@kne/fastify-account 1.0.0-alpha.0

package/index.js

@@ -0,0 +1,54 @@
+const fp = require('fastify-plugin');
+const packageJson = require('./package.json');
+const path = require('path');
+const merge = require('lodash/merge');
+
+module.exports = fp(
+  async function (fastify, options) {
+    await fastify.sequelize.addModels(path.resolve(__dirname, './models'));
+    options = merge(
+      {
+        prefix: `/api/v${packageJson.version.split('.')[0]}/account`, //如果为true，发送邮件和短信将不调用，验证码随response返回
+        isTest: false,
+        jwt: {
+          secret: 'super-secret'
+        },
+        defaultPassword: 'Aa000000!'
+      },
+      options
+    );
+    fastify.register(require('fastify-ip'));
+    fastify.register(require('@fastify/jwt'), options.jwt);
+    fastify.register(require('@kne/fastify-namespace'), {
+      options,
+      name: 'account',
+      modules: [
+        ['models', await fastify.sequelize.addModels(path.resolve(__dirname, './libs/models'))],
+        ['services', path.resolve(__dirname, './libs/services')],
+        ['controllers', path.resolve(__dirname, './libs/controllers')],
+        [
+          'authenticate',
+          {
+            user: async request => {
+              const info = await request.jwtVerify();
+              //这里判断失效时间
+              //info.iat
+              request.authenticatePayload = info.payload;
+              request.userInfo = await fastify.account.services.user.getUserInfo(request.authenticatePayload);
+            },
+            tenant: async request => {
+              request.tenantInfo = await fastify.account.services.tenant.tenantUserAuthenticate(request.userInfo);
+            },
+            admin: async request => {
+              request.adminInfo = await fastify.account.services.admin.superAdminAuthenticate(request.userInfo);
+            }
+          }
+        ]
+      ]
+    });
+  },
+  {
+    name: 'fastify-account',
+    dependencies: ['fastify-sequelize']
+  }
+);

