@waline/vercel 1.37.0 → 1.39.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@waline/vercel",
-  "version": "1.37.0",
+  "version": "1.39.0",
   "description": "vercel server for waline comment system",
   "keywords": [
     "blog",
@@ -43,6 +43,7 @@
     "nunjucks": "^3.2.4",
     "phpass": "^0.1.1",
     "prismjs": "^1.30.0",
+    "rss": "^1.2.2",
     "speakeasy": "^2.0.0",
     "think-helper": "^1.1.4",
     "think-logger3": "^1.4.0",

package/src/config/config.js

@@ -48,11 +48,12 @@ const {
   COMMENT_AUDIT,
 } = process.env;
 
-let storage = 'leancloud';
-let jwtKey = JWT_TOKEN || LEAN_KEY;
+let storage = null;
+let jwtKey = JWT_TOKEN;
 
 if (LEAN_KEY) {
   storage = 'leancloud';
+  jwtKey = jwtKey || LEAN_KEY;
 } else if (MONGO_DB) {
   storage = 'mongodb';
   jwtKey = jwtKey || MONGO_PASSWORD;
@@ -75,6 +76,10 @@ if (LEAN_KEY) {
   jwtKey = jwtKey || TENCENTCLOUD_SECRETKEY || TCB_KEY || TCB_ENV;
 }
 
+if (storage === null) {
+  throw new Error('No valid storage found. Please check your environment variables.');
+}
+
 if (think.env === 'cloudbase' && storage === 'sqlite') {
   throw new Error("You can't use SQLite in CloudBase platform.");
 }

package/src/controller/comment/rss.js

@@ -0,0 +1,158 @@
+const RSS = require('rss');
+const BaseRest = require('../rest.js');
+const { getMarkdownParser } = require('../../service/markdown/index.js');
+
+const markdownParser = getMarkdownParser();
+
+const isHttpUrl = (value) => /^(https?:)?\/\//i.test(value);
+
+const buildAbsoluteUrl = (baseUrl, path) => {
+  if (!path) return baseUrl || '';
+  if (isHttpUrl(path)) return path;
+  if (!baseUrl) return path;
+  const normalizedBase = baseUrl.endsWith('/') ? baseUrl.slice(0, -1) : baseUrl;
+  const normalizedPath = path.startsWith('/') ? path : `/${path}`;
+
+  return `${normalizedBase}${normalizedPath}`;
+};
+
+const buildRssXml = ({ title, link, description, items }) => {
+  const channelLink = link || '';
+  const now = new Date().toUTCString();
+
+  const feed = new RSS({
+    title,
+    description,
+    site_url: channelLink,
+    pubDate: now,
+  });
+
+  items.forEach((item) => {
+    feed.item({
+      title: item.title || 'Comment',
+      description: item.description,
+      url: item.link || '',
+      guid: item.guid || item.link || '',
+      date: item.pubDate || now,
+    });
+  });
+
+  return feed.xml({ indent: true });
+};
+
+const setRssResponse = (ctx, xml) => {
+  ctx.set('Content-Type', 'application/rss+xml; charset=utf-8');
+  ctx.body = xml;
+};
+
+module.exports = class extends BaseRest {
+  constructor(ctx) {
+    super(ctx);
+    this.modelInstance = this.getModel('Comment');
+  }
+
+  async getAction() {
+    const { path, email, user_id: userId, count } = this.get();
+    const limit = Number.isFinite(Number(count)) ? Number(count) : 20;
+    const safeLimit = Math.min(Math.max(limit, 1), 50);
+
+    const siteUrl = process.env.SITE_URL || this.ctx.serverURL;
+    const siteName = process.env.SITE_NAME || 'Waline';
+
+    const where = {
+      status: ['NOT IN', ['waiting', 'spam']],
+    };
+
+    if (path) {
+      where.url = path;
+    } else if (email || userId) {
+      const parentWhere = {
+        status: ['NOT IN', ['waiting', 'spam']],
+      };
+
+      if (email && userId) {
+        parentWhere._complex = {
+          _logic: 'or',
+          mail: email,
+          user_id: userId,
+        };
+      } else if (email) {
+        parentWhere.mail = email;
+      } else if (userId) {
+        parentWhere.user_id = userId;
+      }
+
+      const parents = await this.modelInstance.select(parentWhere, {});
+      const parentIds = parents.map(({ objectId }) => objectId).filter(Boolean);
+
+      if (parentIds.length === 0) {
+        setRssResponse(
+          this.ctx,
+          buildRssXml({
+            title: `${siteName} Reply Comments`,
+            link: siteUrl,
+            description: 'Recent reply comments.',
+            items: [],
+          }),
+        );
+        return;
+      }
+
+      where.pid = ['IN', parentIds];
+    }
+
+    const comments = await this.modelInstance.select(where, {
+      desc: 'insertedAt',
+      limit: safeLimit,
+      field: ['comment', 'insertedAt', 'link', 'nick', 'url', 'user_id'],
+    });
+
+    const userModel = this.getModel('Users');
+    const userIds = [...new Set(comments.map(({ user_id }) => user_id).filter(Boolean))];
+    let users = [];
+
+    if (userIds.length > 0) {
+      users = await userModel.select(
+        { objectId: ['IN', userIds] },
+        { field: ['display_name', 'url'] },
+      );
+    }
+
+    const items = comments.map((comment) => {
+      const user = users.find(({ objectId }) => objectId === comment.user_id);
+      const nick = user?.display_name || comment.nick || 'Anonymous';
+      const commentUrl = buildAbsoluteUrl(siteUrl, comment.url);
+      const itemLink = commentUrl ? `${commentUrl}#${comment.objectId}` : '';
+      const description = markdownParser(comment.comment || '');
+
+      return {
+        title: `${nick} commented${comment.url ? ` on ${comment.url}` : ''}`,
+        link: itemLink || commentUrl,
+        guid: comment.objectId,
+        pubDate: new Date(comment.insertedAt).toUTCString(),
+        description,
+      };
+    });
+
+    const title = path
+      ? `${siteName} Comments for ${path}`
+      : email || userId
+        ? `${siteName} Reply Comments`
+        : `${siteName} Recent Comments`;
+    const description = path
+      ? `Recent comments for ${path}.`
+      : email || userId
+        ? 'Recent reply comments.'
+        : 'Recent comments.';
+
+    setRssResponse(
+      this.ctx,
+      buildRssXml({
+        title,
+        link: siteUrl,
+        description,
+        items,
+      }),
+    );
+  }
+};

