588 lines
13 KiB
JavaScript
588 lines
13 KiB
JavaScript
const bcrypt = require('bcryptjs');
|
||
const { Op } = require('sequelize');
|
||
const User = require('../models/User');
|
||
const Role = require('../models/Role');
|
||
const { logOperation } = require('../utils/logger');
|
||
|
||
// 获取用户列表
|
||
exports.getUserList = async (req, res) => {
|
||
try {
|
||
const { page = 1, pageSize = 10, username, roleId, status } = req.query;
|
||
|
||
// 构建查询条件
|
||
const where = { isDeleted: 0 };
|
||
if (username) {
|
||
where.username = { [Op.like]: `%${username}%` };
|
||
}
|
||
if (roleId) {
|
||
where.roleId = roleId;
|
||
}
|
||
if (status) {
|
||
where.status = status;
|
||
}
|
||
|
||
// 查询用户列表
|
||
const { count, rows } = await User.findAndCountAll({
|
||
where,
|
||
attributes: ['id', 'username', 'nickname', 'roleId', 'status', 'createdAt', 'updatedAt'],
|
||
include: [{
|
||
model: Role,
|
||
as: 'role',
|
||
attributes: ['id', 'name', 'code']
|
||
}],
|
||
order: [['createdAt', 'DESC']],
|
||
offset: (page - 1) * pageSize,
|
||
limit: parseInt(pageSize)
|
||
});
|
||
|
||
res.json({
|
||
code: 200,
|
||
message: '获取成功',
|
||
data: {
|
||
list: rows,
|
||
total: count,
|
||
page: parseInt(page),
|
||
pageSize: parseInt(pageSize)
|
||
}
|
||
});
|
||
} catch (error) {
|
||
console.error('获取用户列表错误:', error);
|
||
res.status(500).json({
|
||
code: 500,
|
||
message: '获取用户列表失败',
|
||
error: error.message
|
||
});
|
||
}
|
||
};
|
||
|
||
// 获取用户详情
|
||
exports.getUserById = async (req, res) => {
|
||
try {
|
||
const { id } = req.params;
|
||
|
||
const user = await User.findByPk(id, {
|
||
where: { isDeleted: 0 },
|
||
attributes: ['id', 'username', 'nickname', 'roleId', 'status', 'createdAt', 'updatedAt'],
|
||
include: [{
|
||
model: Role,
|
||
as: 'role',
|
||
attributes: ['id', 'name', 'code']
|
||
}]
|
||
});
|
||
|
||
if (!user) {
|
||
return res.status(404).json({
|
||
code: 404,
|
||
message: '用户不存在'
|
||
});
|
||
}
|
||
|
||
res.json({
|
||
code: 200,
|
||
message: '获取成功',
|
||
data: user
|
||
});
|
||
|
||
// 记录操作日志
|
||
await logOperation({
|
||
userId: req.user.id,
|
||
username: req.user.username,
|
||
module: '用户管理',
|
||
action: '查询',
|
||
description: `获取用户详情，ID: ${id}`,
|
||
method: req.method,
|
||
path: req.path,
|
||
ip: req.ip,
|
||
status: 'success'
|
||
});
|
||
} catch (error) {
|
||
console.error('获取用户详情错误:', error);
|
||
res.status(500).json({
|
||
code: 500,
|
||
message: '获取用户详情失败',
|
||
error: error.message
|
||
});
|
||
}
|
||
};
|
||
|
||
// 创建用户
|
||
exports.createUser = async (req, res) => {
|
||
try {
|
||
const { username, password, nickname, roleId } = req.body;
|
||
|
||
// 参数验证
|
||
if (!username || !password) {
|
||
return res.status(400).json({
|
||
code: 400,
|
||
message: '用户名和密码不能为空'
|
||
});
|
||
}
|
||
|
||
if (username.length < 3 || username.length > 20) {
|
||
return res.status(400).json({
|
||
code: 400,
|
||
message: '用户名长度应在3-20个字符之间'
|
||
});
|
||
}
|
||
|
||
if (password.length < 6 || password.length > 20) {
|
||
return res.status(400).json({
|
||
code: 400,
|
||
message: '密码长度应在6-20个字符之间'
|
||
});
|
||
}
|
||
|
||
if (!roleId) {
