登录注册系统

代码:
import html
import io
import os
import random
from datetime import datetime
from urllib.parse import unquote

import qrcode
from flasgger import Swagger
from flask import Flask, Response, request, send_file

TEXT404 = [
    "你要的页面被吃掉了。——凶手可能是产品经理，也可能是那只路过的猫。",
    "页面走丢了，大概率是被运营拿去祭天了。",
    "别找了，后端说这个功能没写。前端说布局没问题。总之，不是我的锅。",
    "页面正在审核中。审核员：我觉得不够有创意，先驳回。",
    "页面找不到了，程序员正在天台吹风冷静，稍后回来。",
    "这页面……也许是公司没钱续费服务器了？先别声张，假装没发现。",
    "页面已离职，工牌都交了。下一个需求，你来接盘吗？",
    "页面被黑洞吞了。建议猛戳屏幕，看看能不能把它吐出来。",
    "这里本来有个页面，但我们觉得你可能不太想看，就先撤了。（其实是你打错了）",
    "页面迷路了，要不要给它发个定位？算了，它没有手机。",
]

app = Flask(__name__)
app.config["DEBUG"] = True

app.config["SWAGGER"] = {
    "title": "Login Test API",
    "version": "1.0.0",
    "description": "RESTful 登录测试 API",
    "termsOfService": "",
}

custom_css = """
.swagger-ui .topbar {
    display: none;
}

.swagger-ui .clear {
    display: none;
}
"""

is_localhost = False
host = "http://127.0.0.1:5000"
if "PYTHONANYWHERE_DOMAIN" in os.environ:
    is_localhost = True
    app.config["SWAGGER"]["basePath"] = "/lt"
    host = f"https://qiufeng.{os.environ["PYTHONANYWHERE_DOMAIN"]}/lt"

swagger = Swagger(app)


# ========== HTML 模板 ==========
HOME_PAGE_HTML = f"""
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>QR Login Demo</title>
    <style>
        * {{
            margin: 0;
            padding: 0;
            box-sizing: border-box;
        }}

        body {{
            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
            background: linear-gradient(135deg, #2c3e50 0%, #3498db 50%, #1abc9c 100%);
            min-height: 100vh;
            color: #333;
        }}

        .container {{
            max-width: 1200px;
            margin: 0 auto;
            padding: 2rem;
        }}

        /* 头部 */
        .header {{
            text-align: center;
            margin-bottom: 3rem;
            color: white;
        }}

        .header h1 {{
            font-size: 3rem;
            margin-bottom: 1rem;
        }}

        .header p {{
            font-size: 1.2rem;
            opacity: 0.9;
        }}

        /* 主要操作区 */
        .action-grid {{
            display: grid;
            grid-template-columns: repeat(auto-fit, minmax(280px, 1fr));
            gap: 1.5rem;
            margin-bottom: 2rem;
        }}

        .action-card {{
            background: white;
            border-radius: 12px;
            padding: 2rem;
            text-align: center;
            transition: transform 0.2s;
            box-shadow: 0 4px 12px rgba(0,0,0,0.1);
        }}

        .action-card:hover {{
            transform: translateY(-4px);
        }}

        .action-icon {{
            font-size: 3rem;
            margin-bottom: 1rem;
        }}

        .action-card h2 {{
            margin-bottom: 0.5rem;
            color: #2c3e50;
        }}

        .action-card p {{
            color: #666;
            margin-bottom: 1.5rem;
            font-size: 0.9rem;
        }}

        .btn {{
            display: inline-block;
            background: linear-gradient(135deg, #3498db, #2980b9);
            color: white;
            padding: 0.75rem 1.5rem;
            border-radius: 8px;
            text-decoration: none;
            font-weight: 600;
            transition: all 0.2s;
        }}

        .btn:hover {{
            transform: translateY(-2px);
            box-shadow: 0 4px 12px rgba(52,152,219,0.4);
        }}

        .btn-outline {{
            background: transparent;
            border: 2px solid #3498db;
            color: #3498db;
        }}

        .btn-outline:hover {{
            background: #3498db;
            color: white;
        }}

        /* 提示条 */
        .notice {{
            background: rgba(255,255,255,0.95);
            border-radius: 8px;
            padding: 1rem;
            margin: 1.5rem 0;
            text-align: center;
            font-size: 0.9rem;
            color: #2c3e50;
        }}

