🎯 Helpdesk Support

Подтверждение Email

Привет, ${username}!

\n Спасибо за регистрацию в Helpdesk Support System. Для завершения регистрации введите этот код подтверждения:\n

ВАШ КОД ПОДТВЕРЖДЕНИЯ:

${code}

\n ⏱️ Код действителен в течение 15 минут.
\n 🔒 Если вы не регистрировались, проигнорируйте это письмо.\n

\n `,\n text: `Helpdesk Support - Код подтверждения: ${code}\\n\\nКод действителен 15 минут.`,\n });\n console.log(\"Email отправлен на:\", email);\n return true;\n } catch (error) {\n console.error(\"Ошибка отправки email:\", error);\n return false;\n }\n}\n\nconst HTML = `\n\n\n\n \n \n Helpdesk Support System\n \n\n\n

\n \n\n \n

Добро пожаловать

Helpdesk Support System

\n\n

\n \n \n

\n\n

\n\n \n

\n Имя пользователя\n \n

\n Пароль\n \n

\n \n

\n Админ доступ: admin / admin123\n

\n\n \n

\n Имя пользователя *\n \n

Только латинские буквы, цифры и подчёркивание

\n Email *\n \n

На email придёт код подтверждения

\n Пароль *\n \n

Минимум 6 символов, буквы и цифры

\n Подтвердите пароль *\n \n

\n \n

\n\n \n

📧 Проверьте почту

\n Мы отправили код подтверждения на
\n \n

\n Введите 6-значный код\n \n

\n \n \n \n

\n\n \n

\n \n \n

\n\n \n

\n Опишите ваш запрос\n \n

\n \n

\n\n \n

💬 Чат с поддержкой

Только вы и админ видите эту переписку

Загрузка сообщений...

\n \n \n

\n\n \n

\n \n \n \n

\n\n \n

Загрузка запросов...

\n\n \n

👥 Активные пользователи

Загрузка...

Чат с пользователем

Выберите пользователя

Выберите пользователя слева для начала чата

\n \n \n

\n\n \n

Загрузка пользователей...

