@azteam/express 1.2.354 → 1.2.356

package/lib/controller/AdminController.js

@@ -342,7 +342,7 @@ var AdminController = /*#__PURE__*/function (_Controller) {
     value: function getOne() {
       return {
         disabled: !this.roles.READ,
-        path: '/:id',
+        path: '/:id([a-zA-Z0-9]+)',
         method: [(0, _middleware.adminRoleMiddleware)([this.roles.READ], this.secretKey), (0, _middleware.validateMiddleware)(_constant.REQUEST_TYPE.PARAMS, _validator.rulesId), this.methodGetOne]
       };
     }
@@ -351,7 +351,7 @@ var AdminController = /*#__PURE__*/function (_Controller) {
     value: function getOneTrash() {
       return {
         disabled: !this.roles.READ,
-        path: '/:id',
+        path: '/:id([a-zA-Z0-9]+)',
         method: [(0, _middleware.adminRoleMiddleware)([this.roles.READ], this.secretKey), (0, _middleware.validateMiddleware)(_constant.REQUEST_TYPE.PARAMS, _validator.rulesId), this.methodGetOneTrash]
       };
     }
@@ -485,7 +485,7 @@ var AdminController = /*#__PURE__*/function (_Controller) {
       var _this3 = this;
       return {
         disabled: !this.roles.UPDATE,
-        path: '/:id',
+        path: '/:id([a-zA-Z0-9]+)',
         method: [(0, _middleware.adminRoleMiddleware)([this.roles.UPDATE], this.secretKey), (0, _middleware.validateMiddleware)(_constant.REQUEST_TYPE.PARAMS, _validator.rulesId), /*#__PURE__*/function () {
           var _ref11 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee15(req, res) {
             var item, data;
@@ -532,7 +532,7 @@ var AdminController = /*#__PURE__*/function (_Controller) {
       var _this4 = this;
       return {
         disabled: !this.roles.UPDATE,
-        path: '/available/:id',
+        path: '/available/:id([a-zA-Z0-9]+)',
         method: [(0, _middleware.adminRoleMiddleware)([this.roles.UPDATE], this.secretKey), (0, _middleware.validateMiddleware)(_constant.REQUEST_TYPE.PARAMS, _validator.rulesId), /*#__PURE__*/function () {
           var _ref12 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee16(req, res) {
             var item;
@@ -577,7 +577,7 @@ var AdminController = /*#__PURE__*/function (_Controller) {
       var _this5 = this;
       return {
         disabled: !this.roles.UPDATE,
-        path: '/unavailable/:id',
+        path: '/unavailable/:id([a-zA-Z0-9]+)',
         method: [(0, _middleware.adminRoleMiddleware)([this.roles.UPDATE], this.secretKey), (0, _middleware.validateMiddleware)(_constant.REQUEST_TYPE.PARAMS, _validator.rulesId), /*#__PURE__*/function () {
           var _ref13 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee17(req, res) {
             var item;
@@ -622,7 +622,7 @@ var AdminController = /*#__PURE__*/function (_Controller) {
       var _this6 = this;
       return {
         disabled: !this.roles.UPDATE,
-        path: '/waiting/:id',
+        path: '/waiting/:id([a-zA-Z0-9]+)',
         method: [(0, _middleware.adminRoleMiddleware)([this.roles.UPDATE], this.secretKey), (0, _middleware.validateMiddleware)(_constant.REQUEST_TYPE.PARAMS, _validator.rulesId), /*#__PURE__*/function () {
           var _ref14 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee18(req, res) {
             var item;
@@ -687,7 +687,7 @@ var AdminController = /*#__PURE__*/function (_Controller) {
     value: function _delete() {
       return {
         disabled: !this.roles.DELETE,
-        path: '/:id',
+        path: '/:id([a-zA-Z0-9]+)',
         method: [(0, _middleware.adminRoleMiddleware)([this.roles.DELETE], this.secretKey), (0, _middleware.validateMiddleware)(_constant.REQUEST_TYPE.PARAMS, _validator.rulesId), this.methodDelete]
       };
     }
@@ -696,7 +696,7 @@ var AdminController = /*#__PURE__*/function (_Controller) {
     value: function postRestoreTrash() {
       return {
         disabled: !this.roles.RESTORE,
-        path: '/:id',
+        path: '/:id([a-zA-Z0-9]+)',
         method: [(0, _middleware.adminRoleMiddleware)([this.roles.RESTORE], this.secretKey), (0, _middleware.validateMiddleware)(_constant.REQUEST_TYPE.PARAMS, _validator.rulesId), this.methodPostRestoreTrash]
       };
     }
@@ -726,7 +726,7 @@ var AdminController = /*#__PURE__*/function (_Controller) {
     value: function deleteDestroyTrash() {
       return {
         disabled: !this.roles.DESTROY,
-        path: '/:id',
+        path: '/:id([a-zA-Z0-9]+)',
         method: [(0, _middleware.adminRoleMiddleware)([this.roles.DESTROY], this.secretKey), (0, _middleware.validateMiddleware)(_constant.REQUEST_TYPE.PARAMS, _validator.rulesId), this.methodDeleteDestroyTrash]
       };
     }

