@abtnode/auth 1.16.54-beta-20251021-070951-25e3083c → 1.16.54-beta-20251024-030947-6f2889bf

package/lib/util/federated.js

@@ -1,4 +1,9 @@
-const { WELLKNOWN_SERVICE_PATH_PREFIX, USER_AVATAR_URL_PREFIX, USER_AVATAR_PATH_PREFIX } = require('@abtnode/constant');
+const {
+  WELLKNOWN_SERVICE_PATH_PREFIX,
+  USER_AVATAR_URL_PREFIX,
+  USER_AVATAR_PATH_PREFIX,
+  FEDERATED,
+} = require('@abtnode/constant');
 const { Joi } = require('@arcblock/validator');
 const pRetry = require('p-retry');
 const { signV2 } = require('@arcblock/jwt');
@@ -9,10 +14,50 @@ const { getSignData } = require('@blocklet/sdk/lib/util/verify-sign');
 const { SIG_VERSION } = require('@blocklet/constant');
 const cloneDeep = require('@abtnode/util/lib/deep-clone');
 const defaults = require('lodash/defaults');
+const pick = require('lodash/pick');
+const isUndefined = require('lodash/isUndefined');
+const pLimit = require('p-limit');
 
 const request = require('./request');
 const logger = require('../logger');
 
+const USER_PROFILE_SYNC_FIELDS = [
+  'action', // 表示对该 user 的操作
+  'did',
+  'pk',
+  'avatar',
+  'fullName',
+  'email',
+  'connectedAccount',
+  'disconnectedAccount',
+  'sourceAppPid',
+  'inviter',
+  'generation',
+  'emailVerified',
+  'phoneVerified',
+];
+
+const SITE_SYNC_FIELDS = [
+  'action',
+  'appId',
+  'appPid',
+  'aliasDid',
+  'appName',
+  'appDescription',
+  'appUrl',
+  'aliasDomain',
+  'appLogo',
+  'appLogoRect',
+  'appliedAt',
+  'did',
+  'pk',
+  'serverId',
+  'serverVersion',
+  'version',
+  'isMaster',
+  'status',
+];
+
 const federatedEnvSchema = Joi.object({
   sigVersion: Joi.string().optional().allow('').default(''),
 }).unknown(true);
@@ -192,8 +237,93 @@ async function migrateFederatedAccount({ blocklet, blockletInfo, fromUserDid, to
   return result;
 }
 
+/**
+ * 同步统一登录站点群信息
+ * 可同步的信息包括：站点成员列表（全量）、站点成员信息（增量）
+ * @param {object} options
+ * @param {object} options.blocklet - 当前 blocklet 数据
+ * @param {object} options.data - 需要同步的数据
+ * @param {Array} [options.data.users] - 需要同步的数据(用户)
+ * @param {Array} [options.data.sites] - 需要同步的数据(站点)
+ * @param {Array} [options.nodeInfo] - 当前 blocklet-server 的 info
+ * @returns
+ */
+async function syncFederated({
+  data = {},
+  syncSites,
+  allowStatus = ['approved', 'revoked'],
+  userFields = USER_PROFILE_SYNC_FIELDS,
+  siteFields = SITE_SYNC_FIELDS,
+  nodeInfo,
+  blocklet,
+} = {}) {
+  const federated = safeGetFederated(blocklet);
+
+  const safeData = {};
+  const { users, sites } = data;
+  if (users && Array.isArray(users)) {
+    safeData.users = users.map((item) => pick(item, userFields));
+  }
+
+  if (sites && Array.isArray(sites)) {
+    safeData.sites = sites.map((item) => pick(item, siteFields));
+  }
+
+  const { permanentWallet } = getBlockletInfo(blocklet, nodeInfo.sk);
+  const limitSync = pLimit(FEDERATED.SYNC_LIMIT);
+
+  const waitingList = federated.sites
+    .filter((item) => !item.status || allowStatus.includes(item.status))
+    .filter((item) => {
+      // 未指定 syncSites 向全员通知（除了自己）
+      if (isUndefined(syncSites)) {
+        // 排除通知自己
+        return item.appPid !== blocklet.appPid;
+      }
+      // 如果指定了要通知的站点，则按指定的站点来过滤
+      if (Array.isArray(syncSites)) {
+        return syncSites.some((x) => x.appPid === item.appPid);
+      }
+      return false;
+    })
+    .map(async (item) => {
+      const resultItem = await limitSync(async () => {
+        try {
+          // NOTICE: 即使通知某个站点失败了，也不影响其他站点接收同步结果
+          const result = await callFederated({
+            action: 'sync',
+            permanentWallet,
+            site: item,
+            data: safeData,
+          });
+          logger.info('Sync federated sites successfully', {
+            action: 'sync',
+            site: item,
+            data: safeData,
+          });
+          return result;
+        } catch (error) {
+          logger.error('Failed to sync federated sites', {
+            error,
+            action: 'sync',
+            site: item,
+            data: safeData,
+          });
+          return null;
+        }
+      });
+      return {
+        site: item,
+        result: resultItem,
+      };
+    });
+  const resultList = await Promise.all(waitingList);
+  return resultList;
+}
+
 module.exports = {
   callFederated,
+  syncFederated,
   getFederatedSiteEnv,
   getUserAvatarUrl,
   shouldSyncFederated,

