1549 lines
47 KiB
JavaScript
1549 lines
47 KiB
JavaScript
|
const express = require('express');
|
|||
|
|
const bcrypt = require('bcryptjs');
|
|||
|
|
const { getDB } = require('../database');
|
|||
|
|
const { auth, adminAuth } = require('../middleware/auth');
|
|||
|
|
const dayjs = require('dayjs');
|
|||
|
|
|
|||
|
|
const router = express.Router();
|
|||
|
|
|
|||
|
|
// 创建用户（管理员权限）
|
|||
|
|
router.post('/', auth, adminAuth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
await db.query('START TRANSACTION');
|
|||
|
|
|
|||
|
|
const {
|
|||
|
|
username,
|
|||
|
|
password,
|
|||
|
|
role = 'user',
|
|||
|
|
isSystemAccount = false, // 是否为虚拟商户
|
|||
|
|
realName,
|
|||
|
|
idCard,
|
|||
|
|
wechatQr,
|
|||
|
|
alipayQr,
|
|||
|
|
bankCard,
|
|||
|
|
unionpayQr,
|
|||
|
|
phone
|
|||
|
|
} = req.body;
|
|||
|
|
|
|||
|
|
if (!username || !password) {
|
|||
|
|
return res.status(400).json({ success: false, message: '用户名和密码不能为空' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (!realName || !idCard) {
|
|||
|
|
return res.status(400).json({ success: false, message: '姓名和身份证号不能为空' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 验证身份证号格式
|
|||
|
|
const idCardRegex = /^[1-9]\d{5}(18|19|20)\d{2}((0[1-9])|(1[0-2]))(([0-2][1-9])|10|20|30|31)\d{3}[0-9Xx]$/;
|
|||
|
|
if (!idCardRegex.test(idCard)) {
|
|||
|
|
return res.status(400).json({ success: false, message: '身份证号格式不正确' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 检查用户是否已存在
|
|||
|
|
const [existingUsers] = await db.execute(
|
|||
|
|
'SELECT id FROM users WHERE username = ? OR id_card = ? OR (phone IS NOT NULL AND phone = ?)',
|
|||
|
|
[username, idCard, phone || null]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
if (existingUsers.length > 0) {
|
|||
|
|
return res.status(400).json({ success: false, message: '用户名、身份证号或手机号已存在' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 加密密码
|
|||
|
|
const hashedPassword = await bcrypt.hash(password, 10);
|
|||
|
|
|
|||
|
|
// 创建用户
|
|||
|
|
const [result] = await db.execute(
|
|||
|
|
'INSERT INTO users (username, password, role, is_system_account, points, real_name, id_card, wechat_qr, alipay_qr, bank_card, unionpay_qr, phone) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)',
|
|||
|
|
[username, hashedPassword, role, isSystemAccount, 0, realName, idCard, wechatQr, alipayQr, bankCard, unionpayQr, phone]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
const userId = result.insertId;
|
|||
|
|
|
|||
|
|
// 用户余额已在创建用户时设置为默认值0.00，无需额外操作
|
|||
|
|
|
|||
|
|
await db.query('COMMIT');
|
|||
|
|
|
|||
|
|
// 返回创建的用户信息（不包含密码）
|
|||
|
|
const [newUser] = await db.execute(
|
|||
|
|
'SELECT id, username, role, avatar, points, real_name, phone, created_at, updated_at FROM users WHERE id = ?',
|
|||
|
|
[userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
res.status(201).json({
|
|||
|
|
success: true,
|
|||
|
|
message: '用户创建成功',
|
|||
|
|
user: newUser[0]
|
|||
|
|
});
|
|||
|
|
} catch (error) {
|
|||
|
|
try {
|
|||
|
|
await getDB().query('ROLLBACK');
|
|||
|
|
} catch (rollbackError) {
|
|||
|
|
console.error('回滚错误:', rollbackError);
|
|||
|
|
}
|
|||
|
|
console.error('创建用户错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '创建用户失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 获取待审核用户列表（管理员权限）
|
|||
|
|
*/
|
|||
|
|
router.get('/pending-audit', auth, adminAuth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const { page = 1, limit = 10 } = req.query;
|
|||
|
|
const pageNum = parseInt(page) || 1;
|
|||
|
|
const limitNum = parseInt(limit) || 10;
|
|||
|
|
const offset = (pageNum - 1) * limitNum;
|
|||
|
|
|
|||
|
|
// 获取待审核用户总数
|
|||
|
|
const [countResult] = await db.execute(
|
|||
|
|
'SELECT COUNT(*) as total FROM users WHERE audit_status = ?',
|
|||
|
|
['pending']
|
|||
|
|
);
|
|||
|
|
const total = countResult[0].total;
|
|||
|
|
|
|||
|
|
// 获取待审核用户列表
|
|||
|
|
const [users] = await db.execute(
|
|||
|
|
`SELECT id, username, phone, real_name, business_license, id_card_front, id_card_back,
|
|||
|
|
wechat_qr, alipay_qr, unionpay_qr, bank_card, audit_status, created_at
|
|||
|
|
FROM users
|
|||
|
|
WHERE audit_status = ?
|
|||
|
|
ORDER BY created_at ASC
|
|||
|
|
LIMIT ${limitNum} OFFSET ${offset}`,
|
|||
|
|
['pending']
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
res.json({
|
|||
|
|
success: true,
|
|||
|
|
data: {
|
|||
|
|
users,
|
|||
|
|
pagination: {
|
|||
|
|
page: pageNum,
|
|||
|
|
limit: limitNum,
|
|||
|
|
total,
|
|||
|
|
pages: Math.ceil(total / limitNum)
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('获取待审核用户列表错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '获取待审核用户列表失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
// 获取用户列表用于转账（普通用户权限）
|
|||
|
|
router.get('/for-transfer', auth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
|
|||
|
|
// 获取所有用户的基本信息（用于转账选择）
|
|||
|
|
const [users] = await db.execute(
|
|||
|
|
'SELECT id, username, real_name FROM users WHERE id != ? ORDER BY username',
|
|||
|
|
[req.user.id]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
res.json({
|
|||
|
|
success: true,
|
|||
|
|
data: users
|
|||
|
|
});
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('获取转账用户列表错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '获取用户列表失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
// 获取用户列表（管理员权限）
|
|||
|
|
router.get('/', auth, adminAuth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const { page = 1, limit = 10, search = '', role = '', city = '', district = '', sort = 'created_at', order = 'desc' } = req.query;
|
|||
|
|
|
|||
|
|
// 确保参数为有效数字
|
|||
|
|
const pageNum = Math.max(1, parseInt(page) || 1);
|
|||
|
|
const limitNum = Math.max(1, Math.min(100, parseInt(limit) || 10));
|
|||
|
|
const offset = Math.max(0, (pageNum - 1) * limitNum);
|
|||
|
|
|
|||
|
|
let whereConditions = [];
|
|||
|
|
let countParams = [];
|
|||
|
|
let listParams = [];
|
|||
|
|
|
|||
|
|
// 构建查询条件
|
|||
|
|
if (search) {
|
|||
|
|
whereConditions.push('(u.username LIKE ? OR u.real_name LIKE ?)');
|
|||
|
|
countParams.push(`%${search}%`, `%${search}%`);
|
|||
|
|
listParams.push(`%${search}%`, `%${search}%`);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (role && role !== 'all') {
