Files
ClassContent/历届学生/学生公司项目/朱祥龙/hyGw/public/js/admin/api/userApi.js
2024-09-27 02:06:13 +08:00

89 lines
2.3 KiB
JavaScript

var express = require('express');
var router = express.Router();
var db = require("../../../db/index")
var utils = require("../../../utils/index")
var admin = require("../../../Interceptor/index")
var config = require("../../../config/index")
// 页面访问权限控制,
// 未登录方位页面的时候,强制去登录
// 已登录:直接访问页面
// express-session + express 路由拦截器 实现
// api 接口 token 的实现
router.post('/login',async function (req, res, next) {
var username = req.body.name;
var pwd = req.body.pwd;
var data = await db.query({
sql: config.sql.login,
par: [username, utils.password(pwd)]
});
if (data.length != 0) {
// 生成token + 随机字符串
var token = utils.md5token(JSON.stringify(data[0]))
req.session.user = data[0]
data[0].token = token
await db.query({ sql: 'UPDATE user set token = ? WHERE id = ?', par: [token, data[0].id] });
res.json({
status: 200,
message: '登录成功',
data: data[0]
});
} else {
res.json({
status: 404,
message: '用户名,密码错误或账户被禁用,请仔细核对。',
data: null
});
}
});
router.post('/add', async function (req, res, next) {
var name = req.body.name;
var pwd = req.body.pwd;
var result = await db.query({ sql: config.sql.add, par: [name, utils.password(pwd) ] });
console.log(result);
if (result.hasOwnProperty("insertId")) {
res.json({
status: 200,
message: '注册成功',
data: null
});
} else {
res.json({
status: 500,
message: '注册失败,重新尝试',
data: result
});
}
});
router.get('/stop', async function (req, res, next) {
var id = req.query.id;
var data = await db.query({
sql: config.sql.updateStopUser,
par: [id]
});
res.redirect("/admin/UserCenter")
});
router.get('/start', async function (req, res, next) {
var id = req.query.id;
var data = await db.query({
sql: config.sql.updateStartUser,
par: [id]
});
res.redirect("/admin/UserCenter")
});
module.exports = router;