lkddi/chatroom
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

feat: 忘记密码升级为智能分流向导并部署IP/账号双层防扫防轰炸限流保护

Browse Source
This commit is contained in:
pllx
2026-07-01 11:11:20 +08:00
parent 879dcb0b59
commit b098639db5
6 changed files with 633 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files
resources/js/password-forgot.js
+184 -21
View File
@@ -1,6 +1,7 @@
// 邮箱找回密码页交互入口，负责 AJAX 发送重置链接和页面提示。
// 忘记密码页面交互逻辑：智能账号检测与分流引导
let passwordForgotControlsBound = false;
let currentUsername = "";
/**
* 读取 CSRF 令牌，供找回密码请求使用。
@@ -30,33 +31,73 @@ function showAlert(message, type) {
}
/**
* 提交邮箱找回密码请求。
* 隐藏找回密码页面提示。
*
* @returns {void}
*/
function hideAlert() {
const alertBox = document.getElementById("alert-box");
if (alertBox) {
alertBox.style.display = "none";
}
}
/**
* 绑定双绑定状态下的选项卡切换事件。
*
* @returns {void}
*/
function bindTabEvents() {
const tabsContainer = document.getElementById("channel-tabs");
if (!tabsContainer) {
return;
}
tabsContainer.addEventListener("click", (event) => {
const btn = event.target.closest(".tab-btn");
if (!btn) {
return;
}
// 清除所有高亮
tabsContainer.querySelectorAll(".tab-btn").forEach((b) => b.classList.remove("active"));
btn.classList.add("active");
// 切换显示面板
const targetId = btn.getAttribute("data-target");
document.querySelectorAll(".channel-pane").forEach((pane) => {
if (pane.id === targetId) {
pane.style.display = "block";
} else {
pane.style.display = "none";
}
});
});
}
/**
* 第一步：提交昵称检测账号绑定状态。
*
* @param {SubmitEvent} event
* @returns {Promise<void>}
*/
async function submitPasswordRecovery(event) {
async function submitAccountDetect(event) {
event.preventDefault();
const form = event.target;
const submitButton = document.getElementById("submit-btn");
const alertBox = document.getElementById("alert-box");
const detectBtn = document.getElementById("detect-btn");
if (!(form instanceof HTMLFormElement)) {
return;
}
if (submitButton instanceof HTMLButtonElement) {
submitButton.disabled = true;
submitButton.innerText = "发送中...";
}
if (alertBox) {
alertBox.style.display = "none";
if (detectBtn instanceof HTMLButtonElement) {
detectBtn.disabled = true;
detectBtn.innerText = "账号检索中...";
}
hideAlert();
try {
const response = await fetch(form.getAttribute("data-password-email-url") ?? form.action, {
const response = await fetch(form.action, {
method: "POST",
credentials: "same-origin",
headers: {
"Content-Type": "application/json",
"X-CSRF-TOKEN": getCsrfToken(),
@@ -66,16 +107,121 @@ async function submitPasswordRecovery(event) {
});
const body = await response.json();
if (response.status === 200 && body.status === "success") {
showAlert(body.message, "success");
form.reset();
if (response.status === 429) {
showAlert(body.message || "请求过于频繁，请稍后再试。", "error");
return;
}
const errorMessage = body.message || (body.errors ? Object.values(body.errors)[0][0] : "邮件发送失败，请稍后重试。");
if (body.status === "not_found") {
showAlert(body.message, "error");
return;
}
if (body.status === "success") {
currentUsername = body.username;
document.getElementById("step-detect").style.display = "none";
document.getElementById("step-result").style.display = "block";
document.getElementById("recovery-title").innerText = "密码找回建议";
document.getElementById("forgot-footer").style.display = "none";
const summary = document.getElementById("detect-summary");
const tabs = document.getElementById("channel-tabs");
const panelWechat = document.getElementById("panel-wechat");
const panelEmail = document.getElementById("panel-email");
const panelNone = document.getElementById("panel-none");
// 默认隐藏所有特定面板
tabs.style.display = "none";
panelWechat.style.display = "none";
