@lark-apaas/fullstack-nestjs-core 1.1.50 → 1.1.51-alpha.1

package/dist/index.cjs

@@ -34423,10 +34423,24 @@ __export(index_exports, {
   UserContextMiddleware: () => UserContextMiddleware,
   ViewContextMiddleware: () => ViewContextMiddleware,
   configureApp: () => configureApp,
-  createLegacyPathRedirectMiddleware: () => createLegacyPathRedirectMiddleware
+  createLegacyPathRedirectMiddleware: () => createLegacyPathRedirectMiddleware,
+  createLocalDevMiddleware: () => createLocalDevMiddleware,
+  isLocalDev: () => isLocalDev
 });
 module.exports = __toCommonJS(index_exports);
 
+// src/load-env.ts
+try {
+  const dotenv = require("dotenv");
+  dotenv.config({
+    path: ".env.local"
+  });
+  dotenv.config({
+    path: ".env"
+  });
+} catch {
+}
+
 // src/modules/platform/module.ts
 var import_common16 = require("@nestjs/common");
 var import_core2 = require("@nestjs/core");
@@ -34553,7 +34567,7 @@ CsrfMiddleware = _ts_decorate2([
   (0, import_common2.Injectable)()
 ], CsrfMiddleware);
 
-// src/middlewares/view-context/middleware.ts
+// src/middlewares/view-context/index.ts
 var import_common3 = require("@nestjs/common");
 var import_nestjs_common = require("@lark-apaas/nestjs-common");
 
@@ -34600,7 +34614,7 @@ function safeEscape(s) {
 }
 __name(safeEscape, "safeEscape");
 
-// src/middlewares/view-context/middleware.ts
+// src/middlewares/view-context/index.ts
 function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -34651,7 +34665,6 @@ var ViewContextMiddleware = class _ViewContextMiddleware {
     const { userId, tenantId, appId, loginUrl, userType } = req.userContext;
     const csrfToken = req.csrfToken;
     const environment = mapToWindowEnvironment(process.env.FORCE_FRAMEWORK_ENVIRONMENT);
-    const basename = safeEscape(req.headers["x-miaoda-custom-host"] !== void 0 ? "/" : `/app/${appId || ""}`);
     const appPublishedData = await this.getAppPublished(appId);
     const appInfo = appPublishedData?.app_info ?? null;
     req.__platform_data__ = {
@@ -34666,8 +34679,7 @@ var ViewContextMiddleware = class _ViewContextMiddleware {
       tenantId,
       environment,
       showBadge: appInfo?.show_badge !== false,
-      appPublished: appPublishedData ?? null,
-      basename
+      appPublished: appPublishedData ?? null
     };
     res.locals = {
       ...res.locals ?? {},
@@ -34680,8 +34692,7 @@ var ViewContextMiddleware = class _ViewContextMiddleware {
       appName: safeEscape(appInfo?.app_name ?? "\u5999\u642D\u5E94\u7528"),
       appAvatar: appInfo?.app_avatar ?? "",
       appDescription: safeEscape(appInfo?.app_description ?? ""),
-      environment,
-      basename
+      environment
     };
     next();
   }
@@ -36549,6 +36560,45 @@ function createLegacyPathRedirectMiddleware() {
 }
 __name(createLegacyPathRedirectMiddleware, "createLegacyPathRedirectMiddleware");
 
