@koishi-ce/plugin-auth 1.0.1 → 1.0.2

package/dist/index.js

@@ -1 +1 @@
-import{Schema as e,deepEqual as t,icons as n,message as r,pick as i,router as a,send as o,store as s,useConfig as c,useStorage as l}from"@koishi-ce/client";import{Fragment as u,computed as d,createBlock as f,createCommentVNode as p,createElementBlock as m,createElementVNode as h,createTextVNode as g,createVNode as _,defineComponent as v,h as y,isRef as b,openBlock as x,ref as S,renderList as C,resolveComponent as w,toDisplayString as T,unref as E,watch as D,withCtx as O,withKeys as k,withModifiers as A}from"vue";import{useRouter as j}from"vue-router";var M=l(`auth`,2,()=>({authType:0})),N=S(!1),P=S(!1),F={class:`login-form text-center`},ee={key:0},te={key:1},I={class:`hint`},L={class:`token`},R={class:`control`},z={key:0},B={key:1},V={key:0,class:`error`},H={class:`control`},U={key:0,class:`error`},W={class:`control`},G=v({__name:`login-form`,setup(e){let t=S(),n=S(),r=S(!1),i=0;async function a(){let e=Date.now();if(e<i)return;let{platform:r,userId:a}=M.value;if(!(!r||!a)){i=e+1e3;try{n.value=await o(`login/platform`,r,a)}catch(e){t.value=e.message}}}async function c(){let{name:e,password:n}=M.value;try{await o(`login/password`,e,n)}catch(e){t.value=e.message}}let l=j();function d(){s.user?N.value=!1:l.back()}return(e,i)=>{let o=w(`k-button`),l=w(`k-tab`),f=w(`k-icon`),v=w(`el-input`);return x(),m(`div`,F,[n.value?(x(),m(u,{key:0},[E(s).user?(x(),m(`h1`,ee,[...i[7]||=[h(`span`,null,`平台账户绑定`,-1)]])):(x(),m(`h1`,te,[...i[8]||=[h(`span`,null,`平台账户登录`,-1)]])),h(`p`,I,`欢迎你，`+T(n.value.name||`Koishi 用户`)+`！`,1),i[10]||=h(`p`,{class:`hint`},`请用上述账号将下面的验证码发送给任意正在运行的机器人`,-1),h(`p`,L,T(n.value.token),1),h(`div`,R,[_(o,{onClick:i[0]||=e=>n.value.token=null},{default:O(()=>[...i[9]||=[g(`返回上一步`,-1)]]),_:1})])],64)):(x(),m(u,{key:1},[E(s).user?(x(),m(`h1`,z,[...i[11]||=[h(`span`,null,`平台账户绑定`,-1)]])):(x(),m(`h1`,B,[_(l,{data:[`用户密码登录`,`平台账户登录`],modelValue:E(M).authType,"onUpdate:modelValue":i[1]||=e=>E(M).authType=e},null,8,[`modelValue`])])),E(s).user||E(M).authType===1?(x(),m(u,{key:2},[_(v,{placeholder:`平台名`,modelValue:E(M).platform,"onUpdate:modelValue":i[2]||=e=>E(M).platform=e},{prefix:O(()=>[_(f,{name:`at`})]),_:1},8,[`modelValue`]),_(v,{placeholder:`账号`,modelValue:E(M).userId,"onUpdate:modelValue":i[3]||=e=>E(M).userId=e,onKeypress:k(A(a,[`stop`]),[`enter`])},{prefix:O(()=>[_(f,{name:`user`})]),_:1},8,[`modelValue`,`onKeypress`]),t.value?(x(),m(`p`,V,T(t.value),1)):p(`v-if`,!0),h(`div`,H,[_(o,{onClick:d},{default:O(()=>[...i[12]||=[g(`返回`,-1)]]),_:1}),_(o,{onClick:a},{default:O(()=>[...i[13]||=[g(`获取验证码`,-1)]]),_:1})])],64)):(x(),m(u,{key:3},[_(v,{placeholder:`用户名`,modelValue:E(M).name,"onUpdate:modelValue":i[4]||=e=>E(M).name=e},{prefix:O(()=>[_(f,{name:`user`})]),_:1},8,[`modelValue`]),_(v,{placeholder:`密码`,modelValue:E(M).password,"onUpdate:modelValue":i[6]||=e=>E(M).password=e,onKeypress:k(A(c,[`stop`]),[`enter`]),type:r.value?`text`:`password`},{prefix:O(()=>[_(f,{name:`lock`})]),suffix:O(()=>[_(f,{name:r.value?`eye`:`eye-slash`,onClick:i[5]||=e=>r.value=!r.value},null,8,[`name`])]),_:1},8,[`modelValue`,`onKeypress`,`type`]),t.value?(x(),m(`p`,U,T(t.value),1)):p(`v-if`,!0),h(`div`,W,[_(o,{onClick:d},{default:O(()=>[...i[14]||=[g(`返回`,-1)]]),_:1}),_(o,{onClick:c},{default:O(()=>[...i[15]||=[g(`登录`,-1)]]),_:1})])],64))],64))])}}}),K=v({__name:`bind-dialog`,setup(e){return(e,t)=>{let n=w(`el-dialog`);return x(),m(u,null,[p(` 绑定平台账户对话框：已登录状态下从个人资料页唤起，内嵌登录表单 `),_(n,{center:``,modelValue:E(N),"onUpdate:modelValue":t[0]||=e=>b(N)?N.value=e:null,class:`bind-dialog`},{default:O(()=>[_(G)]),_:1},8,[`modelValue`])],2112)}}}),q=(e,t)=>{let n=e.__vccOpts||e;for(let[e,r]of t)n[e]=r;return n},J={},Y={class:`k-icon k-icon-at`,xmlns:`http://www.w3.org/2000/svg`,viewBox:`0 0 512 512`};function X(e,t){return x(),m(u,null,[p(` @ 图标：登录表单"平台名"输入框的前缀 `),(x(),m(`svg`,Y,[...t[0]||=[h(`path`,{fill:`currentColor`,d:`M256 8C118.941 8 8 118.919 8 256c0 137.059 110.919 248 248 248 48.154 0 95.342-14.14 135.408-40.223 12.005-7.815 14.625-24.288 5.552-35.372l-10.177-12.433c-7.671-9.371-21.179-11.667-31.373-5.129C325.92 429.757 291.314 440 256 440c-101.458 0-184-82.542-184-184S154.542 72 256 72c100.139 0 184 57.619 184 160 0 38.786-21.093 79.742-58.17 83.693-17.349-.454-16.91-12.857-13.476-30.024l23.433-121.11C394.653 149.75 383.308 136 368.225 136h-44.981a13.518 13.518 0 0 0-13.432 11.993l-.01.092c-14.697-17.901-40.448-21.775-59.971-21.775-74.58 0-137.831 62.234-137.831 151.46 0 65.303 36.785 105.87 96 105.87 26.984 0 57.369-15.637 74.991-38.333 9.522 34.104 40.613 34.103 70.71 34.103C462.609 379.41 504 307.798 504 232 504 95.653 394.023 8 256 8zm-21.68 304.43c-22.249 0-36.07-15.623-36.07-40.771 0-44.993 30.779-72.729 58.63-72.729 22.292 0 35.601 15.241 35.601 40.77 0 45.061-33.875 72.73-58.161 72.73z`},null,-1)]]))],2112)}var Z=q(J,[[`render`,X]]),Q={},ne={class:`k-icon check`,xmlns:`http://www.w3.org/2000/svg`,viewBox:`0 0 448 512`};function re(e,t){return x(),m(u,null,[p(` 对勾图标：个人资料页"应用更改"菜单项 `),(x(),m(`svg`,ne,[...t[0]||=[h(`path`,{fill:`currentColor`,d:`M438.6 105.4C451.1 117.9 451.1 138.1 438.6 150.6L182.6 406.6C170.1 419.1 149.9 419.1 137.4 406.6L9.372 278.6C-3.124 266.1-3.124 245.9 9.372 233.4C21.87 220.9 42.13 220.9 54.63 233.4L159.1 338.7L393.4 105.4C405.9 92.88 426.1 92.88 438.6 105.4H438.6z`},null,-1)]]))],2112)}var ie=q(Q,[[`render`,re]]),ae={},oe={class:`k-icon k-icon-lock`,xmlns:`http://www.w3.org/2000/svg`,viewBox:`0 0 448 512`};function se(e,t){return x(),m(u,null,[p(` 挂锁图标：登录表单"密码"输入框的前缀 `),(x(),m(`svg`,oe,[...t[0]||=[h(`path`,{fill:`currentColor`,d:`M400 224h-24v-72C376 68.2 307.8 0 224 0S72 68.2 72 152v72H48c-26.5 0-48 21.5-48 48v192c0 26.5 21.5 48 48 48h352c26.5 0 48-21.5 48-48V272c0-26.5-21.5-48-48-48zm-104 0H152v-72c0-39.7 32.3-72 72-72s72 32.3 72 72v72z`},null,-1)]]))],2112)}var ce=q(ae,[[`render`,se]]),le={},ue={class:`k-icon k-icon-sign-in`,xmlns:`http://www.w3.org/2000/svg`,viewBox:`0 0 512 512`};function de(e,t){return x(),m(u,null,[p(` 登入箭头图标：登录页活动入口 `),(x(),m(`svg`,ue,[...t[0]||=[h(`path`,{fill:`currentColor`,d:`M384 256c0-8.188-3.125-16.38-9.375-22.62l-128-128C237.5 96.22 223.7 93.47 211.8 98.44C199.8 103.4 192 115.1 192 128v64H48C21.49 192 0 213.5 0 240v32C0 298.5 21.49 320 48 320H192v64c0 12.94 7.797 24.62 19.75 29.56c11.97 4.969 25.72 2.219 34.88-6.938l128-128C380.9 272.4 384 264.2 384 256zM224 384V288H48C39.18 288 32 280.8 32 272v-32C32 231.2 39.18 224 48 224H224L223.1 128l128 128L224 384zM432 32h-96C327.2 32 320 39.16 320 48S327.2 64 336 64h96C458.5 64 480 85.53 480 112v288c0 26.47-21.53 48-48 48h-96c-8.844 0-16 7.156-16 16s7.156 16 16 16h96c44.13 0 80-35.88 80-80v-288C512 67.88 476.1 32 432 32z`},null,-1)]]))],2112)}var fe=q(le,[[`render`,de]]),pe={},me={class:`k-icon k-icon-sign-out`,xmlns:`http://www.w3.org/2000/svg`,viewBox:`0 0 512 512`};function he(e,t){return x(),m(u,null,[p(` 登出箭头图标：个人资料页"退出登录"菜单项 `),(x(),m(`svg`,me,[...t[0]||=[h(`path`,{fill:`currentColor`,d:`M176 448h-96C53.53 448 32 426.5 32 400v-288C32 85.53 53.53 64 80 64h96C184.8 64 192 56.84 192 48S184.8 32 176 32h-96C35.88 32 0 67.88 0 112v288C0 444.1 35.88 480 80 480h96C184.8 480 192 472.8 192 464S184.8 448 176 448zM502.6 233.4l-128-128c-9.156-9.156-22.91-11.91-34.88-6.938C327.8 103.4 320 115.1 320 128l.0918 63.1L176 192C149.5 192 128 213.5 128 240v32C128 298.5 149.5 320 176 320l144.1-.001L320 384c0 12.94 7.797 24.62 19.75 29.56c11.97 4.969 25.72 2.219 34.88-6.938l128-128C508.9 272.4 512 264.2 512 256S508.9 239.6 502.6 233.4zM352 384V288H176C167.2 288 160 280.8 160 272v-32C160 231.2 167.2 224 176 224H352l-.0039-96l128 128L352 384z`},null,-1)]]))],2112)}var ge=q(pe,[[`render`,he]]),_e={},ve={class:`k-icon`,xmlns:`http://www.w3.org/2000/svg`,viewBox:`0 0 512 512`};function ye(e,t){return x(),m(u,null,[p(` 人像图标：个人资料页活动入口 `),(x(),m(`svg`,ve,[...t[0]||=[h(`path`,{fill:`currentColor`,d:`M256 0C114.6 0 0 114.6 0 256s114.6 256 256 256s256-114.6 256-256S397.4 0 256 0zM256 480c-47.24 0-91.04-14.78-127.2-39.84C132.9 390.9 173.8 352 224 352h64c50.25 0 91.14 38.94 95.21 88.16C347 465.2 303.2 480 256 480zM411.7 416.7C397.6 361.3 347.7 320 288 320H224c-59.73 0-109.6 41.3-123.7 96.72C58.27 375.1 32 319 32 256c0-123.5 100.5-224 224-224s224 100.5 224 224C480 319 453.7 375.1 411.7 416.7zM256 128C211.8 128 176 163.8 176 208C176 252.2 211.8 288 256 288s80-35.82 80-80C336 163.8 300.2 128 256 128zM256 256C229.5 256 208 234.5 208 208S229.5 160 256 160s48 21.53 48 48S282.5 256 256 256z`},null,-1)]]))],2112)}var be=q(_e,[[`render`,ye]]),$=v({__name:`login`,setup(e){return(e,t)=>{let n=w(`k-card`),r=w(`k-layout`);return x(),m(u,null,[p(` 登录页：居中卡片内嵌登录表单 `),_(r,{main:`darker page-login`},{default:O(()=>[_(n,null,{default:O(()=>[_(G)]),_:1})]),_:1})],2112)}}}),xe={class:`k-schema-header`},Se={class:`header`},Ce={class:`left`},we={class:`right`},Te=v({__name:`profile`,setup(t){let n={platform:`平台账户`,password:`用户密码`},i=S({}),a=d(()=>e.object({name:e.string().description(`用户名`).default(M.value.name),password:e.string().role(`secret`).description(`密码`).default(M.value.password)}).description(`基本资料`));async function c(){return s.user=null,delete M.value.id,delete M.value.token,delete M.value.expiredAt,o(`user/logout`)}async function l(){try{await o(`user/update`,i.value),r.success(`修改成功！