248 lines
9.4 KiB
Python
248 lines
9.4 KiB
Python
|
import secrets
|
|||
|
|
from datetime import datetime, timedelta
|
|||
|
|
from uuid import uuid4
|
|||
|
|
|
|||
|
|
from fastapi import APIRouter, Depends
|
|||
|
|
from fastapi.responses import JSONResponse
|
|||
|
|
from sqlalchemy import select
|
|||
|
|
from sqlalchemy.ext.asyncio import AsyncSession
|
|||
|
|
|
|||
|
|
from loveace.config.logger import LoggerMixin
|
|||
|
|
from loveace.database.auth.register import InviteCode as InviteCodeDB
|
|||
|
|
from loveace.database.auth.register import RegisterCoolDown
|
|||
|
|
from loveace.database.auth.token import AuthMEToken
|
|||
|
|
from loveace.database.auth.user import ACEUser
|
|||
|
|
from loveace.database.creator import get_db_session
|
|||
|
|
from loveace.router.dependencies.logger import no_user_logger_mixin
|
|||
|
|
from loveace.router.endpoint.auth.model.register import (
|
|||
|
|
InviteCodeRequest,
|
|||
|
|
InviteCodeResponse,
|
|||
|
|
InviteErrorToCode,
|
|||
|
|
RegisterErrorToCode,
|
|||
|
|
RegisterRequest,
|
|||
|
|
RegisterResponse,
|
|||
|
|
)
|
|||
|
|
from loveace.router.schemas.uniresponse import UniResponseModel
|
|||
|
|
from loveace.service.remote.aufe import AUFEService
|
|||
|
|
from loveace.service.remote.aufe.depends import get_aufe_service
|
|||
|
|
from loveace.utils.rsa import RSAUtils
|
|||
|
|
|
|||
|
|
register_router = APIRouter(prefix="/register")
|
|||
|
|
|
|||
|
|
|
|||
|
|
temp_tokens = []
|
|||
|
|
|
|||
|
|
rsa_util = RSAUtils.get_or_create_rsa_utils()
|
|||
|
|
|
|||
|
|
|
|||
|
|
@register_router.post(
|
|||
|
|
"/invite",
|
|||
|
|
response_model=UniResponseModel[InviteCodeResponse],
|
|||
|
|
responses=InviteErrorToCode.gen_code_table(),
|
|||
|
|
summary="邀请码验证",
|
|||
|
|
)
|
|||
|
|
async def register(
|
|||
|
|
invite_code: InviteCodeRequest,
|
|||
|
|
db: AsyncSession = Depends(get_db_session),
|
|||
|
|
logger: LoggerMixin = Depends(no_user_logger_mixin),
|
|||
|
|
) -> UniResponseModel[InviteCodeResponse] | JSONResponse:
|
|||
|
|
"""
|
|||
|
|
验证邀请码并返回临时 Token
|
|||
|
|
|
|||
|
|
✅ 功能特性：
|
|||
|
|
- 验证邀请码的有效性
|
|||
|
|
- 生成临时 Token 用于后续注册步骤
|
|||
|
|
- 邀请码一次性使用
|
|||
|
|
|
|||
|
|
💡 使用场景：
|
|||
|
|
- 用户注册流程的第一步
|
|||
|
|
- 邀请制系统的验证
|
|||
|
|
|
|||
|
|
Args:
|
|||
|
|
invite_code: 邀请码请求对象
|
|||
|
|
db: 数据库会话
|
|||
|
|
logger: 日志记录器
|
|||
|
|
|
|||
|
|
Returns:
|
|||
|
|
InviteCodeResponse: 包含临时 Token
|
|||
|
|
"""
|
|||
|
|
try:
|
|||
|
|
async with db as session:
|
|||
|
|
logger.info(f"邀请码: {invite_code.invite_code}")
|
|||
|
|
invite = select(InviteCodeDB).where(
|
|||
|
|
InviteCodeDB.code == invite_code.invite_code
|
|||
|
|
)
|
|||
|
|
result = await session.execute(invite)
|
|||
|
|
invite_data = result.scalars().first()
|
|||
|
|
if invite_data is None:
|
|||
|
|
logger.info(f"邀请码不存在: {invite_code.invite_code}")
|
|||
|
|
return InviteErrorToCode().invalid_invite_code.to_json_response(
|
|||
|
|
logger.trace_id
|
|||
|
|
)
|
|||
|
|
token = secrets.token_urlsafe(128)
|
|||
|
|