|
|||
|
|
whereConditions.push('u.role = ?');
|
|||
|
|
countParams.push(role);
|
|||
|
|
listParams.push(role);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (city) {
|
|||
|
|
whereConditions.push('u.city = ?');
|
|||
|
|
countParams.push(city);
|
|||
|
|
listParams.push(city);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (district) {
|
|||
|
|
whereConditions.push('u.district_id = ?');
|
|||
|
|
countParams.push(district);
|
|||
|
|
listParams.push(district);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
const whereClause = whereConditions.length > 0 ? `WHERE ${whereConditions.join(' AND ')}` : '';
|
|||
|
|
|
|||
|
|
// 添加分页参数
|
|||
|
|
listParams.push(limitNum.toString(), offset.toString());
|
|||
|
|
|
|||
|
|
|
|||
|
|
// 获取总数
|
|||
|
|
const [countResult] = await db.execute(
|
|||
|
|
`SELECT COUNT(*) as total FROM users u
|
|||
|
|
LEFT JOIN zhejiang_regions r ON u.district_id = r.id
|
|||
|
|
${whereClause}`,
|
|||
|
|
countParams
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 验证排序字段，防止SQL注入
|
|||
|
|
const validSortFields = ['id', 'username', 'role', 'points', 'balance', 'created_at', 'updated_at'];
|
|||
|
|
const sortField = validSortFields.includes(sort) ? sort : 'created_at';
|
|||
|
|
|
|||
|
|
// 验证排序方向
|
|||
|
|
const sortOrder = (order && (order.toUpperCase() === 'ASC' || order.toUpperCase() === 'DESC'))
|
|||
|
|
? order.toUpperCase()
|
|||
|
|
: 'DESC';
|
|||
|
|
|
|||
|
|
// 获取用户列表，关联地区信息和转账统计
|
|||
|
|
const [users] = await db.execute(
|
|||
|
|
`SELECT u.id, u.username, u.role, u.avatar, u.points, u.balance, u.real_name, u.id_card, u.phone,
|
|||
|
|
u.wechat_qr, u.alipay_qr, u.bank_card, u.unionpay_qr, u.audit_status, u.is_system_account,
|
|||
|
|
u.created_at, u.updated_at, u.city, u.district_id,u.id_card_front,u.id_card_back,
|
|||
|
|
u.business_license,
|
|||
|
|
r.city_name, r.district_name,
|
|||
|
|
COALESCE(yesterday_out.amount, 0) as yesterday_transfer_amount,
|
|||
|
|
COALESCE(today_in.amount, 0) as today_received_amount
|
|||
|
|
FROM users u
|
|||
|
|
LEFT JOIN zhejiang_regions r ON u.district_id = r.id
|
|||
|
|
LEFT JOIN (
|
|||
|
|
SELECT from_user_id, SUM(amount) as amount
|
|||
|
|
FROM transfers
|
|||
|
|
WHERE created_at >= DATE(DATE_SUB(NOW(), INTERVAL 1 DAY))
|
|||
|
|
AND created_at < DATE(NOW())
|
|||
|
|
AND status IN ('confirmed', 'received')
|
|||
|
|
GROUP BY from_user_id
|
|||
|
|
) yesterday_out ON u.id = yesterday_out.from_user_id
|
|||
|
|
LEFT JOIN (
|
|||
|
|
SELECT to_user_id, SUM(amount) as amount
|
|||
|
|
FROM transfers
|
|||
|
|
WHERE created_at >= DATE(NOW())
|
|||
|
|
AND created_at < DATE(DATE_ADD(NOW(), INTERVAL 1 DAY))
|
|||
|
|
AND status IN ('confirmed', 'received')
|
|||
|
|
GROUP BY to_user_id
|
|||
|
|
) today_in ON u.id = today_in.to_user_id
|
|||
|
|
${whereClause}
|
|||
|
|
ORDER BY u.${sortField} ${sortOrder}
|
|||
|
|
LIMIT ? OFFSET ?`,
|
|||
|
|
listParams
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
res.json({
|
|||
|
|
success: true,
|
|||
|
|
users,
|
|||
|
|
total: countResult[0].total,
|
|||
|
|
page: pageNum,
|
|||
|
|
limit: limitNum,
|
|||
|
|
totalPages: Math.ceil(countResult[0].total / limitNum)
|
|||
|
|
});
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('获取用户列表错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '获取用户列表失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
// 获取当前用户的个人资料
|
|||
|
|
router.get('/profile', auth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const userId = req.user.id;
|
|||
|
|
|
|||
|
|
const [users] = await db.execute(
|
|||
|
|
'SELECT * FROM users WHERE id = ?',
|
|||
|
|
[userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
if (users.length === 0) {
|
|||
|
|
return res.status(404).json({ success: false, message: '用户不存在' });
|
|||
|
|
}
|
|||
|
|
const profile = {
|
|||
|
|
...users[0],
|
|||
|
|
nickname: users[0].username, // 添加nickname字段，映射到username
|
|||
|
|
realName: users[0].real_name,
|
|||
|
|
idCard: users[0].id_card,
|
|||
|
|
wechatQr: users[0].wechat_qr,
|
|||
|
|
alipayQr: users[0].alipay_qr,
|
|||
|
|
bankCard: users[0].bank_card,
|
|||
|
|
unionpayQr: users[0].unionpay_qr,
|
|||
|
|
businessLicense: users[0].business_license,
|
|||
|
|
idCardFront: users[0].id_card_front,
|
|||
|
|
idCardBack: users[0].id_card_back
|
|||
|
|
};
|
|||
|
|
res.json({ success: true, user: profile });
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('获取用户资料错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '获取用户资料失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 获取当前用户的收款码状态
|
|||
|
|
* 用于检查用户是否已上传微信、支付宝、云闪付收款码
|
|||
|
|
*/
|
|||
|
|
router.get('/payment-codes-status', auth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const userId = req.user.id;
|
|||
|
|
|
|||
|
|
const [users] = await db.execute(
|
|||
|
|
'SELECT wechat_qr, alipay_qr, unionpay_qr FROM users WHERE id = ?',
|
|||
|
|
[userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
if (users.length === 0) {
|
|||
|
|
return res.status(404).json({ success: false, message: '用户不存在' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
const paymentCodes = users[0];
|
|||
|
|
|
|||
|
|
res.json({
|
|||
|
|
success: true,
|
|||
|
|
data: {
|
|||
|
|
wechat_qr: paymentCodes.wechat_qr || '',
|
|||
|
|
alipay_qr: paymentCodes.alipay_qr || '',
|
|||
|
|
unionpay_qr: paymentCodes.unionpay_qr || ''
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('获取收款码状态错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '获取收款码状态失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
// 获取用户收款信息
|
|||
|
|
router.get('/payment-info/:userId', auth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const targetUserId = req.params.userId;
|
|||
|
|
|
|||
|
|
const [users] = await db.execute(
|
|||
|
|
'SELECT id, username, wechat_qr, alipay_qr, unionpay_qr, bank_card FROM users WHERE id = ?',
|
|||
|
|
[targetUserId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
if (users.length === 0) {
|
|||
|
|
return res.status(404).json({ success: false, message: '用户不存在' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
const user = users[0];
|
|||
|
|
res.json({
|
|||
|
|
success: true,
|
|||
|
|
data: {
|
|||
|
|
