@maiyunnet/kebab 5.3.0 → 6.0.0

package/www/example/ctr/test.js

@@ -14,7 +14,6 @@ import * as lScan from '#kebab/lib/scan.js';
 import * as lSql from '#kebab/lib/sql.js';
 import * as lConsistent from '#kebab/lib/consistent.js';
 import * as lSsh from '#kebab/lib/ssh.js';
-import * as lJwt from '#kebab/lib/jwt.js';
 import * as lWs from '#kebab/lib/ws.js';
 import * as lS3 from '#kebab/lib/s3.js';
 import * as lZip from '#kebab/lib/zip.js';
@@ -86,6 +85,8 @@ export default class extends sCtr.Ctr {
             '<br>STATIC_PATH: ' + this._config.set.staticPath,
             '<br>STATIC_PATH_FULL: ' + this._config.set.staticPathFull,
             '<br>_internalUrl: ' + this._internalUrl,
+            '<br><br>ROOT_PATH: ' + this._config.const.rootPath,
+            '<br>ROOT_CWD: ' + kebab.ROOT_CWD,
             '<br><br>headers: ' + lText.htmlescape(JSON.stringify(this._headers)),
             '<br><br><b style="color: red;">Tips: The file can be deleted.</b>',
             '<br><br><b>Route (route.json):</b>',
@@ -124,6 +125,8 @@ export default class extends sCtr.Ctr {
             `<br><a href="${this._config.const.urlBase}test/mod-test">Click to see an example of a Test model</a> <a href="${this._config.const.urlBase}test/mod-test?s=pgsql">pgsql</a>`,
             `<br><a href="${this._config.const.urlBase}test/mod-split">View "test/mod-split"</a>`,
             `<br><a href="${this._config.const.urlBase}test/mod-insert">View "test/mod-insert"</a>`,
+            `<br><a href="${this._config.const.urlBase}test/mod-upsert">View "test/mod-upsert"</a>`,
+            `<br><a href="${this._config.const.urlBase}test/mod-update-list">View "test/mod-update-list"</a>`,
             '<br><br><b>Library test:</b>',
             `<br><br><b>Ai:</b>`,
             `<br><br><a href="${this._config.const.urlBase}test/ai">View "test/ai"</a>`,
@@ -182,15 +185,12 @@ export default class extends sCtr.Ctr {
             `<br><br><a href="${this._config.const.urlBase}test/sql?type=insert">View "test/sql?type=insert"</a> <a href="${this._config.const.urlBase}test/sql?type=insert&s=pgsql">pgsql</a>`,
             `<br><a href="${this._config.const.urlBase}test/sql?type=select">View "test/sql?type=select"</a> <a href="${this._config.const.urlBase}test/sql?type=select&s=pgsql">pgsql</a>`,
             `<br><a href="${this._config.const.urlBase}test/sql?type=update">View "test/sql?type=update"</a> <a href="${this._config.const.urlBase}test/sql?type=update&s=pgsql">pgsql</a>`,
+            `<br><a href="${this._config.const.urlBase}test/sql?type=upsert">View "test/sql?type=upsert"</a> <a href="${this._config.const.urlBase}test/sql?type=upsert&s=pgsql">pgsql</a>`,
             `<br><a href="${this._config.const.urlBase}test/sql?type=delete">View "test/sql?type=delete"</a> <a href="${this._config.const.urlBase}test/sql?type=delete&s=pgsql">pgsql</a>`,
             `<br><a href="${this._config.const.urlBase}test/sql?type=where">View "test/sql?type=where"</a> <a href="${this._config.const.urlBase}test/sql?type=where&s=pgsql">pgsql</a>`,
             `<br><a href="${this._config.const.urlBase}test/sql?type=having">View "test/sql?type=having"</a> <a href="${this._config.const.urlBase}test/sql?type=having&s=pgsql">pgsql</a>`,
             `<br><a href="${this._config.const.urlBase}test/sql?type=by">View "test/sql?type=by"</a> <a href="${this._config.const.urlBase}test/sql?type=by&s=pgsql">pgsql</a>`,
             `<br><a href="${this._config.const.urlBase}test/sql?type=field">View "test/sql?type=field"</a> <a href="${this._config.const.urlBase}test/sql?type=field&s=pgsql">pgsql</a>`,
