feat: 修复测试套件问题并添加Woodpecker CI配置

- 修复API测试认证问题：创建全局认证设置，更新Playwright配置 - 优化回归测试稳定性：增加超时时间到15秒，修复定位器 - 创建Woodpecker CI工作流：CI、部署和质量门禁配置 - 添加Jest配置和测试脚本 - 移除登录页面的默认账号密码显示（安全问题修复）
2026-03-09 10:26:02 +08:00
parent 96c96fe75d
commit 6d92024b63
68 changed files with 5584 additions and 167 deletions
@@ -0,0 +1,155 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { db } from '@/db';
+import { users } from '@/db/schema';
+import { auth } from '@/lib/auth';
+import { hasPermission } from '@/lib/auth/permissions';
+import { eq } from 'drizzle-orm';
+import bcrypt from 'bcryptjs';
+
+export async function GET(
+  _request: NextRequest,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  try {
+    const session = await auth();
+    
+    if (!session?.user) {
+      return NextResponse.json({ error: '未授权' }, { status: 401 });
+    }
+
+    const userRole = session.user.role as 'admin' | 'editor' | 'viewer';
+    
+    if (!hasPermission(userRole, 'users', 'read')) {
+      return NextResponse.json({ error: '无权限' }, { status: 403 });
+    }
+
+    const { id } = await params;
+
+    const user = await db
+      .select({
+        id: users.id,
+        email: users.email,
+        name: users.name,
+        role: users.role,
+        createdAt: users.createdAt,
+        updatedAt: users.updatedAt,
+      })
+      .from(users)
+      .where(eq(users.id, id))
+      .limit(1);
+
+    if (user.length === 0) {
+      return NextResponse.json({ error: '用户不存在' }, { status: 404 });
+    }
+
+    return NextResponse.json({ user: user[0] });
+  } catch (error) {
+    console.error('获取用户详情失败:', error);
+    return NextResponse.json({ error: '服务器错误' }, { status: 500 });
+  }
+}
+
+export async function PUT(
+  request: NextRequest,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  try {
+    const session = await auth();
+    
+    if (!session?.user) {
+      return NextResponse.json({ error: '未授权' }, { status: 401 });
+    }
+
+    const userRole = session.user.role as 'admin' | 'editor' | 'viewer';
+    
+    if (!hasPermission(userRole, 'users', 'update')) {
+      return NextResponse.json({ error: '无权限' }, { status: 403 });
+    }
+
+    const { id } = await params;
+    const body = await request.json();
+    const { email, name, password, role } = body;
+
+    const existingUser = await db
+      .select()
+      .from(users)
+      .where(eq(users.id, id))
+      .limit(1);
+
+    if (existingUser.length === 0) {
+      return NextResponse.json({ error: '用户不存在' }, { status: 404 });
+    }
+
+    const updateData: Record<string, any> = {
+      updatedAt: new Date(),
+    };
+
+    if (email) updateData.email = email;
+    if (name) updateData.name = name;
+    if (role) updateData.role = role;
+    if (password) {
+      updateData.passwordHash = await bcrypt.hash(password, 10);
+    }
+
+    const updated = await db
+      .update(users)
+      .set(updateData)
+      .where(eq(users.id, id))
+      .returning();
+
+    return NextResponse.json({
+      user: {
+        id: updated[0]!.id,
+        email: updated[0]!.email,
+        name: updated[0]!.name,
+        role: updated[0]!.role,
+        createdAt: updated[0]!.createdAt,
+      }
+    });
+  } catch (error) {
+    console.error('更新用户失败:', error);
+    return NextResponse.json({ error: '服务器错误' }, { status: 500 });
+  }
+}
+
+export async function DELETE(
+  _request: NextRequest,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  try {
+    const session = await auth();
+    
+    if (!session?.user) {
+      return NextResponse.json({ error: '未授权' }, { status: 401 });
+    }
+