package/src/controller/token.js

@@ -17,7 +17,9 @@ module.exports = class extends BaseRest {
     const { email, password, code } = this.post();
     const user = await this.modelInstance.select({ email });
 
-    if (think.isEmpty(user) || /^verify:/i.test(user[0].type)) {
+    const isVerifyUser = /^verify:/i.test(user?.[0]?.type);
+    const isBannedUser = user?.[0]?.type === 'banned';
+    if (think.isEmpty(user) || isVerifyUser || isBannedUser) {
       return this.fail();
     }
 

package/src/controller/user.js

@@ -179,6 +179,27 @@ module.exports = class UserController extends BaseRest {
     return this.success();
   }
 
+  async deleteAction() {
+    const users = await this.modelInstance.select({
+      objectId: this.id,
+    });
+
+    if (think.isEmpty(users)) {
+      return this.fail();
+    }
+
+    const user = users[0];
+    const isVerifyUser = /^verify:/i.test(user.type);
+
+    if (isVerifyUser) {
+      await this.modelInstance.delete({ objectId: this.id });
+    } else {
+      await this.modelInstance.update({ type: 'banned' }, { objectId: this.id });
+    }
+
+    return this.success();
+  }
+
   // oxlint-disable-next-line max-statements
   async getUsersListByCount() {
     const { pageSize } = this.get();

package/src/locales/de.json

@@ -0,0 +1,19 @@
+{
+  "import data format not support!": "Dateiformat wird nicht unterstützt",
+  "USER_EXIST": "Benutzer existiert bereits",
+  "USER_NOT_EXIST": "Benutzer existiert nicht",
+  "USER_REGISTERED": "Benutzer bereits registriert",
+  "TOKEN_EXPIRED": "Token ist abgelaufen",
+  "TWO_FACTOR_AUTH_ERROR_DETAIL": "Fehler bei der Zwei-Faktor-Authentifizierung",
+  "[{{name | safe}}] Registration Confirm Mail": "【{{name | safe}}】 Registrierungsbestätigung",
+  "Please click <a href=\"{{url}}\">{{url}}<a/> to confirm registration, the link is valid for 1 hour. If you are not registering, please ignore this email.": "Bitte klicken Sie auf <a href=\"{{url}}\">{{url}}</a>, um die Registrierung zu bestätigen. Der Link ist 1 Stunde gültig. Falls Sie sich nicht registriert haben, ignorieren Sie diese E-Mail.",
+  "[{{name | safe}}] Reset Password": "【{{name | safe}}】 Passwort zurücksetzen",
+  "Please click <a href=\"{{url}}\">{{url}}</a> to login and change your password as soon as possible!": "Bitte klicken Sie auf <a href=\"{{url}}\">{{url}}</a>, um sich anzumelden und Ihr Passwort so schnell wie möglich zu ändern!",
+  "Duplicate Content": "Doppelter Inhalt gesendet",
+  "Comment too fast": "Sie kommentieren zu schnell, bitte warten Sie einen Moment!",
+  "Registration confirm mail send failed, please {%- if isAdmin -%}check your mail configuration{%- else -%}check your email address and contact administrator{%- endif -%}.": "Fehler beim Senden der Registrierungsbestätigung. Bitte {%- if isAdmin -%}überprüfen Sie Ihre Mail-Konfiguration{%- else -%}prüfen Sie Ihre E-Mail-Adresse und kontaktieren Sie den Administrator{%- endif -%}.",
+  "MAIL_SUBJECT": "{{parent.nick | safe}}，Sie haben eine Antwort auf ' {{site.name | safe}} ' erhalten",
+  "MAIL_TEMPLATE": "<div style='border-top:2px solid #12ADDB;box-shadow:0 1px 3px #AAAAAA;line-height:180%;padding:0 15px 12px;margin:50px auto;font-size:12px;'> <h2 style='border-bottom:1px solid #DDD;font-size:14px;font-weight:normal;padding:13px 0 10px 8px;'> Ihr Kommentar auf <a style='text-decoration:none;color: #12ADDB;' href='{{site.url}}' target='_blank'>{{site.name}}</a> hat eine neue Antwort </h2>{{parent.nick}}, Sie haben kommentiert: <div style='padding:0 12px 0 12px;margin-top:18px'> <div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{parent.comment | safe}}</div><p><strong>{{self.nick}}</strong> hat geantwortet：</p><div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{self.comment | safe}}</div><p>Sie können die vollständige Antwort ansehen unter <a style='text-decoration:none; color:#12addb' href='{{site.postUrl}}' target='_blank'>hier</a> und besuchen Sie erneut <a style='text-decoration:none; color:#12addb' href='{{site.url}}' target='_blank'>{{site.name}}</a>.</p><br/> </div></div>",
+  "MAIL_SUBJECT_ADMIN": "Neue Kommentare auf {{site.name | safe}}",
+  "MAIL_TEMPLATE_ADMIN": "<div style='border-top:2px solid #12ADDB;box-shadow:0 1px 3px #AAAAAA;line-height:180%;padding:0 15px 12px;margin:50px auto;font-size:12px;'> <h2 style='border-bottom:1px solid #DDD;font-size:14px;font-weight:normal;padding:13px 0 10px 8px;'> Ihr Artikel auf <a style='text-decoration:none;color: #12ADDB;' href='{{site.url}}' target='_blank'>{{site.name}}</a> hat neue Kommentare </h2> <p><strong>{{self.nick}}</strong> hat geantwortet：</p><div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{self.comment | safe}}</div><p>Sie können die Antwort vollständig ansehen unter <a style='text-decoration:none; color:#12addb' href='{{site.postUrl}}' target='_blank'>hier</a></p><br/> </div>"
+}

