@lark-apaas/fullstack-nestjs-core 1.1.50-alpha.6 → 1.1.50-alpha.8

package/dist/index.cjs

@@ -34423,7 +34423,9 @@ __export(index_exports, {
   UserContextMiddleware: () => UserContextMiddleware,
   ViewContextMiddleware: () => ViewContextMiddleware,
   configureApp: () => configureApp,
-  createLegacyPathRedirectMiddleware: () => createLegacyPathRedirectMiddleware
+  createLegacyPathRedirectMiddleware: () => createLegacyPathRedirectMiddleware,
+  createLocalDevMiddleware: () => createLocalDevMiddleware,
+  isLocalDev: () => isLocalDev
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -36546,6 +36548,45 @@ function createLegacyPathRedirectMiddleware() {
 }
 __name(createLegacyPathRedirectMiddleware, "createLegacyPathRedirectMiddleware");
 
+// src/middlewares/local-dev/index.ts
+var CSRF_COOKIE_KEY = "suda-csrf-token";
+var CSRF_HEADER_KEY = "x-suda-csrf-token";
+var WEBUSER_HEADER_KEY = "x-larkgw-suda-webuser";
+function isLocalDev() {
+  if (process.env.NODE_ENV === "production") return false;
+  const flag = process.env.MIAODA_LOCAL_DEV;
+  return flag === "1" || flag === "true";
+}
+__name(isLocalDev, "isLocalDev");
+function extractCsrfFromCookie(cookieHeader) {
+  if (!cookieHeader) return void 0;
+  const re = new RegExp(`(?:^|;\\s*)${CSRF_COOKIE_KEY}=([^;]+)`);
+  const m = cookieHeader.match(re);
+  return m?.[1];
+}
+__name(extractCsrfFromCookie, "extractCsrfFromCookie");
+function createLocalDevMiddleware() {
+  let webUserHeader = "";
+  if (process.env.SUDA_WEBUSER) {
+    try {
+      webUserHeader = encodeURIComponent(JSON.stringify(JSON.parse(process.env.SUDA_WEBUSER)));
+    } catch {
+    }
+  }
+  return /* @__PURE__ */ __name(function localDevMiddleware(req, _res, next) {
+    const headers = req.headers;
+    if (!headers[CSRF_HEADER_KEY]) {
+      const token = extractCsrfFromCookie(req.headers.cookie);
+      if (token) headers[CSRF_HEADER_KEY] = token;
+    }
+    if (webUserHeader && !headers[WEBUSER_HEADER_KEY]) {
+      headers[WEBUSER_HEADER_KEY] = webUserHeader;
+    }
+    next();
+  }, "localDevMiddleware");
+}
+__name(createLocalDevMiddleware, "createLocalDevMiddleware");
+
 // src/setup.ts
 var DEFAULT_BODY_LIMIT = "1mb";
 var defaultPerms = {
@@ -36563,6 +36604,9 @@ async function configureApp(app, perms = defaultPerms) {
     extended: true
   }));
   app.use((0, import_cookie_parser.default)());
+  if (isLocalDev()) {
+    app.use(createLocalDevMiddleware());
+  }
   app.use(createLegacyPathRedirectMiddleware());
   const globalPrefix = process.env.CLIENT_BASE_PATH ?? "";
   app.setGlobalPrefix(globalPrefix);
@@ -36614,6 +36658,8 @@ var import_nestjs_authzpaas2 = require("@lark-apaas/nestjs-authzpaas");
   ViewContextMiddleware,
   configureApp,
   createLegacyPathRedirectMiddleware,
+  createLocalDevMiddleware,
+  isLocalDev,
   ...require("@lark-apaas/nestjs-authnpaas"),
   ...require("@lark-apaas/nestjs-capability"),
   ...require("@lark-apaas/nestjs-datapaas"),

package/dist/index.d.cts

@@ -6,7 +6,7 @@ import { NestExpressApplication } from '@nestjs/platform-express';
 import { PlatformHttpClient, RequestContextService, ObservableService } from '@lark-apaas/nestjs-common';
 export { AutoTrace } from '@lark-apaas/nestjs-common';
 export { DevToolsModule, DevToolsOptions, DevToolsV2Module, DevToolsV2Options } from '@lark-apaas/nestjs-openapi-devtools';
-import { Request, Response, NextFunction } from 'express';
+import { Request, Response, NextFunction, RequestHandler } from 'express';
 import * as _lark_apaas_file_service from '@lark-apaas/file-service';
 import { FileBody, UploadOptions, FileDownloadBuilder, SearchOptions } from '@lark-apaas/file-service';
 export * from '@lark-apaas/file-service';
@@ -221,6 +221,9 @@ declare class ViewContextMiddleware implements NestMiddleware {
  */
 declare function createLegacyPathRedirectMiddleware(): (req: Request, res: Response, next: NextFunction) => void;
 
+declare function isLocalDev(): boolean;
+declare function createLocalDevMiddleware(): RequestHandler;
+
 /**
  * API 404 响应格式
  */
@@ -402,4 +405,4 @@ declare class PlatformHttpClientService {
     private registerInterceptorsForClient;
 }
 
