user.js
4.59 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
/**
* Created by Tommy Huang on 18/03/21.
*/
const config = require('config-lite')({
config_basedir: __dirname,
config_dir: 'config'
})
const moment = require('moment')
const axios = require('axios')
const Helper = require('./helper')
const User = require('../models').User
const Redis = require('../models/redis')
exports.get = async function(req, res) {
try {
const code = req.query.code
let userId, user, token, info, refreshToken
if (req.session.userId) {
userId = req.session.userId
}
console.log('userId:', userId)
if (userId) {
user = await User.findOne({
where: {id: userId}
})
}
if (user && user.refreshToken) {
let tokenResult = await Helper.refreshUserWxToken(user.refreshToken)
if (!tokenResult) throw new Error('刷新微信授权失败')
userId = user.id
token = tokenResult.access_token
refreshToken = user.refreshToken
} else if (code) {
let ticketResult = await Helper.getUserWxAccessTokenInfo(code)
if (!ticketResult) throw new Error('获取微信授权失败')
userId = ticketResult.openid
token = ticketResult.access_token
refreshToken = ticketResult.refresh_token
} else {
throw new Error('非法参数')
}
info = await Helper.getUserWxInfo(token, userId)
if (!info) throw new Error('拉取微信信息失败')
if (!user) {
user = await User.findOne({
where: {id: info.openid}
})
}
if (user) {
await user.update({
username: info.nickname,
headimgurl: info.headimgurl,
refreshToken: refreshToken
})
} else {
user = await User.create({
id: info.openid,
username: info.nickname,
headimgurl: info.headimgurl,
refreshToken: refreshToken
})
}
req.session.userId = user.id
res.json({
success: 1,
user: {
id: user.id,
username: info.nickname,
headimgurl: info.headimgurl,
phone: user.phone || '',
needPhoneBind: !user.phoneBinded,
needIdBind: !user.idBinded
}
})
} catch (e) {
console.log(e)
res.json({
success: 0,
redirect: config.entryURL,
msg: `获取用户信息失败:${e.message}`
})
}
}
exports.getVerificationCode = async function(req, res) {
try {
const phone = req.query.phone
const id = req.session.userId
const reg = /^1[0-9]{10}$/
if (!id) throw new Error('参数错误')
if (!reg.test(phone)) throw new Error('手机号码不正确')
let user = await User.findOne({
where: {id: id}
})
if (!user) throw new Error('用户不存在')
let date = moment().format('YYYY-MM-DD')
let timesKey = `sms_${phone}_${date}`
let frequencyKey = `fqy_${phone}_${date}`
let [timesData, frequencyData] = await Promise.all([Redis.get(timesKey), Redis.get(frequencyKey)])
if (frequencyData) throw new Error('获取验证码太频繁')
// if (timesData >= 6) throw new Error('今日获取验证码数量已达上限')
let times = parseInt(timesData) || 0
let [timeResult, frequencyResult] = await Promise.all([
Redis.sendCommand("set", [timesKey, times + 1, 'ex', 86400]),
Redis.sendCommand("set", [frequencyKey, 'exist', 'ex', 60])
])
let send = await Helper.sendVerificationCode(phone)
if (!send.success) throw new Error(send.msg)
await user.update({
verificationCode: send.code,
phone: phone,
codeTime: moment().format()
})
res.json({
success: 1
})
} catch (e) {
console.log(e)
res.json({
success: 0,
msg: `获取验证码失败:${e.message}`
})
}
}
exports.bindPhone = async function(req, res) {
try {
const id = req.session.userId
const phone = req.body.phone
const code = req.body.verificationCode
if (!id || !phone || !code) throw new Error('参数错误')
let user = await User.findOne({
where: {id: id}
})
if (!user) throw new Error('用户不存在')
if (user.phone !== phone) throw new Error('修改手机号后请重新获取验证码')
if (user.verificationCode !== code) throw new Error('验证码不正确')
let codeTime = moment(user.codeTime).add(5, 'minutes')
console.log(codeTime)
console.log(moment())
console.log(moment().isAfter(codeTime))
if (moment().isAfter(codeTime)) throw new Error('验证码已过期')
const update = await user.update({
phoneBinded: true
})
res.json({
success: 1,
phone: phone
})
} catch (e) {
console.log(e)
res.json({
success: 0,
msg: `绑定失败:${e.message}`
})
}
}