var express = require('express'); var router = express.Router(); var db = require("../../../db/index") var utils = require("../../../utils/index") var admin = require("../../../Interceptor/index") var config = require("../../../config/index") // 页面访问权限控制, // 未登录方位页面的时候,强制去登录 // 已登录:直接访问页面 // express-session + express 路由拦截器 实现 // api 接口 token 的实现 router.post('/login',async function (req , res, next) { var username = req.body.name; var pwd = req.body.pwd; var data = await db.query({ sql: config.sql.login, par: [username, utils.password(pwd)] }); if (data.length != 0) { // 生成token + 随机字符串 var token = utils.md5token(JSON.stringify(data[0])) req.session.user = data[0] data[0].token = token await db.query({ sql: 'UPDATE user set token = ? WHERE id = ?', par: [token, data[0].id] }); res.json({ status: 200, message: '登录成功', data: data[0] }); } else { res.json({ status: 404, message: '用户名,密码错误或账户被禁用,请仔细核对。', data: null }); } }); router.post('/add', async function (req, res, next) { var name = req.body.name; var pwd = req.body.pwd; var result = await db.query({ sql: config.sql.add, par: [name, utils.password(pwd) ] }); console.log(result); if (result.hasOwnProperty("insertId")) { res.json({ status: 200, message: '注册成功', data: null }); } else { res.json({ status: 500, message: '注册失败,重新尝试', data: result }); } }); router.get('/stop', async function (req, res, next) { var id = req.query.id; var data = await db.query({ sql: config.sql.updateStopUser, par: [id] }); res.redirect("/admin/UserCenter") }); router.get('/start', async function (req, res, next) { var id = req.query.id; var data = await db.query({ sql: config.sql.updateStartUser, par: [id] }); res.redirect("/admin/UserCenter") }); module.exports = router;