154 lines
8.6 KiB
TypeScript
154 lines
8.6 KiB
TypeScript
|
export {};
|
||
|
|
type Role = 'reader' | 'publisher' | 'admin';
|
||
|
|
interface Grant { enabled: boolean; role: Role; ssh_key: string | null }
|
||
|
|
interface Account { username: string; permissions: Grant; csrf: string }
|
||
|
|
let csrf: string | undefined;
|
||
|
|
const roles: Record<Role, string> = { reader: '普通用户', publisher: '作者', admin: '管理员' };
|
||
|
|
|
||
|
|
async function api<T>(path: string, method = 'GET', data?: unknown): Promise<T> {
|
||
|
|
const headers: Record<string, string> = { Accept: 'application/json' };
|
||
|
|
if (data !== undefined) headers['Content-Type'] = 'application/json';
|
||
|
|
if (csrf && method !== 'GET') headers['X-CSRF-Token'] = csrf;
|
||
|
|
const response = await fetch(path, { method, credentials: 'same-origin', headers,
|
||
|
|
body: data === undefined ? undefined : JSON.stringify(data), signal: AbortSignal.timeout(10000) });
|
||
|
|
const result = await response.json().catch(() => null);
|
||
|
|
if (!response.ok) throw new Error(result?.error || (response.status === 429 ? '请求过于频繁，请稍后重试。' : '操作未完成，请稍后重试。'));
|
||
|
|
return result as T;
|
||
|
|
}
|
||
|
|
function showStatus(element: HTMLElement | null, message: string, error = false) {
|
||
|
|
if (!element) return;
|
||
|
|
element.textContent = message;
|
||
|
|
element.dataset.error = String(error);
|
||
|
|
}
|
||
|
|
function errorMessage(error: unknown): string {
|
||
|
|
return error instanceof Error && error.name !== 'TimeoutError' && error.name !== 'TypeError'
|
||
|
|
? error.message : '无法连接服务器，请检查网络后重试。';
|
||
|
|
}
|
||
|
|
function formAction(id: string, action: (data: FormData, form: HTMLFormElement) => Promise<void>) {
|
||
|
|
const form = document.querySelector<HTMLFormElement>(`#${id}`);
|
||
|
|
form?.addEventListener('submit', async (event) => {
|
||
|
|
event.preventDefault();
|
||
|
|
const button = form.querySelector<HTMLButtonElement>('button[type="submit"]')!;
|
||
|
|
const message = form.querySelector<HTMLElement>('.form-status');
|
||
|
|
if (button.disabled) return;
|
||
|
|
button.disabled = true;
|
||
|
|
form.setAttribute('aria-busy', 'true');
|
||
|
|
showStatus(message, '正在处理…');
|
||
|
|
try { await action(new FormData(form), form); }
|
||
|
|
catch (error) { showStatus(message, errorMessage(error), true); }
|
||
|
|
finally { button.disabled = false; form.removeAttribute('aria-busy'); }
|
||
|
|
});
|
||
|
|
}
|
||
|
|
const value = (data: FormData, name: string) => String(data.get(name) || '');
|
||
|
|
function checkPassword(password: string) {
|
||
|
|
const size = new TextEncoder().encode(password).length;
|
||
|
|
if (size < 12 || size > 1024) throw new Error('密码需要在 12 至 1024 个字节之间。');
|
||
|
|
}
|
||
|
|
|
||
|
|
formAction('auth-form', async (data, form) => {
|
||
|
|
const credentials = { username: value(data, 'username'), password: value(data, 'password') };
|
||
|
|
if (form.dataset.mode === 'register') {
|
||
|
|
checkPassword(credentials.password);
|
||
|
|
if (credentials.password !== value(data, 'confirm')) throw new Error('两次输入的密码不一致。');
|
||
|
|
await api('/api/auth/register', 'POST', credentials);
|
||
|
|
// Registration succeeded even if the following login is temporarily rate-limited.
