723 lines
18 KiB
JavaScript
723 lines
18 KiB
JavaScript
/**
|
||
* 用户控制器
|
||
* @file userController.js
|
||
* @description 处理用户相关的请求
|
||
*/
|
||
|
||
const { User, Role } = require('../models');
|
||
const bcrypt = require('bcryptjs');
|
||
const jwt = require('jsonwebtoken');
|
||
|
||
/**
|
||
* 根据用户名搜索用户
|
||
* @param {Object} req - 请求对象
|
||
* @param {Object} res - 响应对象
|
||
*/
|
||
exports.searchUserByUsername = async (req, res) => {
|
||
const searchStartTime = Date.now();
|
||
const requestId = Math.random().toString(36).substr(2, 9);
|
||
|
||
try {
|
||
const { username } = req.query;
|
||
const userAgent = req.get('User-Agent') || 'Unknown';
|
||
const clientIP = req.ip || req.connection.remoteAddress || 'Unknown';
|
||
|
||
console.log(`🔍 [后端用户搜索监听] 搜索请求开始:`, {
|
||
requestId: requestId,
|
||
keyword: username,
|
||
timestamp: new Date().toISOString(),
|
||
clientIP: clientIP,
|
||
userAgent: userAgent,
|
||
queryParams: req.query,
|
||
headers: {
|
||
'content-type': req.get('Content-Type'),
|
||
'accept': req.get('Accept'),
|
||
'referer': req.get('Referer')
|
||
}
|
||
});
|
||
|
||
if (!username || username.trim() === '') {
|
||
console.log(`❌ [后端用户搜索监听] 搜索关键词为空:`, {
|
||
requestId: requestId,
|
||
keyword: username
|
||
});
|
||
|
||
return res.status(400).json({
|
||
success: false,
|
||
message: '请提供搜索关键词'
|
||
});
|
||
}
|
||
|
||
console.log(`🔄 [后端用户搜索监听] 开始数据库查询:`, {
|
||
requestId: requestId,
|
||
searchKeyword: username,
|
||
searchPattern: `%${username}%`
|
||
});
|
||
|
||
const queryStartTime = Date.now();
|
||
|
||
// 搜索用户
|
||
const users = await User.findAll({
|
||
where: {
|
||
username: {
|
||
[require('sequelize').Op.like]: `%${username}%`
|
||
}
|
||
},
|
||
attributes: { exclude: ['password'] },
|
||
order: [['created_at', 'DESC']]
|
||
});
|
||
|
||
const queryTime = Date.now() - queryStartTime;
|
||
const totalTime = Date.now() - searchStartTime;
|
||
|
||
console.log(`📊 [后端用户搜索监听] 数据库查询完成:`, {
|
||
requestId: requestId,
|
||
queryTime: queryTime + 'ms',
|
||
totalTime: totalTime + 'ms',
|
||
resultCount: users.length,
|
||
searchKeyword: username
|
||
});
|
||
|
||
// 获取角色信息
|
||
const roleIds = [...new Set(users.map(user => user.roles).filter(id => id))];
|
||
const roles = await Role.findAll({
|
||
where: { id: roleIds },
|
||
attributes: ['id', 'name', 'description']
|
||
});
|
||
|
||
const roleMap = roles.reduce((map, role) => {
|
||
map[role.id] = role;
|
||
return map;
|
||
}, {});
|
||
|
||
// 转换数据格式，添加角色名称
|
||
const usersWithRole = users.map(user => {
|
||
const userData = user.toJSON();
|
||
const role = roleMap[userData.roles];
|
||
userData.role = role ? {
|
||
id: role.id,
|
||
name: role.name,
|
||
description: role.description
|
||
} : null;
|
||
userData.roleName = role ? role.name : 'user';
|
||
userData.status = userData.status || 'active';
|
||
return userData;
|
||
});
|
||
|
||
// 记录搜索结果详情
|
||
if (usersWithRole.length > 0) {
|
||
console.log(`📋 [后端用户搜索监听] 搜索结果详情:`, {
|
||
requestId: requestId,
|
||
results: usersWithRole.map(user => ({
|
||
id: user.id,
|
||
username: user.username,
|
||
email: user.email,
|
||
roleName: user.roleName
|
||
}))
|
||
});
|
||
}
|
||
|
||
console.log(`✅ [后端用户搜索监听] 搜索成功:`, {
|
||
requestId: requestId,
|
||
keyword: username,
|
||
resultCount: usersWithRole.length,
|
||
responseTime: totalTime + 'ms'
|
||
