用户资料/重置密码/用户管理

server/api/admin/users/[id]/clear-password.post.ts

@@ -0,0 +1,29 @@
+import { requireAdminAuth } from '../../../../utils/access'
+import { createApiError } from '../../../../utils/api-error'
+import { clearUserPassword, findUserById } from '../../../../utils/db'
+import { logActivity } from '../../../../utils/activity-log'
+
+export default defineEventHandler(async (event) => {
+  const operator = await requireAdminAuth(event)
+
+  const id = Number(getRouterParam(event, 'id'))
+  const target = Number.isInteger(id) ? findUserById(id) : null
+  if (!target) {
+    createApiError(event, 'INVALID_REQUEST', '用户不存在', 404)
+  }
+  if (target.id === operator.id) {
+    createApiError(event, 'INVALID_REQUEST', '不能清除自己的密码', 400)
+  }
+
+  clearUserPassword(target.id)
+
+  logActivity(event, {
+    action: 'settings',
+    key: `users/${target.id}/clear-password`,
+    originalName: target.username,
+    userId: operator.id,
+    source: 'admin'
+  })
+
+  return { success: true }
+})