|
||
return res.status(400).json({
|
||
code: 400,
|
||
message: '角色不能为空'
|
||
});
|
||
}
|
||
|
||
// 检查角色是否存在
|
||
const role = await Role.findByPk(roleId, {
|
||
where: { isDeleted: 0, status: 'active' }
|
||
});
|
||
if (!role) {
|
||
return res.status(400).json({
|
||
code: 400,
|
||
message: '角色不存在或已禁用'
|
||
});
|
||
}
|
||
|
||
// 检查用户名是否已存在
|
||
const existingUser = await User.findOne({ where: { username, isDeleted: 0 } });
|
||
if (existingUser) {
|
||
return res.status(400).json({
|
||
code: 400,
|
||
message: '用户名已存在'
|
||
});
|
||
}
|
||
|
||
// 加密密码
|
||
const hashedPassword = await bcrypt.hash(password, 10);
|
||
|
||
// 创建用户
|
||
const user = await User.create({
|
||
username,
|
||
password: hashedPassword,
|
||
nickname: nickname || null,
|
||
roleId,
|
||
createBy: req.user.id,
|
||
updateBy: req.user.id
|
||
});
|
||
|
||
res.json({
|
||
code: 200,
|
||
message: '创建成功',
|
||
data: {
|
||
id: user.id,
|
||
username: user.username,
|
||
nickname: user.nickname,
|
||
roleId: user.roleId,
|
||
createdAt: user.createdAt
|
||
}
|
||
});
|
||
|
||
// 记录操作日志
|
||
await logOperation({
|
||
userId: req.user.id,
|
||
username: req.user.username,
|
||
module: '用户管理',
|
||
action: '创建',
|
||
description: `创建用户: ${username}`,
|
||
method: req.method,
|
||
path: req.path,
|
||
ip: req.ip,
|
||
status: 'success'
|
||
});
|
||
} catch (error) {
|
||
console.error('创建用户错误:', error);
|
||
res.status(500).json({
|
||
code: 500,
|
||
message: '创建用户失败',
|
||
error: error.message
|
||
});
|
||
}
|
||
};
|
||
|
||
// 更新用户
|
||
exports.updateUser = async (req, res) => {
|
||
try {
|
||
const { id } = req.params;
|
||
const { nickname, roleId, status } = req.body;
|
||
|
||
// 查找用户
|
||
const user = await User.findByPk(id, {
|
||
where: { isDeleted: 0 }
|
||
});
|
||
if (!user) {
|
||
return res.status(404).json({
|
||
code: 404,
|
||
message: '用户不存在'
|
||
});
|
||
}
|
||
|
||
// 检查角色是否存在
|
||
if (roleId) {
|
||
const role = await Role.findByPk(roleId, {
|
||
where: { isDeleted: 0, status: 'active' }
|
||
});
|
||
if (!role) {
|
||
return res.status(400).json({
|
||
code: 400,
|
||
message: '角色不存在或已禁用'
|
||
});
|
||
}
|
||
}
|
||
|
||
// 构建更新数据
|
||
const updateData = {
|
||
updateBy: req.user.id
|
||
};
|
||
if (nickname !== undefined) updateData.nickname = nickname || null;
|
||
if (roleId !== undefined) updateData.roleId = roleId;
|
||
if (status !== undefined) updateData.status = status;
|
||
|
||
// 更新用户
|
||
await user.update(updateData);
|
||
|
||
res.json({
|
||
code: 200,
|
||
message: '更新成功',
|
||
data: {
|
||
id: user.id,
|
||
username: user.username,
|
||
nickname: user.nickname,
|
||
roleId: user.roleId,
|
||
status: user.status,
|
||
updatedAt: user.updatedAt
|
||
}
|
||
});
|
||
|
||
// 记录操作日志
|
||
await logOperation({
|
||
userId: req.user.id,
|
||
username: req.user.username,
|
||
module: '用户管理',
|
||
action: '更新',
|
||
description: `更新用户: ${user.username}`,
|
||
method: req.method,
|
||
path: req.path,
|
||
ip: req.ip,
|
||
status: 'success'
|
||
});
|
||
} catch (error) {
|
||
console.error('更新用户错误:', error);
|
||
res.status(500).json({
|
||
code: 500,
|
||
message: '更新用户失败',
