user.js 3.1 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091
  1. 'use strict';
  2. const assert = require('assert');
  3. const _ = require('lodash');
  4. const { ObjectId } = require('mongoose').Types;
  5. const { CrudService } = require('naf-framework-mongoose/lib/service');
  6. const { BusinessError, ErrorCode } = require('naf-core').Error;
  7. const jwt = require('jsonwebtoken');
  8. class UserService extends CrudService {
  9. constructor(ctx) {
  10. super(ctx, 'user');
  11. this.model = this.ctx.model.User;
  12. }
  13. // 重写创建方法
  14. async create(data) {
  15. const { userid, openid, passwd, role_id, name, phone, type } = data;
  16. // console.log(data);
  17. assert(name && phone && passwd, '缺少部分信息项');
  18. assert(/^\d{11}$/i.test(phone), '无效的手机号');
  19. const user = await this.model.findOne({ phone });
  20. if (user) {
  21. throw new BusinessError(ErrorCode.DATA_EXISTED);
  22. }
  23. const newdata = data;
  24. const pas = await this.createJwtPwd(passwd);
  25. newdata.passwd = pas;
  26. const res = await this.model.create(newdata);
  27. return res;
  28. }
  29. // 用户修改密码
  30. async uppasswd(data) {
  31. const { userid, oldpasswd, newpasswd } = data;
  32. assert(userid && oldpasswd && newpasswd, '缺少部分信息项');
  33. // 根据用户id查询用户表中是否存在相应数据
  34. const user = await this.model.findById(userid, '+passwd');
  35. // 如果用户不存在抛出异常
  36. if (!user) {
  37. throw new BusinessError(ErrorCode.USER_NOT_EXIST);
  38. }
  39. // 将用户输入的密码进行加密并与查询到的用户数据密码相比对
  40. const _oldpasswd = await this.createJwtPwd(oldpasswd);
  41. // 如果两个密码不一致抛出异常
  42. if (_oldpasswd !== user.passwd) {
  43. throw new BusinessError(ErrorCode.BAD_PASSWORD);
  44. }
  45. const _newpasswd = await this.createJwtPwd(newpasswd);
  46. user.passwd = _newpasswd;
  47. await user.save();
  48. }
  49. async login(data) {
  50. const { phone, passwd } = data;
  51. // 根据用户输入的手机号查询其他用户表中是否存在相应数据
  52. const user = await this.model.findOne({ phone });
  53. // 如果用户不存在抛出异常
  54. if (!user) {
  55. throw new BusinessError(ErrorCode.USER_NOT_EXIST);
  56. }
  57. const _user = await this.model.findOne({ phone }, '+passwd');
  58. // 将用户输入的密码进行加密并与查询到的用户数据密码相比对
  59. const pas = await this.createJwtPwd(passwd);
  60. // 如果两个密码不一致抛出异常
  61. if (pas !== _user.passwd) {
  62. throw new BusinessError(ErrorCode.BAD_PASSWORD);
  63. }
  64. // 取出用户的类型,根据用户类型返回相应信息
  65. return await this.createJwt(user);
  66. }
  67. async createJwtPwd(password) {
  68. const { secret, expiresIn, issuer } = this.config.jwt;
  69. const token = await jwt.sign(password, secret);
  70. return token;
  71. }
  72. // 创建登录Token
  73. async createJwt({ id, userid, openid, role_id, name, phone, type }) {
  74. const { secret, expiresIn = '1d', issuer = type } = this.config.jwt;
  75. const subject = phone;
  76. const _uid = id;
  77. const res = { userid, uid: _uid, openid, role_id, name, phone, type };
  78. const token = await jwt.sign(res, secret, { expiresIn, issuer, subject });
  79. return token;
  80. }
  81. }
  82. module.exports = UserService;