实现找回密码功能

controllers/account.go

@@ -3,15 +3,16 @@ package controllers
 import (
 	"time"
 	"strings"
+	"regexp"
 
+	"net/smtp"
 	"github.com/lifei6671/godoc/conf"
 	"github.com/lifei6671/godoc/models"
 	"github.com/lifei6671/godoc/utils"
 	"github.com/astaxie/beego"
 	"github.com/astaxie/beego/logs"
 	"github.com/lifei6671/gocaptcha"
-
-	"regexp"
+	"strconv"
 )
 
 // AccountController 用户登录与注册.
@@ -30,10 +31,7 @@ func (c *AccountController) Login()  {
 	if cookie,ok := c.GetSecureCookie(conf.GetAppKey(),"login");ok{
 
 		if err := utils.Decode(cookie,&remember); err == nil {
-			member := models.NewMember()
-			member.MemberId = remember.MemberId
-
-			if err := models.NewMember().Find(remember.MemberId); err == nil {
+			if member,err := models.NewMember().Find(remember.MemberId); err == nil {
 				c.SetMember(*member)
 
 				c.Redirect(beego.URLFor("HomeController.Index"), 302)
@@ -137,9 +135,193 @@ func (c *AccountController) Register()  {
 	}
 }
 
-func (p *AccountController) FindPassword()  {
-	p.TplName = "account/find_password.tpl"
+//找回密码.
+func (c *AccountController) FindPassword()  {
+	c.TplName = "account/find_password_setp1.tpl"
+	mail_conf := conf.GetMailConfig()
+
+	if c.Ctx.Input.IsPost() {
+
+		email := c.GetString("email")
+		captcha := c.GetString("code")
+
+		if email == "" {
+			c.JsonResult(6005,"邮箱地址不能为空")
+		}
+		if !mail_conf.EnableMail {
+			c.JsonResult(6004,"未启用邮件服务")
+		}
+
+		//如果开启了验证码
+		if v,ok := c.Option["ENABLED_CAPTCHA"]; ok && strings.EqualFold(v,"true") {
+			v,ok := c.GetSession(conf.CaptchaSessionName).(string);
+			if !ok || !strings.EqualFold(v,captcha){
+				c.JsonResult(6001,"验证码不正确")
+			}
+		}
+
+		member ,err := models.NewMember().FindByFieldFirst("email",email)
+		if err != nil {
+			c.JsonResult(6006,"邮箱不存在")
+		}
+		if member.Status != 0 {
+			c.JsonResult(6007,"账号已被禁用")
+		}
+
+
+		count,err := models.NewMemberToken().FindSendCount(email,time.Now().Add(-1*time.Hour),time.Now())
+
+		if err != nil {
+			beego.Error(err)
+			c.JsonResult(6008,"发送邮件失败")
+		}
+		if count > mail_conf.MailNumber {
+			c.JsonResult(6008,"发送次数太多，请稍候再试")
+		}
+
+		member_token := models.NewMemberToken()
+
+		member_token.Token = string(utils.Krand(32,utils.KC_RAND_KIND_ALL))
+		member_token.Email = email
+		member_token.MemberId = member.MemberId
+		member_token.IsValid = false
+		if _,err := member_token.InsertOrUpdate(); err != nil {
+			c.JsonResult(6009,"邮件发送失败")
+		}
+
+		data := map[string]interface{}{
+			"SITE_NAME" : c.Option["SITE_NAME"],
+			"url" : c.BaseUrl() + beego.URLFor("AccountController.FindPassword", "token",member_token.Token,"mail",email),
+		}
+
+		body,err := c.ExecuteViewPathTemplate("account/mail_template.tpl",data)
+		if err != nil {
+			beego.Error(err)
+			c.JsonResult(6003,"邮件发送失败")
+		}
+
+		go func(mail_conf *conf.SmtpConf,email string,body string) {
+			auth := smtp.PlainAuth(
+				"",
+				mail_conf.SmtpUserName,
+				mail_conf.SmtpPassword,
+				mail_conf.SmtpHost,
+			)
+
+			mime := "MIME-version: 1.0;\nContent-Type: text/html; charset=\"UTF-8\";\n\n";
+			subject := "Subject: 找回密码!\n"
+
+			err = smtp.SendMail(
+				mail_conf.SmtpHost + ":" + strconv.Itoa(mail_conf.SmtpPort),
+				auth,
+				mail_conf.FormUserName,
+				[]string{ email },
+				[]byte(subject + mime +"\n" +body),
+			)
+			if err != nil {
+				beego.Error("邮件发送失败 => ",email,err)
+			}
+		}(mail_conf,email,body)
+
+
+		c.JsonResult(0,"ok", c.BaseUrl() + beego.URLFor("AccountController.Login"))
+	}
+
+	token := c.GetString("token")
+	mail := c.GetString("mail")
+
+	if token != "" && mail != "" {
+		member_token,err := models.NewMemberToken().FindByFieldFirst("token",token)
+
+		if err != nil {
+			beego.Error(err)
+			c.Data["ErrorMessage"] = "邮件已失效"
+			c.TplName = "errors/error.tpl"
+			return
+		}
+		sub_time := member_token.SendTime.Sub(time.Now())
+
+		if !strings.EqualFold(member_token.Email,mail) || sub_time.Minutes() > float64(mail_conf.MailExpired) || !member_token.ValidTime.IsZero() {
+			c.Data["ErrorMessage"] = "验证码已过期，请重新操作。"
+			c.TplName = "errors/error.tpl"
+			return
+		}
+		c.Data["Email"] = member_token.Email
+		c.Data["Token"] = member_token.Token
+		c.TplName = "account/find_password_setp2.tpl"
+
+	}
 }
+
+//校验邮件并修改密码.
+func (c *AccountController) ValidEmail() {
+	c.Prepare()
+	password1 := c.GetString("password1")
+	password2 := c.GetString("password2")
+	captcha := c.GetString("code")
+	token := c.GetString("token")
+	mail := c.GetString("mail")
+
+	if password1 == "" {
+		c.JsonResult(6001,"密码不能为空")
+	}
+	if l :=  strings.Count(password1,""); l <6 || l > 50{
+		c.JsonResult(6001,"密码不能为空且必须在6-50个字符之间")
+	}
+	if password2 == ""{
+		c.JsonResult(6002,"确认密码不能为空")
+	}
+	if password1 != password2 {
+		c.JsonResult(6003,"确认密码输入不正确")
+	}
+	if captcha == "" {
+		c.JsonResult(6004,"验证码不能为空")
+	}
+	v,ok := c.GetSession(conf.CaptchaSessionName).(string);
+	if !ok || !strings.EqualFold(v,captcha){
+		c.JsonResult(6001,"验证码不正确")
+	}
+
+	mail_conf := conf.GetMailConfig()
+	member_token,err := models.NewMemberToken().FindByFieldFirst("token",token)
+
+	if err != nil {
+		beego.Error(err)
+		c.JsonResult(6007,"邮件已失效")
+	}
+	sub_time := member_token.SendTime.Sub(time.Now())
+
+	if !strings.EqualFold(member_token.Email,mail) || sub_time.Minutes() > float64(mail_conf.MailExpired) || !member_token.ValidTime.IsZero() {
+
+		c.JsonResult(6008,"验证码已过期，请重新操作。")
+	}
+	member ,err := models.NewMember().Find(member_token.MemberId)
+	if err != nil{
+		beego.Error(err)
+		c.JsonResult(6005,"用户不存在")
+	}
+	hash ,err := utils.PasswordHash(password1);
+
+	if  err != nil {
+		beego.Error(err)
+		c.JsonResult(6006,"保存密码失败")
+	}
+
+	member.Password = hash
+
+	err = member.Update("password")
+	member_token.ValidTime = time.Now()
+	member_token.IsValid = true
+	member_token.InsertOrUpdate()
+
+	if  err != nil {
+		beego.Error(err)
+		c.JsonResult(6006,"保存密码失败")
+	}
+	c.JsonResult(0,"ok",c.BaseUrl() + beego.URLFor("AccountController.Login"))
+}
+
+
 // Logout 退出登录.
 func (c *AccountController) Logout(){
 	c.SetMember(models.Member{});

