@lark-apaas/fullstack-nestjs-core 1.1.51-beta.0 → 1.1.52-alpha.0

package/dist/index.cjs

@@ -34423,10 +34423,24 @@ __export(index_exports, {
   UserContextMiddleware: () => UserContextMiddleware,
   ViewContextMiddleware: () => ViewContextMiddleware,
   configureApp: () => configureApp,
-  createLegacyPathRedirectMiddleware: () => createLegacyPathRedirectMiddleware
+  createLegacyPathRedirectMiddleware: () => createLegacyPathRedirectMiddleware,
+  createLocalDevMiddleware: () => createLocalDevMiddleware,
+  isLocalDev: () => isLocalDev
 });
 module.exports = __toCommonJS(index_exports);
 
+// src/load-env.ts
+try {
+  const dotenv = require("dotenv");
+  dotenv.config({
+    path: ".env.local"
+  });
+  dotenv.config({
+    path: ".env"
+  });
+} catch {
+}
+
 // src/modules/platform/module.ts
 var import_common16 = require("@nestjs/common");
 var import_core2 = require("@nestjs/core");
@@ -34445,20 +34459,41 @@ var import_nestjs_capability = require("@lark-apaas/nestjs-capability");
 // src/middlewares/user-context/index.ts
 var import_common = require("@nestjs/common");
 
+// src/utils/parse-suda-webuser.ts
+function parseSudaWebUserEnv(raw) {
+  if (!raw) return null;
+  try {
+    return JSON.parse(raw);
+  } catch {
+  }
+  try {
+    return JSON.parse(raw.replace(/\\"/g, '"'));
+  } catch {
+    return null;
+  }
+}
+__name(parseSudaWebUserEnv, "parseSudaWebUserEnv");
+
 // src/middlewares/user-context/helper.ts
 var sudaWebUserHeaderKey = "x-larkgw-suda-webuser";
 function getWebUserFromHeader(req) {
   const sudaWebUserContent = req.headers[sudaWebUserHeaderKey];
-  if (!sudaWebUserContent) {
-    return null;
+  if (sudaWebUserContent) {
+    try {
+      const sudaWebUserJsonStr = decodeURIComponent(sudaWebUserContent);
+      const sudaWebUserJson = JSON.parse(sudaWebUserJsonStr);
+      return sudaWebUserJson;
+    } catch (err) {
+      console.error("parse suda webuser from header failed, err=%o", err);
+      return null;
+    }
   }
-  try {
-    const sudaWebUserJsonStr = decodeURIComponent(sudaWebUserContent);
-    const sudaWebUserJson = JSON.parse(sudaWebUserJsonStr);
-    return sudaWebUserJson;
-  } catch (err) {
-    console.error("parse suda webuser from header failed, err=%o", err);
-    return null;
+  if (process.env.MIAODA_LOCAL_DEV === "1") {
+    const parsed = parseSudaWebUserEnv(process.env.SUDA_WEBUSER);
+    if (parsed) return parsed;
+    if (process.env.SUDA_WEBUSER) {
+      console.error("parse suda webuser from env failed, value head=%s", process.env.SUDA_WEBUSER.slice(0, 80));
+    }
   }
   return null;
 }
@@ -36553,6 +36588,43 @@ function createLegacyPathRedirectMiddleware() {
 }
 __name(createLegacyPathRedirectMiddleware, "createLegacyPathRedirectMiddleware");
 
