@lark-apaas/fullstack-nestjs-core 1.1.50-alpha.7 → 1.1.50-alpha.8

package/dist/index.cjs

@@ -34423,7 +34423,9 @@ __export(index_exports, {
   UserContextMiddleware: () => UserContextMiddleware,
   ViewContextMiddleware: () => ViewContextMiddleware,
   configureApp: () => configureApp,
-  createLegacyPathRedirectMiddleware: () => createLegacyPathRedirectMiddleware
+  createLegacyPathRedirectMiddleware: () => createLegacyPathRedirectMiddleware,
+  createLocalDevMiddleware: () => createLocalDevMiddleware,
+  isLocalDev: () => isLocalDev
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -34437,7 +34439,6 @@ var import_axios2 = require("@nestjs/axios");
 var import_nestjs_logger2 = require("@lark-apaas/nestjs-logger");
 var import_nestjs_datapaas = require("@lark-apaas/nestjs-datapaas");
 var import_nestjs_authnpaas = require("@lark-apaas/nestjs-authnpaas");
-var import_nestjs_http_forwarder = require("@lark-apaas/nestjs-http-forwarder");
 var import_nestjs_trigger = require("@lark-apaas/nestjs-trigger");
 var import_nestjs_common7 = require("@lark-apaas/nestjs-common");
 var import_nestjs_capability = require("@lark-apaas/nestjs-capability");
@@ -36404,9 +36405,6 @@ var PlatformModule = class _PlatformModule {
           ...options.authz || {}
         }),
         import_nestjs_trigger.AutomationModule.forRoot(),
-        // 通用内网转发：自动注册 ALL /api/__platform__/http-forward?targetUrl=...
-        // 业务方接入 PlatformModule 后零改动获得内网代理路由
-        import_nestjs_http_forwarder.HttpForwarderModule.forRoot(options.httpForwarder),
         import_nestjs_capability.CapabilityModule.forRoot({
           capabilitiesDir: options.capabilitiesDir,
           enableWatching: process.env.NODE_ENV === "development"
@@ -36550,6 +36548,45 @@ function createLegacyPathRedirectMiddleware() {
 }
 __name(createLegacyPathRedirectMiddleware, "createLegacyPathRedirectMiddleware");
 
+// src/middlewares/local-dev/index.ts
+var CSRF_COOKIE_KEY = "suda-csrf-token";
+var CSRF_HEADER_KEY = "x-suda-csrf-token";
+var WEBUSER_HEADER_KEY = "x-larkgw-suda-webuser";
+function isLocalDev() {
+  if (process.env.NODE_ENV === "production") return false;
+  const flag = process.env.MIAODA_LOCAL_DEV;
+  return flag === "1" || flag === "true";
+}
+__name(isLocalDev, "isLocalDev");
+function extractCsrfFromCookie(cookieHeader) {
+  if (!cookieHeader) return void 0;
+  const re = new RegExp(`(?:^|;\\s*)${CSRF_COOKIE_KEY}=([^;]+)`);
+  const m = cookieHeader.match(re);
+  return m?.[1];
+}
+__name(extractCsrfFromCookie, "extractCsrfFromCookie");
+function createLocalDevMiddleware() {
+  let webUserHeader = "";
+  if (process.env.SUDA_WEBUSER) {
+    try {
+      webUserHeader = encodeURIComponent(JSON.stringify(JSON.parse(process.env.SUDA_WEBUSER)));
+    } catch {
+    }
+  }
+  return /* @__PURE__ */ __name(function localDevMiddleware(req, _res, next) {
+    const headers = req.headers;
+    if (!headers[CSRF_HEADER_KEY]) {
+      const token = extractCsrfFromCookie(req.headers.cookie);
+      if (token) headers[CSRF_HEADER_KEY] = token;
+    }
+    if (webUserHeader && !headers[WEBUSER_HEADER_KEY]) {
+      headers[WEBUSER_HEADER_KEY] = webUserHeader;
+    }
+    next();
+  }, "localDevMiddleware");
+}
+__name(createLocalDevMiddleware, "createLocalDevMiddleware");
+
 // src/setup.ts
 var DEFAULT_BODY_LIMIT = "1mb";
 var defaultPerms = {
@@ -36567,6 +36604,9 @@ async function configureApp(app, perms = defaultPerms) {
     extended: true
   }));
   app.use((0, import_cookie_parser.default)());
+  if (isLocalDev()) {
+    app.use(createLocalDevMiddleware());
+  }
   app.use(createLegacyPathRedirectMiddleware());
   const globalPrefix = process.env.CLIENT_BASE_PATH ?? "";
   app.setGlobalPrefix(globalPrefix);
@@ -36618,6 +36658,8 @@ var import_nestjs_authzpaas2 = require("@lark-apaas/nestjs-authzpaas");
   ViewContextMiddleware,
   configureApp,
   createLegacyPathRedirectMiddleware,
+  createLocalDevMiddleware,
+  isLocalDev,
   ...require("@lark-apaas/nestjs-authnpaas"),
   ...require("@lark-apaas/nestjs-capability"),
   ...require("@lark-apaas/nestjs-datapaas"),

