const { ERROR } = require('../../common/error') const { getNeedCaptcha, verifyCaptcha } = require('../../lib/utils/captcha') const { verifyEmailCode } = require('../../lib/utils/verify-code') const { userCollection, EMAIL_SCENE, CAPTCHA_SCENE, LOG_TYPE } = require('../../common/constants') const { findUser } = require('../../lib/utils/account') const PasswordUtils = require('../../lib/utils/password') /** * 通过邮箱验证码重置密码 * @tutorial https://uniapp.dcloud.net.cn/uniCloud/uni-id-pages.html#reset-pwd-by-email * @param {object} params * @param {string} params.email 邮箱 * @param {string} params.code 邮箱验证码 * @param {string} params.password 密码 * @param {string} params.captcha 图形验证码 * @returns {object} */ module.exports = async function (params = {}) { const schema = { email: 'email', code: 'string', password: 'password', captcha: { required: false, type: 'string' } } this.middleware.validate(params, schema) const { email, code, password, captcha } = params const needCaptcha = await getNeedCaptcha.call(this, { email, type: LOG_TYPE.RESET_PWD_BY_EMAIL }) if (needCaptcha) { await verifyCaptcha.call(this, { captcha, scene: CAPTCHA_SCENE.RESET_PWD_BY_EMAIL }) } try { // 验证手机号验证码,验证不通过时写入失败日志 await verifyEmailCode({ email, code, scene: EMAIL_SCENE.RESET_PWD_BY_EMAIL }) } catch (error) { await this.middleware.uniIdLog({ data: { email }, type: LOG_TYPE.RESET_PWD_BY_EMAIL, success: false }) throw error } // 根据手机号查找匹配的用户 const userMatched = await findUser.call(this, { userQuery: { email }, authorizedApp: [this.getClientInfo().appId] }) if (userMatched.length === 0) { throw { errCode: ERROR.ACCOUNT_NOT_EXISTS } } else if (userMatched.length > 1) { throw { errCode: ERROR.ACCOUNT_CONFLICT } } const { _id: uid } = userMatched[0] const { passwordHash, version } = new PasswordUtils({ passwordSecret: this.config.passwordSecret }).generatePasswordHash({ password }) // 更新用户密码 await userCollection.doc(uid).update({ password: passwordHash, password_secret_version: version, valid_token_date: Date.now() }) // 写入成功日志 await this.middleware.uniIdLog({ data: { email }, type: LOG_TYPE.RESET_PWD_BY_SMS }) return { errCode: 0 } }