+// src/middlewares/local-dev/index.ts
+var CSRF_COOKIE_KEY = "suda-csrf-token";
+var CSRF_HEADER_KEY = "x-suda-csrf-token";
+var WEBUSER_HEADER_KEY = "x-larkgw-suda-webuser";
+function isLocalDev() {
+  if (process.env.NODE_ENV === "production") return false;
+  const flag = process.env.MIAODA_LOCAL_DEV;
+  return flag === "1" || flag === "true";
+}
+__name(isLocalDev, "isLocalDev");
+function extractCsrfFromCookie(cookieHeader) {
+  if (!cookieHeader) return void 0;
+  const re = new RegExp(`(?:^|;\\s*)${CSRF_COOKIE_KEY}=([^;]+)`);
+  const m = cookieHeader.match(re);
+  return m?.[1];
+}
+__name(extractCsrfFromCookie, "extractCsrfFromCookie");
+function createLocalDevMiddleware() {
+  let webUserHeader = "";
+  if (process.env.SUDA_WEBUSER) {
+    try {
+      webUserHeader = encodeURIComponent(JSON.stringify(JSON.parse(process.env.SUDA_WEBUSER)));
+    } catch {
+    }
+  }
+  return /* @__PURE__ */ __name(function localDevMiddleware(req, _res, next) {
+    const headers = req.headers;
+    if (!headers[CSRF_HEADER_KEY]) {
+      const token = extractCsrfFromCookie(req.headers.cookie);
+      if (token) headers[CSRF_HEADER_KEY] = token;
+    }
+    if (webUserHeader && !headers[WEBUSER_HEADER_KEY]) {
+      headers[WEBUSER_HEADER_KEY] = webUserHeader;
+    }
+    next();
+  }, "localDevMiddleware");
+}
+__name(createLocalDevMiddleware, "createLocalDevMiddleware");
+
 // src/setup.ts
 var DEFAULT_BODY_LIMIT = "1mb";
 var defaultPerms = {
@@ -36566,6 +36616,9 @@ async function configureApp(app, perms = defaultPerms) {
     extended: true
   }));
   app.use((0, import_cookie_parser.default)());
+  if (isLocalDev()) {
+    app.use(createLocalDevMiddleware());
+  }
   app.use(createLegacyPathRedirectMiddleware());
   const globalPrefix = process.env.CLIENT_BASE_PATH ?? "";
   app.setGlobalPrefix(globalPrefix);
@@ -36617,6 +36670,8 @@ var import_nestjs_authzpaas2 = require("@lark-apaas/nestjs-authzpaas");
   ViewContextMiddleware,
   configureApp,
   createLegacyPathRedirectMiddleware,
+  createLocalDevMiddleware,
+  isLocalDev,
   ...require("@lark-apaas/nestjs-authnpaas"),
   ...require("@lark-apaas/nestjs-capability"),
   ...require("@lark-apaas/nestjs-datapaas"),

package/dist/index.d.cts

@@ -6,7 +6,7 @@ import { NestExpressApplication } from '@nestjs/platform-express';
 import { PlatformHttpClient, RequestContextService, ObservableService } from '@lark-apaas/nestjs-common';
 export { AutoTrace } from '@lark-apaas/nestjs-common';
 export { DevToolsModule, DevToolsOptions, DevToolsV2Module, DevToolsV2Options } from '@lark-apaas/nestjs-openapi-devtools';
-import { Request, Response, NextFunction } from 'express';
+import { Request, Response, NextFunction, RequestHandler } from 'express';
 import * as _lark_apaas_file_service from '@lark-apaas/file-service';
 import { FileBody, UploadOptions, FileDownloadBuilder, SearchOptions } from '@lark-apaas/file-service';
 export * from '@lark-apaas/file-service';
@@ -23,8 +23,6 @@ declare global {
         userId?: string;
         tenantId?: number;
         csrfToken?: string;
-        /** React Router basename，由 ViewContextMiddleware 注入；自定义域名场景下 = / 或 /<alias>，默认域名 = /app/<appId> */
-        basename?: string;
         [key: string]: unknown;
       };
       userContext: {
@@ -223,6 +221,9 @@ declare class ViewContextMiddleware implements NestMiddleware {
  */
 declare function createLegacyPathRedirectMiddleware(): (req: Request, res: Response, next: NextFunction) => void;
 
+declare function isLocalDev(): boolean;
+declare function createLocalDevMiddleware(): RequestHandler;
+
 /**
  * API 404 响应格式
  */
@@ -404,4 +405,4 @@ declare class PlatformHttpClientService {
     private registerInterceptorsForClient;
 }
 