        .footer {{
            text-align: center;
            color: white;
            margin-top: 2rem;
            font-size: 0.85rem;
            opacity: 0.8;
        }}

        @media (max-width: 768px) {{
            .container {{
                padding: 1rem;
            }}
            .header h1 {{
                font-size: 2rem;
            }}
        }}
    </style>
</head>
<body>
    <div class="container">
        <div class="header">
            <h1>🔐 QR Login Demo</h1>
            <p>扫码登录测试平台</p>
        </div>

        <div class="action-grid">
            <div class="action-card">
                <div class="action-icon">📝</div>
                <h2>注册账号</h2>
                <p>创建测试用户，获取 user_id</p>
                <a href="/{"lt/" if is_localhost else ""}reg" class="btn">开始注册</a>
            </div>

            <div class="action-card">
                <div class="action-icon">🔍</div>
                <h2>查询用户</h2>
                <p>按用户名查找用户信息</p>
                <a href="/{"lt/" if is_localhost else ""}query" class="btn">查询用户</a>
            </div>

            <div class="action-card">
                <div class="action-icon">📖</div>
                <h2>API 文档</h2>
                <p>查看完整接口说明</p>
                <a href="/{"lt/" if is_localhost else ""}apidocs" class="btn btn-outline">Swagger 文档</a>
            </div>
        </div>

        <div class="notice">
            💡 服务重启后所有数据重置，可随意测试
        </div>

        <div class="footer">
            Flask · RESTful · 免费使用
        </div>
    </div>
</body>
</html>
"""

HTML_TEMPLATE = """
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>{title}</title>
    <style>
        * {{
            margin: 0;
            padding: 0;
            box-sizing: border-box;
        }}
        body {{
            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
            line-height: 1.6;
            color: #333;
            background: linear-gradient(135deg, #2c3e50 0%, #3498db 50%, #1abc9c 100%);
            min-height: 100vh;
            padding: 2rem;
        }}
        .container {{
            max-width: 800px;
            margin: 0 auto;
            background: white;
            border-radius: 12px;
            padding: 2rem;
            box-shadow: 0 8px 25px rgba(0,0,0,0.1);
        }}
        h1 {{
            color: #2c3e50;
            margin-bottom: 1.5rem;
            border-left: 4px solid #3498db;
            padding-left: 1rem;
        }}
        h2 {{
            color: #2c3e50;
            margin: 1rem 0;
            font-size: 1.2rem;
        }}
        input, button {{
            padding: 10px 15px;
            margin: 10px 0;
            border: 1px solid #ddd;
            border-radius: 6px;
            font-size: 1rem;
        }}
        input {{
            width: 100%;
            max-width: 300px;
        }}
        button {{
            background: linear-gradient(135deg, #3498db, #2980b9);
            color: white;
            border: none;
            cursor: pointer;
            transition: all 0.3s ease;
        }}
        button:hover {{
            transform: translateY(-2px);
            box-shadow: 0 5px 15px rgba(52,152,219,0.4);
        }}
        .info {{
            background: #d1ecf1;
            border: 1px solid #bee5eb;
            border-radius: 8px;
            padding: 1rem;
            margin: 1rem 0;
            color: #0c5460;
        }}
        .error {{
            background: #f8d7da;
            border: 1px solid #f5c6cb;
            color: #721c24;
        }}
        .success {{
            background: #d4edda;
            border: 1px solid #c3e6cb;
            color: #155724;
        }}
        .user-card {{
            background: #f8fafc;
            border: 1px solid #e2e8f0;
            border-radius: 8px;
            padding: 1rem;
            margin: 1rem 0;
        }}
        .btn-back {{
            display: inline-block;
            margin-top: 1rem;
            background: #6c757d;
            text-decoration: none;
            color: white;
            padding: 8px 20px;
            border-radius: 6px;
        }}
        .btn-back:hover {{
            background: #5a6268;
        }}
    </style>
</head>
<body>
    <div class="container">
        {body}
    </div>
    {script}
</body>
</html>
"""


# ========== 数据存储 ==========
max_ticket = 0
tickets = {}
ticket_login_user = {}
tickets_scan = {}

max_user_id = 0
users = {}
usernames = []