`),Object.assign(M.value,i.value),Object.assign(s.user,i.value),i.value={}}catch(e){r.error(e.message)}}let v=d(()=>s.user?.bindings.filter(e=>s.user.id===e.bid)),y=d(()=>[{icon:`check`,label:`应用更改`,disabled:!i.value||!Object.keys(i.value).length,action:l},{type:`danger`,icon:`sign-out`,label:`退出登录`,action:c}]);return(e,t)=>{let r=w(`k-form`),c=w(`el-button`),l=w(`k-content`),d=w(`k-layout`);return x(),f(d,{main:`page-profile`,menu:y.value},{default:O(()=>[_(l,null,{default:O(()=>[_(r,{schema:a.value,modelValue:i.value,"onUpdate:modelValue":t[0]||=e=>i.value=e},null,8,[`schema`,`modelValue`]),h(`h2`,xe,[t[3]||=g(` 平台绑定 `,-1),_(c,{solid:``,class:`right`,onClick:t[1]||=e=>N.value=!0},{default:O(()=>[...t[2]||=[g(`添加`,-1)]]),_:1})]),(x(!0),m(u,null,C(E(s).user.bindings,({platform:e,pid:n,bid:r})=>(x(),m(`div`,{class:`k-schema-item`,key:`${e}:${n}`},[h(`div`,Se,[h(`div`,Ce,T(e)+` (`+T(n)+`)`,1),h(`div`,we,[v.value.length>1||r!==E(s).user.id?(x(),f(c,{key:0,onClick:A(t=>E(o)(`user/unbind`,e,n),[`stop`,`prevent`])},{default:O(()=>[...t[4]||=[g(`解绑`,-1)]]),_:1},8,[`onClick`])):p(`v-if`,!0)])])]))),128)),t[6]||=h(`h2`,{class:`k-schema-header`},`登录历史`,-1),h(`ul`,null,[(x(!0),m(u,null,C(E(s).user.tokens,({inc:e,type:r,createdAt:i,lastUsedAt:a,address:s,userAgent:l})=>(x(),m(`li`,{key:e},[h(`div`,null,`登录类型：`+T(n[r]),1),h(`div`,null,`登录时间：`+T(i),1),h(`div`,null,`最后访问：`+T(a),1),h(`div`,null,`IP 地址：`+T(s),1),h(`div`,null,`客户端：`+T(l),1),h(`div`,null,[_(c,{onClick:t=>E(o)(`user/delete-token`,e)},{default:O(()=>[...t[5]||=[g(`移除会话`,-1)]]),_:1},8,[`onClick`])])]))),128))])]),_:1})]),_:1},8,[`menu`])}}}),Ee=q(v({__name:`sync-dialog`,setup(e){let t=c();async function n(e){if(M.value.sync=!!e,P.value=!1,e){if(e===`download`){t.value=s.user.config;return}try{await o(`user/update`,{config:t.value})}catch(e){r.error(e.message)}}}return(e,r)=>{let i=w(`el-button`),a=w(`el-button-group`),o=w(`el-dialog`);return x(),f(o,{class:`sync-dialog`,onClose:r[3]||=e=>E(t).sync??=!1,"show-close":!1,"close-on-click-modal":!1,"close-on-press-escape":!1,modelValue:E(P),"onUpdate:modelValue":r[4]||=e=>b(P)?P.value=e:null},{default:O(()=>[r[8]||=h(`p`,{class:`text-center`},`检测到你本地的配置与云端不同步，是否同步配置？`,-1),_(a,{class:`text-center`},{default:O(()=>[_(i,{onClick:r[0]||=e=>n(`upload`)},{default:O(()=>[...r[5]||=[g(`上传当前配置`,-1)]]),_:1}),_(i,{onClick:r[1]||=e=>n(`download`)},{default:O(()=>[...r[6]||=[g(`下载云端配置`,-1)]]),_:1}),_(i,{onClick:r[2]||=e=>n()},{default:O(()=>[...r[7]||=[g(`关闭配置同步`,-1)]]),_:1})]),_:1})]),_:1},8,[`modelValue`])}}}),[[`__scopeId`,`data-v-440ef018`]]);n.register(`at`,Z),n.register(`check`,ie),n.register(`lock`,ce),n.register(`sign-in`,fe),n.register(`sign-out`,ge),n.register(`user-full`,be);var De=n=>{let{token:l,id:u,expiredAt:d}=M.value;l&&u!==void 0&&d!==void 0&&d>Date.now()&&o(`login/token`,u,l).catch(e=>r.error(e.message)),n.on(`activity`,e=>{let t=e.authority??0;return t>0&&(!s.user||s.user.authority<t)}),n.scope.disposables.push(a.beforeEach(e=>{let{activity:t}=e.meta;if(t){if((t.authority||(t.fields??[]).includes(`user`))&&!s.user)return history.state.forward===`/login`?`/`:`/login`;if(t.authority&&s.user&&t.authority>s.user.authority)return r.error(`权限不足。`),!1}})),n.page({path:`/login`,name:`登录`,icon:`sign-in`,position:`bottom`,order:500,disabled:()=>!!s.user,component:$}),n.page({path:`/profile`,name:`用户资料`,icon:`user-full`,fields:[`user`],position:`bottom`,order:500,component:Te}),n.slot({type:`global`,component:K}),n.slot({type:`global`,component:Ee}),n.settings({id:`user`,title:`用户设置`,component:v(()=>()=>y(w(`k-form`),{schema:e.object({sync:e.boolean().description(`在多个客户端间同步设置。`)}).description(`同步设置`),initial:M.value,modelValue:M.value,"onUpdate:modelValue":e=>M.value=e}))});let f=c();function p(){s.user&&(t(s.user.config,f.value)||(P.value=!0))}n.on(`dispose`,D(f,async e=>{!e||!s.user||!M.value.sync||await o(`user/update`,{config:e})},{deep:!0})),n.on(`dispose`,D(()=>M.value.sync,async e=>{e&&s.user&&p()})),n.on(`dispose`,D(()=>s.user,(e,t)=>{if(N.value=!1,!e)return a.push(`/login`);if(M.value.sync&&p(),t)return;Object.assign(M.value,i(e,[`id`,`name`,`token`,`expiredAt`])),r.success(`欢迎回来，${e.name||`Koishi 用户`}！`);let n=a.currentRoute.value.redirectedFrom;n&&!n.path.startsWith(`/login`)?a.push(n):a.push(`/profile`)}))};export{De as default};
+import{Schema as e,deepEqual as t,icons as n,message as r,pick as i,router as a,send as o,store as s,useConfig as c,useStorage as l}from"@koishi-ce/client";import{Fragment as u,computed as d,createBlock as f,createCommentVNode as p,createElementBlock as m,createElementVNode as h,createTextVNode as g,createVNode as _,defineComponent as v,h as y,isRef as b,openBlock as x,ref as S,renderList as C,resolveComponent as w,toDisplayString as T,unref as E,watch as D,withCtx as O,withKeys as k,withModifiers as A}from"vue";import{useRouter as j}from"vue-router";var M=l(`auth`,2,()=>({authType:0})),N=S(!1),P=S(!1),F={class:`login-form text-center`},ee={key:0},te={key:1},I={class:`hint`},L={class:`token`},R={class:`control`},z={key:0},B={key:1},V={key:0,class:`error`},H={class:`control`},U={key:0,class:`error`},W={class:`control`},G=v({__name:`login-form`,setup(e){let t=S(),n=S(),r=S(!1),i=0;async function a(){let e=Date.now();if(e<i)return;let{platform:r,userId:a}=M.value;if(!(!r||!a)){i=e+1e3;try{n.value=await o(`login/platform`,r,a)}catch(e){t.value=e.message}}}async function c(){let{name:e,password:n}=M.value;try{await o(`login/password`,e,n)}catch(e){t.value=e.message}}let l=j();function d(){s.user?N.value=!1:l.back()}return(e,i)=>{let o=w(`k-button`),l=w(`k-tab`),f=w(`k-icon`),v=w(`el-input`);return x(),m(`div`,F,[n.value?(x(),m(u,{key:0},[E(s).user?(x(),m(`h1`,ee,[...i[7]||=[h(`span`,null,`平台账户绑定`,-1)]])):(x(),m(`h1`,te,[...i[8]||=[h(`span`,null,`平台账户登录`,-1)]])),h(`p`,I,`欢迎你，`+T(n.value.name||`Koishi 用户`)+`！`,1),i[10]||=h(`p`,{class:`hint`},`请用上述账号将下面的验证码发送给任意正在运行的机器人`,-1),h(`p`,L,T(n.value.token),1),h(`div`,R,[_(o,{onClick:i[0]||=e=>n.value.token=null},{default:O(()=>[...i[9]||=[g(`返回上一步`,-1)]]),_:1})])],64)):(x(),m(u,{key:1},[E(s).user?(x(),m(`h1`,z,[...i[11]||=[h(`span`,null,`平台账户绑定`,-1)]])):(x(),m(`h1`,B,[_(l,{data:[`用户密码登录`,`平台账户登录`],modelValue:E(M).authType,"onUpdate:modelValue":i[1]||=e=>E(M).authType=e},null,8,[`modelValue`])])),E(s).user||E(M).authType===1?(x(),m(u,{key:2},[_(v,{placeholder:`平台名`,modelValue:E(M).platform,"onUpdate:modelValue":i[2]||=e=>E(M).platform=e},{prefix:O(()=>[_(f,{name:`at`})]),_:1},8,[`modelValue`]),_(v,{placeholder:`账号`,modelValue:E(M).userId,"onUpdate:modelValue":i[3]||=e=>E(M).userId=e,onKeypress:k(A(a,[`stop`]),[`enter`])},{prefix:O(()=>[_(f,{name:`user`})]),_:1},8,[`modelValue`,`onKeypress`]),t.value?(x(),m(`p`,V,T(t.value),1)):p(`v-if`,!0),h(`div`,H,[_(o,{onClick:d},{default:O(()=>[...i[12]||=[g(`返回`,-1)]]),_:1}),_(o,{onClick:a},{default:O(()=>[...i[13]||=[g(`获取验证码`,-1)]]),_:1})])],64)):(x(),m(u,{key:3},[_(v,{placeholder:`用户名`,modelValue:E(M).name,"onUpdate:modelValue":i[4]||=e=>E(M).name=e},{prefix:O(()=>[_(f,{name:`user`})]),_:1},8,[`modelValue`]),_(v,{placeholder:`密码`,modelValue:E(M).password,"onUpdate:modelValue":i[6]||=e=>E(M).password=e,onKeypress:k(A(c,[`stop`]),[`enter`]),type:r.value?`text`:`password`},{prefix:O(()=>[_(f,{name:`lock`})]),suffix:O(()=>[_(f,{name:r.value?`eye`:`eye-slash`,onClick:i[5]||=e=>r.value=!r.value},null,8,[`name`])]),_:1},8,[`modelValue`,`onKeypress`,`type`]),t.value?(x(),m(`p`,U,T(t.value),1)):p(`v-if`,!0),h(`div`,W,[_(o,{onClick:d},{default:O(()=>[...i[14]||=[g(`返回`,-1)]]),_:1}),_(o,{onClick:c},{default:O(()=>[...i[15]||=[g(`登录`,-1)]]),_:1})])],64))],64))])}}}),K=v({__name:`bind-dialog`,setup(e){return(e,t)=>{let n=w(`el-dialog`);return x(),f(n,{center:``,modelValue:E(N),"onUpdate:modelValue":t[0]||=e=>b(N)?N.value=e:null,class:`bind-dialog`},{default:O(()=>[_(G)]),_:1},8,[`modelValue`])}}}),q=(e,t)=>{let n=e.