feat: disable register

src/app/api/admin/user/route.ts

@@ -15,7 +15,6 @@ const ACTIONS = [
   'unban',
   'setAdmin',
   'cancelAdmin',
-  'setAllowRegister',
   'changePassword',
   'deleteUser',
 ] as const;
@@ -43,12 +42,10 @@ export async function POST(request: NextRequest) {
     const {
       targetUsername, // 目标用户名
       targetPassword, // 目标用户密码（仅在添加用户时需要）
-      allowRegister,
       action,
     } = body as {
       targetUsername?: string;
       targetPassword?: string;
-      allowRegister?: boolean;
       action?: (typeof ACTIONS)[number];
     };
 
@@ -56,12 +53,11 @@ export async function POST(request: NextRequest) {
       return NextResponse.json({ error: '参数格式错误' }, { status: 400 });
     }
 
-    if (action !== 'setAllowRegister' && !targetUsername) {
+    if (!targetUsername) {
       return NextResponse.json({ error: '缺少目标用户名' }, { status: 400 });
     }
 
     if (
-      action !== 'setAllowRegister' &&
       action !== 'changePassword' &&
       action !== 'deleteUser' &&
       username === targetUsername
@@ -105,188 +101,180 @@ export async function POST(request: NextRequest) {
     // 权限校验逻辑
     const isTargetAdmin = targetEntry?.role === 'admin';
 
