- auth.go:Login/Register 改 JSON 绑定(loginRequest/registerRequest),
错误码复用 i18n 键:登录失败 login_error(401)、限流锁定 login_locked(429)、
注册校验 400、用户名冲突 user_username_exists(409)、注册禁用
registration_disabled(403);成功返回 {ok,redirect}(角色定向 /admin 或 /)
- main.go:旧 POST /login /register /logout 移除,迁入 /api/auth 分组
- i18n:新增 registration_disabled(中英)
- security_test.go:env 路由改 /api/auth/*,e.login 改 JSON 登录,
新增 postJSON/respCode/respRedirect/respOK 测试辅助
- p2_validation_test.go:TestLoginRateLimited/TestLoginTimingDoesNotRevealUser/
TestRegisterRejectsInvalidEmail 迁移 JSON 断言(429/401/409/400)
- base.html:logout-form 全局委托 fetch + login/register 模板 id/JS
- main_test.go:冒烟断言补 /api/auth 三端点
- go build/vet/test ./... 全绿
107 lines
5.1 KiB
HTML
107 lines
5.1 KiB
HTML
{{define "register"}}
|
|
{{template "header" .}}
|
|
<section class="max-w-md mx-auto px-4 py-20">
|
|
<div class="bg-white rounded-xl shadow-sm border border-gray-200 p-8">
|
|
<h2 class="text-2xl font-bold text-gray-900 mb-6 text-center">{{index .Tr "register_title"}}</h2>
|
|
|
|
<div id="registerError" class="bg-red-50 border border-red-200 text-red-700 px-4 py-3 rounded-lg mb-6 text-sm {{if not .Error}}hidden{{end}}">
|
|
{{.Error}}
|
|
</div>
|
|
|
|
<form id="registerForm" action="/register" method="post" class="space-y-5">
|
|
<input type="hidden" name="_csrf" value="{{.CSRFToken}}">
|
|
<div>
|
|
<label for="username" class="block text-sm font-medium text-gray-700 mb-1">{{index .Tr "register_username"}}</label>
|
|
<input
|
|
type="text"
|
|
id="username"
|
|
name="username"
|
|
required
|
|
minlength="3"
|
|
maxlength="32"
|
|
class="w-full px-4 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-500 focus:border-blue-500 outline-none transition-colors"
|
|
placeholder="{{index .Tr "register_ph_username"}}"
|
|
>
|
|
<p class="text-xs text-gray-500 mt-1">{{index .Tr "register_username_hint"}}</p>
|
|
</div>
|
|
<div>
|
|
<label for="display_name" class="block text-sm font-medium text-gray-700 mb-1">{{index .Tr "register_display_name"}}</label>
|
|
<input
|
|
type="text"
|
|
id="display_name"
|
|
name="display_name"
|
|
class="w-full px-4 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-500 focus:border-blue-500 outline-none transition-colors"
|
|
placeholder="{{index .Tr "register_ph_display_name"}}"
|
|
>
|
|
<p class="text-xs text-gray-500 mt-1">{{index .Tr "register_display_name_hint"}}</p>
|
|
</div>
|
|
<div>
|
|
<label for="email" class="block text-sm font-medium text-gray-700 mb-1">{{index .Tr "register_email"}}</label>
|
|
<input
|
|
type="email"
|
|
id="email"
|
|
name="email"
|
|
class="w-full px-4 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-500 focus:border-blue-500 outline-none transition-colors"
|
|
placeholder="{{index .Tr "register_ph_email"}}"
|
|
>
|
|
<p class="text-xs text-gray-500 mt-1">{{index .Tr "register_email_hint"}}</p>
|
|
</div>
|
|
<div>
|
|
<label for="password" class="block text-sm font-medium text-gray-700 mb-1">{{index .Tr "register_password"}}</label>
|
|
<input
|
|
type="password"
|
|
id="password"
|
|
name="password"
|
|
required
|
|
minlength="6"
|
|
class="w-full px-4 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-500 focus:border-blue-500 outline-none transition-colors"
|
|
placeholder="{{index .Tr "register_ph_password"}}"
|
|
>
|
|
<p class="text-xs text-gray-500 mt-1">{{index .Tr "register_password_hint"}}</p>
|
|
</div>
|
|
<div>
|
|
<label for="confirm_password" class="block text-sm font-medium text-gray-700 mb-1">{{index .Tr "register_confirm_password"}}</label>
|
|
<input
|
|
type="password"
|
|
id="confirm_password"
|
|
name="confirm_password"
|
|
required
|
|
minlength="6"
|
|
class="w-full px-4 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-500 focus:border-blue-500 outline-none transition-colors"
|
|
placeholder="{{index .Tr "register_ph_confirm_password"}}"
|
|
>
|
|
</div>
|
|
<button
|
|
type="submit"
|
|
class="w-full bg-blue-600 text-white py-2 px-4 rounded-lg font-medium hover:bg-blue-700 transition-colors cursor-pointer"
|
|
>
|
|
{{index .Tr "register_submit"}}
|
|
</button>
|
|
</form>
|
|
|
|
<div class="mt-4 text-center">
|
|
<span class="text-sm text-gray-600">{{index .Tr "register_have_account"}}</span>
|
|
<a href="/login" class="text-sm text-blue-600 hover:text-blue-700 font-medium ml-1">{{index .Tr "register_login_link"}}</a>
|
|
</div>
|
|
</div>
|
|
</section>
|
|
{{template "footer" .}}
|
|
|
|
<script>
|
|
(function () {
|
|
var form = document.getElementById('registerForm');
|
|
if (!form) return;
|
|
form.addEventListener('submit', function (e) {
|
|
e.preventDefault();
|
|
var btn = e.submitter || null;
|
|
if (btn) btn.disabled = true;
|
|
blogAPI('POST', '/api/auth/register', blogForm(form, btn)).then(function (r) {
|
|
if (btn) btn.disabled = false;
|
|
if (r.ok) { window.location.href = r.redirect || '/'; }
|
|
else { blogShowError('registerError', r.error || 'Registration failed.'); }
|
|
});
|
|
});
|
|
})();
|
|
</script>
|
|
{{end}}
|