__vccOpts||e;for(let[e,r]of t)n[e]=r;return n},J={},Y={class:`k-icon k-icon-at`,xmlns:`http://www.w3.org/2000/svg`,viewBox:`0 0 512 512`};function X(e,t){return x(),m(`svg`,Y,[...t[0]||=[h(`path`,{fill:`currentColor`,d:`M256 8C118.941 8 8 118.919 8 256c0 137.059 110.919 248 248 248 48.154 0 95.342-14.14 135.408-40.223 12.005-7.815 14.625-24.288 5.552-35.372l-10.177-12.433c-7.671-9.371-21.179-11.667-31.373-5.129C325.92 429.757 291.314 440 256 440c-101.458 0-184-82.542-184-184S154.542 72 256 72c100.139 0 184 57.619 184 160 0 38.786-21.093 79.742-58.17 83.693-17.349-.454-16.91-12.857-13.476-30.024l23.433-121.11C394.653 149.75 383.308 136 368.225 136h-44.981a13.518 13.518 0 0 0-13.432 11.993l-.01.092c-14.697-17.901-40.448-21.775-59.971-21.775-74.58 0-137.831 62.234-137.831 151.46 0 65.303 36.785 105.87 96 105.87 26.984 0 57.369-15.637 74.991-38.333 9.522 34.104 40.613 34.103 70.71 34.103C462.609 379.41 504 307.798 504 232 504 95.653 394.023 8 256 8zm-21.68 304.43c-22.249 0-36.07-15.623-36.07-40.771 0-44.993 30.779-72.729 58.63-72.729 22.292 0 35.601 15.241 35.601 40.77 0 45.061-33.875 72.73-58.161 72.73z`},null,-1)]])}var Z=q(J,[[`render`,X]]),Q={},ne={class:`k-icon check`,xmlns:`http://www.w3.org/2000/svg`,viewBox:`0 0 448 512`};function re(e,t){return x(),m(`svg`,ne,[...t[0]||=[h(`path`,{fill:`currentColor`,d:`M438.6 105.4C451.1 117.9 451.1 138.1 438.6 150.6L182.6 406.6C170.1 419.1 149.9 419.1 137.4 406.6L9.372 278.6C-3.124 266.1-3.124 245.9 9.372 233.4C21.87 220.9 42.13 220.9 54.63 233.4L159.1 338.7L393.4 105.4C405.9 92.88 426.1 92.88 438.6 105.4H438.6z`},null,-1)]])}var ie=q(Q,[[`render`,re]]),ae={},oe={class:`k-icon k-icon-lock`,xmlns:`http://www.w3.org/2000/svg`,viewBox:`0 0 448 512`};function se(e,t){return x(),m(`svg`,oe,[...t[0]||=[h(`path`,{fill:`currentColor`,d:`M400 224h-24v-72C376 68.2 307.8 0 224 0S72 68.2 72 152v72H48c-26.5 0-48 21.5-48 48v192c0 26.5 21.5 48 48 48h352c26.5 0 48-21.5 48-48V272c0-26.5-21.5-48-48-48zm-104 0H152v-72c0-39.7 32.3-72 72-72s72 32.3 72 72v72z`},null,-1)]])}var ce=q(ae,[[`render`,se]]),le={},ue={class:`k-icon k-icon-sign-in`,xmlns:`http://www.w3.org/2000/svg`,viewBox:`0 0 512 512`};function de(e,t){return x(),m(`svg`,ue,[...t[0]||=[h(`path`,{fill:`currentColor`,d:`M384 256c0-8.188-3.125-16.38-9.375-22.62l-128-128C237.5 96.22 223.7 93.47 211.8 98.44C199.8 103.4 192 115.1 192 128v64H48C21.49 192 0 213.5 0 240v32C0 298.5 21.49 320 48 320H192v64c0 12.94 7.797 24.62 19.75 29.56c11.97 4.969 25.72 2.219 34.88-6.938l128-128C380.9 272.4 384 264.2 384 256zM224 384V288H48C39.18 288 32 280.8 32 272v-32C32 231.2 39.18 224 48 224H224L223.1 128l128 128L224 384zM432 32h-96C327.2 32 320 39.16 320 48S327.2 64 336 64h96C458.5 64 480 85.53 480 112v288c0 26.47-21.53 48-48 48h-96c-8.844 0-16 7.156-16 16s7.156 16 16 16h96c44.13 0 80-35.88 80-80v-288C512 67.88 476.1 32 432 32z`},null,-1)]])}var fe=q(le,[[`render`,de]]),pe={},me={class:`k-icon k-icon-sign-out`,xmlns:`http://www.w3.org/2000/svg`,viewBox:`0 0 512 512`};function he(e,t){return x(),m(`svg`,me,[...t[0]||=[h(`path`,{fill:`currentColor`,d:`M176 448h-96C53.53 448 32 426.5 32 400v-288C32 85.53 53.53 64 80 64h96C184.8 64 192 56.84 192 48S184.8 32 176 32h-96C35.88 32 0 67.88 0 112v288C0 444.1 35.88 480 80 480h96C184.8 480 192 472.8 192 464S184.8 448 176 448zM502.6 233.4l-128-128c-9.156-9.156-22.91-11.91-34.88-6.938C327.8 103.4 320 115.1 320 128l.0918 63.1L176 192C149.5 192 128 213.5 128 240v32C128 298.5 149.5 320 176 320l144.1-.001L320 384c0 12.94 7.797 24.62 19.75 29.56c11.97 4.969 25.72 2.219 34.88-6.938l128-128C508.9 272.4 512 264.2 512 256S508.9 239.6 502.6 233.4zM352 384V288H176C167.2 288 160 280.8 160 272v-32C160 231.2 167.2 224 176 224H352l-.0039-96l128 128L352 384z`},null,-1)]])}var ge=q(pe,[[`render`,he]]),_e={},ve={class:`k-icon`,xmlns:`http://www.w3.org/2000/svg`,viewBox:`0 0 512 512`};function ye(e,t){return x(),m(`svg`,ve,[...t[0]||=[h(`path`,{fill:`currentColor`,d:`M256 0C114.6 0 0 114.6 0 256s114.6 256 256 256s256-114.6 256-256S397.4 0 256 0zM256 480c-47.24 0-91.04-14.78-127.2-39.84C132.9 390.9 173.8 352 224 352h64c50.25 0 91.14 38.94 95.21 88.16C347 465.2 303.2 480 256 480zM411.7 416.7C397.6 361.3 347.7 320 288 320H224c-59.73 0-109.6 41.3-123.7 96.72C58.27 375.1 32 319 32 256c0-123.5 100.5-224 224-224s224 100.5 224 224C480 319 453.7 375.1 411.7 416.7zM256 128C211.8 128 176 163.8 176 208C176 252.2 211.8 288 256 288s80-35.82 80-80C336 163.8 300.2 128 256 128zM256 256C229.5 256 208 234.5 208 208S229.5 160 256 160s48 21.53 48 48S282.5 256 256 256z`},null,-1)]])}var be=q(_e,[[`render`,ye]]),$=v({__name:`login`,setup(e){return(e,t)=>{let n=w(`k-card`),r=w(`k-layout`);return x(),f(r,{main:`darker page-login`},{default:O(()=>[_(n,null,{default:O(()=>[_(G)]),_:1})]),_:1})}}}),xe={class:`k-schema-header`},Se={class:`header`},Ce={class:`left`},we={class:`right`},Te=v({__name:`profile`,setup(t){let n={platform:`平台账户`,password:`用户密码`},i=S({}),a=d(()=>e.object({name:e.string().description(`用户名`).default(M.value.name),password:e.string().role(`secret`).description(`密码`).default(M.value.password)}).description(`基本资料`));async function c(){return s.user=null,delete M.value.id,delete M.value.token,delete M.value.expiredAt,o(`user/logout`)}async function l(){try{await o(`user/update`,i.value),r.success(`修改成功！`),Object.assign(M.value,i.value),Object.assign(s.user,i.value),i.value={}}catch(e){r.error(e.message)}}let v=d(()=>s.user?.bindings.filter(e=>s.user.id===e.bid)),y=d(()=>[{icon:`check`,label:`应用更改`,disabled:!i.value||!Object.keys(i.value).length,action:l},{type:`danger`,icon:`sign-out`,label:`退出登录`,action:c}]);return(e,t)=>{let r=w(`k-form`),c=w(`el-button`),l=w(`k-content`),d=w(`k-layout`);return x(),f(d,{main:`page-profile`,menu:y.value},{default:O(()=>[_(l,null,{default:O(()=>[_(r,{schema:a.value,modelValue:i.value,"onUpdate:modelValue":t[0]||=e=>i.value=e},null,8,[`schema`,`modelValue`]),h(`h2`,xe,[t[3]||=g(` 平台绑定 `,-1),_(c,{solid:``,class:`right`,onClick:t[1]||=e=>N.value=!0},{default:O(()=>[...t[2]||=[g(`添加`,-1)]]),_:1})]),(x(!0),m(u,null,C(E(s).user.bindings,({platform:e,pid:n,bid:r})=>(x(),m(`div`,{class:`k-schema-item`,key:`${e}:${n}`},[h(`div`,Se,[h(`div`,Ce,T(e)+` (`+T(n)+`)`,1),h(`div`,we,[v.value.length>1||r!==E(s).user.id?(x(),f(c,{key:0,onClick:A(t=>E(o)(`user/unbind`,e,n),[`stop`,`prevent`])},{default:O(()=>[...t[4]||=[g(`解绑`,-1)]]),_:1},8,[`onClick`])):p(`v-if`,!0)])])]))),128)),t[6]||=h(`h2`,{class:`k-schema-header`},`登录历史`,-1),h(`ul`,null,[(x(!0),m(u,null,C(E(s).user.tokens,({inc:e,type:r,createdAt:i,lastUsedAt:a,address:s,userAgent:l})=>(x(),m(`li`,{key:e},[h(`div`,null,`登录类型：`+T(n[r]),1),h(`div`,null,`登录时间：`+T(i),1),h(`div`,null,`最后访问：`+T(a),1),h(`div`,null,`IP 地址：`+T(s),1),h(`div`,null,`客户端：`+T(l),1),h(`div`,null,[_(c,{onClick:t=>E(o)(`user/delete-token`,e)},{default:O(()=>[...t[5]||=[g(`移除会话`,-1)]]),_:1},8,[`onClick`])])]))),128))])]),_:1})]),_:1},8,[`menu`])}}}),Ee=q(v({__name:`sync-dialog`,setup(e){let t=c();async function n(e){if(M.value.sync=!!e,P.value=!1,e){if(e===`download`){t.value=s.user.config;return}try{await o(`user/update`,{config:t.value})}catch(e){r.error(e.message)}}}return(e,r)=>{let i=w(`el-button`),a=w(`el-button-group`),o=w(`el-dialog`);return x(),f(o,{class:`sync-dialog`,onClose:r[3]||=e=>E(t).sync??=!1,"show-close":!1,"close-on-click-modal":!1,"close-on-press-escape":!1,modelValue:E(P),"onUpdate:modelValue":r[4]||=e=>b(P)?P.value=e:null},{default:O(()=>[r[8]||=h(`p`,{class:`text-center`},`检测到你本地的配置与云端不同步，是否同步配置？`,-1),_(a,{class:`text-center`},{default:O(()=>[_(i,{onClick:r[0]||=e=>n(`upload`)},{default:O(()=>[...r[5]||=[g(`上传当前配置`,-1)]]),_:1}),_(i,{onClick:r[1]||=e=>n(`download`)},{default:O(()=>[...r[6]||=[g(`下载云端配置`,-1)]]),_:1}),_(i,{onClick:r[2]||=e=>n()},{default:O(()=>[...r[7]||=[g(`关闭配置同步`,-1)]]),_:1})]),_:1})]),_:1},8,[`modelValue`])}}}),[[`__scopeId`,`data-v-440ef018`]]);n.register(`at`,Z),n.register(`check`,ie),n.register(`lock`,ce),n.register(`sign-in`,fe),n.register(`sign-out`,ge),n.register(`user-full`,be);var De=n=>{let{token:l,id:u,expiredAt:d}=M.value;l&&u!==void 0&&d!==void 0&&d>Date.now()&&o(`login/token`,u,l).catch(e=>r.error(e.message)),n.on(`activity`,e=>{let t=e.authority??0;return t>0&&(!s.user||s.user.authority<t)}),n.scope.disposables.push(a.beforeEach(e=>{let{activity:t}=e.meta;if(t){if((t.authority||(t.fields??[]).includes(`user`))&&!s.user)return history.state.forward===`/login`?`/`:`/login`;if(t.authority&&s.user&&t.authority>s.user.authority)return r.error(`权限不足。`),!1}})),n.page({path:`/login`,name:`登录`,icon:`sign-in`,position:`bottom`,order:500,disabled:()=>!!s.user,component:$}),n.page({path:`/profile`,name:`用户资料`,icon:`user-full`,fields:[`user`],position:`bottom`,order:500,component:Te}),n.slot({type:`global`,component:K}),n.slot({type:`global`,component:Ee}),n.settings({id:`user`,title:`用户设置`,component:v(()=>()=>y(w(`k-form`),{schema:e.object({sync:e.boolean().description(`在多个客户端间同步设置。`)}).description(`同步设置`),initial:M.value,modelValue:M.value,"onUpdate:modelValue":e=>M.value=e}))});let f=c();function p(){s.user&&(t(s.user.config,f.value)||(P.value=!0))}n.on(`dispose`,D(f,async e=>{!e||!s.user||!M.value.sync||await o(`user/update`,{config:e})},{deep:!0})),n.on(`dispose`,D(()=>M.value.sync,async e=>{e&&s.user&&p()})),n.on(`dispose`,D(()=>s.user,(e,t)=>{if(N.value=!1,!e)return a.push(`/login`);if(M.value.sync&&p(),t)return;Object.assign(M.value,i(e,[`id`,`name`,`token`,`expiredAt`])),r.success(`欢迎回来，${e.name||`Koishi 用户`}！`);let n=a.currentRoute.value.redirectedFrom;n&&!n.path.startsWith(`/login`)?a.push(n):a.push(`/profile`)}))};export{De as default};

