@allbluecn/web-app 0.4.17 → 0.4.18

package/src/start.ts

@@ -44,6 +44,28 @@ const aiPortsMiddleware = createMiddleware().server(async ({ next }) => {
   return next()
 })
 
+const deviceCookieMiddleware = createMiddleware().server(async ({ request, next }: any) => {
+  if (!request.url.includes('/api/auth/callback/credentials')) {
+    return next()
+  }
+  const result = await next() as any
+  const resHeaders = result?.headers || result?.response?.headers || {}
+  const existingSetCookie = typeof resHeaders.getSetCookie === 'function'
+    ? resHeaders.getSetCookie()
+    : (resHeaders.get?.('set-cookie') || '').split(',').filter(Boolean)
+  const isLoginSuccess = existingSetCookie.some((c: string) => c.includes('auth.session-token'))
+  if (!isLoginSuccess) return result
+  const requestCookies = request.headers.get('cookie') || ''
+  if (requestCookies.includes('allblue_device_seen=')) return result
+  const newHeaders = new Headers(resHeaders)
+  existingSetCookie.forEach((c: string) => newHeaders.append('set-cookie', c))
+  newHeaders.append('set-cookie', 'allblue_device_seen=1; Max-Age=31536000; Path=/; HttpOnly; SameSite=Lax')
+  if (result instanceof Response) {
+    return new Response(result.body, { status: result.status, statusText: result.statusText, headers: newHeaders })
+  }
+  return { ...result, headers: newHeaders }
+})
+
 const apiCorsMiddleware = createMiddleware().server(async ({ request, next }: any) => {
   const needsCors = request.url.includes('/api/') || request.url.includes('/_serverFn/')
   if (!needsCors) {
@@ -97,6 +119,6 @@ export const startInstance = createStart(async () => {
     } as any)
   }
   return {
-    requestMiddleware: [requestContextMiddleware, neonKeepaliveMiddleware, aiPortsMiddleware, apiCorsMiddleware, csrfMiddleware, auditRequestMiddleware],
+    requestMiddleware: [requestContextMiddleware, neonKeepaliveMiddleware, aiPortsMiddleware, apiCorsMiddleware, deviceCookieMiddleware, csrfMiddleware, auditRequestMiddleware],
   }
 })

package/vite.shared.ts

@@ -30,6 +30,17 @@
 
 import { defineConfig, type PluginOption } from 'vite'
 import path from 'node:path'
+import { readFileSync } from 'node:fs'
+
+// 从 apps/web/package.json 读取版本号，构建时注入到客户端/SSR
+function getWebAppVersion(rootDir: string): string {
+  const pkgPath = path.resolve(rootDir, 'package.json')
+  try {
+    return JSON.parse(readFileSync(pkgPath, 'utf-8')).version
+  } catch {
+    return '0.0.0'
+  }
+}
 
 function prismaDirnamePolyfill(rootDir: string): PluginOption {
   return {
@@ -77,6 +88,7 @@ export interface WebViteConfigOptions {
 }
 
 export function createWebViteConfig(opts: WebViteConfigOptions) {
+  const webVersion = getWebAppVersion(opts.rootDir)
   return defineConfig(async () => {
     const deployTarget = process.env.DEPLOY_TARGET
     const plugins: PluginOption[] = [...opts.basePlugins, tiptapAliasPlugin(opts.rootDir)]
@@ -102,6 +114,7 @@ export function createWebViteConfig(opts: WebViteConfigOptions) {
         'import.meta.env.VITE_DEPLOY_TARGET': JSON.stringify(
           process.env.DEPLOY_TARGET ?? 'web',
         ),
+        '__APP_VERSION__': JSON.stringify(webVersion),
       },
       server: {
         port: 3000,