id: user.id,
|
|||
|
|
username: user.username,
|
|||
|
|
wechat_qr: user.wechat_qr,
|
|||
|
|
alipay_qr: user.alipay_qr,
|
|||
|
|
unionpay_qr: user.unionpay_qr,
|
|||
|
|
bank_card: user.bank_card
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('获取用户收款信息错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '获取用户收款信息失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
// 获取当前用户的统计信息
|
|||
|
|
router.get('/stats', auth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const userId = req.user.id;
|
|||
|
|
|
|||
|
|
// 如果是管理员，返回全局统计
|
|||
|
|
if (req.user.role === 'admin') {
|
|||
|
|
// 总用户数
|
|||
|
|
const [totalUsers] = await db.execute('SELECT COUNT(*) as count FROM users');
|
|||
|
|
|
|||
|
|
// 管理员数量
|
|||
|
|
const [adminUsers] = await db.execute('SELECT COUNT(*) as count FROM users WHERE role = "admin"');
|
|||
|
|
|
|||
|
|
// 普通用户数量
|
|||
|
|
const [regularUsers] = await db.execute('SELECT COUNT(*) as count FROM users WHERE role = "user"');
|
|||
|
|
|
|||
|
|
// 本月新增用户
|
|||
|
|
const [monthUsers] = await db.execute(
|
|||
|
|
'SELECT COUNT(*) as count FROM users WHERE YEAR(created_at) = YEAR(NOW()) AND MONTH(created_at) = MONTH(NOW())'
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 上月新增用户
|
|||
|
|
const [lastMonthUsers] = await db.execute(
|
|||
|
|
'SELECT COUNT(*) as count FROM users WHERE YEAR(created_at) = YEAR(DATE_SUB(NOW(), INTERVAL 1 MONTH)) AND MONTH(created_at) = MONTH(DATE_SUB(NOW(), INTERVAL 1 MONTH))'
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 计算月增长率
|
|||
|
|
const monthGrowthRate = lastMonthUsers[0].count > 0
|
|||
|
|
? ((monthUsers[0].count - lastMonthUsers[0].count) / lastMonthUsers[0].count * 100).toFixed(2)
|
|||
|
|
: 0;
|
|||
|
|
|
|||
|
|
// 用户总积分
|
|||
|
|
const [totalPoints] = await db.execute('SELECT COALESCE(SUM(points), 0) as total FROM users');
|
|||
|
|
|
|||
|
|
// 今日新增用户
|
|||
|
|
const [todayUsers] = await db.execute(
|
|||
|
|
'SELECT COUNT(*) as count FROM users WHERE DATE(created_at) = CURDATE()'
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 昨日新增用户
|
|||
|
|
const [yesterdayUsers] = await db.execute(
|
|||
|
|
'SELECT COUNT(*) as count FROM users WHERE DATE(created_at) = DATE_SUB(CURDATE(), INTERVAL 1 DAY)'
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 活跃用户数（有订单的用户）
|
|||
|
|
const [activeUsers] = await db.execute(
|
|||
|
|
'SELECT COUNT(DISTINCT user_id) as count FROM orders'
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
res.json({
|
|||
|
|
success: true,
|
|||
|
|
stats: {
|
|||
|
|
totalUsers: totalUsers[0].count,
|
|||
|
|
adminUsers: adminUsers[0].count,
|
|||
|
|
regularUsers: regularUsers[0].count,
|
|||
|
|
monthNewUsers: monthUsers[0].count,
|
|||
|
|
todayUsers: todayUsers[0].count,
|
|||
|
|
yesterdayUsers: yesterdayUsers[0].count,
|
|||
|
|
monthlyGrowth: parseFloat(monthGrowthRate),
|
|||
|
|
totalPoints: totalPoints[0].total,
|
|||
|
|
activeUsers: activeUsers[0].count
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
} else {
|
|||
|
|
// 普通用户返回个人统计
|
|||
|
|
// 用户订单数
|
|||
|
|
const [orderCount] = await db.execute(
|
|||
|
|
'SELECT COUNT(*) as count FROM orders WHERE user_id = ?',
|
|||
|
|
[userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 用户总消费
|
|||
|
|
const [totalSpent] = await db.execute(
|
|||
|
|
'SELECT COALESCE(SUM(total_amount), 0) as total FROM orders WHERE user_id = ? AND status = "completed"',
|
|||
|
|
[userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 用户积分历史
|
|||
|
|
const [pointsEarned] = await db.execute(
|
|||
|
|
'SELECT COALESCE(SUM(amount), 0) as total FROM points_history WHERE user_id = ? AND type = "earn"',
|
|||
|
|
[userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
const [pointsSpent] = await db.execute(
|
|||
|
|
'SELECT COALESCE(SUM(amount), 0) as total FROM points_history WHERE user_id = ? AND type = "spend"',
|
|||
|
|
[userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
res.json({
|
|||
|
|
success: true,
|
|||
|
|
stats: {
|
|||
|
|
orderCount: orderCount[0].count,
|
|||
|
|
totalSpent: totalSpent[0].total,
|
|||
|
|
pointsEarned: pointsEarned[0].total,
|
|||
|
|
pointsSpent: pointsSpent[0].total,
|
|||
|
|
currentPoints: req.user.points || 0
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
}
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('获取用户统计错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '获取用户统计失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
// 获取用户统计信息（管理员权限）- 必须在/:id路由之前定义
|
|||
|
|
router.get('/admin/stats', auth, adminAuth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
// 总用户数
|
|||
|
|
const [totalUsers] = await db.execute('SELECT COUNT(*) as count FROM users');
|
|||
|
|
|
|||
|
|
// 管理员数量
|
|||
|
|
const [adminUsers] = await db.execute('SELECT COUNT(*) as count FROM users WHERE role = "admin"');
|
|||
|
|
|
|||
|
|
// 普通用户数量
|
|||
|
|
const [regularUsers] = await db.execute('SELECT COUNT(*) as count FROM users WHERE role = "user"');
|
|||
|
|
|
|||
|
|
// 本月新增用户
|
|||
|
|
const [monthUsers] = await db.execute(
|
|||
|
|
'SELECT COUNT(*) as count FROM users WHERE YEAR(created_at) = YEAR(NOW()) AND MONTH(created_at) = MONTH(NOW())'
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 上月新增用户
|
|||
|
|
const [lastMonthUsers] = await db.execute(
|
|||
|
|
'SELECT COUNT(*) as count FROM users WHERE YEAR(created_at) = YEAR(DATE_SUB(NOW(), INTERVAL 1 MONTH)) AND MONTH(created_at) = MONTH(DATE_SUB(NOW(), INTERVAL 1 MONTH))'
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 计算月增长率
|
|||
|
|
const monthGrowthRate = lastMonthUsers[0].count > 0
|
|||
|
|
? ((monthUsers[0].count - lastMonthUsers[0].count) / lastMonthUsers[0].count * 100).toFixed(2)
|
|||
|
|
: 0;
|
|||
|
|
|
|||
|
|
// 用户总积分
|
|||
|
|
const [totalPoints] = await db.execute('SELECT COALESCE(SUM(points), 0) as total FROM users');
|
|||
|
|
|
|||
|
|
// 今日新增用户
|
|||
|
|
const [todayUsers] = await db.execute(
|
|||
|
|
'SELECT COUNT(*) as count FROM users WHERE DATE(created_at) = CURDATE()'
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 昨日新增用户
|
|||
|
|
const [yesterdayUsers] = await db.execute(
|
|||
|
|
'SELECT COUNT(*) as count FROM users WHERE DATE(created_at) = DATE_SUB(CURDATE(), INTERVAL 1 DAY)'