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@koishi-ce/plugin-auth",
     "description": "Console User Authentication",
-    "version": "1.0.1",
+    "version": "1.0.2",
     "type": "module",
     "main": "lib/index.mjs",
     "typings": "lib/index.d.ts",
@@ -54,7 +54,7 @@
         "@koishi-ce/koishi": "^1.0.0"
     },
     "devDependencies": {
-        "@koishi-ce/client": "^1.0.3",
+        "@koishi-ce/client": "^1.0.4",
         "vue": "^3.5.12",
         "vue-router": "^5.2.0"
     },

package/src/__tests__/index.test.ts

@@ -11,12 +11,35 @@
  * 令牌删除 / 登出 / 资料更新 / 解绑等用户管理事件。
  */
 
-import { afterAll, beforeAll, describe, expect, it } from "bun:test";
-import { createHash, pbkdf2Sync, randomBytes } from "node:crypto";
+import {
+	afterAll,
+	beforeAll,
+	describe,
+	expect,
+	it,
+} from "bun:test";
+import {
+	createHash,
+	pbkdf2Sync,
+	randomBytes,
+} from "node:crypto";
 import type { IncomingMessage } from "node:http";
-import { type Client, Console, type Entry } from "@koishi-ce/console";
-import { App, type Plugin, Time, type Universal } from "@koishi-ce/koishi";
-import auth, { type Auth, randomId } from "@koishi-ce/plugin-auth";
+import {
+	type Client,
+	Console,
+	type Entry,
+} from "@koishi-ce/console";
+import {
+	App,
+	Logger,
+	type Plugin,
+	Time,
+	type Universal,
+} from "@koishi-ce/koishi";
+import auth, {
+	type Auth,
+	randomId,
+} from "@koishi-ce/plugin-auth";
 import mockClient from "@koishi-ce/plugin-mock";
 import memory from "@koishijs/plugin-database-memory";
 