package/src/locales/es.json

@@ -0,0 +1,19 @@
+{
+  "import data format not support!": "Formato de archivo no compatible",
+  "USER_EXIST": "El usuario ya existe",
+  "USER_NOT_EXIST": "El usuario no existe",
+  "USER_REGISTERED": "Usuario ya registrado",
+  "TOKEN_EXPIRED": "El token ha expirado",
+  "TWO_FACTOR_AUTH_ERROR_DETAIL": "Error de autenticación en dos pasos",
+  "[{{name | safe}}] Registration Confirm Mail": "【{{name | safe}}】Correo de confirmación de registro",
+  "Please click <a href=\"{{url}}\">{{url}}<a/> to confirm registration, the link is valid for 1 hour. If you are not registering, please ignore this email.": "Por favor haga clic en <a href=\"{{url}}\">{{url}}</a> para confirmar el registro. El enlace es válido por 1 hora. Si no se ha registrado, ignore este correo.",
+  "[{{name | safe}}] Reset Password": "【{{name | safe}}】Restablecer contraseña",
+  "Please click <a href=\"{{url}}\">{{url}}</a> to login and change your password as soon as possible!": "Por favor haga clic en <a href=\"{{url}}\">{{url}}</a> para iniciar sesión y cambiar su contraseña lo antes posible!",
+  "Duplicate Content": "Contenido duplicado enviado",
+  "Comment too fast": "Comentarios muy rápidos, por favor espere un momento!",
+  "Registration confirm mail send failed, please {%- if isAdmin -%}check your mail configuration{%- else -%}check your email address and contact administrator{%- endif -%}.": "Error al enviar el correo de confirmación. Por favor {%- if isAdmin -%}verifique su configuración de correo{%- else -%}verifique su dirección de correo y contacte al administrador{%- endif -%}.",
+  "MAIL_SUBJECT": "{{parent.nick | safe}}，Su comentario en '{{site.name | safe}}' ha recibido una respuesta",
+  "MAIL_TEMPLATE": "<div style='border-top:2px solid #12ADDB;box-shadow:0 1px 3px #AAAAAA;line-height:180%;padding:0 15px 12px;margin:50px auto;font-size:12px;'> <h2 style='border-bottom:1px solid #DDD;font-size:14px;font-weight:normal;padding:13px 0 10px 8px;'> Su comentario en <a style='text-decoration:none;color: #12ADDB;' href='{{site.url}}' target='_blank'>{{site.name}}</a> tiene una nueva respuesta </h2>{{parent.nick}}, usted comentó: <div style='padding:0 12px 0 12px;margin-top:18px'> <div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{parent.comment | safe}}</div><p><strong>{{self.nick}}</strong> respondió:</p><div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{self.comment | safe}}</div><p>Puedes ver la respuesta completa en <a style='text-decoration:none; color:#12addb' href='{{site.postUrl}}' target='_blank'>aquí</a>, y visita de nuevo <a style='text-decoration:none; color:#12addb' href='{{site.url}}' target='_blank'>{{site.name}}</a>.</p><br/> </div></div>",
+  "MAIL_SUBJECT_ADMIN": "Nuevo comentario en {{site.name | safe}}",
+  "MAIL_TEMPLATE_ADMIN": "<div style='border-top:2px solid #12ADDB;box-shadow:0 1px 3px #AAAAAA;line-height:180%;padding:0 15px 12px;margin:50px auto;font-size:12px;'> <h2 style='border-bottom:1px solid #DDD;font-size:14px;font-weight:normal;padding:13px 0 10px 8px;'> Su artículo en <a style='text-decoration:none;color: #12ADDB;' href='{{site.url}}' target='_blank'>{{site.name}}</a> tiene nuevos comentarios </h2> <p><strong>{{self.nick}}</strong> dijo:</p><div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{self.comment | safe}}</div><p>Puedes ver la respuesta completa en <a style='text-decoration:none; color:#12addb' href='{{site.postUrl}}' target='_blank'>aquí</a></p><br/> </div>"
+}