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 活跃用户数（有订单的用户）
|
|||
|
|
const [activeUsers] = await db.execute(
|
|||
|
|
'SELECT COUNT(DISTINCT user_id) as count FROM orders'
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
res.json({
|
|||
|
|
success: true,
|
|||
|
|
stats: {
|
|||
|
|
totalUsers: totalUsers[0].count,
|
|||
|
|
adminUsers: adminUsers[0].count,
|
|||
|
|
regularUsers: regularUsers[0].count,
|
|||
|
|
monthNewUsers: monthUsers[0].count,
|
|||
|
|
todayUsers: todayUsers[0].count,
|
|||
|
|
yesterdayUsers: yesterdayUsers[0].count,
|
|||
|
|
monthlyGrowth: parseFloat(monthGrowthRate),
|
|||
|
|
totalPoints: totalPoints[0].total,
|
|||
|
|
activeUsers: activeUsers[0].count
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('获取用户统计错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '获取用户统计失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
// 获取当前用户积分
|
|||
|
|
router.get('/points', auth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const userId = req.user.id;
|
|||
|
|
|
|||
|
|
const [users] = await getDB().execute(
|
|||
|
|
'SELECT points FROM users WHERE id = ?',
|
|||
|
|
[userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
if (users.length === 0) {
|
|||
|
|
return res.status(404).json({ success: false, message: '用户不存在' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
res.json({
|
|||
|
|
success: true,
|
|||
|
|
points: users[0].points
|
|||
|
|
});
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('获取用户积分错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '获取用户积分失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
// 获取用户积分历史记录
|
|||
|
|
router.get('/points/history', auth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const userId = req.user.id;
|
|||
|
|
const { page = 1, limit = 20, type } = req.query;
|
|||
|
|
|
|||
|
|
// 确保参数为有效数字
|
|||
|
|
const pageNum = Math.max(1, parseInt(page) || 1);
|
|||
|
|
const limitNum = Math.max(1, Math.min(100, parseInt(limit) || 20));
|
|||
|
|
const offset = Math.max(0, (pageNum - 1) * limitNum);
|
|||
|
|
|
|||
|
|
let whereClause = 'WHERE user_id = ?';
|
|||
|
|
let queryParams = [userId];
|
|||
|
|
|
|||
|
|
if (type && ['earn', 'spend'].includes(type)) {
|
|||
|
|
whereClause += ' AND type = ?';
|
|||
|
|
queryParams.push(type);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 获取总数
|
|||
|
|
const [countResult] = await getDB().execute(
|
|||
|
|
`SELECT COUNT(*) as total FROM points_history ${whereClause}`,
|
|||
|
|
queryParams
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 获取历史记录
|
|||
|
|
const [records] = await getDB().execute(
|
|||
|
|
`SELECT id, type, amount, description, order_id, created_at
|
|||
|
|
FROM points_history
|
|||
|
|
${whereClause}
|
|||
|
|
ORDER BY created_at DESC
|
|||
|
|
LIMIT ? OFFSET ?`,
|
|||
|
|
[...queryParams, limitNum.toString(), offset.toString()]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
res.json({
|
|||
|
|
success: true,
|
|||
|
|
data: {
|
|||
|
|
records,
|
|||
|
|
pagination: {
|
|||
|
|
page: pageNum,
|
|||
|
|
limit: limitNum,
|
|||
|
|
total: countResult[0].total,
|
|||
|
|
totalPages: Math.ceil(countResult[0].total / limitNum)
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('获取积分历史失败:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '获取积分历史失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
// 获取用户增长趋势数据（管理员权限）
|
|||
|
|
router.get('/growth-trend', auth, adminAuth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const { days = 7 } = req.query;
|
|||
|
|
const daysNum = Math.min(90, Math.max(1, parseInt(days) || 7));
|
|||
|
|
|
|||
|
|
// 获取指定天数内的用户注册趋势
|
|||
|
|
const [trendData] = await db.execute(`
|
|||
|
|
SELECT
|
|||
|
|
DATE(created_at) as date,
|
|||
|
|
COUNT(*) as count
|
|||
|
|
FROM users
|
|||
|
|
WHERE created_at >= DATE_SUB(NOW(), INTERVAL ? DAY)
|
|||
|
|
GROUP BY DATE(created_at)
|
|||
|
|
ORDER BY date ASC
|
|||
|
|
`, [daysNum]);
|
|||
|
|
|
|||
|
|
// 填充缺失的日期（注册数为0）
|
|||
|
|
const result = [];
|
|||
|
|
|
|||
|
|
for (let i = daysNum - 1; i >= 0; i--) {
|
|||
|
|
const date = dayjs().subtract(i, 'day');
|
|||
|
|
const dateStr = date.format('YYYY-MM-DD');
|
|||
|
|
|
|||
|
|
// 修复日期比较：将数据库返回的Date对象转换为字符串进行比较
|
|||
|
|
const existingData = trendData.find(item => {
|
|||
|
|
const itemDateStr = dayjs(item.date).format('YYYY-MM-DD');
|
|||
|
|
return itemDateStr === dateStr;
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
result.push({
|
|||
|
|
date: date.format('MM-DD'),
|
|||
|
|
count: existingData ? existingData.count : 0
|
|||
|
|
});
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
res.json({
|
|||
|
|
success: true,
|
|||
|
|
data: result
|
|||
|
|
});
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('获取用户增长趋势错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '获取用户增长趋势失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
// 获取日收入统计数据（管理员权限）
|
|||
|
|
router.get('/daily-revenue', auth, adminAuth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const { days = 30 } = req.query;
|
|||
|
|
const daysNum = Math.min(90, Math.max(1, parseInt(days) || 30));
|
|||
|
|
|
|||
|
|
// 获取指定天数内的用户注册数据，按天统计
|
|||
|
|
const [dailyData] = await db.execute(`
|
|||
|
|
SELECT
|
|||
|
|
DATE(created_at) as date,
|
|||
|
|
COUNT(*) as user_count
|
|||
|
|
FROM users
|
|||
|
|
WHERE created_at >= DATE_SUB(NOW(), INTERVAL ? DAY)
|
|||
|
|
GROUP BY DATE(created_at)
|
|||
|
|
ORDER BY date ASC
|
|||
|
|
`, [daysNum]);
|
|||
|
|
|
|||
|
|
// 填充缺失的日期（注册数为0）
|
|||
|
|
const result = [];
|
|||
|
|
|
|||
|
|
for (let i = daysNum - 1; i >= 0; i--) {
|
|||
|
|
const date = dayjs().subtract(i, 'day');
|
|||
|
|
const dateStr = date.format('YYYY-MM-DD'); // YYYY-MM-DD格式
|
|||
|
|
const dateDisplay = date.format('M/D'); // 显示格式
|
|||
|
|
|
|||
|
|
const existingData = dailyData.find(item => {
|
|||
|
|
const itemDateStr = dayjs(item.date).format('YYYY-MM-DD');
|
|||
|
|
return itemDateStr === dateStr;
|
|||
|
|
});
|
|||
|
|
const userCount = existingData ? existingData.user_count : 0;
|
|||
|
|
const revenue = userCount * 398; // 每个用户398元收入
|
|||
|
|
|
|||
|
|
result.push({
|
|||
|
|
date: dateDisplay,
|
|||
|
|
userCount: userCount,
|
|||
|
|
amount: revenue
|