@@ -42,21 +65,32 @@ interface SentMessage {
 class FakeSocket {
 	sent: string[] = [];
 	// message 与 close 的监听器统一为同构签名（never 载荷），保证集合存取类型一致
-	private messageHandlers = new Set<(event: never) => void>();
+	private messageHandlers = new Set<
+		(event: never) => void
+	>();
 	private closeHandlers = new Set<(event: never) => void>();
 
 	send(data: string) {
 		this.sent.push(data);
 	}
 
-	addEventListener(type: string, listener: (event: never) => void) {
-		if (type === "message") this.messageHandlers.add(listener);
+	addEventListener(
+		type: string,
+		listener: (event: never) => void,
+	) {
+		if (type === "message")
+			this.messageHandlers.add(listener);
 		if (type === "close") this.closeHandlers.add(listener);
 	}
 
-	removeEventListener(type: string, listener: (event: never) => void) {
-		if (type === "message") this.messageHandlers.delete(listener);
-		if (type === "close") this.closeHandlers.delete(listener);
+	removeEventListener(
+		type: string,
+		listener: (event: never) => void,
+	) {
+		if (type === "message")
+			this.messageHandlers.delete(listener);
+		if (type === "close")
+			this.closeHandlers.delete(listener);
 	}
 
 	receive(text: string) {
@@ -67,7 +101,8 @@ class FakeSocket {
 
 	shutdown() {
 		// close 监听器签名统一带 never 载荷，调用时补占位实参
-		for (const handler of this.closeHandlers) handler(undefined as never);
+		for (const handler of this.closeHandlers)
+			handler(undefined as never);
 	}
 
 	get socket(): Universal.WebSocket {
@@ -90,15 +125,23 @@ function tick(ms = 30) {
 class TestConsole extends Console {
 	resolveEntry(files: Entry.Files, key: string): string[] {
 		const list =
-			typeof files === "string" || Array.isArray(files) ? files : files.prod;
+			typeof files === "string" || Array.isArray(files)
+				? files
+				: files.prod;
 		return [String(list), key];
 	}
 
-	acceptClient(socket: Universal.WebSocket, request: IncomingMessage): Client {
+	acceptClient(
+		socket: Universal.WebSocket,
+		request: IncomingMessage,
+	): Client {
 		let accepted: Client | undefined;
-		const dispose = this.ctx.on("console/connection", (client) => {
-			accepted = client;
-		});
+		const dispose = this.ctx.on(
+			"console/connection",
+			(client) => {
+				accepted = client;
+			},
+		);
 		this.accept(socket, request);
 		dispose();
 		if (!accepted) throw new Error("client not accepted");
@@ -112,7 +155,10 @@ class TestClient {
 	readonly client: Client;
 	private nextId = 0;
 
-	constructor(service: TestConsole, headers: Record<string, string> = {}) {
+	constructor(
+		service: TestConsole,
+		headers: Record<string, string> = {},
+	) {
 		this.client = service.acceptClient(
 			this.socket.socket,
 			fakeRequest(headers),
@@ -120,13 +166,18 @@ class TestClient {
 	}
 
 	/** 发起一次 RPC 并轮询等待回执（PBKDF2 校验耗时较长，固定等待不可靠） */
-	async call(type: string, args: unknown[], timeout = 5000) {
+	async call(
+		type: string,
+		args: unknown[],
+		timeout = 5000,
+	) {
 		const id = ++this.nextId;
 		this.socket.receive(JSON.stringify({ type, args, id }));
 		const deadline = Date.now() + timeout;
 		for (;;) {
 			const response = this.messages().find(
-				(msg) => msg.type === "response" && msg.body.id === id,
+				(msg) =>
+					msg.type === "response" && msg.body.id === id,
 			);
 			if (response) return response.body;
 			if (Date.now() > deadline) {
@@ -139,7 +190,10 @@ class TestClient {
 	/** 最近一条 user 数据消息 */
 	lastUserData() {
 		const data = this.messages()
-			.filter((msg) => msg.type === "data" && msg.body.key === "user")
+			.filter(
+				(msg) =>
+					msg.type === "data" && msg.body.key === "user",
+			)
 			.at(-1);
 		return data?.body.value as
 			| (Auth & { tokens: unknown[] })
@@ -148,7 +202,9 @@ class TestClient {
 	}
 
 	messages(): SentMessage[] {
-		return this.socket.sent.map((line) => JSON.parse(line) as SentMessage);
+		return this.socket.sent.map(
+			(line) => JSON.parse(line) as SentMessage,
+		);
 	}
 
 	close() {
@@ -161,9 +217,15 @@ const app = new App();
 app.plugin(memory as unknown as typeof memory.default);
 app.plugin(mockClient);
 // Console 基类的 static inject 是 cordis 3 旧形态，与 Plugin.Constructor 期待类型不兼容，仅做类型层转型
-app.plugin(TestConsole as unknown as Plugin.Constructor<App>);
+app.plugin(
+	TestConsole as unknown as Plugin.Constructor<App>,
+);
 app.plugin(auth, {
-	admin: { enabled: true, username: "root", password: "admin-pass" },
+	admin: {
+		enabled: true,
+		username: "root",
+		password: "admin-pass",
+	},
 	authTokenExpire: Time.week,
 	loginTokenExpire: Time.minute * 5,
 });
@@ -173,12 +235,18 @@ let aliceId = 0;
 let bobId = 0;
 
 beforeAll(async () => {
+	// 「creating admin account」是启动期一次性生命周期 info，收敛为仅错误级
+	(Logger.levels as Record<string, number>)["auth"] = 1;
 	await app.start();
 	// alice：用于平台验证码登录；bob：用于绑定改挂场景
-	const alice = await app.database.createUser("mock", "111", {
-		name: "alice",
-		authority: 2,
-	});
+	const alice = await app.database.createUser(
+		"mock",
+		"111",
+		{
+			name: "alice",
+			authority: 2,
+		},
+	);
 	const bob = await app.database.createUser("mock", "222", {
 		name: "bob",
 		authority: 1,
@@ -194,6 +262,7 @@ afterAll(async () => {
 	}
 	await tick();
 	await app.stop();
+	delete (Logger.levels as Record<string, number>)["auth"];
 });
 
 /** 以管理员身份登录并返回客户端 */
@@ -202,16 +271,23 @@ async function loginAdmin() {
 		"user-agent": "test-agent",
 		"x-forwarded-for": "1.2.3.4",
 	});
-	await client.call("login/password", ["root", "admin-pass"]);
+	await client.call("login/password", [
+		"root",
+		"admin-pass",
+	]);
 	return client;
 }
 
 describe("@koishi-ce/plugin-auth", () => {
 	it("启动时创建管理员账户；randomId 生成随机令牌", async () => {
-		const [admin] = await app.database.get("user", { id: 0 });
+		const [admin] = await app.database.get("user", {
+			id: 0,
+		});
 		expect(admin?.name).toBe("root");
 		expect(admin?.authority).toBe(5);
-		expect(admin?.password?.startsWith("pbkdf2$")).toBe(true);
+		expect(admin?.password?.startsWith("pbkdf2$")).toBe(
+			true,
+		);
 		expect(randomId(8)).toMatch(/^[0-9a-zA-Z]{8}$/);
 		expect(randomId()).toHaveLength(40);
 	});
@@ -219,9 +295,15 @@ describe("@koishi-ce/plugin-auth", () => {
 	describe("密码登录", () => {
 		it("密码错误与账户缺失时拒绝", async () => {
 			const client = new TestClient(service());
-			const wrong = await client.call("login/password", ["root", "wrong-pass"]);
+			const wrong = await client.call("login/password", [
+				"root",
+				"wrong-pass",
+			]);
 			expect(wrong.error).toContain("用户名或密码错误");
-			const missing = await client.call("login/password", ["nobody", "x"]);
+			const missing = await client.call("login/password", [
+				"nobody",
+				"x",
+			]);
 			expect(missing.error).toContain("用户名或密码错误");
 			client.close();
 		});
@@ -256,8 +338,12 @@ describe("@koishi-ce/plugin-auth", () => {
 		});
 
 		it("旧版无盐 SHA-256 哈希校验通过后透明升级", async () => {
-			const legacy = createHash("sha256").update("legacy-pass").digest("hex");
-			await app.database.set("user", 0, { password: legacy });
+			const legacy = createHash("sha256")
+				.update("legacy-pass")
+				.digest("hex");
+			await app.database.set("user", 0, {
+				password: legacy,
+			});
 
 			const client = new TestClient(service());
 			const response = await client.call("login/password", [
@@ -265,36 +351,59 @@ describe("@koishi-ce/plugin-auth", () => {
 				"legacy-pass",
 			]);
 			expect(response.error).toBeUndefined();
-			const [row] = await app.database.get("user", { id: 0 }, ["password"]);
-			expect(row?.password?.startsWith("pbkdf2$")).toBe(true);
+			const [row] = await app.database.get(
+				"user",
+				{ id: 0 },
+				["password"],
+			);
+			expect(row?.password?.startsWith("pbkdf2$")).toBe(
+				true,
+			);
 			client.close();
 		});
 
 		it("畸形哈希与空密码一律拒绝", async () => {
-			await app.database.set("user", 0, { password: "pbkdf2$malformed" });
+			await app.database.set("user", 0, {
+				password: "pbkdf2$malformed",
+			});
 			const malformed = new TestClient(service());
 			expect(
-				(await malformed.call("login/password", ["root", "x"])).error,
+				(
+					await malformed.call("login/password", [
+						"root",
+						"x",
+					])
+				).error,
 			).toContain("用户名或密码错误");
 			malformed.close();
 
-			await app.database.set("user", 0, { password: "not-a-hash-at-all" });
+			await app.database.set("user", 0, {
+				password: "not-a-hash-at-all",
+			});
 			const alien = new TestClient(service());
 			expect(
-				(await alien.call("login/password", ["root", "x"])).error,
+				(await alien.call("login/password", ["root", "x"]))
+					.error,
 			).toContain("用户名或密码错误");
 			alien.close();
 
 			await app.database.set("user", 0, { password: "" });
 			const empty = new TestClient(service());
 			expect(
-				(await empty.call("login/password", ["root", "x"])).error,
+				(await empty.call("login/password", ["root", "x"]))
+					.error,
 			).toContain("用户名或密码错误");
 			empty.close();
 