package/src/locales/fr.json

@@ -0,0 +1,19 @@
+{
+  "import data format not support!": "Format de fichier non pris en charge",
+  "USER_EXIST": "L'utilisateur existe déjà",
+  "USER_NOT_EXIST": "L'utilisateur n'existe pas",
+  "USER_REGISTERED": "Utilisateur déjà enregistré",
+  "TOKEN_EXPIRED": "Le jeton a expiré",
+  "TWO_FACTOR_AUTH_ERROR_DETAIL": "Échec de l'authentification à deux facteurs",
+  "[{{name | safe}}] Registration Confirm Mail": "【{{name | safe}}】Mail de confirmation d'inscription",
+  "Please click <a href=\"{{url}}\">{{url}}<a/> to confirm registration, the link is valid for 1 hour. If you are not registering, please ignore this email.": "Veuillez cliquer sur <a href=\"{{url}}\">{{url}}</a> pour confirmer l'inscription. Le lien est valable 1 heure. Si vous ne vous êtes pas inscrit, ignorez cet e-mail.",
+  "[{{name | safe}}] Reset Password": "【{{name | safe}}】Réinitialisation du mot de passe",
+  "Please click <a href=\"{{url}}\">{{url}}</a> to login and change your password as soon as possible!": "Veuillez cliquer sur <a href=\"{{url}}\">{{url}}</a> pour vous connecter et changer votre mot de passe dès que possible !",
+  "Duplicate Content": "Contenu dupliqué envoyé",
+  "Comment too fast": "Vous commentez trop rapidement, veuillez ralentir !",
+  "Registration confirm mail send failed, please {%- if isAdmin -%}check your mail configuration{%- else -%}check your email address and contact administrator{%- endif -%}.": "Échec de l'envoi du mail de confirmation. Veuillez {%- if isAdmin -%}vérifier votre configuration d'e-mail{%- else -%}vérifier votre adresse e-mail et contacter l'administrateur{%- endif -%}.",
+  "MAIL_SUBJECT": "{{parent.nick | safe}}，Votre commentaire sur '{{site.name | safe}}' a reçu une réponse",
+  "MAIL_TEMPLATE": "<div style='border-top:2px solid #12ADDB;box-shadow:0 1px 3px #AAAAAA;line-height:180%;padding:0 15px 12px;margin:50px auto;font-size:12px;'> <h2 style='border-bottom:1px solid #DDD;font-size:14px;font-weight:normal;padding:13px 0 10px 8px;'> Votre commentaire sur <a style='text-decoration:none;color: #12ADDB;' href='{{site.url}}' target='_blank'>{{site.name}}</a> a une nouvelle réponse </h2>{{parent.nick}}, vous avez commenté : <div style='padding:0 12px 0 12px;margin-top:18px'> <div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{parent.comment | safe}}</div><p><strong>{{self.nick}}</strong> a répondu :</p><div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{self.comment | safe}}</div><p>Vous pouvez voir la réponse complète <a style='text-decoration:none; color:#12addb' href='{{site.postUrl}}' target='_blank'>ici</a>, et revenez visiter <a style='text-decoration:none; color:#12addb' href='{{site.url}}' target='_blank'>{{site.name}}</a>.</p><br/> </div></div>",
+  "MAIL_SUBJECT_ADMIN": "Nouveau commentaire sur {{site.name | safe}}",
+  "MAIL_TEMPLATE_ADMIN": "<div style='border-top:2px solid #12ADDB;box-shadow:0 1px 3px #AAAAAA;line-height:180%;padding:0 15px 12px;margin:50px auto;font-size:12px;'> <h2 style='border-bottom:1px solid #DDD;font-size:14px;font-weight:normal;padding:13px 0 10px 8px;'> Votre article sur <a style='text-decoration:none;color: #12ADDB;' href='{{site.url}}' target='_blank'>{{site.name}}</a> a de nouveaux commentaires </h2> <p><strong>{{self.nick}}</strong> a écrit :</p><div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{self.comment | safe}}</div><p>Vous pouvez voir la réponse complète <a style='text-decoration:none; color:#12addb' href='{{site.postUrl}}' target='_blank'>ici</a></p><br/> </div>"
+}

package/src/locales/index.js

@@ -2,14 +2,33 @@ const en = require('./en.json');
 const it = require('./it.json');
 const zhCN = require('./zh-CN.json');
 const zhTW = require('./zh-TW.json');
+const jp = require('./jp.json');
+const koKR = require('./ko-KR.json');
+const de = require('./de.json');
+const esMX = require('./es.json');
+const fr = require('./fr.json');
+const ru = require('./ru.json');
+const vi = require('./vi-VN.json');
+const ptBR = require('./pt-BR.json');
 
 module.exports = {
   'zh-cn': zhCN,
   'zh-tw': zhTW,
   en: en,
   'en-us': en,
-  jp: en,
-  'jp-jp': en,
   it,
   'it-it': it,
+  jp,
+  'jp-jp': jp,
+  ko: koKR,
+  'ko-kr': koKR,
+  de,
+  esMX,
+  fr,
+  'fr-fr': fr,
+  ru,
+  'ru-ru': ru,
+  vi,
+  'vi-vn': vi,
+  'pt-br': ptBR,
 };

