
case common.ErrUserBanned:
|
||
common.Error(c, http.StatusForbidden, "账号已被封禁")
|
||
default:
|
||
common.Error(c, http.StatusUnauthorized, "请重新登录")
|
||
}
|
||
return
|
||
}
|
||
|
||
common.SetAccessCookie(c, accessToken, ac.cfg)
|
||
|
||
common.Ok(c, nil)
|
||
}
|