-    if (action === 'setAllowRegister') {
-      if (typeof allowRegister !== 'boolean') {
-        return NextResponse.json({ error: '参数格式错误' }, { status: 400 });
-      }
-      adminConfig.UserConfig.AllowRegister = allowRegister;
-      // 保存后直接返回成功（走后面的统一保存逻辑）
-    } else {
-      switch (action) {
-        case 'add': {
-          if (targetEntry) {
-            return NextResponse.json({ error: '用户已存在' }, { status: 400 });
-          }
-          if (!targetPassword) {
-            return NextResponse.json(
-              { error: '缺少目标用户密码' },
-              { status: 400 }
-            );
-          }
-          await db.registerUser(targetUsername!, targetPassword);
-          // 更新配置
-          adminConfig.UserConfig.Users.push({
-            username: targetUsername!,
-            role: 'user',
-          });
-          targetEntry =
-            adminConfig.UserConfig.Users[
-            adminConfig.UserConfig.Users.length - 1
-            ];
-          break;
+    switch (action) {
+      case 'add': {
+        if (targetEntry) {
+          return NextResponse.json({ error: '用户已存在' }, { status: 400 });
         }
-        case 'ban': {
-          if (!targetEntry) {
-            return NextResponse.json(
-              { error: '目标用户不存在' },
-              { status: 404 }
-            );
-          }
-          if (isTargetAdmin) {
-            // 目标是管理员
-            if (operatorRole !== 'owner') {
-              return NextResponse.json(
-                { error: '仅站长可封禁管理员' },
-                { status: 401 }
-              );
-            }
-          }
-          targetEntry.banned = true;
-          break;
-        }
-        case 'unban': {
-          if (!targetEntry) {
-            return NextResponse.json(
-              { error: '目标用户不存在' },
-              { status: 404 }
-            );
-          }
-          if (isTargetAdmin) {
-            if (operatorRole !== 'owner') {
-              return NextResponse.json(
-                { error: '仅站长可操作管理员' },
-                { status: 401 }
-              );
-            }
-          }
-          targetEntry.banned = false;
-          break;
-        }
-        case 'setAdmin': {
-          if (!targetEntry) {
-            return NextResponse.json(
-              { error: '目标用户不存在' },
-              { status: 404 }
-            );
-          }
-          if (targetEntry.role === 'admin') {
-            return NextResponse.json(
-              { error: '该用户已是管理员' },
-              { status: 400 }
-            );
-          }
-          if (operatorRole !== 'owner') {
-            return NextResponse.json(
-              { error: '仅站长可设置管理员' },
-              { status: 401 }
-            );
-          }
-          targetEntry.role = 'admin';
-          break;
-        }
-        case 'cancelAdmin': {
-          if (!targetEntry) {
-            return NextResponse.json(
-              { error: '目标用户不存在' },
-              { status: 404 }
-            );
-          }
-          if (targetEntry.role !== 'admin') {
-            return NextResponse.json(
-              { error: '目标用户不是管理员' },
-              { status: 400 }
-            );
-          }
-          if (operatorRole !== 'owner') {
-            return NextResponse.json(
-              { error: '仅站长可取消管理员' },
-              { status: 401 }
-            );
-          }
-          targetEntry.role = 'user';
-          break;
-        }
-        case 'changePassword': {
-          if (!targetEntry) {
-            return NextResponse.json(
-              { error: '目标用户不存在' },
-              { status: 404 }
-            );
-          }
-          if (!targetPassword) {
-            return NextResponse.json({ error: '缺少新密码' }, { status: 400 });
-          }
-
-          // 权限检查：不允许修改站长密码
-          if (targetEntry.role === 'owner') {
-            return NextResponse.json(
-              { error: '无法修改站长密码' },
-              { status: 401 }
-            );
-          }
-
-          if (
-            isTargetAdmin &&
-            operatorRole !== 'owner' &&
-            username !== targetUsername
-          ) {
-            return NextResponse.json(
-              { error: '仅站长可修改其他管理员密码' },
-              { status: 401 }
-            );
-          }
-
-          await db.changePassword(targetUsername!, targetPassword);
-          break;
-        }
-        case 'deleteUser': {
-          if (!targetEntry) {
-            return NextResponse.json(
-              { error: '目标用户不存在' },
-              { status: 404 }
-            );
-          }
-
-          // 权限检查：站长可删除所有用户（除了自己），管理员可删除普通用户
-          if (username === targetUsername) {
-            return NextResponse.json(
-              { error: '不能删除自己' },
-              { status: 400 }
-            );
-          }
-
-          if (isTargetAdmin && operatorRole !== 'owner') {
-            return NextResponse.json(
-              { error: '仅站长可删除管理员' },
-              { status: 401 }
-            );
-          }
-
-          await db.deleteUser(targetUsername!);
-
-          // 从配置中移除用户
-          const userIndex = adminConfig.UserConfig.Users.findIndex(
-            (u) => u.username === targetUsername
+        if (!targetPassword) {
+          return NextResponse.json(
+            { error: '缺少目标用户密码' },
+            { status: 400 }
           );
-          if (userIndex > -1) {
-            adminConfig.UserConfig.Users.splice(userIndex, 1);
-          }
-
-          break;
         }
-        default:
-          return NextResponse.json({ error: '未知操作' }, { status: 400 });
+        await db.registerUser(targetUsername!, targetPassword);
+        // 更新配置
+        adminConfig.UserConfig.Users.push({
+          username: targetUsername!,
+          role: 'user',
+        });
+        targetEntry =
+          adminConfig.UserConfig.Users[
+          adminConfig.UserConfig.Users.length - 1
+          ];
+        break;
       }
+      case 'ban': {
+        if (!targetEntry) {
+          return NextResponse.json(
+            { error: '目标用户不存在' },
+            { status: 404 }
+          );
+        }
+        if (isTargetAdmin) {
+          // 目标是管理员
+          if (operatorRole !== 'owner') {
+            return NextResponse.json(
+              { error: '仅站长可封禁管理员' },
+              { status: 401 }
+            );
+          }
+        }
+        targetEntry.banned = true;
+        break;
+      }
+      case 'unban': {
+        if (!targetEntry) {
+          return NextResponse.json(
+            { error: '目标用户不存在' },
+            { status: 404 }
+          );
+        }
+        if (isTargetAdmin) {
+          if (operatorRole !== 'owner') {
+            return NextResponse.json(
+              { error: '仅站长可操作管理员' },
+              { status: 401 }
+            );
+          }
+        }
+        targetEntry.banned = false;
+        break;
+      }
+      case 'setAdmin': {
+        if (!targetEntry) {
+          return NextResponse.json(
+            { error: '目标用户不存在' },
+            { status: 404 }
+          );
+        }
+        if (targetEntry.role === 'admin') {
+          return NextResponse.json(
+            { error: '该用户已是管理员' },
+            { status: 400 }
+          );
+        }
+        if (operatorRole !== 'owner') {
+          return NextResponse.json(
+            { error: '仅站长可设置管理员' },
+            { status: 401 }
+          );
+        }
+        targetEntry.role = 'admin';
+        break;
+      }
+      case 'cancelAdmin': {
+        if (!targetEntry) {
+          return NextResponse.json(
+            { error: '目标用户不存在' },
+            { status: 404 }
+          );
+        }
+        if (targetEntry.role !== 'admin') {
+          return NextResponse.json(
+            { error: '目标用户不是管理员' },
+            { status: 400 }
+          );
+        }
+        if (operatorRole !== 'owner') {
+          return NextResponse.json(
+            { error: '仅站长可取消管理员' },
+            { status: 401 }
+          );
+        }
+        targetEntry.role = 'user';
+        break;
+      }
+      case 'changePassword': {
+        if (!targetEntry) {
+          return NextResponse.json(
+            { error: '目标用户不存在' },
+            { status: 404 }
+          );
+        }
+        if (!targetPassword) {
+          return NextResponse.json({ error: '缺少新密码' }, { status: 400 });
+        }
+
+        // 权限检查：不允许修改站长密码
+        if (targetEntry.role === 'owner') {
+          return NextResponse.json(
+            { error: '无法修改站长密码' },
+            { status: 401 }
+          );
+        }
+
+        if (
+          isTargetAdmin &&
+          operatorRole !== 'owner' &&
+          username !== targetUsername
+        ) {
+          return NextResponse.json(
+            { error: '仅站长可修改其他管理员密码' },
+            { status: 401 }
+          );
+        }
+
+        await db.changePassword(targetUsername!, targetPassword);
+        break;
+      }
+      case 'deleteUser': {
+        if (!targetEntry) {
+          return NextResponse.json(
+            { error: '目标用户不存在' },
+            { status: 404 }
+          );
+        }
+
+        // 权限检查：站长可删除所有用户（除了自己），管理员可删除普通用户
+        if (username === targetUsername) {
+          return NextResponse.json(
+            { error: '不能删除自己' },
+            { status: 400 }
+          );
+        }
+
+        if (isTargetAdmin && operatorRole !== 'owner') {
+          return NextResponse.json(
+            { error: '仅站长可删除管理员' },
+            { status: 401 }
+          );
+        }
+
+        await db.deleteUser(targetUsername!);
+
+        // 从配置中移除用户
+        const userIndex = adminConfig.UserConfig.Users.findIndex(
+          (u) => u.username === targetUsername
+        );
+        if (userIndex > -1) {
+          adminConfig.UserConfig.Users.splice(userIndex, 1);
+        }
+
+        break;
+      }
+      default:
+        return NextResponse.json({ error: '未知操作' }, { status: 400 });
     }
 