 			// 还原为合法管理员密码（与插件同格式的 PBKDF2 哈希）供后续用例使用
 			const salt = randomBytes(16);
-			const dk = pbkdf2Sync("admin-pass", salt, 600_000, 32, "sha256");
+			const dk = pbkdf2Sync(
+				"admin-pass",
+				salt,
+				600_000,
+				32,
+				"sha256",
+			);
 			await app.database.set("user", 0, {
 				password: `pbkdf2$600000$${salt.toString("hex")}$${dk.toString("hex")}`,
 			});
@@ -308,11 +417,16 @@ describe("@koishi-ce/plugin-auth", () => {
 			expect(token).toBeTruthy();
 
 			const client = new TestClient(service());
-			const response = await client.call("login/token", [0, token]);
+			const response = await client.call("login/token", [
+				0,
+				token,
+			]);
 			expect(response.error).toBeUndefined();
 			expect(client.client.auth?.id).toBe(0);
 
-			const [row] = await app.database.get("token", { token: token! });
+			const [row] = await app.database.get("token", {
+				token: token!,
+			});
 			expect(row?.lastUsedAt?.valueOf()).toBeGreaterThan(
 				row?.createdAt?.valueOf() ?? 0,
 			);
@@ -344,13 +458,28 @@ describe("@koishi-ce/plugin-auth", () => {
 
 			const client = new TestClient(service());
 			expect(
-				(await client.call("login/token", [0, "expired-token"])).error,
+				(
+					await client.call("login/token", [
+						0,
+						"expired-token",
+					])
+				).error,
 			).toContain("令牌已失效");
 			expect(
-				(await client.call("login/token", [0, "no-such-token"])).error,
+				(
+					await client.call("login/token", [
+						0,
+						"no-such-token",
+					])
+				).error,
 			).toContain("令牌已失效");
 			expect(
-				(await client.call("login/token", [999, "ghost-token"])).error,
+				(
+					await client.call("login/token", [
+						999,
+						"ghost-token",
+					])
+				).error,
 			).toContain("用户不存在");
 			client.close();
 		});
@@ -360,22 +489,39 @@ describe("@koishi-ce/plugin-auth", () => {
 		it("账户不存在或已绑定同一账户时拒绝", async () => {
 			const client = new TestClient(service());
 			expect(
-				(await client.call("login/platform", ["mock", "404"])).error,
+				(
+					await client.call("login/platform", [
+						"mock",
+						"404",
+					])
+				).error,
 			).toContain("找不到此账户");
 
 			client.client.auth = { id: aliceId } as Auth;
 			expect(
-				(await client.call("login/platform", ["mock", "111"])).error,
+				(
+					await client.call("login/platform", [
+						"mock",
+						"111",
+					])
+				).error,
 			).toContain("你已经绑定了此账户");
 			client.close();
 		});
 
 		it("未登录客户端经验证码完成登录", async () => {
 			const client = new TestClient(service());
-			const result = await client.call("login/platform", ["mock", "111"]);
+			const result = await client.call("login/platform", [
+				"mock",
+				"111",
+			]);
 			expect(result.error).toBeUndefined();
-			expect(result.value).toMatchObject({ id: aliceId, name: "alice" });
-			const code = (result.value as { token: string }).token;
+			expect(result.value).toMatchObject({
+				id: aliceId,
+				name: "alice",
+			});
+			const code = (result.value as { token: string })
+				.token;
 			expect(code).toMatch(/^\d{6}$/);
 
 			// 无关消息不消费验证码状态
@@ -396,9 +542,13 @@ describe("@koishi-ce/plugin-auth", () => {
 			const client = new TestClient(service());
 			// 已登录为 alice，把 bob 的平台账号绑到 alice 名下
 			client.client.auth = { id: aliceId } as Auth;
-			const result = await client.call("login/platform", ["mock", "222"]);
+			const result = await client.call("login/platform", [
+				"mock",
+				"222",
+			]);
 			expect(result.error).toBeUndefined();
-			const code = (result.value as { token: string }).token;
+			const code = (result.value as { token: string })
+				.token;
 
 			const user = app.mock.client("222");
 			await user.receive(code);
@@ -417,10 +567,15 @@ describe("@koishi-ce/plugin-auth", () => {
 			const keep = app.auth.config.loginTokenExpire;
 			app.auth.config.loginTokenExpire = 50;
 			const client = new TestClient(service());
-			const result = await client.call("login/platform", ["mock", "111"]);
+			const result = await client.call("login/platform", [
+				"mock",
+				"111",
+			]);
 			expect(result.error).toBeUndefined();
 			// 等待超时回调执行（状态清理与否取决于到期判定，此处验证回调不抛错）
-			await new Promise((resolve) => setTimeout(resolve, 150));
+			await new Promise((resolve) =>
+				setTimeout(resolve, 150),
+			);
 			client.close();
 			app.auth.config.loginTokenExpire = keep;
 		});
@@ -428,15 +583,19 @@ describe("@koishi-ce/plugin-auth", () => {
 
 	describe("权限拦截（console/intercept）", () => {
 		it("按登录态与权限等级拦截事件", async () => {
-			app.console.addListener("test/admin-only", () => "secret", {
-				authority: 4,
-			});
+			app.console.addListener(
+				"test/admin-only",
+				() => "secret",
+				{
+					authority: 4,
+				},
+			);
 
 			// 未登录：拦截
 			const anonymous = new TestClient(service());
-			expect((await anonymous.call("test/admin-only", [])).error).toBe(
-				"unauthorized",
-			);
+			expect(
+				(await anonymous.call("test/admin-only", [])).error,
+			).toBe("unauthorized");
 			anonymous.close();
 
 			// 权限不足：拦截
@@ -447,9 +606,9 @@ describe("@koishi-ce/plugin-auth", () => {
 				expiredAt: Date.now() + Time.hour,
 				token: "t",
 			} as Auth;
-			expect((await low.call("test/admin-only", [])).error).toBe(
-				"unauthorized",
-			);
+			expect(
+				(await low.call("test/admin-only", [])).error,
+			).toBe("unauthorized");
 			low.close();
 
 			// 令牌过期：拦截
@@ -460,14 +619,16 @@ describe("@koishi-ce/plugin-auth", () => {
 				expiredAt: Date.now() - 1,
 				token: "t",
 			} as Auth;
-			expect((await expired.call("test/admin-only", [])).error).toBe(
-				"unauthorized",
-			);
+			expect(
+				(await expired.call("test/admin-only", [])).error,
+			).toBe("unauthorized");
 			expired.close();
 
 			// 管理员：放行
 			const admin = await loginAdmin();
-			expect((await admin.call("test/admin-only", [])).value).toBe("secret");
+			expect(
+				(await admin.call("test/admin-only", [])).value,
+			).toBe("secret");
 			admin.close();
 		});
 	});
@@ -475,21 +636,29 @@ describe("@koishi-ce/plugin-auth", () => {
 	describe("用户管理事件", () => {
 		it("user/delete-token 删除指定会话", async () => {
 			const anonymous = new TestClient(service());
-			expect((await anonymous.call("user/delete-token", [1])).error).toContain(
-				"请先登录",
-			);
+			expect(
+				(await anonymous.call("user/delete-token", [1]))
+					.error,
+			).toContain("请先登录");
 			anonymous.close();
 
 			const admin = await loginAdmin();
 			const [row] = await app.database.get("token", {
 				token: admin.client.auth!.token,
 			});
-			const bad = await admin.call("user/delete-token", [99999]);
+			const bad = await admin.call(
+				"user/delete-token",
+				[99999],
+			);
 			expect(bad.error).toContain("令牌不存在");
 
-			const ok = await admin.call("user/delete-token", [row?.inc]);
+			const ok = await admin.call("user/delete-token", [
+				row?.inc,
+			]);
 			expect(ok.error).toBeUndefined();
-			const [removed] = await app.database.get("token", { inc: row!.inc });
+			const [removed] = await app.database.get("token", {
+				inc: row!.inc,
+			});
 			expect(removed).toBeUndefined();
 			admin.close();
 		});
@@ -500,7 +669,9 @@ describe("@koishi-ce/plugin-auth", () => {
 			const response = await admin.call("user/logout", []);
 			expect(response.error).toBeUndefined();
 			// 令牌已被删除，其它设备无法再用它续期（loginAdmin 成功后令牌必存在）
-			const [row] = await app.database.get("token", { token: token! });
+			const [row] = await app.database.get("token", {
+				token: token!,
+			});
 			expect(row).toBeUndefined();
 			// 移植偏差说明：上游 logout 以 setAuth(this, null) 显式清空登录态，
 			// 本仓改为传 undefined，命中 setAuth 的默认参数（沿用 client.auth），
@@ -522,20 +693,32 @@ describe("@koishi-ce/plugin-auth", () => {
 		it("user/update 修改资料（密码加哈希、配置透传）", async () => {
 			const anonymous = new TestClient(service());
 			expect(
-				(await anonymous.call("user/update", [{ name: "x" }])).error,
+				(
+					await anonymous.call("user/update", [
+						{ name: "x" },
+					])
+				).error,
 			).toContain("请先登录");
 			anonymous.close();
 
 			const admin = await loginAdmin();
 			const response = await admin.call("user/update", [
-				{ name: "renamed", password: "new-pass", config: { theme: "dark" } },
+				{
+					name: "renamed",
+					password: "new-pass",
+					config: { theme: "dark" },
+				},
 			]);
 			expect(response.error).toBeUndefined();
 			// passive 更新：本地登录态同步但不推送数据
 			expect(admin.client.auth?.name).toBe("renamed");
-			const [row] = await app.database.get("user", { id: 0 });
+			const [row] = await app.database.get("user", {
+				id: 0,
+			});
 			expect(row?.name).toBe("renamed");
-			expect(row?.password?.startsWith("pbkdf2$")).toBe(true);
+			expect(row?.password?.startsWith("pbkdf2$")).toBe(
+				true,
+			);
 			expect(row?.config).toEqual({ theme: "dark" });
 			admin.close();
 		});
@@ -543,13 +726,21 @@ describe("@koishi-ce/plugin-auth", () => {
 		it("user/unbind 解绑平台账号的三种分支", async () => {
 			const anonymous = new TestClient(service());
 			expect(
-				(await anonymous.call("user/unbind", ["mock", "111"])).error,
+				(
+					await anonymous.call("user/unbind", [
+						"mock",
+						"111",
+					])
+				).error,
 			).toContain("请先登录");
 			anonymous.close();
 
 			// 以 alice 身份登录
 			const alice = new TestClient(service());
-			const grant = await alice.call("login/platform", ["mock", "111"]);
+			const grant = await alice.call("login/platform", [
+				"mock",
+				"111",
+			]);
 			const code = (grant.value as { token: string }).token;
 			await app.mock.client("111").receive(code);
 			await tick();
@@ -557,12 +748,14 @@ describe("@koishi-ce/plugin-auth", () => {
 
