@gadmin2n/schematics 0.0.55

package/dist/lib/application/files/gadmin2-game-angle-demo/server/prisma/.generator.prisma

@@ -0,0 +1,32 @@
+// This is your Prisma schema file,
+// learn more about it in the docs: https://pris.ly/d/prisma-schema
+datasource db {
+  provider = "mysql"
+  url      = env("DATABASE_URL")
+}
+
+generator client {
+  provider = "prisma-client-js"
+}
+
+generator nestjs {
+  provider                        = "prisma-nest-generator"
+  output                          = "../src/generated"
+  outputToNestJsResourceStructure = "true"
+  exportRelationModifierClasses   = "true"
+  reExport                        = "false"
+  createDtoPrefix                 = "Create"
+  updateDtoPrefix                 = "Update"
+  dtoSuffix                       = "Dto"
+  entityPrefix                    = ""
+  entitySuffix                    = "Entity"
+  fileNamingStyle                 = "camel"
+}
+
+generator react {
+  provider = "prisma-react-generator"
+}
+
+generator dbml {
+  provider = "prisma-dbml-generator"
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/games.ts

@@ -0,0 +1,71 @@
+export default [
+  { label: 'HOK', value: 'u10000000066' },
+  { label: 'PUBG', value: 'ufc454d9b1af70b40588e2a6fa4da4a8b' },
+  { label: 'NIKKE', value: 'uef4312b08dde07820374dd57086ea2fb' },
+  { label: 'Fatshark（战锤）', value: 'e72b4feda779c36a6b6d3cb5eb8efe5d1' },
+  { label: '阿凡达-蓝色行动', value: 'u10000000033' },
+  { label: 'SOP 重生边缘', value: 'eaccc6f302cd02c7e0cf7c806497a3395' },
+  { label: 'Vrising', value: 'ec41360495e0a6b2eb0809ded33746044' },
+  { label: 'Bloodhunt', value: 'e00000000001' },
+  { label: 'Conan Exiles', value: 'efc7a5eee1d6ca668931bcebf69198b60' },
+  { label: 'ACM刺客信条', value: 'e22eae55990dfe9ef2932e5a8234d63db' },
+  {
+    label: '黎明觉醒（生机/Undawn）',
+    value: 'u037857a0ad6aaad86a15227be23adcc4',
+  },
+  { label: '幻塔', value: 'u6d721eb69ef7de198bb84be26be6d40b' },
+  { label: 'NBA2', value: 'u03e9e2775cf377904ca6583456d9f411' },
+  { label: 'world of Taris', value: 'u10000000073' },
+  { label: 'CNC', value: 'u10000000074' },
+  {
+    label: 'Party Animals派对动物',
+    value: 'ea08cbff9a96b95174d530e2eb67c5974',
+  },
+  {
+    label: 'Super Buckyball Tournament超级巴基球',
+    value: 'edd8d6e6890b8dbb27c5c88a082d0143b',
+  },
+  {
+    label: 'Blackmyth: Wukong黑神话：悟空',
+    value: 'e3798a6c4b1afee6ac5f161202a27a7ae',
+  },
+  {
+    label: 'Amazing Cultivation Simulator了不起的修仙模拟器',
+    value: 'e49e633f2e87e606376af989abab855a4',
+  },
+  { label: 'DFM', value: 'DFM' },
+  { label: 'Apex', value: 'u10000000015' },
+  { label: '龙之谷2', value: 'u9d2a3dcc71529b3e0cd5f486d4cd9adb' },
+  { label: '代号GST', value: 'u10000000075' },
+  { label: '小森生活', value: 'ubc78e405a8e320c58a8247299252c522' },
+  { label: 'CODM', value: 'uef76e8182c79db6aafefdfbdd04b7d99' },
+  { label: 'UAMO', value: 'u10000000022' },
+  { label: 'Nightingale', value: 'e11000000297' },
+  { label: 'Brawl Stars', value: 'u84eb1af3a729e5d540b6b78073938574' },
+  { label: 'Transformers Reactivate', value: 'e11000000300' },
+  { label: 'Project Astrid', value: 'e11000000301' },
+  { label: 'Path of Exile', value: 'e91eeea272398097f28c93d0a49f58379' },
+  { label: 'GTFO', value: 'e0e9148a8f7c2e98a5b7d538a75afc932' },
+  { label: 'Warframe', value: 'e11000000282' },
+  { label: 'Xdefiant', value: 'e11000000302' },
+  { label: 'Project EVO', value: 'u10000000079' },
+  { label: 'Derby', value: 'u610b8f6f9103f9431dac99aa5bd45953' },
+  { label: 'Jade', value: 'u10000000071' },
+  { label: 'PAX DEI', value: 'ece5b843df224627f4cc626d9e1f84db5' },
+  { label: 'Perfect New World', value: 'e42a5670bf7a585bce3ac55ad2c384284' },
+  { label: 'Lost Ark', value: 'e7052d6286075a212db99f5ecb452a340' },
+  { label: 'Life After', value: 'u6869b6d91db0225ff10cdf25178b5da6' },
+  {
+    label: 'ミスティックアビス：遺失海域',
+    value: 'u48be1ec5b04c723a894928133d31059c',
+  },
+  { label: 'Once Human', value: 'u909c7ab2e46afc2bc64442c51c62126d' },
+  { label: 'Marathon', value: 'e11000000306' },
+  { label: 'Eggy Party', value: 'u1e7b2b31e2fc1897e6093cd1ee2925b4' },
+  { label: 'AOV', value: 'u539c87d525e9cf649cea9bc6319d4b8f' },
+  { label: 'MLBB', value: 'u1426b49d8626e915264442d821e41a4e' },
+  { label: 'Wild Rift', value: 'u354f6a7c0b0b7af46839c9b4beeefe15' },
+  { label: 'Free Fire', value: 'u589791f804845507e85fa880c6d88d41' },
+  { label: 'AIGC', value: 'u10000000080' },
+  { label: 'Garena Undawn', value: 'u337f01e5662eb90de6e6aafb28f0a4be' },
+];