package/dist/index.d.cts

@@ -2,12 +2,11 @@ import { NestModule, DynamicModule, MiddlewareConsumer, OnModuleInit, NestMiddle
 import { HttpClientConfig, PlatformPluginOptions, HttpClient } from '@lark-apaas/http-client';
 import { AuthZPaasModuleOptions } from '@lark-apaas/nestjs-authzpaas';
 export { AddMembersParams, AuthZPaasModule, AuthorizationSDK, Can, CanRole, ChatSimpleDTO, CommonParam, CreateRoleParams, CreateRoleResponse, DepartmentDTO, DepartmentEntity, DepartmentSimpleDTO, FilterParams, ForceRoleDTO, I18nText, IPermissionResolver, ListMembersParams, ListMembersResponse, ListRolesParams, MemberMutationData, MemberType, PERMISSION_RESOLVER_TOKEN, PermissionPoint, PermissionRequirement, PresetGroupDTO, RemoveMembersParams, RoleMemberDTO, SearchChatEntity, SearchParams, SearchResponse, SearchResult, SearchUserEntity, UpdateRoleParams, UserSimpleDTO } from '@lark-apaas/nestjs-authzpaas';
-import { HttpForwarderModuleOptions } from '@lark-apaas/nestjs-http-forwarder';
 import { NestExpressApplication } from '@nestjs/platform-express';
 import { PlatformHttpClient, RequestContextService, ObservableService } from '@lark-apaas/nestjs-common';
 export { AutoTrace } from '@lark-apaas/nestjs-common';
 export { DevToolsModule, DevToolsOptions, DevToolsV2Module, DevToolsV2Options } from '@lark-apaas/nestjs-openapi-devtools';
-import { Request, Response, NextFunction } from 'express';
+import { Request, Response, NextFunction, RequestHandler } from 'express';
 import * as _lark_apaas_file_service from '@lark-apaas/file-service';
 import { FileBody, UploadOptions, FileDownloadBuilder, SearchOptions } from '@lark-apaas/file-service';
 export * from '@lark-apaas/file-service';
@@ -79,12 +78,6 @@ interface PlatformModuleOptions {
      * 可传入 permissionResolver 等选项，透传给 AuthZPaasModule.forRoot()
      */
     authz?: AuthZPaasModuleOptions;
-    /**
-     * HttpForwarder 模块配置（默认自动启用，注册 ALL /api/__platform__/http-forward 路由）
-     * 透传给 HttpForwarderModule.forRoot()；不传则使用模块默认值
-     * （requestTimeoutMs=30s, maxResponseBytes=10MB）。
-     */
-    httpForwarder?: HttpForwarderModuleOptions;
 }
 
 declare class PlatformModule implements NestModule {
@@ -228,6 +221,9 @@ declare class ViewContextMiddleware implements NestMiddleware {
  */
 declare function createLegacyPathRedirectMiddleware(): (req: Request, res: Response, next: NextFunction) => void;
 
+declare function isLocalDev(): boolean;
+declare function createLocalDevMiddleware(): RequestHandler;
+
 /**
  * API 404 响应格式
  */
@@ -409,4 +405,4 @@ declare class PlatformHttpClientService {
     private registerInterceptorsForClient;
 }
 
