71 lines
2.0 KiB
Go
71 lines
2.0 KiB
Go
package store
|
|
|
|
import (
|
|
"context"
|
|
"database/sql"
|
|
"fmt"
|
|
"strings"
|
|
"time"
|
|
)
|
|
|
|
const (
|
|
settingAdminPasswordHash = "admin_password_hash"
|
|
adminPasswordSQL = `
|
|
INSERT INTO settings(key, value, updated_at) VALUES(?, ?, ?)
|
|
ON CONFLICT(key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at
|
|
`
|
|
)
|
|
|
|
// HasAdminPassword 检查 settings 中是否已有管理员密码哈希。
|
|
func HasAdminPassword(ctx context.Context, db *sql.DB) (bool, error) {
|
|
var value string
|
|
err := db.QueryRowContext(ctx, `SELECT value FROM settings WHERE key = ?`, settingAdminPasswordHash).Scan(&value)
|
|
if err == sql.ErrNoRows {
|
|
return false, nil
|
|
}
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
return value != "", nil
|
|
}
|
|
|
|
// SetAdminPasswordHash 写入或覆盖管理员密码哈希。
|
|
func SetAdminPasswordHash(ctx context.Context, db *sql.DB, phc string) error {
|
|
now := time.Now().UnixMilli()
|
|
_, err := db.ExecContext(ctx, adminPasswordSQL, settingAdminPasswordHash, phc, now)
|
|
return err
|
|
}
|
|
|
|
func setAdminPasswordHashTx(tx *sql.Tx, phc string) error {
|
|
now := time.Now().UnixMilli()
|
|
_, err := tx.Exec(adminPasswordSQL, settingAdminPasswordHash, phc, now)
|
|
return err
|
|
}
|
|
|
|
// ResetAdminPassword 更新管理员密码哈希并清空全部管理会话。
|
|
func (d *DB) ResetAdminPassword(ctx context.Context, phc string) error {
|
|
if d == nil || d.Queue == nil {
|
|
return fmt.Errorf("store: not open")
|
|
}
|
|
return d.Queue.Do(ctx, func(tx *sql.Tx) error {
|
|
if err := setAdminPasswordHashTx(tx, phc); err != nil {
|
|
return err
|
|
}
|
|
_, err := tx.Exec(`DELETE FROM admin_sessions`)
|
|
return err
|
|
})
|
|
}
|
|
|
|
// VacuumInto 对打开的写连接执行 VACUUM INTO（可用于运行中备份）。
|
|
func VacuumInto(ctx context.Context, db *sql.DB, outPath string) error {
|
|
if outPath == "" {
|
|
return fmt.Errorf("store: vacuum into path empty")
|
|
}
|
|
escaped := strings.ReplaceAll(outPath, "'", "''")
|
|
_, err := db.ExecContext(ctx, "VACUUM INTO '"+escaped+"'")
|
|
if err != nil {
|
|
return fmt.Errorf("vacuum into: %w", err)
|
|
}
|
|
return nil
|
|
}
|