1459

write-server/src/app/api/posts/route.ts

@@ -1,18 +1,23 @@
 import { NextRequest, NextResponse } from "next/server";
 import { listPosts, createPost, getPostCount } from "@/lib/posts";
 import { cleanExpired } from "@/lib/recycle";
+import { getAuthFromRequest } from "@/lib/auth";
 
 export async function GET(request: NextRequest) {
   try {
-    cleanExpired(); // housekeeping on each request
+    cleanExpired();
 
+    const user = getAuthFromRequest(request);
     const { searchParams } = request.nextUrl;
     const search = searchParams.get("search") || "";
     const page = parseInt(searchParams.get("page") || "1", 10);
     const perPage = parseInt(searchParams.get("perPage") || "20", 10);
     const includeDrafts = searchParams.get("includeDrafts") !== "false";
 
-    const result = listPosts({ search, page, perPage, includeDrafts });
+    // 管理员看所有文章，普通用户只看自己的
+    const author = user?.role === "admin" ? undefined : user?.name;
+
+    const result = listPosts({ search, page, perPage, includeDrafts, author });
     const totalCount = getPostCount();
 
     return NextResponse.json({ ...result, totalCount });
@@ -26,6 +31,7 @@ export async function GET(request: NextRequest) {
 
 export async function POST(request: NextRequest) {
   try {
+    const user = getAuthFromRequest(request);
     const body = await request.json();
     const { frontMatter, content } = body;
 
@@ -36,6 +42,11 @@ export async function POST(request: NextRequest) {
       );
     }
 
+    // 自动设置作者为当前登录用户
+    if (user) {
+      frontMatter.author = user.name;
+    }
+
     const dirPath = createPost(frontMatter, content || "");
     return NextResponse.json({ success: true, dirPath }, { status: 201 });
   } catch (error: unknown) {