Force relogin after webui data changes

- Add a force_relogin flag to user_pref
- Return 404 for main.php requests when the user must reauthenticate
- Clear the relogin flag after successful client login
- Mark users for relogin after webui card import, accessory changes, and profile updates

Signed-off-by: Sean Du <do4suki@gmail.com>

internal/handler/login/login.go

@@ -4,6 +4,7 @@ import (
 	"encoding/base64"
 	"errors"
 	"honoka-chan/internal/middleware"
+	usermodel "honoka-chan/internal/model/user"
 	"honoka-chan/internal/router"
 	loginschema "honoka-chan/internal/schema/login"
 	"honoka-chan/internal/session"
@@ -68,6 +69,10 @@ func login(ctx *gin.Context) {
 		return
 	}
 
+	if err := usermodel.ClearUserForceRelogin(ss.UserEng, userID); ss.CheckErr(err) {
+		return
+	}
+
 	ss.Respond(loginschema.LoginResp{
 		ResponseData: loginschema.LoginData{
 			AuthorizeToken:  authorizeToken,

internal/handler/webui/accessory.go

@@ -23,6 +23,17 @@ type accessoryInventoryItem struct {
 	WornCount   int `json:"worn_count"`
 }
 
+func markAccessoryUserForceRelogin(ctx *gin.Context) bool {
+	if err := usermodel.MarkUserForceRelogin(db.UserEng, ctx.GetInt("userid")); err != nil {
+		ctx.JSON(http.StatusOK, webuischema.Msg{
+			Code:    1,
+			Message: "操作成功，但登录状态刷新失败！",
+		})
+		return false
+	}
+	return true
+}
+
 func accessoryPage(ctx *gin.Context) {
 	ctx.HTML(http.StatusOK, "admin/accessory.html", gin.H{
 		"menu": 3,
@@ -121,6 +132,10 @@ func addAccessory(ctx *gin.Context) {
 		return
 	}
 
+	if !markAccessoryUserForceRelogin(ctx) {
+		return
+	}
+
 	ctx.JSON(http.StatusOK, webuischema.Msg{
 		Code:    0,
 		Message: "添加成功，请重新进入游戏查看！",
@@ -322,6 +337,10 @@ func deleteAccessory(ctx *gin.Context) {
 		return
 	}
 
+	if !markAccessoryUserForceRelogin(ctx) {
+		return
+	}
+
 	ctx.JSON(http.StatusOK, webuischema.Msg{
 		Code:    0,
 		Message: "删除成功，请重新登录游戏生效！",

internal/handler/webui/profile.go

@@ -147,6 +147,14 @@ func updateProfile(ctx *gin.Context) {
 		return
 	}
 
+	if err := usermodel.MarkUserForceRelogin(db.UserEng, ctx.GetInt("userid")); err != nil {
+		ctx.JSON(http.StatusOK, webuischema.Msg{
+			Code:    1,
+			Message: "保存成功，但登录状态刷新失败！",
+		})
+		return
+	}
+
 	ctx.JSON(http.StatusOK, webuischema.Msg{
 		Code:    0,
 		Message: "保存成功！",
@@ -195,6 +203,14 @@ func resetProfile(ctx *gin.Context) {
 		return
 	}
 
+	if err := usermodel.MarkUserForceRelogin(db.UserEng, ctx.GetInt("userid")); err != nil {
+		ctx.JSON(http.StatusOK, webuischema.Msg{
+			Code:    1,
+			Message: "重置成功，但登录状态刷新失败！",
+		})
+		return
+	}
+
 	ctx.JSON(http.StatusOK, webuischema.Msg{
 		Code:     0,
 		Message:  "已恢复默认值！",

internal/handler/webui/upload.go

@@ -111,6 +111,11 @@ func upload(ctx *gin.Context) {
 		return
 	}
 
+	if err := usermodel.MarkUserForceRelogin(db.UserEng, ctx.GetInt("userid")); err != nil {
+		ctx.JSON(http.StatusOK, ErrMsg{Error: 1, Msg: "卡片添加成功，但登录状态刷新失败！"})
+		return
+	}
+
 	ctx.JSON(http.StatusOK, ErrMsg{Error: 0, Msg: "导入成功，请重新打开游戏！"})
 }