@chargecarepro/host-auth-sdk 1.1.0

package/README.md

@@ -0,0 +1,63 @@
+# @chargecarepro/host-auth-sdk
+
+充换电智能运维平台 — 托管应用认证工具包。
+
+托管应用通过此 SDK 与运维平台通信，按需获取 Token，无需直接编写 postMessage 代码。
+
+## 安装
+
+```bash
+npm install @chargecarepro/host-auth-sdk
+```
+
+## 快速开始
+
+```javascript
+import { HostAuthSDK } from '@chargecarepro/host-auth-sdk'
+
+const authSDK = new HostAuthSDK()
+
+// 1. 初始化（必须在 IFrame 中运行）
+await authSDK.init({ origin: 'https://nwyw.wodeev.com/' })
+
+// 2. 获取 Token
+const { accessToken } = await authSDK.ensureValidToken()
+
+// 3. 调用业务 API
+await fetch('/api/v1/work-orders', {
+  headers: { Authorization: `Bearer ${accessToken}` }
+})
+```
+
+## API
+
+| 方法 | 返回值 | 说明 |
+|------|--------|------|
+| `init({ origin })` | `Promise<void>` | 初始化 SDK |
+| `getToken()` | `Promise<{accessToken, expiresIn, userId}>` | 获取 Token |
+| `ensureValidToken()` | `Promise<{accessToken, expiresIn, userId}>` | 获取有效 Token（自动续期） |
+| `getUserProfile()` | `Promise<object>` | 获取用户资料 |
+| `call({ url, method, data, params, headers })` | `Promise<any>` | 调用业务 API，自动注入 Token，401 自动续期重试 |
+| `destroy()` | `void` | 销毁实例 |
+
+### call() 示例
+
+```javascript
+// GET 请求
+const list = await sdk.call({
+  url: '/api/v1/work-orders',
+  method: 'GET',
+  params: { page: 1, size: 20 }
+})
+
+// POST 请求
+const result = await sdk.call({
+  url: '/api/v1/orders',
+  method: 'POST',
+  data: { name: '测试工单', type: 1 }
+})
+```
+
+## License
+
+UNLICENSED

package/index.d.ts

@@ -0,0 +1,54 @@
+declare class HostAuthSDK {
+  /**
+   * 初始化 SDK，校验 IFrame 上下文并注册消息监听
+   * @param options.origin - 运维平台地址，如 'https://nwyw.wodeev.com/'
+   */
+  init(options: { origin: string }): Promise<void>
+
+  /**
+   * 获取当前用户的 AccessToken
+   * @returns Promise<{ accessToken: string; expiresIn: number; userId: string }>
+   */
+  getToken(): Promise<{
+    accessToken: string
+    expiresIn: number
+    userId: string
+  }>
+
+  /**
+   * 确保返回有效的 AccessToken（过期时自动续期）
+   * @returns Promise<{ accessToken: string; expiresIn: number; userId: string }>
+   */
+  ensureValidToken(): Promise<{
+    accessToken: string
+    expiresIn: number
+    userId: string
+  }>
+
+  /**
+   * 获取当前登录用户完整资料
+   * @returns Promise<Record<string, any>>
+   */
+  getUserProfile(): Promise<Record<string, any>>
+
+  /**
+   * 调用业务 API，自动注入 Token 并处理 401 续期
+   * @example
+   * const list = await sdk.call({ url: '/api/v1/work-orders', method: 'GET', params: { page: 1 } })
+   * const result = await sdk.call({ url: '/api/v1/orders', method: 'POST', data: { name: 'test' } })
+   */
+  call(options: {
+    url: string
+    method?: string
+    data?: Record<string, any>
+    params?: Record<string, any>
+    headers?: Record<string, string>
+  }): Promise<any>
+
+  /**
+   * 销毁 SDK 实例，移除事件监听
+   */
+  destroy(): void
+}
+
+export { HostAuthSDK }