});
|
||
|
||
res.status(200).json({
|
||
success: true,
|
||
data: usersWithRole,
|
||
meta: {
|
||
requestId: requestId,
|
||
searchKeyword: username,
|
||
resultCount: usersWithRole.length,
|
||
queryTime: queryTime,
|
||
totalTime: totalTime,
|
||
timestamp: new Date().toISOString()
|
||
}
|
||
});
|
||
} catch (error) {
|
||
const errorTime = Date.now() - searchStartTime;
|
||
|
||
console.error(`❌ [后端用户搜索监听] 搜索失败:`, {
|
||
requestId: requestId,
|
||
error: error.message,
|
||
stack: error.stack,
|
||
errorTime: errorTime + 'ms',
|
||
keyword: req.query.username
|
||
});
|
||
|
||
res.status(500).json({
|
||
success: false,
|
||
message: '搜索用户失败',
|
||
error: error.message,
|
||
meta: {
|
||
requestId: requestId,
|
||
errorTime: errorTime,
|
||
timestamp: new Date().toISOString()
|
||
}
|
||
});
|
||
}
|
||
};
|
||
|
||
/**
|
||
* 获取所有用户
|
||
* @param {Object} req - 请求对象
|
||
* @param {Object} res - 响应对象
|
||
*/
|
||
exports.getAllUsers = async (req, res) => {
|
||
try {
|
||
console.log('开始获取用户列表...');
|
||
|
||
// 获取所有用户
|
||
const users = await User.findAll({
|
||
attributes: { exclude: ['password'] } // 排除密码字段
|
||
});
|
||
|
||
console.log(`查询到 ${users.length} 个用户`);
|
||
|
||
// 获取所有角色信息
|
||
const roleIds = [...new Set(users.map(user => user.roles).filter(id => id))];
|
||
const roles = await Role.findAll({
|
||
where: { id: roleIds },
|
||
attributes: ['id', 'name', 'description']
|
||
});
|
||
|
||
const roleMap = roles.reduce((map, role) => {
|
||
map[role.id] = role;
|
||
return map;
|
||
}, {});
|
||
|
||
// 转换数据格式，添加角色名称
|
||
const usersWithRole = users.map(user => {
|
||
const userData = user.toJSON();
|
||
const role = roleMap[userData.roles];
|
||
userData.role = role ? {
|
||
id: role.id,
|
||
name: role.name,
|
||
description: role.description
|
||
} : null;
|
||
userData.roleName = role ? role.name : 'user';
|
||
userData.status = userData.status || 'active'; // 默认状态
|
||
return userData;
|
||
});
|
||
|
||
console.log('用户数据转换完成');
|
||
|
||
res.status(200).json({
|
||
success: true,
|
||
data: usersWithRole
|
||
});
|
||
} catch (error) {
|
||
console.error('获取用户列表失败:', error);
|
||
res.status(500).json({
|
||
success: false,
|
||
message: '获取用户列表失败',
|
||
error: error.message
|
||
});
|
||
}
|
||
};
|
||
|
||
/**
|
||
* 根据ID获取用户
|
||
* @param {Object} req - 请求对象
|
||
* @param {Object} res - 响应对象
|
||
*/
|
||
exports.getUserById = async (req, res) => {
|
||
try {
|
||
const { id } = req.params;
|
||
console.log(`开始获取用户详情，ID: ${id}`);
|
||
|
||
const user = await User.findByPk(id, {
|
||
attributes: { exclude: ['password'] } // 排除密码字段
|
||
});
|
||
|
||
if (!user) {
|
||
return res.status(404).json({
|
||
success: false,
|
||
message: '用户不存在'
|
||
});
|
||
}
|
||
|
||
// 获取角色信息
|
||
const role = await Role.findByPk(user.roles);
|
||
|
||
// 添加角色名称字段
|
||
const userData = user.toJSON();
|
||
userData.role = role ? {
|
||
id: role.id,
|
||
name: role.name,
|
||
description: role.description
|
||
} : null;
|
||
userData.roleName = role ? role.name : 'user';
|
||
userData.status = userData.status || 'active'; // 默认状态
|
||
|
||
console.log('用户详情获取成功');
|
||
|
||
res.status(200).json({
|
||
success: true,
|
||
data: userData
|
||
});
|
||
} catch (error) {
|
||
console.error(`获取用户(ID: ${req.params.id})失败:`, error);
|
||
res.status(500).json({
|
||
success: false,
|
||
