147 lines
5.0 KiB
JavaScript
147 lines
5.0 KiB
JavaScript
const { executeQuery } = require('../lib/database/connection')
|
|
|
|
const checkDatabasePassword = async () => {
|
|
console.log('🔍 檢查資料庫中的密碼')
|
|
console.log('=' .repeat(50))
|
|
|
|
try {
|
|
// 1. 創建一個測試用戶
|
|
console.log('\n📊 1. 創建測試用戶...')
|
|
const testUser = {
|
|
name: '資料庫密碼檢查用戶',
|
|
email: 'db.password@company.com',
|
|
password: 'password123',
|
|
department: '測試部',
|
|
role: 'user'
|
|
}
|
|
|
|
const createResponse = await new Promise((resolve, reject) => {
|
|
const postData = JSON.stringify(testUser)
|
|
const options = {
|
|
hostname: 'localhost',
|
|
port: 3000,
|
|
path: '/api/admin/users',
|
|
method: 'POST',
|
|
headers: {
|
|
'Content-Type': 'application/json',
|
|
'Content-Length': Buffer.byteLength(postData)
|
|
}
|
|
}
|
|
|
|
const req = require('http').request(options, (res) => {
|
|
let data = ''
|
|
res.on('data', chunk => data += chunk)
|
|
res.on('end', () => resolve({ status: res.statusCode, data }))
|
|
})
|
|
req.on('error', reject)
|
|
req.write(postData)
|
|
req.end()
|
|
})
|
|
|
|
let testUserId = null
|
|
if (createResponse.status === 200) {
|
|
const createData = JSON.parse(createResponse.data)
|
|
if (createData.success) {
|
|
testUserId = createData.data.id
|
|
console.log('✅ 測試用戶創建成功')
|
|
console.log(' 用戶ID:', createData.data.id)
|
|
console.log(' 電子郵件:', createData.data.email)
|
|
} else {
|
|
console.log('❌ 創建測試用戶失敗:', createData.error)
|
|
return
|
|
}
|
|
}
|
|
|
|
// 2. 直接查詢資料庫
|
|
console.log('\n📊 2. 直接查詢資料庫...')
|
|
try {
|
|
const query = 'SELECT id, name, email, password, department, role, created_at FROM users WHERE email = ?'
|
|
const result = await executeQuery(query, ['db.password@company.com'])
|
|
|
|
if (result && result.length > 0) {
|
|
const user = result[0]
|
|
console.log('✅ 資料庫查詢成功:')
|
|
console.log(' ID:', user.id)
|
|
console.log(' 姓名:', user.name)
|
|
console.log(' 電子郵件:', user.email)
|
|
console.log(' 部門:', user.department)
|
|
console.log(' 角色:', user.role)
|
|
console.log(' 建立時間:', user.created_at)
|
|
console.log(' 密碼長度:', user.password ? user.password.length : 'null')
|
|
console.log(' 密碼前綴:', user.password ? user.password.substring(0, 20) + '...' : 'null')
|
|
console.log(' 密碼是否為 bcrypt 格式:', user.password ? user.password.startsWith('$2b$') : false)
|
|
} else {
|
|
console.log('❌ 在資料庫中找不到用戶')
|
|
}
|
|
} catch (dbError) {
|
|
console.log('❌ 資料庫查詢失敗:', dbError.message)
|
|
}
|
|
|
|
// 3. 測試密碼驗證
|
|
console.log('\n📊 3. 測試密碼驗證...')
|
|
try {
|
|
const bcrypt = require('bcryptjs')
|
|
const query = 'SELECT password FROM users WHERE email = ?'
|
|
const result = await executeQuery(query, ['db.password@company.com'])
|
|
|
|
if (result && result.length > 0) {
|
|
const hashedPassword = result[0].password
|
|
const testPassword = 'password123'
|
|
|
|
console.log(' 測試密碼:', testPassword)
|
|
console.log(' 資料庫密碼雜湊:', hashedPassword.substring(0, 20) + '...')
|
|
|
|
const isValid = await bcrypt.compare(testPassword, hashedPassword)
|
|
console.log(' 密碼驗證結果:', isValid ? '✅ 成功' : '❌ 失敗')
|
|
|
|
if (!isValid) {
|
|
// 測試其他可能的密碼
|
|
const testPasswords = ['Password123', 'PASSWORD123', 'password', '123456']
|
|
for (const pwd of testPasswords) {
|
|
const testResult = await bcrypt.compare(pwd, hashedPassword)
|
|
console.log(` 測試密碼 "${pwd}":`, testResult ? '✅ 成功' : '❌ 失敗')
|
|
if (testResult) break
|
|
}
|
|
}
|
|
}
|
|
} catch (verifyError) {
|
|
console.log('❌ 密碼驗證測試失敗:', verifyError.message)
|
|
}
|
|
|
|
// 4. 清理測試用戶
|
|
console.log('\n📊 4. 清理測試用戶...')
|
|
if (testUserId) {
|
|
const deleteResponse = await new Promise((resolve, reject) => {
|
|
const options = {
|
|
hostname: 'localhost',
|
|
port: 3000,
|
|
path: `/api/admin/users?id=${testUserId}`,
|
|
method: 'DELETE'
|
|
}
|
|
|
|
const req = require('http').request(options, (res) => {
|
|
let data = ''
|
|
res.on('data', chunk => data += chunk)
|
|
res.on('end', () => resolve({ status: res.statusCode, data }))
|
|
})
|
|
req.on('error', reject)
|
|
req.end()
|
|
})
|
|
|
|
if (deleteResponse.status === 200) {
|
|
console.log(`✅ 已刪除測試用戶: ${testUserId}`)
|
|
}
|
|
}
|
|
|
|
console.log('\n📝 資料庫密碼檢查總結:')
|
|
console.log('🔍 請查看以上詳細資訊，找出密碼問題')
|
|
|
|
} catch (error) {
|
|
console.error('❌ 檢查失敗:', error.message)
|
|
} finally {
|
|
console.log('\n✅ 資料庫密碼檢查完成')
|
|
}
|
|
}
|
|
|
|
checkDatabasePassword()
|