temp_tokens.append(token)
|
|||
|
|
return UniResponseModel[InviteCodeResponse](
|
|||
|
|
success=True,
|
|||
|
|
data=InviteCodeResponse(token=token),
|
|||
|
|
message="邀请码验证成功",
|
|||
|
|
error=None,
|
|||
|
|
)
|
|||
|
|
except Exception as e:
|
|||
|
|
logger.error("邀请码验证失败:")
|
|||
|
|
logger.exception(e)
|
|||
|
|
return InviteErrorToCode().server_error.to_json_response(logger.trace_id)
|
|||
|
|
|
|||
|
|
|
|||
|
|
@register_router.post(
|
|||
|
|
"/next",
|
|||
|
|
response_model=UniResponseModel[RegisterResponse],
|
|||
|
|
responses=RegisterErrorToCode.gen_code_table(),
|
|||
|
|
summary="用户注册",
|
|||
|
|
)
|
|||
|
|
async def register_user(
|
|||
|
|
register_info: RegisterRequest,
|
|||
|
|
db: AsyncSession = Depends(get_db_session),
|
|||
|
|
logger: LoggerMixin = Depends(no_user_logger_mixin),
|
|||
|
|
aufe_service: AUFEService = Depends(get_aufe_service),
|
|||
|
|
) -> UniResponseModel[RegisterResponse] | JSONResponse:
|
|||
|
|
"""
|
|||
|
|
用户注册，验证身份并创建账户
|
|||
|
|
|
|||
|
|
✅ 功能特性：
|
|||
|
|
- 通过 AUFE 服务验证 EC 密码和登录密码
|
|||
|
|
- 验证身份信息的有效性
|
|||
|
|
- 生成 Authme Token 用于登录
|
|||
|
|
|
|||
|
|
⚠️ 限制条件：
|
|||
|
|
- EC 密码或登录密码错误会触发 5 分钟冷却时间
|
|||
|
|
- 用户 ID 不能重复
|
|||
|
|
- 必须提供有效的邀请 Token
|
|||
|
|
|
|||
|
|
💡 使用场景：
|
|||
|
|
- 新用户注册
|
|||
|
|
- 创建学号对应的账户
|
|||
|
|
|
|||
|
|
Args:
|
|||
|
|
register_info: 包含用户 ID、EC 密码、登录密码和邀请 Token 的注册信息
|
|||
|
|
db: 数据库会话
|
|||
|
|
logger: 日志记录器
|
|||
|
|
aufe_service: AUFE 远程认证服务
|
|||
|
|
|
|||
|
|
Returns:
|
|||
|
|
RegisterResponse: 包含 Authme Token
|
|||
|
|
"""
|
|||
|
|
try:
|
|||
|
|
async with db as session:
|
|||
|
|
# COOLDOWN检查
|
|||
|
|
query = select(RegisterCoolDown).where(
|
|||
|
|
RegisterCoolDown.userid == register_info.userid
|
|||
|
|
)
|
|||
|
|
result = await session.execute(query)
|
|||
|
|
cooldown = result.scalars().first()
|
|||
|
|
if cooldown:
|
|||
|
|
if cooldown.expire_date > datetime.now():
|
|||
|
|
logger.info(f"用户ID注册冷却中: {register_info.userid}")
|
|||
|
|
return RegisterErrorToCode().userid_exists.to_json_response(
|
|||
|
|
logger.trace_id
|
|||
|
|
)
|
|||
|
|
else:
|
|||
|
|
await session.delete(cooldown)
|
|||
|
|
await session.commit()
|
|||
|
|
if register_info.token not in temp_tokens:
|
|||
|
|
logger.info(f"无效的注册Token: {register_info.token}")
|
|||
|
|
return RegisterErrorToCode().invalid_token.to_json_response(
|
|||
|
|
logger.trace_id
|
|||
|
|
)
|
|||
|
|
query = select(ACEUser).where(ACEUser.userid == register_info.userid)
|
|||
|
|
result = await session.execute(query)
|
|||
|
|
user = result.scalars().first()
|
|||
|
|
if user is not None:
|
|||
|
|
logger.info(f"用户ID已存在: {register_info.userid}")
|
|||
|
|
return RegisterErrorToCode().userid_exists.to_json_response(
|
|||
|
|
logger.trace_id
|
|||
|
|
)
|
|||
|
|
# 尝试使用AUFE服务验证EC密码
|
|||
|
|
try:
|
|||
|
|
ec_password = rsa_util.decrypt(register_info.ec_password)
|
|||
|
|
password = rsa_util.decrypt(register_info.password)
|
|||
|
|
except Exception as e:
|
|||
|
|
logger.info(f"用户 {register_info.userid} 提供的密码解密失败: {e}")
