first commit
This commit is contained in:
浪子
commit
7e927accac
|
|
@ -0,0 +1,3 @@
|
|||
node_modules
|
||||
.wrangler
|
||||
.claude
|
||||
|
|
@ -0,0 +1,65 @@
|
|||
# Cloudflare 在线聊天室（D1 + KV + R2）
|
||||
|
||||
按 `readme.txt` 需求实现的最小可用在线聊天室：D1 存用户/房间/消息，KV 做会话与房间访问令牌缓存，R2 存图片。
|
||||
|
||||
## 功能概览
|
||||
|
||||
- 房间模式：开放/私密
|
||||
- 当前版本只有一个房间：大厅（可选设置密码）
|
||||
- 开放：所有人可浏览；必须注册登录才能发言
|
||||
- 私密：需要密码进入；可选“允许游客匿名发言”
|
||||
- 用户等级：匿名游客 / 注册会员 / 认证会员 / 管理员
|
||||
- 注册会员：可发文字/表情；不可上传图片
|
||||
- 认证会员：可上传图片（R2）
|
||||
- 管理员：可编辑用户资料与等级、封禁用户、删除消息
|
||||
- 页面：注册、登录、找回密码、房间列表、聊天窗口（左右气泡）
|
||||
- 实时：SSE（EventSource）推送（简化实现，适合 MVP）
|
||||
|
||||
## 本地开发
|
||||
|
||||
1) 安装依赖
|
||||
|
||||
```bash
|
||||
npm i
|
||||
```
|
||||
|
||||
2) 创建并迁移 D1
|
||||
|
||||
```bash
|
||||
npx wrangler d1 create chat_db
|
||||
# 把输出的 database_id 填到 wrangler.toml
|
||||
npx wrangler d1 execute chat_db --file=./schema.sql
|
||||
```
|
||||
|
||||
3) 创建 KV / R2，并填入 `wrangler.toml`
|
||||
|
||||
```bash
|
||||
npx wrangler kv namespace create CACHE
|
||||
npx wrangler r2 bucket create chat-bucket
|
||||
```
|
||||
|
||||
4) 启动
|
||||
|
||||
```bash
|
||||
npm run dev
|
||||
```
|
||||
|
||||
## 部署
|
||||
|
||||
```bash
|
||||
npm run deploy
|
||||
```
|
||||
|
||||
## 管理员
|
||||
|
||||
生产/开发环境：第一个注册成功的用户会自动提升为管理员（后续用户为注册会员）。
|
||||
|
||||
开发环境也可用接口创建管理员（`wrangler.toml` 的 `DEV_MODE = "true"`）：
|
||||
|
||||
```bash
|
||||
curl -X POST http://localhost:8787/api/admin/debug/create-admin ^
|
||||
-H "content-type: application/json" ^
|
||||
-d "{\"username\":\"admin\",\"password\":\"admin123\"}"
|
||||
```
|
||||
|
||||
管理员可在页面右侧“管理 → 大厅密码”设置/取消大厅密码：设置后游客登录会要求输入该密码；取消后游客登录直接进入。
|
||||
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1,17 @@
|
|||
{
|
||||
"name": "cf-chat",
|
||||
"private": true,
|
||||
"type": "module",
|
||||
"scripts": {
|
||||
"dev": "wrangler dev",
|
||||
"deploy": "wrangler deploy"
|
||||
},
|
||||
"devDependencies": {
|
||||
"@cloudflare/workers-types": "^4.20241206.0",
|
||||
"typescript": "^5.6.3",
|
||||
"wrangler": "^3.100.0"
|
||||
},
|
||||
"dependencies": {
|
||||
"resend": "^6.9.1"
|
||||
}
|
||||
}
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1,282 @@
|
|||
<!doctype html>
|
||||
<html lang="zh-CN">
|
||||
<head>
|
||||
<meta charset="UTF-8" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
||||
<title>在线聊天室</title>
|
||||
<script>
|
||||
(() => {
|
||||
try {
|
||||
const saved = localStorage.getItem("theme");
|
||||
const theme =
|
||||
saved === "dark" || saved === "light"
|
||||
? saved
|
||||
: window.matchMedia && window.matchMedia("(prefers-color-scheme: dark)").matches
|
||||
? "dark"
|
||||
: "light";
|
||||
document.documentElement.dataset.theme = theme;
|
||||
} catch {}
|
||||
})();
|
||||
</script>
|
||||
<link rel="stylesheet" href="/app.css" />
|
||||
</head>
|
||||
<body>
|
||||
<div class="scene-container">
|
||||
<main class="chat-room" id="chatRoom">
|
||||
<div class="chat-interface">
|
||||
<header class="topbar">
|
||||
<div class="brand">聊天室</div>
|
||||
<div class="topbarRight">
|
||||
<div class="me" id="meBox"></div>
|
||||
<button class="btn iconBtn themeBtn" id="themeBtn" type="button" aria-label="切换黑夜模式" aria-pressed="false">
|
||||
<svg viewBox="0 0 24 24" aria-hidden="true" focusable="false" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
||||
<path d="M21 12.8A9 9 0 1 1 11.2 3 7 7 0 0 0 21 12.8Z" />
|
||||
</svg>
|
||||
</button>
|
||||
<button class="btn iconBtn menuBtn" id="menuBtn" type="button" aria-label="账户与管理">
|
||||
<svg viewBox="0 0 24 24" aria-hidden="true" focusable="false" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
||||
<path d="M20 21a8 8 0 0 0-16 0" />
|
||||
<circle cx="12" cy="8" r="4" />
|
||||
</svg>
|
||||
</button>
|
||||
</div>
|
||||
</header>
|
||||
|
||||
<div class="menuDropdown" id="menuDropdown" hidden>
|
||||
<div class="menuDropdownCard card" id="menuDropdownCard">
|
||||
<div class="menuDropdownHeader">
|
||||
<div class="menuDropdownTitle">菜单</div>
|
||||
<button class="btn iconBtn" id="menuCloseBtn" type="button" aria-label="关闭菜单">
|
||||
<svg viewBox="0 0 24 24" aria-hidden="true" focusable="false" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
||||
<path d="M18 6 6 18" />
|
||||
<path d="M6 6l12 12" />
|
||||
</svg>
|
||||
</button>
|
||||
</div>
|
||||
<div id="menuHost">
|
||||
<details class="card fold" id="accountFold">
|
||||
<summary class="foldSummary">账户</summary>
|
||||
<div class="foldBody">
|
||||
<div id="authBox"></div>
|
||||
</div>
|
||||
</details>
|
||||
|
||||
<details class="card fold" id="adminCard" style="display:none">
|
||||
<summary class="foldSummary">管理</summary>
|
||||
<div class="foldBody">
|
||||
<div class="row">
|
||||
<button id="loadUsersBtn" class="btn">刷新用户</button>
|
||||
<button id="lobbyPwdBtn" class="btn">大厅密码</button>
|
||||
</div>
|
||||
<div id="adminToolsBox" class="stack" style="margin-top:10px" hidden></div>
|
||||
<div class="hint" style="margin-top:10px">用户列表</div>
|
||||
<div id="adminUsersBox" class="admin"></div>
|
||||
</div>
|
||||
</details>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<main class="layout">
|
||||
<aside class="sidebar">
|
||||
<div class="card" id="onlineCard">
|
||||
<div class="row" style="justify-content:space-between; align-items:center">
|
||||
<div style="font-weight:900; color:var(--text-main); font-size:13px">在线用户</div>
|
||||
<div class="hint" id="onlineCount"></div>
|
||||
</div>
|
||||
<div class="onlineList" id="onlineList"></div>
|
||||
</div>
|
||||
</aside>
|
||||
|
||||
<section class="chat">
|
||||
<div class="chatHeader">
|
||||
<div>
|
||||
<div class="chatTitle" id="roomTitle">未进入聊天室</div>
|
||||
<div class="chatSubtitle" id="roomSubtitle"></div>
|
||||
</div>
|
||||
<div class="row">
|
||||
<button id="leaveRoomBtn" class="btn" disabled>离开</button>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="messages" id="messages"></div>
|
||||
|
||||
<div class="composer">
|
||||
<div class="composerRow">
|
||||
<button class="btn iconBtn toolBtn" id="emojiBtn" type="button" aria-label="表情" disabled>
|
||||
<svg viewBox="0 0 24 24" aria-hidden="true" focusable="false" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
||||
<path d="M21 12a9 9 0 1 1-18 0 9 9 0 0 1 18 0Z" />
|
||||
<path d="M8 14s1.5 2 4 2 4-2 4-2" />
|
||||
<path d="M9 9h.01" />
|
||||
<path d="M15 9h.01" />
|
||||
</svg>
|
||||
</button>
|
||||
|
||||
<button class="btn iconBtn toolBtn" id="imageBtn" type="button" aria-label="图片" disabled hidden>
|
||||
<svg viewBox="0 0 24 24" aria-hidden="true" focusable="false" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
||||
<path d="M21 19a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h14a2 2 0 0 1 2 2v14Z" />
|
||||
<path d="M8.5 10.5a1.5 1.5 0 1 0 0-3 1.5 1.5 0 0 0 0 3Z" />
|
||||
<path d="m21 15-5-5L5 21" />
|
||||
</svg>
|
||||
</button>
|
||||
|
||||
<div class="msgInputWrap" id="msgInputWrap">
|
||||
<img id="inlineThumb" class="inlineThumb" alt="待发送图片" hidden />
|
||||
<input id="msgInput" class="input" placeholder="输入消息…" disabled />
|
||||
</div>
|
||||
<button id="sendBtn" class="btn btnPrimary" disabled>发送</button>
|
||||
</div>
|
||||
|
||||
<input id="fileInput" type="file" accept="image/*" hidden />
|
||||
<div class="composerAttach" id="composerAttach" hidden></div>
|
||||
<div class="emojiPanel" id="emojiPanel" hidden></div>
|
||||
</div>
|
||||
</section>
|
||||
</main>
|
||||
</div>
|
||||
</main>
|
||||
|
||||
<div class="doors-container" id="doorsContainer" aria-hidden="true">
|
||||
<div class="door left">
|
||||
<div class="door-handle"></div>
|
||||
</div>
|
||||
<div class="door right">
|
||||
<div class="door-handle"></div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="login-wrapper" id="loginWrapper">
|
||||
<div class="login-card">
|
||||
<h1>进入聊天室</h1>
|
||||
<p>门已锁好，请验证身份进入</p>
|
||||
<div class="gateTabs">
|
||||
<button class="btn btnPrimary" id="gateTabLogin" type="button">登录</button>
|
||||
<button class="btn" id="gateTabRegister" type="button">注册</button>
|
||||
<button class="btn" id="gateTabGuest" type="button">游客登录</button>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- 登录/注册/游客 模态框 -->
|
||||
<div class="confirm" id="gateModal" hidden>
|
||||
