Files
nxxmdata/government-backend/controllers/authController.js

103 lines
2.3 KiB
JavaScript

const jwt = require('jsonwebtoken')
// JWT配置
const JWT_SECRET = process.env.JWT_SECRET || 'your-secret-key-change-in-production'
// 临时用户数据(实际项目中应该从数据库获取)
const users = [
{
id: 1,
username: 'admin',
password: '123456',
name: '系统管理员',
role: 'admin',
email: 'admin@example.com'
}
]
exports.login = async (req, res) => {
try {
const { username, password } = req.body
// 查找用户
const user = users.find(u => u.username === username && u.password === password)
if (user) {
const token = jwt.sign({
id: user.id,
username: user.username,
role: user.role
}, JWT_SECRET, { expiresIn: '2h' })
return res.json({
code: 200,
message: '登录成功',
data: { token }
})
}
res.status(401).json({
code: 401,
message: '用户名或密码错误'
})
} catch (err) {
res.status(500).json({
code: 500,
message: '服务器错误',
error: err.message
})
}
}
// 获取用户信息
exports.getUserInfo = async (req, res) => {
try {
// 从token中解析用户信息
const token = req.headers.authorization?.replace('Bearer ', '')
if (!token) {
return res.status(401).json({
code: 401,
message: '未提供认证令牌'
})
}
try {
const decoded = jwt.verify(token, JWT_SECRET)
const user = users.find(u => u.id === decoded.id)
if (user) {
const userInfo = {
id: user.id,
username: user.username,
name: user.name,
role: user.role,
avatar: '',
email: user.email,
permissions: ['dashboard', 'users', 'settings']
}
return res.json({
code: 200,
message: '获取用户信息成功',
data: userInfo
})
} else {
return res.status(401).json({
code: 401,
message: '用户不存在'
})
}
} catch (jwtError) {
return res.status(401).json({
code: 401,
message: '认证令牌无效'
})
}
} catch (err) {
res.status(500).json({
code: 500,
message: '服务器错误',
error: err.message
})
}
}