feat: disable register

src/app/api/admin/user/route.ts

@@ -15,7 +15,6 @@ const ACTIONS = [
   'unban',
   'setAdmin',
   'cancelAdmin',
-  'setAllowRegister',
   'changePassword',
   'deleteUser',
 ] as const;
@@ -43,12 +42,10 @@ export async function POST(request: NextRequest) {
     const {
       targetUsername, // 目标用户名
       targetPassword, // 目标用户密码（仅在添加用户时需要）
-      allowRegister,
       action,
     } = body as {
       targetUsername?: string;
       targetPassword?: string;
-      allowRegister?: boolean;
       action?: (typeof ACTIONS)[number];
     };
 
@@ -56,12 +53,11 @@ export async function POST(request: NextRequest) {
       return NextResponse.json({ error: '参数格式错误' }, { status: 400 });
     }
 
-    if (action !== 'setAllowRegister' && !targetUsername) {
+    if (!targetUsername) {
       return NextResponse.json({ error: '缺少目标用户名' }, { status: 400 });
     }
 
     if (
-      action !== 'setAllowRegister' &&
       action !== 'changePassword' &&
       action !== 'deleteUser' &&
       username === targetUsername
@@ -105,188 +101,180 @@ export async function POST(request: NextRequest) {
     // 权限校验逻辑
     const isTargetAdmin = targetEntry?.role === 'admin';
 