panelEmail.style.display = "none";
panelNone.style.display = "none";
const hasEmail = body.has_email;
const hasWechat = body.has_wechat;
if (hasEmail && hasWechat) {
summary.innerHTML = `检测到账号 <strong style="color:var(--gold);">${currentUsername}</strong> 已同时绑定了微信和邮箱。您可以选择以下任意一种方式找回密码：`;
tabs.style.display = "grid";
// 默认选中微信面板
tabs.querySelectorAll(".tab-btn").forEach((b) => b.classList.remove("active"));
const wechatTabBtn = tabs.querySelector('[data-target="panel-wechat"]');
if (wechatTabBtn) {
wechatTabBtn.classList.add("active");
}
panelWechat.style.display = "block";
} else if (hasWechat) {
summary.innerHTML = `检测到账号 <strong style="color:var(--gold);">${currentUsername}</strong> 仅绑定了微信。系统不支持邮箱找回，建议您使用微信助手进行重置：`;
panelWechat.style.display = "block";
} else if (hasEmail) {
summary.innerHTML = `检测到账号 <strong style="color:var(--gold);">${currentUsername}</strong> 仅绑定了邮箱。建议您使用邮箱发送重置链接找回：`;
panelEmail.style.display = "block";
const emailInput = document.getElementById("email");
if (emailInput instanceof HTMLInputElement) {
emailInput.value = body.masked_email;
}
} else {
summary.innerHTML = `检测到账号 <strong style="color:var(--gold);">${currentUsername}</strong> 尚未绑定微信或邮箱找回途径：`;
panelNone.style.display = "block";
}
}
} catch {
showAlert("网络或服务器连接异常，请稍后再试。", "error");
} finally {
if (detectBtn instanceof HTMLButtonElement) {
detectBtn.disabled = false;
detectBtn.innerText = "下一步 (检测账号)";
}
}
}
/**
* 第二步：提交发送重置链接邮件请求。
*
* @param {SubmitEvent} event
* @returns {Promise<void>}
*/
async function submitPasswordRecovery(event) {
event.preventDefault();
const form = event.target;
const submitButton = document.getElementById("submit-btn");
if (!(form instanceof HTMLFormElement)) {
return;
}
if (submitButton instanceof HTMLButtonElement) {
submitButton.disabled = true;
submitButton.innerText = "发送重置链接中...";
}
hideAlert();
try {
const response = await fetch(form.getAttribute("data-password-email-url") ?? "", {
method: "POST",
headers: {
"Content-Type": "application/json",
"X-CSRF-TOKEN": getCsrfToken(),
Accept: "application/json",
},
body: JSON.stringify({
username: currentUsername,
}),
});
const body = await response.json();
if (response.status === 429) {
showAlert(body.message || "请求发送过于频繁，请稍后再试。", "error");
return;
}
if (body.status === "success") {
showAlert(body.message, "success");
return;
}
const errorMessage = body.message || (body.errors ? Object.values(body.errors)[0][0] : "重置邮件发送失败，请稍后重试。");
showAlert(errorMessage, "error");
} catch {
showAlert("网络或服务器异常，请稍后再试。", "error");
showAlert("网络发送异常，请稍后再试。", "error");
} finally {
if (submitButton instanceof HTMLButtonElement) {
submitButton.disabled = false;
@@ -85,7 +231,7 @@ async function submitPasswordRecovery(event) {
}
/**
* 绑定邮箱找回密码页提交事件。
* 绑定智能找回向导控制事件。
*
* @returns {void}
*/
@@ -93,11 +239,28 @@ function bindPasswordForgotControls() {
if (passwordForgotControlsBound || typeof document === "undefined") {
return;
}
passwordForgotControlsBound = true;
// 第一步表单提交
document.getElementById("account-detect-form")?.addEventListener("submit", (event) => {
void submitAccountDetect(event);
});
// 第二步发信表单提交
document.getElementById("password-recovery-form")?.addEventListener("submit", (event) => {
void submitPasswordRecovery(event);
});
// 返回按钮事件
document.getElementById("back-detect-btn")?.addEventListener("click", () => {
hideAlert();
document.getElementById("step-detect").style.display = "block";
document.getElementById("step-result").style.display = "none";
document.getElementById("recovery-title").innerText = "忘记密码";
document.getElementById("forgot-footer").style.display = "block";
});
bindTabEvents();
}
bindPasswordForgotControls();