\n\n \n\n\n`;\n\napp.get(\"/\", (c) => {\n return c.html(HTML);\n});\n\n// ========== РЕГИСТРАЦИЯ ==========\napp.post(\"/api/register\", async (c) => {\n try {\n await initDatabase();\n const body = await c.req.json();\n const { username, email, password } = body;\n\n // Валидация\n if (!username || !email || !password) {\n return c.json({ success: false, error: \"Все поля обязательны\" }, 400);\n }\n\n if (username === ADMIN_USERNAME) {\n return c.json({ success: false, error: \"Это имя пользователя зарезервировано\" }, 400);\n }\n\n if (!isValidUsername(username)) {\n return c.json({\n success: false,\n error: \"Имя пользователя: 3-20 символов, только буквы, цифры, _\",\n }, 400);\n }\n\n if (!isValidEmail(email)) {\n return c.json({ success: false, error: \"Неверный формат email\" }, 400);\n }\n\n const passwordCheck = isValidPassword(password);\n if (!passwordCheck.valid) {\n return c.json({ success: false, error: passwordCheck.error }, 400);\n }\n\n // Проверка уникальности username\n const existingUsername = await sqlite.execute({\n sql: \"SELECT id FROM users WHERE username = ?\",\n args: [username],\n });\n\n if (existingUsername.rows && existingUsername.rows.length > 0) {\n return c.json({ success: false, error: \"Это имя пользователя уже занято\" }, 400);\n }\n\n // Проверка уникальности email\n const existingEmail = await sqlite.execute({\n sql: \"SELECT id, email_verified FROM users WHERE email = ?\",\n args: [email],\n });\n\n if (existingEmail.rows && existingEmail.rows.length > 0) {\n const row: any = existingEmail.rows[0];\n if (row.email_verified === 1) {\n return c.json({ success: false, error: \"Этот email уже зарегистрирован\" }, 400);\n } else {\n // Удалить старую неверифицированную запись\n await sqlite.execute({\n sql: \"DELETE FROM users WHERE email = ? AND email_verified = 0\",\n args: [email],\n });\n }\n }\n\n // Создание пользователя\n const passwordHash = await hashPassword(password);\n const verificationCode = generateVerificationCode();\n const expiresAt = new Date(Date.now() + 15 * 60 * 1000).toISOString();\n\n await sqlite.execute({\n sql: `INSERT INTO users (username, email, password_hash, verification_code, verification_expires_at, email_verified)\n VALUES (?, ?, ?, ?, ?, 0)`,\n args: [username, email, passwordHash, verificationCode, expiresAt],\n });\n\n // Отправка email с кодом\n const emailSent = await sendVerificationEmail(email, verificationCode, username);\n\n if (!emailSent) {\n // В тестовом режиме возвращаем код в ответ (для разработки)\n console.log(`КОД ДЛЯ ${email}: ${verificationCode}`);\n }\n\n return c.json({\n success: true,\n message: \"Код подтверждения отправлен на email\",\n // В режиме разработки показываем код в консоли\n devCode: verificationCode,\n });\n } catch (error) {\n console.error(\"Ошибка регистрации:\", error);\n return c.json({ success: false, error: String(error) }, 500);\n }\n});\n\n// ========== ВЕРИФИКАЦИЯ EMAIL ==========\napp.post(\"/api/verify-email\", async (c) => {\n try {\n await initDatabase();\n const body = await c.req.json();\n const { email, code } = body;\n\n if (!email || !code) {\n return c.json({ success: false, error: \"Email и код обязательны\" }, 400);\n }\n\n const result = await sqlite.execute({\n sql: `SELECT id, username, email, verification_code, verification_expires_at, email_verified \n FROM users WHERE email = ?`,\n args: [email],\n });\n\n if (!result.rows || result.rows.length === 0) {\n return c.json({ success: false, error: \"Пользователь не найден\" }, 404);\n }\n\n const user: any = result.rows[0];\n\n if (user.email_verified === 1) {\n return c.json({ success: false, error: \"Email уже подтверждён\" }, 400);\n }\n\n if (user.verification_code !== code) {\n return c.json({ success: false, error: \"Неверный код подтверждения\" }, 400);\n }\n\n // Проверка срока действия\n const expiresAt = new Date(user.verification_expires_at);\n if (expiresAt < new Date()) {\n return c.json({ success: false, error: \"Срок действия кода истёк. Запросите новый\" }, 400);\n }\n\n // Подтверждаем email\n await sqlite.execute({\n sql: \"UPDATE users SET email_verified = 1, verification_code = NULL WHERE id = ?\",\n args: [user.id],\n });\n\n // Создаём сессию\n const sessionToken = generateToken();\n const sessionExpires = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000).toISOString();\n\n await sqlite.execute({\n sql: `INSERT INTO user_sessions (user_id, session_token, username, email, expires_at)\n VALUES (?, ?, ?, ?, ?)