tt/ttstd-infinite-canvas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(auth): 用户账户 - 完善个人资料与登录日志 (#752)

Browse Source 
Co-authored-by: wuligao <1247662379@qq.com>
This commit is contained in:
ddcat666
2026-10-13 05:31:30 +08:00
committed by GitHub
parent e70fe1b9c9
commit 4c1d2b4012
83 changed files with 5836 additions and 328 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
backend/internal/auth/verification.go
View File

@@ -30,9 +30,10 @@ type VerificationTicket struct {
RetryAfter int `json:"retryAfter"`
}
type VerificationConfirm struct {
Ticket string `json:"ticket"`
EmailCode string `json:"emailCode"`
SMSCode string `json:"smsCode"`
LoginContext LoginContext `json:"-"`
Ticket string `json:"ticket"`
EmailCode string `json:"emailCode"`
SMSCode string `json:"smsCode"`
}
func (s *Service) verificationHash(value string) (string, error) {
@@ -283,7 +284,30 @@ func (s *Service) verifyTicket(purpose string, req VerificationConfirm) (*model.
}
return v, nil
}
func (s *Service) LoginVerification(req VerificationConfirm) (*AuthSessionResult, error) {
func (s *Service) LoginVerification(req VerificationConfirm) (result *AuthSessionResult, err error) {
event := NewLoginLog("verification", "login", req.LoginContext)
defer func() {
if err != nil {
err = s.recordLoginFailure(event, err)
}
}()
if id, secret, ok := strings.Cut(req.Ticket, "."); ok && len(id) <= 36 && len(secret) == 64 {
candidate, lookupErr := s.repo.AuthVerification(id)
if lookupErr != nil && !errors.Is(lookupErr, gorm.ErrRecordNotFound) {
return nil, lookupErr
}
if lookupErr == nil && candidate.Purpose == "login" && hmac.Equal([]byte(candidate.TokenHash), []byte(HashToken(secret))) {
event.Method = candidate.Method
event.Account = MaskLoginAccount(kernel.FirstNonEmpty(candidate.Email, candidate.Phone))
if candidate.UserID != "" {
user, lookupErr := s.repo.User(candidate.UserID)
if lookupErr != nil {
return nil, lookupErr
}
loginLogUser(event, user)
}
}
}
v, err := s.verifyTicket("login", req)
if err != nil {
return nil, err
@@ -298,8 +322,8 @@ func (s *Service) LoginVerification(req VerificationConfirm) (*AuthSessionResult
if err := s.host.EnsureSignupBonus(user.ID); err != nil {
return nil, err
}
s.host.RecordActivity(user.ID, "login", 1)
return s.createAuthSession(user)
event.Method = v.Method
return s.createAuthSession(user, event)
}
func (s *Service) BindVerification(actor *model.User, req VerificationConfirm) (*AuthUser, error) {
if actor == nil {