|||
|
|
});
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
res.json({
|
|||
|
|
success: true,
|
|||
|
|
data: result
|
|||
|
|
});
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('获取日收入统计错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '获取日收入统计失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
// 生成注册码（管理员权限）==================== 激活码管理 ====================
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 生成激活码（管理员权限）
|
|||
|
|
*/
|
|||
|
|
router.post('/registration-codes', auth, adminAuth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const adminId = req.user.id;
|
|||
|
|
|
|||
|
|
// 生成6位随机激活码
|
|||
|
|
const crypto = require('crypto');
|
|||
|
|
const chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
|
|||
|
|
let code = '';
|
|||
|
|
for (let i = 0; i < 6; i++) {
|
|||
|
|
code += chars.charAt(Math.floor(Math.random() * chars.length));
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 设置过期时间为1小时后
|
|||
|
|
const expiresAt = req.body.expiresAt || new Date(Date.now() + 60 * 60 * 1000);
|
|||
|
|
|
|||
|
|
// 插入激活码
|
|||
|
|
const [result] = await db.execute(
|
|||
|
|
'INSERT INTO registration_codes (code, expires_at, created_by_admin_id) VALUES (?, ?, ?)',
|
|||
|
|
[code, expiresAt, adminId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
res.status(201).json({
|
|||
|
|
success: true,
|
|||
|
|
message: '激活码生成成功',
|
|||
|
|
data: {
|
|||
|
|
id: result.insertId,
|
|||
|
|
code,
|
|||
|
|
expiresAt,
|
|||
|
|
createdAt: new Date()
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('生成激活码错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '生成激活码失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 批量生成激活码（管理员权限）
|
|||
|
|
*/
|
|||
|
|
router.post('/registration-codes/batch', auth, adminAuth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const adminId = req.user.id;
|
|||
|
|
const { count = 1 } = req.body;
|
|||
|
|
|
|||
|
|
// 验证参数
|
|||
|
|
const codeCount = Math.max(1, Math.min(100, parseInt(count) || 1));
|
|||
|
|
|
|||
|
|
const crypto = require('crypto');
|
|||
|
|
const codes = [];
|
|||
|
|
const values = [];
|
|||
|
|
const expiresAt = req.body.expiresAt || new Date(Date.now() + 60 * 60 * 1000);
|
|||
|
|
|
|||
|
|
// 生成指定数量的激活码
|
|||
|
|
const chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
|
|||
|
|
for (let i = 0; i < codeCount; i++) {
|
|||
|
|
let code = '';
|
|||
|
|
for (let j = 0; j < 6; j++) {
|
|||
|
|
code += chars.charAt(Math.floor(Math.random() * chars.length));
|
|||
|
|
}
|
|||
|
|
codes.push(code);
|
|||
|
|
values.push(code, expiresAt, adminId);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 批量插入数据库
|
|||
|
|
const placeholders = Array(codeCount).fill('(?, ?, ?)').join(', ');
|
|||
|
|
|
|||
|
|
await db.execute(
|
|||
|
|
`INSERT INTO registration_codes (code, expires_at, created_by_admin_id) VALUES ${placeholders}`,
|
|||
|
|
values
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
res.status(201).json({
|
|||
|
|
success: true,
|
|||
|
|
message: `成功生成 ${codeCount} 个激活码`,
|
|||
|
|
data: {
|
|||
|
|
codes,
|
|||
|
|
count: codeCount,
|
|||
|
|
expiresAt,
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('批量生成激活码错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '批量生成激活码失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 获取激活码列表（管理员权限）
|
|||
|
|
*/
|
|||
|
|
router.get('/registration-codes', auth, adminAuth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const { page = 1, limit = 20, status, keyword, sort = 'created_at', order = 'desc' } = req.query;
|
|||
|
|
const offset = (page - 1) * limit;
|
|||
|
|
|
|||
|
|
let whereClause = '';
|
|||
|
|
let whereConditions = [];
|
|||
|
|
let countParams = [];
|
|||
|
|
let listParams = [];
|
|||
|
|
|
|||
|
|
// 根据状态筛选
|
|||
|
|
if (status === 'unused') {
|
|||
|
|
whereConditions.push('rc.is_used = FALSE AND rc.expires_at > NOW()');
|
|||
|
|
} else if (status === 'used') {
|
|||
|
|
whereConditions.push('rc.is_used = TRUE');
|
|||
|
|
} else if (status === 'expired') {
|
|||
|
|
whereConditions.push('rc.is_used = FALSE AND rc.expires_at <= NOW()');
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 关键词搜索
|
|||
|
|
if(keyword){
|
|||
|
|
whereConditions.push(`rc.code LIKE '%${keyword}%'`);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 构建WHERE子句
|
|||
|
|
if (whereConditions.length > 0) {
|
|||
|
|
whereClause = 'WHERE ' + whereConditions.join(' AND ');
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 处理排序参数
|
|||
|
|
const allowedSortFields = ['created_at', 'expires_at', 'used_at', 'code', 'status'];
|
|||
|
|
const allowedOrders = ['asc', 'desc'];
|
|||
|
|
|
|||
|
|
let sortField = 'rc.created_at';
|
|||
|
|
let sortOrder = 'DESC';
|
|||
|
|
|
|||
|
|
if (allowedSortFields.includes(sort)) {
|
|||
|
|
if (sort === 'status') {
|
|||
|
|
// 状态字段需要使用CASE表达式
|
|||
|
|
sortField = `CASE
|
|||
|
|
WHEN rc.is_used = TRUE THEN 'used'
|
|||
|
|
WHEN rc.expires_at <= NOW() THEN 'expired'
|
|||
|
|
ELSE 'unused'
|
|||
|
|
END`;
|
|||
|
|
} else {
|
|||
|
|
sortField = `rc.${sort}`;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (allowedOrders.includes(order.toLowerCase())) {
|
|||
|
|
sortOrder = order.toUpperCase();
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 设置查询参数（MySQL驱动需要字符串形式的LIMIT和OFFSET）
|
|||
|
|
const limitStr = String(parseInt(limit));
|
|||
|
|
const offsetStr = String(parseInt(offset));
|
|||
|
|
listParams = [limitStr, offsetStr];
|
|||
|
|
countParams = [];
|
|||
|
|
|
|||
|
|
// 获取激活码列表
|
|||
|
|
const [codes] = await db.execute(`
|
|||
|
|
SELECT
|
|||
|
|
rc.id,
|
|||
|
|
rc.code,
|
|||
|
|
rc.created_at,
|
|||
|
|
rc.expires_at,
|
|||
|
|
rc.used_at,
|
|||
|
|
rc.is_used,
|
|||
|
|
admin.username as created_by_admin,
|
|||
|
|
user.username as used_by_user,
|
|||
|
|
CASE
|
|||
|
|
WHEN rc.is_used = TRUE THEN 'used'
|
|||
|
|
WHEN rc.expires_at <= NOW() THEN 'expired'
|
|||
|
|
ELSE 'unused'
|
|||
|
|
END as status
|
|||
|
|
FROM registration_codes rc
|
|||
|
|
LEFT JOIN users admin ON rc.created_by_admin_id = admin.id
|
|||
|
|
LEFT JOIN users user ON rc.used_by_user_id = user.id
|
|||
|
|
${whereClause}
|
|||
|
|
ORDER BY ${sortField} ${sortOrder}
|
|||
|
|
LIMIT ? OFFSET ?