|
||
error: error.message
|
||
});
|
||
}
|
||
};
|
||
|
||
// 删除用户
|
||
exports.deleteUser = async (req, res) => {
|
||
try {
|
||
const { id } = req.params;
|
||
|
||
// 不能删除自己
|
||
if (parseInt(id) === req.user.id) {
|
||
return res.status(400).json({
|
||
code: 400,
|
||
message: '不能删除自己的账号'
|
||
});
|
||
}
|
||
|
||
// 查找用户
|
||
const user = await User.findByPk(id, {
|
||
where: { isDeleted: 0 }
|
||
});
|
||
if (!user) {
|
||
return res.status(404).json({
|
||
code: 404,
|
||
message: '用户不存在'
|
||
});
|
||
}
|
||
|
||
// 软删除
|
||
await user.update({
|
||
isDeleted: 1,
|
||
updateBy: req.user.id
|
||
});
|
||
|
||
res.json({
|
||
code: 200,
|
||
message: '删除成功'
|
||
});
|
||
|
||
// 记录操作日志
|
||
await logOperation({
|
||
userId: req.user.id,
|
||
username: req.user.username,
|
||
module: '用户管理',
|
||
action: '删除',
|
||
description: `删除用户: ${user.username}`,
|
||
method: req.method,
|
||
path: req.path,
|
||
ip: req.ip,
|
||
status: 'success'
|
||
});
|
||
} catch (error) {
|
||
console.error('删除用户错误:', error);
|
||
res.status(500).json({
|
||
code: 500,
|
||
message: '删除用户失败',
|
||
error: error.message
|
||
});
|
||
}
|
||
};
|
||
|
||
// 重置用户密码
|
||
exports.resetUserPassword = async (req, res) => {
|
||
try {
|
||
const { id } = req.params;
|
||
const defaultPassword = '123456';
|
||
|
||
// 查找用户
|
||
const user = await User.findByPk(id, {
|
||
where: { isDeleted: 0 }
|
||
});
|
||
if (!user) {
|
||
return res.status(404).json({
|
||
code: 404,
|
||
message: '用户不存在'
|
||
});
|
||
}
|
||
|
||
// 加密默认密码
|
||
const hashedPassword = await bcrypt.hash(defaultPassword, 10);
|
||
|
||
// 更新密码
|
||
await user.update({
|
||
password: hashedPassword,
|
||
updateBy: req.user.id
|
||
});
|
||
|
||
res.json({
|
||
code: 200,
|
||
message: '密码重置成功',
|
||
data: {
|
||
defaultPassword
|
||
}
|
||
});
|
||
|
||
// 记录操作日志
|
||
await logOperation({
|
||
userId: req.user.id,
|
||
username: req.user.username,
|
||
module: '用户管理',
|
||
action: '重置密码',
|
||
description: `重置用户密码: ${user.username}`,
|
||
method: req.method,
|
||
path: req.path,
|
||
ip: req.ip,
|
||
status: 'success'
|
||
});
|
||
} catch (error) {
|
||
console.error('重置密码错误:', error);
|
||
res.status(500).json({
|
||
code: 500,
|
||
message: '重置密码失败',
|
||
error: error.message
|
||
});
|
||
}
|
||
};
|
||
|
||
// 获取用户列表（用于下拉选择）
|
||
exports.getAllUsers = async (req, res) => {
|
||
try {
|
||
const users = await User.findAll({
|
||
where: { isDeleted: 0, status: 'active' },
|
||
attributes: ['id', 'username', 'nickname']
|
||
});
|
||
|
||
res.json({
|
||
code: 200,
|
||
message: '获取用户列表成功',
|
||
data: users
|
||
});
|
||
|
||
} catch (error) {
|
||
console.error('获取用户列表错误:', error);
|
||
res.status(500).json({
|
||
code: 500,
|
||
message: '获取用户列表失败',
|
||
error: error.message
|
||
});
|
||
}
|
||
};
|
||
|
||
// 获取当前用户信息
|
||
exports.getCurrentUserInfo = async (req, res) => {
|
||
try {
|
||
const user = await User.findByPk(req.user.id, {
|
||
attributes: ['id', 'username', 'nickname', 'status', 'createdAt', 'updatedAt'],
|
||
include: [{
|
||
model: Role,
|
||
as: 'role',
|
||
attributes: ['id', 'name', 'code']
|
||
}]
|
||