package/index.js

@@ -0,0 +1,194 @@
+/**
+ * CCP Host Auth SDK v1.0.0
+ * 托管应用认证工具包 — 通过 postMessage 与智能运维平台通信获取 Token
+ *
+ * CJS: const { HostAuthSDK } = require('@chargecarepro/host-auth-sdk')
+ * ESM: import { HostAuthSDK } from '@chargecarepro/host-auth-sdk'
+ * CDN: <script src="https://nwyw.wodeev.com/sdk/host-auth.js"></script>
+ */
+(function (root, factory) {
+  if (typeof module !== 'undefined' && module.exports) {
+    module.exports = factory()
+  } else if (typeof define === 'function' && define.amd) {
+    define([], factory)
+  } else {
+    root.HostAuthSDK = factory().HostAuthSDK
+  }
+}(typeof self !== 'undefined' ? self : this, function () {
+  'use strict'
+
+  var REQUEST_TYPE = 'host-auth.request'
+  var RESPONSE_TYPE = 'host-auth.response'
+  var TIMEOUT = 10000
+
+  function generateId() {
+    return 'ha_' + Date.now().toString(36) + '_' + Math.random().toString(36).slice(2, 9)
+  }
+
+  function HostAuthSDK() {
+    var _origin = ''
+    var _initialized = false
+    var _pending = {}
+
+    function _handleMessage(event) {
+      var data = event.data
+      if (!data || data.type !== RESPONSE_TYPE) return
+
+      var pending = _pending[data.id]
+      if (!pending) return
+
+      clearTimeout(pending.timer)
+      delete _pending[data.id]
+
+      if (data.success) {
+        pending.resolve(data.data)
+      } else {
+        pending.reject(new Error(data.error || '[HostAuthSDK] 请求失败'))
+      }
+    }
+
+    function _request(method) {
+      if (!_initialized) {
+        return Promise.reject(new Error('[HostAuthSDK] 请先调用 init()'))
+      }
+
+      return new Promise(function (resolve, reject) {
+        var id = generateId()
+
+        var timer = setTimeout(function () {
+          delete _pending[id]
+          reject(new Error('[HostAuthSDK] 请求超时 (' + method + ')'))
+        }, TIMEOUT)
+
+        _pending[id] = { resolve: resolve, reject: reject, timer: timer }
+
+        window.parent.postMessage(
+          { type: REQUEST_TYPE, id: id, method: method },
+          '*'
+        )
+      })
+    }
+
+    this.init = function (options) {
+      if (!options || !options.origin) {
+        return Promise.reject(new Error('[HostAuthSDK] init 需要传入 origin 参数'))
+      }
+
+      if (window === window.parent) {
+        return Promise.reject(
+          new Error('[HostAuthSDK] 托管应用须在智能运维平台 IFrame 中运行')
+        )
+      }
+
+      _origin = options.origin.replace(/\/+$/, '')
+      _initialized = true
+
+      window.addEventListener('message', _handleMessage)
+
+      return Promise.resolve()
+    }
+
+    this.getToken = function () {
+      return _request('getToken')
+    }
+
+    this.ensureValidToken = function () {
+      return _request('ensureValidToken')
+    }
+
+    this.getUserProfile = function () {
+      return _request('getUserProfile')
+    }
+
+    /**
+     * 调用业务 API，自动注入 Token 并处理 401 续期
+     * @param {Object} options
+     * @param {string} options.url - API 路径，如 '/api/v1/work-orders'
+     * @param {string} [options.method='GET'] - HTTP 方法