 			// 绑定不存在
 			expect(
-				(await alice.call("user/unbind", ["mock", "000"])).error,
+				(await alice.call("user/unbind", ["mock", "000"]))
+					.error,
 			).toContain("绑定不存在");
 
 			// 仅剩一个自绑定（主账号）：拒绝解绑
 			expect(
-				(await alice.call("user/unbind", ["mock", "111"])).error,
+				(await alice.call("user/unbind", ["mock", "111"]))
+					.error,
 			).toContain("无法解除绑定");
 
 			// 追加第二个自绑定后可解绑
@@ -573,7 +766,8 @@ describe("@koishi-ce/plugin-auth", () => {
 				pid: "333",
 			});
 			expect(
-				(await alice.call("user/unbind", ["mock", "333"])).error,
+				(await alice.call("user/unbind", ["mock", "333"]))
+					.error,
 			).toBeUndefined();
 			const [gone] = await app.database.get("binding", {
 				platform: "mock",
@@ -589,7 +783,8 @@ describe("@koishi-ce/plugin-auth", () => {
 				pid: "444",
 			});
 			expect(
-				(await alice.call("user/unbind", ["mock", "444"])).error,
+				(await alice.call("user/unbind", ["mock", "444"]))
+					.error,
 			).toBeUndefined();
 			const [moved] = await app.database.get("binding", {
 				platform: "mock",

package/src/index.ts

@@ -19,7 +19,10 @@ import {
 	timingSafeEqual,
 } from "node:crypto";
 import { resolve } from "node:path";
-import type { Client, DataService } from "@koishi-ce/console";
+import type {
+	Client,
+	DataService,
+} from "@koishi-ce/console";
 import {
 	type Binding,
 	type Context,
@@ -66,10 +69,22 @@ declare module "@koishi-ce/console" {
 			platform: string,
 			pid: string,
 		): Promise<UserLogin>;
-		"login/password"(this: Client, name: string, password: string): void;
-		"login/token"(this: Client, id: number, token: string): void;
+		"login/password"(
+			this: Client,
+			name: string,
+			password: string,
+		): void;
+		"login/token"(
+			this: Client,
+			id: number,
+			token: string,
+		): void;
 		"user/delete-token"(this: Client, inc: number): void;
-		"user/unbind"(this: Client, platform: string, pid: string): void;
+		"user/unbind"(
+			this: Client,
+			platform: string,
+			pid: string,
+		): void;
 		"user/update"(this: Client, data: UserUpdate): void;
 		"user/logout"(this: Client): void;
 	}
@@ -120,18 +135,24 @@ const letters =
 export function randomId(length = 40) {
 	return Array(length)
 		.fill(0)
-		.map(() => letters[Math.floor(Math.random() * letters.length)])
+		.map(
+			() =>
+				letters[Math.floor(Math.random() * letters.length)],
+		)
 		.join("");
 }
 
 /** login/platform 事件的返回值：待登录用户信息 + 一次性验证码及其过期时间。 */
-export interface UserLogin extends Pick<User, "id" | "name"> {
+export interface UserLogin
+	extends Pick<User, "id" | "name"> {
 	token: string;
 	expiredAt: number;
 }
 
 /** user/update 事件允许修改的用户字段。 */
-export type UserUpdate = Partial<Pick<User, "name" | "password" | "config">>;
+export type UserUpdate = Partial<
+	Pick<User, "name" | "password" | "config">
+>;
 
 /** PBKDF2-HMAC-SHA256 迭代次数（OWASP 2023 建议 600k；登录低频，开销可接受） */
 const PBKDF2_ROUNDS = 600_000;
@@ -139,7 +160,13 @@ const PBKDF2_ROUNDS = 600_000;
 /** 新格式密码哈希：`pbkdf2$<rounds>$<salt-hex>$<dk-hex>`（加盐 + 慢哈希）。 */
 function toHash(password: string) {
 	const salt = randomBytes(16);
-	const dk = pbkdf2Sync(password, salt, PBKDF2_ROUNDS, 32, "sha256");
+	const dk = pbkdf2Sync(
+		password,
+		salt,
+		PBKDF2_ROUNDS,
+		32,
+		"sha256",
+	);
 	return `pbkdf2$${PBKDF2_ROUNDS}$${salt.toString("hex")}$${dk.toString("hex")}`;
 }
 
@@ -151,7 +178,10 @@ function toHash(password: string) {
  * - 64 位十六进制旧格式：历史上无盐 SHA-256，仅用于校验（命中后由调用方
  *   透明升级为 PBKDF2），同样以恒定时间比较。
  */
-function verifyPassword(password: string, stored: string): boolean {
+function verifyPassword(
+	password: string,
+	stored: string,
+): boolean {
 	if (stored.startsWith("pbkdf2$")) {
 		const [, rounds, saltHex, dkHex] = stored.split("$");
 		if (!rounds || !saltHex || !dkHex) return false;
@@ -171,8 +201,13 @@ function verifyPassword(password: string, stored: string): boolean {
 	// 命中后由调用方透明升级为 PBKDF2；新建密码一律走 toHash（pbkdf2$ 格式），
 	// 故此处非弱哈希存储，属误报（Default setup 不支持注释抑制，须在平台 dismiss）。
 	if (!/^[0-9a-f]{64}$/i.test(stored)) return false;
-	const actual = createHash("sha256").update(password).digest();
-	return timingSafeEqual(actual, Buffer.from(stored, "hex"));
+	const actual = createHash("sha256")
+		.update(password)
+		.digest();
+	return timingSafeEqual(
+		actual,
+		Buffer.from(stored, "hex"),
+	);
 }
 
 /**
@@ -189,37 +224,41 @@ class AuthService extends Service {
 	// 的导出值迁为静态成员(合并到 class 的 namespace 本就编译为静态属性,运行时等价)
 	static filter = false;
 
-	static Admin: Schema<AuthService.Admin> = Schema.intersect([
-		Schema.object({
-			enabled: Schema.boolean().default(true),
-		}),
-		Schema.union([
+	static Admin: Schema<AuthService.Admin> =
+		Schema.intersect([
 			Schema.object({
-				enabled: Schema.const(true),
-				username: Schema.string().default("admin"),
-				password: Schema.string().role("secret").required(),
+				enabled: Schema.boolean().default(true),
 			}),
-			Schema.object({}),
-		]),
-	]);
-
-	static Config: Schema<AuthService.Config> = Schema.intersect([
-		Schema.object({
-			admin: AuthService.Admin,
-		}),
-		Schema.object({
-			authTokenExpire: Schema.natural()
-				.role("ms")
-				.default(Time.week)
-				.min(Time.hour),
-			loginTokenExpire: Schema.natural()
-				.role("ms")
-				.default(Time.minute * 10)
-				.min(Time.minute),
-		}),
-	]).i18n({
-		"zh-CN": zhCN,
-	});
+			Schema.union([
+				Schema.object({
+					enabled: Schema.const(true),
+					username: Schema.string().default("admin"),
+					password: Schema.string()
+						.role("secret")
+						.required(),
+				}),
+				Schema.object({}),
+			]),
+		]);
+
+	static Config: Schema<AuthService.Config> =
+		Schema.intersect([
+			Schema.object({
+				admin: AuthService.Admin,
+			}),
+			Schema.object({
+				authTokenExpire: Schema.natural()
+					.role("ms")
+					.default(Time.week)
+					.min(Time.hour),
+				loginTokenExpire: Schema.natural()
+					.role("ms")
+					.default(Time.minute * 10)
+					.min(Time.minute),
+			}),
+		]).i18n({
+			"zh-CN": zhCN,
+		});
 
 	// Service 基类已声明 config(T = any),此处覆盖为插件配置类型
 	override config: AuthService.Config;
@@ -267,7 +306,8 @@ class AuthService extends Service {
 
 	/** 启动时按配置确保管理员账户（id = 0）存在。 */
 	override async start() {
-		const { enabled, username, password } = this.config.admin;
+		const { enabled, username, password } =
+			this.config.admin;
 		if (!enabled) return;
 		this.ctx.logger.info("creating admin account");
 		// enabled 分支的 Schema 已保证 username/password 存在(默认 admin / required),
@@ -291,24 +331,42 @@ class AuthService extends Service {
 	 * @param passive 为 true 时只写 client.auth，不推送数据也不刷新
 	 *   （已登录状态下修改资料后仅同步本地时使用）
 	 */
-	async setAuth(client: Client, auth = client.auth, passive = false) {
+	async setAuth(
+		client: Client,
+		auth = client.auth,
+		passive = false,
+	) {
 		client.auth = auth;
 		if (passive) return;
 		if (auth) {
-			const bindings = await this.ctx.database.get("binding", { aid: auth.id });
+			const bindings = await this.ctx.database.get(
+				"binding",
+				{ aid: auth.id },
+			);
 			// 下发前剥离服务端字段;minato 模型字段必填,需按可删除的形状断言
-			bindings.forEach((binding) => delete (binding as Partial<Binding>).aid);
-			const tokens = await this.ctx.database.get("token", { id: auth.id });
+			bindings.forEach(
+				(binding) =>
+					delete (binding as Partial<Binding>).aid,
+			);
+			const tokens = await this.ctx.database.get("token", {
+				id: auth.id,
+			});
 			tokens.reverse().forEach((login) => {
 				delete (login as Partial<LoginToken>).id;
 				delete (login as Partial<LoginToken>).token;
 			});
 			client.send({
 				type: "data",
-				body: { key: "user", value: { ...auth, bindings, tokens } },
+				body: {
+					key: "user",
+					value: { ...auth, bindings, tokens },
+				},
 			});
 		} else {
-			client.send({ type: "data", body: { key: "user", value: null } });
+			client.send({
+				type: "data",
+				body: { key: "user", value: null },
+			});
 		}
 		client.ctx.emit("console/connection", client);
 		client.refresh();
@@ -322,7 +380,10 @@ class AuthService extends Service {
 	async createToken(
 		client: Client,
 		type: LoginType,
-		user: Pick<User, "id" | "name" | "authority" | "config">,
+		user: Pick<
+			User,
+			"id" | "name" | "authority" | "config"
+		>,
 	) {
 		// WebSocket 升级连接必带 HTTP 请求对象(见 console 服务端构造 Client 处)
 		const { headers, socket } = client.request;
@@ -330,8 +391,10 @@ class AuthService extends Service {
 		const lastUsedAt = new Date();
 		const userAgent = headers["user-agent"]?.toString();
 		const address =
-			headers["x-forwarded-for"]?.toString() || socket.remoteAddress;
-		const expiredAt = Date.now() + this.config.authTokenExpire;
+			headers["x-forwarded-for"]?.toString() ||
+			socket.remoteAddress;
+		const expiredAt =
+			Date.now() + this.config.authTokenExpire;
 		const token = randomId();
 		// 请求头字段可能缺失,undefined 由 minato 归一化为 NULL 落库,不做默认值替换
 		await this.ctx.database.create("token", {
@@ -344,7 +407,11 @@ class AuthService extends Service {
 			userAgent: userAgent as string,
 			address: address as string,
 		});
-		await this.setAuth(client, { ...user, expiredAt, token });
+		await this.setAuth(client, {
+			...user,
+			expiredAt,
+			token,
+		});
 	}
 