package/src/locales/jp.json

@@ -0,0 +1,19 @@
+{
+  "import data format not support!": "ファイル形式はサポートされていません",
+  "USER_EXIST": "ユーザーは既に存在します",
+  "USER_NOT_EXIST": "ユーザーが存在しません",
+  "USER_REGISTERED": "ユーザーは既に登録されています",
+  "TOKEN_EXPIRED": "トークンの有効期限が切れています",
+  "TWO_FACTOR_AUTH_ERROR_DETAIL": "二段階認証に失敗しました",
+  "[{{name | safe}}] Registration Confirm Mail": "【{{name | safe}}】 登録確認メール",
+  "Please click <a href=\"{{url}}\">{{url}}<a/> to confirm registration, the link is valid for 1 hour. If you are not registering, please ignore this email.": "登録を確認するには <a href=\"{{url}}\">{{url}}</a> をクリックしてください。リンクの有効期限は1時間です。登録していない場合は、このメールを無視してください。",
+  "[{{name | safe}}] Reset Password": "【{{name | safe}}】 パスワードリセット",
+  "Please click <a href=\"{{url}}\">{{url}}</a> to login and change your password as soon as possible!": "できるだけ早く <a href=\"{{url}}\">{{url}}</a> をクリックしてログインし、パスワードを変更してください！",
+  "Duplicate Content": "重複した内容が送信されました",
+  "Comment too fast": "コメントが速すぎます。少し待ってください！",
+  "Registration confirm mail send failed, please {%- if isAdmin -%}check your mail configuration{%- else -%}check your email address and contact administrator{%- endif -%}.": "登録確認メールの送信に失敗しました。{%- if isAdmin -%}メール設定を確認してください{%- else -%}メールアドレスを確認し、管理者に連絡してください{%- endif -%}。",
+  "MAIL_SUBJECT": "{{parent.nick | safe}}、『{{site.name | safe}}』にあなたのコメントへの返信があります",
+  "MAIL_TEMPLATE": "<div style='border-top:2px solid #12ADDB;box-shadow:0 1px 3px #AAAAAA;line-height:180%;padding:0 15px 12px;margin:50px auto;font-size:12px;'> <h2 style='border-bottom:1px solid #DDD;font-size:14px;font-weight:normal;padding:13px 0 10px 8px;'> <a style='text-decoration:none;color: #12ADDB;' href='{{site.url}}' target='_blank'>{{site.name}}</a> にあなたのコメントへの新しい返信があります </h2>{{parent.nick}}さん、あなたは次のようにコメントしました： <div style='padding:0 12px 0 12px;margin-top:18px'> <div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{parent.comment | safe}}</div><p><strong>{{self.nick}}</strong> が次のように返信しました：</p><div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{self.comment | safe}}</div><p>返信の全文は <a style='text-decoration:none; color:#12addb' href='{{site.postUrl}}' target='_blank'>こちら</a> で確認できます。<a style='text-decoration:none; color:#12addb' href='{{site.url}}' target='_blank'>{{site.name}}</a> にまたお越しください。</p><br/> </div></div>",
+  "MAIL_SUBJECT_ADMIN": "{{site.name | safe}} に新しいコメントがあります",
+  "MAIL_TEMPLATE_ADMIN": "<div style='border-top:2px solid #12ADDB;box-shadow:0 1px 3px #AAAAAA;line-height:180%;padding:0 15px 12px;margin:50px auto;font-size:12px;'> <h2 style='border-bottom:1px solid #DDD;font-size:14px;font-weight:normal;padding:13px 0 10px 8px;'> <a style='text-decoration:none;color: #12ADDB;' href='{{site.url}}' target='_blank'>{{site.name}}</a> に新しいコメントがあります </h2> <p><strong>{{self.nick}}</strong> が次のようにコメントしました：</p><div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{self.comment | safe}}</div><p>全文は <a style='text-decoration:none; color:#12addb' href='{{site.postUrl}}' target='_blank'>こちら</a> で確認できます。</p><br/> </div>"
+}

package/src/locales/ko-KR.json

@@ -0,0 +1,19 @@
+{
+  "import data format not support!": "가져오기 데이터 형식이 지원되지 않습니다!",
+  "USER_EXIST": "이미 존재하는 사용자입니다",
+  "USER_NOT_EXIST": "사용자가 존재하지 않습니다",
+  "USER_REGISTERED": "사용자가 등록되었습니다",
+  "TOKEN_EXPIRED": "토큰이 만료되었습니다",
+  "TWO_FACTOR_AUTH_ERROR_DETAIL": "2단계 인증 오류 상세",
+  "[{{name | safe}}] Registration Confirm Mail": "[{{name | safe}}] 가입 확인 메일",
+  "Please click <a href=\"{{url}}\">{{url}}<a/> to confirm registration, the link is valid for 1 hour. If you are not registering, please ignore this email.": "<a href=\"{{url}}\">{{url}}</a>을 클릭하여 가입을 확인해 주세요. 링크는 1시간 동안 유효합니다. 가입하지 않으셨다면 이 이메일을 무시해 주세요.",
+  "[{{name | safe}}] Reset Password": "[{{name | safe}}] 비밀번호 재설정",
+  "Please click <a href=\"{{url}}\">{{url}}</a> to login and change your password as soon as possible!": "<a href=\"{{url}}\">{{url}}</a>을 클릭하여 로그인하고 가능한 빨리 비밀번호를 변경해 주세요!",
+  "Duplicate Content": "중복된 내용",
+  "Comment too fast": "댓글 작성이 너무 빠릅니다",
+  "Registration confirm mail send failed, please {%- if isAdmin -%}check your mail configuration{%- else -%}check your email address and contact administrator{%- endif -%}.": "가입 확인 메일 발송에 실패했습니다. {%- if isAdmin -%}메일 설정을 확인해 주세요{%- else -%}이메일 주소를 확인하고 관리자에게 문의해 주세요{%- endif -%}.",
+  "MAIL_SUBJECT": "{{site.name | safe}}에서 댓글에 답글이 달렸습니다",
+  "MAIL_TEMPLATE": "<div style='border-top:2px solid #12ADDB;box-shadow:0 1px 3px #AAAAAA;line-height:180%;padding:0 15px 12px;margin:50px auto;font-size:12px;'> <h2 style='border-bottom:1px solid #DDD;font-size:14px;font-weight:normal;padding:13px 0 10px 8px;'> <a style='text-decoration:none;color: #12ADDB;' href='{{site.url}}' target='_blank'>{{site.name}}</a>에서 댓글에 답글이 달렸습니다 </h2>{{parent.nick}}님이 작성한 댓글: <div style='padding:0 12px 0 12px;margin-top:18px'> <div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{parent.comment | safe}}</div><p><strong>{{self.nick}}</strong>님이 답글을 남겼습니다:</p><div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{self.comment | safe}}</div><p><a style='text-decoration:none; color:#12addb' href='{{site.postUrl}}' target='_blank'>전체 답글 보기</a> 또는 <a style='text-decoration:none; color:#12addb' href='{{site.url}}' target='_blank'>{{site.name}}</a> 방문.</p><br/> </div></div>",
+  "MAIL_SUBJECT_ADMIN": "{{site.name | safe}}에 새 댓글이 달렸습니다",
+  "MAIL_TEMPLATE_ADMIN": "<div style='border-top:2px solid #12ADDB;box-shadow:0 1px 3px #AAAAAA;line-height:180%;padding:0 15px 12px;margin:50px auto;font-size:12px;'> <h2 style='border-bottom:1px solid #DDD;font-size:14px;font-weight:normal;padding:13px 0 10px 8px;'> <a style='text-decoration:none;color: #12ADDB;' href='{{site.url}}' target='_blank'>{{site.name}}</a>에 새 댓글이 달렸습니다 </h2> <p><strong>{{self.nick}}</strong>님이 작성했습니다:</p><div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{self.comment | safe}}</div><p><a style='text-decoration:none; color:#12addb' href='{{site.postUrl}}' target='_blank'>페이지 보기</a></p><br/></div>"
+}