<div class="confirmCard gateModalCard">
|
||||
<div class="gateModalHeader">
|
||||
<div class="confirmTitle" id="gateModalTitle"></div>
|
||||
<button class="btn iconBtn" id="gateModalClose" type="button" aria-label="关闭">
|
||||
<svg viewBox="0 0 24 24" aria-hidden="true" focusable="false" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
||||
<path d="M18 6 6 18" /><path d="M6 6l12 12" />
|
||||
</svg>
|
||||
</button>
|
||||
</div>
|
||||
<div class="error-msg" id="gateError"></div>
|
||||
|
||||
<form id="gateLoginForm" class="gatePanel" hidden>
|
||||
<div class="input-group">
|
||||
<label for="gateLoginUser">用户名</label>
|
||||
<input id="gateLoginUser" autocomplete="username" />
|
||||
</div>
|
||||
<div class="input-group">
|
||||
<label for="gateLoginPass">密码</label>
|
||||
<input id="gateLoginPass" type="password" autocomplete="current-password" />
|
||||
</div>
|
||||
<button class="login-btn" type="submit">登录并进入</button>
|
||||
<button class="link" type="button" id="forgotPasswordBtn">找回密码</button>
|
||||
</form>
|
||||
|
||||
<form id="gateRegisterForm" class="gatePanel" hidden>
|
||||
<div class="input-group">
|
||||
<label for="gateRegUser">用户名</label>
|
||||
<input id="gateRegUser" autocomplete="username" />
|
||||
</div>
|
||||
<div class="input-group">
|
||||
<label for="gateRegPass">密码</label>
|
||||
<input id="gateRegPass" type="password" autocomplete="new-password" />
|
||||
</div>
|
||||
<div class="input-group">
|
||||
<label for="gateRegEmail">邮箱（选填）</label>
|
||||
<input id="gateRegEmail" autocomplete="email" />
|
||||
</div>
|
||||
<div class="input-group">
|
||||
<label for="gateRegQq">QQ（选填）</label>
|
||||
<input id="gateRegQq" autocomplete="off" />
|
||||
</div>
|
||||
<div class="input-group">
|
||||
<label for="gateRegPhone">联系电话（选填）</label>
|
||||
<input id="gateRegPhone" autocomplete="tel" />
|
||||
</div>
|
||||
<button class="login-btn" type="submit">注册并进入</button>
|
||||
</form>
|
||||
|
||||
<form id="gateGuestForm" class="gatePanel" hidden>
|
||||
<input id="gateGuestUser" class="srOnly" name="username" autocomplete="username" tabindex="-1" />
|
||||
<div class="hint" id="gateGuestNameHint"></div>
|
||||
<div class="input-group">
|
||||
<label for="gateGuestPass">聊天室密码（若已设置）</label>
|
||||
<input id="gateGuestPass" type="password" autocomplete="current-password" />
|
||||
<div class="hint" id="gateGuestHint"></div>
|
||||
</div>
|
||||
<button class="login-btn" type="submit">游客进入</button>
|
||||
</form>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- 找回密码模态框 -->
|
||||
<div class="confirm" id="forgotModal" hidden>
|
||||
<div class="confirmCard" style="width:min(480px,92vw)">
|
||||
<div class="confirmTitle" id="forgotModalTitle">找回密码</div>
|
||||
<!-- 步骤1 -->
|
||||
<div id="forgotStep1" class="stack" style="margin-top:12px">
|
||||
<div class="hint">请输入你的用户名，我们将向注册邮箱发送 6 位数字验证码。</div>
|
||||
<div class="input-group">
|
||||
<label for="forgotUsername">用户名</label>
|
||||
<input id="forgotUsername" autocomplete="username" />
|
||||
</div>
|
||||
<div class="hint" id="forgotStep1Msg"></div>
|
||||
<div class="row" style="justify-content:flex-end;margin-top:4px">
|
||||
<button class="btn" id="forgotCancelBtn" type="button">取消</button>
|
||||
<button class="btn btnPrimary" id="forgotSendBtn" type="button">发送验证码</button>
|
||||
</div>
|
||||
</div>
|
||||
<!-- 步骤2 -->
|
||||
<div id="forgotStep2" class="stack" style="margin-top:12px;display:none">
|
||||
<div class="hint">请输入邮件中收到的 6 位数字验证码和新密码。验证码有效期 30 分钟。</div>
|
||||
<div class="input-group">
|
||||
<label for="forgotToken">验证码</label>
|
||||
<input id="forgotToken" maxlength="6" pattern="[0-9]*" inputmode="numeric" autocomplete="one-time-code" />
|
||||
</div>
|
||||
<div class="input-group">
|
||||
<label for="forgotNewPass">新密码</label>
|
||||
<input id="forgotNewPass" type="password" autocomplete="new-password" />
|
||||
</div>
|
||||
<div class="hint" id="forgotStep2Msg"></div>
|
||||
<div class="row" style="justify-content:flex-end;margin-top:4px">
|
||||
<button class="btn" id="forgotBackBtn" type="button">返回</button>
|
||||
<button class="btn btnPrimary" id="forgotResetBtn" type="button">重置密码</button>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="imgViewer" id="imgViewer" hidden>
|
||||
<div class="imgViewerBackdrop" id="imgViewerBackdrop"></div>
|
||||
<img class="imgViewerImg" id="imgViewerImg" alt="图片预览" />
|
||||
<button class="imgViewerClose" id="imgViewerClose" type="button">关闭</button>
|
||||
</div>
|
||||
|
||||
<div class="toast" id="toast" hidden></div>
|
||||
|
||||
<div class="confirm" id="confirm" hidden>
|
||||
<div class="confirmCard">
|
||||
<div class="confirmTitle" id="confirmTitle"></div>
|
||||
<div class="confirmMsg" id="confirmMsg"></div>
|
||||
<div class="row" style="justify-content:flex-end">
|
||||
<button class="btn" id="confirmCancel" type="button">取消</button>
|
||||
<button class="btn btnPrimary" id="confirmOk" type="button">确定</button>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<script src="/app.js"></script>
|
||||
</body>
|
||||
</html>
|
||||
|
|
@ -0,0 +1,153 @@
|
|||
<!doctype html>
|
||||
<html lang="zh-CN">
|
||||
<head>
|
||||
<meta charset="UTF-8" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
||||
<title>找回密码</title>
|
||||
<link rel="stylesheet" href="/app.css" />
|
||||
</head>
|
||||
<body>
|
||||
<div class="center">
|
||||
<div class="card wide">
|
||||
<div class="cardTitle">找回密码</div>
|
||||
|
||||
<!-- 步骤1: 请求发送重置邮件 -->
|
||||
<div id="requestStep" class="stack">
|
||||
<div class="hint">请输入你的用户名，我们将向你注册时填写的邮箱发送 6 位数字验证码。</div>
|
||||
<input id="requestUsername" class="input" placeholder="用户名" autocomplete="username" />
|
||||
<button id="requestBtn" class="btn btnPrimary">发送验证码</button>
|
||||
<div id="requestMsg" class="hint"></div>
|
||||
<a class="link" href="/">返回聊天室</a>
|
||||
</div>
|
||||
|
||||
<!-- 步骤2: 输入 token 重置密码 -->
|
||||
<div id="resetStep" class="stack" style="display: none;">
|
||||
<div class="hint">请输入邮件中收到的 6 位数字验证码和新密码。验证码有效期 30 分钟。</div>
|
||||
<input id="token" class="input" placeholder="6 位数字验证码" maxlength="6" pattern="[0-9]*" inputmode="numeric" />
|
||||
<input id="newPassword" class="input" placeholder="新密码（至少6位）" type="password" autocomplete="new-password" />
|
||||
<button id="resetBtn" class="btn btnPrimary">重置密码</button>
|
||||
<div id="resetMsg" class="hint"></div>
|
||||
<button id="backToRequestBtn" class="btn" style="margin-top: 10px;">返回重新发送</button>
|
||||
<a class="link" href="/">返回聊天室</a>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<script type="module">
|
||||
const $ = (id) => document.getElementById(id);
|
||||
const params = new URLSearchParams(location.search);
|
||||
|
||||
// 如果 URL 中有 token，直接显示重置步骤
|
||||
const urlToken = params.get("token");
|
||||
if (urlToken) {
|
||||
$("token").value = urlToken;
|
||||
$("requestStep").style.display = "none";
|
||||
$("resetStep").style.display = "block";
|
||||
}
|
||||
|
||||
// 请求发送重置邮件
|
||||
$("requestBtn").addEventListener("click", async (e) => {
|
||||
e.preventDefault();
|
||||
const username = $("requestUsername").value.trim();
|
||||
if (!username) {
|
||||
$("requestMsg").textContent = "请输入用户名";
|
||||
$("requestMsg").style.color = "red";
|
||||
return;
|
||||
}
|
||||
|
||||
$("requestBtn").disabled = true;
|
||||
$("requestMsg").textContent = "发送中...";
|
||||
$("requestMsg").style.color = "";
|
||||
|
||||
try {
|
||||
const resp = await fetch("/api/auth/request-password-reset", {
|
||||
method: "POST",
|
||||
headers: { "content-type": "application/json" },
|
||||
body: JSON.stringify({ username }),
|
||||
});
|
||||
const data = await resp.json().catch(() => ({}));
|
||||
|
||||
if (resp.ok) {
|
||||
// 开发模式可能返回 devResetLink
|
||||
if (data.devResetLink) {
|
||||
$("requestMsg").innerHTML = `开发模式：<a href="${data.devResetLink}" class="link">点击这里重置密码</a>`;
|
||||
$("requestMsg").style.color = "green";
|
||||
} else {
|
||||
$("requestMsg").textContent = data.message || "✅ 重置链接已发送到邮箱，请查收";
|
||||
$("requestMsg").style.color = "green";
|
||||
// 切换到重置步骤
|
||||
setTimeout(() => {
|
||||
$("requestStep").style.display = "none";
|
||||
$("resetStep").style.display = "block";
|
||||
}, 2000);
|
||||
}
|
||||
} else {
|
||||
$("requestMsg").textContent = data.error || "请求失败，请稍后重试";