+// src/middlewares/local-dev/index.ts
+var CSRF_COOKIE_KEY = "suda-csrf-token";
+var CSRF_HEADER_KEY = "x-suda-csrf-token";
+var WEBUSER_HEADER_KEY = "x-larkgw-suda-webuser";
+function isLocalDev() {
+  if (process.env.NODE_ENV === "production") return false;
+  const flag = process.env.MIAODA_LOCAL_DEV;
+  return flag === "1" || flag === "true";
+}
+__name(isLocalDev, "isLocalDev");
+function extractCsrfFromCookie(cookieHeader) {
+  if (!cookieHeader) return void 0;
+  const re = new RegExp(`(?:^|;\\s*)${CSRF_COOKIE_KEY}=([^;]+)`);
+  const m = cookieHeader.match(re);
+  return m?.[1];
+}
+__name(extractCsrfFromCookie, "extractCsrfFromCookie");
+function createLocalDevMiddleware() {
+  let webUserHeader = "";
+  const parsed = parseSudaWebUserEnv(process.env.SUDA_WEBUSER);
+  if (parsed) {
+    webUserHeader = encodeURIComponent(JSON.stringify(parsed));
+  }
+  return /* @__PURE__ */ __name(function localDevMiddleware(req, _res, next) {
+    const headers = req.headers;
+    if (!headers[CSRF_HEADER_KEY]) {
+      const token = extractCsrfFromCookie(req.headers.cookie);
+      if (token) headers[CSRF_HEADER_KEY] = token;
+    }
+    if (webUserHeader && !headers[WEBUSER_HEADER_KEY]) {
+      headers[WEBUSER_HEADER_KEY] = webUserHeader;
+    }
+    next();
+  }, "localDevMiddleware");
+}
+__name(createLocalDevMiddleware, "createLocalDevMiddleware");
+
 // src/setup.ts
 var DEFAULT_BODY_LIMIT = "1mb";
 var defaultPerms = {
@@ -36570,6 +36642,9 @@ async function configureApp(app, perms = defaultPerms) {
     extended: true
   }));
   app.use((0, import_cookie_parser.default)());
+  if (isLocalDev()) {
+    app.use(createLocalDevMiddleware());
+  }
   app.use(createLegacyPathRedirectMiddleware());
   const globalPrefix = process.env.CLIENT_BASE_PATH ?? "";
   app.setGlobalPrefix(globalPrefix);
@@ -36621,6 +36696,8 @@ var import_nestjs_authzpaas2 = require("@lark-apaas/nestjs-authzpaas");
   ViewContextMiddleware,
   configureApp,
   createLegacyPathRedirectMiddleware,
+  createLocalDevMiddleware,
+  isLocalDev,
   ...require("@lark-apaas/nestjs-authnpaas"),
   ...require("@lark-apaas/nestjs-capability"),
   ...require("@lark-apaas/nestjs-datapaas"),

package/dist/index.d.cts

@@ -7,7 +7,7 @@ import { NestExpressApplication } from '@nestjs/platform-express';
 import { PlatformHttpClient, RequestContextService, ObservableService } from '@lark-apaas/nestjs-common';
 export { AutoTrace } from '@lark-apaas/nestjs-common';
 export { DevToolsModule, DevToolsOptions, DevToolsV2Module, DevToolsV2Options } from '@lark-apaas/nestjs-openapi-devtools';
-import { Request, Response, NextFunction } from 'express';
+import { Request, Response, NextFunction, RequestHandler } from 'express';
 import * as _lark_apaas_file_service from '@lark-apaas/file-service';
 import { FileBody, UploadOptions, FileDownloadBuilder, SearchOptions } from '@lark-apaas/file-service';
 export * from '@lark-apaas/file-service';
@@ -230,6 +230,9 @@ declare class ViewContextMiddleware implements NestMiddleware {
  */
 declare function createLegacyPathRedirectMiddleware(): (req: Request, res: Response, next: NextFunction) => void;
 
+declare function isLocalDev(): boolean;
+declare function createLocalDevMiddleware(): RequestHandler;
+
 /**
  * API 404 响应格式
  */
@@ -411,4 +414,4 @@ declare class PlatformHttpClientService {
     private registerInterceptorsForClient;
 }
 
-export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware };
+export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware, createLocalDevMiddleware, isLocalDev };

package/dist/index.d.ts

@@ -7,7 +7,7 @@ import { NestExpressApplication } from '@nestjs/platform-express';
 import { PlatformHttpClient, RequestContextService, ObservableService } from '@lark-apaas/nestjs-common';
 export { AutoTrace } from '@lark-apaas/nestjs-common';
 export { DevToolsModule, DevToolsOptions, DevToolsV2Module, DevToolsV2Options } from '@lark-apaas/nestjs-openapi-devtools';
-import { Request, Response, NextFunction } from 'express';
+import { Request, Response, NextFunction, RequestHandler } from 'express';
 import * as _lark_apaas_file_service from '@lark-apaas/file-service';
 import { FileBody, UploadOptions, FileDownloadBuilder, SearchOptions } from '@lark-apaas/file-service';
 export * from '@lark-apaas/file-service';
@@ -230,6 +230,9 @@ declare class ViewContextMiddleware implements NestMiddleware {
  */
 declare function createLegacyPathRedirectMiddleware(): (req: Request, res: Response, next: NextFunction) => void;
 