# ========== 工具函数 ==========
def error_response(code, message):
    return {"status": str(code), "msg": message}, code


def escape_html(s):
    return html.escape(str(s))


def render_page(title, body, script=""):
    if script:
        script = f"<script>{script}</script>"
    return HTML_TEMPLATE.format(title=title, body=body, script=script)


@app.errorhandler(404)
def page404(status):
    april_fool = ""
    if datetime.now().month == 4 and datetime.now().day == 1:
        april_fool = f"""
            <a href="https://www.bilibili.com/video/BV1GJ411x7h7" class="april-fool-link" id="april-fool">要不要在这里找找看？</a>
            
            <style>
                .april-fool-link {{
                    display: inline-block;
                    margin-top: 12px;
                    padding: 10px 20px;
                    background: #ffd93d;
                    color: #2c3e50 !important;
                    text-decoration: none;
                    border-radius: 8px;
                    font-weight: bold;
                    border: 2px solid #f39c12;
                    transition: all 0.3s ease;
                    animation: rickroll 1s ease infinite;
                }}

                .april-fool-link:hover {{
                    animation: rickroll 0.3s ease;
                    background: #ffb347;
                    transform: translateY(-2px);
                }}

                @keyframes rickroll {{
                    0%, 100% {{
                        transform: translateX(0px) rotate(0deg);
                    }}
                    25% {{
                        transform: translateX(5px) rotate(3deg);
                    }}
                    75% {{
                        transform: translateX(-5px) rotate(-3deg);
                    }}
                }}
            </style>

            <script>
                const link = document.getElementById('april-fool');
                const errortip = document.getElementById('april-fool-audio-error');
                let currentAudio = new Audio("{host}/NeverGonnaGiveYouUp.mp3");
                currentAudio.loop = true;
                
                function playRickroll() {{
                    currentAudio.currentTime = 0;
                    currentAudio.play();
                }}
                
                function stopAudio() {{
                    currentAudio.pause();
                }}
                
                link.addEventListener('mouseenter', playRickroll);
                link.addEventListener('mouseleave', stopAudio);
            </script>
        """

    body = f"""
        <h1>404 - 页面不存在</h1>
        <div class="info error">
            <p>{random.choice(TEXT404)}</p>
            {april_fool}
            <p><strong>URL:</strong> {host}{request.path}</p>
        </div>
        <a href="{host}" class="btn-back">返回首页</a>
    """

    return render_page("404 - 页面不存在", body), 404


@app.after_request
def inject_css(response):
    if request.path.endswith("/flasgger_static/swagger-ui.css"):
        response.direct_passthrough = False
        response.set_data(response.get_data(as_text=True) + custom_css)
    return response


@app.get("/NeverGonnaGiveYouUp.mp3")
def serve_audio():
    """提供愚人节音频文件"""
    try:
        response = send_file(
            "./NeverGonnaGiveYouUp.mp3", mimetype="audio/mpeg", conditional=True
        )
        response.headers["Accept-Ranges"] = "bytes"

        return response
    except:
        return "", 404


# ========== UI 页面 ==========
@app.route("/", methods=["GET"])
def homepage():
    """主页

    ---
    tags:
        - 页面
    responses:
        200:
            description: 返回主页
    """
    return HOME_PAGE_HTML


