Add user management system with approval workflow and role assignment

This commit is contained in:
Torsten Schulz (local)
2025-10-21 11:35:02 +02:00
parent f058516a3d
commit 96ff9e5d44
59 changed files with 1145 additions and 361 deletions

View File

@@ -0,0 +1,108 @@
import { d as defineEventHandler, r as readBody, c as createError } from '../../../nitro/nitro.mjs';
import { r as readUsers, h as hashPassword, w as writeUsers } from '../../../_/auth.mjs';
import nodemailer from 'nodemailer';
import 'node:http';
import 'node:https';
import 'node:events';
import 'node:buffer';
import 'node:fs';
import 'node:path';
import 'node:crypto';
import 'node:url';
import 'bcryptjs';
import 'jsonwebtoken';
import 'fs';
import 'path';
const register_post = defineEventHandler(async (event) => {
try {
const body = await readBody(event);
const { name, email, phone, password } = body;
if (!name || !email || !password) {
throw createError({
statusCode: 400,
message: "Name, E-Mail und Passwort sind erforderlich"
});
}
if (password.length < 8) {
throw createError({
statusCode: 400,
message: "Das Passwort muss mindestens 8 Zeichen lang sein"
});
}
const users = await readUsers();
const existingUser = users.find((u) => u.email.toLowerCase() === email.toLowerCase());
if (existingUser) {
throw createError({
statusCode: 409,
message: "Ein Benutzer mit dieser E-Mail-Adresse existiert bereits"
});
}
const hashedPassword = await hashPassword(password);
const newUser = {
id: Date.now().toString(),
email: email.toLowerCase(),
password: hashedPassword,
name,
phone: phone || "",
role: "mitglied",
active: false,
// Requires admin approval
created: (/* @__PURE__ */ new Date()).toISOString(),
lastLogin: null
};
users.push(newUser);
await writeUsers(users);
try {
const transporter = nodemailer.createTransport({
host: process.env.SMTP_HOST || "smtp.gmail.com",
port: process.env.SMTP_PORT || 587,
secure: false,
auth: {
user: process.env.SMTP_USER,
pass: process.env.SMTP_PASS
}
});
await transporter.sendMail({
from: process.env.SMTP_FROM || "noreply@harheimertc.de",
to: process.env.SMTP_ADMIN || "j.dichmann@gmx.de",
subject: "Neue Registrierung - Harheimer TC",
html: `
<h2>Neue Registrierung</h2>
<p>Ein neuer Benutzer hat sich registriert und wartet auf Freigabe:</p>
<ul>
<li><strong>Name:</strong> ${name}</li>
<li><strong>E-Mail:</strong> ${email}</li>
<li><strong>Telefon:</strong> ${phone || "Nicht angegeben"}</li>
</ul>
<p>Bitte pr\xFCfen Sie die Registrierung im CMS.</p>
`
});
await transporter.sendMail({
from: process.env.SMTP_FROM || "noreply@harheimertc.de",
to: email,
subject: "Registrierung erhalten - Harheimer TC",
html: `
<h2>Registrierung erhalten</h2>
<p>Hallo ${name},</p>
<p>vielen Dank f\xFCr Ihre Registrierung beim Harheimer TC!</p>
<p>Ihre Anfrage wird vom Vorstand gepr\xFCft. Sie erhalten eine E-Mail, sobald Ihr Zugang freigeschaltet wurde.</p>
<br>
<p>Mit sportlichen Gr\xFC\xDFen,<br>Ihr Harheimer TC</p>
`
});
} catch (emailError) {
console.error("E-Mail-Versand fehlgeschlagen:", emailError);
}
return {
success: true,
message: "Registrierung erfolgreich. Sie erhalten eine E-Mail, sobald Ihr Zugang freigeschaltet wurde."
};
} catch (error) {
console.error("Registrierungs-Fehler:", error);
throw error;
}
});
export { register_post as default };
//# sourceMappingURL=register.post.mjs.map