|
||||
$("requestMsg").style.color = "red";
|
||||
}
|
||||
} catch (err) {
|
||||
$("requestMsg").textContent = "网络错误，请稍后重试";
|
||||
$("requestMsg").style.color = "red";
|
||||
} finally {
|
||||
$("requestBtn").disabled = false;
|
||||
}
|
||||
});
|
||||
|
||||
// 重置密码
|
||||
$("resetBtn").addEventListener("click", async (e) => {
|
||||
e.preventDefault();
|
||||
const token = $("token").value.trim();
|
||||
const newPassword = $("newPassword").value;
|
||||
|
||||
if (!token) {
|
||||
$("resetMsg").textContent = "请输入验证码";
|
||||
$("resetMsg").style.color = "red";
|
||||
return;
|
||||
}
|
||||
if (!/^\d{6}$/.test(token)) {
|
||||
$("resetMsg").textContent = "验证码必须是 6 位数字";
|
||||
$("resetMsg").style.color = "red";
|
||||
return;
|
||||
}
|
||||
if (newPassword.length < 6) {
|
||||
$("resetMsg").textContent = "密码至少需要 6 位";
|
||||
$("resetMsg").style.color = "red";
|
||||
return;
|
||||
}
|
||||
|
||||
$("resetBtn").disabled = true;
|
||||
$("resetMsg").textContent = "重置中...";
|
||||
$("resetMsg").style.color = "";
|
||||
|
||||
try {
|
||||
const resp = await fetch("/api/auth/reset-password", {
|
||||
method: "POST",
|
||||
headers: { "content-type": "application/json" },
|
||||
body: JSON.stringify({ token, newPassword }),
|
||||
});
|
||||
const data = await resp.json().catch(() => ({}));
|
||||
|
||||
if (resp.ok) {
|
||||
$("resetMsg").textContent = "✅ 密码已重置成功！请返回登录";
|
||||
$("resetMsg").style.color = "green";
|
||||
} else {
|
||||
$("resetMsg").textContent = data.error || "重置失败，验证码可能已过期";
|
||||
$("resetMsg").style.color = "red";
|
||||
}
|
||||
} catch (err) {
|
||||
$("resetMsg").textContent = "网络错误，请稍后重试";
|
||||
$("resetMsg").style.color = "red";
|
||||
} finally {
|
||||
$("resetBtn").disabled = false;
|
||||
}
|
||||
});
|
||||
|
||||
// 返回重新发送
|
||||
$("backToRequestBtn").addEventListener("click", () => {
|
||||
$("resetStep").style.display = "none";
|
||||
$("requestStep").style.display = "block";
|
||||
$("requestMsg").textContent = "";
|
||||
$("resetMsg").textContent = "";
|
||||
});
|
||||
</script>
|
||||
</body>
|
||||
</html>
|
||||
|
|
@ -0,0 +1,52 @@
|
|||
PRAGMA foreign_keys = ON;
|
||||
|
||||
CREATE TABLE IF NOT EXISTS users (
|
||||
id TEXT PRIMARY KEY,
|
||||
username TEXT NOT NULL UNIQUE,
|
||||
password_hash TEXT NOT NULL,
|
||||
email TEXT,
|
||||
qq TEXT,
|
||||
phone TEXT,
|
||||
level INTEGER NOT NULL,
|
||||
created_at INTEGER NOT NULL
|
||||
);
|
||||
|
||||
CREATE TABLE IF NOT EXISTS rooms (
|
||||
id TEXT PRIMARY KEY,
|
||||
name TEXT NOT NULL,
|
||||
is_private INTEGER NOT NULL,
|
||||
password_hash TEXT,
|
||||
allow_anonymous INTEGER NOT NULL,
|
||||
created_by TEXT NOT NULL,
|
||||
created_at INTEGER NOT NULL
|
||||
);
|
||||
|
||||
CREATE TABLE IF NOT EXISTS messages (
|
||||
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
||||
room_id TEXT NOT NULL,
|
||||
user_id TEXT,
|
||||
sender_name TEXT NOT NULL,
|
||||
type TEXT NOT NULL,
|
||||
content TEXT,
|
||||
r2_key TEXT,
|
||||
created_at INTEGER NOT NULL
|
||||
);
|
||||
|
||||
CREATE INDEX IF NOT EXISTS idx_messages_room_id_id ON messages(room_id, id);
|
||||
|
||||
CREATE TABLE IF NOT EXISTS bans (
|
||||
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
||||
user_id TEXT NOT NULL,
|
||||
reason TEXT,
|
||||
until INTEGER,
|
||||
created_at INTEGER NOT NULL
|
||||
);
|
||||
|
||||
CREATE TABLE IF NOT EXISTS password_resets (
|
||||
token TEXT PRIMARY KEY,
|
||||
user_id TEXT NOT NULL,
|
||||
email TEXT NOT NULL,
|
||||
expires_at INTEGER NOT NULL,
|
||||
created_at INTEGER NOT NULL
|
||||
);
|
||||
|
||||
|
|
@ -0,0 +1,29 @@
|
|||
export type Env = {
|
||||
DB: D1Database;
|
||||
CACHE?: KVNamespace;
|
||||
MEMOS_CACHE?: KVNamespace;
|
||||
BUCKET: R2Bucket;
|
||||
ASSETS: Fetcher;
|
||||
SESSION_TTL_SECONDS?: string;
|
||||
ROOM_ACCESS_TTL_SECONDS?: string;
|
||||
DEV_MODE?: string;
|
||||
RESEND_API_KEY?: string;
|
||||
RESEND_FROM_EMAIL?: string;
|
||||
};
|
||||
|
||||
export function getCache(env: Env): KVNamespace {
|
||||
const kv = env.CACHE ?? env.MEMOS_CACHE;
|
||||
if (!kv) throw new Error('KV 未绑定：请在 wrangler.toml 里绑定 "CACHE"');
|
||||
return kv;
|
||||
}
|
||||
|
||||
export function getNumberVar(env: Env, key: keyof Env, fallback: number): number {
|
||||
const value = env[key];
|
||||
if (typeof value !== "string") return fallback;
|
||||
const parsed = Number(value);
|
||||
return Number.isFinite(parsed) ? parsed : fallback;
|
||||
}
|
||||
|
||||
export function isDevMode(env: Env): boolean {
|
||||
return String(env.DEV_MODE ?? "").toLowerCase() === "true";
|
||||
}
|
||||
|
|
@ -0,0 +1,748 @@
|
|||
import type { Env } from "./env";
|
||||
import { isDevMode } from "./env";
|
||||
import { clearCookie, setCookie } from "./lib/cookies";
|
||||
import { hashPassword, randomNumericCode, randomToken, verifyPassword } from "./lib/crypto";
|
||||
import { sendPasswordResetEmail } from "./lib/email";
|
||||
import { forbidden, json, notFound, readJson, unauthorized } from "./lib/http";
|
||||
import { createRoomAccessToken, verifyRoomAccessToken } from "./lib/roomAccess";
|
||||
import { createSession, destroySession, getSession } from "./lib/sessions";
|
||||
import { sleep } from "./lib/sleep";
|
||||
|
||||
type User = {
|
||||
id: string;
|
||||
username: string;
|
||||
email: string | null;
|
||||
qq: string | null;
|
||||
phone: string | null;
|
||||
level: number;
|
||||
created_at: number;
|
||||
};
|
||||
|
||||
type Room = {
|
||||
id: string;
|
||||
name: string;
|
||||
is_private: number;
|
||||
allow_anonymous: number;
|
||||
created_by: string;
|
||||
created_at: number;
|
||||
};
|
||||
|
||||
type Message = {
|
||||
id: number;
|
||||
room_id: string;
|
||||
user_id: string | null;
|
||||
sender_name: string;
|
||||
sender_level: number;
|
||||
type: string;
|
||||
content: string | null;
|
||||
r2_key: string | null;
|
||||
created_at: number;
|
||||
};
|
||||
|
||||
function pickPublicUser(user: User) {
|
||||
return {
|
||||
id: user.id,
|
||||
username: user.username,
|
||||
email: user.email,
|
||||
qq: user.qq,
|
||||
phone: user.phone,
|
||||
level: user.level,
|
||||
created_at: user.created_at,
|
||||
};
|
||||
}
|
||||
|
||||
async function getUserById(env: Env, id: string): Promise<User | null> {
|
||||
const row = await env.DB.prepare(
|
||||
"SELECT id, username, email, qq, phone, level, created_at FROM users WHERE id = ?",
|
||||
)
|
||||
.bind(id)
|
||||
.first<User>();
|
||||
return row ?? null;
|
||||
}
|
||||
|
||||
async function getUserByUsernameForLogin(
|
||||
env: Env,
|
||||
username: string,
|
||||
): Promise<(User & { password_hash: string }) | null> {
|
||||
const row = await env.DB.prepare(
|
||||
"SELECT id, username, password_hash, email, qq, phone, level, created_at FROM users WHERE username = ?",
|
||||
)
|
||||
.bind(username)
|
||||
.first<User & { password_hash: string }>();
|
||||
return row ?? null;
|
||||
}
|
||||
|
||||
async function isUserBanned(env: Env, userId: string): Promise<{ banned: boolean; reason?: string | null }> {
|
||||
const now = Date.now();
|
||||
const row = await env.DB.prepare(
|
||||
"SELECT reason, until FROM bans WHERE user_id = ? ORDER BY id DESC LIMIT 1",
|
||||
)
|
||||
.bind(userId)
|
||||
.first<{ reason: string | null; until: number | null }>();
|
||||
if (!row) return { banned: false };
|
||||
if (row.until && row.until < now) return { banned: false };
|
||||
return { banned: true, reason: row.reason };
|
||||
}
|
||||
|
||||
async function getRoom(env: Env, roomId: string): Promise<(Room & { password_hash: string | null }) | null> {
|
||||
const row = await env.DB.prepare(
|
||||
"SELECT id, name, is_private, password_hash, allow_anonymous, created_by, created_at FROM rooms WHERE id = ?",
|
||||
)
|
||||
.bind(roomId)
|
||||
.first<Room & { password_hash: string | null }>();
|
||||
return row ?? null;
|
||||
}
|
||||
|
||||
const LOBBY_ROOM_ID = "lobby";
|
||||
|
||||
async function ensureLobbyRoom(env: Env): Promise<Room & { password_hash: string | null }> {
|
||||
const existing = await getRoom(env, LOBBY_ROOM_ID);
|
||||
if (existing) {
|
||||
if (existing.is_private && !existing.password_hash) {
|
||||
await env.DB.prepare("UPDATE rooms SET is_private = 0, password_hash = NULL WHERE id = ?")
