AddAccount.js 4.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105
  1. const API = require("../../../lib/API.js");
  2. const db = require("../../../plugin/DataBase/db.js");
  3. const { BaseStdResponse } = require("../../../BaseStdResponse.js");
  4. const AccessControl = require("../../../lib/AccessControl.js");
  5. class AddAccount extends API {
  6. constructor() {
  7. super();
  8. this.setPath('/Lepao/Account')
  9. this.setMethod('POST')
  10. }
  11. async onRequest(req, res) {
  12. let { uuid, session, student_num, email, id, area, max_distance, min_distance, auto_time, auto_run, notes } = req.body
  13. if ([uuid, session, student_num, email, auto_time].some(value => value === '' || value === null || value === undefined))
  14. return res.json({
  15. ...BaseStdResponse.MISSING_PARAMETER,
  16. endpoint: 1513126
  17. })
  18. if (!await AccessControl.checkSession(uuid, session))
  19. return res.status(401).json({
  20. ...BaseStdResponse.ACCESS_DENIED
  21. })
  22. let countSql = 'SELECT create_user FROM lepao_account WHERE student_num = ?'
  23. let countRows = await db.query(countSql, [student_num])
  24. if (!countRows)
  25. return res.json({ ...BaseStdResponse.ERR, msg: '添加乐跑账号失败!数据库错误' })
  26. // 判断是否重复注册
  27. if (!id) {
  28. if (countRows.length !== 0) {
  29. if (countRows[0].create_user !== uuid)
  30. return res.json({ ...BaseStdResponse.ERR, msg: '该乐跑账号已被其他用户绑定,请联系客服解绑' })
  31. return res.json({ ...BaseStdResponse.ERR, msg: '该乐跑账号已添加' })
  32. }
  33. }
  34. if (countRows && countRows[0] && countRows[0].create_user !== uuid) {
  35. let permission = await AccessControl.getPermission(uuid)
  36. if (!permission.includes("admin") && !permission.includes("service"))
  37. return res.json({
  38. ...BaseStdResponse.PERMISSION_DENIED
  39. })
  40. }
  41. // 判断用户是否用了会员权益
  42. // let userSql = 'SELECT vip FROM users WHERE uuid = ?'
  43. // let userData = await db.query(userSql, [uuid])
  44. // if (!userData || userData.length !== 1)
  45. // return res.json({ ...BaseStdResponse.ERR, msg: '添加乐跑账号失败!数据库错误' })
  46. // if (userData[0].vip !== 1) {
  47. // 限制账号个数
  48. // let numSql = 'SELECT COUNT(*) AS num FROM lepao_account WHERE create_user = ?'
  49. // let numRows = await db.query(numSql, [uuid])
  50. // if(!numRows)
  51. // return res.json({ ...BaseStdResponse.ERR, msg: '添加乐跑账号失败!数据库错误' })
  52. // if(numRows[0].num >= 6)
  53. // return res.json({...BaseStdResponse.NOTVIP, msg: '非VIP用户最多只能添加6个乐跑账号,请先开通VIP'})
  54. // if(min_distance != 2.00 || max_distance != 4.00)
  55. // return res.json({ ...BaseStdResponse.NOTVIP, msg: '仅VIP用户可设置跑步距离区间' })
  56. // 限制跑区
  57. // if (area != '')
  58. // return res.json({ ...BaseStdResponse.NOTVIP, msg: '仅VIP用户可指定跑区' })
  59. // }
  60. const time = new Date().getTime()
  61. let sql, r
  62. if (!id) {
  63. sql = 'INSERT INTO lepao_account (student_num, email, area, auto_time, auto_run, create_user, create_time, notes) VALUES (?, ?, ?, ?, ?, ?, ?, ?)'
  64. r = await db.query(sql, [student_num, email, area, auto_time, auto_run, uuid, time, notes ?? ''])
  65. } else {
  66. sql = 'UPDATE lepao_account SET student_num = ?, email = ?, area = ?, auto_time = ?, auto_run = ?, update_time = ?, notes = ? WHERE id = ?'
  67. r = await db.query(sql, [student_num, email, area, auto_time, auto_run, time, notes ?? '', id])
  68. }
  69. try {
  70. if (r && r.affectedRows > 0) {
  71. res.json({
  72. ...BaseStdResponse.OK,
  73. id: r.insertId
  74. })
  75. } else {
  76. return res.json({ ...BaseStdResponse.ERR, msg: '添加乐跑账号失败!数据库错误' })
  77. }
  78. } catch (err) {
  79. this.logger.error(`添加乐跑账号失败!${err.stack}`)
  80. res.json({
  81. ...BaseStdResponse.ERR,
  82. msg: "添加乐跑账号失败!",
  83. });
  84. }
  85. }
  86. }
  87. module.exports.AddAccount = AddAccount;