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/index.ts

@@ -0,0 +1,27 @@
+
+import { PrismaClient } from '@prisma/client';
+import games from './games';
+import roles from './roles';
+
+const prisma = new PrismaClient();
+
+async function main() {
+  await prisma.game.createMany({
+    data: games.map((game) => ({
+      unified_editionid: game.value,
+      name: game.label,
+      creator: 'clzhu',
+    })),
+    skipDuplicates: true,
+  });
+  await prisma.role.createMany({ data: roles });
+}
+
+main()
+  .catch((e) => {
+    console.log(e);
+    process.exit(1);
+  })
+  .finally(async () => {
+    await prisma.$disconnect();
+  });

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/roles.ts

@@ -0,0 +1,4 @@
+export default [
+  { userid: 'clzhu', username: 'clzhu', roles: '["SYSTEM_ADMIN"]' },
+  { userid: 'kavenma', username: 'kavenma', roles: '["SYSTEM_ADMIN"]' },
+];

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/app.controller.spec.ts

@@ -0,0 +1,22 @@
+import { Test, TestingModule } from '@nestjs/testing';
+import { AppController } from './app.controller';
+import { AppService } from './app.service';
+
+describe('AppController', () => {
+  let appController: AppController;
+
+  beforeEach(async () => {
+    const app: TestingModule = await Test.createTestingModule({
+      controllers: [AppController],
+      providers: [AppService],
+    }).compile();
+
+    appController = app.get<AppController>(AppController);
+  });
+
+  describe('root', () => {
+    it('should return "Hello World!"', () => {
+      expect(appController.getHello()).toBe('Hello World!');
+    });
+  });
+});