|
||||
.bind(existing.id)
|
||||
.run();
|
||||
const fixed = await getRoom(env, LOBBY_ROOM_ID);
|
||||
if (!fixed) throw new Error("Failed to load lobby room");
|
||||
return fixed;
|
||||
}
|
||||
return existing;
|
||||
}
|
||||
const now = Date.now();
|
||||
await env.DB.prepare(
|
||||
"INSERT INTO rooms (id, name, is_private, password_hash, allow_anonymous, created_by, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)",
|
||||
)
|
||||
.bind(LOBBY_ROOM_ID, "大厅", 0, null, 1, "system", now)
|
||||
.run();
|
||||
const created = await getRoom(env, LOBBY_ROOM_ID);
|
||||
if (!created) throw new Error("Failed to create lobby room");
|
||||
return created;
|
||||
}
|
||||
|
||||
async function requireAdmin(env: Env, request: Request): Promise<User | Response> {
|
||||
const session = await getSession(env, request);
|
||||
if (!session) return unauthorized();
|
||||
const user = await getUserById(env, session.userId);
|
||||
if (!user) return unauthorized();
|
||||
if (user.level < 3) return forbidden("需要管理员权限");
|
||||
return user;
|
||||
}
|
||||
|
||||
async function requireLogin(env: Env, request: Request): Promise<User | Response> {
|
||||
const session = await getSession(env, request);
|
||||
if (!session) return unauthorized();
|
||||
const user = await getUserById(env, session.userId);
|
||||
if (!user) return unauthorized();
|
||||
const ban = await isUserBanned(env, user.id);
|
||||
if (ban.banned) return forbidden(`你已被封禁${ban.reason ? `：${ban.reason}` : ""}`);
|
||||
return user;
|
||||
}
|
||||
|
||||
async function requireRoomAccessIfPrivate(
|
||||
env: Env,
|
||||
request: Request,
|
||||
room: Room & { password_hash: string | null },
|
||||
): Promise<{ access: { userId?: string; nickname?: string } | null } | Response> {
|
||||
if (!room.is_private) return { access: null };
|
||||
const url = new URL(request.url);
|
||||
const accessToken = url.searchParams.get("accessToken") ?? request.headers.get("x-room-access") ?? null;
|
||||
if (!accessToken) return forbidden("私密房间需要密码进入");
|
||||
const access = await verifyRoomAccessToken(env, room.id, accessToken);
|
||||
if (!access) return forbidden("房间访问令牌无效/已过期，请重新输入密码进入");
|
||||
return { access };
|
||||
}
|
||||
|
||||
function sanitizeUsername(username: string): string | null {
|
||||
const u = username.trim();
|
||||
if (u.length < 2 || u.length > 20) return null;
|
||||
if (!/^[\p{L}\p{N}_-]+$/u.test(u)) return null;
|
||||
return u;
|
||||
}
|
||||
|
||||
function sanitizeNickname(nickname: string): string | null {
|
||||
const v = nickname.trim();
|
||||
if (v.length < 1 || v.length > 20) return null;
|
||||
return v;
|
||||
}
|
||||
|
||||
export default {
|
||||
async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
|
||||
const url = new URL(request.url);
|
||||
if (!url.pathname.startsWith("/api/")) {
|
||||
return env.ASSETS.fetch(request);
|
||||
}
|
||||
try {
|
||||
return await handleApi(request, env, ctx);
|
||||
} catch (err) {
|
||||
console.error(err);
|
||||
const message = err instanceof Error ? err.message : String(err);
|
||||
return json({ error: isDevMode(env) ? message : "服务器错误" }, { status: 500 });
|
||||
}
|
||||
},
|
||||
};
|
||||
|
||||
async function handleApi(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
|
||||
const url = new URL(request.url);
|
||||
const { pathname } = url;
|
||||
|
||||
if (pathname === "/api/health") return json({ ok: true });
|
||||
|
||||
if (pathname === "/api/lobby" && request.method === "GET") {
|
||||
const lobby = await ensureLobbyRoom(env);
|
||||
return json({
|
||||
room: {
|
||||
id: lobby.id,
|
||||
name: lobby.name,
|
||||
is_private: lobby.is_private,
|
||||
allow_anonymous: lobby.allow_anonymous,
|
||||
created_by: lobby.created_by,
|
||||
created_at: lobby.created_at,
|
||||
},
|
||||
guestPasswordRequired: Boolean(lobby.is_private),
|
||||
});
|
||||
}
|
||||
|
||||
if (pathname === "/api/me" && request.method === "GET") {
|
||||
const session = await getSession(env, request);
|
||||
if (!session) return json({ user: null });
|
||||
const user = await getUserById(env, session.userId);
|
||||
if (!user) return json({ user: null });
|
||||
return json({ user: pickPublicUser(user) });
|
||||
}
|
||||
|
||||
if (pathname === "/api/auth/register" && request.method === "POST") {
|
||||
const body = await readJson<{
|
||||
username?: string;
|
||||
password?: string;
|
||||
email?: string;
|
||||
qq?: string;
|
||||
phone?: string;
|
||||
}>(request);
|
||||
if (!body) return json({ error: "无效 JSON" }, { status: 400 });
|
||||
const username = body.username ? sanitizeUsername(body.username) : null;
|
||||
const password = (body.password ?? "").trim();
|
||||
if (!username) return json({ error: "用户名不合法（2-20 位，仅字母数字 _-）" }, { status: 400 });
|
||||
if (username.startsWith("游客")) return json({ error: "用户名不能以“游客”开头（该前缀保留给匿名游客）" }, { status: 400 });
|
||||
if (password.length < 6) return json({ error: "密码至少 6 位" }, { status: 400 });
|
||||
const passwordHash = await hashPassword(password);
|
||||
const id = crypto.randomUUID();
|
||||
const now = Date.now();
|
||||
try {
|
||||
// 首个注册用户自动成为管理员（level=3），其余为注册会员（level=1）
|
||||
await env.DB.prepare(
|
||||
"INSERT INTO users (id, username, password_hash, email, qq, phone, level, created_at) VALUES (?, ?, ?, ?, ?, ?, (CASE WHEN (SELECT COUNT(1) FROM users) = 0 THEN 3 ELSE 1 END), ?)",
|
||||
)
|
||||
.bind(
|
||||
id,
|
||||
username,
|
||||
passwordHash,
|
||||
body.email?.trim() || null,
|
||||
body.qq?.trim() || null,
|
||||
body.phone?.trim() || null,
|
||||
now,
|
||||
)
|
||||
.run();
|
||||
} catch {
|
||||
return json({ error: "用户名已存在" }, { status: 409 });
|
||||
}
|
||||
|
||||
let sessionCookie: string;
|
||||
try {
|
||||
({ setCookie: sessionCookie } = await createSession(env, id));
|
||||
} catch (err) {
|
||||
console.error(err);
|
||||
return json({ error: "会话服务不可用（KV 未绑定或异常），请检查 KV 绑定" }, { status: 500 });
|
||||
}
|
||||
const headers = new Headers();
|
||||
setCookie(headers, sessionCookie);
|
||||
return json({ ok: true }, { headers });
|
||||
}
|
||||
|
||||
if (pathname === "/api/auth/login" && request.method === "POST") {
|
||||
const body = await readJson<{ username?: string; password?: string }>(request);
|
||||
if (!body) return json({ error: "无效 JSON" });
|
||||
const username = body.username ? sanitizeUsername(body.username) : null;
|
||||
const password = (body.password ?? "").trim();
|
||||
if (!username || !password) return json({ error: "用户名或密码错误" });
|
||||
const user = await getUserByUsernameForLogin(env, username);
|
||||
if (!user) return json({ error: "用户名或密码错误" });
|
||||
const ok = await verifyPassword(password, user.password_hash);
|
||||
if (!ok) return json({ error: "用户名或密码错误" });
|
||||
const ban = await isUserBanned(env, user.id);
|
||||
if (ban.banned) return forbidden(`你已被封禁${ban.reason ? `：${ban.reason}` : ""}`);
|
||||
let sessionCookie: string;
|
||||
try {
|
||||
({ setCookie: sessionCookie } = await createSession(env, user.id));
|
||||
} catch (err) {
|
||||
console.error(err);
|
||||
return json({ error: "会话服务不可用（KV 未绑定或异常），请检查 KV 绑定" }, { status: 500 });
|
||||
}
|
||||
const headers = new Headers();
|
||||
setCookie(headers, sessionCookie);
|
||||
return json({ ok: true }, { headers });
|
||||
}
|
||||
|
||||
if (pathname === "/api/auth/debug/user" && request.method === "GET") {
|
||||
if (!isDevMode(env)) return forbidden("仅 DEV_MODE 可用");
|
||||
const usernameRaw = url.searchParams.get("username") ?? "";
|
||||
const username = sanitizeUsername(usernameRaw) ?? "";
|
||||
if (!username) return json({ exists: false, reason: "invalid_username" });
|
||||
const row = await env.DB.prepare("SELECT id, username, email, level, created_at FROM users WHERE username = ?")
|
||||
.bind(username)
|
||||
.first<{ id: string; username: string; email: string | null; level: number; created_at: number }>();
|
||||
if (!row) return json({ exists: false });
|
||||
return json({
|
||||
exists: true,
|
||||
user: {
|
||||
id: row.id,
|
||||
username: row.username,
|
||||
hasEmail: Boolean(row.email),
|
||||
level: row.level,
|
||||
created_at: row.created_at,
|
||||
},
|
||||
});
|
||||
}
|
||||
|
||||
if (pathname === "/api/auth/logout" && request.method === "POST") {
|
||||
const cookie = await destroySession(env, request);
|
||||
const headers = new Headers();
|
||||
if (cookie) setCookie(headers, cookie);
|
||||
return json({ ok: true }, { headers });
|
||||
}
|
||||
|
||||
if (pathname === "/api/auth/request-password-reset" && request.method === "POST") {
|
||||
const body = await readJson<{ username?: string }>(request);
|
||||
if (!body?.username) return json({ error: "请输入用户名" }, { status: 400 });
|
||||
const username = sanitizeUsername(body.username);
|
||||
if (!username) return json({ error: "用户名格式不正确" }, { status: 400 });
|
||||
|
||||
const user = await env.DB.prepare("SELECT id, username, email FROM users WHERE username = ?")
