Files
lottery/server/routes/auth.js
T
DeveloperandClaude Opus 4.6 7b1073e23b Initial commit: lottery project structure
Add core project files including:
- Client and server directories
- Backup script
- Package configuration
- Git ignore rules

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-12 11:26:49 +08:00

53 lines
1.5 KiB
JavaScript

const express = require('express');
const bcrypt = require('bcryptjs');
const db = require('../db/init');
const { generateToken } = require('../middleware/auth');
const router = express.Router();
// 注册
router.post('/register', (req, res) => {
const { username, password } = req.body;
if (!username || !password) {
return res.status(400).json({ error: '用户名和密码不能为空' });
}
try {
const hashedPassword = bcrypt.hashSync(password, 10);
const stmt = db.prepare('INSERT INTO users (username, password) VALUES (?, ?)');
const result = stmt.run(username, hashedPassword);
const user = { id: result.lastInsertRowid, username };
const token = generateToken(user);
res.json({ user, token });
} catch (err) {
if (err.code === 'SQLITE_CONSTRAINT_UNIQUE') {
return res.status(400).json({ error: '用户名已存在' });
}
res.status(500).json({ error: '注册失败' });
}
});
// 登录
router.post('/login', (req, res) => {
const { username, password } = req.body;
if (!username || !password) {
return res.status(400).json({ error: '用户名和密码不能为空' });
}
const stmt = db.prepare('SELECT * FROM users WHERE username = ?');
const user = stmt.get(username);
if (!user || !bcrypt.compareSync(password, user.password)) {
return res.status(401).json({ error: '用户名或密码错误' });
}
const token = generateToken(user);
res.json({ user: { id: user.id, username: user.username }, token });
});
module.exports = router;