View File

@@ -0,0 +1 @@
{"version":3,"file":"register.post.mjs","sources":["../../../../../../server/api/auth/register.post.js"],"sourcesContent":null,"names":[],"mappings":";;;;;;;;;;;;;;;;AAGA,sBAAA,kBAAA,CAAA,OAAA,KAAA,KAAA;AACA,EAAA,IAAA;AACA,IAAA,MAAA,IAAA,GAAA,MAAA,QAAA,CAAA,KAAA,CAAA;AACA,IAAA,MAAA,EAAA,IAAA,EAAA,KAAA,EAAA,KAAA,EAAA,UAAA,GAAA,IAAA;AAEA,IAAA,IAAA,CAAA,IAAA,IAAA,CAAA,KAAA,IAAA,CAAA,QAAA,EAAA;AACA,MAAA,MAAA,WAAA,CAAA;AAAA,QACA,UAAA,EAAA,GAAA;AAAA,QACA,OAAA,EAAA;AAAA,OACA,CAAA;AAAA,IACA;AAGA,IAAA,IAAA,QAAA,CAAA,SAAA,CAAA,EAAA;AACA,MAAA,MAAA,WAAA,CAAA;AAAA,QACA,UAAA,EAAA,GAAA;AAAA,QACA,OAAA,EAAA;AAAA,OACA,CAAA;AAAA,IACA;AAGA,IAAA,MAAA,KAAA,GAAA,MAAA,SAAA,EAAA;AACA,IAAA,MAAA,YAAA,GAAA,KAAA,CAAA,IAAA,CAAA,CAAA,CAAA,KAAA,CAAA,CAAA,MAAA,WAAA,EAAA,KAAA,KAAA,CAAA,WAAA,EAAA,CAAA;AAEA,IAAA,IAAA,YAAA,EAAA;AACA,MAAA,MAAA,WAAA,CAAA;AAAA,QACA,UAAA,EAAA,GAAA;AAAA,QACA,OAAA,EAAA;AAAA,OACA,CAAA;AAAA,IACA;AAGA,IAAA,MAAA,cAAA,GAAA,MAAA,YAAA,CAAA,QAAA,CAAA;AAGA,IAAA,MAAA,OAAA,GAAA;AAAA,MACA,EAAA,EAAA,IAAA,CAAA,GAAA,EAAA,CAAA,QAAA,EAAA;AAAA,MACA,KAAA,EAAA,MAAA,WAAA,EAAA;AAAA,MACA,QAAA,EAAA,cAAA;AAAA,MACA,IAAA;AAAA,MACA,OAAA,KAAA,IAAA,EAAA;AAAA,MACA,IAAA,EAAA,UAAA;AAAA,MACA,MAAA,EAAA,KAAA;AAAA;AAAA,MACA,OAAA,EAAA,iBAAA,IAAA,IAAA,EAAA,EAAA,WAAA,EAAA;AAAA,MACA,SAAA,EAAA;AAAA,KACA;AAEA,IAAA,KAAA,CAAA,KAAA,OAAA,CAAA;AACA,IAAA,MAAA,WAAA,KAAA,CAAA;AAGA,IAAA,IAAA;AACA,MAAA,MAAA,WAAA,GAAA,WAAA,eAAA,CAAA;AAAA,QACA,IAAA,EAAA,OAAA,CAAA,GAAA,CAAA,SAAA,IAAA,gBAAA;AAAA,QACA,IAAA,EAAA,OAAA,CAAA,GAAA,CAAA,SAAA,IAAA,GAAA;AAAA,QACA,MAAA,EAAA,KAAA;AAAA,QACA,IAAA,EAAA;AAAA,UACA,IAAA,EAAA,QAAA,GAAA,CAAA,SAAA;AAAA,UACA,IAAA,EAAA,QAAA,GAAA,CAAA;AAAA;AACA,OACA,CAAA;AAGA,MAAA,MAAA,YAAA,QAAA,CAAA;AAAA,QACA,IAAA,EAAA,OAAA,CAAA,GAAA,CAAA,SAAA,IAAA,wBAAA;AAAA,QACA,EAAA,EAAA,OAAA,CAAA,GAAA,CAAA,UAAA,IAAA,mBAAA;AAAA,QACA,OAAA,EAAA,mCAAA;AAAA,QACA,IAAA,EAAA;AAAA;AAAA;AAAA;AAAA,uCAAA,EAIA,IAAA,CAAA;AAAA,yCAAA,EACA,KAAA,CAAA;AAAA,0CAAA,EACA,SAAA,iBAAA,CAAA;AAAA;AAAA;AAAA,QAAA;AAAA,OAIA,CAAA;AAGA,MAAA,MAAA,YAAA,QAAA,CAAA;AAAA,QACA,IAAA,EAAA,OAAA,CAAA,GAAA,CAAA,SAAA,IAAA,wBAAA;AAAA,QACA,EAAA,EAAA,KAAA;AAAA,QACA,OAAA,EAAA,uCAAA;AAAA,QACA,IAAA,EAAA;AAAA;AAAA,mBAAA,EAEA,IAAA,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAAA;AAAA,OAMA,CAAA;AAAA,IACA,SAAA,UAAA,EAAA;AACA,MAAA,OAAA,CAAA,KAAA,CAAA,kCAAA,UAAA,CAAA;AAAA,IAEA;AAEA,IAAA,OAAA;AAAA,MACA,OAAA,EAAA,IAAA;AAAA,MACA,OAAA,EAAA;AAAA,KACA;AAAA,EACA,SAAA,KAAA,EAAA;AACA,IAAA,OAAA,CAAA,KAAA,CAAA,0BAAA,KAAA,CAAA;AACA,IAAA,MAAA,KAAA;AAAA,EACA;AACA,CAAA,CAAA;;;;"}