+declare function isLocalDev(): boolean;
+declare function createLocalDevMiddleware(): RequestHandler;
+
 /**
  * API 404 响应格式
  */
@@ -411,4 +414,4 @@ declare class PlatformHttpClientService {
     private registerInterceptorsForClient;
 }
 
-export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware };
+export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware, createLocalDevMiddleware, isLocalDev };

package/dist/index.js

@@ -34400,6 +34400,18 @@ var require_express2 = __commonJS({
   }
 });
 
+// src/load-env.ts
+try {
+  const dotenv = __require("dotenv");
+  dotenv.config({
+    path: ".env.local"
+  });
+  dotenv.config({
+    path: ".env"
+  });
+} catch {
+}
+
 // src/modules/platform/module.ts
 import { Global, Module as Module3, ValidationPipe } from "@nestjs/common";
 import { APP_INTERCEPTOR, APP_PIPE } from "@nestjs/core";
@@ -34418,20 +34430,41 @@ import { CapabilityModule } from "@lark-apaas/nestjs-capability";
 // src/middlewares/user-context/index.ts
 import { Injectable } from "@nestjs/common";
 
+// src/utils/parse-suda-webuser.ts
+function parseSudaWebUserEnv(raw) {
+  if (!raw) return null;
+  try {
+    return JSON.parse(raw);
+  } catch {
+  }
+  try {
+    return JSON.parse(raw.replace(/\\"/g, '"'));
+  } catch {
+    return null;
+  }
+}
+__name(parseSudaWebUserEnv, "parseSudaWebUserEnv");
+
 // src/middlewares/user-context/helper.ts
 var sudaWebUserHeaderKey = "x-larkgw-suda-webuser";
 function getWebUserFromHeader(req) {
   const sudaWebUserContent = req.headers[sudaWebUserHeaderKey];
-  if (!sudaWebUserContent) {
-    return null;
+  if (sudaWebUserContent) {
+    try {
+      const sudaWebUserJsonStr = decodeURIComponent(sudaWebUserContent);
+      const sudaWebUserJson = JSON.parse(sudaWebUserJsonStr);
+      return sudaWebUserJson;
+    } catch (err) {
+      console.error("parse suda webuser from header failed, err=%o", err);
+      return null;
+    }
   }
-  try {
-    const sudaWebUserJsonStr = decodeURIComponent(sudaWebUserContent);
-    const sudaWebUserJson = JSON.parse(sudaWebUserJsonStr);
-    return sudaWebUserJson;
-  } catch (err) {
-    console.error("parse suda webuser from header failed, err=%o", err);
-    return null;
+  if (process.env.MIAODA_LOCAL_DEV === "1") {
+    const parsed = parseSudaWebUserEnv(process.env.SUDA_WEBUSER);
+    if (parsed) return parsed;
+    if (process.env.SUDA_WEBUSER) {
+      console.error("parse suda webuser from env failed, value head=%s", process.env.SUDA_WEBUSER.slice(0, 80));
+    }
   }
   return null;
 }
@@ -36526,6 +36559,43 @@ function createLegacyPathRedirectMiddleware() {
 }
 __name(createLegacyPathRedirectMiddleware, "createLegacyPathRedirectMiddleware");
 