@app.route("/query", methods=["GET"])
def query_user_page():
    """用户查询页面

    ---
    tags:
        - 页面
    parameters:
        - name: name
          in: query
          type: string
          required: false
          description: 用户名
    responses:
        200:
            description: 返回用户查询页面
    """
    body = f"""
        <h1>查询用户</h1>
        <input type="text" id="username" placeholder="输入用户名">
        <button onclick="queryUser()">查询</button>
        <div id="result"></div>
        <a href="{host}" class="btn-back">返回首页</a>
    """
    script = f"""
        const urlParams = new URLSearchParams(window.location.search);
        const name = urlParams.get('name');
        if (name) {{
            document.getElementById('username').value = name;
            queryUser();
        }}
        async function queryUser() {{
            const name = document.getElementById('username').value;
            if (!name) {{
                document.getElementById('result').innerHTML = '<div class="info">请输入用户名</div>';
                return;
            }}
            try {{
                const res = await fetch(`{host}/api/users/${{encodeURIComponent(name)}}`);
                const data = await res.json();
                if (res.ok) {{
                    document.getElementById('result').innerHTML = `
                        <div class="user-card">
                            <h2>用户信息</h2>
                            <p><strong>用户名:</strong> ${{escapeHtml(data.username)}}</p>
                            <p><strong>用户ID:</strong> ${{data.user_id}}</p>
                            <p><strong>简介:</strong> ${{escapeHtml(data.description)}}</p>
                        </div>
                    `;
                }} else {{
                    document.getElementById('result').innerHTML = `<div class="info error">${{escapeHtml(data.msg)}}</div>`;
                }}
            }} catch (err) {{
                document.getElementById('result').innerHTML = '<div class="info error">查询失败</div>';
            }}
        }}
        function escapeHtml(str) {{
            if (!str) return '';
            return str.replace(/[&<>]/g, function(m) {{
                if (m === '&') return '&amp;';
                if (m === '<') return '&lt;';
                if (m === '>') return '&gt;';
                return m;
            }});
        }}
    """
    return render_page("查询用户", body, script)


@app.route("/reg", methods=["GET"])
def reg_page():
    """用户注册页面

    ---
    tags:
        - 页面
    responses:
        200:
            description: 返回注册页面
    """
    body = f"""
        <h1>用户注册</h1>
        <input type="text" id="username" placeholder="用户名">
        <input type="text" id="description" placeholder="简介 (可选)">
        <button onclick="register()">注册</button>
        <div id="result"></div>
        <a href="{host}" class="btn-back">返回首页</a>
    """
    script = f"""
        async function register() {{
            const name = document.getElementById('username').value;
            const description = document.getElementById('description').value;
            if (!name) {{
                document.getElementById('result').innerHTML = '<div class="info error">用户名不能为空</div>';
                return;
            }}
            try {{
                let url = `{host}/api/users/${{encodeURIComponent(name)}}`;
                if (description) {{
                    url += `?description=${{encodeURIComponent(description)}}`;
                }}
                const res = await fetch(url, {{ method: 'POST' }});
                const data = await res.json();
                if (res.ok) {{
                    document.getElementById('result').innerHTML = `
                        <div class="info success">
                            <p>注册成功</p>
                            <p>用户名: ${{escapeHtml(data.username)}}</p>
                            <p>用户ID: ${{data.user_id}}</p>
                            <p>简介: ${{escapeHtml(data.description)}}</p>
                        </div>
                    `;
                    document.getElementById('username').value = '';
                    document.getElementById('description').value = '';
                }} else {{
                    document.getElementById('result').innerHTML = `<div class="info error">${{escapeHtml(data.msg)}}</div>`;
                }}
            }} catch (err) {{
                document.getElementById('result').innerHTML = '<div class="info error">注册失败</div>';
            }}
        }}
        function escapeHtml(str) {{
            if (!str) return '';
            return str.replace(/[&<>]/g, function(m) {{
                if (m === '&') return '&amp;';
                if (m === '<') return '&lt;';
                if (m === '>') return '&gt;';
                return m;
            }});
        }}
    """
    return render_page("用户注册", body, script)


@app.route("/login/<int:ticket>", methods=["GET"])
def login_page(ticket):
    """扫码登录确认页面

    ---
    tags:
        - 页面
    parameters:
        - name: ticket
          in: path
          type: integer
          required: true
          description: 登录票据 ID
    responses:
        200:
            description: 返回登录确认页面
        404:
            description: 票据不存在
        400:
            description: 票据已被处理
    """
    ticket_key = str(ticket)
    if ticket_key not in tickets:
        body = f"""
            <h1>错误</h1>
            <div class="info error">票据 {ticket} 不存在</div>
            <a href="{host}" class="btn-back">返回首页</a>
        """
        return render_page("错误", body), 404

    if tickets[ticket_key] != "created":
        body = f"""
            <h1>错误</h1>
            <div class="info error">票据已被处理</div>
            <a href="{host}" class="btn-back">返回首页</a>
        """
        return render_page("错误", body), 400