`,\n args: [user.id, sessionToken, user.username, user.email, sessionExpires],\n });\n\n return c.json({\n success: true,\n token: sessionToken,\n username: user.username,\n email: user.email,\n });\n } catch (error) {\n console.error(\"Ошибка верификации:\", error);\n return c.json({ success: false, error: String(error) }, 500);\n }\n});\n\n// ========== ПОВТОРНАЯ ОТПРАВКА КОДА ==========\napp.post(\"/api/resend-code\", async (c) => {\n try {\n await initDatabase();\n const body = await c.req.json();\n const { email } = body;\n\n if (!email || !isValidEmail(email)) {\n return c.json({ success: false, error: \"Неверный email\" }, 400);\n }\n\n const result = await sqlite.execute({\n sql: \"SELECT id, username, email_verified FROM users WHERE email = ?\",\n args: [email],\n });\n\n if (!result.rows || result.rows.length === 0) {\n return c.json({ success: false, error: \"Пользователь не найден\" }, 404);\n }\n\n const user: any = result.rows[0];\n\n if (user.email_verified === 1) {\n return c.json({ success: false, error: \"Email уже подтверждён\" }, 400);\n }\n\n const newCode = generateVerificationCode();\n const newExpires = new Date(Date.now() + 15 * 60 * 1000).toISOString();\n\n await sqlite.execute({\n sql: \"UPDATE users SET verification_code = ?, verification_expires_at = ? WHERE id = ?\",\n args: [newCode, newExpires, user.id],\n });\n\n await sendVerificationEmail(email, newCode, user.username);\n console.log(`НОВЫЙ КОД ДЛЯ ${email}: ${newCode}`);\n\n return c.json({ success: true, message: \"Код отправлен повторно\", devCode: newCode });\n } catch (error) {\n console.error(\"Ошибка повторной отправки:\", error);\n return c.json({ success: false, error: String(error) }, 500);\n }\n});\n\n// ========== ВХОД ==========\napp.post(\"/api/login\", async (c) => {\n try {\n await initDatabase();\n const body = await c.req.json();\n const { username, password } = body;\n\n if (!username || !password) {\n return c.json({ success: false, error: \"Введите имя пользователя и пароль\" }, 400);\n }\n\n // Проверка админа\n if (username === ADMIN_USERNAME) {\n if (password !== ADMIN_PASSWORD) {\n return c.json({ success: false, error: \"Неверный пароль администратора\" }, 401);\n }\n const token = generateToken();\n await sqlite.execute({\n sql: \"INSERT INTO admin_sessions (admin_username, token) VALUES (?, ?)\",\n args: [ADMIN_USERNAME, token],\n });\n return c.json({\n success: true,\n isAdmin: true,\n token: token,\n username: ADMIN_USERNAME,\n });\n }\n\n // Проверка обычного пользователя\n const result = await sqlite.execute({\n sql: `SELECT id, username, email, password_hash, email_verified \n FROM users WHERE username = ?`,\n args: [username],\n });\n\n if (!result.rows || result.rows.length === 0) {\n return c.json({ success: false, error: \"Пользователь не найден\" }, 401);\n }\n\n const user: any = result.rows[0];\n const passwordHash = await hashPassword(password);\n\n if (user.password_hash !== passwordHash) {\n return c.json({ success: false, error: \"Неверный пароль\" }, 401);\n }\n\n if (user.email_verified !== 1) {\n return c.json({\n success: false,\n error: \"Email не подтверждён. Проверьте почту\",\n needsVerification: true,\n email: user.email,\n }, 401);\n }\n\n // Создаём новую сессию\n const sessionToken = generateToken();\n const sessionExpires = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000).toISOString();\n\n await sqlite.execute({\n sql: `INSERT INTO user_sessions (user_id, session_token, username, email, expires_at)\n VALUES (?, ?, ?, ?, ?)`,\n args: [user.id, sessionToken, user.username, user.email, sessionExpires],\n });\n\n return c.json({\n success: true,\n isAdmin: false,\n token: sessionToken,\n username: user.username,\n email: user.email,\n });\n } catch (error) {\n console.error(\"Ошибка входа:\", error);\n return c.json({ success: false, error: String(error) }, 500);\n }\n});\n\n// ========== ПРОВЕРКА СЕССИИ ==========\napp.post(\"/api/verify-session\", async (c) => {\n try {\n await initDatabase();\n const body = await c.req.json();\n const { token } = body;\n\n if (!token) return c.json({ valid: false });\n\n const result = await sqlite.execute({\n sql: `SELECT username, email, expires_at FROM user_sessions WHERE session_token = ?