|
|||
|
|
`, listParams);
|
|||
|
|
|
|||
|
|
// 获取总数
|
|||
|
|
const [countResult] = await db.execute(`
|
|||
|
|
SELECT COUNT(*) as total
|
|||
|
|
FROM registration_codes rc
|
|||
|
|
${whereClause}
|
|||
|
|
`, countParams);
|
|||
|
|
|
|||
|
|
const total = countResult[0].total;
|
|||
|
|
|
|||
|
|
res.json({
|
|||
|
|
success: true,
|
|||
|
|
data: {
|
|||
|
|
codes,
|
|||
|
|
pagination: {
|
|||
|
|
page: parseInt(page),
|
|||
|
|
limit: parseInt(limit),
|
|||
|
|
total,
|
|||
|
|
pages: Math.ceil(total / limit)
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('获取激活码列表错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '获取激活码列表失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 删除激活码（管理员权限）
|
|||
|
|
*/
|
|||
|
|
router.delete('/registration-codes/:id', auth, adminAuth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const codeId = req.params.id;
|
|||
|
|
|
|||
|
|
// 检查激活码是否存在
|
|||
|
|
const [codes] = await db.execute(
|
|||
|
|
'SELECT id, is_used FROM registration_codes WHERE id = ?',
|
|||
|
|
[codeId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
if (codes.length === 0) {
|
|||
|
|
return res.status(404).json({ success: false, message: '激活码不存在' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 不能删除已使用的激活码
|
|||
|
|
if (codes[0].is_used) {
|
|||
|
|
return res.status(400).json({ success: false, message: '不能删除已使用的激活码' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 删除激活码
|
|||
|
|
await db.execute('DELETE FROM registration_codes WHERE id = ?', [codeId]);
|
|||
|
|
|
|||
|
|
res.json({ success: true, message: '激活码删除成功' });
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('删除激活码错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '删除激活码失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
// 获取当前用户个人资料
|
|||
|
|
router.get('/profile', auth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const userId = req.user.id;
|
|||
|
|
|
|||
|
|
const [users] = await db.execute(
|
|||
|
|
'SELECT id, username, role, avatar, points, real_name, id_card, phone, wechat_qr, alipay_qr, bank_card, unionpay_qr, business_license, id_card_front, id_card_back, audit_status, created_at, updated_at FROM users WHERE id = ?',
|
|||
|
|
[userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
if (users.length === 0) {
|
|||
|
|
return res.status(404).json({ success: false, message: '用户不存在' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 转换字段名以匹配前端
|
|||
|
|
const user = users[0];
|
|||
|
|
const profile = {
|
|||
|
|
...user,
|
|||
|
|
nickname: user.username, // 添加nickname字段，映射到username
|
|||
|
|
realName: user.real_name,
|
|||
|
|
idCard: user.id_card,
|
|||
|
|
wechatQr: user.wechat_qr,
|
|||
|
|
alipayQr: user.alipay_qr,
|
|||
|
|
bankCard: user.bank_card,
|
|||
|
|
unionpayQr: user.unionpay_qr,
|
|||
|
|
businessLicense: user.business_license,
|
|||
|
|
idCardFront: user.id_card_front,
|
|||
|
|
idCardBack: user.id_card_back,
|
|||
|
|
auditStatus: user.audit_status
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
res.json({ success: true, user: profile });
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('获取用户个人资料错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '获取用户个人资料失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
// 更新当前用户个人资料
|
|||
|
|
router.put('/profile', auth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const userId = req.user.id;
|
|||
|
|
const {
|
|||
|
|
username,
|
|||
|
|
nickname,
|
|||
|
|
avatar,
|
|||
|
|
realName,
|
|||
|
|
idCard,
|
|||
|
|
phone,
|
|||
|
|
wechatQr,
|
|||
|
|
alipayQr,
|
|||
|
|
bankCard,
|
|||
|
|
unionpayQr,
|
|||
|
|
businessLicense,
|
|||
|
|
idCardFront,
|
|||
|
|
idCardBack,
|
|||
|
|
city,
|
|||
|
|
districtId
|
|||
|
|
} = req.body;
|
|||
|
|
|
|||
|
|
// 处理nickname字段，如果提供了nickname，则使用nickname作为username
|
|||
|
|
const finalUsername = nickname || username;
|
|||
|
|
|
|||
|
|
// 检查用户名、身份证号和手机号是否已被其他用户使用
|
|||
|
|
if (finalUsername || idCard || phone) {
|
|||
|
|
const conditions = [];
|
|||
|
|
const checkValues = [];
|
|||
|
|
|
|||
|
|
if (finalUsername) {
|
|||
|
|
conditions.push('username = ?');
|
|||
|
|
checkValues.push(finalUsername);
|
|||
|
|
}
|
|||
|
|
if (idCard) {
|
|||
|
|
conditions.push('id_card = ?');
|
|||
|
|
checkValues.push(idCard);
|
|||
|
|
}
|
|||
|
|
if (phone) {
|
|||
|
|
conditions.push('phone = ?');
|
|||
|
|
checkValues.push(phone);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (conditions.length > 0) {
|
|||
|
|
const [existingUsers] = await db.execute(
|
|||
|
|
`SELECT id FROM users WHERE (${conditions.join(' OR ')}) AND id != ?`,
|
|||
|
|
[...checkValues, userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
if (existingUsers.length > 0) {
|
|||
|
|
return res.status(400).json({ success: false, message: '用户名、身份证号或手机号已被使用' });
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 验证身份证号格式
|
|||
|
|
if (idCard) {
|
|||
|
|
const idCardRegex = /^[1-9]\d{5}(18|19|20)\d{2}((0[1-9])|(1[0-2]))(([0-2][1-9])|10|20|30|31)\d{3}[0-9Xx]$/;
|
|||
|
|
if (!idCardRegex.test(idCard)) {
|
|||
|
|
return res.status(400).json({ success: false, message: '身份证号格式不正确' });
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 构建更新字段
|
|||
|
|
const updateFields = [];
|
|||
|
|
const updateValues = [];
|
|||
|
|
|
|||
|
|
if (finalUsername !== undefined) {
|
|||
|
|
updateFields.push('username = ?');
|
|||
|
|
updateValues.push(finalUsername);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (avatar !== undefined) {
|
|||
|
|
updateFields.push('avatar = ?');
|
|||
|
|
updateValues.push(avatar);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (realName !== undefined) {
|
|||
|
|
updateFields.push('real_name = ?');
|
|||
|
|
updateValues.push(realName);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (idCard !== undefined) {
|
|||
|
|
updateFields.push('id_card = ?');
|
|||
|
|
updateValues.push(idCard);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (phone !== undefined) {
|
|||
|
|
updateFields.push('phone = ?');
|
|||
|
|
updateValues.push(phone);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 添加城市和地区字段更新
|
|||
|
|
if (city !== undefined) {
|
|||
|
|
updateFields.push('city = ?');
|
|||
|
|
updateValues.push(city);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (districtId !== undefined) {
|
|||
|
|
updateFields.push('district_id = ?');
|
|||
|
|
updateValues.push(districtId);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 检查是否更新了需要重新审核的关键信息
|
|||
|
|
let needsReaudit = false;
|
|||
|
|
|
|||
|
|
if (wechatQr !== undefined) {
|
|||
|
|
updateFields.push('wechat_qr = ?');
|
|||
|
|
updateValues.push(wechatQr);
|
|||
|
|
needsReaudit = true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (alipayQr !== undefined) {
|
|||
|
|
updateFields.push('alipay_qr = ?');
|
|||
|
|
updateValues.push(alipayQr);
|
|||
|
|
needsReaudit = true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (bankCard !== undefined) {
|
|||
|
|
updateFields.push('bank_card = ?');
|
|||
|
|
updateValues.push(bankCard);
|
|||
|
|
needsReaudit = true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (unionpayQr !== undefined) {
|
|||
|
|
updateFields.push('unionpay_qr = ?');
|
|||
|
|
updateValues.push(unionpayQr);
|
