55 lines
1.6 KiB
TypeScript
55 lines
1.6 KiB
TypeScript
/**
|
||
* 忘记密码 / 重置密码（Web 端）
|
||
* POST { phone, newPassword } -> 按手机号更新密码（无验证码版本，适合内测/内部使用）
|
||
*/
|
||
|
||
import { NextRequest, NextResponse } from 'next/server'
|
||
import { query } from '@/lib/db'
|
||
import { hashPassword } from '@/lib/password'
|
||
|
||
export async function POST(request: NextRequest) {
|
||
try {
|
||
const body = await request.json()
|
||
const { phone, newPassword } = body
|
||
|
||
if (!phone || !newPassword) {
|
||
return NextResponse.json(
|
||
{ success: false, error: '请输入手机号和新密码' },
|
||
{ status: 400 }
|
||
)
|
||
}
|
||
|
||
const trimmedPhone = String(phone).trim()
|
||
const trimmedPassword = String(newPassword).trim()
|
||
|
||
if (trimmedPassword.length < 6) {
|
||
return NextResponse.json(
|
||
{ success: false, error: '密码至少 6 位' },
|
||
{ status: 400 }
|
||
)
|
||
}
|
||
|
||
const rows = await query('SELECT id FROM users WHERE phone = ?', [trimmedPhone]) as any[]
|
||
if (!rows || rows.length === 0) {
|
||
return NextResponse.json(
|
||
{ success: false, error: '该手机号未注册' },
|
||
{ status: 404 }
|
||
)
|
||
}
|
||
|
||
const hashed = hashPassword(trimmedPassword)
|
||
await query('UPDATE users SET password = ?, updated_at = NOW() WHERE phone = ?', [
|
||
hashed,
|
||
trimmedPhone,
|
||
])
|
||
|
||
return NextResponse.json({ success: true, message: '密码已重置，请使用新密码登录' })
|
||
} catch (e) {
|
||
console.error('[Auth ResetPassword] error:', e)
|
||
return NextResponse.json(
|
||
{ success: false, error: '重置失败' },
|
||
{ status: 500 }
|
||
)
|
||
}
|
||
}
|