-export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware };
+export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware, createLocalDevMiddleware, isLocalDev };

package/dist/index.d.ts

@@ -6,7 +6,7 @@ import { NestExpressApplication } from '@nestjs/platform-express';
 import { PlatformHttpClient, RequestContextService, ObservableService } from '@lark-apaas/nestjs-common';
 export { AutoTrace } from '@lark-apaas/nestjs-common';
 export { DevToolsModule, DevToolsOptions, DevToolsV2Module, DevToolsV2Options } from '@lark-apaas/nestjs-openapi-devtools';
-import { Request, Response, NextFunction } from 'express';
+import { Request, Response, NextFunction, RequestHandler } from 'express';
 import * as _lark_apaas_file_service from '@lark-apaas/file-service';
 import { FileBody, UploadOptions, FileDownloadBuilder, SearchOptions } from '@lark-apaas/file-service';
 export * from '@lark-apaas/file-service';
@@ -23,8 +23,6 @@ declare global {
         userId?: string;
         tenantId?: number;
         csrfToken?: string;
-        /** React Router basename，由 ViewContextMiddleware 注入；自定义域名场景下 = / 或 /<alias>，默认域名 = /app/<appId> */
-        basename?: string;
         [key: string]: unknown;
       };
       userContext: {
@@ -223,6 +221,9 @@ declare class ViewContextMiddleware implements NestMiddleware {
  */
 declare function createLegacyPathRedirectMiddleware(): (req: Request, res: Response, next: NextFunction) => void;
 
+declare function isLocalDev(): boolean;
+declare function createLocalDevMiddleware(): RequestHandler;
+
 /**
  * API 404 响应格式
  */
@@ -404,4 +405,4 @@ declare class PlatformHttpClientService {
     private registerInterceptorsForClient;
 }
 
-export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware };
+export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware, createLocalDevMiddleware, isLocalDev };

package/dist/index.js

@@ -34400,6 +34400,18 @@ var require_express2 = __commonJS({
   }
 });
 
+// src/load-env.ts
+try {
+  const dotenv = __require("dotenv");
+  dotenv.config({
+    path: ".env.local"
+  });
+  dotenv.config({
+    path: ".env"
+  });
+} catch {
+}
+
 // src/modules/platform/module.ts
 import { Global, Module as Module3, ValidationPipe } from "@nestjs/common";
 import { APP_INTERCEPTOR, APP_PIPE } from "@nestjs/core";
@@ -34526,7 +34538,7 @@ CsrfMiddleware = _ts_decorate2([
   Injectable2()
 ], CsrfMiddleware);
 
-// src/middlewares/view-context/middleware.ts
+// src/middlewares/view-context/index.ts
 import { Inject, Injectable as Injectable3, Logger } from "@nestjs/common";
 import { PLATFORM_HTTP_CLIENT } from "@lark-apaas/nestjs-common";
 
@@ -34573,7 +34585,7 @@ function safeEscape(s) {
 }
 __name(safeEscape, "safeEscape");
 
-// src/middlewares/view-context/middleware.ts
+// src/middlewares/view-context/index.ts
 function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -34624,7 +34636,6 @@ var ViewContextMiddleware = class _ViewContextMiddleware {
     const { userId, tenantId, appId, loginUrl, userType } = req.userContext;
     const csrfToken = req.csrfToken;
     const environment = mapToWindowEnvironment(process.env.FORCE_FRAMEWORK_ENVIRONMENT);
-    const basename = safeEscape(req.headers["x-miaoda-custom-host"] !== void 0 ? "/" : `/app/${appId || ""}`);
     const appPublishedData = await this.getAppPublished(appId);
     const appInfo = appPublishedData?.app_info ?? null;
     req.__platform_data__ = {
@@ -34639,8 +34650,7 @@ var ViewContextMiddleware = class _ViewContextMiddleware {
       tenantId,
       environment,
       showBadge: appInfo?.show_badge !== false,
-      appPublished: appPublishedData ?? null,
-      basename
+      appPublished: appPublishedData ?? null
     };
     res.locals = {
       ...res.locals ?? {},
@@ -34653,8 +34663,7 @@ var ViewContextMiddleware = class _ViewContextMiddleware {
       appName: safeEscape(appInfo?.app_name ?? "\u5999\u642D\u5E94\u7528"),
       appAvatar: appInfo?.app_avatar ?? "",
       appDescription: safeEscape(appInfo?.app_description ?? ""),
-      environment,
-      basename
+      environment
     };
     next();
   }
@@ -36522,6 +36531,45 @@ function createLegacyPathRedirectMiddleware() {
 }
 __name(createLegacyPathRedirectMiddleware, "createLegacyPathRedirectMiddleware");
 