package/libs/controllers/account.js

@@ -0,0 +1,189 @@
+const fp = require('fastify-plugin');
+module.exports = fp(async (fastify, options) => {
+  fastify.post(
+    `${options.prefix}/sendEmailCode`,
+    {
+      schema: {
+        body: {
+          type: 'object',
+          required: ['email'],
+          properties: {
+            email: { type: 'string', description: '邮箱' }
+          }
+        },
+        response: {
+          200: {
+            content: {
+              'application/json': {
+                schema: {
+                  type: 'object',
+                  properties: {
+                    code: { type: 'number' },
+                    data: {
+                      type: 'object',
+                      properties: {
+                        code: { type: 'string', description: '验证码' }
+                      }
+                    },
+                    msg: { type: 'string' }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    async request => {
+      const { email } = request.body;
+      const code = await fastify.account.services.account.sendEmailCode({ email });
+      return options.isTest ? { code } : {};
+    }
+  );
+
+  fastify.post(
+    `${options.prefix}/sendSMSCode`,
+    {
+      schema: {
+        body: {
+          type: 'object',
+          required: ['phone'],
+          properties: {
+            phone: { type: 'string', description: '电话' }
+          }
+        }
+      }
+    },
+    async request => {
+      const { phone } = request.body;
+      const code = await fastify.account.services.account.sendSMSCode({ phone });
+      return options.isTest ? { code } : {};
+    }
+  );
+
+  fastify.post(
+    `${options.prefix}/validateCode`,
+    {
+      schema: {
+        body: {
+          type: 'object',
+          required: ['name', 'type', 'code'],
+          properties: {
+            name: { type: 'string', description: '被验证的账号，手机或邮箱' },
+            type: { type: 'number', description: '0:手机注册,1:邮箱注册,2:手机登录,3:邮箱登录,4:验证租户管理员' },
+            code: { type: 'string', description: '接受到的验证码' }
+          }
+        }
+      }
+    },
+    async request => {
+      const { name, type, code } = request.body;
+      const isPass = await fastify.account.services.account.verificationCodeValidate({
+        name,
+        type,
+        code
+      });
+      if (!isPass) {
+        throw new Error('验证码错误');
+      }
+      return {};
+    }
+  );
+
+  fastify.post(
+    `${options.prefix}/accountIsExists`,
+    {
+      schema: {
+        body: {
+          oneOf: [
+            {
+              type: 'object',
+              required: ['phone'],
+              properties: {
+                phone: { type: 'string' }
+              }
+            },
+            {
+              type: 'object',
+              required: ['email'],
+              properties: {
+                email: { type: 'string' }
+              }
+            }
+          ]
+        }
+      }
+    },
+    async request => {
+      const { phone, email } = request.body;
+      return { isExists: await fastify.account.services.user.accountIsExists({ phone, email }) };
+    }
+  );
+
+  fastify.post(
+    `${options.prefix}/register`,
+    {
+      schema: {
+        body: {
+          oneOf: [
+            {
+              type: 'object',
+              required: ['phone', 'password', 'code'],
+              properties: {
+                avatar: { type: 'string' },
+                phone: { type: 'string' },
+                code: { type: 'string' },
+                password: { type: 'string' },
+                invitationCode: { type: 'string' },
+                nickname: { type: 'string' },
+                gender: { type: 'string' },
+                birthday: { type: 'string', format: 'date' },
+                description: { type: 'string' }
+              }
+            },
+            {
+              type: 'object',
+              required: ['email', 'password', 'code'],
+              properties: {
+                avatar: { type: 'string' },
+                email: { type: 'string' },
+                code: { type: 'string' },
+                password: { type: 'string' },
+                invitationCode: { type: 'string' },
+                nickname: { type: 'string' },
+                gender: { type: 'string' },
+                birthday: { type: 'string', format: 'date' },
+                description: { type: 'string' }
+              }
+            }
+          ]
+        }
+      }
+    },
+    async request => {
+      const account = request.body;
+      return await fastify.account.services.account.register(account);
+    }
+  );
+
+  fastify.post(
+    `${options.prefix}/login`,
+    {
+      schema: {
+        body: {
+          type: 'object',
+          required: ['username', 'password'],
+          properties: {
+            username: { type: 'string' },
+            password: { type: 'string' }
+          }
+        }
+      }
+    },
+    async request => {
+      const { username, password } = request.body;
+      const token = await fastify.account.services.account.login({ username, password, ip: request.ip });
+      return { token };
+    }
+  );
+});