-            '<br><br><b>Jwt:</b>',
-            `<br><br><a href="${this._config.const.urlBase}test/jwt">View "test/jwt"</a>`,
-            `<br><a href="${this._config.const.urlBase}test/jwt?type=kv">View "test/jwt?type=kv"</a>`,
-            `<br><a href="${this._config.const.urlBase}test/jwt?type=auth">View "test/jwt?type=auth" Header Authorization</a>`,
             '<br><br><b>Consistent:</b>',
             `<br><br><a href="${this._config.const.urlBase}test/consistent-hash">View "test/consistent-hash"</a>`,
             `<br><a href="${this._config.const.urlBase}test/consistent-distributed">View "test/consistent-distributed"</a>`,
@@ -281,7 +281,7 @@ Result:<pre id="result">Nothing.</pre>${this._getEnd()}`;
     'num2': ['> 0', '<= 100', [0, 'The num2 param must > 0.']],
     'reg': ['/^[A-CX-Z5-7]+$/', [0, 'The reg param is incorrect.']],
     'arr': [['a', 'x', 'hehe'], [0, 'The arr param is incorrect.']],
-    'type': [{ 'type': { 'a': 1, 'b': '' } }, [0, 'The reg param is incorrect']],
+    'type': [{ 'type': { 'a': 1, 'b': '' } }, [0, 'The type param is incorrect']],
     'json': [{ 'type': { 'a': '1', 'b': [ { 'c': 1 } ] } }, [0, 'The type param is incorrect']],
     'json2': [{ 'type': { 'a': '1', 'b': 0, 'c?': { 'd': '1' } } }, [0, 'The json2 param is incorrect']],
 }</pre>`];
@@ -841,6 +841,127 @@ CREATE TABLE \`m_test_data_0\` (
         echo.push('<br><br>Result: ' + JSON.stringify(res));
         return echo.join('') + '<br><br>' + this._getEnd();
     }
+    async modUpsert() {
+        const echo = ['<b style="color: red;">In a production environment, please delete "mod/test.ts" and "mod/testdata.ts" files.</b>'];
+        const db = this._get['s'] === 'pgsql' ? lDb.get(this, {
+            'service': lDb.ESERVICE.PGSQL,
+        }) : lDb.get(this);
+        // --- 1. 第一次 Upsert (插入新记录) ---
+        echo.push('<b>Test 1: Insert new record (default conflict field)</b><br>');
+        const test1 = mTest.getCreate(db, {
+            'ctr': this,
+            'pre': this._get['s'] === 'pgsql' ? 'm' : undefined,
+        });
+        test1.set({
+            'name': lCore.random(4),
+            'point': { 'x': 10, 'y': 10 },
+            'time_add': lTime.stamp(),
+        });
+        const res1 = await test1.upsert('name');
+        echo.push(`<pre>const test1 = mTest.getCreate(db);
+test1.set({
+    'name': '${test1.name}',
+    'point': { 'x': 10, 'y': 10 },
+    'time_add': ${test1.time_add},
+});
+const res1 = await test1.upsert('name');
+</pre>Result: ${res1}<br><br>`);
+        let stmt = await db.query(this._get['s'] === 'pgsql' ?
+            `SELECT * FROM "m"."test" WHERE "token" LIKE \'test_%\' ORDER BY "id" ASC;` :
+            'SELECT * FROM `m_test` WHERE `token` LIKE \'test_%\' ORDER BY `id` ASC;');
+        this._dbTable(stmt, echo);
+        // --- 2. 第二次 Upsert (更新已有记录) ---
+        echo.push('<br><b>Test 2: Update existing record (same name)</b><br>');
+        const test2 = mTest.getCreate(db, {
+            'ctr': this,
+            'pre': this._get['s'] === 'pgsql' ? 'm' : undefined,
+        });
+        test2.set({
+            'name': test1.name, // --- 相同的 name ---
+            'point': { 'x': 20, 'y': 20 },
+            'time_add': lTime.stamp(),
+        });
+        const res2 = await test2.upsert('name');
+        echo.push(`<pre>const test2 = mTest.getCreate(db);
+test2.set({
+    'name': '${test1.name}',
+    'point': { 'x': 20, 'y': 20 },
+    'time_add': ${test2.time_add},
+});
+const res2 = await test2.upsert('name');</pre>Result: ${res2}<br><br>`);
+        stmt = await db.query(this._get['s'] === 'pgsql' ?
