AddAccount.js 3.6 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788
  1. const API = require("../../../lib/API.js");
  2. const db = require("../../../plugin/DataBase/db.js");
  3. const { BaseStdResponse } = require("../../../BaseStdResponse.js");
  4. const AccessControl = require("../../../lib/AccessControl.js");
  5. class AddAccount extends API {
  6. constructor() {
  7. super();
  8. this.setPath('/Lepao/Account')
  9. this.setMethod('POST')
  10. }
  11. async onRequest(req, res) {
  12. let { uuid, session, student_num, email, id, area, max_distance, min_distance, auto_time, auto_run, notes } = req.body
  13. if ([uuid, session, student_num, email, auto_time].some(value => value === '' || value === null || value === undefined))
  14. return res.json({
  15. ...BaseStdResponse.MISSING_PARAMETER,
  16. endpoint: 1513126
  17. })
  18. if (!await AccessControl.checkSession(uuid, session))
  19. return res.status(401).json({
  20. ...BaseStdResponse.ACCESS_DENIED
  21. })
  22. let countSql = 'SELECT id, create_user FROM lepao_account WHERE student_num = ?'
  23. let countRows = await db.query(countSql, [student_num])
  24. if (!countRows)
  25. return res.json({ ...BaseStdResponse.ERR, msg: '添加乐跑账号失败!数据库错误' })
  26. // 判断是否重复注册
  27. if (!id) {
  28. if (countRows.length !== 0 && countRows[0].create_user != null) {
  29. if (countRows[0].create_user !== uuid)
  30. return res.json({ ...BaseStdResponse.ERR, msg: '该乐跑账号已被其他用户绑定,请联系客服解绑' })
  31. return res.json({ ...BaseStdResponse.ERR, msg: '该乐跑账号已添加' })
  32. }
  33. }
  34. if (countRows && countRows[0] && countRows[0].create_user !== uuid) {
  35. let permission = await AccessControl.getPermission(uuid)
  36. if (!permission.includes("admin") && !permission.includes("service"))
  37. return res.json({
  38. ...BaseStdResponse.PERMISSION_DENIED
  39. })
  40. }
  41. const time = new Date().getTime()
  42. let sql, r
  43. if (!id) {
  44. if (countRows.length !== 0) {
  45. sql = 'UPDATE lepao_account SET create_user = ?, email = ?, area = ?, auto_time = ?, auto_run = ?, create_time = ?, notes = ? WHERE id = ?'
  46. r = await db.query(sql, [uuid, email, area, auto_time, auto_run, time, notes ?? '', countRows[0].id])
  47. }
  48. else {
  49. sql = 'INSERT INTO lepao_account (student_num, email, area, auto_time, auto_run, create_user, create_time, notes) VALUES (?, ?, ?, ?, ?, ?, ?, ?)'
  50. r = await db.query(sql, [student_num, email, area, auto_time, auto_run, uuid, time, notes ?? ''])
  51. }
  52. } else {
  53. sql = 'UPDATE lepao_account SET student_num = ?, email = ?, area = ?, auto_time = ?, auto_run = ?, notes = ? WHERE id = ?'
  54. r = await db.query(sql, [student_num, email, area, auto_time, auto_run, notes ?? '', id])
  55. }
  56. try {
  57. if (r && r.affectedRows > 0) {
  58. res.json({
  59. ...BaseStdResponse.OK,
  60. id: r.insertId
  61. })
  62. } else {
  63. return res.json({ ...BaseStdResponse.ERR, msg: '添加乐跑账号失败!数据库错误' })
  64. }
  65. } catch (err) {
  66. this.logger.error(`添加乐跑账号失败!${err.stack}`)
  67. res.json({
  68. ...BaseStdResponse.ERR,
  69. msg: "添加乐跑账号失败!",
  70. });
  71. }
  72. }
  73. }
  74. module.exports.AddAccount = AddAccount;