|
|||
|
|
return RegisterErrorToCode().decrypt_error.to_json_response(
|
|||
|
|
logger.trace_id
|
|||
|
|
)
|
|||
|
|
conn = await aufe_service.get_or_create_connection(
|
|||
|
|
userid=register_info.userid,
|
|||
|
|
ec_password=ec_password,
|
|||
|
|
password=password,
|
|||
|
|
)
|
|||
|
|
ec_login_status = await conn.ec_login()
|
|||
|
|
if not ec_login_status.success:
|
|||
|
|
cooldown_entry = RegisterCoolDown(
|
|||
|
|
userid=register_info.userid,
|
|||
|
|
expire_date=datetime.now() + timedelta(minutes=5),
|
|||
|
|
)
|
|||
|
|
session.add(cooldown_entry)
|
|||
|
|
await session.commit()
|
|||
|
|
if ec_login_status.fail_invalid_credentials:
|
|||
|
|
logger.info(f"EC密码错误: {register_info.userid}")
|
|||
|
|
return RegisterErrorToCode().ec_password_error.to_json_response(
|
|||
|
|
logger.trace_id
|
|||
|
|
)
|
|||
|
|
else:
|
|||
|
|
logger.error(f"AUFE服务异常: {ec_login_status}")
|
|||
|
|
return RegisterErrorToCode().ec_server_error.to_json_response(
|
|||
|
|
logger.trace_id
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
uaap_login_status = await conn.uaap_login()
|
|||
|
|
if not uaap_login_status.success:
|
|||
|
|
cooldown_entry = RegisterCoolDown(
|
|||
|
|
userid=register_info.userid,
|
|||
|
|
expire_date=datetime.now() + timedelta(minutes=5),
|
|||
|
|
)
|
|||
|
|
session.add(cooldown_entry)
|
|||
|
|
await session.commit()
|
|||
|
|
if uaap_login_status.fail_invalid_credentials:
|
|||
|
|
logger.info(f"登录密码错误: {register_info.userid}")
|
|||
|
|
return RegisterErrorToCode().uaap_password_error.to_json_response(
|
|||
|
|
logger.trace_id
|
|||
|
|
)
|
|||
|
|
else:
|
|||
|
|
logger.error(f"AUFE服务异常: {uaap_login_status}")
|
|||
|
|
return RegisterErrorToCode().ec_server_error.to_json_response(
|
|||
|
|
logger.trace_id
|
|||
|
|
)
|
|||
|
|
# 创建新用户
|
|||
|
|
new_user = ACEUser(
|
|||
|
|
userid=register_info.userid,
|
|||
|
|
ec_password=register_info.ec_password,
|
|||
|
|
password=register_info.password,
|
|||
|
|
)
|
|||
|
|
session.add(new_user)
|
|||
|
|
await session.commit()
|
|||
|
|
# 注册成功后删除临时Token
|
|||
|
|
temp_tokens.remove(register_info.token)
|
|||
|
|
# 生成Authme Token
|
|||
|
|
authme_token = secrets.token_urlsafe(128)
|
|||
|
|
new_token = AuthMEToken(
|
|||
|
|
user_id=new_user.userid, token=authme_token, device_id=uuid4().hex
|
|||
|
|
)
|
|||
|
|
session.add(new_token)
|
|||
|
|
await session.commit()
|
|||
|
|
return UniResponseModel[RegisterResponse](
|
|||
|
|
success=True,
|
|||
|
|
data=RegisterResponse(token=authme_token),
|
|||
|
|
message="注册成功",
|
|||
|
|
error=None,
|
|||
|
|
)
|
|||
|
|
except ValueError as ve:
|
|||
|
|
logger.error("用户注册失败: RSA解密错误")
|
|||
|
|
logger.exception(ve)
|
|||
|
|
return RegisterErrorToCode().server_error.to_json_response(
|
|||
|
|
logger.trace_id, "RSA解密错误，请检查授权密文"
|
|||
|
|
)
|
|||
|
|
except Exception as e:
|
|||
|
|
logger.error("用户注册失败:")
|
|||
|
|
logger.exception(e)
|
|||
|
|
return RegisterErrorToCode().server_error.to_json_response(logger.trace_id)
|