+            `SELECT * FROM "m"."test" WHERE "token" LIKE \'test_%\' ORDER BY "id" ASC;` :
+            'SELECT * FROM `m_test` WHERE `token` LIKE \'test_%\' ORDER BY `id` ASC;');
+        this._dbTable(stmt, echo);
+        // --- 清理测试数据 ---
+        await mTest.removeByWhere(db, [
+            ['token', 'LIKE', 'test_%']
+        ], {
+            'ctr': this,
+            'pre': this._get['s'] === 'pgsql' ? 'm' : undefined,
+        });
+        return echo.join('') + '<br>' + this._getEnd();
+    }
+    async modUpdateList() {
+        const echo = ['<b style="color: red;">In a production environment, please delete "mod/test.ts" and "mod/testdata.ts" files.</b>'];
+        const db = this._get['s'] === 'pgsql' ? lDb.get(this, {
+            'service': lDb.ESERVICE.PGSQL,
+        }) : lDb.get(this);
+        // --- 准备数据 ---
+        const time = lTime.stamp();
+        const data = [];
+        for (let i = 0; i < 5; ++i) {
+            data.push({
+                'name': 'ul_' + i,
+                'token': 'ul_token_' + i,
+                'point': { 'x': i, 'y': i },
+                'time_add': time,
+            });
+        }
+        // --- 插入数据 ---
+        await mTest.insert(db, ['name', 'token', 'point', 'time_add'], data.map(item => [item.name, item.token, item.point, item.time_add]), {
+            'ctr': this,
+            'pre': this._get['s'] === 'pgsql' ? 'm' : undefined,
+        });
+        echo.push('<br><br>Inserted 5 rows.<br><br>');
+        // --- 查询插入的数据 ---
+        let stmt = await db.query(this._get['s'] === 'pgsql' ?
+            `SELECT * FROM "m"."test" WHERE "token" LIKE 'ul_token_%' ORDER BY "id" ASC;` :
+            `SELECT * FROM \`m_test\` WHERE \`token\` LIKE 'ul_token_%' ORDER BY \`id\` ASC;`);
+        this._dbTable(stmt, echo);
+        // --- 构造批量更新数据 ---
+        // --- 更新 name 和 point ---
+        const updateData = [];
+        if (stmt.rows) {
+            for (let i = 0; i < stmt.rows.length; ++i) {
+                const row = stmt.rows[i];
+                updateData.push({
+                    'id': row.id,
+                    'name': 'up_' + i,
+                    'point': { 'x': i + 10, 'y': i + 10 }
+                });
+            }
+        }
+        // --- 执行批量更新 ---
+        const res = await mTest.updateList(db, updateData, 'id', {
+            'ctr': this,
+            'pre': this._get['s'] === 'pgsql' ? 'm' : undefined,
+        });
+        echo.push(`<br><b>updateList result:</b> ${lText.stringifyJson(res)}<br><br>`);
+        // --- 查询更新后的数据 ---
+        stmt = await db.query(this._get['s'] === 'pgsql' ?
+            `SELECT * FROM "m"."test" WHERE "token" LIKE 'ul_token_%' ORDER BY "id" ASC;` :
+            `SELECT * FROM \`m_test\` WHERE \`token\` LIKE 'ul_token_%' ORDER BY \`id\` ASC;`);
+        this._dbTable(stmt, echo);
+        // --- 清理数据 ---
+        await mTest.removeByWhere(db, [
+            ['token', 'LIKE', 'ul_token_%']
+        ], {
+            'ctr': this,
+            'pre': this._get['s'] === 'pgsql' ? 'm' : undefined,
+        });
+        return echo.join('') + '<br>' + this._getEnd();
+    }
     captchaFastbuild() {
         return lCaptcha.get(400, 100).getBuffer();
     }
@@ -1089,7 +1210,7 @@ for (let i = 0; i < 30000; ++i) {
         const echo = [];
         echo.push('<table style="width: 100%;">');
         if (list) {
-            echo.push('<tr><th>TIME</th><th>UNIX</th><th>URL</th><th>COOKIE</th><th>SESSION</th><th>JWT</th><th>USER_AGENT</th><th>REALIP</th><th>CLIENTIP</th><th>MESSAGE</th></tr>');
+            echo.push('<tr><th>TIME</th><th>UNIX</th><th>URL</th><th>COOKIE</th><th>SESSION</th><th>USER_AGENT</th><th>REALIP</th><th>CLIENTIP</th><th>OS</th><th>PROCESS</th><th>MESSAGE</th></tr>');
             for (const row of list) {
                 echo.push('<tr>');
                 for (const item of row) {
@@ -1766,7 +1887,7 @@ lCore.setCookie(this, 'test10', 'httponly', {
 });</pre>
 headers: <pre>${JSON.stringify(res.headers, null, 4)}</pre>
 content: <pre>${(await res.getContent())?.toString() ?? 'null'}</pre>
-error: ${JSON.stringify(res.error)}</pre>`);
+error: ${JSON.stringify(res.error)}`);
         return echo.join('') + this._getEnd();
     }
     async netFollow() {
@@ -2192,65 +2313,6 @@ Result:<pre id="result">Nothing.</pre>`);
             }
         }
     }
-    async jwt() {
-        const retur = [];
-        if (!(this._checkInput(this._get, {
-            'type': [['', 'kv', 'auth'], [0, 'Bad request.']]