package/libs/controllers/admin.js

@@ -0,0 +1,153 @@
+const fp = require('fastify-plugin');
+
+module.exports = fp(async (fastify, options) => {
+  // 用于系统初始化时，设置第一个用户，只能使用一次，其他用户由该用户创建
+  fastify.post(
+    `${options.prefix}/initSuperAdmin`,
+    {
+      onRequest: [fastify.account.authenticate.user]
+    },
+    async request => {
+      await fastify.account.services.admin.initSuperAdmin(await fastify.account.services.user.getUserInfo(request.authenticatePayload));
+      return {};
+    }
+  );
+
+  fastify.get(
+    `${options.prefix}/admin/getSuperAdminInfo`,
+    {
+      onRequest: [fastify.account.authenticate.user, fastify.account.authenticate.admin]
+    },
+    async request => {
+      return { userInfo: request.userInfo };
+    }
+  );
+
+  fastify.post(
+    `${options.prefix}/admin/addUser`,
+    {
+      onRequest: [fastify.account.authenticate.user, fastify.account.authenticate.admin],
+      schema: {
+        body: {}
+      }
+    },
+    async request => {
+      const userInfo = request.body;
+      await fastify.account.services.admin.addUser(Object.assign({}, userInfo, { password: options.defaultPassword }));
+      return {};
+    }
+  );
+
+  fastify.get(
+    `${options.prefix}/admin/getAllUserList`,
+    {
+      onRequest: [fastify.account.authenticate.user, fastify.account.authenticate.admin],
+      schema: {
+        query: {}
+      }
+    },
+    async request => {
+      const { filter, perPage, currentPage } = Object.assign(
+        {
+          perPage: 20,
+          currentPage: 1
+        },
+        request.query
+      );
+      return await fastify.account.services.admin.getAllUserList({
+        filter,
+        perPage,
+        currentPage
+      });
+    }
+  );
+
+  fastify.post(
+    `${options.prefix}/admin/resetUserPassword`,
+    {
+      onRequest: [fastify.account.authenticate.user, fastify.account.authenticate.admin],
+      schema: {
+        body: {
+          type: 'object',
+          required: ['userId', 'password'],
+          properties: {
+            password: { type: 'string' },
+            userId: { type: 'string' }
+          }
+        }
+      }
+    },
+    async request => {
+      await fastify.account.services.admin.resetUserPassword(request.body);
+      return {};
+    }
+  );
+
+  fastify.post(
+    `${options.prefix}/admin/saveUser`,
+    {
+      onRequest: [fastify.account.authenticate.user, fastify.account.authenticate.admin],
+      schema: {
+        body: {
+          type: 'object',
+          required: ['id'],
+          properties: {
+            id: { type: 'string' },
+            avatar: { type: 'string' },
+            nickname: { type: 'string' },
+            phone: { type: 'string' },
+            email: { type: 'string' },
+            description: { type: 'string' }
+          }
+        }
+      }
+    },
+    async request => {
+      const user = request.body;
+      await fastify.account.services.user.saveUser(user);
+      return {};
+    }
+  );
+
+  fastify.post(
+    `${options.prefix}/admin/closeUser`,
+    {
+      onRequest: [fastify.account.authenticate.user, fastify.account.authenticate.admin],
+      schema: {
+        body: {
+          type: 'object',
+          required: ['id'],
+          properties: {
+            id: { type: 'string' }
+          }
+        }
+      }
+    },
+    async request => {
+      const { id } = request.body;
+      await fastify.account.services.user.closeUser({ id });
+      return {};
+    }
+  );
+
+  fastify.post(
+    `${options.prefix}/admin/openUser`,
+    {
+      onRequest: [fastify.account.authenticate.user, fastify.account.authenticate.admin],
+      schema: {
+        body: {
+          type: 'object',
+          required: ['id'],
+          properties: {
+            id: { type: 'string' }
+          }
+        }
+      }
+    },
+    async request => {
+      const { id } = request.body;
+      await fastify.account.services.user.openUser({ id });
+      return {};
+    }
+  );
+});

