feat: 完善鉴权
This commit is contained in:
@@ -4,21 +4,13 @@ import { randomBytes } from "node:crypto";
|
||||
|
||||
import { setResponseStatus } from "h3";
|
||||
|
||||
import { getAuthSession } from "~~/server/utils/auth";
|
||||
import { prisma } from "~~/server/utils/db";
|
||||
import { createApiLogger } from "~~/server/utils/logging";
|
||||
|
||||
export default defineEventHandler(async (event) => {
|
||||
const logger = createApiLogger(event, "api.user.refresh-token");
|
||||
|
||||
const session = await getAuthSession(event);
|
||||
if (!session) {
|
||||
setResponseStatus(event, 401);
|
||||
logger.warn("unauthorized");
|
||||
return { success: false, msg: "未登录" };
|
||||
}
|
||||
|
||||
const userId = session.user.id;
|
||||
const userId = event.context.auth!.user.id;
|
||||
const newToken = randomBytes(16).toString("hex");
|
||||
|
||||
try {
|
||||
|
||||
Reference in New Issue
Block a user