-        }, retur))) {
-            return retur;
-        }
-        const echo = ['<pre>'];
-        let link = undefined;
-        if (this._get['type'] === 'kv') {
-            link = lKv.get(this);
-            echo.push('link = lKv.get(this);\n');
-        }
-        const origin = lJwt.getOrigin(this);
-        echo.push(`const origin = lJwt.getOrigin(this);
-JSON.stringify(origin);</pre>`);
-        echo.push(JSON.stringify(origin));
-        // --- 创建 jwt 对象 ---
-        const jwt = await lJwt.get(this, {}, link);
-        echo.push(`<pre>const jwt = lJwt.get(this, {}, ${link ? 'link' : 'undefined'});
-JSON.stringify(this._jwt);</pre>`);
-        echo.push(JSON.stringify(this._jwt));
-        this._jwt['test'] = 'a';
-        const value = jwt.renew();
-        echo.push(`<pre>this._jwt['test'] = 'a';
-const value = jwt.renew();
-JSON.stringify(this._jwt);</pre>`);
-        echo.push(JSON.stringify(this._jwt));
-        echo.push(`<pre>JSON.stringify(value);</pre>`);
-        echo.push(JSON.stringify(value));
-        const token = this._jwt['token'];
-        const rtn = await jwt.destory();
-        echo.push(`<pre>const token = this._jwt['token'];
-const rtn = await jwt.destory();
-JSON.stringify(rtn);</pre>`);
-        echo.push(JSON.stringify(rtn));
-        echo.push('<pre>JSON.stringify(this._jwt);</pre>');
-        echo.push(JSON.stringify(this._jwt));
-        const rtn2 = await lJwt.decode(this, origin, link);
-        echo.push(`<pre>const rtn2 = await lJwt.decode(this, origin, ${link ? 'link' : 'undefined'});
-JSON.stringify(rtn2);</pre>`);
-        echo.push(JSON.stringify(rtn2));
-        if (this._get['type'] === 'auth') {
-            echo.push(`<br><br><input type="button" value="Post with header" onclick="document.getElementById('result').innerText='Waiting...';fetch('${this._config.const.urlBase}test/jwt1',{method:'POST',credentials:'omit',headers:{'Authorization':document.getElementById('_auth').innerText,'content-type':'application/x-www-form-urlencoded'},body:'key=val'}).then(function(r){return r.json();}).then(function(j){document.getElementById('result').innerText=j.txt;});"><input type='button' value="Post without header" style="margin-left: 10px;" onclick="document.getElementById('result').innerText='Waiting...';fetch('${this._config.const.urlBase}test/jwt1',{method:'POST',credentials:'omit',headers:{'content-type':'application/x-www-form-urlencoded'},body:'key=val'}).then(function(r){return r.json();}).then(function(j){document.getElementById('result').innerText=j.txt;});"><br><br>
-Token: <span id="token">${token}</span><br>
-Post Authorization header: <span id="_auth">Bearer ${origin}</span><br><br>
-Result:<pre id="result">Nothing.</pre>`);
-        }
-        else {
-            echo.push('<br><br>');
-        }
-        return echo.join('') + this._getEnd();
-    }
-    async jwt1() {
-        await lJwt.get(this, {
-            'auth': true
-        });
-        return [1, { 'txt': JSON.stringify(this._jwt) }];
-    }
     sql() {
         const echo = [];
         let sql = this._get['s'] === 'pgsql' ? lSql.get('test', {
@@ -2292,18 +2354,10 @@ Result:<pre id="result">Nothing.</pre>`);
                 s = sql.insert('geo').values(['name', 'point', 'point2', 'polygon', 'json'], [
                     [
                         'POINT A', ['ST_POINTFROMTEXT(?)', ['POINT(122.147775 30.625015)']], { 'x': 1, 'y': 1 }, [
-                            [
-                                { 'x': 1, 'y': 1 },
-                                { 'x': 2, 'y': 2 },
-                                { 'x': 3, 'y': 3 },
