87 lines
2.6 KiB
TypeScript
87 lines
2.6 KiB
TypeScript
// server/api/auth/register.post.ts - 注册接口：校验并代理 NewAPI 注册请求。
|
|
import type { IUserRegisterData, IUserRegisterRequest } from "#shared/types";
|
|
import {
|
|
createApiLogger,
|
|
createErrorResponse,
|
|
createSuccessResponse,
|
|
createUpstreamErrorResponse,
|
|
newApiFetch,
|
|
toSafeLogError
|
|
} from "~~/server/utils";
|
|
|
|
/**
|
|
* 允许从请求体透传给上游的字段列表。
|
|
* 只有在这里声明过的字段才会被转发，其余字段一律丢弃，防止参数污染。
|
|
*/
|
|
const REGISTER_FIELDS = [
|
|
"username",
|
|
"password",
|
|
"email",
|
|
"verification_code",
|
|
"aff_code"
|
|
] as const satisfies ReadonlyArray<keyof IUserRegisterRequest>;
|
|
|
|
/**
|
|
* POST /api/auth/register
|
|
*
|
|
* 流程：
|
|
* 1. 只接收 JSON 对象，并按 REGISTER_FIELDS 白名单透传注册字段。
|
|
* 2. 调用 NewAPI 注册接口。
|
|
* 3. 成功时返回统一成功响应；上游失败时转成统一错误响应。
|
|
*/
|
|
export default defineEventHandler(async (event) => {
|
|
const logger = createApiLogger("auth.register");
|
|
const requestBody = await readBody<Partial<IUserRegisterRequest> | null>(
|
|
event
|
|
);
|
|
|
|
logger.info("开始", {
|
|
bodyType: requestBody === null ? "null" : typeof requestBody,
|
|
hasUsername: typeof requestBody?.username === "string",
|
|
hasPassword: typeof requestBody?.password === "string",
|
|
hasEmail: typeof requestBody?.email === "string",
|
|
hasVerificationCode: typeof requestBody?.verification_code === "string",
|
|
hasAffCode: typeof requestBody?.aff_code === "string"
|
|
});
|
|
|
|
// 只接受 JSON 对象或 null，避免数组/字符串等无效 body 被透传到上游。
|
|
if (
|
|
requestBody !== null &&
|
|
(typeof requestBody !== "object" || Array.isArray(requestBody))
|
|
) {
|
|
logger.warn("请求体格式错误", {
|
|
bodyType: Array.isArray(requestBody) ? "array" : typeof requestBody
|
|
});
|
|
return createErrorResponse(400, "请求体必须是 JSON 对象");
|
|
}
|
|
|
|
const payload: IUserRegisterRequest = {};
|
|
for (const field of REGISTER_FIELDS) {
|
|
const value = requestBody?.[field];
|
|
if (typeof value === "string") {
|
|
payload[field] = value;
|
|
}
|
|
}
|
|
|
|
try {
|
|
await newApiFetch<IUserRegisterData>("/api/user/register", {
|
|
method: "POST",
|
|
body: payload,
|
|
headers: {
|
|
"Content-Type": "application/json"
|
|
}
|
|
});
|
|
|
|
logger.done("成功", {
|
|
registered: true
|
|
});
|
|
|
|
return createSuccessResponse<IUserRegisterData>(null, "注册成功");
|
|
} catch (error) {
|
|
logger.error("失败", {
|
|
error: toSafeLogError(error)
|
|
});
|
|
return createUpstreamErrorResponse(error, "注册失败");
|
|
}
|
|
});
|