message: '获取用户详情失败',
|
||
error: error.message
|
||
});
|
||
}
|
||
};
|
||
|
||
/**
|
||
* 创建用户
|
||
* @param {Object} req - 请求对象
|
||
* @param {Object} res - 响应对象
|
||
*/
|
||
exports.createUser = async (req, res) => {
|
||
try {
|
||
// 测试参数，用于测试不同的响应情况
|
||
if (req.query.testBadRequest === 'true') {
|
||
return res.status(400).json({
|
||
success: false,
|
||
message: '请求参数错误'
|
||
});
|
||
}
|
||
|
||
if (req.query.testUnauthorized === 'true') {
|
||
return res.status(401).json({
|
||
success: false,
|
||
message: '未授权'
|
||
});
|
||
}
|
||
|
||
if (req.query.testConflict === 'true') {
|
||
return res.status(409).json({
|
||
success: false,
|
||
message: '用户名或邮箱已存在'
|
||
});
|
||
}
|
||
|
||
if (req.query.testError === 'true') {
|
||
return res.status(500).json({
|
||
success: false,
|
||
message: '服务器错误'
|
||
});
|
||
}
|
||
|
||
const { username, email, password, phone, avatar, status, roles } = req.body;
|
||
|
||
// 验证必填字段
|
||
if (!username || !email || !password) {
|
||
return res.status(400).json({
|
||
success: false,
|
||
message: '用户名、邮箱和密码为必填项'
|
||
});
|
||
}
|
||
|
||
// 检查用户名或邮箱是否已存在
|
||
const existingUser = await User.findOne({
|
||
where: {
|
||
[require('sequelize').Op.or]: [
|
||
{ username },
|
||
{ email }
|
||
]
|
||
}
|
||
});
|
||
|
||
if (existingUser) {
|
||
return res.status(409).json({
|
||
success: false,
|
||
message: '用户名或邮箱已存在'
|
||
});
|
||
}
|
||
|
||
const user = await User.create({
|
||
username,
|
||
email,
|
||
password,
|
||
phone,
|
||
avatar,
|
||
status: status || 'active',
|
||
roles: roles || 2 // 默认为普通用户角色ID
|
||
});
|
||
|
||
// 返回用户信息（不包含密码）
|
||
const userResponse = {
|
||
id: user.id,
|
||
username: user.username,
|
||
email: user.email,
|
||
phone: user.phone,
|
||
avatar: user.avatar,
|
||
status: user.status,
|
||
createdAt: user.createdAt,
|
||
updatedAt: user.updatedAt
|
||
};
|
||
|
||
res.status(201).json({
|
||
success: true,
|
||
message: '用户创建成功',
|
||
data: userResponse
|
||
});
|
||
} catch (error) {
|
||
console.error('创建用户失败:', error);
|
||
res.status(500).json({
|
||
success: false,
|
||
message: '创建用户失败',
|
||
error: error.message
|
||
});
|
||
}
|
||
};
|
||
|
||
/**
|
||
* 更新用户
|
||
* @param {Object} req - 请求对象
|
||
* @param {Object} res - 响应对象
|
||
*/
|
||
exports.updateUser = async (req, res) => {
|
||
try {
|
||
// 测试参数，用于测试不同的响应情况
|
||
if (req.query.testUnauthorized === 'true') {
|
||
return res.status(401).json({
|
||
success: false,
|
||
message: '未授权'
|
||
});
|
||
}
|
||
|
||
if (req.query.testNotFound === 'true') {
|
||
return res.status(404).json({
|
||
success: false,
|
||
message: '用户不存在'
|
||
});
|
||
}
|
||
|
||
if (req.query.testError === 'true') {
|
||
return res.status(500).json({
|
||
success: false,
|
||
message: '服务器错误'
|
||
});
|
||
}
|
||
|
||
const { id } = req.params;
|
||
const { username, email, phone, avatar, status, password, roles } = req.body;
|
||
|
||
const user = await User.findByPk(id);
|
||
|
||
if (!user) {
|
||
return res.status(404).json({
|
||
success: false,
|
||
message: '用户不存在'
|
||
});
|
||
}
|
||
|
||
// 如果更新用户名或邮箱，检查是否与其他用户冲突
|
||
if (username || email) {
|
||
const existingUser = await User.findOne({
|
||
where: {
|
||
id: { [require('sequelize').Op.ne]: id },
|
||
[require('sequelize').Op.or]: [
|
||
...(username ? [{ username }] : []),
|
||
...(email ? [{ email }] : [])
|
||
]
|
||
}
|
||