+     * @param {Object} [options.data] - 请求体（JSON）
+     * @param {Object} [options.params] - URL 查询参数
+     * @param {Object} [options.headers] - 额外请求头
+     * @returns {Promise<any>}
+     *
+     * @example
+     * const list = await sdk.call({ url: '/api/v1/work-orders', method: 'GET', params: { page: 1 } })
+     * const result = await sdk.call({ url: '/api/v1/orders', method: 'POST', data: { name: 'test' } })
+     */
+    this.call = function (options) {
+      if (!options || !options.url) {
+        return Promise.reject(new Error('[HostAuthSDK] call 需要传入 url 参数'))
+      }
+
+      function doFetch(overrideToken) {
+        var token = overrideToken
+        function buildHeaders() {
+          var h = { 'Content-Type': 'application/json' }
+          if (options.headers) {
+            for (var k in options.headers) { h[k] = options.headers[k] }
+          }
+          h['Authorization'] = 'Bearer ' + token
+          return h
+        }
+        // 拼接查询参数
+        var url = options.url
+        if (options.params) {
+          var qs = []
+          for (var k in options.params) {
+            if (options.params[k] !== undefined && options.params[k] !== null) {
+              qs.push(encodeURIComponent(k) + '=' + encodeURIComponent(options.params[k]))
+            }
+          }
+          if (qs.length) url += (url.indexOf('?') === -1 ? '?' : '&') + qs.join('&')
+        }
+        var init = {
+          method: options.method || 'GET',
+          headers: buildHeaders()
+        }
+        if (options.data && init.method !== 'GET') {
+          init.body = JSON.stringify(options.data)
+        }
+        return fetch(url, init).then(function (resp) {
+          if (resp.status === 401 && !overrideToken) {
+            // Token 失效 → 续期后重试一次
+            return _request('ensureValidToken').then(function (tokenData) {
+              return doFetch(tokenData.accessToken)
+            })
+          }
+          if (!resp.ok) {
+            return resp.json().then(function (body) {
+              var err = new Error(body.msg || body.message || '请求失败 (' + resp.status + ')')
+              err.status = resp.status
+              err.data = body
+              throw err
+            }).catch(function (e) {
+              if (e.status) throw e
+              var err2 = new Error('请求失败 (' + resp.status + ')')
+              err2.status = resp.status
+              throw err2
+            })
+          }
+          return resp.json()
+        })
+      }
+
+      return _request('ensureValidToken').then(function (tokenData) {
+        return doFetch(tokenData.accessToken)
+      })
+    }
+
+    this.destroy = function () {
+      window.removeEventListener('message', _handleMessage)
+
+      var keys = Object.keys(_pending)
+      for (var i = 0; i < keys.length; i++) {
+        var pending = _pending[keys[i]]
+        clearTimeout(pending.timer)
+        pending.reject(new Error('[HostAuthSDK] SDK 已销毁'))
+      }
+      _pending = {}
+      _initialized = false
+    }
+  }
+
+  return { HostAuthSDK: HostAuthSDK }
+}))