package/src/locales/pt-BR.json

@@ -0,0 +1,19 @@
+{
+  "import data format not support!": "Formato de arquivo não suportado",
+  "USER_EXIST": "Usuário já existe",
+  "USER_NOT_EXIST": "Usuário não existe",
+  "USER_REGISTERED": "Usuário já registrado",
+  "TOKEN_EXPIRED": "Token expirou",
+  "TWO_FACTOR_AUTH_ERROR_DETAIL": "Erro de autenticação em dois fatores",
+  "[{{name | safe}}] Registration Confirm Mail": "【{{name | safe}}】Confirmação de registro",
+  "Please click <a href=\"{{url}}\">{{url}}<a/> to confirm registration, the link is valid for 1 hour. If you are not registering, please ignore this email.": "Por favor clique em <a href=\"{{url}}\">{{url}}</a> para confirmar o registro. O link é válido por 1 hora. Se você não está registrando, ignore este e-mail.",
+  "[{{name | safe}}] Reset Password": "【{{name | safe}}】Redefinir senha",
+  "Please click <a href=\"{{url}}\">{{url}}</a> to login and change your password as soon as possible!": "Por favor clique em <a href=\"{{url}}\">{{url}}</a> para entrar e alterar sua senha o quanto antes!",
+  "Duplicate Content": "Conteúdo duplicado enviado",
+  "Comment too fast": "Comentando rápido demais, por favor aguarde!",
+  "Registration confirm mail send failed, please {%- if isAdmin -%}check your mail configuration{%- else -%}check your email address and contact administrator{%- endif -%}.": "Falha ao enviar o e-mail de confirmação. Por favor {%- if isAdmin -%}verifique a configuração de e-mail{%- else -%}verifique seu endereço de e-mail e contate o administrador{%- endif -%}.",
+  "MAIL_SUBJECT": "{{parent.nick | safe}}，Seu comentário em '{{site.name | safe}}' recebeu uma resposta",
+  "MAIL_TEMPLATE": "<div style='border-top:2px solid #12ADDB;box-shadow:0 1px 3px #AAAAAA;line-height:180%;padding:0 15px 12px;margin:50px auto;font-size:12px;'> <h2 style='border-bottom:1px solid #DDD;font-size:14px;font-weight:normal;padding:13px 0 10px 8px;'> Seu comentário em <a style='text-decoration:none;color: #12ADDB;' href='{{site.url}}' target='_blank'>{{site.name}}</a> tem uma nova resposta </h2>{{parent.nick}}, você comentou: <div style='padding:0 12px 0 12px;margin-top:18px'> <div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{parent.comment | safe}}</div><p><strong>{{self.nick}}</strong> respondeu:</p><div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{self.comment | safe}}</div><p>Você pode ver a resposta completa em <a style='text-decoration:none; color:#12addb' href='{{site.postUrl}}' target='_blank'>aqui</a>, e visite novamente <a style='text-decoration:none; color:#12addb' href='{{site.url}}' target='_blank'>{{site.name}}</a>.</p><br/> </div></div>",
+  "MAIL_SUBJECT_ADMIN": "Novo comentário em {{site.name | safe}}",
+  "MAIL_TEMPLATE_ADMIN": "<div style='border-top:2px solid #12ADDB;box-shadow:0 1px 3px #AAAAAA;line-height:180%;padding:0 15px 12px;margin:50px auto;font-size:12px;'> <h2 style='border-bottom:1px solid #DDD;font-size:14px;font-weight:normal;padding:13px 0 10px 8px;'> Seu artigo em <a style='text-decoration:none;color: #12ADDB;' href='{{site.url}}' target='_blank'>{{site.name}}</a> tem novos comentários </h2> <p><strong>{{self.nick}}</strong> disse:</p><div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{self.comment | safe}}</div><p>Você pode ver a resposta completa em <a style='text-decoration:none; color:#12addb' href='{{site.postUrl}}' target='_blank'>aqui</a></p><br/> </div>"
+}