|
||||
.bind(username)
|
||||
.first<{ id: string; username: string; email: string | null }>();
|
||||
|
||||
if (!user) {
|
||||
return json({ error: "用户不存在" }, { status: 404 });
|
||||
}
|
||||
|
||||
if (!user.email) {
|
||||
return json({ error: "该账号未绑定邮箱，无法找回密码" }, { status: 400 });
|
||||
}
|
||||
|
||||
const token = randomNumericCode(6); // 生成 6 位数字验证码
|
||||
const now = Date.now();
|
||||
const expiresAt = now + 1000 * 60 * 30;
|
||||
await env.DB.prepare(
|
||||
"INSERT INTO password_resets (token, user_id, email, expires_at, created_at) VALUES (?, ?, ?, ?, ?)",
|
||||
)
|
||||
.bind(token, user.id, user.email, expiresAt, now)
|
||||
.run();
|
||||
|
||||
if (isDevMode(env)) {
|
||||
return json({ ok: true, devResetLink: `/reset.html?token=${encodeURIComponent(token)}` });
|
||||
}
|
||||
|
||||
// 生产模式：发送邮件
|
||||
const emailResult = await sendPasswordResetEmail(env, user.email, token, user.username);
|
||||
if (!emailResult.success) {
|
||||
console.error("发送密码重置邮件失败:", emailResult.error);
|
||||
return json({ error: "邮件发送失败，请稍后重试" }, { status: 500 });
|
||||
}
|
||||
|
||||
return json({ ok: true, message: "重置链接已发送到你的邮箱，请查收" });
|
||||
}
|
||||
|
||||
if (pathname === "/api/auth/reset-password" && request.method === "POST") {
|
||||
const body = await readJson<{ token?: string; newPassword?: string }>(request);
|
||||
const token = (body?.token ?? "").trim();
|
||||
const newPassword = (body?.newPassword ?? "").trim();
|
||||
if (!token || newPassword.length < 6) return json({ error: "参数错误" }, { status: 400 });
|
||||
const row = await env.DB.prepare("SELECT user_id, expires_at FROM password_resets WHERE token = ?")
|
||||
.bind(token)
|
||||
.first<{ user_id: string; expires_at: number }>();
|
||||
if (!row || row.expires_at < Date.now()) return json({ error: "链接无效或已过期" }, { status: 400 });
|
||||
const newHash = await hashPassword(newPassword);
|
||||
await env.DB.batch([
|
||||
env.DB.prepare("UPDATE users SET password_hash = ? WHERE id = ?").bind(newHash, row.user_id),
|
||||
env.DB.prepare("DELETE FROM password_resets WHERE token = ?").bind(token),
|
||||
]);
|
||||
return json({ ok: true });
|
||||
}
|
||||
|
||||
if (pathname === "/api/rooms" && request.method === "GET") {
|
||||
const lobby = await ensureLobbyRoom(env);
|
||||
return json({
|
||||
rooms: [
|
||||
{
|
||||
id: lobby.id,
|
||||
name: lobby.name,
|
||||
is_private: lobby.is_private,
|
||||
allow_anonymous: lobby.allow_anonymous,
|
||||
created_by: lobby.created_by,
|
||||
created_at: lobby.created_at,
|
||||
},
|
||||
],
|
||||
});
|
||||
}
|
||||
|
||||
if (pathname === "/api/rooms" && request.method === "POST") {
|
||||
return forbidden("当前版本仅支持一个聊天室（大厅）");
|
||||
}
|
||||
|
||||
const joinMatch = pathname.match(/^\/api\/rooms\/([^/]+)\/join$/);
|
||||
if (joinMatch && request.method === "POST") {
|
||||
const roomId = joinMatch[1]!;
|
||||
const room = await getRoom(env, roomId);
|
||||
if (!room) return json({ error: "房间不存在" }, { status: 404 });
|
||||
const body = await readJson<{ password?: string; nickname?: string }>(request);
|
||||
|
||||
const session = await getSession(env, request);
|
||||
if (!session) {
|
||||
const password = (body?.password ?? "").trim();
|
||||
if (room.is_private) {
|
||||
if (!room.password_hash) return json({ error: "房间配置错误：缺少密码" }, { status: 500 });
|
||||
const ok = await verifyPassword(password, room.password_hash);
|
||||
if (!ok) return forbidden("密码错误");
|
||||
}
|
||||
if (!room.is_private) return unauthorized("开放房间发言需要登录（可浏览无需加入）");
|
||||
if (!room.allow_anonymous) return unauthorized("该私密房间不允许游客匿名发言，请登录");
|
||||
const nickname = body?.nickname ? sanitizeNickname(body.nickname) : null;
|
||||
if (!nickname) return json({ error: "请输入昵称（1-20）" }, { status: 400 });
|
||||
const { token, ttlSeconds } = await createRoomAccessToken(env, roomId, { nickname });
|
||||
return json({ ok: true, accessToken: token, ttlSeconds, me: { nickname } });
|
||||
}
|
||||
|
||||
if (room.is_private && room.id !== LOBBY_ROOM_ID) {
|
||||
const password = (body?.password ?? "").trim();
|
||||
if (!room.password_hash) return json({ error: "房间配置错误：缺少密码" }, { status: 500 });
|
||||
const ok = await verifyPassword(password, room.password_hash);
|
||||
if (!ok) return forbidden("密码错误");
|
||||
}
|
||||
|
||||
const user = await getUserById(env, session.userId);
|
||||
if (!user) return unauthorized();
|
||||
const ban = await isUserBanned(env, user.id);
|
||||
if (ban.banned) return forbidden(`你已被封禁${ban.reason ? `：${ban.reason}` : ""}`);
|
||||
const { token, ttlSeconds } = await createRoomAccessToken(env, roomId, { userId: user.id });
|
||||
return json({ ok: true, accessToken: token, ttlSeconds, me: pickPublicUser(user) });
|
||||
}
|
||||
|
||||
const messagesMatch = pathname.match(/^\/api\/rooms\/([^/]+)\/messages$/);
|
||||
if (messagesMatch && request.method === "GET") {
|
||||
const roomId = messagesMatch[1]!;
|
||||
const room = await getRoom(env, roomId);
|
||||
if (!room) return json({ error: "房间不存在" }, { status: 404 });
|
||||
const accessResp = await requireRoomAccessIfPrivate(env, request, room);
|
||||
if (accessResp instanceof Response) return accessResp;
|
||||
|
||||
const after = Number(url.searchParams.get("after") ?? "0");
|
||||
const afterId = Number.isFinite(after) && after >= 0 ? after : 0;
|
||||
const rows = await env.DB.prepare(
|
||||
"SELECT m.id, m.room_id, m.user_id, m.sender_name, COALESCE(u.level, 0) as sender_level, m.type, m.content, m.r2_key, m.created_at FROM messages m LEFT JOIN users u ON m.user_id = u.id WHERE m.room_id = ? AND m.id > ? ORDER BY m.id ASC LIMIT 200",
|
||||
)
|
||||
.bind(roomId, afterId)
|
||||
.all<Message>();
|
||||
return json({ messages: rows.results });
|
||||
}
|
||||
|
||||
if (messagesMatch && request.method === "POST") {
|
||||
const roomId = messagesMatch[1]!;
|
||||
const room = await getRoom(env, roomId);
|
||||
if (!room) return json({ error: "房间不存在" }, { status: 404 });
|
||||
|
||||
const body = await readJson<{ type?: string; content?: string; accessToken?: string }>(request);
|
||||
if (!body) return json({ error: "无效 JSON" }, { status: 400 });
|
||||
const type = (body.type ?? "text").trim();
|
||||
const content = (body.content ?? "").trim();
|
||||
if (!content) return json({ error: "内容不能为空" }, { status: 400 });
|
||||
if (content.length > 2000) return json({ error: "内容过长" }, { status: 400 });
|
||||
|
||||
let senderUserId: string | null = null;
|
||||
let senderName: string | null = null;
|
||||
let level = 0;
|
||||
|
||||
const session = await getSession(env, request);
|
||||
if (session) {
|
||||
const user = await getUserById(env, session.userId);
|
||||
if (!user) return unauthorized();
|
||||
const ban = await isUserBanned(env, user.id);
|
||||
if (ban.banned) return forbidden(`你已被封禁${ban.reason ? `：${ban.reason}` : ""}`);
|
||||
senderUserId = user.id;
|
||||
senderName = user.username;
|
||||
level = user.level;
|
||||
}
|
||||
|
||||
if (!room.is_private && !senderUserId) {
|
||||
return unauthorized("开放房间必须登录才能发言");
|
||||
}
|
||||
|
||||
if (room.is_private) {
|
||||
const accessToken = (body.accessToken ?? "").trim();
|
||||
if (!accessToken) return forbidden("私密房间需要先输入密码进入");
|
||||
const access = await verifyRoomAccessToken(env, roomId, accessToken);
|
||||
if (!access) return forbidden("房间访问令牌无效/已过期，请重新进入");
|
||||
if (!senderUserId) {
|
||||
if (!room.allow_anonymous) return unauthorized("该私密房间不允许游客匿名发言，请登录");
|
||||
senderName = access.nickname ?? "游客";
|
||||
}
|
||||
}
|
||||
|
||||
if (!senderName) return unauthorized();
|
||||
|
||||
if (type !== "text" && type !== "emoji" && type !== "link" && type !== "note") {
|
||||
return json({ error: "不支持的消息类型" }, { status: 400 });
|
||||
}
|
||||
if (!senderUserId && type !== "text" && type !== "emoji") {
|
||||
return forbidden("游客仅支持文字/表情");
|
||||
}
|
||||
if (senderUserId && level < 1) return forbidden("无权限发言");
|
||||
|
||||
const now = Date.now();
|
||||
const result = await env.DB.prepare(
|
||||
"INSERT INTO messages (room_id, user_id, sender_name, type, content, r2_key, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)",
|
||||
)
|
||||
.bind(roomId, senderUserId, senderName, type, content, null, now)
|
||||
.run();
|
||||
|
||||
return json({
|
||||
ok: true,
|
||||
message: {
|
||||
id: result.meta.last_row_id as number,
|
||||
room_id: roomId,
|
||||
user_id: senderUserId,
|
||||
sender_name: senderName,
|
||||
sender_level: level,
|
||||
type,
|
||||
content,
|
||||
r2_key: null,
|
||||
created_at: now,
|
||||
} satisfies Message,
|
||||
});
|
||||
}
|
||||
|
||||
const uploadMatch = pathname.match(/^\/api\/rooms\/([^/]+)\/upload$/);
|
||||
if (uploadMatch && request.method === "POST") {
|
||||
const roomId = uploadMatch[1]!;
|
||||
const room = await getRoom(env, roomId);