    tickets[ticket_key] = "scanned"
    tickets_scan[ticket_key] = True

    body = f"""
        <h1>登录确认</h1>
        <div class="info">票据 ID: {ticket}</div>
        <input type="number" id="user_id" placeholder="输入用户 ID">
        <button onclick="confirmLogin()">确认登录</button>
        <button onclick="cancelLogin()">取消</button>
        <div id="result"></div>
        <a href="{host}" class="btn-back">返回首页</a>
    """
    script = f"""
        const ticket = {ticket};
        async function confirmLogin() {{
            const userId = document.getElementById('user_id').value;
            if (!userId) {{
                document.getElementById('result').innerHTML = '<div class="info error">请输入用户 ID</div>';
                return;
            }}
            try {{
                const res = await fetch(`{host}/api/auths/${{ticket}}/confirm`, {{
                    method: 'POST',
                    headers: {{ 'Content-Type': 'application/json' }},
                    body: JSON.stringify({{ user_id: parseInt(userId) }})
                }});
                const data = await res.json();
                if (res.ok) {{
                    document.getElementById('result').innerHTML = '<div class="info success">登录确认成功</div>';
                    setTimeout(() => {{ window.location.href = '{host}'; }}, 1500);
                }} else {{
                    document.getElementById('result').innerHTML = `<div class="info error">${{escapeHtml(data.msg || '确认失败')}}</div>`;
                }}
            }} catch (err) {{
                document.getElementById('result').innerHTML = '<div class="info error">确认失败</div>';
            }}
        }}
        async function cancelLogin() {{
            try {{
                const res = await fetch(`{host}/api/auths/${{ticket}}/cancel`, {{ method: 'POST' }});
                const data = await res.json();
                if (res.ok) {{
                    document.getElementById('result').innerHTML = '<div class="info success">已取消登录</div>';
                    setTimeout(() => {{ window.location.href = '{host}'; }}, 1500);
                }} else {{
                    document.getElementById('result').innerHTML = `<div class="info error">${{escapeHtml(data.msg || '取消失败')}}</div>`;
                }}
            }} catch (err) {{
                document.getElementById('result').innerHTML = '<div class="info error">取消失败</div>';
            }}
        }}
        function escapeHtml(str) {{
            if (!str) return '';
            return str.replace(/[&<>]/g, function(m) {{
                if (m === '&') return '&amp;';
                if (m === '<') return '&lt;';
                if (m === '>') return '&gt;';
                return m;
            }});
        }}
    """
    return render_page("登录确认", body, script)


@app.route("/username", methods=["GET"])
def username_check_page():
    """用户名检查页面

    ---
    tags:
        - 页面
    parameters:
        - name: name
          in: query
          type: string
          required: false
          description: 用户名
    responses:
        200:
            description: 返回用户名检查页面
    """
    body = f"""
        <h1>检查用户名</h1>
        <input type="text" id="username" placeholder="输入用户名">
        <button onclick="checkName()">检查</button>
        <div id="result"></div>
        <a href="{host}" class="btn-back">返回首页</a>
    """
    script = f"""
        const urlParams = new URLSearchParams(window.location.search);
        const name = urlParams.get('name');
        if (name) {{
            document.getElementById('username').value = name;
            checkName();
        }}
        async function checkName() {{
            const name = document.getElementById('username').value;
            if (!name) {{
                document.getElementById('result').innerHTML = '<div class="info">请输入用户名</div>';
                return;
            }}
            try {{
                const res = await fetch(`{host}/api/usernames/${{encodeURIComponent(name)}}`);
                const data = await res.json();
                if (data.exists) {{
                    document.getElementById('result').innerHTML = `<div class="info error">用户名 ${{escapeHtml(name)}} 已被注册</div>`;
                }} else {{
                    document.getElementById('result').innerHTML = `<div class="info success">用户名 ${{escapeHtml(name)}} 可用</div>`;
                }}
            }} catch (err) {{
                document.getElementById('result').innerHTML = '<div class="info error">检查失败</div>';
            }}
        }}
        function escapeHtml(str) {{
            if (!str) return '';
            return str.replace(/[&<>]/g, function(m) {{
                if (m === '&') return '&amp;';
                if (m === '<') return '&lt;';
                if (m === '>') return '&gt;';
                return m;
            }});
        }}
    """
    return render_page("检查用户名", body, script)


