Files
api_health/handler/health_profile.js
T
2026-09-02 22:39:04 +08:00

112 lines
3.1 KiB
JavaScript

import { DBModel } from "../models/index.js";
import ResponseUtil from "../utils/responseUtil.js";
class HandlerHealthProfile {
constructor() {
}
// 白名单:只允许写入 schema 定义的顶层字段(兼容 'profile.name' 等点号路径)
static PROFILE_FIELDS = ["userId", "profile", "location", "health"];
static pickFields(body) {
const picked = {};
for (const key of Object.keys(body || {})) {
const allowed = HandlerHealthProfile.PROFILE_FIELDS.some(
(f) => key === f || key.startsWith(f + ".")
);
if (allowed) {
picked[key] = body[key];
}
}
return picked;
}
async getProfiles(ctx) {
try {
const { page = 1, pageSize = 20, userId, name, mobile, sortBy } = ctx.request.query;
const result = await DBModel.HealthProfile.findProfiles({
page: parseInt(page),
pageSize: parseInt(pageSize),
userId,
name,
mobile,
sortBy,
});
return ResponseUtil.success(ctx, result, "查询成功");
} catch (err) {
return ResponseUtil.internalError(ctx, err.message);
}
}
async getProfileById(ctx) {
try {
const { id } = ctx.params;
if (!id) {
return ResponseUtil.badRequest(ctx, "缺少档案ID");
}
const profile = await DBModel.HealthProfile.findProfileById(id);
if (!profile) {
return ResponseUtil.notFound(ctx, "健康档案不存在");
}
return ResponseUtil.success(ctx, { profile }, "查询成功");
} catch (err) {
return ResponseUtil.internalError(ctx, err.message);
}
}
async createProfile(ctx) {
try {
const body = ctx.request.body;
const newProfile = await DBModel.HealthProfile.createProfile(HandlerHealthProfile.pickFields(body));
return ResponseUtil.success(ctx, { profile: newProfile }, "创建成功");
} catch (err) {
return ResponseUtil.internalError(ctx, err.message);
}
}
async updateProfile(ctx) {
try {
const { id } = ctx.params;
const update = ctx.request.body;
if (!id) {
return ResponseUtil.badRequest(ctx, "缺少档案ID");
}
const updatedProfile = await DBModel.HealthProfile.updateProfileById(id, HandlerHealthProfile.pickFields(update));
if (!updatedProfile) {
return ResponseUtil.notFound(ctx, "健康档案不存在");
}
return ResponseUtil.success(ctx, { profile: updatedProfile }, "更新成功");
} catch (err) {
return ResponseUtil.internalError(ctx, err.message);
}
}
async deleteProfile(ctx) {
try {
const { id } = ctx.params;
if (!id) {
return ResponseUtil.badRequest(ctx, "缺少档案ID");
}
const deletedProfile = await DBModel.HealthProfile.deleteProfileById(id);
if (!deletedProfile) {
return ResponseUtil.notFound(ctx, "健康档案不存在");
}
return ResponseUtil.success(ctx, { profile: deletedProfile }, "删除成功");
} catch (err) {
return ResponseUtil.internalError(ctx, err.message);
}
}
}
export { HandlerHealthProfile };