179 lines
4.9 KiB
Python
179 lines
4.9 KiB
Python
"""
|
|
密码重置管理接口
|
|
"""
|
|
|
|
from fastapi import APIRouter, Depends, HTTPException
|
|
from fastapi.responses import JSONResponse
|
|
from redis.asyncio import Redis
|
|
|
|
from app.dependencies.database import get_redis
|
|
from app.service.password_reset_service import password_reset_service
|
|
from app.log import logger
|
|
|
|
router = APIRouter(prefix="/admin/password-reset", tags=["密码重置管理"])
|
|
|
|
|
|
@router.get(
|
|
"/status/{email}",
|
|
name="查询重置状态",
|
|
description="查询指定邮箱的密码重置状态"
|
|
)
|
|
async def get_password_reset_status(
|
|
email: str,
|
|
redis: Redis = Depends(get_redis),
|
|
):
|
|
"""查询密码重置状态"""
|
|
try:
|
|
info = await password_reset_service.get_reset_code_info(email, redis)
|
|
return JSONResponse(
|
|
status_code=200,
|
|
content={
|
|
"success": True,
|
|
"data": info
|
|
}
|
|
)
|
|
except Exception as e:
|
|
logger.error(f"[Admin] Failed to get password reset status for {email}: {e}")
|
|
return JSONResponse(
|
|
status_code=500,
|
|
content={
|
|
"success": False,
|
|
"error": "获取状态失败"
|
|
}
|
|
)
|
|
|
|
|
|
@router.delete(
|
|
"/cleanup/{email}",
|
|
name="清理重置数据",
|
|
description="强制清理指定邮箱的密码重置数据"
|
|
)
|
|
async def force_cleanup_reset(
|
|
email: str,
|
|
redis: Redis = Depends(get_redis),
|
|
):
|
|
"""强制清理密码重置数据"""
|
|
try:
|
|
success = await password_reset_service.force_cleanup_user_reset(email, redis)
|
|
|
|
if success:
|
|
return JSONResponse(
|
|
status_code=200,
|
|
content={
|
|
"success": True,
|
|
"message": f"已清理邮箱 {email} 的重置数据"
|
|
}
|
|
)
|
|
else:
|
|
return JSONResponse(
|
|
status_code=500,
|
|
content={
|
|
"success": False,
|
|
"error": "清理失败"
|
|
}
|
|
)
|
|
except Exception as e:
|
|
logger.error(f"[Admin] Failed to cleanup password reset for {email}: {e}")
|
|
return JSONResponse(
|
|
status_code=500,
|
|
content={
|
|
"success": False,
|
|
"error": "清理操作失败"
|
|
}
|
|
)
|
|
|
|
|
|
@router.post(
|
|
"/cleanup/expired",
|
|
name="清理过期验证码",
|
|
description="清理所有过期的密码重置验证码"
|
|
)
|
|
async def cleanup_expired_codes(
|
|
redis: Redis = Depends(get_redis),
|
|
):
|
|
"""清理过期验证码"""
|
|
try:
|
|
count = await password_reset_service.cleanup_expired_codes(redis)
|
|
return JSONResponse(
|
|
status_code=200,
|
|
content={
|
|
"success": True,
|
|
"message": f"已清理 {count} 个过期的验证码",
|
|
"cleaned_count": count
|
|
}
|
|
)
|
|
except Exception as e:
|
|
logger.error(f"[Admin] Failed to cleanup expired codes: {e}")
|
|
return JSONResponse(
|
|
status_code=500,
|
|
content={
|
|
"success": False,
|
|
"error": "清理操作失败"
|
|
}
|
|
)
|
|
|
|
|
|
@router.get(
|
|
"/stats",
|
|
name="重置统计",
|
|
description="获取密码重置的统计信息"
|
|
)
|
|
async def get_reset_statistics(
|
|
redis: Redis = Depends(get_redis),
|
|
):
|
|
"""获取重置统计信息"""
|
|
try:
|
|
# 获取所有重置相关的键
|
|
reset_keys = await redis.keys("password_reset:code:*")
|
|
rate_limit_keys = await redis.keys("password_reset:rate_limit:*")
|
|
|
|
active_resets = 0
|
|
used_resets = 0
|
|
active_rate_limits = 0
|
|
|
|
# 统计活跃重置
|
|
for key in reset_keys:
|
|
data_str = await redis.get(key)
|
|
if data_str:
|
|
try:
|
|
import json
|
|
data = json.loads(data_str)
|
|
if data.get("used", False):
|
|
used_resets += 1
|
|
else:
|
|
active_resets += 1
|
|
except:
|
|
pass
|
|
|
|
# 统计频率限制
|
|
for key in rate_limit_keys:
|
|
ttl = await redis.ttl(key)
|
|
if ttl > 0:
|
|
active_rate_limits += 1
|
|
|
|
stats = {
|
|
"total_reset_codes": len(reset_keys),
|
|
"active_resets": active_resets,
|
|
"used_resets": used_resets,
|
|
"active_rate_limits": active_rate_limits,
|
|
"total_rate_limit_keys": len(rate_limit_keys)
|
|
}
|
|
|
|
return JSONResponse(
|
|
status_code=200,
|
|
content={
|
|
"success": True,
|
|
"data": stats
|
|
}
|
|
)
|
|
|
|
except Exception as e:
|
|
logger.error(f"[Admin] Failed to get reset statistics: {e}")
|
|
return JSONResponse(
|
|
status_code=500,
|
|
content={
|
|
"success": False,
|
|
"error": "获取统计信息失败"
|
|
}
|
|
)
|