# ========== RESTful API ==========
# 登录认证 API


@app.post("/api/auths")
def create_auth():
    """创建登录票据

    生成一个新的登录请求票据，用于后续扫码登录验证

    ---
    tags:
        - 登录认证
    responses:
        201:
            description: 创建成功
            schema:
                type: object
                properties:
                    ticket:
                        type: integer
                        description: 登录票据 ID
                        example: 1
                    qr_url:
                        type: string
                        description: 二维码图片 URL
                        example: "http://localhost:5000/qr/http://localhost:5000/login/1"
    """
    global max_ticket
    max_ticket += 1
    ticket = max_ticket

    tickets[str(ticket)] = "created"
    tickets_scan[str(ticket)] = False
    ticket_login_user[str(ticket)] = None

    qr_data = f"{host}/login/{ticket}"
    qr_url = f"{host}/qr/{qr_data}"

    return {"ticket": ticket, "qr_url": qr_url}, 201


@app.get("/api/auths/<int:ticket>")
def get_auth_status(ticket):
    """获取登录状态

    查询指定票据的当前登录状态

    ---
    tags:
        - 登录认证
    parameters:
        - name: ticket
          in: path
          type: integer
          required: true
          description: 登录票据 ID
    responses:
        200:
            description: 成功返回登录状态
            schema:
                type: object
                properties:
                    ticket:
                        type: integer
                        description: 登录票据 ID
                        example: 1
                    status:
                        type: string
                        description: "状态说明: created 已创建, scanned 已扫码, verified 已验证, canceled 已取消"
                        example: "verified"
                    user_id:
                        type: integer
                        description: 登录的用户 ID (仅在 verified 状态时有值)
                        example: 5
                    username:
                        type: string
                        description: 登录的用户名 (仅在 verified 状态时有值)
                        example: "zhangsan"
        404:
            description: 票据不存在
            schema:
                type: object
                properties:
                    status:
                        type: string
                        example: "404"
                    msg:
                        type: string
                        example: "票据不存在"
    """
    ticket_key = str(ticket)
    if ticket_key not in tickets:
        return error_response(404, "票据不存在")

    status = tickets[ticket_key]
    user_id = ticket_login_user.get(ticket_key)
    username = users.get(str(user_id), {}).get("name") if user_id else None

    return {
        "ticket": ticket,
        "status": status,
        "user_id": user_id,
        "username": username,
    }


@app.post("/api/auths/<int:ticket>/confirm")
def confirm_auth(ticket):
    """确认登录

    用户在扫码页面确认登录，绑定用户 ID 到票据

    ---
    tags:
        - 登录认证
    parameters:
        - name: ticket
          in: path
          type: integer
          required: true
          description: 登录票据 ID
        - name: body
          in: body
          required: true
          schema:
              type: object
              properties:
                  user_id:
                      type: integer
                      required: true
                      description: 登录的用户 ID
    responses:
        200:
            description: 确认成功
            schema:
                type: object
                properties:
                    status:
                        type: string
                        example: "200"
                    msg:
                        type: string
                        example: "登录确认成功"
        400:
            description: 请求参数错误
            schema:
                type: object
                properties:
                    status:
                        type: string
                        example: "400"
                    msg:
                        type: string
                        example: "用户 ID 无效"
        404:
            description: 票据不存在
            schema:
                type: object
                properties:
                    status:
                        type: string
                        example: "404"
                    msg:
                        type: string
                        example: "票据不存在"
    """
    ticket_key = str(ticket)
    if ticket_key not in tickets:
        return error_response(404, "票据不存在")

    data = request.get_json()
    if not data:
        return error_response(400, "请求体不能为空")

    user_id = data.get("user_id")
    if not user_id or str(user_id) not in users:
        return error_response(400, "用户 ID 无效")

    if tickets[ticket_key] != "scanned":
        return error_response(400, f"票据状态无效: {tickets[ticket_key]}")

