63 lines
2.3 KiB
TypeScript
63 lines
2.3 KiB
TypeScript
import { NextRequest, NextResponse } from 'next/server';
|
|
import { requireAdmin } from '@/lib/admin-auth';
|
|
import { getRequestBaseUrl, isValidEmail, normalizeEmail, sendTemplatedEmail, type EmailMessageType } from '@/lib/email-service';
|
|
import { getDbClient } from '@/storage/database/local-db';
|
|
|
|
export const runtime = 'nodejs';
|
|
|
|
const ALLOWED_TYPES: EmailMessageType[] = [
|
|
'register_success',
|
|
'email_verified',
|
|
'password_reset_success',
|
|
'security_login',
|
|
'announcement',
|
|
'order',
|
|
'business',
|
|
];
|
|
|
|
export async function POST(request: NextRequest) {
|
|
const adminError = await requireAdmin(request);
|
|
if (adminError) return adminError;
|
|
|
|
const client = await getDbClient();
|
|
try {
|
|
const body = await request.json();
|
|
const to = normalizeEmail(body.to);
|
|
const type = ALLOWED_TYPES.includes(body.type) ? body.type : 'business';
|
|
const title = typeof body.title === 'string' ? body.title.trim().slice(0, 120) : '';
|
|
const bodyText = typeof body.body === 'string' ? body.body.trim().slice(0, 4000) : '';
|
|
const buttonText = typeof body.buttonText === 'string' ? body.buttonText.trim().slice(0, 40) : '';
|
|
const buttonUrl = typeof body.buttonUrl === 'string' ? body.buttonUrl.trim().slice(0, 500) : '';
|
|
|
|
if (!isValidEmail(to)) {
|
|
return NextResponse.json({ error: '请输入正确的收件邮箱' }, { status: 400 });
|
|
}
|
|
if (!title || !bodyText) {
|
|
return NextResponse.json({ error: '请填写邮件标题和正文' }, { status: 400 });
|
|
}
|
|
if (buttonUrl && !/^https?:\/\/[^\s"'<>]+$/i.test(buttonUrl)) {
|
|
return NextResponse.json({ error: '按钮链接必须是 HTTP(S) 地址' }, { status: 400 });
|
|
}
|
|
|
|
await sendTemplatedEmail(client, {
|
|
to,
|
|
type,
|
|
subject: `【妙境】${title}`,
|
|
title,
|
|
body: bodyText,
|
|
buttonText: buttonText || undefined,
|
|
buttonUrl: buttonUrl || undefined,
|
|
note: '这是一封系统通知邮件，请勿直接回复。',
|
|
ipAddress: 'admin',
|
|
assetBaseUrl: getRequestBaseUrl(request) || undefined,
|
|
});
|
|
|
|
return NextResponse.json({ success: true, message: '邮件已发送' });
|
|
} catch (error) {
|
|
const message = error instanceof Error ? error.message : '邮件发送失败';
|
|
return NextResponse.json({ error: message }, { status: 400 });
|
|
} finally {
|
|
client.release();
|
|
}
|
|
}
|