package/src/locales/ru.json

@@ -0,0 +1,19 @@
+{
+  "import data format not support!": "Формат файла не поддерживается",
+  "USER_EXIST": "Пользователь уже существует",
+  "USER_NOT_EXIST": "Пользователь не найден",
+  "USER_REGISTERED": "Пользователь уже зарегистрирован",
+  "TOKEN_EXPIRED": "Токен истёк",
+  "TWO_FACTOR_AUTH_ERROR_DETAIL": "Ошибка двухфакторной аутентификации",
+  "[{{name | safe}}] Registration Confirm Mail": "【{{name | safe}}】Письмо подтверждения регистрации",
+  "Please click <a href=\"{{url}}\">{{url}}<a/> to confirm registration, the link is valid for 1 hour. If you are not registering, please ignore this email.": "Пожалуйста, нажмите <a href=\"{{url}}\">{{url}}</a>, чтобы подтвердить регистрацию. Ссылка действительна 1 час. Если вы не регистрировались, проигнорируйте это письмо.",
+  "[{{name | safe}}] Reset Password": "【{{name | safe}}】Сброс пароля",
+  "Please click <a href=\"{{url}}\">{{url}}</a> to login and change your password as soon as possible!": "Пожалуйста, нажмите <a href=\"{{url}}\">{{url}}</a>, чтобы войти и сменить пароль как можно скорее!",
+  "Duplicate Content": "Дублированное содержание",
+  "Comment too fast": "Слишком быстрое комментирование, пожалуйста, замедлитесь!",
+  "Registration confirm mail send failed, please {%- if isAdmin -%}check your mail configuration{%- else -%}check your email address and contact administrator{%- endif -%}.": "Сбой отправки письма подтверждения регистрации. Пожалуйста, {%- if isAdmin -%}проверьте конфигурацию почты{%- else -%}проверьте адрес эл. почты и свяжитесь с администратором{%- endif -%}.",
+  "MAIL_SUBJECT": "{{parent.nick | safe}}，У вас есть ответ на комментарий в '{{site.name | safe}}'",
+  "MAIL_TEMPLATE": "<div style='border-top:2px solid #12ADDB;box-shadow:0 1px 3px #AAAAAA;line-height:180%;padding:0 15px 12px;margin:50px auto;font-size:12px;'> <h2 style='border-bottom:1px solid #DDD;font-size:14px;font-weight:normal;padding:13px 0 10px 8px;'> Ваш комментарий на <a style='text-decoration:none;color: #12ADDB;' href='{{site.url}}' target='_blank'>{{site.name}}</a> получил новый ответ </h2>{{parent.nick}}, вы писали: <div style='padding:0 12px 0 12px;margin-top:18px'> <div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{parent.comment | safe}}</div><p><strong>{{self.nick}}</strong> ответил:</p><div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{self.comment | safe}}</div><p>Просмотреть полный ответ можно по ссылке <a style='text-decoration:none; color:#12addb' href='{{site.postUrl}}' target='_blank'>здесь</a>, и посетите снова <a style='text-decoration:none; color:#12addb' href='{{site.url}}' target='_blank'>{{site.name}}</a>.</p><br/> </div></div>",
+  "MAIL_SUBJECT_ADMIN": "Новый комментарий на {{site.name | safe}}",
+  "MAIL_TEMPLATE_ADMIN": "<div style='border-top:2px solid #12ADDB;box-shadow:0 1px 3px #AAAAAA;line-height:180%;padding:0 15px 12px;margin:50px auto;font-size:12px;'> <h2 style='border-bottom:1px solid #DDD;font-size:14px;font-weight:normal;padding:13px 0 10px 8px;'> В вашей статье на <a style='text-decoration:none;color: #12ADDB;' href='{{site.url}}' target='_blank'>{{site.name}}</a> новый комментарий </h2> <p><strong>{{self.nick}}</strong> написал:</p><div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{self.comment | safe}}</div><p>Просмотреть полностью: <a style='text-decoration:none; color:#12addb' href='{{site.postUrl}}' target='_blank'>здесь</a></p><br/> </div>"
+}