    tickets[ticket_key] = "verified"
    ticket_login_user[ticket_key] = user_id

    return {"status": "200", "msg": "登录确认成功"}


@app.post("/api/auths/<int:ticket>/cancel")
def cancel_auth(ticket):
    """取消登录

    用户在扫码页面取消登录，将票据状态设为已取消

    ---
    tags:
        - 登录认证
    parameters:
        - name: ticket
          in: path
          type: integer
          required: true
          description: 登录票据 ID
    responses:
        200:
            description: 取消成功
            schema:
                type: object
                properties:
                    status:
                        type: string
                        example: "200"
                    msg:
                        type: string
                        example: "已取消登录"
        400:
            description: 票据状态无效
            schema:
                type: object
                properties:
                    status:
                        type: string
                        example: "400"
                    msg:
                        type: string
                        example: "票据状态无效: verified"
        404:
            description: 票据不存在
            schema:
                type: object
                properties:
                    status:
                        type: string
                        example: "404"
                    msg:
                        type: string
                        example: "票据不存在"
    """
    ticket_key = str(ticket)
    if ticket_key not in tickets:
        return error_response(404, "票据不存在")

    if tickets[ticket_key] not in ["created", "scanned"]:
        return error_response(400, f"票据状态无效: {tickets[ticket_key]}")

    tickets[ticket_key] = "canceled"

    return {"status": "200", "msg": "已取消登录"}


# 用户管理 API


@app.get("/api/usernames/<string:username>")
def check_username(username):
    """检查用户名是否存在

    查询指定用户名是否已被注册

    ---
    tags:
        - 用户管理
    parameters:
        - name: username
          in: path
          type: string
          required: true
          description: 用户名
    responses:
        200:
            description: 返回检查结果
            schema:
                type: object
                properties:
                    exists:
                        type: boolean
                        description: 用户名是否存在
                        example: false
    """
    return {"exists": username in usernames}


@app.post("/api/users/<string:username>")
def create_user(username):
    """注册用户

    创建新用户，用户名必须唯一

    ---
    tags:
        - 用户管理
    parameters:
        - name: username
          in: path
          type: string
          required: true
          description: 用户名
        - name: description
          in: query
          type: string
          required: false
          description: 用户简介
    responses:
        201:
            description: 注册成功
            schema:
                type: object
                properties:
                    username:
                        type: string
                        description: 用户名
                        example: "zhangsan"
                    description:
                        type: string
                        description: 用户简介
                        example: "这是一段简介"
                    user_id:
                        type: integer
                        description: 用户 ID
                        example: 1
        409:
            description: 用户名已存在
            schema:
                type: object
                properties:
                    status:
                        type: string
                        example: "409"
                    msg:
                        type: string
                        example: "用户名已存在"
        422:
            description: 参数验证失败
            schema:
                type: object
                properties:
                    status:
                        type: string
                        example: "422"
                    msg:
                        type: string
                        example: "用户名不能为空"
    """
    if username in usernames:
        return error_response(409, "用户名已存在")
    if not username or username.strip() == "":
        return error_response(422, "用户名不能为空")

    global max_user_id
    max_user_id += 1
    users[str(max_user_id)] = {
        "name": username,
        "desc": request.args.get("description", ""),
    }
    usernames.append(username)

    return {
        "username": username,
        "description": request.args.get("description", ""),
        "user_id": max_user_id,
    }, 201


@app.get("/api/users/<string:username>")
def get_user(username):
    """获取用户信息

    根据用户名查询用户详细信息

    ---
    tags:
        - 用户管理
    parameters:
        - name: username
          in: path
          type: string
          required: true
          description: 用户名
    responses:
        200:
            description: 返回用户信息
            schema:
                type: object
                properties:
                    username:
                        type: string
                        description: 用户名
                        example: "zhangsan"
                    description:
                        type: string
                        description: 用户简介
                        example: "这是一段简介"
                    user_id:
                        type: integer
                        description: 用户 ID
                        example: 1
        404:
            description: 用户不存在
            schema:
                type: object
                properties:
                    status:
                        type: string
                        example: "404"
                    msg:
                        type: string
                        example: "用户不存在"
    """
    if username not in usernames:
        return error_response(404, "用户不存在")

    for user_id, info in users.items():
        if info["name"] == username:
            return {
                "username": username,
                "description": info["desc"],
                "user_id": int(user_id),
            }

    return error_response(404, "用户不存在")


@app.put("/api/users/<string:username>")
def update_user(username):
    """更新用户信息