package/libs/controllers/adminPermission.js

@@ -0,0 +1,230 @@
+const fp = require('fastify-plugin');
+
+module.exports = fp(async (fastify, options) => {
+  fastify.post(
+    `${options.prefix}/admin/addApplication`,
+    {
+      onRequest: [fastify.account.authenticate.user, fastify.account.authenticate.admin],
+      schema: {
+        body: {
+          type: 'object',
+          required: ['name', 'code'],
+          properties: {
+            name: { type: 'string' },
+            url: { type: 'string' },
+            avatar: { type: 'string' },
+            code: { type: 'string' },
+            description: { type: 'string' }
+          }
+        }
+      }
+    },
+    async request => {
+      await fastify.account.services.permission.addApplication(request.body);
+      return {};
+    }
+  );
+
+  fastify.post(
+    `${options.prefix}/admin/saveApplication`,
+    {
+      onRequest: [fastify.account.authenticate.user, fastify.account.authenticate.admin],
+      schema: {
+        body: {
+          type: 'object',
+          required: ['id', 'name', 'code'],
+          properties: {
+            id: { type: 'string' },
+            url: { type: 'string' },
+            name: { type: 'string' },
+            avatar: { type: 'string' },
+            code: { type: 'string' },
+            description: { type: 'string' }
+          }
+        }
+      }
+    },
+    async request => {
+      await fastify.account.services.permission.saveApplication(request.body);
+      return {};
+    }
+  );
+
+  fastify.post(
+    `${options.prefix}/admin/deleteApplication`,
+    {
+      onRequest: [fastify.account.authenticate.user, fastify.account.authenticate.admin],
+      schema: {
+        body: {
+          type: 'object',
+          required: ['id'],
+          properties: {
+            id: { type: 'string' }
+          }
+        }
+      }
+    },
+    async request => {
+      const { id } = request.body;
+      await fastify.account.services.permission.deleteApplication({ id });
+      return {};
+    }
+  );
+
+  fastify.get(
+    `${options.prefix}/admin/getApplicationList`,
+    {
+      onRequest: [fastify.account.authenticate.user, fastify.account.authenticate.admin],
+      schema: {
+        query: {
+          type: 'object',
+          properties: {
+            tenantId: { type: 'string' }
+          }
+        }
+      }
+    },
+    async request => {
+      const { tenantId } = request.query;
+      return await fastify.account.services.permission.getApplicationList({ tenantId });
+    }
+  );
+
+  fastify.post(
+    `${options.prefix}/admin/addPermission`,
+    {
+      onRequest: [fastify.account.authenticate.user, fastify.account.authenticate.admin],
+      schema: {
+        body: {
+          type: 'object',
+          required: ['applicationId', 'name', 'code'],
+          properties: {
+            applicationId: { type: 'string' },
+            name: { type: 'string' },
+            code: { type: 'string' },
+            type: { type: 'number' },
+            isModule: { type: 'number' },
+            isMust: { type: 'number' },
+            pid: { type: 'number' },
+            description: { type: 'string' }
+          }
+        }
+      }
+    },
+    async request => {
+      await fastify.account.services.permission.addPermission(request.body);
+      return {};
+    }
+  );
+
+  fastify.get(
+    `${options.prefix}/admin/getPermissionList`,
+    {
+      onRequest: [fastify.account.authenticate.user, fastify.account.authenticate.admin],
+      schema: {
+        query: {
+          type: 'object',
+          required: ['applicationId'],
+          properties: {
+            applicationId: { type: 'string' },
+            tenantId: { type: 'string' }
+          }
+        }
+      }
+    },
+    async request => {
+      const { applicationId, tenantId } = request.query;
+      return await fastify.account.services.permission.getPermissionList({ applicationId, tenantId });
+    }
+  );
+
+  fastify.post(
+    `${options.prefix}/admin/deletePermission`,
+    {
+      onRequest: [fastify.account.authenticate.user, fastify.account.authenticate.admin],
+      schema: {
+        body: {
+          type: 'object',
+          required: ['id'],
+          properties: {
+            id: { type: 'string' }
+          }
+        }
+      }
+    },
+    async request => {
+      const { id } = request.body;
+
+      await fastify.account.services.permission.deletePermission({ id });
+
+      return {};
+    }
+  );
+
+  fastify.post(
+    `${options.prefix}/admin/savePermission`,
+    {
+      onRequest: [fastify.account.authenticate.user, fastify.account.authenticate.admin],
+      schema: {
+        body: {
+          type: 'object',
+          required: ['id'],
+          properties: {
+            id: { type: 'string' },
+            name: { type: 'string' },
+            type: { type: 'number' },
+            isMust: { type: 'number' },
+            description: { type: 'string' }
+          }
+        }
+      }
+    },
+    async request => {
+      await fastify.account.services.permission.savePermission(request.body);
+      return {};
+    }
+  );
+
+  fastify.post(
+    `${options.prefix}/admin/saveTenantPermissionList`,
+    {
+      body: {
+        type: 'object',
+        required: ['tenantId', 'applications', 'permissions'],
+        properties: {
+          tenantId: { type: 'string' },
+          applications: {
+            type: 'array',
+            items: { type: 'string' }
+          },
+          permissions: {
+            type: 'array',
+            items: { type: 'number' }
+          }
+        }
+      }
+    },
+    async request => {
+      await fastify.account.services.permission.saveTenantPermissionList(request.body);
+
+      return {};
+    }
+  );
+
+  fastify.get(
+    `${options.prefix}/admin/getTenantPermissionList`,
+    {
+      query: {
+        type: 'object',
+        required: ['tenantId'],
+        properties: {
+          tenantId: { type: 'string' }
+        }
+      }
+    },
+    async request => {
+      const { tenantId } = request.query;
+      return await fastify.account.services.permission.getTenantPermissionList({ tenantId });
+    }
+  );
+});