});
|
||
|
||
if (existingUser) {
|
||
return res.status(409).json({
|
||
success: false,
|
||
message: '用户名或邮箱已被其他用户使用'
|
||
});
|
||
}
|
||
}
|
||
|
||
// 准备更新数据
|
||
const updateData = {};
|
||
if (username !== undefined) updateData.username = username;
|
||
if (email !== undefined) updateData.email = email;
|
||
if (phone !== undefined) updateData.phone = phone;
|
||
if (avatar !== undefined) updateData.avatar = avatar;
|
||
if (status !== undefined) updateData.status = status;
|
||
if (roles !== undefined) updateData.roles = roles; // 直接更新roles字段
|
||
|
||
// 如果需要更新密码，先加密
|
||
if (password) {
|
||
updateData.password = await bcrypt.hash(password, 10);
|
||
}
|
||
|
||
await user.update(updateData);
|
||
|
||
// 获取角色信息
|
||
const role = await Role.findByPk(user.roles);
|
||
|
||
// 构建响应数据
|
||
const userData = {
|
||
id: user.id,
|
||
username: user.username,
|
||
email: user.email,
|
||
phone: user.phone,
|
||
avatar: user.avatar,
|
||
roles: user.roles,
|
||
status: user.status,
|
||
created_at: user.created_at,
|
||
updated_at: user.updated_at,
|
||
role: role ? {
|
||
id: role.id,
|
||
name: role.name,
|
||
description: role.description
|
||
} : null,
|
||
roleName: role ? role.name : 'user'
|
||
};
|
||
|
||
res.status(200).json({
|
||
success: true,
|
||
message: '用户更新成功',
|
||
data: userData
|
||
});
|
||
} catch (error) {
|
||
console.error(`更新用户(ID: ${req.params.id})失败:`, error);
|
||
res.status(500).json({
|
||
success: false,
|
||
message: '更新用户失败',
|
||
error: error.message
|
||
});
|
||
}
|
||
};
|
||
|
||
/**
|
||
* 删除用户
|
||
* @param {Object} req - 请求对象
|
||
* @param {Object} res - 响应对象
|
||
*/
|
||
exports.deleteUser = async (req, res) => {
|
||
try {
|
||
// 测试参数，用于测试不同的响应情况
|
||
if (req.query.testUnauthorized === 'true') {
|
||
return res.status(401).json({
|
||
success: false,
|
||
message: '未授权'
|
||
});
|
||
}
|
||
|
||
if (req.query.testNotFound === 'true') {
|
||
return res.status(404).json({
|
||
success: false,
|
||
message: '用户不存在'
|
||
});
|
||
}
|
||
|
||
if (req.query.testError === 'true') {
|
||
return res.status(500).json({
|
||
success: false,
|
||
message: '服务器错误'
|
||
});
|
||
}
|
||
|
||
const { id } = req.params;
|
||
|
||
const user = await User.findByPk(id);
|
||
|
||
if (!user) {
|
||
return res.status(404).json({
|
||
success: false,
|
||
message: '用户不存在'
|
||
});
|
||
}
|
||
|
||
await user.destroy();
|
||
|
||
res.status(200).json({
|
||
success: true,
|
||
message: '用户删除成功'
|
||
});
|
||
} catch (error) {
|
||
console.error(`删除用户(ID: ${req.params.id})失败:`, error);
|
||
res.status(500).json({
|
||
success: false,
|
||
message: '删除用户失败',
|
||
error: error.message
|
||
});
|
||
}
|
||
};
|
||
|
||
/**
|
||
* 根据用户名搜索用户
|
||
* @param {Object} req - 请求对象
|
||
* @param {Object} res - 响应对象
|
||
*/
|
||
exports.searchUserByUsername = async (req, res) => {
|
||
try {
|
||
const { username } = req.query;
|
||
|
||
if (!username) {
|
||
return res.status(400).json({
|
||
success: false,
|
||
message: '请提供用户名参数'
|
||
});
|
||
}
|
||
|
||
console.log(`开始搜索用户名包含: ${username}`);
|
||
|
||
// 使用模糊查询搜索用户名
|
||
const users = await User.findAll({
|
||
where: {
|
||
username: {
|
||
[require('sequelize').Op.like]: `%${username}%`
|
||
}
|
||
},
|
||
attributes: { exclude: ['password'] } // 排除密码字段
|
||
});
|
||
|
||
console.log(`找到 ${users.length} 个匹配的用户`);
|
||
|
||