package/index.mjs

@@ -0,0 +1,156 @@
+var REQUEST_TYPE = 'host-auth.request'
+var RESPONSE_TYPE = 'host-auth.response'
+var TIMEOUT = 10000
+
+function generateId() {
+  return 'ha_' + Date.now().toString(36) + '_' + Math.random().toString(36).slice(2, 9)
+}
+
+function HostAuthSDK() {
+  var _origin = ''
+  var _initialized = false
+  var _pending = {}
+
+  function _handleMessage(event) {
+    var data = event.data
+    if (!data || data.type !== RESPONSE_TYPE) return
+
+    var pending = _pending[data.id]
+    if (!pending) return
+
+    clearTimeout(pending.timer)
+    delete _pending[data.id]
+
+    if (data.success) {
+      pending.resolve(data.data)
+    } else {
+      pending.reject(new Error(data.error || '[HostAuthSDK] 请求失败'))
+    }
+  }
+
+  function _request(method) {
+    if (!_initialized) {
+      return Promise.reject(new Error('[HostAuthSDK] 请先调用 init()'))
+    }
+
+    return new Promise(function (resolve, reject) {
+      var id = generateId()
+
+      var timer = setTimeout(function () {
+        delete _pending[id]
+        reject(new Error('[HostAuthSDK] 请求超时 (' + method + ')'))
+      }, TIMEOUT)
+
+      _pending[id] = { resolve: resolve, reject: reject, timer: timer }
+
+      window.parent.postMessage(
+        { type: REQUEST_TYPE, id: id, method: method },
+        '*'
+      )
+    })
+  }
+
+  this.init = function (options) {
+    if (!options || !options.origin) {
+      return Promise.reject(new Error('[HostAuthSDK] init 需要传入 origin 参数'))
+    }
+
+    if (window === window.parent) {
+      return Promise.reject(
+        new Error('[HostAuthSDK] 托管应用须在智能运维平台 IFrame 中运行')
+      )
+    }
+
+    _origin = options.origin.replace(/\/+$/, '')
+    _initialized = true
+
+    window.addEventListener('message', _handleMessage)
+
+    return Promise.resolve()
+  }
+
+  this.getToken = function () {
+    return _request('getToken')
+  }
+
+  this.ensureValidToken = function () {
+    return _request('ensureValidToken')
+  }
+
+  this.getUserProfile = function () {
+    return _request('getUserProfile')
+  }
+
+  this.call = function (options) {
+    if (!options || !options.url) {
+      return Promise.reject(new Error('[HostAuthSDK] call 需要传入 url 参数'))
+    }
+    function doFetch(overrideToken) {
+      var token = overrideToken
+      function buildHeaders() {
+        var h = { 'Content-Type': 'application/json' }
+        if (options.headers) {
+          for (var k in options.headers) { h[k] = options.headers[k] }
+        }
+        h['Authorization'] = 'Bearer ' + token
+        return h
+      }
+      var url = options.url
+      if (options.params) {
+        var qs = []
+        for (var k in options.params) {
+          if (options.params[k] !== undefined && options.params[k] !== null) {
+            qs.push(encodeURIComponent(k) + '=' + encodeURIComponent(options.params[k]))
+          }
+        }
+        if (qs.length) url += (url.indexOf('?') === -1 ? '?' : '&') + qs.join('&')
+      }
+      var init = {
+        method: options.method || 'GET',
+        headers: buildHeaders()
+      }
+      if (options.data && init.method !== 'GET') {
+        init.body = JSON.stringify(options.data)
+      }
+      return fetch(url, init).then(function (resp) {
+        if (resp.status === 401 && !overrideToken) {
+          return _request('ensureValidToken').then(function (tokenData) {
+            return doFetch(tokenData.accessToken)
+          })
+        }
+        if (!resp.ok) {
+          return resp.json().then(function (body) {
+            var err = new Error(body.msg || body.message || '请求失败 (' + resp.status + ')')
+            err.status = resp.status
+            err.data = body
+            throw err
+          }).catch(function (e) {
+            if (e.status) throw e
+            var err2 = new Error('请求失败 (' + resp.status + ')')
+            err2.status = resp.status
+            throw err2
+          })
+        }
+        return resp.json()
+      })
+    }
+    return _request('ensureValidToken').then(function (tokenData) {
+      return doFetch(tokenData.accessToken)
+    })
+  }
+
+  this.destroy = function () {
+    window.removeEventListener('message', _handleMessage)
+
+    var keys = Object.keys(_pending)
+    for (var i = 0; i < keys.length; i++) {
+      var pending = _pending[keys[i]]
+      clearTimeout(pending.timer)
+      pending.reject(new Error('[HostAuthSDK] SDK 已销毁'))
+    }
+    _pending = {}
+    _initialized = false
+  }
+}
+
+export { HostAuthSDK }

package/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "@chargecarepro/host-auth-sdk",
+  "version": "1.1.0",
+  "description": "充换电智能运维平台 — 托管应用认证工具包。通过 postMessage 与运维平台通信获取 Token。",
+  "main": "index.js",
+  "module": "index.mjs",
+  "types": "index.d.ts",
+  "files": [
+    "index.js",
+    "index.mjs",
+    "index.d.ts",
+    "README.md"
+  ],
+  "keywords": [
+    "chargecarepro",
+    "host-auth",
+    "iframe",
+    "postmessage",
+    "auth",
+    "sso"
+  ],
+  "license": "UNLICENSED",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/chargecarepro/host-auth-sdk"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}