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/app.controller.ts

@@ -0,0 +1,52 @@
+import { UserType } from '@gadmin2/nest-common';
+import { Controller, Get, Req, Res } from '@nestjs/common';
+import { ApiOkResponse, ApiProperty } from '@nestjs/swagger';
+import { Request } from 'express';
+import { AppService } from './app.service';
+import { AllowUnauthorizedRequest } from './lib/auth.guard';
+
+class UserInfo {
+  @ApiProperty()
+  userid: string;
+
+  @ApiProperty()
+  username: string;
+}
+@Controller()
+export class AppController {
+  constructor(private readonly appService: AppService) {}
+
+  @Get()
+  index(@Res() res) {
+    res.status(302).redirect('/dashboard');
+  }
+
+  @Get('/userinfo')
+  @ApiOkResponse({ type: UserInfo })
+  userInfo(@Req() request: Request & { user: UserType }) {
+    return request?.user || { userid: '', username: '' };
+  }
+
+  @Get('/hello')
+  hello(): string {
+    return this.appService.getHello();
+  }
+
+  @Get('/login-callback')
+  @AllowUnauthorizedRequest()
+  loginCallback(@Req() request: Request, @Res() res) {
+    return this.appService.loginCallback(request, res);
+  }
+
+  @Get('login')
+  @AllowUnauthorizedRequest()
+  login(@Req() request: Request, @Res() res) {
+    return this.appService.login(request, res);
+  }
+
+  @Get('logout')
+  @AllowUnauthorizedRequest()
+  logout(@Req() request: Request, @Res() res) {
+    return this.appService.logout(request, res);
+  }
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/app.module.ts

@@ -0,0 +1,75 @@
+import { Module } from '@nestjs/common';
+import { ConfigModule, ConfigService } from '@nestjs/config';
+// import { ScheduleModule } from '@nestjs/schedule';
+import { AccessControlModule } from 'nest-access-control';
+import {
+  // utilities as nestWinstonModuleUtilities,
+  WinstonModule,
+} from 'nest-winston';
+import { PrismaModule } from 'nestjs-prisma';
+import * as winston from 'winston';
+import config from '../config';
+import { roles as appRoles } from '../config/ac.config';
+import { AppController } from './app.controller';
+import { AppService } from './app.service';
+import modules from './modules';
+
+import { ServeStaticModule } from '@nestjs/serve-static';
+import { join } from 'path';
+
+@Module({
+  imports: [
+    // ScheduleModule.forRoot(),
+
+    ServeStaticModule.forRoot({
+      rootPath: join(__dirname, '..', 'www'),
+      exclude: ['/api/(.*)'],
+    }),
+
+    ConfigModule.forRoot({ isGlobal: true, load: [config] }),
+
+    AccessControlModule.forRoles(appRoles),
+
+    WinstonModule.forRootAsync({
+      useFactory: (configService: ConfigService) => {
+        const loggerConfig = configService.get('logger');
+        return {
+          level: loggerConfig.level,
+          transports: [
+            new winston.transports.Console({
+              format: winston.format.combine(
+                // nestWinstonModuleUtilities.format.nestLike(),
+                winston.format.splat(),
+                winston.format.timestamp(),
+                // winston.format.ms(),
+                winston.format.json(),
+                // nestWinstonModuleUtilities.format.nestLike('MyApp', { prettyPrint: true }),
+              ),
+            }),
+          ],
+        };
+      },
+      inject: [ConfigService],
+    }),
+
+    PrismaModule.forRootAsync({
+      isGlobal: true,
+      useFactory: async (configService: ConfigService) => {
+        const prismaConfig = configService.get('prisma');
+        return {
+          prismaOptions: {
+            log: prismaConfig.log,
+          },
+          explicitConnect: prismaConfig.explicit,
+        };
+      },
+      inject: [ConfigService],
+    }),
+
+    ...modules,
+  ],
+
+  controllers: [AppController],
+  providers: [AppService],
+})
+export class AppModule {}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/app.service.ts