-export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware };
+export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware, createLocalDevMiddleware, isLocalDev };

package/dist/index.d.ts

@@ -2,12 +2,11 @@ import { NestModule, DynamicModule, MiddlewareConsumer, OnModuleInit, NestMiddle
 import { HttpClientConfig, PlatformPluginOptions, HttpClient } from '@lark-apaas/http-client';
 import { AuthZPaasModuleOptions } from '@lark-apaas/nestjs-authzpaas';
 export { AddMembersParams, AuthZPaasModule, AuthorizationSDK, Can, CanRole, ChatSimpleDTO, CommonParam, CreateRoleParams, CreateRoleResponse, DepartmentDTO, DepartmentEntity, DepartmentSimpleDTO, FilterParams, ForceRoleDTO, I18nText, IPermissionResolver, ListMembersParams, ListMembersResponse, ListRolesParams, MemberMutationData, MemberType, PERMISSION_RESOLVER_TOKEN, PermissionPoint, PermissionRequirement, PresetGroupDTO, RemoveMembersParams, RoleMemberDTO, SearchChatEntity, SearchParams, SearchResponse, SearchResult, SearchUserEntity, UpdateRoleParams, UserSimpleDTO } from '@lark-apaas/nestjs-authzpaas';
-import { HttpForwarderModuleOptions } from '@lark-apaas/nestjs-http-forwarder';
 import { NestExpressApplication } from '@nestjs/platform-express';
 import { PlatformHttpClient, RequestContextService, ObservableService } from '@lark-apaas/nestjs-common';
 export { AutoTrace } from '@lark-apaas/nestjs-common';
 export { DevToolsModule, DevToolsOptions, DevToolsV2Module, DevToolsV2Options } from '@lark-apaas/nestjs-openapi-devtools';
-import { Request, Response, NextFunction } from 'express';
+import { Request, Response, NextFunction, RequestHandler } from 'express';
 import * as _lark_apaas_file_service from '@lark-apaas/file-service';
 import { FileBody, UploadOptions, FileDownloadBuilder, SearchOptions } from '@lark-apaas/file-service';
 export * from '@lark-apaas/file-service';
@@ -79,12 +78,6 @@ interface PlatformModuleOptions {
      * 可传入 permissionResolver 等选项，透传给 AuthZPaasModule.forRoot()
      */
     authz?: AuthZPaasModuleOptions;
-    /**
-     * HttpForwarder 模块配置（默认自动启用，注册 ALL /api/__platform__/http-forward 路由）
-     * 透传给 HttpForwarderModule.forRoot()；不传则使用模块默认值
-     * （requestTimeoutMs=30s, maxResponseBytes=10MB）。
-     */
-    httpForwarder?: HttpForwarderModuleOptions;
 }
 
 declare class PlatformModule implements NestModule {
@@ -228,6 +221,9 @@ declare class ViewContextMiddleware implements NestMiddleware {
  */
 declare function createLegacyPathRedirectMiddleware(): (req: Request, res: Response, next: NextFunction) => void;
 
+declare function isLocalDev(): boolean;
+declare function createLocalDevMiddleware(): RequestHandler;
+
 /**
  * API 404 响应格式
  */
@@ -409,4 +405,4 @@ declare class PlatformHttpClientService {
     private registerInterceptorsForClient;
 }
 
-export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware };
+export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware, createLocalDevMiddleware, isLocalDev };

package/dist/index.js

@@ -34410,7 +34410,6 @@ import { HttpModule } from "@nestjs/axios";
 import { LoggerModule, AppLogger as AppLogger2, LoggerContextMiddleware } from "@lark-apaas/nestjs-logger";
 import { DataPaasModule, SqlExecutionContextMiddleware } from "@lark-apaas/nestjs-datapaas";
 import { AuthNPaasModule } from "@lark-apaas/nestjs-authnpaas";
-import { HttpForwarderModule } from "@lark-apaas/nestjs-http-forwarder";
 import { AutomationModule } from "@lark-apaas/nestjs-trigger";
 import { PLATFORM_HTTP_CLIENT as PLATFORM_HTTP_CLIENT4 } from "@lark-apaas/nestjs-common";
 import { CapabilityModule } from "@lark-apaas/nestjs-capability";
@@ -36377,9 +36376,6 @@ var PlatformModule = class _PlatformModule {
           ...options.authz || {}
         }),
         AutomationModule.forRoot(),
-        // 通用内网转发：自动注册 ALL /api/__platform__/http-forward?targetUrl=...
-        // 业务方接入 PlatformModule 后零改动获得内网代理路由
-        HttpForwarderModule.forRoot(options.httpForwarder),
         CapabilityModule.forRoot({
           capabilitiesDir: options.capabilitiesDir,
           enableWatching: process.env.NODE_ENV === "development"
@@ -36523,6 +36519,45 @@ function createLegacyPathRedirectMiddleware() {
 }
 __name(createLegacyPathRedirectMiddleware, "createLegacyPathRedirectMiddleware");
 