-                                { 'x': 1, 'y': 1 }
-                            ],
-                            [
-                                { 'x': 6, 'y': 1 },
-                                { 'x': 7, 'y': 2 },
-                                { 'x': 8, 'y': 3 },
-                                { 'x': 6, 'y': 1 }
-                            ]
+                            { 'x': 1, 'y': 1 },
+                            { 'x': 2, 'y': 2 },
+                            { 'x': 3, 'y': 3 },
+                            { 'x': 1, 'y': 1 }
                         ],
                         { 'x': { 'y': 'ghi' } }
                     ],
@@ -2315,18 +2369,10 @@ Result:<pre id="result">Nothing.</pre>`);
                 echo.push(`<pre>sql.insert('geo').values(['name', 'point', 'point2', 'polygon', 'json'], [
     [
         'POINT A', ['ST_POINTFROMTEXT(?)', ['POINT(122.147775 30.625015)']], { 'x': 1, 'y': 1 }, [
-            [
-                { 'x': 1, 'y': 1 },
-                { 'x': 2, 'y': 2 },
-                { 'x': 3, 'y': 3 },
-                { 'x': 1, 'y': 1 }
-            ],
-            [
-                { 'x': 6, 'y': 1 },
-                { 'x': 7, 'y': 2 },
-                { 'x': 8, 'y': 3 },
-                { 'x': 6, 'y': 1 }
-            ]
+            { 'x': 1, 'y': 1 },
+            { 'x': 2, 'y': 2 },
+            { 'x': 3, 'y': 3 },
+            { 'x': 1, 'y': 1 }
         ],
         { 'x': { 'y': 'ghi' } }
     ],
@@ -2438,6 +2484,37 @@ Result:<pre id="result">Nothing.</pre>`);
                 echo.push(`<pre>sql.update('json', { 'json1': { 'key': 'val', 'key2': 'val2' }, 'json2': [ { 'k1': 'v1' }, { 'k2': 'v2' } ], 'json3': { 'x': 1, 'y': 2 }, 'json4': [], 'json5': {} }).where({ 'id': 1 });</pre>
 <b>getSql() :</b> ${s}<br>
 <b>getData():</b> <pre>${JSON.stringify(sd, undefined, 4)}</pre>
+<b>format() :</b> ${sql.format(s, sd)}`);
+                break;
+            }
+            case 'upsert': {
+                // --- 对象形式 ---
+                let s = sql.insert('user').values({ 'id': 1, 'name': 'Bob', 'age': 25 }).upsert({ 'name': 'Updated Bob', 'age': 26 }).getSql();
+                let sd = sql.getData();
+                echo.push(`<pre>sql.insert('user').values({ 'id': 1, 'name': 'Bob', 'age': 25 }).upsert({ 'name': 'Updated Bob', 'age': 26 });</pre>
+<b>getSql() :</b> ${s}<br>
+<b>getData():</b> <pre>${JSON.stringify(sd, undefined, 4)}</pre>
+<b>format() :</b> ${sql.format(s, sd)}<hr>`);
+                // --- 数组形式 ---
+                s = sql.insert('user').values(['id', 'name', 'age'], [1, 'Alice', 30]).upsert({ 'name': 'Updated Alice', 'age': 31 }).getSql();
+                sd = sql.getData();
+                echo.push(`<pre>sql.insert('user').values(['id', 'name', 'age'], [1, 'Alice', 30]).upsert({ 'name': 'Updated Alice', 'age': 31 });</pre>
+<b>getSql() :</b> ${s}<br>
+<b>getData():</b> <pre>${JSON.stringify(sd, undefined, 4)}</pre>
+<b>format() :</b> ${sql.format(s, sd)}<hr>`);
+                // --- 列引用 ---
+                s = sql.insert('user').values({ 'id': 1, 'name': 'Charlie', 'age': 35 }).upsert([{ 'name': 'abc' }, ['age', '+', lSql.column('age')]]).getSql();
+                sd = sql.getData();
+                echo.push(`<pre>sql.insert('user').values({ 'id': 1, 'name': 'Charlie', 'age': 35 }).upsert([ { 'name': 'abc' }, ['age', '+', lSql.column('age')] ]);</pre>
+<b>getSql() :</b> ${s}<br>
+<b>getData():</b> <pre>${JSON.stringify(sd, undefined, 4)}</pre>
+<b>format() :</b> ${sql.format(s, sd)}<hr>`);
+                // --- 多字段 ---
