{p.sectionTitle || "整本购买"}
-{new Date(p.createdAt).toLocaleString()}
+{p?.createdAt ? new Date(p.createdAt).toLocaleString() : "-"}
+¥{p.amount}
-{p.paymentMethod || "微信支付"}
++¥{Number(p?.amount) || 0}
+{p?.paymentMethod || "微信支付"}
- {u.createdAt ? new Date(u.createdAt).toLocaleDateString() : "-"} + {u?.createdAt ? new Date(u.createdAt).toLocaleDateString() : "-"}
))} diff --git a/app/api/admin/logout/route.ts b/app/api/admin/logout/route.ts new file mode 100644 index 0000000..9d28734 --- /dev/null +++ b/app/api/admin/logout/route.ts @@ -0,0 +1,9 @@ +import { NextRequest, NextResponse } from 'next/server' +import { getAdminCookieName, getAdminCookieOptions } from '@/lib/admin-auth' + +export async function POST(_req: NextRequest) { + const res = NextResponse.json({ success: true }) + const opts = getAdminCookieOptions() + res.cookies.set(getAdminCookieName(), '', { ...opts, maxAge: 0 }) + return res +} diff --git a/app/api/auth/login/route.ts b/app/api/auth/login/route.ts new file mode 100644 index 0000000..0335b17 --- /dev/null +++ b/app/api/auth/login/route.ts @@ -0,0 +1,72 @@ +/** + * Web 端登录：手机号 + 密码 + * POST { phone, password } -> 校验后返回用户信息（不含密码） + */ + +import { NextRequest, NextResponse } from 'next/server' +import { query } from '@/lib/db' +import { verifyPassword } from '@/lib/password' + +function mapRowToUser(r: any) { + return { + id: r.id, + phone: r.phone || '', + nickname: r.nickname || '', + isAdmin: !!r.is_admin, + purchasedSections: Array.isArray(r.purchased_sections) + ? r.purchased_sections + : (r.purchased_sections ? JSON.parse(String(r.purchased_sections)) : []) || [], + hasFullBook: !!r.has_full_book, + referralCode: r.referral_code || '', + earnings: parseFloat(String(r.earnings || 0)), + pendingEarnings: parseFloat(String(r.pending_earnings || 0)), + withdrawnEarnings: parseFloat(String(r.withdrawn_earnings || 0)), + referralCount: Number(r.referral_count) || 0, + createdAt: r.created_at || '', + } +} + +export async function POST(request: NextRequest) { + try { + const body = await request.json() + const { phone, password } = body + + if (!phone || !password) { + return NextResponse.json( + { success: false, error: '请输入手机号和密码' }, + { status: 400 } + ) + } + + const rows = await query( + 'SELECT id, phone, nickname, password, is_admin, has_full_book, referral_code, earnings, pending_earnings, withdrawn_earnings, referral_count, purchased_sections, created_at FROM users WHERE phone = ?', + [String(phone).trim()] + ) as any[] + + if (!rows || rows.length === 0) { + return NextResponse.json( + { success: false, error: '用户不存在或密码错误' }, + { status: 401 } + ) + } + + const row = rows[0] + const storedPassword = row.password == null ? '' : String(row.password) + + if (!verifyPassword(String(password), storedPassword)) { + return NextResponse.json( + { success: false, error: '密码错误' }, + { status: 401 } + ) + } + + const user = mapRowToUser(row) + return NextResponse.json({ success: true, user }) + } catch (e) { + console.error('[Auth Login] error:', e) + return NextResponse.json( + { success: false, error: '登录失败' }, + { status: 500 } + ) + } +} diff --git a/app/api/auth/reset-password/route.ts b/app/api/auth/reset-password/route.ts new file mode 100644 index 0000000..3ba8490 --- /dev/null +++ b/app/api/auth/reset-password/route.ts @@ -0,0 +1,54 @@ +/** + * 忘记密码 / 重置密码（Web 端） + * POST { phone, newPassword } -> 按手机号更新密码（无验证码版本，适合内测/内部使用） + */ + +import { NextRequest, NextResponse } from 'next/server' +import { query } from '@/lib/db' +import { hashPassword } from '@/lib/password' + +export async function POST(request: NextRequest) { + try { + const body = await request.json() + const { phone, newPassword } = body + + if (!phone || !newPassword) { + return NextResponse.json( + { success: false, error: '请输入手机号和新密码' }, + { status: 400 } + ) + } + + const trimmedPhone = String(phone).trim() + const trimmedPassword = String(newPassword).trim() + + if (trimmedPassword.length < 6) { + return NextResponse.json( + { success: false, error: '密码至少 6 位' }, + { status: 400 } + ) + } + + const rows = await query('SELECT id FROM users WHERE phone = ?', [trimmedPhone]) as any[] + if (!rows || rows.length === 0) { + return NextResponse.json( + { success: false, error: '该手机号未注册' }, + { status: 404 } + ) + } + + const hashed = hashPassword(trimmedPassword) + await query('UPDATE users SET password = ?, updated_at = NOW() WHERE phone = ?', [ + hashed, + trimmedPhone, + ]) + + return NextResponse.json({ success: true, message: '密码已重置，请使用新密码登录' }) + } catch (e) { + console.error('[Auth ResetPassword] error:', e) + return NextResponse.json( + { success: false, error: '重置失败' }, + { status: 500 } + ) + } +} diff --git a/app/api/book/all-chapters/route.ts b/app/api/book/all-chapters/route.ts index 0500e18..8ec3af7 100644 --- a/app/api/book/all-chapters/route.ts +++ b/app/api/book/all-chapters/route.ts @@ -17,23 +17,30 @@ export async function GET() { `) as any[] if (dbChapters && dbChapters.length > 0) { - console.log('[All Chapters API] 从数据库读取成功，共', dbChapters.length, '章') + console.log('[All Chapters API] 从数据库读取成功，共', dbChapters.length, '条') - // 格式化数据 - const allChapters = dbChapters.map((chapter: any) => ({ - id: chapter.id, - sectionId: chapter.section_id, - title: chapter.title, - sectionTitle: chapter.section_title, - content: chapter.content, - isFree: !!chapter.is_free, - price: chapter.price || 0, - words: chapter.words || Math.floor(Math.random() * 3000) + 2000, - sectionOrder: chapter.section_order, - chapterOrder: chapter.chapter_order, - createdAt: chapter.created_at, - updatedAt: chapter.updated_at - })) + // 格式化并按 id 去重（保留首次出现） + const seen = new Set