package/lib/middleware/apiLoginMiddleware.js

@@ -0,0 +1,80 @@
+"use strict";
+
+function _typeof(obj) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (obj) { return typeof obj; } : function (obj) { return obj && "function" == typeof Symbol && obj.constructor === Symbol && obj !== Symbol.prototype ? "symbol" : typeof obj; }, _typeof(obj); }
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports["default"] = _default;
+var _httpClient = _interopRequireDefault(require("@azteam/http-client"));
+var _error = require("@azteam/error");
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { "default": obj }; }
+function _regeneratorRuntime() { "use strict"; /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/facebook/regenerator/blob/main/LICENSE */ _regeneratorRuntime = function _regeneratorRuntime() { return exports; }; var exports = {}, Op = Object.prototype, hasOwn = Op.hasOwnProperty, $Symbol = "function" == typeof Symbol ? Symbol : {}, iteratorSymbol = $Symbol.iterator || "@@iterator", asyncIteratorSymbol = $Symbol.asyncIterator || "@@asyncIterator", toStringTagSymbol = $Symbol.toStringTag || "@@toStringTag"; function define(obj, key, value) { return Object.defineProperty(obj, key, { value: value, enumerable: !0, configurable: !0, writable: !0 }), obj[key]; } try { define({}, ""); } catch (err) { define = function define(obj, key, value) { return obj[key] = value; }; } function wrap(innerFn, outerFn, self, tryLocsList) { var protoGenerator = outerFn && outerFn.prototype instanceof Generator ? outerFn : Generator, generator = Object.create(protoGenerator.prototype), context = new Context(tryLocsList || []); return generator._invoke = function (innerFn, self, context) { var state = "suspendedStart"; return function (method, arg) { if ("executing" === state) throw new Error("Generator is already running"); if ("completed" === state) { if ("throw" === method) throw arg; return doneResult(); } for (context.method = method, context.arg = arg;;) { var delegate = context.delegate; if (delegate) { var delegateResult = maybeInvokeDelegate(delegate, context); if (delegateResult) { if (delegateResult === ContinueSentinel) continue; return delegateResult; } } if ("next" === context.method) context.sent = context._sent = context.arg;else if ("throw" === context.method) { if ("suspendedStart" === state) throw state = "completed", context.arg; context.dispatchException(context.arg); } else "return" === context.method && context.abrupt("return", context.arg); state = "executing"; var record = tryCatch(innerFn, self, context); if ("normal" === record.type) { if (state = context.done ? "completed" : "suspendedYield", record.arg === ContinueSentinel) continue; return { value: record.arg, done: context.done }; } "throw" === record.type && (state = "completed", context.method = "throw", context.arg = record.arg); } }; }(innerFn, self, context), generator; } function tryCatch(fn, obj, arg) { try { return { type: "normal", arg: fn.call(obj, arg) }; } catch (err) { return { type: "throw", arg: err }; } } exports.wrap = wrap; var ContinueSentinel = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} var IteratorPrototype = {}; define(IteratorPrototype, iteratorSymbol, function () { return this; }); var getProto = Object.getPrototypeOf, NativeIteratorPrototype = getProto && getProto(getProto(values([]))); NativeIteratorPrototype && NativeIteratorPrototype !== Op && hasOwn.call(NativeIteratorPrototype, iteratorSymbol) && (IteratorPrototype = NativeIteratorPrototype); var Gp = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(IteratorPrototype); function defineIteratorMethods(prototype) { ["next", "throw", "return"].forEach(function (method) { define(prototype, method, function (arg) { return this._invoke(method, arg); }); }); } function AsyncIterator(generator, PromiseImpl) { function invoke(method, arg, resolve, reject) { var record = tryCatch(generator[method], generator, arg); if ("throw" !== record.type) { var result = record.arg, value = result.value; return value && "object" == _typeof(value) && hasOwn.call(value, "__await") ? PromiseImpl.resolve(value.__await).then(function (value) { invoke("next", value, resolve, reject); }, function (err) { invoke("throw", err, resolve, reject); }) : PromiseImpl.resolve(value).then(function (unwrapped) { result.value = unwrapped, resolve(result); }, function (error) { return invoke("throw", error, resolve, reject); }); } reject(record.arg); } var previousPromise; this._invoke = function (method, arg) { function callInvokeWithMethodAndArg() { return new PromiseImpl(function (resolve, reject) { invoke(method, arg, resolve, reject); }); } return previousPromise = previousPromise ? previousPromise.then(callInvokeWithMethodAndArg, callInvokeWithMethodAndArg) : callInvokeWithMethodAndArg(); }; } function maybeInvokeDelegate(delegate, context) { var method = delegate.iterator[context.method]; if (undefined === method) { if (context.delegate = null, "throw" === context.method) { if (delegate.iterator["return"] && (context.method = "return", context.arg = undefined, maybeInvokeDelegate(delegate, context), "throw" === context.method)) return ContinueSentinel; context.method = "throw", context.arg = new TypeError("The iterator does not provide a 'throw' method"); } return ContinueSentinel; } var record = tryCatch(method, delegate.iterator, context.arg); if ("throw" === record.type) return context.method = "throw", context.arg = record.arg, context.delegate = null, ContinueSentinel; var info = record.arg; return info ? info.done ? (context[delegate.resultName] = info.value, context.next = delegate.nextLoc, "return" !