+                s = sql.insert('user').values({ 'id': 1, 'name': 'Dave', 'age': 40, 'city': 'Beijing' }).upsert({ 'name': 'Updated Dave', 'age': 41, 'city': 'Shanghai' }).getSql();
+                sd = sql.getData();
+                echo.push(`<pre>sql.insert('user').values({ 'id': 1, 'name': 'Dave', 'age': 40, 'city': 'Beijing' }).upsert({ 'name': 'Updated Dave', 'age': 41, 'city': 'Shanghai' });</pre>
+<b>getSql() :</b> ${s}<br>
+<b>getData():</b> <pre>${JSON.stringify(sd, undefined, 4)}</pre>
 <b>format() :</b> ${sql.format(s, sd)}`);
                 break;
             }
@@ -2602,7 +2679,7 @@ Result:<pre id="result">Nothing.</pre>`);
                 echo.push(`<pre>sql.field('SUM(num) all');</pre>` + sql.field('SUM(num) all'));
                 echo.push(`<pre>sql.field('SUM(x.num) all');</pre>` + sql.field('SUM(x.num) all'));
                 echo.push(`<pre>sql.field('SUM(x.\`num\`) all');</pre>` + sql.field('SUM(x.`num`) all'));
-                echo.push(`<pre>sql.field('FROM_UNIXTIME(time, \\'%Y-%m-%d\\') time');</pre>` + sql.field('FROM_UNIXTIME(time, \'%Y-%m-%d\') time'));
+                echo.push(`<pre>sql.field('FROM_UNIXTIME(time, \\'%Y-%m-%d\\') time');</pre>` + sql.field(`FROM_UNIXTIME(time, '%Y-%m-%d') time`));
                 echo.push(`<pre>sql.field('(6371 * ACOS(COS(RADIANS(31.239845)) * COS(RADIANS(lat)) * COS(RADIANS(\`lng\`) - RADIANS(121.499662)) + SIN(RADIANS(31.239845)) * SIN(RADIANS(\`lat\`))))');</pre>` + sql.field('(6371 * ACOS(COS(RADIANS(31.239845)) * COS(RADIANS(lat)) * COS(RADIANS(`lng`) - RADIANS(121.499662)) + SIN(RADIANS(31.239845)) * SIN(RADIANS(`lat`))))'));
                 echo.push(`<pre>sql.field('MATCH(name_sc, name_tc) AGAINST("ok") tmp'));</pre>` + sql.field('MATCH(name_sc, name_tc) AGAINST("ok") tmp'));
                 echo.push(`<pre>sql.field('a\\'bc');</pre>` + sql.field('a\'bc'));
@@ -3094,7 +3171,7 @@ rtn.push(reader.readBCDString());</pre>${JSON.stringify(rtn)}`);
         // --- 注意，这个只是演示，你实际需要在 ind 目录中创建计划任务 ---
         // --- 并用 --ind 单线程模式运行 ---
         const echo = [];
-        let rtn = await lCron.regular({
+        const rtn = await lCron.regular({
             'name': 'test',
             'rule': '40 * * * *',
             'callback': (date, immediate) => {

package/lib/jwt.d.ts

@@ -1,73 +0,0 @@
-/**
- * Project: Kebab, User: JianSuoQiYue
- * Date: 2023-1-31 20:34:47
- * Last: 2023-1-31 20:34:47, 2023-12-8 13:55:09, 2025-11-6 16:22:06
- */
-import * as kebab from '#kebab/index.js';
-import * as lKv from '#kebab/lib/kv.js';
-import * as sCtr from '#kebab/sys/ctr.js';
-export interface IOptions {
-    'name'?: string;
-    'ttl'?: number;
-    'ssl'?: boolean;
-    'secret'?: string;
-    'auth'?: boolean;
-}
-export declare class Jwt {
-    /** --- Kv --- */
-    private _link?;
-    /** --- 在前端或 Kv 中储存的名前缀 --- */
-    private _name;
-    /** --- 有效期 --- */
-    private _ttl;
-    /** --- cookie 模式时是否仅支持 SSL --- */
-    private _ssl;
-    /** --- 验证密钥 --- */
-    private _secret;
-    /** --- 是否从头部读取 --- */
-    private _auth;
-    /** --- ctr 对象 --- */
-    private _ctr;
-    /**
-     * --- 初始化函数，相当于 construct ---
-     * @param ctr 模型实例
-     * @param link Kv 或 Db 实例
-     * @param auth 设为 true 则优先从头 Authorization 或 post _auth 值读取 token
-     * @param opt 选项
-     */
-    init(ctr: sCtr.Ctr, opt?: IOptions, link?: lKv.Kv): Promise<boolean>;
-    /**
-     * --- 将 _jwt 数据封装并返回（创建新的或者续期老的 token），默认会同时设置一个 cookie（data 值会自动设置 token、exp） ---
-     */
-    renew(): string;
-    /**
-     * --- 清除 cookie，仅仅清除 cookie，jwt 并不会失效 ---
-     */
-    clearCookie(): void;
-    /**
