@barry.jiang/aiapp-apaas-infra 1.0.0

package/README.md

@@ -0,0 +1,8 @@
+# @barry.jiang/aiapp-apaas-infra
+
+Express middleware that proxies requests from `/_gw_/api/**` to `/api/**` with automatic access token validation and standardization.
+
+## install
+
+```bash
+npm install @barry.jiang/aiapp-apaas-infra

package/package.json

@@ -0,0 +1,21 @@
+{
+  "name": "@barry.jiang/aiapp-apaas-infra",
+  "version": "1.0.0",
+  "description": "apaas infra of aiapp",
+  "main": "src/gatewayMiddleware.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": ["aiapp","middleware","gateway"],
+  "author": "barry.jiang",
+  "license": "MIT",
+  "type": "commonjs",
+  "files": [
+    "src",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=14"
+  }
+}

package/src/gatewayMiddleware.js

@@ -0,0 +1,36 @@
+/**
+ * Gateway Middleware
+ * 
+ * 拦截所有 /_gw_/api/**请求：
+ * 1. 从header中提取x-access-token
+ * 2. 若缺失，返回401
+ * 3. 若存在，重写路径为 /api/**,并设置标准 Authorization:Bear <token>
+ */
+function createGatewayMiddleware() {
+    return (req, res, next) => {
+        if (!req.url.startsWith('/_gw_/api/')) {
+            return next();
+        }
+
+        let acessTokenHeader = 'x-access-token';
+        let token = null;
+        if (req.headers[acessTokenHeader]) {
+            token = req.headers[acessTokenHeader]
+        }
+
+        if (!token) {
+            return res.status(401).json({
+                error:'Unauthorized',
+                message:`Access token reuqired in header: '${accessTokenHeader}'`
+            })
+        }
+        const originalUrl = req.url;
+        req.url = originalUrl.replace(/^\/_gw_/,'');
+        req.headers.authorization = `Bearer ${token}`;
+        delete req.headers[acessTokenHeader];
+        console.log(`[Gateway] ${req.method} ${originalUrl} -> ${req.url}`);
+        next();
+    };
+}
+
+module.exports = { createGatewayMiddleware};