@@ -0,0 +1,50 @@
+import { Injectable } from '@nestjs/common';
+import YuFuId, { GAdminTokenName } from './lib/yufuid';
+
+@Injectable()
+export class AppService {
+  getHello(): string {
+    return 'Hello World!';
+  }
+
+  async loginCallback(req, res) {
+    const { code, state } = req.query;
+
+    const tokenInfo = await YuFuId.getToken(code);
+    const userInfo = await YuFuId.getUserInfo(tokenInfo.access_token);
+
+    const expiresIn = 7 * 24 * 3600;
+    const { user_id, sub, name, email } = userInfo;
+    const payload = { user_id, sub, name, email };
+    const token = await YuFuId.sign(payload, expiresIn);
+
+    // append token param for local development
+    const url = new URL(state);
+    if (url.port != '') {
+      url.searchParams.set(GAdminTokenName, token);
+    }
+
+    res.cookie(GAdminTokenName, token, {
+      maxAge: expiresIn * 1000,
+      httpOnly: false,
+    });
+    res.status(302).redirect(url.toString());
+  }
+
+  login(req, res) {
+    const { redirect_url, ui_locales = 'zh-CN' } = req.query;
+
+    // TODO: verify redirect_url domain
+
+    const authorizeUrl = YuFuId.authorize(redirect_url, ui_locales);
+    res.status(302).redirect(authorizeUrl);
+  }
+
+  logout(req, res) {
+    const { redirect_url } = req.query;
+
+    const logoutUrl = YuFuId.logout(redirect_url);
+    res.cookie(GAdminTokenName);
+    res.status(302).redirect(logoutUrl);
+  }
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/lib/auth.guard.ts

@@ -0,0 +1,108 @@
+// https://iwiki.woa.com/pages/viewpage.action?pageId=4007728669
+// node version >= v12.22
+// npm i jose@4.14.4
+import { UserType } from '@gadmin2/nest-common';
+import {
+  CanActivate,
+  ExecutionContext,
+  Injectable,
+  SetMetadata,
+  UnauthorizedException,
+} from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { ApiSecurity } from '@nestjs/swagger';
+import { DECORATORS_PREFIX } from '@nestjs/swagger/dist/constants';
+import { getIdentity as getWoaIdentity } from './woaAuth';
+import YuFuId, { GAdminTokenName } from './yufuid';
+
+const API_SECURITY = `${DECORATORS_PREFIX}/apiSecurity`;
+export function ApiKeyAuth(name = 'X-API-KEY') {
+  return ApiSecurity(name);
+}
+
+export const AllowUnauthorizedRequest = () =>
+  SetMetadata('allowUnauthorizedRequest', true);
+
+export const AllowApiKeyRequest = () => SetMetadata('allowApiKeyRequest', true);
+
+async function getIdentity(headers, cookies, key): Promise<UserType> {
+  // 先验证woa登录态
+  try {
+    const { staffid, staffname } = await getWoaIdentity(headers, key);
+    if (staffid) {
+      return { userid: staffid, username: staffname };
+    }
+  } catch (e) {
+    console.warn('woa auth failed, try yufu auth...');
+  }
+  // 再验证玉符登录态
+  const token = headers[GAdminTokenName] || cookies[GAdminTokenName];
+  const userInfo = await YuFuId.verify(token);
+  console.log('yufu auth success', userInfo);
+  return { userid: userInfo.sub, username: userInfo.sub };
+}
+
+// apikey genertor https://codepen.io/corenominal/pen/rxOmMJ
+const API_KEYS = [
+  {
+    userid: 'steam_session',
+    username: 'steam_session',
+    apiKey: '9c5fc474-9e95-480b-b380-5e15f77b5f9f',
+  },
+];
+async function getApikeyIdentity(req): Promise<UserType> {
+  const apiKey = req.headers['x-api-key'] ?? req.query.api_key;
+  if (apiKey) {
+    for (const item of API_KEYS) {
+      if (item.apiKey === apiKey) {
+        console.log('apikey auth success:', item.userid);
+        return { userid: item.userid, username: item.username };
+      }
+    }
+  }
+  throw new UnauthorizedException(`error apikey: ${apiKey}`);
+}
+
+@Injectable()
+export default class AuthGuard implements CanActivate {
+  constructor(private readonly token: string, private reflector: Reflector) {}
+
+  canActivate(context: ExecutionContext): boolean | Promise<boolean> {
+    const request = context.switchToHttp().getRequest();
+    const allowUnauthorizedRequest = this.reflector.get<boolean>(
+      'allowUnauthorizedRequest',
+      context.getHandler(),
+    );
+    if (allowUnauthorizedRequest) {
+      return true;
+    }
+
+    const allowApiKeyRequest = this.reflector.get<boolean>(
+      API_SECURITY,
+      context.getHandler(),
+    );
+
+    return (
+      allowApiKeyRequest
+        ? getApikeyIdentity(request)
+        : Promise.reject("don't allow api key request.")
+    )
+      .catch((error) => {
+        console.warn(error, 'try woa auth...');
+
+        return getIdentity(
+          request.headers,
+          request.cookies,
+          Buffer.from(this.token),
+        );
+      })
+      .then((userInfo) => {
+        request.user = userInfo;
+        return true;
+      })
+      .catch((error) => {
+        console.error(error);
+        throw new UnauthorizedException(error);
+      });
+  }
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/lib/roles.guard.ts