+    const userRole = session.user.role as 'admin' | 'editor' | 'viewer';
+    
+    if (!hasPermission(userRole, 'users', 'delete')) {
+      return NextResponse.json({ error: '无权限' }, { status: 403 });
+    }
+
+    const { id } = await params;
+
+    if (session.user.id === id) {
+      return NextResponse.json({ error: '不能删除自己的账号' }, { status: 400 });
+    }
+
+    const existingUser = await db
+      .select()
+      .from(users)
+      .where(eq(users.id, id))
+      .limit(1);
+
+    if (existingUser.length === 0) {
+      return NextResponse.json({ error: '用户不存在' }, { status: 404 });
+    }
+
+    await db.delete(users).where(eq(users.id, id));
+
+    return NextResponse.json({ success: true });
+  } catch (error) {
+    console.error('删除用户失败:', error);
+    return NextResponse.json({ error: '服务器错误' }, { status: 500 });
+  }
+}
@@ -0,0 +1,102 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { db } from '@/db';
+import { users } from '@/db/schema';
+import { auth } from '@/lib/auth';
+import { hasPermission } from '@/lib/auth/permissions';
+import { eq } from 'drizzle-orm';
+import { nanoid } from 'nanoid';
+import bcrypt from 'bcryptjs';
+
+export async function GET(_request: NextRequest) {
+  try {
+    const session = await auth();
+    
+    if (!session?.user) {
+      return NextResponse.json({ error: '未授权' }, { status: 401 });
+    }
+
+    const userRole = session.user.role as 'admin' | 'editor' | 'viewer';
+    
+    if (!hasPermission(userRole, 'users', 'read')) {
+      return NextResponse.json({ error: '无权限' }, { status: 403 });
+    }
+
+    const allUsers = await db
+      .select({
+        id: users.id,
+        email: users.email,
+        name: users.name,
+        role: users.role,
+        createdAt: users.createdAt,
+        updatedAt: users.updatedAt,
+      })
+      .from(users)
+      .orderBy(users.createdAt);
+
+    return NextResponse.json({ users: allUsers });
+  } catch (error) {
+    console.error('获取用户列表失败:', error);
+    return NextResponse.json({ error: '服务器错误' }, { status: 500 });
+  }
+}
+
+export async function POST(request: NextRequest) {
+  try {
+    const session = await auth();
+    
+    if (!session?.user) {
+      return NextResponse.json({ error: '未授权' }, { status: 401 });
+    }
+
+    const userRole = session.user.role as 'admin' | 'editor' | 'viewer';
+    
+    if (!hasPermission(userRole, 'users', 'create')) {
+      return NextResponse.json({ error: '无权限' }, { status: 403 });
+    }
+
+    const body = await request.json();
+    const { email, name, password, role } = body;
+
+    if (!email || !name || !password || !role) {
+      return NextResponse.json({ error: '缺少必填字段' }, { status: 400 });
+    }
+
+    const existingUser = await db
+      .select()
+      .from(users)
+      .where(eq(users.email, email))
+      .limit(1);
+
+    if (existingUser.length > 0) {
+      return NextResponse.json({ error: '邮箱已被使用' }, { status: 400 });
+    }
+
+    const hashedPassword = await bcrypt.hash(password, 10);
+
+    const newUser = await db
+      .insert(users)
+      .values({
+        id: nanoid(),
+        email,
+        name,
+        passwordHash: hashedPassword,
+        role,
+        createdAt: new Date(),
+        updatedAt: new Date(),
+      })
+      .returning();
+
+    return NextResponse.json({
+      user: {
+        id: newUser[0]!.id,
+        email: newUser[0]!.email,
+        name: newUser[0]!.name,
+        role: newUser[0]!.role,
+        createdAt: newUser[0]!.createdAt,
+      }
+    });
+  } catch (error) {
+    console.error('创建用户失败:', error);
+    return NextResponse.json({ error: '服务器错误' }, { status: 500 });
+  }
+}