== context.method && (context.method = "next", context.arg = undefined), context.delegate = null, ContinueSentinel) : info : (context.method = "throw", context.arg = new TypeError("iterator result is not an object"), context.delegate = null, ContinueSentinel); } function pushTryEntry(locs) { var entry = { tryLoc: locs[0] }; 1 in locs && (entry.catchLoc = locs[1]), 2 in locs && (entry.finallyLoc = locs[2], entry.afterLoc = locs[3]), this.tryEntries.push(entry); } function resetTryEntry(entry) { var record = entry.completion || {}; record.type = "normal", delete record.arg, entry.completion = record; } function Context(tryLocsList) { this.tryEntries = [{ tryLoc: "root" }], tryLocsList.forEach(pushTryEntry, this), this.reset(!0); } function values(iterable) { if (iterable) { var iteratorMethod = iterable[iteratorSymbol]; if (iteratorMethod) return iteratorMethod.call(iterable); if ("function" == typeof iterable.next) return iterable; if (!isNaN(iterable.length)) { var i = -1, next = function next() { for (; ++i < iterable.length;) { if (hasOwn.call(iterable, i)) return next.value = iterable[i], next.done = !1, next; } return next.value = undefined, next.done = !0, next; }; return next.next = next; } } return { next: doneResult }; } function doneResult() { return { value: undefined, done: !0 }; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, define(Gp, "constructor", GeneratorFunctionPrototype), define(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = define(GeneratorFunctionPrototype, toStringTagSymbol, "GeneratorFunction"), exports.isGeneratorFunction = function (genFun) { var ctor = "function" == typeof genFun && genFun.constructor; return !!ctor && (ctor === GeneratorFunction || "GeneratorFunction" === (ctor.displayName || ctor.name)); }, exports.mark = function (genFun) { return Object.setPrototypeOf ? Object.setPrototypeOf(genFun, GeneratorFunctionPrototype) : (genFun.__proto__ = GeneratorFunctionPrototype, define(genFun, toStringTagSymbol, "GeneratorFunction")), genFun.prototype = Object.create(Gp), genFun; }, exports.awrap = function (arg) { return { __await: arg }; }, defineIteratorMethods(AsyncIterator.prototype), define(AsyncIterator.prototype, asyncIteratorSymbol, function () { return this; }), exports.AsyncIterator = AsyncIterator, exports.async = function (innerFn, outerFn, self, tryLocsList, PromiseImpl) { void 0 === PromiseImpl && (PromiseImpl = Promise); var iter = new AsyncIterator(wrap(innerFn, outerFn, self, tryLocsList), PromiseImpl); return exports.isGeneratorFunction(outerFn) ? iter : iter.next().then(function (result) { return result.done ? result.value : iter.next(); }); }, defineIteratorMethods(Gp), define(Gp, toStringTagSymbol, "Generator"), define(Gp, iteratorSymbol, function () { return this; }), define(Gp, "toString", function () { return "[object Generator]"; }), exports.keys = function (object) { var keys = []; for (var key in object) { keys.push(key); } return keys.reverse(), function next() { for (; keys.length;) { var key = keys.pop(); if (key in object) return next.value = key, next.done = !1, next; } return next.done = !0, next; }; }, exports.values = values, Context.prototype = { constructor: Context, reset: function reset(skipTempReset) { if (this.prev = 0, this.next = 0, this.sent = this._sent = undefined, this.done = !1, this.delegate = null, this.method = "next", this.arg = undefined, this.tryEntries.forEach(resetTryEntry), !skipTempReset) for (var name in this) { "t" === name.charAt(0) && hasOwn.call(this, name) && !isNaN(+name.slice(1)) && (this[name] = undefined); } }, stop: function stop() { this.done = !0; var rootRecord = this.tryEntries[0].completion; if ("throw" === rootRecord.type) throw rootRecord.arg; return this.rval; }, dispatchException: function dispatchException(exception) { if (this.done) throw exception; var context = this; function handle(loc, caught) { return record.type = "throw", record.arg = exception, context.next = loc, caught && (context.method = "next", context.arg = undefined), !!caught; } for (var i = this.tryEntries.length - 1; i >= 0; --i) { var entry = this.tryEntries[i], record = entry.completion; if ("root" === entry.tryLoc) return handle("end"); if (entry.tryLoc <= this.prev) { var hasCatch = hasOwn.call(entry, "catchLoc"), hasFinally = hasOwn.call(entry, "finallyLoc"); if (hasCatch && hasFinally) { if (this.prev < entry.catchLoc) return handle(entry.catchLoc, !0); if (this.prev < entry.finallyLoc) return handle(entry.finallyLoc); } else if (hasCatch) { if (this.prev < entry.catchLoc) return handle(entry.catchLoc, !0); } else { if (!hasFinally) throw new Error("try statement without catch or finally"); if (this.prev < entry.finallyLoc) return handle(entry.finallyLoc); } } } }, abrupt: function abrupt(type, arg) { for (var i = this.tryEntries.length - 1; i >= 0; --i) { var entry = this.tryEntries[i]; if (entry.tryLoc <= this.prev && hasOwn.call(entry, "finallyLoc") && this.prev < entry.finallyLoc) { var finallyEntry = entry; break; } } finallyEntry && ("break" === type || "continue" === type) && finallyEntry.tryLoc <= arg && arg <= finallyEntry.finallyLoc && (finallyEntry = null); var record = finallyEntry ? finallyEntry.completion : {}; return record.type = type, record.arg = arg, finallyEntry ? (this.method = "next", this.next = finallyEntry.finallyLoc, ContinueSentinel) : this.complete(record); }, complete: function complete(record, afterLoc) { if ("throw" === record.type) throw record.arg; return "break" === record.type || "continue" === record.type ? this.next = record.arg : "return" === record.type ? (this.rval = this.arg = record.arg, this.method = "return", this.next = "end") : "normal" === record.type && afterLoc && (this.next = afterLoc), ContinueSentinel; }, finish: function finish(finallyLoc) { for (var i = this.tryEntries.length - 1; i >= 0; --i) { var entry = this.tryEntries[i]; if (entry.finallyLoc === finallyLoc) return this.complete(entry.completion, entry.afterLoc), resetTryEntry(entry), ContinueSentinel; } }, "catch": function _catch(tryLoc) { for (var i = this.tryEntries.length - 1; i >= 0; --i) { var entry = this.tryEntries[i]; if (entry.tryLoc === tryLoc) { var record = entry.completion; if ("throw" === record.type) { var thrown = record.arg; resetTryEntry(entry); } return thrown; } } throw new Error("illegal catch attempt"); }, delegateYield: function delegateYield(iterable, resultName, nextLoc) { return this.delegate = { iterator: values(iterable), resultName: resultName, nextLoc: nextLoc }, "next" === this.method && (this.arg = undefined), ContinueSentinel; } }, exports; }
+function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) { try { var info = gen[key](arg); var value = info.value; } catch (error) { reject(error); return; } if (info.done) { resolve(value); } else { Promise.resolve(value).then(_next, _throw); } }
+function _asyncToGenerator(fn) { return function () { var self = this, args = arguments; return new Promise(function (resolve, reject) { var gen = fn.apply(self, args); function _next(value) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value); } function _throw(err) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err); } _next(undefined); }); }; }
+function _default() {
+  var systemURL = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : process.env.SYSTEM_URL;
+  return /*#__PURE__*/function () {
+    var _ref = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(req, res, next) {
+      var headers, token, apiURL, splitToken, client, response;
+      return _regeneratorRuntime().wrap(function _callee$(_context) {
+        while (1) {
+          switch (_context.prev = _context.next) {
+            case 0:
+              if (req.user) {
+                _context.next = 21;
+                break;
+              }
+              headers = req.headers;
+              if (!headers.authorization) {
+                _context.next = 21;
+                break;
+              }
+              token = headers.authorization;
+              if (!token.startsWith('apikey ')) {
+                _context.next = 20;
+                break;
+              }
+              token = token.replace('apikey ', '');
+              apiURL = "".concat(systemURL, "/auth/login_api/").concat(token);
+              splitToken = token.split(':');
+              if (splitToken.token === 2) {
+                apiURL = "https://".concat(req.hostname, "/auth/login_api/").concat(splitToken[1]);
+              }
+              client = new _httpClient["default"]({
+                timeout: 20000,
+                headers: {
+                  'User-Agent': 'toda-api'
+                }
+              });
+              _context.next = 12;
+              return client.get(apiURL);
+            case 12:
+              response = _context.sent;
+              if (!response.success) {
+                _context.next = 17;
+                break;
+              }
+              req.user = response.data;
+              _context.next = 18;
+              break;
+            case 17:
+              throw new _error.ErrorException(_error.TOKEN_FAILED);
+            case 18:
+              _context.next = 21;
+              break;
+            case 20:
+              throw new _error.ErrorException(_error.UNAUTHORIZED);
+            case 21:
+              return _context.abrupt("return", next());
+            case 22:
+            case "end":
+              return _context.stop();
+          }
+        }
+      }, _callee);
+    }));
+    return function (_x, _x2, _x3) {
+      return _ref.apply(this, arguments);
+    };
+  }();
+}