|
||||
if (!room) return json({ error: "房间不存在" }, { status: 404 });
|
||||
const userOrResp = await requireLogin(env, request);
|
||||
if (userOrResp instanceof Response) return userOrResp;
|
||||
if (userOrResp.level < 2) return forbidden("只有认证会员及以上可以上传图片");
|
||||
const form = await request.formData();
|
||||
const accessToken = String(form.get("accessToken") ?? "");
|
||||
if (room.is_private) {
|
||||
const access = await verifyRoomAccessToken(env, roomId, accessToken);
|
||||
if (!access) return forbidden("私密房间需要先输入密码进入");
|
||||
}
|
||||
const file = form.get("file");
|
||||
if (!(file instanceof File)) return json({ error: "缺少文件" }, { status: 400 });
|
||||
if (!file.type.startsWith("image/")) return json({ error: "仅支持图片" }, { status: 400 });
|
||||
if (file.size > 5 * 1024 * 1024) return json({ error: "图片最大 5MB" }, { status: 400 });
|
||||
|
||||
const safeName = (file.name || "image").replace(/[^\p{L}\p{N}._-]/gu, "_").slice(0, 80);
|
||||
const key = `${roomId}/${userOrResp.id}/${Date.now()}_${safeName}`;
|
||||
const buf = await file.arrayBuffer();
|
||||
await env.BUCKET.put(key, buf, { httpMetadata: { contentType: file.type } });
|
||||
|
||||
const now = Date.now();
|
||||
const result = await env.DB.prepare(
|
||||
"INSERT INTO messages (room_id, user_id, sender_name, type, content, r2_key, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)",
|
||||
)
|
||||
.bind(roomId, userOrResp.id, userOrResp.username, "image", null, key, now)
|
||||
.run();
|
||||
|
||||
return json({
|
||||
ok: true,
|
||||
message: {
|
||||
id: result.meta.last_row_id as number,
|
||||
room_id: roomId,
|
||||
user_id: userOrResp.id,
|
||||
sender_name: userOrResp.username,
|
||||
sender_level: userOrResp.level,
|
||||
type: "image",
|
||||
content: null,
|
||||
r2_key: key,
|
||||
created_at: now,
|
||||
} satisfies Message,
|
||||
});
|
||||
}
|
||||
|
||||
const streamMatch = pathname.match(/^\/api\/rooms\/([^/]+)\/stream$/);
|
||||
if (streamMatch && request.method === "GET") {
|
||||
const roomId = streamMatch[1]!;
|
||||
const room = await getRoom(env, roomId);
|
||||
if (!room) return json({ error: "房间不存在" }, { status: 404 });
|
||||
const accessResp = await requireRoomAccessIfPrivate(env, request, room);
|
||||
if (accessResp instanceof Response) return accessResp;
|
||||
|
||||
const after = Number(url.searchParams.get("after") ?? "0");
|
||||
let afterId = Number.isFinite(after) && after >= 0 ? after : 0;
|
||||
|
||||
const encoder = new TextEncoder();
|
||||
const stream = new ReadableStream<Uint8Array>({
|
||||
async start(controller) {
|
||||
controller.enqueue(encoder.encode(`event: hello\ndata: {}\n\n`));
|
||||
while (!request.signal.aborted) {
|
||||
const rows = await env.DB.prepare(
|
||||
"SELECT m.id, m.room_id, m.user_id, m.sender_name, COALESCE(u.level, 0) as sender_level, m.type, m.content, m.r2_key, m.created_at FROM messages m LEFT JOIN users u ON m.user_id = u.id WHERE m.room_id = ? AND m.id > ? ORDER BY m.id ASC LIMIT 100",
|
||||
)
|
||||
.bind(roomId, afterId)
|
||||
.all<Message>();
|
||||
|
||||
for (const msg of rows.results) {
|
||||
afterId = Math.max(afterId, msg.id);
|
||||
controller.enqueue(encoder.encode(`event: message\ndata: ${JSON.stringify(msg)}\n\n`));
|
||||
}
|
||||
await sleep(300, request.signal);
|
||||
}
|
||||
controller.close();
|
||||
},
|
||||
cancel() {},
|
||||
});
|
||||
|
||||
return new Response(stream, {
|
||||
headers: {
|
||||
"content-type": "text/event-stream; charset=utf-8",
|
||||
"cache-control": "no-cache",
|
||||
connection: "keep-alive",
|
||||
},
|
||||
});
|
||||
}
|
||||
|
||||
const imageMatch = pathname.match(/^\/api\/images\/(.+)$/);
|
||||
if (imageMatch && request.method === "GET") {
|
||||
const key = decodeURIComponent(imageMatch[1]!);
|
||||
const roomId = key.split("/")[0] ?? "";
|
||||
if (!roomId) return notFound();
|
||||
const room = await getRoom(env, roomId);
|
||||
if (!room) return notFound();
|
||||
if (room.is_private) {
|
||||
const accessToken = url.searchParams.get("accessToken") ?? "";
|
||||
const access = await verifyRoomAccessToken(env, roomId, accessToken);
|
||||
if (!access) return forbidden("私密房间图片需要先输入密码进入");
|
||||
}
|
||||
const obj = await env.BUCKET.get(key);
|
||||
if (!obj) return notFound();
|
||||
const headers = new Headers();
|
||||
obj.writeHttpMetadata(headers);
|
||||
headers.set("cache-control", "public, max-age=31536000, immutable");
|
||||
return new Response(obj.body, { headers });
|
||||
}
|
||||
|
||||
// --- Admin APIs ---
|
||||
if (pathname === "/api/admin/users" && request.method === "GET") {
|
||||
const adminOrResp = await requireAdmin(env, request);
|
||||
if (adminOrResp instanceof Response) return adminOrResp;
|
||||
const users = await env.DB.prepare(
|
||||
"SELECT id, username, email, qq, phone, level, created_at FROM users ORDER BY created_at DESC LIMIT 200",
|
||||
).all<User>();
|
||||
return json({ users: users.results });
|
||||
}
|
||||
|
||||
if (pathname === "/api/admin/lobby/password" && request.method === "POST") {
|
||||
const adminOrResp = await requireAdmin(env, request);
|
||||
if (adminOrResp instanceof Response) return adminOrResp;
|
||||
const lobby = await ensureLobbyRoom(env);
|
||||
const body = await readJson<{ password?: string | null }>(request);
|
||||
if (!body) return json({ error: "无效 JSON" }, { status: 400 });
|
||||
const password = (body.password ?? "").toString().trim();
|
||||
if (password) {
|
||||
const passwordHash = await hashPassword(password);
|
||||
await env.DB.prepare(
|
||||
"UPDATE rooms SET is_private = 1, password_hash = ?, allow_anonymous = 1 WHERE id = ?",
|
||||
)
|
||||
.bind(passwordHash, lobby.id)
|
||||
.run();
|
||||
return json({ ok: true, mode: "private" });
|
||||
}
|
||||
await env.DB.prepare("UPDATE rooms SET is_private = 0, password_hash = NULL WHERE id = ?").bind(lobby.id).run();
|
||||
return json({ ok: true, mode: "public" });
|
||||
}
|
||||
|
||||
const patchUserMatch = pathname.match(/^\/api\/admin\/users\/([^/]+)$/);
|
||||
if (patchUserMatch && request.method === "PATCH") {
|
||||
const adminOrResp = await requireAdmin(env, request);
|
||||
if (adminOrResp instanceof Response) return adminOrResp;
|
||||
const userId = patchUserMatch[1]!;
|
||||
const body = await readJson<{ level?: number; email?: string; qq?: string; phone?: string }>(request);
|
||||
if (!body) return json({ error: "无效 JSON" }, { status: 400 });
|
||||
const level = typeof body.level === "number" ? body.level : null;
|
||||
if (level !== null && (level < 0 || level > 3)) return json({ error: "level 必须是 0-3" }, { status: 400 });
|
||||
await env.DB.prepare(
|
||||
"UPDATE users SET level = COALESCE(?, level), email = COALESCE(?, email), qq = COALESCE(?, qq), phone = COALESCE(?, phone) WHERE id = ?",
|
||||
)
|
||||
.bind(level, body.email?.trim() || null, body.qq?.trim() || null, body.phone?.trim() || null, userId)
|
||||
.run();
|
||||
return json({ ok: true });
|
||||
}
|
||||
|
||||
if (patchUserMatch && request.method === "DELETE") {
|
||||
const adminOrResp = await requireAdmin(env, request);
|
||||
if (adminOrResp instanceof Response) return adminOrResp;
|
||||
const userId = patchUserMatch[1]!;
|
||||
|
||||
// 保护：避免误删最后一个管理员
|
||||
const adminCountRow = await env.DB.prepare("SELECT COUNT(1) as c FROM users WHERE level = 3").first<{ c: number }>();
|
||||
const targetLevelRow = await env.DB.prepare("SELECT level FROM users WHERE id = ?").bind(userId).first<{ level: number }>();
|
||||
if (!targetLevelRow) return json({ error: "用户不存在" }, { status: 404 });
|
||||
if (targetLevelRow.level === 3 && (adminCountRow?.c ?? 0) <= 1) return forbidden("不能删除最后一个管理员");
|
||||
|
||||
// 删除用户：保留历史消息（sender_name 仍保留），仅将 user_id 置空
|
||||
await env.DB.batch([
|
||||
env.DB.prepare("UPDATE messages SET user_id = NULL WHERE user_id = ?").bind(userId),
|
||||
env.DB.prepare("DELETE FROM bans WHERE user_id = ?").bind(userId),
|
||||
env.DB.prepare("DELETE FROM password_resets WHERE user_id = ?").bind(userId),
|
||||
env.DB.prepare("DELETE FROM users WHERE id = ?").bind(userId),
|
||||
]);
|
||||
return json({ ok: true });
|
||||
}
|
||||
|
||||
const banMatch = pathname.match(/^\/api\/admin\/users\/([^/]+)\/ban$/);
|
||||
if (banMatch && request.method === "POST") {
|
||||
const adminOrResp = await requireAdmin(env, request);
|
||||
if (adminOrResp instanceof Response) return adminOrResp;
|
||||
const userId = banMatch[1]!;
|
||||
const body = await readJson<{ reason?: string; minutes?: number }>(request);
|
||||
const minutes = typeof body?.minutes === "number" ? body.minutes : null;
|
||||
const until = minutes && minutes > 0 ? Date.now() + minutes * 60 * 1000 : null;
|
||||
await env.DB.prepare("INSERT INTO bans (user_id, reason, until, created_at) VALUES (?, ?, ?, ?)")
