feat: 实现成绩管理系统核心功能

添加响应工具、错误处理中间件和数据库模型
创建用户、学生、课程和成绩相关服务
实现管理员、教师和学生控制器的基本功能
重构路由处理并优化数据库查询

backend/routes/auth.js

@@ -1,175 +1,10 @@
 const express = require('express');
-const bcrypt = require('bcryptjs');
 const router = express.Router();
-const db = require('../config/database');
+const AuthController = require('../controllers/authController');
 
-// 登录
-router.post('/login', async (req, res) => {
-    try {
-        const { id, password, role } = req.body;
-        
-        // 输入验证
-        if (!id || !password || !role) {
-            return res.status(400).json({ 
-                success: false, 
-                message: '请输入完整的登录信息' 
-            });
-        }
-        
-        // 查询用户
-        const users = await db.query(
-            'SELECT * FROM users WHERE id = ? AND role = ?',
-            [id, role]
-        );
-        
-        if (users.length === 0) {
-            return res.status(401).json({ 
-                success: false, 
-                message: '用户名或密码错误' 
-            });
-        }
-        
-        const user = users[0];
-        
-        // 验证密码
-        const isValidPassword = await bcrypt.compare(password, user.password);
-        if (!isValidPassword) {
-            return res.status(401).json({ 
-                success: false, 
-                message: '用户名或密码错误' 
-            });
-        }
-        
-        // 设置会话
-        req.session.user = {
-            id: user.id,
-            name: user.name,
-            role: user.role,
-            class: user.class
-        };
-        
-        // 如果是学生，获取学生信息
-        if (user.role === 'student') {
-            const [students] = await db.pool.execute(
-                'SELECT * FROM students WHERE id = ?',
-                [user.id]
-            );
-            if (students[0].length > 0) {
-                req.session.user.studentInfo = students[0][0];
-            }
-        }
-        
-        res.json({
-            success: true,
-            message: '登录成功',
-            user: req.session.user
-        });
-        
-    } catch (error) {
-        console.error('登录错误:', error);
-        res.status(500).json({ 
-            success: false, 
-            message: '服务器错误' 
-        });
-    }
-});
-
-// 注册
-router.post('/register', async (req, res) => {
-    try {
-        const { id, name, password, role, class: userClass } = req.body;
-        
-        // 输入验证
-        if (!id || !name || !password || !role) {
-            return res.status(400).json({ 
-                success: false, 
-                message: '请填写所有必填字段（ID、姓名、密码、角色）' 
-            });
-        }
-        
-        // 学生和教师需要班级字段，管理员不需要
-        if ((role === 'student' || role === 'teacher') && !userClass) {
-            return res.status(400).json({ 
-                success: false, 
-                message: '学生和教师需要填写班级' 
-            });
-        }
-        
-        // 检查用户ID是否存在
-        const existingUsers = await db.query(
-            'SELECT id FROM users WHERE id = ?',
-            [id]
-        );
-        
-        if (existingUsers.length > 0) {
-            return res.status(400).json({ 
-                success: false, 
-                message: '用户ID已存在' 
-            });
-        }
-        
-        // 哈希密码
-        const salt = await bcrypt.genSalt(10);
-        const passwordHash = await bcrypt.hash(password, salt);
-        
-        // 创建用户
-        await db.pool.execute(
-            'INSERT INTO users (id, name, password, role, class) VALUES (?, ?, ?, ?, ?)',
-            [id, name, passwordHash, role, userClass || null]
-        );
-        
-        // 如果是学生，创建学生记录
-        if (role === 'student') {
-            await db.pool.execute(
-                'INSERT INTO students (id, name, class) VALUES (?, ?, ?)',
-                [id, name, userClass]
-            );
-        }
-        
-        res.json({
-            success: true,
-            message: '注册成功'
-        });
-        
-    } catch (error) {
-        console.error('注册错误:', error);
-        res.status(500).json({ 
-            success: false, 
-            message: '服务器错误' 
-        });
-    }
-});
-
-// 注销
-router.post('/logout', (req, res) => {
-    req.session.destroy(err => {
-        if (err) {
-            return res.status(500).json({ 
-                success: false, 
-                message: '注销失败' 
-            });
-        }
-        res.clearCookie('session_cookie');
-        res.json({ 
-            success: true, 
-            message: '注销成功' 
-        });
-    });
-});
-
-// 获取当前用户信息
-router.get('/me', (req, res) => {
-    if (!req.session.user) {
-        return res.status(401).json({ 
-            success: false, 
-            message: '未登录' 
-        });
-    }
-    
-    res.json({
-        success: true,
-        user: req.session.user
-    });
-});
+router.post('/login', AuthController.login);
+router.post('/register', AuthController.register);
+router.post('/logout', AuthController.logout);
+router.get('/me', AuthController.getCurrentUser);
 
 module.exports = router;