release: PicHost v1.0.0

Multi-user image hosting with RBAC, upload preferences, and admin settings.

server/api/auth/migrate.post.ts

@@ -0,0 +1,75 @@
+import {
+  clearLegacyAuthCookie,
+  verifyLegacyAuth
+} from '../../utils/access'
+import { createApiError } from '../../utils/api-error'
+import {
+  createSession,
+  createUserAccount,
+  isInitialized
+} from '../../utils/auth'
+import { setAllowRegistration } from '../../utils/db'
+import { clientIp, logInfo } from '../../utils/logger'
+
+interface MigrateBody {
+  username?: string
+  password?: string
+  allowRegistration?: boolean
+}
+
+export default defineEventHandler(async (event) => {
+  if (isInitialized()) {
+    createApiError(event, 'FORBIDDEN', '系统已初始化', 403)
+  }
+
+  if (!(await verifyLegacyAuth(event))) {
+    createApiError(event, 'UNAUTHORIZED', '请先使用管理密钥登录', 401)
+  }
+
+  const body = await readBody<MigrateBody>(event)
+  const username = body?.username?.trim() ?? ''
+  const password = body?.password ?? ''
+
+  try {
+    const user = await createUserAccount({
+      username,
+      password,
+      role: 'admin'
+    })
+
+    setAllowRegistration(Boolean(body?.allowRegistration))
+    clearLegacyAuthCookie(event)
+    await createSession(event, user.id)
+
+    logInfo('legacy migration complete', {
+      ip: clientIp(event),
+      username: user.username
+    })
+
+    return {
+      success: true,
+      user: { id: user.id, username: user.username, role: user.role }
+    }
+  } catch (error: unknown) {
+    if (error instanceof Error) {
+      if (error.message === 'INVALID_USERNAME') {
+        createApiError(
+          event,
+          'INVALID_REQUEST',
+          '用户名需为 3–32 位字母、数字或下划线',
+          400
+        )
+      } else if (error.message === 'INVALID_PASSWORD') {
+        createApiError(
+          event,
+          'INVALID_REQUEST',
+          '密码至少 8 位',
+          400
+        )
+      } else if (error.message === 'USERNAME_TAKEN') {
+        createApiError(event, 'INVALID_REQUEST', '用户名已被占用', 400)
+      }
+    }
+    throw error
+  }
+})