|
||||
.bind(userId, body?.reason?.trim() || null, until, Date.now())
|
||||
.run();
|
||||
return json({ ok: true });
|
||||
}
|
||||
|
||||
const delMsgMatch = pathname.match(/^\/api\/admin\/messages\/(\d+)$/);
|
||||
if (delMsgMatch && request.method === "DELETE") {
|
||||
const adminOrResp = await requireAdmin(env, request);
|
||||
if (adminOrResp instanceof Response) return adminOrResp;
|
||||
const id = Number(delMsgMatch[1]!);
|
||||
await env.DB.prepare("DELETE FROM messages WHERE id = ?").bind(id).run();
|
||||
return json({ ok: true });
|
||||
}
|
||||
|
||||
if (pathname === "/api/admin/debug/create-admin" && request.method === "POST") {
|
||||
if (!isDevMode(env)) return forbidden("仅 DEV_MODE 可用");
|
||||
const body = await readJson<{ username?: string; password?: string }>(request);
|
||||
if (!body) return json({ error: "无效 JSON" }, { status: 400 });
|
||||
const username = body.username ? sanitizeUsername(body.username) : null;
|
||||
const password = (body.password ?? "").trim();
|
||||
if (!username || password.length < 6) return json({ error: "参数错误" }, { status: 400 });
|
||||
if (username.startsWith("游客")) return json({ error: "用户名不能以“游客”开头（该前缀保留给匿名游客）" }, { status: 400 });
|
||||
const passwordHash = await hashPassword(password);
|
||||
const id = crypto.randomUUID();
|
||||
const now = Date.now();
|
||||
await env.DB.prepare(
|
||||
"INSERT INTO users (id, username, password_hash, email, qq, phone, level, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)",
|
||||
)
|
||||
.bind(id, username, passwordHash, null, null, null, 3, now)
|
||||
.run();
|
||||
return json({ ok: true, id });
|
||||
}
|
||||
|
||||
if (pathname === "/api/_clear_session" && request.method === "POST") {
|
||||
const headers = new Headers();
|
||||
setCookie(headers, clearCookie("sid", !isDevMode(env)));
|
||||
return json({ ok: true }, { headers });
|
||||
}
|
||||
|
||||
return notFound();
|
||||
}
|
||||
|
|
@ -0,0 +1,43 @@
|
|||
export function parseCookieHeader(headerValue: string | null): Record<string, string> {
|
||||
const out: Record<string, string> = {};
|
||||
if (!headerValue) return out;
|
||||
for (const part of headerValue.split(";")) {
|
||||
const [rawName, ...rawValue] = part.trim().split("=");
|
||||
if (!rawName) continue;
|
||||
out[rawName] = decodeURIComponent(rawValue.join("=") ?? "");
|
||||
}
|
||||
return out;
|
||||
}
|
||||
|
||||
export function getCookie(request: Request, name: string): string | null {
|
||||
const cookies = parseCookieHeader(request.headers.get("cookie"));
|
||||
return cookies[name] ?? null;
|
||||
}
|
||||
|
||||
export function setCookie(headers: Headers, cookie: string): void {
|
||||
headers.append("set-cookie", cookie);
|
||||
}
|
||||
|
||||
export function makeCookie(
|
||||
name: string,
|
||||
value: string,
|
||||
options: {
|
||||
httpOnly?: boolean;
|
||||
secure?: boolean;
|
||||
sameSite?: "Lax" | "Strict" | "None";
|
||||
path?: string;
|
||||
maxAgeSeconds?: number;
|
||||
} = {},
|
||||
): string {
|
||||
const parts = [`${name}=${encodeURIComponent(value)}`];
|
||||
parts.push(`Path=${options.path ?? "/"}`);
|
||||
if (options.httpOnly) parts.push("HttpOnly");
|
||||
if (options.secure ?? true) parts.push("Secure");
|
||||
parts.push(`SameSite=${options.sameSite ?? "Lax"}`);
|
||||
if (typeof options.maxAgeSeconds === "number") parts.push(`Max-Age=${Math.floor(options.maxAgeSeconds)}`);
|
||||
return parts.join("; ");
|
||||
}
|
||||
|
||||
export function clearCookie(name: string, secure = true): string {
|
||||
return `${name}=; Path=/; Max-Age=0; SameSite=Lax;${secure ? " Secure;" : ""} HttpOnly`;
|
||||
}
|
||||
|
|
@ -0,0 +1,117 @@
|
|||
function base64FromBytes(bytes: Uint8Array): string {
|
||||
let binary = "";
|
||||
for (const b of bytes) binary += String.fromCharCode(b);
|
||||
return btoa(binary);
|
||||
}
|
||||
|
||||
function bytesFromBase64(value: string): Uint8Array<ArrayBuffer> {
|
||||
const binary = atob(value);
|
||||
const bytes = new Uint8Array(new ArrayBuffer(binary.length));
|
||||
for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
|
||||
return bytes;
|
||||
}
|
||||
|
||||
export function randomToken(bytes = 32): string {
|
||||
const buf = new Uint8Array(new ArrayBuffer(bytes));
|
||||
crypto.getRandomValues(buf);
|
||||
return base64FromBytes(buf).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
|
||||
}
|
||||
|
||||
/**
|
||||
* 生成数字验证码
|
||||
* @param length 验证码长度（默认 6 位）
|
||||
* @returns 数字验证码字符串
|
||||
*/
|
||||
export function randomNumericCode(length = 6): string {
|
||||
const digits = "0123456789";
|
||||
let code = "";
|
||||
const randomValues = new Uint8Array(length);
|
||||
crypto.getRandomValues(randomValues);
|
||||
|
||||
for (let i = 0; i < length; i++) {
|
||||
code += digits[randomValues[i] % 10];
|
||||
}
|
||||
|
||||
return code;
|
||||
}
|
||||
|
||||
// Cloudflare Workers PBKDF2 iterations have an upper bound; keep within supported range.
|
||||
const PBKDF2_ITERATIONS = 100_000;
|
||||
|
||||
export async function hashPassword(password: string): Promise<string> {
|
||||
const saltBytes = new Uint8Array(new ArrayBuffer(16));
|
||||
crypto.getRandomValues(saltBytes);
|
||||
|
||||
const keyMaterial = await crypto.subtle.importKey(
|
||||
"raw",
|
||||
new TextEncoder().encode(password),
|
||||
"PBKDF2",
|
||||
false,
|
||||
["deriveBits"],
|
||||
);
|
||||
|
||||
const bits = await crypto.subtle.deriveBits(
|
||||
{
|
||||
name: "PBKDF2",
|
||||
salt: saltBytes,
|
||||
iterations: PBKDF2_ITERATIONS,
|
||||
hash: "SHA-256",
|
||||
},
|
||||
keyMaterial,
|
||||
256,
|
||||
);
|
||||
|
||||
const hashBytes = new Uint8Array(bits);
|
||||
return ["pbkdf2", String(PBKDF2_ITERATIONS), base64FromBytes(saltBytes), base64FromBytes(hashBytes)].join("$");
|
||||
}
|
||||
|
||||
export async function verifyPassword(password: string, stored: string): Promise<boolean> {
|
||||
const parts = stored.split("$");
|
||||
let algo: string;
|
||||
let iterStr: string;
|
||||
let saltB64: string;
|
||||
let hashB64: string;
|
||||
|
||||
// Backward/forward compatibility:
|
||||
// - Current format: pbkdf2$150000$<saltB64>$<hashB64>
|
||||
// - Legacy (buggy parser expectation): pbkdf2$150000$<ignored>$<saltB64>$<ignored>$<hashB64>
|
||||
if (parts.length === 4) {
|
||||
[algo, iterStr, saltB64, hashB64] = parts;
|
||||
} else if (parts.length === 6) {
|
||||
[algo, iterStr, , saltB64, , hashB64] = parts;
|
||||
} else {
|
||||
return false;
|
||||
}
|
||||
if (algo !== "pbkdf2") return false;
|
||||
const iterations = Number(iterStr);
|
||||
if (!Number.isFinite(iterations) || iterations < 1) return false;
|
||||
if (iterations > PBKDF2_ITERATIONS) return false;
|
||||
|
||||
const saltBytes = bytesFromBase64(saltB64);
|
||||
const expectedHash = bytesFromBase64(hashB64);
|
||||
|
||||
const keyMaterial = await crypto.subtle.importKey(
|
||||
"raw",
|
||||
new TextEncoder().encode(password),
|
||||
"PBKDF2",
|
||||
false,
|
||||
["deriveBits"],
|
||||
);
|
||||
|
||||
const bits = await crypto.subtle.deriveBits(
|
||||
{
|
||||
name: "PBKDF2",
|
||||
salt: saltBytes,
|
||||
iterations,
|
||||
hash: "SHA-256",
|
||||
},
|
||||
keyMaterial,
|
||||
expectedHash.length * 8,
|
||||
);
|
||||
|
||||
const actual = new Uint8Array(bits);
|
||||
if (actual.length !== expectedHash.length) return false;
|
||||
let mismatch = 0;
|
||||
for (let i = 0; i < actual.length; i++) mismatch |= actual[i] ^ expectedHash[i];
|
||||
return mismatch === 0;
|
||||
}
|
||||
|
|
@ -0,0 +1,172 @@
|
|||
import { Resend } from "resend";
|
||||
import type { Env } from "../env";
|
||||
|
||||
/**
|
||||
* 发送密码重置邮件
|
||||
* @param env 环境变量
|
||||
* @param to 收件人邮箱
|
||||
* @param resetToken 重置令牌
|
||||
* @param username 用户名
|
||||
* @returns 发送结果
|
||||
*/
|
||||
export async function sendPasswordResetEmail(
|
||||
env: Env,
|
||||
to: string,
|
||||
resetToken: string,
|
||||
username: string
|
||||
): Promise<{ success: boolean; error?: string }> {
|
||||
const apiKey = env.RESEND_API_KEY;
|
||||
const fromEmail = env.RESEND_FROM_EMAIL || "noreply@yourdomain.com";
|
||||
|
||||
if (!apiKey) {
|
||||
return {
|
||||
success: false,
|
||||
error: "RESEND_API_KEY 未配置，请运行: npx wrangler secret put RESEND_API_KEY",
|
||||
};
|
||||
}
|
||||
|
||||
try {
|
||||
const resend = new Resend(apiKey);
|
||||
|
||||
// 发送邮件
|
||||
const { data, error } = await resend.emails.send({
|
||||
from: fromEmail,
|
||||
to: [to],
|
||||
subject: "密码重置验证码 - 聊天室",
|
||||
html: `
|
||||
<!DOCTYPE html>
|
||||
<html>
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<style>
|
||||
body {
|
||||