-export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware };
+export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware, createLocalDevMiddleware, isLocalDev };

package/dist/index.d.ts

@@ -6,7 +6,7 @@ import { NestExpressApplication } from '@nestjs/platform-express';
 import { PlatformHttpClient, RequestContextService, ObservableService } from '@lark-apaas/nestjs-common';
 export { AutoTrace } from '@lark-apaas/nestjs-common';
 export { DevToolsModule, DevToolsOptions, DevToolsV2Module, DevToolsV2Options } from '@lark-apaas/nestjs-openapi-devtools';
-import { Request, Response, NextFunction } from 'express';
+import { Request, Response, NextFunction, RequestHandler } from 'express';
 import * as _lark_apaas_file_service from '@lark-apaas/file-service';
 import { FileBody, UploadOptions, FileDownloadBuilder, SearchOptions } from '@lark-apaas/file-service';
 export * from '@lark-apaas/file-service';
@@ -221,6 +221,9 @@ declare class ViewContextMiddleware implements NestMiddleware {
  */
 declare function createLegacyPathRedirectMiddleware(): (req: Request, res: Response, next: NextFunction) => void;
 
+declare function isLocalDev(): boolean;
+declare function createLocalDevMiddleware(): RequestHandler;
+
 /**
  * API 404 响应格式
  */
@@ -402,4 +405,4 @@ declare class PlatformHttpClientService {
     private registerInterceptorsForClient;
 }
 
-export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware };
+export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware, createLocalDevMiddleware, isLocalDev };

package/dist/index.js

@@ -36519,6 +36519,45 @@ function createLegacyPathRedirectMiddleware() {
 }
 __name(createLegacyPathRedirectMiddleware, "createLegacyPathRedirectMiddleware");
 
+// src/middlewares/local-dev/index.ts
+var CSRF_COOKIE_KEY = "suda-csrf-token";
+var CSRF_HEADER_KEY = "x-suda-csrf-token";
+var WEBUSER_HEADER_KEY = "x-larkgw-suda-webuser";
+function isLocalDev() {
+  if (process.env.NODE_ENV === "production") return false;
+  const flag = process.env.MIAODA_LOCAL_DEV;
+  return flag === "1" || flag === "true";
+}
+__name(isLocalDev, "isLocalDev");
+function extractCsrfFromCookie(cookieHeader) {
+  if (!cookieHeader) return void 0;
+  const re = new RegExp(`(?:^|;\\s*)${CSRF_COOKIE_KEY}=([^;]+)`);
+  const m = cookieHeader.match(re);
+  return m?.[1];
+}
+__name(extractCsrfFromCookie, "extractCsrfFromCookie");
+function createLocalDevMiddleware() {
+  let webUserHeader = "";
+  if (process.env.SUDA_WEBUSER) {
+    try {
+      webUserHeader = encodeURIComponent(JSON.stringify(JSON.parse(process.env.SUDA_WEBUSER)));
+    } catch {
+    }
+  }
+  return /* @__PURE__ */ __name(function localDevMiddleware(req, _res, next) {
+    const headers = req.headers;
+    if (!headers[CSRF_HEADER_KEY]) {
+      const token = extractCsrfFromCookie(req.headers.cookie);
+      if (token) headers[CSRF_HEADER_KEY] = token;
+    }
+    if (webUserHeader && !headers[WEBUSER_HEADER_KEY]) {
+      headers[WEBUSER_HEADER_KEY] = webUserHeader;
+    }
+    next();
+  }, "localDevMiddleware");
+}
+__name(createLocalDevMiddleware, "createLocalDevMiddleware");
+
 // src/setup.ts
 var DEFAULT_BODY_LIMIT = "1mb";
 var defaultPerms = {
@@ -36536,6 +36575,9 @@ async function configureApp(app, perms = defaultPerms) {
     extended: true
   }));
   app.use(cookieParser());
+  if (isLocalDev()) {
+    app.use(createLocalDevMiddleware());
+  }
   app.use(createLegacyPathRedirectMiddleware());
   const globalPrefix = process.env.CLIENT_BASE_PATH ?? "";
   app.setGlobalPrefix(globalPrefix);
@@ -36585,7 +36627,9 @@ export {
   UserContextMiddleware,
   ViewContextMiddleware,
   configureApp,
-  createLegacyPathRedirectMiddleware
+  createLegacyPathRedirectMiddleware,
+  createLocalDevMiddleware,
+  isLocalDev
 };
 /*! Bundled license information:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-apaas/fullstack-nestjs-core",
-  "version": "1.1.50-alpha.6",
+  "version": "1.1.50-alpha.8",
   "description": "FullStack Nestjs Core",
   "type": "module",
   "main": "./dist/index.js",
@@ -41,13 +41,13 @@
   "dependencies": {
     "@lark-apaas/file-service": "^0.1.2",
     "@lark-apaas/http-client": "^0.1.6",
-    "@lark-apaas/nestjs-authnpaas": "1.0.4-alpha.0",
-    "@lark-apaas/nestjs-authzpaas": "0.1.9-alpha.0",
-    "@lark-apaas/nestjs-capability": "0.1.14-alpha.0",
-    "@lark-apaas/nestjs-common": "0.1.9-alpha.0",
-    "@lark-apaas/nestjs-datapaas": "1.0.21-alpha.0",
-    "@lark-apaas/nestjs-logger": "1.0.17-alpha.0",
-    "@lark-apaas/nestjs-observable": "0.0.12-alpha.0",
+    "@lark-apaas/nestjs-authnpaas": "^1.0.3",
+    "@lark-apaas/nestjs-authzpaas": "^0.1.8",
+    "@lark-apaas/nestjs-capability": "^0.1.13",
+    "@lark-apaas/nestjs-common": "^0.1.8",
+    "@lark-apaas/nestjs-datapaas": "^1.0.20",
+    "@lark-apaas/nestjs-logger": "^1.0.16",
+    "@lark-apaas/nestjs-observable": "^0.0.11",
     "@lark-apaas/nestjs-openapi-devtools": "^1.0.10",
     "@lark-apaas/nestjs-trigger": "^0.0.3",
     "@nestjs/axios": "^4.0.1",