// 获取所有角色信息
|
||
const roleIds = [...new Set(users.map(user => user.roles).filter(id => id))];
|
||
const roles = await Role.findAll({
|
||
where: { id: roleIds },
|
||
attributes: ['id', 'name', 'description']
|
||
});
|
||
|
||
const roleMap = roles.reduce((map, role) => {
|
||
map[role.id] = role;
|
||
return map;
|
||
}, {});
|
||
|
||
// 转换数据格式，添加角色名称
|
||
const usersWithRole = users.map(user => {
|
||
const userData = user.toJSON();
|
||
const role = roleMap[userData.roles];
|
||
userData.role = role ? {
|
||
id: role.id,
|
||
name: role.name,
|
||
description: role.description
|
||
} : null;
|
||
userData.roleName = role ? role.name : 'user';
|
||
userData.status = userData.status || 'active'; // 默认状态
|
||
return userData;
|
||
});
|
||
|
||
res.status(200).json({
|
||
success: true,
|
||
data: usersWithRole,
|
||
message: `找到 ${usersWithRole.length} 个匹配的用户`
|
||
});
|
||
} catch (error) {
|
||
console.error('搜索用户失败:', error);
|
||
res.status(500).json({
|
||
success: false,
|
||
message: '搜索用户失败',
|
||
error: error.message
|
||
});
|
||
}
|
||
};
|
||
|
||
/**
|
||
* 用户登录
|
||
* @param {Object} req - 请求对象
|
||
* @param {Object} res - 响应对象
|
||
*/
|
||
exports.login = async (req, res) => {
|
||
try {
|
||
// 测试参数，用于测试不同的响应情况
|
||
if (req.query.testBadRequest === 'true') {
|
||
return res.status(400).json({
|
||
success: false,
|
||
message: '请求参数错误'
|
||
});
|
||
}
|
||
|
||
if (req.query.testUnauthorized === 'true') {
|
||
return res.status(401).json({
|
||
success: false,
|
||
message: '用户名或密码错误'
|
||
});
|
||
}
|
||
|
||
if (req.query.testError === 'true') {
|
||
return res.status(500).json({
|
||
success: false,
|
||
message: '服务器错误'
|
||
});
|
||
}
|
||
|
||
const { username, password } = req.body;
|
||
|
||
if (!username || !password) {
|
||
return res.status(400).json({
|
||
success: false,
|
||
message: '用户名和密码为必填项'
|
||
});
|
||
}
|
||
|
||
// 查找用户（支持用户名或邮箱登录）
|
||
const user = await User.findOne({
|
||
where: {
|
||
[require('sequelize').Op.or]: [
|
||
{ username },
|
||
{ email: username }
|
||
]
|
||
}
|
||
});
|
||
|
||
if (!user) {
|
||
return res.status(401).json({
|
||
success: false,
|
||
message: '用户名或密码错误'
|
||
});
|
||
}
|
||
|
||
// 验证密码
|
||
const isValidPassword = await user.validPassword(password);
|
||
|
||
if (!isValidPassword) {
|
||
return res.status(401).json({
|
||
success: false,
|
||
message: '用户名或密码错误'
|
||
});
|
||
}
|
||
|
||
// 检查用户状态
|
||
if (user.status !== 'active') {
|
||
return res.status(401).json({
|
||
success: false,
|
||
message: '账户已被禁用'
|
||
});
|
||
}
|
||
|
||
// 生成JWT token
|
||
const token = jwt.sign(
|
||
{
|
||
userId: user.id,
|
||
username: user.username
|
||
},
|
||
process.env.JWT_SECRET || 'your-secret-key',
|
||
{ expiresIn: '24h' }
|
||
);
|
||
|
||
// 返回用户信息和token（不包含密码）
|
||
const userResponse = {
|
||
id: user.id,
|
||
username: user.username,
|
||
email: user.email,
|
||
phone: user.phone,
|
||
avatar: user.avatar,
|
||
status: user.status,
|
||
createdAt: user.createdAt,
|
||
updatedAt: user.updatedAt
|
||
};
|
||
|
||
res.status(200).json({
|
||
success: true,
|
||
message: '登录成功',
|
||
data: {
|
||
user: userResponse,
|
||
token
|
||
}
|
||
});
|
||
} catch (error) {
|
||
console.error('用户登录失败:', error);
|
||
res.status(500).json({
|
||
success: false,
|
||
message: '登录失败',
|
||
error: error.message
|
||
});
|
||
}
|
||
}; |