添加账号系统

app/api/account/login/route.ts

@@ -0,0 +1,44 @@
+import { NextResponse } from "next/server";
+
+import {
+  loginCaregiverAccount,
+  sanitizeCaregiverRedirectPath,
+} from "@/lib/session";
+
+export async function POST(request: Request) {
+  const body = (await request.json().catch(() => null)) as
+    | {
+        username?: string;
+        password?: string;
+        redirectTo?: string;
+      }
+    | null;
+
+  if (!body?.username || typeof body.username !== "string") {
+    return NextResponse.json({ error: "请先输入用户名。" }, { status: 400 });
+  }
+
+  if (typeof body.password !== "string" || body.password.length === 0) {
+    return NextResponse.json({ error: "请先输入密码。" }, { status: 400 });
+  }
+
+  try {
+    await loginCaregiverAccount({
+      username: body.username,
+      password: body.password,
+      userAgent: request.headers.get("user-agent"),
+    });
+
+    return NextResponse.json({
+      ok: true,
+      redirectTo: sanitizeCaregiverRedirectPath(body.redirectTo),
+    });
+  } catch (error) {
+    return NextResponse.json(
+      {
+        error: error instanceof Error ? error.message : "登录失败，请稍后再试。",
+      },
+      { status: 400 },
+    );
+  }
+}

app/api/account/logout/route.ts

@@ -0,0 +1,11 @@
+import { NextResponse } from "next/server";
+
+import { clearCurrentCaregiverSession } from "@/lib/session";
+
+export async function POST(request: Request) {
+  await clearCurrentCaregiverSession();
+
+  return NextResponse.redirect(new URL("/login", request.url), {
+    status: 303,
+  });
+}

app/api/account/register/route.ts

@@ -0,0 +1,45 @@
+import { NextResponse } from "next/server";
+
+import {
+  registerCaregiverAccount,
+  sanitizeCaregiverRedirectPath,
+} from "@/lib/session";
+
+export async function POST(request: Request) {
+  const body = (await request.json().catch(() => null)) as
+    | {
+        username?: string;
+        password?: string;
+        redirectTo?: string;
+      }
+    | null;
+
+  if (!body?.username || typeof body.username !== "string") {
+    return NextResponse.json({ error: "请先输入用户名。" }, { status: 400 });
+  }
+
+  if (typeof body.password !== "string" || body.password.length === 0) {
+    return NextResponse.json({ error: "请先输入密码。" }, { status: 400 });
+  }
+
+  try {
+    await registerCaregiverAccount({
+      username: body.username,
+      password: body.password,
+      userAgent: request.headers.get("user-agent"),
+    });
+
+    return NextResponse.json({
+      ok: true,
+      redirectTo: sanitizeCaregiverRedirectPath(body.redirectTo),
+    });
+  } catch (error) {
+    return NextResponse.json(
+      {
+        error:
+          error instanceof Error ? error.message : "创建账号失败，请稍后再试。",
+      },
+      { status: 400 },
+    );
+  }
+}

app/api/family/bind/route.ts

@@ -1,7 +1,7 @@
 import { NextResponse } from "next/server";
 
 import { bindDeviceToCaregiver, createBindUrl } from "@/lib/monitor-data";
-import { getOrCreateCaregiverSession } from "@/lib/session";
+import { getCaregiverSession } from "@/lib/session";
 
 export async function POST(request: Request) {
   const body = (await request.json().catch(() => null)) as
@@ -18,7 +18,15 @@ export async function POST(request: Request) {
   }
 
   try {
-    const caregiver = await getOrCreateCaregiverSession();
+    const caregiver = await getCaregiverSession();
+
+    if (!caregiver) {
+      return NextResponse.json(
+        { error: "请先登录账号后再绑定设备。" },
+        { status: 401 },
+      );
+    }
+
     const device = await bindDeviceToCaregiver(caregiver.id, body.deviceUuid);
 
     return NextResponse.json({

app/api/family/messages/route.ts

@@ -1,7 +1,7 @@
 import { NextResponse } from "next/server";
 
 import { createFamilyMessageFromCaregiver } from "@/lib/monitor-data";
-import { getOrCreateCaregiverSession } from "@/lib/session";
+import { getCaregiverSession } from "@/lib/session";
 
 export async function POST(request: Request) {
   const body = (await request.json().catch(() => null)) as
@@ -27,7 +27,15 @@ export async function POST(request: Request) {
   }
 
   try {
-    const caregiver = await getOrCreateCaregiverSession();
+    const caregiver = await getCaregiverSession();
+
+    if (!caregiver) {
+      return NextResponse.json(
+        { error: "请先登录账号后再发送留言。" },
+        { status: 401 },
+      );
+    }
+
     const message = await createFamilyMessageFromCaregiver({
       caregiverId: caregiver.id,
       rawDeviceValue: body.deviceUuid,

app/api/family/session/route.ts

@@ -1,49 +1,19 @@
 import { type NextRequest, NextResponse } from "next/server";
 
 import {
-  CAREGIVER_SESSION_COOKIE,
-  createCaregiverSessionCookieValue,
+  buildCaregiverLoginPath,
   getCaregiverSession,
+  sanitizeCaregiverRedirectPath,
 } from "@/lib/session";
-import { prisma } from "@/lib/prisma";
-
-function normalizeRedirectPath(redirectTo?: string | null) {
-  if (!redirectTo || !redirectTo.startsWith("/") || redirectTo.startsWith("//")) {
-    return "/";
-  }
-
-  return redirectTo;
-}
 
 export async function GET(request: NextRequest) {
-  const redirectTo = normalizeRedirectPath(
+  const redirectTo = sanitizeCaregiverRedirectPath(
     request.nextUrl.searchParams.get("redirectTo"),
   );
-  const existingCaregiver = await getCaregiverSession();
-  const response = new NextResponse(null, {
+  const caregiver = await getCaregiverSession();
+  const location = caregiver ? redirectTo : buildCaregiverLoginPath(redirectTo);
+
+  return NextResponse.redirect(new URL(location, request.url), {
     status: 307,
-    headers: {
-      Location: redirectTo,
-    },
   });
-
-  if (existingCaregiver) {
-    return response;
-  }
-
-  const { sessionToken, options } = createCaregiverSessionCookieValue();
-
-  await prisma.caregiverAccount.upsert({
-    where: { sessionToken },
-    update: {},
-    create: { sessionToken },
-  });
-
-  response.cookies.set({
-    name: CAREGIVER_SESSION_COOKIE,
-    value: sessionToken,
-    ...options,
-  });
-
-  return response;
 }

app/api/push/subscribe/route.ts

@@ -1,6 +1,6 @@
 import { NextResponse } from "next/server";
 
-import { getOrCreateCaregiverSession } from "@/lib/session";
+import { getCaregiverSession } from "@/lib/session";
 import { savePushSubscription } from "@/lib/push";
 
 export async function POST(request: Request) {
@@ -50,7 +50,15 @@ export async function POST(request: Request) {
   };
 
   try {
-    const caregiver = await getOrCreateCaregiverSession();
+    const caregiver = await getCaregiverSession();
+
+    if (!caregiver) {
+      return NextResponse.json(
+        { error: "请先登录账号后再开启消息提醒。" },
+        { status: 401 },
+      );
+    }
+
     await savePushSubscription({
       caregiverId: caregiver.id,
       subscription,