yumoqing
8aada101ca
- Replace DATE_SUB(NOW(), INTERVAL 300 SECOND) with Python-level time check - Replace NOW() with parameterized timestamps from Python - Lockout check now done in _is_locked() function (DB-agnostic) - All UPDATE statements use parameterized values, not DB functions - Works with MySQL, PostgreSQL, SQLite, SQL Server, Oracle
98 lines
2.2 KiB
Plaintext
98 lines
2.2 KiB
Plaintext
# 用短信模块检查验证码是否正确
|
|
debug(f'phone_login.dspy:{params_kw=}')
|
|
if params_kw.cellphone is None:
|
|
return {
|
|
"status": "error",
|
|
"data":{
|
|
"message": "需输入手机号"
|
|
}
|
|
}
|
|
if params_kw.sms_code is None:
|
|
return {
|
|
"status": "error",
|
|
"data": {
|
|
"message": "需输入验证码"
|
|
}
|
|
}
|
|
if params_kw.key is None:
|
|
return {
|
|
"status": "error",
|
|
"data": {
|
|
"message": "需要短信验证key"
|
|
}
|
|
}
|
|
f = await sms_engine.check_sms_code(params_kw.key, params_kw.sms_code)
|
|
if not f:
|
|
return {
|
|
"status": "error",
|
|
"data": {
|
|
"message": "手机短信验证码出错"
|
|
}
|
|
}
|
|
|
|
ns = {
|
|
"username": params_kw.cellphone,
|
|
"password": "^&%UHI",
|
|
"cfm_password": "^&%UHI",
|
|
"mobile": params_kw.cellphone,
|
|
"user_status": "0"
|
|
}
|
|
udata = DictObject(**ns)
|
|
async with get_sor_context(request._run_ns, 'rbac') as sor:
|
|
recs = await sor.R('users', {'mobile': params_kw.cellphone})
|
|
if recs:
|
|
if len(recs) == 1:
|
|
r = recs[0]
|
|
# Update last_login atomically (standard SQL, no DB-specific functions)
|
|
now_str = curDateString('%Y-%m-%d %H:%M:%S')
|
|
await sor.sqlExe("""
|
|
UPDATE users
|
|
SET last_login = ${now}$, login_fail_count = 0,
|
|
last_login_fail = NULL
|
|
WHERE id = ${id}$
|
|
""", {'id': r.id, 'now': now_str})
|
|
await remember_user(r.id, username=r.username, userorgid=r.orgid)
|
|
return {
|
|
"status": "ok",
|
|
"data":{
|
|
"user": r
|
|
}
|
|
}
|
|
if params_kw.selected_id:
|
|
for r in recs:
|
|
if r.id == params_kw.selected_id:
|
|
now_str = curDateString('%Y-%m-%d %H:%M:%S')
|
|
await sor.sqlExe("""
|
|
UPDATE users
|
|
SET last_login = ${now}$, login_fail_count = 0,
|
|
last_login_fail = NULL
|
|
WHERE id = ${id}$
|
|
""", {'id': r.id, 'now': now_str})
|
|
await remember_user(r.id, username=r.username, userorgid=r.orgid)
|
|
return {
|
|
"status": "ok",
|
|
"data":{
|
|
"user": r
|
|
}
|
|
}
|
|
else:
|
|
return {
|
|
"status": "choose",
|
|
"data": {
|
|
"users": recs
|
|
}
|
|
}
|
|
|
|
d = await register_user(sor, udata)
|
|
if d['status'] == 'error':
|
|
return d
|
|
try:
|
|
ownerid = await get_owner_orgid(sor, orgid)
|
|
await openCustomerAccounts(sor, ownerid, orgid)
|
|
except Exception as e:
|
|
exception(f'{e}')
|
|
|
|
r = d['data']['user']
|
|
await remember_user(r.id, username=r.username, userorgid=r.orgid)
|
|
|