-     * --- 销毁 jwt，其实就是将 token block 信息写入 redis，如果没有 redis 则不能销毁，返回数组代表销毁成功的 token 和原 exp，否则失败返回 false ---
-     */
-    destory(): Promise<{
-        token: string;
-        exp: number;
-    } | boolean>;
-}
-/**
- * --- 获取 jwt 原始字符串，不保证有效 ---
- */
-export declare function getOrigin(ctr: sCtr.Ctr, name?: string, auth?: boolean): string;
-/**
- * --- decode ---
- * 不传入 link 的话，将不做 block 有效校验，只做本身的 exp 有效校验
- */
-export declare function decode(ctr: sCtr.Ctr, val: string, link?: lKv.Kv, name?: string, secret?: string): Promise<Record<string, kebab.DbValue> | false>;
-/**
- * --- 仅往 redis 写禁止相关 token 的数据，一般用于异步通知时在异处的服务器来调用的 ---
- */
-export declare function block(ctr: sCtr.Ctr, token: string, exp: number, link: lKv.Kv, name?: string): Promise<boolean>;
-/**
- * @param ctr 模型实例
- * @param opt name, ttl, ssl, secret, auth: false, true 则优先从头 Authorization 或 post _auth 值读取 token
- * @param link 实例
- */
-export declare function get(ctr: sCtr.Ctr, opt?: IOptions, link?: lKv.Kv): Promise<Jwt>;

package/lib/jwt.js

@@ -1,226 +0,0 @@
-/**
- * Project: Kebab, User: JianSuoQiYue
- * Date: 2023-1-31 20:34:47
- * Last: 2023-1-31 20:34:47, 2023-12-8 13:55:09, 2025-11-6 16:22:06
- */
-import * as lCore from '#kebab/lib/core.js';
-import * as lTime from '#kebab/lib/time.js';
-import * as lText from '#kebab/lib/text.js';
-import * as lCrypto from '#kebab/lib/crypto.js';
-export class Jwt {
-    /**
-     * --- 初始化函数，相当于 construct ---
-     * @param ctr 模型实例
-     * @param link Kv 或 Db 实例
-     * @param auth 设为 true 则优先从头 Authorization 或 post _auth 值读取 token
-     * @param opt 选项
-     */
-    async init(ctr, opt = {}, link) {
-        const config = ctr.getPrototype('_config');
-        this._ctr = ctr;
-        this._link = link;
-        this._name = opt.name ?? config.jwt.name;
-        this._ttl = opt.ttl ?? config.jwt.ttl;
-        this._ssl = opt.ssl ?? config.jwt.ssl;
-        this._secret = opt.secret ?? config.jwt.secret;
-        this._auth = opt.auth ?? config.jwt.auth;
-        let jwt = '';
-        if (this._auth) {
-            const a = this._ctr.getAuthorization();
-            if (typeof a !== 'string') {
-                return false;
-            }
-            jwt = a;
-        }
-        if (!jwt) {
-            const cookie = this._ctr.getPrototype('_cookie');
-            if (!cookie[this._name]) {
-                return false;
-            }
-            jwt = cookie[this._name];
-        }
-        const data = await decode(this._ctr, jwt, this._link, this._name, this._secret);
-        if (!data) {
-            // --- 清除 cookie ---
-            const cookie = this._ctr.getPrototype('_cookie');
-            if (cookie[this._name]) {
-                delete cookie[this._name];
-            }
-            return false;
-        }
-        this._ctr.setPrototype('_jwt', data);
-        return true;
-    }
-    /**
-     * --- 将 _jwt 数据封装并返回（创建新的或者续期老的 token），默认会同时设置一个 cookie（data 值会自动设置 token、exp） ---
-     */
-    renew() {
-        const time = lTime.stamp();
-        const data = this._ctr.getPrototype('_jwt');
-        const token = lText.isFalsy(data['token']) ? lCore.random(16, lCore.RANDOM_LUN) : data['token'];
-        data['exp'] = time + this._ttl;
-        data['token'] = token;
-        // --- 拼装 ---
-        const header = lCrypto.base64Encode(lText.stringifyJson({
-            'alg': 'HS256',
-            'typ': 'JWT'
-        }));
-        const payload = lCrypto.base64Encode(lText.stringifyJson(data));
-        const signature = lCrypto.hashHmac('sha256', header + '.' + payload, this._secret, 'base64');