`,\n args: [token],\n });\n\n if (!result.rows || result.rows.length === 0) {\n return c.json({ valid: false });\n }\n\n const session: any = result.rows[0];\n if (new Date(session.expires_at) < new Date()) {\n return c.json({ valid: false });\n }\n\n return c.json({\n valid: true,\n username: session.username,\n email: session.email,\n });\n } catch (error) {\n return c.json({ valid: false });\n }\n});\n\n// ========== ПРОВЕРКА АДМИНА ==========\napp.post(\"/api/verify-admin\", async (c) => {\n try {\n await initDatabase();\n const body = await c.req.json();\n const { token } = body;\n\n if (!token) return c.json({ valid: false });\n\n const result = await sqlite.execute({\n sql: \"SELECT id FROM admin_sessions WHERE token = ?\",\n args: [token],\n });\n\n return c.json({ valid: result.rows && result.rows.length > 0 });\n } catch (error) {\n return c.json({ valid: false });\n }\n});\n\n// Хелпер: проверка сессии пользователя\nasync function getUserFromToken(token: string | undefined) {\n if (!token) return null;\n const result = await sqlite.execute({\n sql: \"SELECT user_id, username, email FROM user_sessions WHERE session_token = ? AND expires_at > datetime('now')\",\n args: [token],\n });\n if (!result.rows || result.rows.length === 0) return null;\n return result.rows[0] as any;\n}\n\n// Хелпер: проверка админа\nasync function isValidAdmin(token: string | undefined): Promise {\n if (!token) return false;\n const result = await sqlite.execute({\n sql: \"SELECT id FROM admin_sessions WHERE token = ?\",\n args: [token],\n });\n return !!(result.rows && result.rows.length > 0);\n}\n\n// ========== ОТПРАВКА ЗАПРОСА ==========\napp.post(\"/api/submit-request\", async (c) => {\n try {\n await initDatabase();\n const sessionToken = c.req.header(\"x-session-token\");\n const user = await getUserFromToken(sessionToken);\n\n if (!user) {\n return c.json({ success: false, error: \"Не авторизован\" }, 401);\n }\n\n const body = await c.req.json();\n const { request_text } = body;\n\n if (!request_text || request_text.trim().length === 0) {\n return c.json({ success: false, error: \"Введите текст запроса\" }, 400);\n }\n\n const userAgent = c.req.header(\"user-agent\") || \"Unknown\";\n const ipAddress = getClientIP(c.req);\n const { browserName, browserVersion, osName, osVersion, deviceType } = parseUserAgent(userAgent);\n const cookieHeader = c.req.header(\"cookie\") || \"\";\n\n await sqlite.execute({\n sql: `INSERT INTO requests (request_text, ip_address, user_agent, browser_name, browser_version, os_name, os_version, device_type, cookies, session_id, username, email)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n request_text,\n ipAddress,\n userAgent,\n browserName,\n browserVersion,\n osName,\n osVersion,\n deviceType,\n cookieHeader,\n sessionToken,\n user.username,\n user.email,\n ],\n });\n\n return c.json({ success: true });\n } catch (error) {\n console.error(\"Ошибка запроса:\", error);\n return c.json({ success: false, error: String(error) }, 500);\n }\n});\n\n// ========== ОТПРАВКА СООБЩЕНИЯ ==========\napp.post(\"/api/send-message\", async (c) => {\n try {\n await initDatabase();\n const body = await c.req.json();\n const { room_id, message_text, sender_type } = body;\n\n if (!room_id || !message_text) {\n return c.json({ success: false, error: \"Недостаточно данных\" }, 400);\n }\n\n if (sender_type === \"admin\") {\n const adminToken = c.req.header(\"x-admin-token\");\n const isAdmin = await isValidAdmin(adminToken);\n if (!isAdmin) {\n return c.json({ success: false, error: \"Доступ запрещён\" }, 403);\n }\n } else if (sender_type === \"user\") {\n const sessionToken = c.req.header(\"x-session-token\");\n const user = await getUserFromToken(sessionToken);\n if (!user) {\n return c.json({ success: false, error: \"Не авторизован\" }, 401);\n }\n // Пользователь может писать только в свою комнату\n if (room_id !== sessionToken) {\n return c.json({ success: false, error: \"Нет доступа к этому чату\" }, 403);\n }\n } else {\n return c.json({ success: false, error: \"Неверный тип отправителя\" }, 400);\n }\n\n // Получаем username для сообщения\n let username = sender_type === \"admin\" ? \"admin\" : \"unknown\";\n if (sender_type === \"user\") {\n const sessionToken = c.req.header(\"x-session-token\");\n const user = await getUserFromToken(sessionToken);\n if (user) username = user.username;\n }\n\n await sqlite.execute({\n sql: `INSERT INTO chat_messages (room_id, session_id, username, message_text, sender_type)\n VALUES (?, ?, ?, ?, ?)