@@ -0,0 +1,47 @@
+import { UserType } from '@gadmin2/nest-common';
+import {
+  CanActivate,
+  ExecutionContext,
+  ForbiddenException,
+  Injectable,
+} from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+type RolesGetter = (
+  user: UserType,
+) => Promise<{ business?: (string | number)[]; roles: string[] }>;
+
+@Injectable()
+export default class RolesGuard implements CanActivate {
+  constructor(
+    private readonly getter: RolesGetter,
+    private reflector: Reflector,
+  ) {}
+
+  canActivate(context: ExecutionContext): boolean | Promise<boolean> {
+    const req = context.switchToHttp().getRequest();
+
+    const allowUnauthorizedRequest = this.reflector.get<boolean>(
+      'allowUnauthorizedRequest',
+      context.getHandler(),
+    );
+    if (allowUnauthorizedRequest) {
+      return true;
+    }
+
+    if (!req.user) {
+      throw new ForbiddenException();
+    }
+
+    return this.getter(req.user)
+      .then((configPerms) => {
+        if (configPerms.roles.length === 0) {
+          throw new ForbiddenException();
+        }
+        req.user.configPerms = configPerms;
+        return true;
+      })
+      .catch((_) => {
+        throw new ForbiddenException();
+      });
+  }
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/lib/utils.ts

@@ -0,0 +1,54 @@
+const crypto = require('crypto');
+const CryptoJS = require('crypto-js');
+
+export function md5(text: string) {
+  return crypto.createHash('md5').update(text).digest('hex');
+}
+
+// https://segmentfault.com/a/1190000039192480
+/**
+ * AES-256-ECB对称加密
+ * @param text {string} 要加密的明文
+ * @param secretKey {string} 密钥，43位随机大小写与数字
+ * @returns {string} 加密后的密文，Base64格式
+ */
+export function AES_ECB_ENCRYPT(text: string, secretKey: string): string {
+  const keyHex = CryptoJS.enc.Base64.parse(secretKey);
+  const messageHex = CryptoJS.enc.Utf8.parse(text);
+  const encrypted = CryptoJS.AES.encrypt(messageHex, keyHex, {
+    mode: CryptoJS.mode.ECB,
+    padding: CryptoJS.pad.Pkcs7,
+  });
+  return encrypted.toString();
+}
+
+/**
+ * AES-256-ECB对称解密
+ * @param textBase64 {string} 要解密的密文，Base64格式
+ * @param secretKey {string} 密钥，43位随机大小写与数字
+ * @returns {string} 解密后的明文
+ */
+export function AES_ECB_DECRYPT(textBase64: string, secretKey: string): string {
+  const keyHex = CryptoJS.enc.Base64.parse(secretKey);
+  const decrypt = CryptoJS.AES.decrypt(textBase64, keyHex, {
+    mode: CryptoJS.mode.ECB,
+    padding: CryptoJS.pad.Pkcs7,
+  });
+  return CryptoJS.enc.Utf8.stringify(decrypt);
+}
+
+export function addFieldIfExist(
+  name: string,
+  value: any,
+  obj: any,
+  anthor: any = undefined,
+) {
+  if (value !== undefined) {
+    if (anthor !== undefined) {
+      obj[name] = anthor;
+    } else {
+      obj[name] = value;
+    }
+  }
+  return obj;
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/lib/woaAuth.ts

