's'

app/api/auth/store-email-link/route.ts

@@ -0,0 +1,125 @@
+/**
+ * 支付成功后存储 email -> user_id 映射，供「已有账号登录」按邮箱查库
+ * 同时创建 PB 用户（邮箱+12345678），以便后续用邮箱+密码登录
+ * 需 PocketBase 存在 vip_email_link 集合（email, user_id）
+ */
+import { NextRequest, NextResponse } from "next/server";
+import { getPocketBaseConfig } from "@/config/services.config";
+
+const VIP_EMAIL_LINK_COLLECTION = "vip_email_link";
+const DEFAULT_PASSWORD = "12345678";
+
+async function getAdminToken(): Promise<string | null> {
+  const email = process.env.POCKETBASE_EMAIL;
+  const password = process.env.POCKETBASE_PASSWORD;
+  if (!email || !password) return null;
+  const pb = getPocketBaseConfig();
+  const res = await fetch(`${pb.url}/api/admins/auth-with-password`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ identity: email, password }),
+  });
+  if (!res.ok) return null;
+  const data = await res.json();
+  return data?.token ?? null;
+}
+
+/** 若 PB 无该邮箱用户则创建（密码 12345678），供后续邮箱登录 */
+async function ensurePbUserExists(pbUrl: string, email: string): Promise<void> {
+  const registerRes = await fetch(`${pbUrl}/api/collections/users/records`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({
+      email,
+      password: DEFAULT_PASSWORD,
+      passwordConfirm: DEFAULT_PASSWORD,
+    }),
+  });
+  if (registerRes.ok) {
+    console.log("[store-email-link] 已创建 PB 用户 email=%s", email);
+    return;
+  }
+  const err = await registerRes.json().catch(() => ({}));
+  const alreadyExists =
+    err?.data?.email?.message?.includes("unique") ||
+    err?.message?.toLowerCase?.().includes("already") ||
+    err?.message?.toLowerCase?.().includes("unique");
+  if (alreadyExists) {
+    console.log("[store-email-link] PB 用户已存在 email=%s", email);
+    return;
+  }
+  console.warn("[store-email-link] 创建 PB 用户失败 email=%s status=%s", email, registerRes.status, err);
+}
+
+export async function POST(request: NextRequest) {
+  const body = await request.json().catch(() => ({}));
+  const email = String(body?.email ?? "").trim().toLowerCase();
+  const userId = String(body?.user_id ?? body?.userId ?? "").trim();
+
+  console.log("[store-email-link] 请求 email=%s user_id=%s", email || "(空)", userId || "(空)");
+
+  if (!email || !userId) {
+    return NextResponse.json({ ok: false, error: "请填写邮箱" }, { status: 400 });
+  }
+
+  const adminToken = await getAdminToken();
+  if (!adminToken) {
+    return NextResponse.json({ ok: false, error: "服务未配置" }, { status: 500 });
+  }
+
+  const pb = getPocketBaseConfig();
+  try {
+    await ensurePbUserExists(pb.url, email);
+  } catch (e) {
+    console.warn("[store-email-link] ensurePbUserExists 异常:", e);
+  }
+
+  const safeEmail = email.replace(/"/g, '\\"');
+  const filter = `email = "${safeEmail}"`;
+  try {
+    const listRes = await fetch(
+      `${pb.url}/api/collections/${VIP_EMAIL_LINK_COLLECTION}/records?filter=${encodeURIComponent(filter)}&perPage=1`,
+      { headers: { Authorization: `Bearer ${adminToken}` } }
+    );
+    if (!listRes.ok) {
+      return NextResponse.json({ ok: false, error: "vip_email_link 集合不存在，请在 PocketBase 中创建" }, { status: 500 });
+    }
+    const listData = await listRes.json().catch(() => ({}));
+    const items = listData?.items ?? [];
+    const recordBody: Record<string, string> = { email, user_id: userId };
+    if (/^user\d+$/.test(userId)) {
+      recordBody.anonymous_user_id = userId;
+    }
+    if (items.length > 0) {
+      await fetch(`${pb.url}/api/collections/${VIP_EMAIL_LINK_COLLECTION}/records/${items[0].id}`, {
+        method: "PATCH",
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Bearer ${adminToken}`,
+        },
+        body: JSON.stringify(recordBody),
+      });
+    } else {
+      const createRes = await fetch(`${pb.url}/api/collections/${VIP_EMAIL_LINK_COLLECTION}/records`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Bearer ${adminToken}`,
+        },
+        body: JSON.stringify(recordBody),
+      });
+      if (!createRes.ok) {
+        const err = await createRes.json().catch(() => ({}));
+        return NextResponse.json({ ok: false, error: err?.message || "写入失败" }, { status: 500 });
+      }
+    }
+    console.log("[store-email-link] 成功 email=%s user_id=%s", email, userId);
+    return NextResponse.json({ ok: true });
+  } catch (e) {
+    console.error("[store-email-link] error:", e);
+    return NextResponse.json(
+      { ok: false, error: e instanceof Error ? e.message : "操作失败" },
+      { status: 500 }
+    );
+  }
+}