`,\n args: [room_id, room_id, username, message_text, sender_type],\n });\n\n return c.json({ success: true });\n } catch (error) {\n console.error(\"Ошибка сообщения:\", error);\n return c.json({ success: false, error: String(error) }, 500);\n }\n});\n\n// ========== ПОЛУЧЕНИЕ СООБЩЕНИЙ ==========\napp.get(\"/api/messages\", async (c) => {\n try {\n await initDatabase();\n const roomId = c.req.query(\"room_id\");\n\n if (!roomId) {\n return c.json({ messages: [] });\n }\n\n // Проверка доступа\n const adminToken = c.req.header(\"x-admin-token\");\n const sessionToken = c.req.header(\"x-session-token\");\n\n const isAdmin = await isValidAdmin(adminToken);\n\n if (!isAdmin) {\n // Обычный пользователь может видеть только свои сообщения\n const user = await getUserFromToken(sessionToken);\n if (!user) {\n return c.json({ messages: [], error: \"Не авторизован\" }, 401);\n }\n if (roomId !== sessionToken) {\n return c.json({ messages: [], error: \"Нет доступа\" }, 403);\n }\n }\n\n const result = await sqlite.execute({\n sql: \"SELECT * FROM chat_messages WHERE room_id = ? ORDER BY timestamp ASC LIMIT 200\",\n args: [roomId],\n });\n\n return c.json({ messages: result.rows || [] });\n } catch (error) {\n console.error(\"Ошибка получения сообщений:\", error);\n return c.json({ messages: [] }, 500);\n }\n});\n\n// ========== АДМИН: ВСЕ ЗАПРОСЫ ==========\napp.get(\"/api/admin/requests\", async (c) => {\n try {\n await initDatabase();\n const adminToken = c.req.header(\"x-admin-token\");\n const isAdmin = await isValidAdmin(adminToken);\n\n if (!isAdmin) {\n return c.json({ requests: [], error: \"Доступ запрещён\" }, 403);\n }\n\n const result = await sqlite.execute(\n \"SELECT * FROM requests ORDER BY timestamp DESC LIMIT 100\"\n );\n\n return c.json({ requests: result.rows || [] });\n } catch (error) {\n console.error(\"Ошибка:\", error);\n return c.json({ requests: [] }, 500);\n }\n});\n\n// ========== АДМИН: СПИСОК СЕССИЙ ==========\napp.get(\"/api/admin/user-sessions\", async (c) => {\n try {\n await initDatabase();\n const adminToken = c.req.header(\"x-admin-token\");\n const isAdmin = await isValidAdmin(adminToken);\n\n if (!isAdmin) {\n return c.json({ sessions: [], error: \"Доступ запрещён\" }, 403);\n }\n\n // Получаем активные сессии с количеством сообщений\n const result = await sqlite.execute(`\n SELECT us.session_token, us.username, us.email, us.created_at,\n (SELECT COUNT(*) FROM chat_messages cm WHERE cm.room_id = us.session_token) as message_count\n FROM user_sessions us\n WHERE us.expires_at > datetime('now')\n ORDER BY us.created_at DESC\n `);\n\n return c.json({ sessions: result.rows || [] });\n } catch (error) {\n console.error(\"Ошибка:\", error);\n return c.json({ sessions: [] }, 500);\n }\n});\n\n// ========== АДМИН: СПИСОК ПОЛЬЗОВАТЕЛЕЙ ==========\napp.get(\"/api/admin/users\", async (c) => {\n try {\n await initDatabase();\n const adminToken = c.req.header(\"x-admin-token\");\n const isAdmin = await isValidAdmin(adminToken);\n\n if (!isAdmin) {\n return c.json({ users: [], error: \"Доступ запрещён\" }, 403);\n }\n\n const result = await sqlite.execute(\n \"SELECT id, username, email, email_verified, created_at FROM users ORDER BY created_at DESC\"\n );\n\n return c.json({ users: result.rows || [] });\n } catch (error) {\n console.error(\"Ошибка:\", error);\n return c.json({ users: [] }, 500);\n }\n});\n\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","deleted","label",[111],"pulls","branches",1,"forks","envVars",{"_135":40,"_137":40},"connections",{"_135":40,"_136":40},"count","unfilledCount","emptyCount",{"_18":110,"_20":111,"_112":113,"_114":-5,"_115":69,"_116":67,"_117":104,"_22":139,"_66":119,"_120":121,"_122":123,"_124":26,"_125":-5,"_140":141,"_87":142},["D",1779609349126],"children",[],[111],["D",1779606043388],["D",1789470042795],{"_16":17,"_85":81},{"_16":17,"_78":79,"_80":81,"_33":34,"_82":83,"_84":26},{"_66":67,"_20":68,"_18":69,"_70":19,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":-5,"_76":21,"_77":17},"ctx",{"_59":-5,"_106":181,"_182":183,"_184":185,"_186":26,"_187":26,"_188":26,"_189":104,"_190":-5,"_191":-7,"_192":-7,"_193":40,"_194":26,"_195":26,"_196":-5,"_197":26,"_198":26,"_199":26,"_200":-5},"ENV",{"_152":153,"_154":155,"_156":68,"_157":158,"_159":160,"_161":162,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Search