1.0

backend/app/routers/users.py

@@ -5,7 +5,10 @@ from sqlalchemy.ext.asyncio import AsyncSession
 
 from app.dependencies import get_db, get_current_user
 from app.models.user import User
-from app.schemas.user import UserRead, UserProfile, UserUpdate, UserSearchResult
+from app.schemas.user import (
+    UserRead, UserProfile, UserUpdate, UserSearchResult,
+    PasswordChange, EmailChange,
+)
 from app.services.user_service import UserService
 
 router = APIRouter()
@@ -29,6 +32,36 @@ async def update_me(
     return updated
 
 
+@router.put("/me/password")
+async def change_password(
+    req: PasswordChange,
+    user: User = Depends(get_current_user),
+    db: AsyncSession = Depends(get_db),
+):
+    """修改密码"""
+    service = UserService(db)
+    try:
+        await service.change_password(user.id, req.old_password, req.new_password)
+        return {"success": True, "message": "密码修改成功"}
+    except ValueError as e:
+        raise HTTPException(status_code=400, detail=str(e))
+
+
+@router.put("/me/email")
+async def change_email(
+    req: EmailChange,
+    user: User = Depends(get_current_user),
+    db: AsyncSession = Depends(get_db),
+):
+    """更换绑定邮箱"""
+    service = UserService(db)
+    try:
+        await service.change_email(user.id, req.email, req.password)
+        return {"success": True, "message": "邮箱已更新"}
+    except ValueError as e:
+        raise HTTPException(status_code=400, detail=str(e))
+
+
 @router.get("/search", response_model=list[UserSearchResult])
 async def search_users(
     q: str = Query(..., min_length=1),