|||
|
|
needsReaudit = true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (city !== undefined) {
|
|||
|
|
updateFields.push('city = ?');
|
|||
|
|
updateValues.push(city);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (districtId !== undefined) {
|
|||
|
|
updateFields.push('district_id = ?');
|
|||
|
|
updateValues.push(districtId);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (businessLicense !== undefined) {
|
|||
|
|
updateFields.push('business_license = ?');
|
|||
|
|
updateValues.push(businessLicense);
|
|||
|
|
needsReaudit = true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (idCardFront !== undefined) {
|
|||
|
|
updateFields.push('id_card_front = ?');
|
|||
|
|
updateValues.push(idCardFront);
|
|||
|
|
needsReaudit = true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (idCardBack !== undefined) {
|
|||
|
|
updateFields.push('id_card_back = ?');
|
|||
|
|
updateValues.push(idCardBack);
|
|||
|
|
needsReaudit = true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 如果更新了关键信息且用户不是管理员，则重置审核状态为待审核
|
|||
|
|
if (needsReaudit && req.user.role !== 'admin') {
|
|||
|
|
updateFields.push('audit_status = ?');
|
|||
|
|
updateValues.push('pending');
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (updateFields.length === 0) {
|
|||
|
|
return res.status(400).json({ success: false, message: '没有要更新的字段' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
updateValues.push(userId);
|
|||
|
|
|
|||
|
|
await db.execute(
|
|||
|
|
`UPDATE users SET ${updateFields.join(', ')} WHERE id = ?`,
|
|||
|
|
updateValues
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 返回更新后的用户信息
|
|||
|
|
const [updatedUsers] = await db.execute(
|
|||
|
|
'SELECT id, username, role, avatar, points, real_name, id_card, phone, wechat_qr, alipay_qr, bank_card, unionpay_qr, business_license, id_card_front, id_card_back, audit_status, is_system_account, created_at, updated_at FROM users WHERE id = ?',
|
|||
|
|
[userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 转换字段名以匹配前端
|
|||
|
|
const user = updatedUsers[0];
|
|||
|
|
const profile = {
|
|||
|
|
...user,
|
|||
|
|
nickname: user.username, // 添加nickname字段，映射到username
|
|||
|
|
realName: user.real_name,
|
|||
|
|
idCard: user.id_card,
|
|||
|
|
wechatQr: user.wechat_qr,
|
|||
|
|
alipayQr: user.alipay_qr,
|
|||
|
|
bankCard: user.bank_card,
|
|||
|
|
unionpayQr: user.unionpay_qr,
|
|||
|
|
businessLicense: user.business_license,
|
|||
|
|
idCardFront: user.id_card_front,
|
|||
|
|
idCardBack: user.id_card_back,
|
|||
|
|
auditStatus: user.audit_status
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
res.json({
|
|||
|
|
success: true,
|
|||
|
|
message: '个人资料更新成功',
|
|||
|
|
data: profile
|
|||
|
|
});
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('更新个人资料错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '更新个人资料失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
// 获取用户详情
|
|||
|
|
router.get('/:id', auth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const userId = req.params.id;
|
|||
|
|
|
|||
|
|
// 只有管理员或用户本人可以查看详情
|
|||
|
|
if (req.user.role !== 'admin' && req.user.id != userId) {
|
|||
|
|
return res.status(403).json({ success: false, message: '权限不足' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
const [users] = await db.execute(
|
|||
|
|
'SELECT id, username, role, avatar, points, real_name, id_card, phone, wechat_qr, alipay_qr, bank_card, unionpay_qr, created_at, updated_at FROM users WHERE id = ?',
|
|||
|
|
[userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
if (users.length === 0) {
|
|||
|
|
return res.status(404).json({ success: false, message: '用户不存在' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
res.json({ success: true, user: users[0] });
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('获取用户详情错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '获取用户详情失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
// 更新用户信息
|
|||
|
|
router.put('/:id', auth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const userId = req.params.id;
|
|||
|
|
const {
|
|||
|
|
username,
|
|||
|
|
password,
|
|||
|
|
role,
|
|||
|
|
isSystemAccount,
|
|||
|
|
avatar,
|
|||
|
|
realName,
|
|||
|
|
idCard,
|
|||
|
|
phone,
|
|||
|
|
wechatQr,
|
|||
|
|
alipayQr,
|
|||
|
|
bankCard,
|
|||
|
|
unionpayQr,
|
|||
|
|
city,
|
|||
|
|
districtId,
|
|||
|
|
idCardFront,
|
|||
|
|
idCardBack,
|
|||
|
|
businessLicense,
|
|||
|
|
} = req.body;
|
|||
|
|
|
|||
|
|
// 只有管理员或用户本人可以更新信息
|
|||
|
|
if (req.user.role !== 'admin' && req.user.id != userId) {
|
|||
|
|
return res.status(403).json({ success: false, message: '权限不足' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 非管理员不能修改角色
|
|||
|
|
if (req.user.role !== 'admin' && role) {
|
|||
|
|
return res.status(403).json({ success: false, message: '无权限修改用户角色' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 检查用户名、身份证号和手机号是否已被其他用户使用
|
|||
|
|
if (username || idCard || phone) {
|
|||
|
|
const conditions = [];
|
|||
|
|
const checkValues = [];
|
|||
|
|
|
|||
|
|
if (username) {
|
|||
|
|
conditions.push('username = ?');
|
|||
|
|
checkValues.push(username);
|
|||
|
|
}
|
|||
|
|
if (idCard) {
|
|||
|
|
conditions.push('id_card = ?');
|
|||
|
|
checkValues.push(idCard);
|
|||
|
|
}
|
|||
|
|
if (phone) {
|
|||
|
|
conditions.push('phone = ?');
|
|||
|
|
checkValues.push(phone);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (conditions.length > 0) {
|
|||
|
|
const [existingUsers] = await db.execute(
|
|||
|
|
`SELECT id FROM users WHERE (${conditions.join(' OR ')}) AND id != ?`,
|
|||
|
|
[...checkValues, userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
if (existingUsers.length > 0) {
|
|||
|
|
return res.status(400).json({ success: false, message: '用户名、身份证号或手机号已被使用' });
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 验证身份证号格式
|
|||
|
|
if (idCard) {
|
|||
|
|
const idCardRegex = /^[1-9]\d{5}(18|19|20)\d{2}((0[1-9])|(1[0-2]))(([0-2][1-9])|10|20|30|31)\d{3}[0-9Xx]$/;
|
|||
|
|
if (!idCardRegex.test(idCard)) {
|
|||
|
|
return res.status(400).json({ success: false, message: '身份证号格式不正确' });
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 构建更新字段
|
|||
|
|
const updateFields = [];
|
|||
|
|
const updateValues = [];
|
|||
|
|
|
|||
|
|
if (username) {
|
|||
|
|
updateFields.push('username = ?');
|
|||
|
|
updateValues.push(username);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 处理密码更新
|
|||
|
|
if (password && password.trim() !== '') {
|
|||
|
|
const hashedPassword = await bcrypt.hash(password, 10);
|
|||
|
|
updateFields.push('password = ?');
|
|||
|
|
updateValues.push(hashedPassword);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (role && req.user.role === 'admin') {
|
|||
|
|
updateFields.push('role = ?');
|
|||
|
|
updateValues.push(role);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 只有管理员可以修改账户类型
|
|||
|
|
if (isSystemAccount !== undefined && req.user.role === 'admin') {
|
|||
|
|
updateFields.push('is_system_account = ?');
|
|||
|
|
updateValues.push(isSystemAccount);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (avatar !== undefined) {
|
|||
|
|
updateFields.push('avatar = ?');
|
|||
|
|
updateValues.push(avatar);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (realName !== undefined) {