 	/** 注册全部登录 / 用户管理事件与权限拦截逻辑（构造时调用）。 */
@@ -353,46 +420,67 @@ class AuthService extends Service {
 		const { ctx, config } = this;
 		// 平台验证码登录的进行中状态：键为 `${platform}:${userId}`，
 		// 值为 [验证码, 过期时间, 发起登录的客户端]
-		const states: Record<string, [string, number, Client]> = {};
+		const states: Record<string, [string, number, Client]> =
+			{};
 
 		// 用户密码登录：校验通过后签发新令牌；
 		// 命中旧的无盐 SHA-256 存储时透明升级为 PBKDF2
-		ctx.console.addListener("login/password", async function (name, password) {
-			const [user] = await ctx.database.get("user", { name }, [
-				"password",
-				"name",
-				"id",
-				"authority",
-				"config",
-			]);
-			if (!user?.password || !verifyPassword(password, user.password))
-				throw new Error("用户名或密码错误。");
-			if (!user.password.startsWith("pbkdf2$")) {
-				await ctx.database.set("user", user.id, {
-					password: toHash(password),
-				});
-			}
-			await self.createToken(this, "password", omit(user, ["password"]));
-		});
+		ctx.console.addListener(
+			"login/password",
+			async function (name, password) {
+				const [user] = await ctx.database.get(
+					"user",
+					{ name },
+					["password", "name", "id", "authority", "config"],
+				);
+				if (
+					!user?.password ||
+					!verifyPassword(password, user.password)
+				)
+					throw new Error("用户名或密码错误。");
+				if (!user.password.startsWith("pbkdf2$")) {
+					await ctx.database.set("user", user.id, {
+						password: toHash(password),
+					});
+				}
+				await self.createToken(
+					this,
+					"password",
+					omit(user, ["password"]),
+				);
+			},
+		);
 
 		// 已存令牌续期登录：本地记录的令牌未过期即恢复登录态，
 		// 同时刷新该令牌的最后访问时间
-		ctx.console.addListener("login/token", async function (aid, token) {
-			const [data] = await ctx.database.get("token", { id: aid, token }, [
-				"expiredAt",
-			]);
-			if (!data || data.expiredAt <= Date.now())
-				throw new Error("令牌已失效。");
-			const [user] = await ctx.database.get("user", { id: aid }, [
-				"id",
-				"name",
-				"authority",
-				"config",
-			]);
-			if (!user) throw new Error("用户不存在。");
-			await ctx.database.set("token", { token }, { lastUsedAt: new Date() });
-			await self.setAuth(this, { ...user, ...data, token });
-		});
+		ctx.console.addListener(
+			"login/token",
+			async function (aid, token) {
+				const [data] = await ctx.database.get(
+					"token",
+					{ id: aid, token },
+					["expiredAt"],
+				);
+				if (!data || data.expiredAt <= Date.now())
+					throw new Error("令牌已失效。");
+				const [user] = await ctx.database.get(
+					"user",
+					{ id: aid },
+					["id", "name", "authority", "config"],
+				);
+				if (!user) throw new Error("用户不存在。");
+				await ctx.database.set(
+					"token",
+					{ token },
+					{ lastUsedAt: new Date() },
+				);
+				await self.setAuth(this, {
+					...user,
+					...data,
+					token,
+				});
+			},
+		);
 
 		// 平台账户登录（第一步）：校验平台账号存在后生成一次性验证码，
 		// 用户把验证码发给任意机器人即可完成登录/绑定（见下方中间件）。
@@ -400,16 +488,19 @@ class AuthService extends Service {
 		ctx.console.addListener(
 			"login/platform",
 			async function (platform, userId) {
-				const user = await ctx.database.getUser(platform, userId, [
-					"id",
-					"name",
-				]);
+				const user = await ctx.database.getUser(
+					platform,
+					userId,
+					["id", "name"],
+				);
 				if (!user) throw new Error("找不到此账户。");
-				if (this.auth?.id === user.id) throw new Error("你已经绑定了此账户。");
+				if (this.auth?.id === user.id)
+					throw new Error("你已经绑定了此账户。");
 
 				const key = `${platform}:${userId}`;
 				const token = Math.random().toString().slice(2, 8);
-				const expiredAt = Date.now() + config.loginTokenExpire;
+				const expiredAt =
+					Date.now() + config.loginTokenExpire;
 				states[key] = [token, expiredAt, this];
 
 				// 客户端断开或验证码超时即作废本次登录状态
@@ -424,7 +515,12 @@ class AuthService extends Service {
 				}, config.loginTokenExpire);
 				this.socket.addEventListener("close", listener);
 
-				return { id: user.id, name: user.name, token, expiredAt };
+				return {
+					id: user.id,
+					name: user.name,
+					token,
+					expiredAt,
+				};
 			},
 		);
 
@@ -459,65 +555,99 @@ class AuthService extends Service {
 
 		// 拦截带 authority 要求的 console 事件：未登录、令牌过期或
 		// 权限不足时拒绝（返回 true 表示拦截）
-		ctx.on("console/intercept", async (client, listener) => {
-			if (!listener.authority) return false;
-			if (!client.auth) return true;
-			if (client.auth.expiredAt <= Date.now()) return true;
-			if (client.auth.authority < listener.authority) return true;
-			return false;
-		});
+		ctx.on(
+			"console/intercept",
+			async (client, listener) => {
+				if (!listener.authority) return false;
+				if (!client.auth) return true;
+				if (client.auth.expiredAt <= Date.now())
+					return true;
+				if (client.auth.authority < listener.authority)
+					return true;
+				return false;
+			},
+		);
 
 		// 删除指定登录会话（登出其它设备）
-		ctx.console.addListener("user/delete-token", async function (inc) {
-			if (!this.auth) throw new Error("请先登录。");
-			const [data] = await ctx.database.get("token", { id: this.auth.id, inc });
-			if (!data) throw new Error("令牌不存在。");
-			await ctx.database.remove("token", { inc });
-			await self.setAuth(this);
-		});
+		ctx.console.addListener(
+			"user/delete-token",
+			async function (inc) {
+				if (!this.auth) throw new Error("请先登录。");
+				const [data] = await ctx.database.get("token", {
+					id: this.auth.id,
+					inc,
+				});
+				if (!data) throw new Error("令牌不存在。");
+				await ctx.database.remove("token", { inc });
+				await self.setAuth(this);
+			},
+		);
 
 		// 退出登录：删除当前令牌并清除登录态
-		ctx.console.addListener("user/logout", async function () {
-			if (this.auth) {
-				await ctx.database.remove("token", { token: this.auth.token });
-			}
-			await self.setAuth(this, undefined);
-		});
+		ctx.console.addListener(
+			"user/logout",
+			async function () {
+				if (this.auth) {
+					await ctx.database.remove("token", {
+						token: this.auth.token,
+					});
+				}
+				await self.setAuth(this, undefined);
+			},
+		);
 
 		// 修改用户资料（用户名 / 密码 / 配置），密码先哈希再落库
-		ctx.console.addListener("user/update", async function (data) {
-			if (!this.auth) throw new Error("请先登录。");
-			if (data.password) data.password = toHash(data.password);
-			await ctx.database.set("user", { id: this.auth.id }, data);
-			Object.assign(this.auth, data);
-			await self.setAuth(this, undefined, true);
-		});
+		ctx.console.addListener(
+			"user/update",
+			async function (data) {
+				if (!this.auth) throw new Error("请先登录。");
+				if (data.password)
+					data.password = toHash(data.password);
+				await ctx.database.set(
+					"user",
+					{ id: this.auth.id },
+					data,
+				);
+				Object.assign(this.auth, data);
+				await self.setAuth(this, undefined, true);
+			},
+		);
 
 		// 解绑平台账号：绑到别的用户时改指回其主账号；是自身主账号且
 		// 仅剩一个自绑定时拒绝解绑（避免用户失去登录途径），否则删除记录
-		ctx.console.addListener("user/unbind", async function (platform, pid) {
-			if (!this.auth) throw new Error("请先登录。");
-			const bindings = await ctx.database.get("binding", { aid: this.auth.id });
-			// 客户端仅对已列出的绑定发起解绑,查找必命中,未命中视为异常状态
-			const binding = bindings.find(
-				(item) => item.platform === platform && item.pid === pid,
-			);
-			if (!binding) throw new Error("绑定不存在。");
-			if (binding.aid !== binding.bid) {
-				await ctx.database.set(
-					"binding",
-					{ platform, pid },
-					{ aid: binding.bid },
+		ctx.console.addListener(
+			"user/unbind",
+			async function (platform, pid) {
+				if (!this.auth) throw new Error("请先登录。");
+				const bindings = await ctx.database.get("binding", {
+					aid: this.auth.id,
+				});
+				// 客户端仅对已列出的绑定发起解绑,查找必命中,未命中视为异常状态
+				const binding = bindings.find(
+					(item) =>
+						item.platform === platform && item.pid === pid,
 				);
-			} else if (
-				bindings.filter((item) => item.aid === item.bid).length === 1
-			) {
-				throw new Error("无法解除绑定。");
-			} else {
-				await ctx.database.remove("binding", { platform, pid });
-			}
-			await self.setAuth(this);
-		});
+				if (!binding) throw new Error("绑定不存在。");
+				if (binding.aid !== binding.bid) {
+					await ctx.database.set(
+						"binding",
+						{ platform, pid },
+						{ aid: binding.bid },
+					);
+				} else if (
+					bindings.filter((item) => item.aid === item.bid)
+						.length === 1
+				) {
+					throw new Error("无法解除绑定。");
+				} else {
+					await ctx.database.remove("binding", {
+						platform,
+						pid,
+					});
+				}
+				await self.setAuth(this);
+			},
+		);
 	}
 }