package/src/locales/vi-VN.json

@@ -0,0 +1,19 @@
+{
+  "import data format not support!": "Định dạng tệp không được hỗ trợ",
+  "USER_EXIST": "Người dùng đã tồn tại",
+  "USER_NOT_EXIST": "Người dùng không tồn tại",
+  "USER_REGISTERED": "Người dùng đã đăng ký",
+  "TOKEN_EXPIRED": "Mã thông báo đã hết hạn",
+  "TWO_FACTOR_AUTH_ERROR_DETAIL": "Xác thực hai bước thất bại",
+  "[{{name | safe}}] Registration Confirm Mail": "【{{name | safe}}】 Thư xác nhận đăng ký",
+  "Please click <a href=\"{{url}}\">{{url}}<a/> to confirm registration, the link is valid for 1 hour. If you are not registering, please ignore this email.": "Vui lòng nhấp vào <a href=\"{{url}}\">{{url}}</a> để xác nhận đăng ký. Liên kết có hiệu lực trong 1 giờ. Nếu bạn không đăng ký, hãy bỏ qua email này.",
+  "[{{name | safe}}] Reset Password": "【{{name | safe}}】 Đặt lại mật khẩu",
+  "Please click <a href=\"{{url}}\">{{url}}</a> to login and change your password as soon as possible!": "Vui lòng nhấp vào <a href=\"{{url}}\">{{url}}</a> để đăng nhập và thay đổi mật khẩu càng sớm càng tốt!",
+  "Duplicate Content": "Nội dung trùng lặp đã được gửi",
+  "Comment too fast": "Bình luận quá nhanh, vui lòng chậm lại!",
+  "Registration confirm mail send failed, please {%- if isAdmin -%}check your mail configuration{%- else -%}check your email address and contact administrator{%- endif -%}.": "Gửi mail xác nhận đăng ký thất bại. Vui lòng {%- if isAdmin -%}kiểm tra cấu hình mail{%- else -%}kiểm tra địa chỉ email và liên hệ quản trị viên{%- endif -%}.",
+  "MAIL_SUBJECT": "{{parent.nick | safe}}，Bình luận của bạn trên '{{site.name | safe}}' đã có phản hồi",
+  "MAIL_TEMPLATE": "<div style='border-top:2px solid #12ADDB;box-shadow:0 1px 3px #AAAAAA;line-height:180%;padding:0 15px 12px;margin:50px auto;font-size:12px;'> <h2 style='border-bottom:1px solid #DDD;font-size:14px;font-weight:normal;padding:13px 0 10px 8px;'> Bình luận của bạn trên <a style='text-decoration:none;color: #12ADDB;' href='{{site.url}}' target='_blank'>{{site.name}}</a> đã có phản hồi </h2>{{parent.nick}}, bạn đã bình luận: <div style='padding:0 12px 0 12px;margin-top:18px'> <div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{parent.comment | safe}}</div><p><strong>{{self.nick}}</strong> trả lời:</p><div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{self.comment | safe}}</div><p>Bạn có thể xem phản hồi đầy đủ tại <a style='text-decoration:none; color:#12addb' href='{{site.postUrl}}' target='_blank'>đây</a>, và ghé thăm lại <a style='text-decoration:none; color:#12addb' href='{{site.url}}' target='_blank'>{{site.name}}</a>.</p><br/> </div></div>",
+  "MAIL_SUBJECT_ADMIN": "Bình luận mới trên {{site.name | safe}}",
+  "MAIL_TEMPLATE_ADMIN": "<div style='border-top:2px solid #12ADDB;box-shadow:0 1px 3px #AAAAAA;line-height:180%;padding:0 15px 12px;margin:50px auto;font-size:12px;'> <h2 style='border-bottom:1px solid #DDD;font-size:14px;font-weight:normal;padding:13px 0 10px 8px;'> Bài viết của bạn trên <a style='text-decoration:none;color: #12ADDB;' href='{{site.url}}' target='_blank'>{{site.name}}</a> có bình luận mới </h2> <p><strong>{{self.nick}}</strong> trả lời:</p><div style='background-color: #f5f5f5;padding: 10px 15px;margin:18px 0;word-wrap:break-word;'>{{self.comment | safe}}</div><p>Bạn có thể xem phản hồi đầy đủ tại <a style='text-decoration:none; color:#12addb' href='{{site.postUrl}}' target='_blank'>đây</a></p><br/> </div>"
+}

package/src/logic/base.js

@@ -95,7 +95,7 @@ module.exports = class BaseLogic extends think.Logic {
     }
 
     const user = await this.modelInstance.select(
-      { objectId: userId },
+      { objectId: userId, type: ['!=', 'banned'] },
       {
         field: [
           'id',

package/src/logic/comment/rss.js

@@ -0,0 +1,54 @@
+const Base = require('../base.js');
+
+module.exports = class extends Base {
+  /**
+   * @api {GET} /api/comment/rss Get site recent comments RSS
+   * @apiGroup Comment
+   * @apiVersion  0.0.1
+   *
+   * @apiParam  {String}  [count]  return comments number, default value is 20
+   *
+   * @apiHeader  {String}  Content-Type  application/rss+xml
+   * @apiSuccess  (200) {String}  body  RSS 2.0 xml content
+   */
+  /**
+   * @api {GET} /api/comment/rss?path= Get comments RSS for a path
+   * @apiGroup Comment
+   * @apiVersion  0.0.1
+   *
+   * @apiParam  {String}  path  comment url path
+   * @apiParam  {String}  [count]  return comments number, default value is 20
+   *
+   * @apiHeader  {String}  Content-Type  application/rss+xml
+   * @apiSuccess  (200) {String}  body  RSS 2.0 xml content
+   */
+  /**
+   * @api {GET} /api/comment/rss?email=&user_id= Get reply comments RSS for user
+   * @apiGroup Comment
+   * @apiVersion  0.0.1
+   *
+   * @apiParam  {String}  [email]  comment user email
+   * @apiParam  {String}  [user_id]  comment user id
+   * @apiParam  {String}  [count]  return comments number, default value is 20
+   *
+   * @apiHeader  {String}  Content-Type  application/rss+xml
+   * @apiSuccess  (200) {String}  body  RSS 2.0 xml content
+   */
+  getAction() {
+    this.rules = {
+      path: {
+        string: true,
+      },
+      email: {
+        email: true,
+      },
+      user_id: {
+        string: true,
+      },
+      count: {
+        int: { max: 50 },
+        default: 20,
+      },
+    };
+  }
+};

package/src/logic/user.js

@@ -121,4 +121,29 @@ module.exports = class extends Base {
       },
     };
   }
+
+  /**
+   * @api {DELETE} /api/user delete user account when user is in verify status, or forbid user to login when user is other status.
+   * @apiGroup User
+   * @apiVersion  0.0.1
+   *
+   * @apiParam  {String}  id user id
+   * @apiParam  {String}  lang  language
+   *
+   * @apiSuccess  (200) {Number}  errno 0
+   * @apiSuccess  (200) {String}  errmsg  return error message if error
+   */
+  deleteAction() {
+    // you need to be logged in to delete users
+    const { userInfo } = this.ctx.state;
+
+    if (think.isEmpty(userInfo)) {
+      return this.fail();
+    }
+
+    // you must be an administrator to delete other users and cannot delete yourself
+    if (userInfo.type !== 'administrator' || this.id === userInfo.objectId) {
+      return this.fail();
+    }
+  }
 };