|
|||
|
|
updateFields.push('real_name = ?');
|
|||
|
|
updateValues.push(realName);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (idCard !== undefined) {
|
|||
|
|
updateFields.push('id_card = ?');
|
|||
|
|
updateValues.push(idCard);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (phone !== undefined) {
|
|||
|
|
updateFields.push('phone = ?');
|
|||
|
|
updateValues.push(phone);
|
|||
|
|
}
|
|||
|
|
if (city !== undefined) {
|
|||
|
|
updateFields.push('city = ?');
|
|||
|
|
updateValues.push(city);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (districtId !== undefined) {
|
|||
|
|
updateFields.push('district_id = ?');
|
|||
|
|
updateValues.push(districtId);
|
|||
|
|
}
|
|||
|
|
// 检查是否更新了需要重新审核的关键信息
|
|||
|
|
let needsReaudit = false;
|
|||
|
|
|
|||
|
|
if (wechatQr !== undefined) {
|
|||
|
|
updateFields.push('wechat_qr = ?');
|
|||
|
|
updateValues.push(wechatQr);
|
|||
|
|
needsReaudit = true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (alipayQr !== undefined) {
|
|||
|
|
updateFields.push('alipay_qr = ?');
|
|||
|
|
updateValues.push(alipayQr);
|
|||
|
|
needsReaudit = true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (bankCard !== undefined) {
|
|||
|
|
updateFields.push('bank_card = ?');
|
|||
|
|
updateValues.push(bankCard);
|
|||
|
|
needsReaudit = true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (unionpayQr !== undefined) {
|
|||
|
|
updateFields.push('unionpay_qr = ?');
|
|||
|
|
updateValues.push(unionpayQr);
|
|||
|
|
needsReaudit = true;
|
|||
|
|
}
|
|||
|
|
if (idCardFront !== undefined) {
|
|||
|
|
updateFields.push('id_card_front = ?');
|
|||
|
|
updateValues.push(idCardFront);
|
|||
|
|
needsReaudit = true;
|
|||
|
|
}
|
|||
|
|
if (idCardBack !== undefined) {
|
|||
|
|
updateFields.push('id_card_back = ?');
|
|||
|
|
updateValues.push(idCardBack);
|
|||
|
|
needsReaudit = true;
|
|||
|
|
}
|
|||
|
|
if (businessLicense !== undefined) {
|
|||
|
|
updateFields.push('business_license = ?');
|
|||
|
|
updateValues.push(businessLicense);
|
|||
|
|
needsReaudit = true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 如果更新了关键信息且用户不是管理员，则重置审核状态为待审核
|
|||
|
|
if (needsReaudit && req.user.role !== 'admin') {
|
|||
|
|
updateFields.push('audit_status = ?');
|
|||
|
|
updateValues.push('pending');
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (updateFields.length === 0) {
|
|||
|
|
return res.status(400).json({ success: false, message: '没有要更新的字段' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
updateValues.push(userId);
|
|||
|
|
|
|||
|
|
await db.execute(
|
|||
|
|
`UPDATE users SET ${updateFields.join(', ')} WHERE id = ?`,
|
|||
|
|
updateValues
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 返回更新后的用户信息
|
|||
|
|
const [updatedUsers] = await db.execute(
|
|||
|
|
'SELECT id, username, role, avatar, points, real_name, id_card, phone, wechat_qr, alipay_qr, bank_card, unionpay_qr, city, district_id, created_at, updated_at FROM users WHERE id = ?',
|
|||
|
|
[userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
res.json({
|
|||
|
|
success: true,
|
|||
|
|
message: '用户信息更新成功',
|
|||
|
|
user: updatedUsers[0]
|
|||
|
|
});
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('更新用户信息错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '更新用户信息失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
// 删除用户（管理员权限）
|
|||
|
|
router.delete('/:id', auth, adminAuth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const userId = req.params.id;
|
|||
|
|
|
|||
|
|
// 不能删除自己
|
|||
|
|
if (req.user.id == userId) {
|
|||
|
|
return res.status(400).json({ success: false, message: '不能删除自己的账户' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 检查用户是否存在
|
|||
|
|
const [users] = await db.execute(
|
|||
|
|
'SELECT id FROM users WHERE id = ?',
|
|||
|
|
[userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
if (users.length === 0) {
|
|||
|
|
return res.status(404).json({ success: false, message: '用户不存在' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 删除用户
|
|||
|
|
await db.execute('DELETE FROM users WHERE id = ?', [userId]);
|
|||
|
|
|
|||
|
|
res.json({ success: true, message: '用户删除成功' });
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('删除用户错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '删除用户失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 审核用户（管理员权限）
|
|||
|
|
*/
|
|||
|
|
router.put('/:id/audit', auth, adminAuth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const userId = req.params.id;
|
|||
|
|
const { action, note } = req.body; // action: 'approve' 或 'reject'
|
|||
|
|
|
|||
|
|
if (!action || !['approve', 'reject'].includes(action)) {
|
|||
|
|
return res.status(400).json({ success: false, message: '审核操作无效' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 检查用户是否存在且为待审核状态
|
|||
|
|
const [users] = await db.execute(
|
|||
|
|
'SELECT id, username, audit_status FROM users WHERE id = ?',
|
|||
|
|
[userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
if (users.length === 0) {
|
|||
|
|
return res.status(404).json({ success: false, message: '用户不存在' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
const user = users[0];
|
|||
|
|
if (user.audit_status !== 'pending') {
|
|||
|
|
return res.status(400).json({ success: false, message: '该用户不是待审核状态' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 更新审核状态
|
|||
|
|
const auditStatus = action === 'approve' ? 'approved' : 'rejected';
|
|||
|
|
await db.execute(
|
|||
|
|
`UPDATE users SET
|
|||
|
|
audit_status = ?,
|
|||
|
|
audit_note = ?,
|
|||
|
|
audited_by = ?,
|
|||
|
|
audited_at = NOW()
|
|||
|
|
WHERE id = ?`,
|
|||
|
|
[auditStatus, note || null, req.user.id, userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
const message = action === 'approve' ? '用户审核通过' : '用户审核拒绝';
|
|||
|
|
res.json({ success: true, message });
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('审核用户错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '审核用户失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 获取用户审核详情（管理员权限）
|
|||
|
|
*/
|
|||
|
|
router.get('/:id/audit-detail', auth, adminAuth, async (req, res) => {
|
|||
|
|
try {
|
|||
|
|
const db = getDB();
|
|||
|
|
const userId = req.params.id;
|
|||
|
|
|
|||
|
|
// 获取用户详细信息
|
|||
|
|
const [users] = await db.execute(
|
|||
|
|
`SELECT u.id, u.username, u.phone, u.real_name, u.business_license,
|
|||
|
|
u.id_card_front, u.id_card_back, u.audit_status, u.audit_note,
|
|||
|
|
u.audited_at, u.created_at,
|
|||
|
|
auditor.username as auditor_name
|
|||
|
|
FROM users u
|
|||
|
|
LEFT JOIN users auditor ON u.audited_by = auditor.id
|
|||
|
|
WHERE u.id = ?`,
|
|||
|
|
[userId]
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
if (users.length === 0) {
|
|||
|
|
return res.status(404).json({ success: false, message: '用户不存在' });
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
res.json({
|
|||
|
|
success: true,
|
|||
|
|
data: users[0]
|
|||
|
|
});
|
|||
|
|
} catch (error) {
|
|||
|
|
console.error('获取用户审核详情错误:', error);
|
|||
|
|
res.status(500).json({ success: false, message: '获取用户审核详情失败' });
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
module.exports = router;
|