certd/packages/ui/certd-server/src/controller/user/mine/mine-controller.ts

import { AccessGetter, AccessService, BaseController, Constants, isEnterprise, SysSettingsService } from "@certd/lib-server";
import { ALL, Body, Controller, Inject, Post, Provide } from "@midwayjs/core";
import { PasskeyService } from "../../../modules/login/service/passkey-service.js";
import { RoleService } from "../../../modules/sys/authority/service/role-service.js";
import { UserService } from "../../../modules/sys/authority/service/user-service.js";
import { NotificationService } from "../../../modules/pipeline/service/notification-service.js";
import { newAccess } from "@certd/pipeline";
import { http, logger, utils } from "@certd/basic";
import { ApiTags } from "@midwayjs/swagger";
import { CodeService } from "../../../modules/basic/service/code-service.js";
import { EmailService } from "../../../modules/basic/service/email-service.js";
import { TaskServiceBuilder } from "../../../modules/pipeline/service/getter/task-service-getter.js";

/**
 */
@Provide()
@Controller("/api/mine")
@ApiTags(["mine"])
export class MineController extends BaseController {
  @Inject()
  userService: UserService;

  @Inject()
  roleService: RoleService;

  @Inject()
  passkeyService: PasskeyService;

  @Inject()
  codeService: CodeService;

  @Inject()
  sysSettingsService: SysSettingsService;

  @Inject()
  accessService: AccessService;

  @Inject()
  notificationService: NotificationService;

  @Inject()
  emailService: EmailService;

  @Inject()
  taskServiceBuilder: TaskServiceBuilder;

  @Post("/info", { description: Constants.per.authOnly, summary: "查询用户信息" })
  public async info() {
    const userId = this.getUserId();
    const user = await this.userService.info(userId);
    const isWeak = await this.userService.checkPassword("123456", user.password, user.passwordVersion);
    if (isWeak) {
      //@ts-ignore
      user.isWeak = true;
    }
    const needInitPassword = user.password === "changeme";
    user.roleIds = await this.roleService.getRoleIdsByUserId(userId);
    delete user.password;
    //@ts-ignore
    user.needInitPassword = needInitPassword;
    //@ts-ignore
    user.needInitAccount = false;
    if (!isEnterprise()) {
      const existingAccess = await this.accessService.findOne({
        where: { type: "acmeAccount", subtype: "letsencrypt", userId },
      });
      if (!existingAccess) {
        //@ts-ignore
        user.needInitAccount = true;
      }
    }

    return this.ok(user);
  }

  @Post("/changePassword", { description: Constants.per.authOnly, summary: "修改密码" })
  public async changePassword(@Body(ALL) body: any) {
    const userId = this.getUserId();
    await this.userService.changePassword(userId, body);
    return this.ok({});
  }

  @Post("/initPassword", { description: Constants.per.authOnly, summary: "初始化密码" })
  public async initPassword(@Body(ALL) body: any) {
    const userId = this.getUserId();
    await this.userService.initPassword(userId, body);
    return this.ok({});
  }

  @Post("/updateProfile", { description: Constants.per.authOnly, summary: "更新用户资料" })
  public async updateProfile(@Body(ALL) body: any) {
    const userId = this.getUserId();

    await this.userService.updateProfile(userId, {
      avatar: body.avatar,
      nickName: body.nickName,
    });
    return this.ok({});
  }

  @Post("/contact/capability", { description: Constants.per.authOnly, summary: "查询联系方式绑定能力" })
  public async contactCapability() {
    const settings = await this.sysSettingsService.getPrivateSettings();
    return this.ok({
      smsEnabled: !!settings.sms?.config?.accessId,
    });
  }

  @Post("/contact/verifyIdentity", { description: Constants.per.authOnly, summary: "验证本人操作" })
  public async verifyContactIdentity(@Body(ALL) body: { identityType: "password" | "email" | "mobile"; identityPassword?: string; identityValidateCode?: string }) {
    const userId = this.getUserId();
    await this.userService.verifyIdentity(userId, body, this.codeService);
    const validationCode = this.codeService.setValidationValue({
      type: "contactIdentity",
      userId,
      identityType: body.identityType,
    });
    return this.ok({ validationCode });
  }

  @Post("/contact/mobile", { description: Constants.per.authOnly, summary: "绑定或修改手机号" })
  public async updateMobile(@Body(ALL) body: { phoneCode?: string; mobile: string; validateCode: string; identityValidationCode: string }) {
    const userId = this.getUserId();
    this.userService.checkContactIdentityValidation(userId, body.identityValidationCode, this.codeService);
    await this.codeService.checkSmsCode({
      mobile: body.mobile,
      phoneCode: body.phoneCode || "86",
      smsCode: body.validateCode,
      verificationType: "bindMobile",
      throwError: true,
    });
    await this.userService.updateMobile(userId, {
      phoneCode: body.phoneCode,
      mobile: body.mobile,
    });
    return this.ok({});
  }

  @Post("/contact/email", { description: Constants.per.authOnly, summary: "绑定或修改邮箱" })
  public async updateEmail(@Body(ALL) body: { email: string; validateCode: string; identityValidationCode: string }) {
    const userId = this.getUserId();
    this.userService.checkContactIdentityValidation(userId, body.identityValidationCode, this.codeService);
    this.codeService.checkEmailCode({
      email: body.email,
      validateCode: body.validateCode,
      verificationType: "bindEmail",
      throwError: true,
    });
    await this.userService.updateEmail(userId, {
      email: body.email,
    });
    return this.ok({});
  }

  @Post("/accountInit", { description: Constants.per.authOnly, summary: "初始化Let's Encrypt ACME账号和邮件通知" })
  public async accountInit(@Body("email") email?: string) {
    const userId = this.getUserId();
    let userEmail = email;
    let user: any = null;
    if (!userEmail) {
      user = await this.userService.info(userId);
      userEmail = user.email;
    }
    if (!userEmail) {
      return this.ok({ needEmail: true });
    }

    if (email) {
      if (!user) {
        user = await this.userService.info(userId);
      }
      if (!user.email) {
        await this.userService.updateEmail(userId, { email: userEmail });
      }
    }

    await this.emailService.add(userId, userEmail);

    await this.notificationService.getOrCreateDefault(userEmail, userId);

    const getAccessById = this.accessService.getById.bind(this.accessService);
    const accessGetter = new AccessGetter(userId, undefined, getAccessById);
    const serviceGetter = this.taskServiceBuilder.create({ userId });
    const accessContext = {
      http,
      logger,
      utils,
      accessService: accessGetter,
      serviceGetter,
      define: undefined,
    } as any;
    const access = await newAccess("acmeAccount", { caType: "letsencrypt", email: userEmail }, accessGetter, accessContext);
    const accountJson = await access.onGenerateAccount();

    await this.accessService.add({
      type: "acmeAccount",
      name: "Let's Encrypt",
      userId,
      projectId: undefined,
      setting: JSON.stringify({
        caType: "letsencrypt",
        email: userEmail,
        account: accountJson,
      }),
    });

    return this.ok({ success: true });
  }
}