     // 将更新后的配置写入数据库

src/app/api/register/route.ts

@@ -1,130 +0,0 @@
-/* eslint-disable no-console,@typescript-eslint/no-explicit-any */
-import { NextRequest, NextResponse } from 'next/server';
-
-import { getConfig } from '@/lib/config';
-import { db } from '@/lib/db';
-
-export const runtime = 'nodejs';
-
-// 读取存储类型环境变量，默认 localstorage
-const STORAGE_TYPE =
-  (process.env.NEXT_PUBLIC_STORAGE_TYPE as
-    | 'localstorage'
-    | 'redis'
-    | 'upstash'
-    | 'kvrocks'
-    | undefined) || 'localstorage';
-
-// 生成签名
-async function generateSignature(
-  data: string,
-  secret: string
-): Promise<string> {
-  const encoder = new TextEncoder();
-  const keyData = encoder.encode(secret);
-  const messageData = encoder.encode(data);
-
-  // 导入密钥
-  const key = await crypto.subtle.importKey(
-    'raw',
-    keyData,
-    { name: 'HMAC', hash: 'SHA-256' },
-    false,
-    ['sign']
-  );
-
-  // 生成签名
-  const signature = await crypto.subtle.sign('HMAC', key, messageData);
-
-  // 转换为十六进制字符串
-  return Array.from(new Uint8Array(signature))
-    .map((b) => b.toString(16).padStart(2, '0'))
-    .join('');
-}
-
-// 生成认证Cookie（带签名）
-async function generateAuthCookie(username: string): Promise<string> {
-  const authData: any = {
-    role: 'user',
-    username,
-    timestamp: Date.now(),
-  };
-
-  // 使用process.env.PASSWORD作为签名密钥，而不是用户密码
-  const signingKey = process.env.PASSWORD || '';
-  const signature = await generateSignature(username, signingKey);
-  authData.signature = signature;
-
-  return encodeURIComponent(JSON.stringify(authData));
-}
-
-export async function POST(req: NextRequest) {
-  try {
-    // localstorage 模式下不支持注册
-    if (STORAGE_TYPE === 'localstorage') {
-      return NextResponse.json(
-        { error: '当前模式不支持注册' },
-        { status: 400 }
-      );
-    }
-
-    const config = await getConfig();
-    // 校验是否开放注册
-    if (!config.UserConfig.AllowRegister) {
-      return NextResponse.json({ error: '当前未开放注册' }, { status: 400 });
-    }
-
-    const { username, password } = await req.json();
-
-    if (!username || typeof username !== 'string') {
-      return NextResponse.json({ error: '用户名不能为空' }, { status: 400 });
-    }
-    if (!password || typeof password !== 'string') {
-      return NextResponse.json({ error: '密码不能为空' }, { status: 400 });
-    }
-
-    // 检查是否和管理员重复
-    if (username === process.env.USERNAME) {
-      return NextResponse.json({ error: '用户已存在' }, { status: 400 });
-    }
-
-    try {
-      // 检查用户是否已存在
-      const exist = await db.checkUserExist(username);
-      if (exist) {
-        return NextResponse.json({ error: '用户已存在' }, { status: 400 });
-      }
-
-      await db.registerUser(username, password);
-
-      // 添加到配置中并保存
-      config.UserConfig.Users.push({
-        username,
-        role: 'user',
-      });
-      await db.saveAdminConfig(config);
-
-      // 注册成功，设置认证cookie
-      const response = NextResponse.json({ ok: true });
-      const cookieValue = await generateAuthCookie(username);
-      const expires = new Date();
-      expires.setDate(expires.getDate() + 7); // 7天过期
-
-      response.cookies.set('auth', cookieValue, {
-        path: '/',
-        expires,
-        sameSite: 'lax', // 改为 lax 以支持 PWA
-        httpOnly: false, // PWA 需要客户端可访问
-        secure: false, // 根据协议自动设置
-      });
-
-      return response;
-    } catch (err) {
-      console.error('数据库注册失败', err);
-      return NextResponse.json({ error: '数据库错误' }, { status: 500 });
-    }
-  } catch (error) {
-    console.error('注册接口异常', error);
-    return NextResponse.json({ error: '服务器错误' }, { status: 500 });
-  }
-}