diff --git a/app/api/roles/init-emperor/route.ts b/app/api/roles/init-emperor/route.ts
new file mode 100644
index 0000000..62eb3c0
--- /dev/null
+++ b/app/api/roles/init-emperor/route.ts
@@ -0,0 +1,54 @@
+import { auth } from "@/lib/auth";
+import { createDb } from "@/lib/db";
+import { roles, userRoles } from "@/lib/schema";
+import { ROLES } from "@/lib/permissions";
+import { eq } from "drizzle-orm";
+
+export const runtime = "edge";
+
+export async function GET() {
+ const session = await auth();
+ if (!session?.user?.id) {
+ return Response.json({ error: "未授权" }, { status: 401 });
+ }
+
+ const db = createDb();
+
+ const emperorRole = await db.query.roles.findFirst({
+ where: eq(roles.name, ROLES.EMPEROR),
+ with: {
+ userRoles: true,
+ },
+ });
+
+ if (emperorRole && emperorRole.userRoles.length > 0) {
+ return Response.json({ error: "已存在皇帝, 谋反将被处死" }, { status: 400 });
+ }
+
+ try {
+ let roleId = emperorRole?.id;
+ if (!roleId) {
+ const [newRole] = await db.insert(roles)
+ .values({
+ name: ROLES.EMPEROR,
+ description: "皇帝（网站所有者）",
+ })
+ .returning({ id: roles.id });
+ roleId = newRole.id;
+ }
+
+ await db.insert(userRoles)
+ .values({
+ userId: session.user.id,
+ roleId,
+ });
+
+ return Response.json({ message: "登基成功，你已成为皇帝" });
+ } catch (error) {
+ console.error("Failed to initialize emperor:", error);
+ return Response.json(
+ { error: "登基称帝失败" },
+ { status: 500 }
+ );
+ }
+}
\ No newline at end of file
diff --git a/app/api/roles/promote/route.ts b/app/api/roles/promote/route.ts
new file mode 100644
index 0000000..11f6887
--- /dev/null
+++ b/app/api/roles/promote/route.ts
@@ -0,0 +1,58 @@
+import { createDb } from "@/lib/db";
+import { roles, userRoles } from "@/lib/schema";
+import { eq } from "drizzle-orm";
+import { ROLES } from "@/lib/permissions";
+
+export const runtime = "edge";
+
+export async function POST(request: Request) {
+ try {
+ const { userId, roleName } = await request.json() as { userId: string, roleName: string };
+ if (!userId || !roleName) {
+ return Response.json(
+ { error: "缺少必要参数" },
+ { status: 400 }
+ );
+ }
+
+ if (roleName !== ROLES.KNIGHT) {
+ return Response.json(
+ { error: "角色不合法" },
+ { status: 400 }
+ );
+ }
+
+ const db = createDb();
+
+ let targetRole = await db.query.roles.findFirst({
+ where: eq(roles.name, roleName),
+ });
+
+ if (!targetRole) {
+ const [newRole] = await db.insert(roles)
+ .values({
+ name: roleName,
+ description: "高级用户",
+ })
+ .returning();
+ targetRole = newRole;
+ }
+
+ await db.delete(userRoles)
+ .where(eq(userRoles.userId, userId));
+
+ await db.insert(userRoles)
+ .values({
+ userId,
+ roleId: targetRole.id,
+ });
+
+ return Response.json({ success: true });
+ } catch (error) {
+ console.error("Failed to promote user:", error);
+ return Response.json(
+ { error: "升级用户失败" },
+ { status: 500 }
+ );
+ }
+}
\ No newline at end of file
diff --git a/app/api/roles/users/route.ts b/app/api/roles/users/route.ts
new file mode 100644
index 0000000..ed78dda
--- /dev/null
+++ b/app/api/roles/users/route.ts
@@ -0,0 +1,43 @@
+import { createDb } from "@/lib/db"
+import { userRoles, users } from "@/lib/schema"
+import { eq } from "drizzle-orm"
+
+export const runtime = "edge"
+
+export async function GET(request: Request) {
+ const url = new URL(request.url)
+ const email = url.searchParams.get('email')
+
+ if (!email) {
+ return Response.json(
+ { error: "邮箱地址不能为空" },
+ { status: 400 }
+ )
+ }
+
+ const db = createDb()
+
+ const user = await db.query.users.findFirst({
+ where: eq(users.email, email),
+ })
+
+ if (!user) {
+ return Response.json({ user: null })
+ }
+
+ const userRole = await db.query.userRoles.findFirst({
+ where: eq(userRoles.userId, user.id),
+ with: {
+ role: true
+ }
+ })
+
+ return Response.json({
+ user: {
+ id: user.id,
+ name: user.name,
+ email: user.email,
+ role: userRole?.role.name
+ }
+ })
+}
\ No newline at end of file
diff --git a/app/components/emails/create-dialog.tsx b/app/components/emails/create-dialog.tsx
index 2e87943..f715b21 100644
--- a/app/components/emails/create-dialog.tsx
+++ b/app/components/emails/create-dialog.tsx
@@ -90,8 +90,8 @@ export function CreateDialog({ onEmailCreated }: CreateDialogProps) {
const fetchDomains = async () => {
const response = await fetch("/api/emails/domains");
const data = (await response.json()) as DomainResponse;
- setDomains(data.domains);
- setCurrentDomain(data.domains[0]);
+ setDomains(data.domains || []);
+ setCurrentDomain(data.domains[0] || "");
};
useEffect(() => {
diff --git a/app/components/no-permission-dialog.tsx b/app/components/no-permission-dialog.tsx
new file mode 100644
index 0000000..09349bc
--- /dev/null
+++ b/app/components/no-permission-dialog.tsx
@@ -0,0 +1,27 @@
+"use client"
+
+import { Button } from "@/components/ui/button"
+import { useRouter } from "next/navigation"
+
+export function NoPermissionDialog() {
+ const router = useRouter()
+
+ return (
+ 你没有权限访问此页面，请联系网站皇帝授权
+ +{user.email}
+ {user.roles && ( +