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif;
|
||||
line-height: 1.6;
|
||||
color: #333;
|
||||
max-width: 600px;
|
||||
margin: 0 auto;
|
||||
padding: 20px;
|
||||
}
|
||||
.container {
|
||||
background-color: #f9f9f9;
|
||||
border-radius: 8px;
|
||||
padding: 30px;
|
||||
border: 1px solid #e0e0e0;
|
||||
}
|
||||
.header {
|
||||
text-align: center;
|
||||
margin-bottom: 30px;
|
||||
}
|
||||
.header h1 {
|
||||
color: #2c3e50;
|
||||
margin: 0;
|
||||
}
|
||||
.content {
|
||||
background-color: white;
|
||||
padding: 25px;
|
||||
border-radius: 6px;
|
||||
margin-bottom: 20px;
|
||||
}
|
||||
.code-box {
|
||||
background-color: #f8f9fa;
|
||||
border: 2px dashed #007bff;
|
||||
border-radius: 8px;
|
||||
padding: 20px;
|
||||
margin: 25px 0;
|
||||
text-align: center;
|
||||
}
|
||||
.verification-code {
|
||||
font-size: 32px;
|
||||
font-weight: bold;
|
||||
color: #007bff;
|
||||
letter-spacing: 4px;
|
||||
font-family: 'Courier New', monospace;
|
||||
user-select: all;
|
||||
}
|
||||
.footer {
|
||||
text-align: center;
|
||||
color: #666;
|
||||
font-size: 14px;
|
||||
margin-top: 20px;
|
||||
}
|
||||
.warning {
|
||||
background-color: #fff3cd;
|
||||
border-left: 4px solid #ffc107;
|
||||
padding: 12px;
|
||||
margin: 15px 0;
|
||||
border-radius: 4px;
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
<div class="container">
|
||||
<div class="header">
|
||||
<h1>🔐 密码重置验证码</h1>
|
||||
</div>
|
||||
|
||||
<div class="content">
|
||||
<p>你好，<strong>${username}</strong>！</p>
|
||||
|
||||
<p>我们收到了你的密码重置请求。请使用以下验证码来重置你的密码：</p>
|
||||
|
||||
<div class="code-box">
|
||||
<div style="color: #666; font-size: 14px; margin-bottom: 10px;">验证码</div>
|
||||
<div class="verification-code">${resetToken}</div>
|
||||
</div>
|
||||
|
||||
<p style="text-align: center; color: #666; font-size: 14px;">
|
||||
请在密码重置页面输入此验证码
|
||||
</p>
|
||||
|
||||
<div class="warning">
|
||||
<strong>⚠️ 重要提示：</strong>
|
||||
<ul style="margin: 10px 0;">
|
||||
<li>此验证码将在 <strong>30 分钟</strong>后失效</li>
|
||||
<li>如果你没有请求重置密码，请忽略此邮件</li>
|
||||
<li>请勿将此验证码分享给他人</li>
|
||||
</ul>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="footer">
|
||||
<p>此邮件由系统自动发送，请勿回复。</p>
|
||||
<p style="color: #999; font-size: 12px;">© 2026 聊天室应用</p>
|
||||
</div>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
`,
|
||||
text: `
|
||||
你好，${username}！
|
||||
|
||||
我们收到了你的密码重置请求。请使用以下验证码来重置你的密码：
|
||||
|
||||
验证码：${resetToken}
|
||||
|
||||
重要提示：
|
||||
- 此验证码将在 30 分钟后失效
|
||||
- 如果你没有请求重置密码，请忽略此邮件
|
||||
- 请勿将此验证码分享给他人
|
||||
|
||||
此邮件由系统自动发送，请勿回复。
|
||||
`.trim(),
|
||||
});
|
||||
|
||||
if (error) {
|
||||
console.error("Resend 发送邮件失败:", error);
|
||||
return {
|
||||
success: false,
|
||||
error: error.message || "邮件发送失败",
|
||||
};
|
||||
}
|
||||
|
||||
console.log("密码重置邮件已发送:", data);
|
||||
return { success: true };
|
||||
} catch (error) {
|
||||
console.error("发送邮件时出错:", error);
|
||||
return {
|
||||
success: false,
|
||||
error: error instanceof Error ? error.message : "未知错误",
|
||||
};
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,30 @@
|
|||
export function json(data: unknown, init?: ResponseInit): Response {
|
||||
const headers = new Headers(init?.headers);
|
||||
headers.set("content-type", "application/json; charset=utf-8");
|
||||
return new Response(JSON.stringify(data), { ...init, headers });
|
||||
}
|
||||
|
||||
export function badRequest(message: string): Response {
|
||||
return json({ error: message }, { status: 400 });
|
||||
}
|
||||
|
||||
export function unauthorized(message = "未登录"): Response {
|
||||
return json({ error: message }, { status: 401 });
|
||||
}
|
||||
|
||||
export function forbidden(message = "无权限"): Response {
|
||||
return json({ error: message }, { status: 403 });
|
||||
}
|
||||
|
||||
export function notFound(): Response {
|
||||
return json({ error: "Not found" }, { status: 404 });
|
||||
}
|
||||
|
||||
export async function readJson<T = unknown>(request: Request): Promise<T | null> {
|
||||
try {
|
||||
return (await request.json()) as T;
|
||||
} catch {
|
||||
return null;
|
||||
}
|
||||
}
|
||||
|
||||
|
|
@ -0,0 +1,31 @@
|
|||
import type { Env } from "../env";
|
||||
import { getCache, getNumberVar } from "../env";
|
||||
import { randomToken } from "./crypto";
|
||||
|
||||
export type RoomAccess = {
|
||||
userId?: string;
|
||||
nickname?: string;
|
||||
};
|
||||
|
||||
export async function createRoomAccessToken(
|
||||
env: Env,
|
||||
roomId: string,
|
||||
value: RoomAccess,
|
||||
): Promise<{ token: string; ttlSeconds: number }> {
|
||||
const token = randomToken(24);
|
||||
const ttlSeconds = getNumberVar(env, "ROOM_ACCESS_TTL_SECONDS", 60 * 60 * 24);
|
||||
const kv = getCache(env);
|
||||
await kv.put(`room_access:${roomId}:${token}`, JSON.stringify(value), { expirationTtl: ttlSeconds });
|
||||
return { token, ttlSeconds };
|
||||
}
|
||||
|
||||
export async function verifyRoomAccessToken(env: Env, roomId: string, token: string): Promise<RoomAccess | null> {
|
||||
const kv = getCache(env);
|
||||
const raw = await kv.get(`room_access:${roomId}:${token}`);
|
||||
if (!raw) return null;
|
||||
try {
|
||||
return JSON.parse(raw) as RoomAccess;
|
||||
} catch {
|
||||
return null;
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,39 @@
|
|||
import type { Env } from "../env";
|
||||
import { getCache, getNumberVar, isDevMode } from "../env";
|
||||
import { getCookie, makeCookie } from "./cookies";
|
||||
import { randomToken } from "./crypto";
|
||||
|
||||
const SESSION_COOKIE = "sid";
|
||||
|
||||
export type Session = {
|
||||
sid: string;
|
||||
userId: string;
|
||||
};
|
||||
|
||||
export async function createSession(env: Env, userId: string): Promise<{ sid: string; setCookie: string }> {
|
||||
const sid = randomToken(32);
|
||||
const ttl = getNumberVar(env, "SESSION_TTL_SECONDS", 60 * 60 * 24 * 7);
|
||||
const kv = getCache(env);
|
||||
await kv.put(`session:${sid}`, userId, { expirationTtl: ttl });
|
||||
return {
|
||||
sid,
|
||||
setCookie: makeCookie(SESSION_COOKIE, sid, { httpOnly: true, maxAgeSeconds: ttl, secure: !isDevMode(env) }),
|
||||
};
|
||||
}
|
||||
|
||||
export async function getSession(env: Env, request: Request): Promise<Session | null> {
|
||||
const sid = getCookie(request, SESSION_COOKIE);
|
||||
if (!sid) return null;
|
||||
const kv = getCache(env);
|
||||
const userId = await kv.get(`session:${sid}`);
|
||||
if (!userId) return null;
|
||||
return { sid, userId };
|
||||
}
|
||||
|
||||
export async function destroySession(env: Env, request: Request): Promise<string | null> {
|
||||
const sid = getCookie(request, SESSION_COOKIE);
|
||||
if (!sid) return null;
|
||||
const kv = getCache(env);
|
||||
await kv.delete(`session:${sid}`);
|
||||
return makeCookie(SESSION_COOKIE, "", { httpOnly: true, maxAgeSeconds: 0, secure: !isDevMode(env) });
|
||||
}
|
||||
|
|
@ -0,0 +1,15 @@
|
|||
export async function sleep(ms: number, signal?: AbortSignal): Promise<void> {
|
||||
if (signal?.aborted) return;
|
||||
await new Promise<void>((resolve) => {
|
||||
const t = setTimeout(resolve, ms);
|
||||
signal?.addEventListener(
|
||||
"abort",
|
||||
() => {
|
||||
clearTimeout(t);
|
||||
resolve();
|
||||
},
|
||||
{ once: true },
|
||||
);
|
||||
});
|
||||
}
|
||||
|
||||
|
|
@ -0,0 +1,14 @@
|
|||
{
|
||||
"compilerOptions": {
|
||||
"target": "ES2022",
|
||||
"lib": ["ES2022", "WebWorker"],
|
||||
"module": "ES2022",
|
||||
"moduleResolution": "Bundler",
|
||||
"types": ["@cloudflare/workers-types"],
|
||||
"strict": true,
|
||||
"noEmit": true,
|
||||
"skipLibCheck": true
|
||||
},
|
||||
"include": ["src/**/*.ts"]
|
||||
}
|
||||
|
||||
|
|
@ -0,0 +1,30 @@
|
|||
name = "cf-chat"
|
||||
main = "src/index.ts"
|
||||
compatibility_date = "2025-01-01"
|
||||
compatibility_flags = ["nodejs_compat"]
|
||||
|
||||
[vars]
|
||||
SESSION_TTL_SECONDS = "604800"
|
||||
ROOM_ACCESS_TTL_SECONDS = "86400"
|
||||
DEV_MODE = "false"
|
||||
# Resend 邮件配置
|
||||
RESEND_FROM_EMAIL = "noreply@zxd.im" # 修改为你的发件人邮箱
|
||||
# RESEND_API_KEY 应该使用 secret 设置，运行: npx wrangler secret put RESEND_API_KEY
|
||||
|
||||
[[d1_databases]]
|
||||
binding = "DB"
|
||||
database_name = "douban"
|
||||
database_id = "dea24df8-6551-473e-9b1e-b2f2e2211090"
|
||||
|
||||
[[kv_namespaces]]
|
||||
binding = "CACHE"
|
||||
id = "56ef01a9d92e42688e91a75bc9a7c534"
|
||||
|
||||
[[r2_buckets]]
|
||||
binding = "BUCKET"
|
||||
bucket_name = "paimian"
|
||||
|
||||
[assets]
|
||||
directory = "./public"
|
||||
binding = "ASSETS"
|
||||
not_found_handling = "single-page-application"
|
||||
Loading…
Reference in New Issue