package/lib/middleware/index.js

@@ -9,6 +9,12 @@ Object.defineProperty(exports, "adminRoleMiddleware", {
     return _adminRoleMiddleware["default"];
   }
 });
+Object.defineProperty(exports, "apiLoginMiddleware", {
+  enumerable: true,
+  get: function get() {
+    return _apiLoginMiddleware["default"];
+  }
+});
 Object.defineProperty(exports, "cacheMiddleware", {
   enumerable: true,
   get: function get() {
@@ -71,6 +77,7 @@ Object.defineProperty(exports, "verifyGoogleAppMiddleware", {
 });
 var _signMiddleware = _interopRequireDefault(require("./signMiddleware"));
 var _etagMiddleware = _interopRequireDefault(require("./etagMiddleware"));
+var _apiLoginMiddleware = _interopRequireDefault(require("./apiLoginMiddleware"));
 var _roleMiddleware = _interopRequireDefault(require("./roleMiddleware"));
 var _adminRoleMiddleware = _interopRequireDefault(require("./adminRoleMiddleware"));
 var _systemRoleMiddleware = _interopRequireDefault(require("./systemRoleMiddleware"));

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@azteam/express",
-    "version": "1.2.354",
+    "version": "1.2.356",
     "license": "MIT",
     "author": "toda <sp.azsolution.net@gmail.com>",
     "main": "./lib/index.js",