|
||
|
|
try { await api('/api/auth/login', 'POST', credentials); }
|
||
|
|
catch { location.assign('/login?registered=1'); return; }
|
||
|
|
} else { await api('/api/auth/login', 'POST', credentials); }
|
||
|
|
form.reset();
|
||
|
|
location.assign('/account');
|
||
|
|
});
|
||
|
|
|
||
|
|
formAction('key-form', async (data, form) => {
|
||
|
|
const key = value(data, 'public_key').trim();
|
||
|
|
if (key.includes('PRIVATE KEY')) throw new Error('这里需要 .pub 公钥，请勿提交私钥。');
|
||
|
|
await api('/api/account/ssh-key', 'PUT', { public_key: key });
|
||
|
|
showStatus(form.querySelector('.form-status'), '公钥已保存。发布仍需站长授权。');
|
||
|
|
});
|
||
|
|
formAction('password-form', async (data, form) => {
|
||
|
|
const password = value(data, 'new_password');
|
||
|
|
checkPassword(password);
|
||
|
|
await api('/api/account/password', 'PUT', { old_password: value(data, 'old_password'), new_password: password });
|
||
|
|
form.reset();
|
||
|
|
csrf = undefined;
|
||
|
|
location.assign('/login?changed=1');
|
||
|
|
});
|
||
|
|
|
||
|
|
document.querySelector<HTMLButtonElement>('#logout')?.addEventListener('click', async (event) => {
|
||
|
|
const button = event.currentTarget as HTMLButtonElement;
|
||
|
|
button.disabled = true;
|
||
|
|
try { await api('/api/auth/logout', 'POST', {}); csrf = undefined; location.assign('/'); }
|
||
|
|
catch (error) { showStatus(document.querySelector('#account-status'), errorMessage(error), true); button.disabled = false; }
|
||
|
|
});
|
||
|
|
|
||
|
|
function element<K extends keyof HTMLElementTagNameMap>(tag: K, text?: string): HTMLElementTagNameMap[K] {
|
||
|
|
const node = document.createElement(tag);
|
||
|
|
if (text !== undefined) node.textContent = text;
|
||
|
|
return node;
|
||
|
|
}
|
||
|
|
async function loadAdmin(account: Account) {
|
||
|
|
const section = document.querySelector<HTMLElement>('#admin-section')!;
|
||
|
|
section.hidden = false;
|
||
|
|
try {
|
||
|
|
const [users, state] = await Promise.all([
|
||
|
|
api<Record<string, Grant>>('/api/admin/users'),
|
||
|
|
api<{ pending: Record<string, { commit: string; reason: string }> }>('/api/admin/status'),
|
||
|
|
]);
|
||
|
|
const list = document.querySelector<HTMLElement>('#admin-users')!;
|
||
|
|
for (const [username, grant] of Object.entries(users)) {
|
||
|
|
const form = element('form'); form.className = 'admin-user';
|
||
|
|
form.append(element('h4', username === account.username ? `${username}（当前账户）` : username));
|
||
|
|
if (username === account.username) { form.append(element('p', '当前管理员')); list.append(form); continue; }
|
||
|
|
const controls = element('div'); controls.className = 'admin-user-controls';
|
||
|
|
const select = element('select'); select.setAttribute('aria-label', `${username} 的角色`);
|
||
|
|
for (const [role, label] of Object.entries(roles)) {
|
||
|
|
const option = element('option', label); option.value = role; option.selected = role === grant.role; select.append(option);
|
||
|
|
}
|
||
|
|
const label = element('label'); const enabled = element('input'); enabled.type = 'checkbox'; enabled.checked = grant.enabled;
|
||
|
|
label.append(enabled, document.createTextNode('启用账户'));
|
||
|
|
const button = element('button', '保存授权'); button.className = 'button button-quiet'; button.type = 'submit';
|
||
|
|
controls.append(select, label, button);
|
||
|
|
const message = element('p'); message.className = 'form-status'; message.setAttribute('role', 'status');
|
||
|
|
form.append(controls, message);
|
||
|
|
form.addEventListener('submit', async (event) => {
|
||
|
|
event.preventDefault(); if (button.disabled) return; button.disabled = true;
|
||
|
|
try { await api(`/api/admin/users/${encodeURIComponent(username)}`, 'PATCH', { enabled: enabled.checked, role: select.value }); showStatus(message, '授权已保存。'); }
|
||
|
|
catch (error) { showStatus(message, errorMessage(error), true); }
|
||
|
|
finally { button.disabled = false; }
|
||
|
|
});
|
||
|
|
list.append(form);
|
||
|
|
}
|
||
|
|
const pending = document.querySelector<HTMLElement>('#pending-indexes')!;
|
||
|
|
const entries = Object.entries(state.pending);
|
||
|
|
if (!entries.length) pending.append(element('p', '没有待修复的索引。'));
|
||
|
|
for (const [author, item] of entries) {
|
||
|
|
const row = element('div'); row.className = 'pending-item'; row.append(element('strong', `${author} / ${item.commit.slice(0, 8)}`), element('p', item.reason)); pending.append(row);
|
||
|
|
}
|
||
|
|
} catch (error) { showStatus(document.querySelector('#admin-status'), errorMessage(error), true); }
|
||
|
|
}
|
||
|
|
|
||
|
|
async function loadAccount() {
|
||
|
|
const content = document.querySelector<HTMLElement>('#account-content');
|
||
|
|
try {
|
||
|
|
const account = await api<Account>('/api/account');
|
||
|
|
csrf = account.csrf;
|
||
|
|
const link = document.querySelector<HTMLAnchorElement>('[data-account-link]');
|
||
|
|
if (link) { link.href = '/account'; link.textContent = '账户'; }
|
||
|
|
if (!content) return;
|
||
|
|
content.hidden = false;
|
||
|
|
showStatus(document.querySelector('#account-status'), '');
|
||
|
|
document.querySelector('#account-name')!.textContent = account.username;
|
||
|
|
document.querySelector('#account-role')!.textContent = roles[account.permissions.role];
|
||
|
|
document.querySelector<HTMLTextAreaElement>('#public-key')!.value = account.permissions.ssh_key || '';
|
||
|
|
document.querySelector('#publish-status')!.textContent = account.permissions.role === 'reader'
|
||
|
|
? '发布文章需要登记公钥，并由站长授予发布权限。'
|
||
|
|
: account.permissions.ssh_key ? '已获得发布权限，可以使用下方配置连接个人仓库。' : '已获得发布权限，登记公钥后即可连接个人仓库。';
|
||
|
|
if (account.permissions.role === 'admin') await loadAdmin(account);
|
||
|
|
} catch (error) {
|
||
|
|
if (!content) return;
|
||
|
|
showStatus(document.querySelector('#account-status'), errorMessage(error), true);
|
||
|
|
const link = element('a', '前往登录'); link.href = '/login'; link.className = 'text-link';
|
||
|
|
document.querySelector('#account-status')!.after(link);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
void loadAccount();
|