+// src/middlewares/local-dev/index.ts
+var CSRF_COOKIE_KEY = "suda-csrf-token";
+var CSRF_HEADER_KEY = "x-suda-csrf-token";
+var WEBUSER_HEADER_KEY = "x-larkgw-suda-webuser";
+function isLocalDev() {
+  if (process.env.NODE_ENV === "production") return false;
+  const flag = process.env.MIAODA_LOCAL_DEV;
+  return flag === "1" || flag === "true";
+}
+__name(isLocalDev, "isLocalDev");
+function extractCsrfFromCookie(cookieHeader) {
+  if (!cookieHeader) return void 0;
+  const re = new RegExp(`(?:^|;\\s*)${CSRF_COOKIE_KEY}=([^;]+)`);
+  const m = cookieHeader.match(re);
+  return m?.[1];
+}
+__name(extractCsrfFromCookie, "extractCsrfFromCookie");
+function createLocalDevMiddleware() {
+  let webUserHeader = "";
+  if (process.env.SUDA_WEBUSER) {
+    try {
+      webUserHeader = encodeURIComponent(JSON.stringify(JSON.parse(process.env.SUDA_WEBUSER)));
+    } catch {
+    }
+  }
+  return /* @__PURE__ */ __name(function localDevMiddleware(req, _res, next) {
+    const headers = req.headers;
+    if (!headers[CSRF_HEADER_KEY]) {
+      const token = extractCsrfFromCookie(req.headers.cookie);
+      if (token) headers[CSRF_HEADER_KEY] = token;
+    }
+    if (webUserHeader && !headers[WEBUSER_HEADER_KEY]) {
+      headers[WEBUSER_HEADER_KEY] = webUserHeader;
+    }
+    next();
+  }, "localDevMiddleware");
+}
+__name(createLocalDevMiddleware, "createLocalDevMiddleware");
+
 // src/setup.ts
 var DEFAULT_BODY_LIMIT = "1mb";
 var defaultPerms = {
@@ -36539,6 +36587,9 @@ async function configureApp(app, perms = defaultPerms) {
     extended: true
   }));
   app.use(cookieParser());
+  if (isLocalDev()) {
+    app.use(createLocalDevMiddleware());
+  }
   app.use(createLegacyPathRedirectMiddleware());
   const globalPrefix = process.env.CLIENT_BASE_PATH ?? "";
   app.setGlobalPrefix(globalPrefix);
@@ -36588,7 +36639,9 @@ export {
   UserContextMiddleware,
   ViewContextMiddleware,
   configureApp,
-  createLegacyPathRedirectMiddleware
+  createLegacyPathRedirectMiddleware,
+  createLocalDevMiddleware,
+  isLocalDev
 };
 /*! Bundled license information:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-apaas/fullstack-nestjs-core",
-  "version": "1.1.50",
+  "version": "1.1.51-alpha.1",
   "description": "FullStack Nestjs Core",
   "type": "module",
   "main": "./dist/index.js",
@@ -40,7 +40,7 @@
   },
   "dependencies": {
     "@lark-apaas/file-service": "^0.1.2",
-    "@lark-apaas/http-client": "^0.1.6",
+    "@lark-apaas/http-client": "0.1.7-alpha.1",
     "@lark-apaas/nestjs-authnpaas": "^1.0.3",
     "@lark-apaas/nestjs-authzpaas": "^0.1.8",
     "@lark-apaas/nestjs-capability": "^0.1.13",
@@ -52,7 +52,8 @@
     "@lark-apaas/nestjs-trigger": "^0.0.3",
     "@nestjs/axios": "^4.0.1",
     "axios": "^1.13.2",
-    "cookie-parser": "^1.4.7"
+    "cookie-parser": "^1.4.7",
+    "dotenv": "^16.4.5"
   },
   "devDependencies": {
     "@nestjs/common": "^10.4.20",