+// src/middlewares/local-dev/index.ts
+var CSRF_COOKIE_KEY = "suda-csrf-token";
+var CSRF_HEADER_KEY = "x-suda-csrf-token";
+var WEBUSER_HEADER_KEY = "x-larkgw-suda-webuser";
+function isLocalDev() {
+  if (process.env.NODE_ENV === "production") return false;
+  const flag = process.env.MIAODA_LOCAL_DEV;
+  return flag === "1" || flag === "true";
+}
+__name(isLocalDev, "isLocalDev");
+function extractCsrfFromCookie(cookieHeader) {
+  if (!cookieHeader) return void 0;
+  const re = new RegExp(`(?:^|;\\s*)${CSRF_COOKIE_KEY}=([^;]+)`);
+  const m = cookieHeader.match(re);
+  return m?.[1];
+}
+__name(extractCsrfFromCookie, "extractCsrfFromCookie");
+function createLocalDevMiddleware() {
+  let webUserHeader = "";
+  const parsed = parseSudaWebUserEnv(process.env.SUDA_WEBUSER);
+  if (parsed) {
+    webUserHeader = encodeURIComponent(JSON.stringify(parsed));
+  }
+  return /* @__PURE__ */ __name(function localDevMiddleware(req, _res, next) {
+    const headers = req.headers;
+    if (!headers[CSRF_HEADER_KEY]) {
+      const token = extractCsrfFromCookie(req.headers.cookie);
+      if (token) headers[CSRF_HEADER_KEY] = token;
+    }
+    if (webUserHeader && !headers[WEBUSER_HEADER_KEY]) {
+      headers[WEBUSER_HEADER_KEY] = webUserHeader;
+    }
+    next();
+  }, "localDevMiddleware");
+}
+__name(createLocalDevMiddleware, "createLocalDevMiddleware");
+
 // src/setup.ts
 var DEFAULT_BODY_LIMIT = "1mb";
 var defaultPerms = {
@@ -36543,6 +36613,9 @@ async function configureApp(app, perms = defaultPerms) {
     extended: true
   }));
   app.use(cookieParser());
+  if (isLocalDev()) {
+    app.use(createLocalDevMiddleware());
+  }
   app.use(createLegacyPathRedirectMiddleware());
   const globalPrefix = process.env.CLIENT_BASE_PATH ?? "";
   app.setGlobalPrefix(globalPrefix);
@@ -36592,7 +36665,9 @@ export {
   UserContextMiddleware,
   ViewContextMiddleware,
   configureApp,
-  createLegacyPathRedirectMiddleware
+  createLegacyPathRedirectMiddleware,
+  createLocalDevMiddleware,
+  isLocalDev
 };
 /*! Bundled license information:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-apaas/fullstack-nestjs-core",
-  "version": "1.1.51-beta.0",
+  "version": "1.1.52-alpha.0",
   "description": "FullStack Nestjs Core",
   "type": "module",
   "main": "./dist/index.js",
@@ -40,20 +40,21 @@
   },
   "dependencies": {
     "@lark-apaas/file-service": "^0.1.2",
-    "@lark-apaas/http-client": "^0.1.6",
-    "@lark-apaas/nestjs-authnpaas": "1.0.4-beta.0",
-    "@lark-apaas/nestjs-authzpaas": "0.1.9-beta.0",
-    "@lark-apaas/nestjs-capability": "0.1.14-beta.0",
-    "@lark-apaas/nestjs-common": "0.1.9-beta.0",
-    "@lark-apaas/nestjs-datapaas": "1.0.21-beta.0",
-    "@lark-apaas/nestjs-http-forwarder": "0.1.3-beta.0",
-    "@lark-apaas/nestjs-logger": "1.0.17-beta.0",
-    "@lark-apaas/nestjs-observable": "0.0.12-beta.0",
+    "@lark-apaas/http-client": "0.1.7-alpha.7",
+    "@lark-apaas/nestjs-authnpaas": "^1.0.3",
+    "@lark-apaas/nestjs-authzpaas": "^0.1.8",
+    "@lark-apaas/nestjs-capability": "^0.1.13",
+    "@lark-apaas/nestjs-common": "^0.1.8",
+    "@lark-apaas/nestjs-datapaas": "^1.0.20",
+    "@lark-apaas/nestjs-http-forwarder": "^0.1.2",
+    "@lark-apaas/nestjs-logger": "^1.0.16",
+    "@lark-apaas/nestjs-observable": "^0.0.11",
     "@lark-apaas/nestjs-openapi-devtools": "^1.0.10",
     "@lark-apaas/nestjs-trigger": "^0.0.3",
     "@nestjs/axios": "^4.0.1",
     "axios": "^1.13.2",
-    "cookie-parser": "^1.4.7"
+    "cookie-parser": "^1.4.7",
+    "dotenv": "^16.4.5"
   },
   "devDependencies": {
     "@nestjs/common": "^10.4.20",