114 lines
3.3 KiB
TypeScript
114 lines
3.3 KiB
TypeScript
import { createApiError } from '../utils/api-error'
|
|
import {
|
|
createSession,
|
|
createUserAccount,
|
|
isInitialized
|
|
} from '../utils/auth'
|
|
import {
|
|
setAllowRegistration,
|
|
setSetting,
|
|
SETTINGS_IMAGE_BASE_URL,
|
|
SETTINGS_SITE_BASE_URL,
|
|
SETTINGS_VIDEO_BASE_URL,
|
|
SETTINGS_FILE_BASE_URL,
|
|
SETTINGS_DOMAIN_SEPARATION,
|
|
SETTINGS_IMAGE_DOMAIN_SEPARATED,
|
|
SETTINGS_VIDEO_DOMAIN_SEPARATED,
|
|
SETTINGS_FILE_DOMAIN_SEPARATED
|
|
} from '../utils/db'
|
|
import {
|
|
normalizeFileBaseUrl,
|
|
normalizeImageBaseUrl,
|
|
normalizeSiteBaseUrl,
|
|
normalizeVideoBaseUrl,
|
|
validateDomainSeparationPair
|
|
} from '../utils/env'
|
|
import { clientIp, logInfo } from '../utils/logger'
|
|
|
|
interface SetupBody {
|
|
username?: string
|
|
password?: string
|
|
allowRegistration?: boolean
|
|
domainSeparation?: boolean
|
|
siteBaseUrl?: string
|
|
imageBaseUrl?: string
|
|
videoBaseUrl?: string
|
|
fileBaseUrl?: string
|
|
}
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
if (isInitialized()) {
|
|
createApiError(event, 'FORBIDDEN', '系统已初始化', 403)
|
|
}
|
|
|
|
const body = await readBody<SetupBody>(event)
|
|
const username = body?.username?.trim() ?? ''
|
|
const password = body?.password ?? ''
|
|
|
|
try {
|
|
const user = await createUserAccount({
|
|
username,
|
|
password,
|
|
role: 'admin'
|
|
})
|
|
|
|
setAllowRegistration(Boolean(body?.allowRegistration))
|
|
|
|
if (body?.domainSeparation) {
|
|
const siteBaseUrl = normalizeSiteBaseUrl(body.siteBaseUrl ?? '')
|
|
const imageBaseUrl = normalizeImageBaseUrl(body.imageBaseUrl ?? '')
|
|
const videoBaseUrl = normalizeVideoBaseUrl(body.videoBaseUrl ?? '')
|
|
const fileBaseUrl = normalizeFileBaseUrl(body.fileBaseUrl ?? '')
|
|
const pairError = validateDomainSeparationPair(
|
|
siteBaseUrl,
|
|
imageBaseUrl,
|
|
videoBaseUrl,
|
|
fileBaseUrl
|
|
)
|
|
if (pairError) {
|
|
createApiError(event, 'INVALID_REQUEST', pairError, 400)
|
|
}
|
|
setSetting(SETTINGS_SITE_BASE_URL, siteBaseUrl)
|
|
setSetting(SETTINGS_IMAGE_BASE_URL, imageBaseUrl)
|
|
setSetting(SETTINGS_VIDEO_BASE_URL, videoBaseUrl)
|
|
setSetting(SETTINGS_FILE_BASE_URL, fileBaseUrl)
|
|
setSetting(SETTINGS_DOMAIN_SEPARATION, 'true')
|
|
setSetting(SETTINGS_IMAGE_DOMAIN_SEPARATED, imageBaseUrl ? 'true' : 'false')
|
|
setSetting(SETTINGS_VIDEO_DOMAIN_SEPARATED, videoBaseUrl ? 'true' : 'false')
|
|
setSetting(SETTINGS_FILE_DOMAIN_SEPARATED, fileBaseUrl ? 'true' : 'false')
|
|
} else {
|
|
setSetting(SETTINGS_DOMAIN_SEPARATION, 'false')
|
|
}
|
|
|
|
await createSession(event, user.id)
|
|
|
|
logInfo('setup complete', { ip: clientIp(event), username: user.username })
|
|
|
|
return {
|
|
success: true,
|
|
user: { id: user.id, username: user.username, role: user.role }
|
|
}
|
|
} catch (error: unknown) {
|
|
if (error instanceof Error) {
|
|
if (error.message === 'INVALID_USERNAME') {
|
|
createApiError(
|
|
event,
|
|
'INVALID_REQUEST',
|
|
'用户名需为 3–32 位字母、数字或下划线',
|
|
400
|
|
)
|
|
} else if (error.message === 'INVALID_PASSWORD') {
|
|
createApiError(
|
|
event,
|
|
'INVALID_REQUEST',
|
|
'密码至少 8 位',
|
|
400
|
|
)
|
|
} else if (error.message === 'USERNAME_TAKEN') {
|
|
createApiError(event, 'INVALID_REQUEST', '用户名已被占用', 400)
|
|
}
|
|
}
|
|
throw error
|
|
}
|
|
})
|