-    if (action === 'setAllowRegister') {
-      if (typeof allowRegister !== 'boolean') {
-        return NextResponse.json({ error: '参数格式错误' }, { status: 400 });
-      }
-      adminConfig.UserConfig.AllowRegister = allowRegister;
-      // 保存后直接返回成功（走后面的统一保存逻辑）
-    } else {
-      switch (action) {
-        case 'add': {
-          if (targetEntry) {
-            return NextResponse.json({ error: '用户已存在' }, { status: 400 });
-          }
-          if (!targetPassword) {
-            return NextResponse.json(
-              { error: '缺少目标用户密码' },
-              { status: 400 }
-            );
-          }
-          await db.registerUser(targetUsername!, targetPassword);
-          // 更新配置
-          adminConfig.UserConfig.Users.push({
-            username: targetUsername!,
-            role: 'user',
-          });
-          targetEntry =
-            adminConfig.UserConfig.Users[
-            adminConfig.UserConfig.Users.length - 1
-            ];
-          break;
+    switch (action) {
+      case 'add': {
+        if (targetEntry) {
+          return NextResponse.json({ error: '用户已存在' }, { status: 400 });
         }
-        case 'ban': {
-          if (!targetEntry) {
-            return NextResponse.json(
-              { error: '目标用户不存在' },
-              { status: 404 }
-            );
-          }
-          if (isTargetAdmin) {
-            // 目标是管理员
-            if (operatorRole !== 'owner') {
-              return NextResponse.json(
-                { error: '仅站长可封禁管理员' },
-                { status: 401 }
-              );
-            }
-          }
-          targetEntry.banned = true;
-          break;
-        }
-        case 'unban': {
-          if (!targetEntry) {
-            return NextResponse.json(
-              { error: '目标用户不存在' },
-              { status: 404 }
-            );
-          }
-          if (isTargetAdmin) {
-            if (operatorRole !== 'owner') {
-              return NextResponse.json(
-                { error: '仅站长可操作管理员' },
-                { status: 401 }
-              );
-            }
-          }
-          targetEntry.banned = false;
-          break;
-        }
-        case 'setAdmin': {
-          if (!targetEntry) {
-            return NextResponse.json(
-              { error: '目标用户不存在' },
-              { status: 404 }
-            );
-          }
-          if (targetEntry.role === 'admin') {
-            return NextResponse.json(
-              { error: '该用户已是管理员' },
-              { status: 400 }
-            );
-          }
-          if (operatorRole !== 'owner') {
-            return NextResponse.json(
-              { error: '仅站长可设置管理员' },
-              { status: 401 }
-            );
-          }
-          targetEntry.role = 'admin';
-          break;
-        }
-        case 'cancelAdmin': {
-          if (!targetEntry) {
-            return NextResponse.json(
-              { error: '目标用户不存在' },
-              { status: 404 }
-            );
-          }
-          if (targetEntry.role !== 'admin') {
-            return NextResponse.json(
-              { error: '目标用户不是管理员' },
-              { status: 400 }
-            );
-          }
-          if (operatorRole !== 'owner') {
-            return NextResponse.json(
-              { error: '仅站长可取消管理员' },
-              { status: 401 }
-            );
-          }
-          targetEntry.role = 'user';
-          break;
-        }
-        case 'changePassword': {
-          if (!targetEntry) {
-            return NextResponse.json(
-              { error: '目标用户不存在' },
-              { status: 404 }
-            );
-          }
-          if (!targetPassword) {
-            return NextResponse.json({ error: '缺少新密码' }, { status: 400 });
-          }
-
-          // 权限检查：不允许修改站长密码
-          if (targetEntry.role === 'owner') {
-            return NextResponse.json(
-              { error: '无法修改站长密码' },
-              { status: 401 }
-            );
-          }
-
-          if (
-            isTargetAdmin &&
-            operatorRole !== 'owner' &&
-            username !== targetUsername
-          ) {
-            return NextResponse.json(
-              { error: '仅站长可修改其他管理员密码' },
-              { status: 401 }
-            );
-          }
-
-          await db.changePassword(targetUsername!, targetPassword);
-          break;
-        }
-        case 'deleteUser': {
-          if (!targetEntry) {
-            return NextResponse.json(
-              { error: '目标用户不存在' },
-              { status: 404 }
-            );
-          }
-
-          // 权限检查：站长可删除所有用户（除了自己），管理员可删除普通用户
-          if (username === targetUsername) {
-            return NextResponse.json(
-              { error: '不能删除自己' },
-              { status: 400 }
-            );
-          }
-
-          if (isTargetAdmin && operatorRole !== 'owner') {
-            return NextResponse.json(
-              { error: '仅站长可删除管理员' },
-              { status: 401 }
-            );
-          }
-
-          await db.deleteUser(targetUsername!);
-
-          // 从配置中移除用户
-          const userIndex = adminConfig.UserConfig.Users.findIndex(
-            (u) => u.username === targetUsername
+        if (!targetPassword) {
+          return NextResponse.json(
+            { error: '缺少目标用户密码' },
+            { status: 400 }
           );
-          if (userIndex > -1) {
-            adminConfig.UserConfig.Users.splice(userIndex, 1);
-          }
-
-          break;
         }
-        default:
-          return NextResponse.json({ error: '未知操作' }, { status: 400 });
+        await db.registerUser(targetUsername!, targetPassword);
+        // 更新配置
+        adminConfig.UserConfig.Users.push({
+          username: targetUsername!,
+          role: 'user',
+        });
+        targetEntry =
+          adminConfig.UserConfig.Users[
+          adminConfig.UserConfig.Users.length - 1
+          ];
+        break;
       }
+      case 'ban': {
+        if (!targetEntry) {
+          return NextResponse.json(
+            { error: '目标用户不存在' },
+            { status: 404 }
+          );
+        }
+        if (isTargetAdmin) {
+          // 目标是管理员
+          if (operatorRole !== 'owner') {
+            return NextResponse.json(
+              { error: '仅站长可封禁管理员' },
+              { status: 401 }
+            );
+          }
+        }
+        targetEntry.banned = true;
+        break;
+      }
+      case 'unban': {
+        if (!targetEntry) {
+          return NextResponse.json(
+            { error: '目标用户不存在' },
+            { status: 404 }
+          );
+        }
+        if (isTargetAdmin) {
+          if (operatorRole !== 'owner') {
+            return NextResponse.json(
+              { error: '仅站长可操作管理员' },
+              { status: 401 }
+            );
+          }
+        }
+        targetEntry.banned = false;
+        break;
+      }
+      case 'setAdmin': {
+        if (!targetEntry) {
+          return NextResponse.json(
+            { error: '目标用户不存在' },
+            { status: 404 }
+          );
+        }
+        if (targetEntry.role === 'admin') {
+          return NextResponse.json(
+            { error: '该用户已是管理员' },
+            { status: 400 }
+          );
+        }
+        if (operatorRole !== 'owner') {
+          return NextResponse.json(
+            { error: '仅站长可设置管理员' },
+            { status: 401 }
+          );
+        }
+        targetEntry.role = 'admin';
+        break;
+      }
+      case 'cancelAdmin': {
+        if (!targetEntry) {
+          return NextResponse.json(
+            { error: '目标用户不存在' },
+            { status: 404 }
+          );
+        }
+        if (targetEntry.role !== 'admin') {
+          return NextResponse.json(
+            { error: '目标用户不是管理员' },
+            { status: 400 }
+          );
+        }
+        if (operatorRole !== 'owner') {
+          return NextResponse.json(
+            { error: '仅站长可取消管理员' },
+            { status: 401 }
+          );
+        }
+        targetEntry.role = 'user';
+        break;
+      }
+      case 'changePassword': {
+        if (!targetEntry) {
+          return NextResponse.json(
+            { error: '目标用户不存在' },
+            { status: 404 }
+          );
+        }
+        if (!targetPassword) {
+          return NextResponse.json({ error: '缺少新密码' }, { status: 400 });
+        }
+
+        // 权限检查：不允许修改站长密码
+        if (targetEntry.role === 'owner') {
+          return NextResponse.json(
+            { error: '无法修改站长密码' },
+            { status: 401 }
+          );
+        }
+
+        if (
+          isTargetAdmin &&
+          operatorRole !== 'owner' &&
+          username !== targetUsername
+        ) {
+          return NextResponse.json(
+            { error: '仅站长可修改其他管理员密码' },
+            { status: 401 }
+          );
+        }
+
+        await db.changePassword(targetUsername!, targetPassword);
+        break;
+      }
+      case 'deleteUser': {
+        if (!targetEntry) {
+          return NextResponse.json(
+            { error: '目标用户不存在' },
+            { status: 404 }
+          );
+        }
+
+        // 权限检查：站长可删除所有用户（除了自己），管理员可删除普通用户
+        if (username === targetUsername) {
+          return NextResponse.json(
+            { error: '不能删除自己' },
+            { status: 400 }
+          );
+        }
+
+        if (isTargetAdmin && operatorRole !== 'owner') {
+          return NextResponse.json(
+            { error: '仅站长可删除管理员' },
+            { status: 401 }
+          );
+        }
+
+        await db.deleteUser(targetUsername!);
+
+        // 从配置中移除用户
+        const userIndex = adminConfig.UserConfig.Users.findIndex(
+          (u) => u.username === targetUsername
+        );
+        if (userIndex > -1) {
+          adminConfig.UserConfig.Users.splice(userIndex, 1);
+        }
+
+        break;
+      }
+      default:
+        return NextResponse.json({ error: '未知操作' }, { status: 400 });
     }
 
     // 将更新后的配置写入数据库