Files
MC_Report/public/js/pages/register.js
canglan 65edbaf157 refactor: session-based external auth, dynamic sources, drop netease UID
Auth (external API):
- ID: 16-digit random (non-sequential); Secret: SeaReport- + 32 hex
- POST /auth/session: ID+Secret -> Bearer SESSION (24h, single-session,
  old session invalidated on re-issue, disabled client invalidates)
- clientAuth now validates Bearer SESSION via api_sessions JOIN api_clients

Sources (dynamic, no default, open-source friendly):
- sources table + CRUD route (/api/sources, owner; delete guarded by usage)
- users/user_identities.source ENUM -> VARCHAR, seeded netease/skin
- register/admin create/identity bind: validate against enabled sources
- UI: 来源管理 page; source dropdowns loaded dynamically everywhere
  (register, dashboard identity, users admin, bans), labels dynamic

UID removal:
- game_uid/reporter_game_uid no longer required (db default '', validations
  dropped, frontend fields optional)

Docs: EXTERNAL-API.md session flow + new credential format; API.md updated
Verified: 37 checks (syntax, session logic, source CRUD, UID removal, docs)
2026-08-19 20:08:06 +08:00

122 lines
6.2 KiB
JavaScript

const RegisterPage = {
captcha: null,
codeId: null,
async mount() {
// 动态加载来源下拉(不设默认来源)
U.sources().then(list => {
const sel = document.getElementById('rs');
if (sel) {
sel.innerHTML = '<option value="">不指定</option>' + list.map(s => `<option value="${U.esc(s.code)}">${U.esc(s.label)}</option>`).join('');
this.toggleSource();
}
}).catch(()=>{});
},
async render() {
try { this.captcha = await API.get('/captcha'); } catch { this.captcha = null; }
return `
<div class="pub-card wide">
<div class="logo"><i class="fas fa-user-plus"></i><h2>创建账号</h2><p>加入MC举报系统</p></div>
<form id="reg-form">
<div class="grid-2">
<div class="form-group"><label>站点用户名</label><input id="ru" required placeholder="用于登录"></div>
<div class="form-group"><label>登录密码</label><input type="password" id="rp" required placeholder="至少6位"></div>
</div>
<div class="grid-2">
<div class="form-group"><label>帐号来源</label><select id="rs" onchange="RegisterPage.toggleSource()"><option value="">加载中...</option></select></div>
<div class="form-group"><label id="rs-label1">游戏名称</label><input id="rgn" required placeholder="Minecraft ID"></div>
</div>
<div class="form-group" id="uid-group" style="display:none"><label id="rs-label2">UID(可选)</label><input id="rgu" placeholder="选填"></div>
${this.captcha ? `
<div class="form-group"><label>人机验证</label>
<div style="display:flex;align-items:center;gap:10px">
<input type="text" id="captcha-a" placeholder="输入图片字符" required style="flex:1">
<div id="captcha-img" style="flex-shrink:0;border:1px solid var(--g200);border-radius:var(--r);overflow:hidden;cursor:pointer" onclick="RegisterPage.refreshCaptcha()" title="点击刷新">${this.captcha.svg}</div>
<input type="hidden" id="captcha-id" value="${this.captcha.id}">
</div>
</div>` : ''}
<div class="form-group"><label>邮箱</label>
<div style="display:flex;gap:8px">
<input type="email" id="re" required placeholder="用于接收验证码" style="flex:1">
<button type="button" class="btn btn-o btn-sm" id="send-code-btn" style="white-space:nowrap">发送验证码</button>
</div>
</div>
<div class="form-group"><label>邮箱验证码</label>
<input id="vf-code" placeholder="6位数字" maxlength="6" pattern="[0-9]{6}" style="margin-bottom:8px">
<div id="regerr" class="alert alert-e hidden"></div>
<div id="regok" class="alert alert-s hidden"></div>
<button type="submit" class="btn btn-p btn-lg w-full"><i class="fas fa-check"></i> 完成注册</button>
</form>
<div style="margin-top:14px;text-align:center;font-size:13px">
<a href="#/login" style="color:var(--p);text-decoration:none;font-weight:600">已有账号?登录</a>
<span style="color:var(--g4);margin:0 10px">|</span>
<a href="#/home" style="color:var(--g5);text-decoration:none">匿名提交</a>
</div>
</div>`;
},
toggleSource() {
const src = document.getElementById('rs').value;
document.getElementById('rs-label1').textContent = '游戏名称';
const isSkin = src === 'skin';
document.getElementById('rs-label2').textContent = isSkin ? '皮肤站UUID(可选)' : 'UID(可选)';
document.getElementById('uid-group').style.display = isSkin ? 'none' : '';
document.getElementById('rgu').required = false;
},
async refreshCaptcha() {
try { const c = await API.get('/captcha'); document.getElementById('captcha-img').innerHTML = c.svg; document.getElementById('captcha-id').value = c.id; document.getElementById('captcha-a').value = ''; } catch {}
},
mount() {
this.toggleSource();
document.getElementById('send-code-btn').addEventListener('click', async () => {
const captcha = document.getElementById('captcha-a');
if (captcha && !captcha.value.trim()) { alert('请先完成人机验证'); return; }
const email = document.getElementById('re').value.trim();
if (!email) { alert('请先填写邮箱'); return; }
const btn = document.getElementById('send-code-btn');
btn.disabled = true; btn.textContent = '发送中...';
try {
const r = await API.post('/auth/send-verify-code', { email });
this.codeId = r.code_id;
if (r.dev) alert('验证码: ' + r.code);
btn.textContent = '\u2713 已发送';
document.getElementById('vf-code').focus();
} catch(ex) { alert(ex.message); btn.disabled = false; btn.textContent = '发送验证码'; }
});
document.getElementById('reg-form').addEventListener('submit', async e => {
e.preventDefault();
const btn = e.target.querySelector('button[type="submit"]');
const err = document.getElementById('regerr'); const ok = document.getElementById('regok');
err.classList.add('hidden'); ok.classList.add('hidden');
btn.disabled = true; btn.innerHTML = '<i class="fas fa-spinner fa-spin"></i> 注册中...';
try {
await Auth.register({
username: document.getElementById('ru').value.trim(), password: document.getElementById('rp').value,
email: document.getElementById('re').value.trim(), game_name: document.getElementById('rgn').value.trim(),
game_uid: document.getElementById('rgu').value.trim(), source: document.getElementById('rs').value,
captcha_id: document.getElementById('captcha-id')?.value,
captcha_answer: document.getElementById('captcha-a')?.value.trim(),
code_id: this.codeId, code: document.getElementById('vf-code').value.trim(),
});
ok.textContent = '注册成功!即将跳转登录...'; ok.classList.remove('hidden');
setTimeout(() => location.hash = '#/login', 2000);
} catch (ex) {
err.textContent = ex.message; err.classList.remove('hidden');
btn.disabled = false; btn.innerHTML = '<i class="fas fa-check"></i> 完成注册';
}
});
}
};