+// src/middlewares/local-dev/index.ts
+var CSRF_COOKIE_KEY = "suda-csrf-token";
+var CSRF_HEADER_KEY = "x-suda-csrf-token";
+var WEBUSER_HEADER_KEY = "x-larkgw-suda-webuser";
+function isLocalDev() {
+  if (process.env.NODE_ENV === "production") return false;
+  const flag = process.env.MIAODA_LOCAL_DEV;
+  return flag === "1" || flag === "true";
+}
+__name(isLocalDev, "isLocalDev");
+function extractCsrfFromCookie(cookieHeader) {
+  if (!cookieHeader) return void 0;
+  const re = new RegExp(`(?:^|;\\s*)${CSRF_COOKIE_KEY}=([^;]+)`);
+  const m = cookieHeader.match(re);
+  return m?.[1];
+}
+__name(extractCsrfFromCookie, "extractCsrfFromCookie");
+function createLocalDevMiddleware() {
+  let webUserHeader = "";
+  if (process.env.SUDA_WEBUSER) {
+    try {
+      webUserHeader = encodeURIComponent(JSON.stringify(JSON.parse(process.env.SUDA_WEBUSER)));
+    } catch {
+    }
+  }
+  return /* @__PURE__ */ __name(function localDevMiddleware(req, _res, next) {
+    const headers = req.headers;
+    if (!headers[CSRF_HEADER_KEY]) {
+      const token = extractCsrfFromCookie(req.headers.cookie);
+      if (token) headers[CSRF_HEADER_KEY] = token;
+    }
+    if (webUserHeader && !headers[WEBUSER_HEADER_KEY]) {
+      headers[WEBUSER_HEADER_KEY] = webUserHeader;
+    }
+    next();
+  }, "localDevMiddleware");
+}
+__name(createLocalDevMiddleware, "createLocalDevMiddleware");
+
 // src/setup.ts
 var DEFAULT_BODY_LIMIT = "1mb";
 var defaultPerms = {
@@ -36540,6 +36575,9 @@ async function configureApp(app, perms = defaultPerms) {
     extended: true
   }));
   app.use(cookieParser());
+  if (isLocalDev()) {
+    app.use(createLocalDevMiddleware());
+  }
   app.use(createLegacyPathRedirectMiddleware());
   const globalPrefix = process.env.CLIENT_BASE_PATH ?? "";
   app.setGlobalPrefix(globalPrefix);
@@ -36589,7 +36627,9 @@ export {
   UserContextMiddleware,
   ViewContextMiddleware,
   configureApp,
-  createLegacyPathRedirectMiddleware
+  createLegacyPathRedirectMiddleware,
+  createLocalDevMiddleware,
+  isLocalDev
 };
 /*! Bundled license information:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-apaas/fullstack-nestjs-core",
-  "version": "1.1.50-alpha.7",
+  "version": "1.1.50-alpha.8",
   "description": "FullStack Nestjs Core",
   "type": "module",
   "main": "./dist/index.js",
@@ -46,7 +46,6 @@
     "@lark-apaas/nestjs-capability": "^0.1.13",
     "@lark-apaas/nestjs-common": "^0.1.8",
     "@lark-apaas/nestjs-datapaas": "^1.0.20",
-    "@lark-apaas/nestjs-http-forwarder": "0.1.3-alpha.9",
     "@lark-apaas/nestjs-logger": "^1.0.16",
     "@lark-apaas/nestjs-observable": "^0.0.11",
     "@lark-apaas/nestjs-openapi-devtools": "^1.0.10",