@@ -0,0 +1,82 @@
+// https://iwiki.woa.com/pages/viewpage.action?pageId=4007728669
+// node version >= v12.22
+// npm i jose@4.14.4
+import { UserType } from '@gadmin2/nest-common';
+import {
+  CanActivate,
+  ExecutionContext,
+  Injectable,
+  UnauthorizedException,
+} from '@nestjs/common';
+const crypto = require('crypto'); //改成import，运行时会报错
+const jose = require('jose'); //改成import，运行时会报错
+
+async function decodeAuthorizationHeader(authorizationHeader, key) {
+  const dec = await jose.compactDecrypt(authorizationHeader, key);
+  const payload = JSON.parse(dec.plaintext as any);
+
+  const exp = new Date(payload.Expiration);
+  // 检验 token 是否已经过期，增加5分钟缓冲，避免服务器时间差异
+  if (new Date(new Date().getTime() - 3 * 60 * 1000) > exp) {
+    // demo 为了正常运行，此处异常注释了，实际环境需要开启验证
+    throw new Error('expired');
+  }
+  return payload;
+}
+
+function checkSignature(key, timestampSeconds, signature, extHeaders) {
+  if (!timestampSeconds || isNaN(timestampSeconds)) {
+    return false;
+  }
+  if (
+    !(Math.abs(parseInt(timestampSeconds, 10) * 1000 - Date.now()) <= 180000)
+  ) {
+    // demo 为了正常运行，此处异常注释了，实际环境需要开启验证
+    return false;
+  }
+
+  const hash = crypto.createHash('sha256');
+  hash.update(timestampSeconds + key + extHeaders.join(',') + timestampSeconds);
+  return signature.toLowerCase() === hash.digest('hex').toLowerCase();
+}
+
+export async function getIdentity(headers, key) {
+  const { staffid = '', staffname = '' } = headers;
+  const extHeaders = [
+    headers['x-rio-seq'],
+    staffid,
+    staffname,
+    headers['x-ext-data'] || '',
+  ];
+  if (!checkSignature(key, headers.timestamp, headers.signature, extHeaders)) {
+    throw new Error('check smartgate signature failed');
+  }
+  const taiIdentity = headers['x-tai-identity'];
+  if (taiIdentity) {
+    const payload = await decodeAuthorizationHeader(taiIdentity, key);
+    return { staffid: payload.StaffId, staffname: payload.LoginName };
+  }
+  return { staffid: parseInt(staffid, 10) || 0, staffname };
+}
+
+@Injectable()
+export class WoaAuthGuard implements CanActivate {
+  constructor(private readonly token: string) {}
+
+  canActivate(context: ExecutionContext): boolean | Promise<boolean> {
+    const request = context.switchToHttp().getRequest();
+    return getIdentity(request.headers, Buffer.from(this.token))
+      .then((userInfo) => {
+        const user: UserType = {
+          userid: userInfo.staffid,
+          username: userInfo.staffname,
+        };
+        request.user = user;
+        return true;
+      })
+      .catch((error) => {
+        console.log('UnauthorizedException');
+        throw new UnauthorizedException(error);
+      });
+  }
+}