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.16.54-beta-20251021-070951-25e3083c",
+  "version": "1.16.54-beta-20251024-030947-6f2889bf",
   "description": "Simple lib to manage auth in ABT Node",
   "main": "lib/index.js",
   "files": [
@@ -20,25 +20,25 @@
   "author": "linchen <linchen1987@foxmail.com> (http://github.com/linchen1987)",
   "license": "Apache-2.0",
   "dependencies": {
-    "@abtnode/constant": "1.16.54-beta-20251021-070951-25e3083c",
-    "@abtnode/logger": "1.16.54-beta-20251021-070951-25e3083c",
-    "@abtnode/util": "1.16.54-beta-20251021-070951-25e3083c",
-    "@arcblock/did": "^1.26.2",
-    "@arcblock/did-connect-js": "^1.26.2",
-    "@arcblock/did-ext": "^1.26.2",
-    "@arcblock/did-util": "^1.26.2",
-    "@arcblock/jwt": "^1.26.2",
+    "@abtnode/constant": "1.16.54-beta-20251024-030947-6f2889bf",
+    "@abtnode/logger": "1.16.54-beta-20251024-030947-6f2889bf",
+    "@abtnode/util": "1.16.54-beta-20251024-030947-6f2889bf",
+    "@arcblock/did": "^1.26.3",
+    "@arcblock/did-connect-js": "^1.26.3",
+    "@arcblock/did-ext": "^1.26.3",
+    "@arcblock/did-util": "^1.26.3",
+    "@arcblock/jwt": "^1.26.3",
     "@arcblock/nft-display": "^3.1.51",
-    "@arcblock/validator": "^1.26.2",
-    "@arcblock/vc": "^1.26.2",
-    "@blocklet/constant": "1.16.54-beta-20251021-070951-25e3083c",
+    "@arcblock/validator": "^1.26.3",
+    "@arcblock/vc": "^1.26.3",
+    "@blocklet/constant": "1.16.54-beta-20251024-030947-6f2889bf",
     "@blocklet/error": "^0.2.5",
-    "@blocklet/meta": "1.16.54-beta-20251021-070951-25e3083c",
-    "@blocklet/sdk": "1.16.54-beta-20251021-070951-25e3083c",
-    "@ocap/client": "^1.26.2",
-    "@ocap/mcrypto": "^1.26.2",
-    "@ocap/util": "^1.26.2",
-    "@ocap/wallet": "^1.26.2",
+    "@blocklet/meta": "1.16.54-beta-20251024-030947-6f2889bf",
+    "@blocklet/sdk": "1.16.54-beta-20251024-030947-6f2889bf",
+    "@ocap/client": "^1.26.3",
+    "@ocap/mcrypto": "^1.26.3",
+    "@ocap/util": "^1.26.3",
+    "@ocap/wallet": "^1.26.3",
     "@simplewebauthn/server": "^13.1.1",
     "axios": "^1.7.9",
     "flat": "^5.0.2",
@@ -48,6 +48,7 @@
     "jsonwebtoken": "^9.0.0",
     "jwks-rsa": "^3.1.0",
     "lodash": "^4.17.21",
+    "p-limit": "^3.1.0",
     "p-retry": "^4.6.2",
     "semver": "^7.6.3",
     "transliteration": "^2.3.5",
@@ -57,5 +58,5 @@
     "axios-mock-adapter": "^2.1.0",
     "jest": "^29.7.0"
   },
-  "gitHead": "db517e9013dbad744e38883f56e4eba1fa1615c1"
+  "gitHead": "73e5a3a80b82a2a7c62d42fdc08207b28e67633e"
 }