    修改用户名或用户简介，至少提供一个修改项

    ---
    tags:
        - 用户管理
    parameters:
        - name: username
          in: path
          type: string
          required: true
          description: 原用户名
        - name: new_username
          in: query
          type: string
          required: false
          description: 新用户名
        - name: new_description
          in: query
          type: string
          required: false
          description: 新简介
    responses:
        200:
            description: 更新成功
            schema:
                type: object
                properties:
                    username:
                        type: string
                        description: 新用户名
                        example: "lisi"
                    description:
                        type: string
                        description: 新简介
                        example: "更新后的简介"
                    user_id:
                        type: integer
                        description: 用户 ID
                        example: 1
        400:
            description: 没有提供更新内容
            schema:
                type: object
                properties:
                    status:
                        type: string
                        example: "400"
                    msg:
                        type: string
                        example: "没有提供更新内容"
        404:
            description: 用户不存在
            schema:
                type: object
                properties:
                    status:
                        type: string
                        example: "404"
                    msg:
                        type: string
                        example: "用户不存在"
        409:
            description: 新用户名已存在
            schema:
                type: object
                properties:
                    status:
                        type: string
                        example: "409"
                    msg:
                        type: string
                        example: "新用户名已存在"
    """
    if username not in usernames:
        return error_response(404, "用户不存在")

    new_username = request.args.get("new_username", "")
    new_description = request.args.get("new_description", "")

    if not new_username and not new_description:
        return error_response(400, "没有提供更新内容")

    for user_id, info in users.items():
        if info["name"] == username:
            if new_username:
                if new_username in usernames and new_username != username:
                    return error_response(409, "新用户名已存在")
                if "<" in new_username or ">" in new_username or "&" in new_username:
                    return error_response(422, "用户名包含非法字符")
                usernames.remove(username)
                usernames.append(new_username)
                info["name"] = new_username
            if new_description:
                if (
                    "<" in new_description
                    or ">" in new_description
                    or "&" in new_description
                ):
                    return error_response(422, "简介包含非法字符")
                info["desc"] = new_description
            return {
                "username": info["name"],
                "description": info["desc"],
                "user_id": int(user_id),
            }

    return error_response(404, "用户不存在")


@app.delete("/api/users/<string:username>")
def delete_user(username):
    """删除用户

    永久删除指定用户

    ---
    tags:
        - 用户管理
    parameters:
        - name: username
          in: path
          type: string
          required: true
          description: 用户名
    responses:
        200:
            description: 删除成功
            schema:
                type: object
                properties:
                    status:
                        type: string
                        example: "200"
                    msg:
                        type: string
                        example: "删除成功"
        404:
            description: 用户不存在
            schema:
                type: object
                properties:
                    status:
                        type: string
                        example: "404"
                    msg:
                        type: string
                        example: "用户不存在"
    """
    if username not in usernames:
        return error_response(404, "用户不存在")

    for user_id, info in list(users.items()):
        if info["name"] == username:
            del users[user_id]
            usernames.remove(username)
            return {"status": "200", "msg": "删除成功"}

    return error_response(404, "用户不存在")


@app.route("/qr/<path:data>", methods=["GET"])
def create_qr(data):
    """生成二维码图片

    ---
    tags:
        - 工具
    parameters:
        - name: data
          in: path
          type: string
          required: true
          description: 需要编码为二维码的 URL 数据 (需 URL 编码)
    responses:
        200:
            description: 返回 PNG 格式的二维码图片
            schema:
                type: file
                format: binary
    """
    qr_url = unquote(data)

    qr = qrcode.QRCode(
        version=1,
        error_correction=qrcode.constants.ERROR_CORRECT_L,
        box_size=10,
        border=4,
    )

    qr.add_data(qr_url)

    qr.make(fit=True)
    qc = qr.make_image(fill_color="black", back_color="white")

    img_buffer = io.BytesIO()
    qc.save(img_buffer, format="PNG")
    img_buffer.seek(0)

    return Response(img_buffer.getvalue(), mimetype="image/png")


if __name__ == "__main__":
    app.run("127.0.0.1", 5000, True)
API:
🔐 QR Login Demo - 扫码登录测试平台
应用程序
#API服务 #用户认证 #扫码登录
登录注册系统
https://qiufengcute.github.io/Blog/posts/登录注册/
作者
Qiufeng
发布于
2026年3月2日
许可协议
灵魂之汁项目上一篇
程序员节庆祝活动下一篇