});
|
||
|
||
if (!user) {
|
||
return res.status(404).json({
|
||
code: 404,
|
||
message: '用户不存在'
|
||
});
|
||
}
|
||
|
||
res.json({
|
||
code: 200,
|
||
message: '获取用户信息成功',
|
||
data: user
|
||
});
|
||
} catch (error) {
|
||
console.error('获取用户信息失败:', error);
|
||
res.status(500).json({
|
||
code: 500,
|
||
message: '获取用户信息失败',
|
||
error: error.message
|
||
});
|
||
}
|
||
};
|
||
|
||
// 更新个人资料
|
||
exports.updateUserProfile = async (req, res) => {
|
||
try {
|
||
const { nickname } = req.body;
|
||
|
||
// 验证昵称
|
||
if (!nickname || nickname.trim().length === 0) {
|
||
return res.status(400).json({
|
||
code: 400,
|
||
message: '昵称不能为空'
|
||
});
|
||
}
|
||
|
||
// 更新用户信息
|
||
const user = await User.findByPk(req.user.id);
|
||
if (!user) {
|
||
return res.status(404).json({
|
||
code: 404,
|
||
message: '用户不存在'
|
||
});
|
||
}
|
||
|
||
await user.update({
|
||
nickname,
|
||
updateBy: req.user.id
|
||
});
|
||
|
||
// 记录操作日志
|
||
await logOperation({
|
||
userId: req.user.id,
|
||
username: req.user.username,
|
||
module: '个人中心',
|
||
action: '更新资料',
|
||
description: '更新个人资料',
|
||
method: req.method,
|
||
path: req.path,
|
||
ip: req.ip,
|
||
status: 'success'
|
||
});
|
||
|
||
res.json({
|
||
code: 200,
|
||
message: '个人资料更新成功',
|
||
data: {
|
||
id: user.id,
|
||
username: user.username,
|
||
nickname: user.nickname,
|
||
status: user.status,
|
||
createdAt: user.createdAt,
|
||
updatedAt: user.updatedAt
|
||
}
|
||
});
|
||
} catch (error) {
|
||
console.error('更新个人资料失败:', error);
|
||
res.status(500).json({
|
||
code: 500,
|
||
message: '更新个人资料失败',
|
||
error: error.message
|
||
});
|
||
}
|
||
};
|
||
|
||
// 修改密码
|
||
exports.changePassword = async (req, res) => {
|
||
try {
|
||
const { oldPassword, newPassword } = req.body;
|
||
|
||
// 验证参数
|
||
if (!oldPassword || !newPassword) {
|
||
return res.status(400).json({
|
||
code: 400,
|
||
message: '旧密码和新密码不能为空'
|
||
});
|
||
}
|
||
|
||
if (newPassword.length < 6) {
|
||
return res.status(400).json({
|
||
code: 400,
|
||
message: '新密码长度至少6位'
|
||
});
|
||
}
|
||
|
||
// 验证旧密码
|
||
const user = await User.findByPk(req.user.id);
|
||
if (!user) {
|
||
return res.status(404).json({
|
||
code: 404,
|
||
message: '用户不存在'
|
||
});
|
||
}
|
||
|
||
const isPasswordValid = await bcrypt.compare(oldPassword, user.password);
|
||
if (!isPasswordValid) {
|
||
return res.status(400).json({
|
||
code: 400,
|
||
message: '旧密码错误'
|
||
});
|
||
}
|
||
|
||
// 更新密码
|
||
const hashedPassword = await bcrypt.hash(newPassword, 10);
|
||
await user.update({
|
||
password: hashedPassword,
|
||
updateBy: req.user.id
|
||
});
|
||
|
||
// 记录操作日志
|
||
await logOperation({
|
||
userId: req.user.id,
|
||
username: req.user.username,
|
||
module: '个人中心',
|
||
action: '修改密码',
|
||
description: '修改个人密码',
|
||
method: req.method,
|
||
path: req.path,
|
||
ip: req.ip,
|
||
status: 'success'
|
||
});
|
||
|
||
res.json({
|
||
code: 200,
|
||
message: '密码修改成功'
|
||
});
|
||
} catch (error) {
|
||
console.error('修改密码失败:', error);
|
||
res.status(500).json({
|
||
code: 500,
|
||
message: '修改密码失败',
|
||
error: error.message
|
||
});
|
||
}
|
||
};
|