controllers/base.go

@@ -8,6 +8,8 @@ import (
 	"github.com/lifei6671/godoc/conf"
 	"github.com/astaxie/beego"
 	"strings"
+	"encoding/json"
+	"io"
 )
 
 
@@ -62,17 +64,25 @@ func (c *BaseController) SetMember(member models.Member) {
 
 // JsonResult 响应 json 结果
 func (c *BaseController) JsonResult(errCode int,errMsg string,data ...interface{}){
-	json := make(map[string]interface{},3)
+	jsonData := make(map[string]interface{},3)
 
-	json["errcode"] = errCode
-	json["message"] = errMsg
+	jsonData["errcode"] = errCode
+	jsonData["message"] = errMsg
 
 	if len(data) > 0 && data[0] != nil{
-		json["data"] = data[0]
+		jsonData["data"] = data[0]
 	}
 
-	c.Data["json"] = json
-	c.ServeJSON(true)
+	returnJSON, err := json.Marshal(jsonData)
+
+	if err != nil {
+		beego.Error(err)
+	}
+
+	c.Ctx.ResponseWriter.Header().Set("Content-Type", "application/json; charset=utf-8")
+
+	io.WriteString(c.Ctx.ResponseWriter,string(returnJSON))
+
 	c.StopRun()
 }
 

controllers/book_member.go

@@ -88,7 +88,7 @@ func (c *BookMemberController) ChangeRole() {
 
 	member := models.NewMember()
 
-	if err := member.Find(member_id); err != nil {
+	if _,err := member.Find(member_id); err != nil {
 		c.JsonResult(6003,"用户不存在")
 	}
 	if member.Status == 1 {

controllers/error.go

@@ -0,0 +1,17 @@
+package controllers
+
+type ErrorController struct {
+	BaseController
+}
+
+func (c *ErrorController) Error404() {
+	c.TplName = "errors/404.tpl"
+}
+
+func (c *ErrorController) Error403() {
+	c.TplName = "errors/403.tpl"
+}
+
+func (c *ErrorController) Error500() {
+	c.TplName = "errors/error.tpl"
+}

controllers/manager.go

@@ -139,7 +139,7 @@ func (c *ManagerController) UpdateMemberStatus()  {
 	}
 	member := models.NewMember()
 
-	if err := member.Find(member_id); err != nil {
+	if _,err := member.Find(member_id); err != nil {
 		c.JsonResult(6002,"用户不存在")
 	}
 	member.Status = status
@@ -168,7 +168,7 @@ func (c *ManagerController) ChangeMemberRole()  {
 	}
 	member := models.NewMember()
 
-	if err := member.Find(member_id); err != nil {
+	if _,err := member.Find(member_id); err != nil {
 		c.JsonResult(6002,"用户不存在")
 	}
 	member.Role = role

controllers/setting.go

@@ -141,8 +141,7 @@ func (c *SettingController) Upload() {
 
 	url := "/" + filePath
 
-	member := models.NewMember()
-	if err := member.Find(c.Member.MemberId);err == nil {
+	if member,err := models.NewMember().Find(c.Member.MemberId);err == nil {
 		member.Avatar = url
 		member.Update()
 		c.SetMember(*member)