package/src/controller/AdminController.js

@@ -104,7 +104,7 @@ class AdminController extends Controller {
     getOne() {
         return {
             disabled: !this.roles.READ,
-            path: '/:id',
+            path: '/:id([a-zA-Z0-9]+)',
             method: [adminRoleMiddleware([this.roles.READ], this.secretKey), validateMiddleware(REQUEST_TYPE.PARAMS, rulesId), this.methodGetOne],
         };
     }
@@ -118,7 +118,7 @@ class AdminController extends Controller {
     getOneTrash() {
         return {
             disabled: !this.roles.READ,
-            path: '/:id',
+            path: '/:id([a-zA-Z0-9]+)',
             method: [
                 adminRoleMiddleware([this.roles.READ], this.secretKey),
                 validateMiddleware(REQUEST_TYPE.PARAMS, rulesId),
@@ -173,7 +173,7 @@ class AdminController extends Controller {
     putModify() {
         return {
             disabled: !this.roles.UPDATE,
-            path: '/:id',
+            path: '/:id([a-zA-Z0-9]+)',
             method: [
                 adminRoleMiddleware([this.roles.UPDATE], this.secretKey),
                 validateMiddleware(REQUEST_TYPE.PARAMS, rulesId),
@@ -196,7 +196,7 @@ class AdminController extends Controller {
     putModifyStatusAvailable() {
         return {
             disabled: !this.roles.UPDATE,
-            path: '/available/:id',
+            path: '/available/:id([a-zA-Z0-9]+)',
             method: [
                 adminRoleMiddleware([this.roles.UPDATE], this.secretKey),
                 validateMiddleware(REQUEST_TYPE.PARAMS, rulesId),
@@ -217,7 +217,7 @@ class AdminController extends Controller {
     putModifyStatusUnavailable() {
         return {
             disabled: !this.roles.UPDATE,
-            path: '/unavailable/:id',
+            path: '/unavailable/:id([a-zA-Z0-9]+)',
             method: [
                 adminRoleMiddleware([this.roles.UPDATE], this.secretKey),
                 validateMiddleware(REQUEST_TYPE.PARAMS, rulesId),
@@ -238,7 +238,7 @@ class AdminController extends Controller {
     putModifyStatusWaiting() {
         return {
             disabled: !this.roles.UPDATE,
-            path: '/waiting/:id',
+            path: '/waiting/:id([a-zA-Z0-9]+)',
             method: [
                 adminRoleMiddleware([this.roles.UPDATE], this.secretKey),
                 validateMiddleware(REQUEST_TYPE.PARAMS, rulesId),
@@ -274,7 +274,7 @@ class AdminController extends Controller {
     delete() {
         return {
             disabled: !this.roles.DELETE,
-            path: '/:id',
+            path: '/:id([a-zA-Z0-9]+)',
             method: [adminRoleMiddleware([this.roles.DELETE], this.secretKey), validateMiddleware(REQUEST_TYPE.PARAMS, rulesId), this.methodDelete],
         };
     }
@@ -291,7 +291,7 @@ class AdminController extends Controller {
     postRestoreTrash() {
         return {
             disabled: !this.roles.RESTORE,
-            path: '/:id',
+            path: '/:id([a-zA-Z0-9]+)',
             method: [
                 adminRoleMiddleware([this.roles.RESTORE], this.secretKey),
                 validateMiddleware(REQUEST_TYPE.PARAMS, rulesId),
@@ -327,7 +327,7 @@ class AdminController extends Controller {
     deleteDestroyTrash() {
         return {
             disabled: !this.roles.DESTROY,
-            path: '/:id',
+            path: '/:id([a-zA-Z0-9]+)',
             method: [
                 adminRoleMiddleware([this.roles.DESTROY], this.secretKey),
                 validateMiddleware(REQUEST_TYPE.PARAMS, rulesId),

package/src/middleware/apiLoginMiddleware.js

@@ -0,0 +1,39 @@
+import HttpClient from '@azteam/http-client';
+import {ErrorException, TOKEN_FAILED, UNAUTHORIZED} from '@azteam/error';
+
+export default function (systemURL = process.env.SYSTEM_URL) {
+    return async function (req, res, next) {
+        if (!req.user) {
+            const {headers} = req;
+            if (headers.authorization) {
+                let token = headers.authorization;
+
+                if (token.startsWith('apikey ')) {
+                    token = token.replace('apikey ', '');
+                    let apiURL = `${systemURL}/auth/login_api/${token}`;
+
+                    const splitToken = token.split(':');
+                    if (splitToken.token === 2) {
+                        apiURL = `https://${req.hostname}/auth/login_api/${splitToken[1]}`;
+                    }
+
+                    const client = new HttpClient({
+                            timeout: 20000,
+                            headers: {
+                                'User-Agent': 'toda-api',
+                            },
+                        }),
+                        response = await client.get(apiURL);
+                    if (response.success) {
+                        req.user = response.data;
+                    } else {
+                        throw new ErrorException(TOKEN_FAILED);
+                    }
+                } else {
+                    throw new ErrorException(UNAUTHORIZED);
+                }
+            }
+        }
+        return next();
+    };
+}

package/src/middleware/index.js

@@ -1,5 +1,6 @@
 export {default as signMiddleware} from './signMiddleware';
 export {default as etagMiddleware} from './etagMiddleware';
+export {default as apiLoginMiddleware} from './apiLoginMiddleware';
 export {default as roleMiddleware} from './roleMiddleware';
 export {default as adminRoleMiddleware} from './adminRoleMiddleware';
 export {default as systemRoleMiddleware} from './systemRoleMiddleware';