-        const jwt = header + '.' + payload + '.' + signature;
-        if (!this._auth) {
-            lCore.setCookie(this._ctr, this._name, jwt, {
-                'ttl': this._ttl,
-                'ssl': this._ssl
-            });
-        }
-        return jwt;
-    }
-    /**
-     * --- 清除 cookie，仅仅清除 cookie，jwt 并不会失效 ---
-     */
-    clearCookie() {
-        if (this._auth) {
-            return;
-        }
-        lCore.setCookie(this._ctr, this._name, '', {
-            'ttl': 0,
-            'ssl': this._ssl
-        });
-    }
-    /**
-     * --- 销毁 jwt，其实就是将 token block 信息写入 redis，如果没有 redis 则不能销毁，返回数组代表销毁成功的 token 和原 exp，否则失败返回 false ---
-     */
-    async destory() {
-        if (!this._link) {
-            return false;
-        }
-        const jwt = this._ctr.getPrototype('_jwt');
-        if (!jwt.token) {
-            return false;
-        }
-        const time = lTime.stamp();
-        const token = jwt.token;
-        const exp = jwt.exp;
-        const ttl = exp - time;
-        if (ttl <= 0) {
-            lCore.emptyObject(jwt);
-            return {
-                token,
-                exp
-            };
-        }
-        lCore.emptyObject(jwt);
-        await this._link.set(`${this._name}_block_${token}`, '1', ttl + 1);
-        return {
-            token,
-            exp
-        };
-    }
-}
-/**
- * --- 获取 jwt 原始字符串，不保证有效 ---
- */
-export function getOrigin(ctr, name = '', auth = false) {
-    if (!name) {
-        name = ctr.getPrototype('_config').jwt.name;
-    }
-    let jwt = '';
-    if (auth) {
-        const a = ctr.getAuthorization();
-        if (typeof a !== 'string') {
-            return jwt;
-        }
-        jwt = a;
-    }
-    if (!jwt) {
-        const cookie = ctr.getPrototype('_cookie');
-        if (!cookie[name]) {
-            return jwt;
-        }
-        jwt = cookie[name];
-    }
-    return jwt;
-}
-/**
- * --- decode ---
- * 不传入 link 的话，将不做 block 有效校验，只做本身的 exp 有效校验
- */
-export async function decode(ctr, val, link, name = '', secret = '') {
-    if (!val) {
-        return false;
-    }
-    const config = ctr.getPrototype('_config');
-    if (!secret) {
-        secret = config.jwt.secret;
-    }
-    if (!name) {
-        name = config.jwt.name;
-    }
-    const jwtArray = val.split('.');
-    if (!jwtArray[2]) {
-        return false;
-    }
-    // jwtArray[1]: payload, jwtArray[2]: signature
-    // --- 判断是否合法 ---
-    const nsignature = lCrypto.hashHmac('sha256', jwtArray[0] + '.' + jwtArray[1], secret, 'base64');
-    if (nsignature !== jwtArray[2]) {
-        return false;
-    }
-    try {
-        const payload = lCrypto.base64Decode(jwtArray[1]);
-        if (!payload) {
-            return false;
-        }
-        const data = lText.parseJson(payload);
-        if (!data) {
-            return false;
-        }
-        // --- 检测 token ---
-        if (!data['token']) {
-            return false;
-        }
-        // --- 检测 exp ---
-        if (!data['exp']) {
-            return false;
-        }
-        const time = lTime.stamp();
-        if (data['exp'] < time) {
-            // --- 过期 ---
-            return false;
-        }
-        // --- 检测 token 是否有效 ---
-        if (!link || !await link.get(name + '_block_' + data['token'])) {
-            return data;
-        }
-        return false;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * --- 仅往 redis 写禁止相关 token 的数据，一般用于异步通知时在异处的服务器来调用的 ---
- */
-export async function block(ctr, token, exp, link, name = '') {
-    const time = lTime.stamp();
-    if (!name) {
-        name = ctr.getPrototype('_config').jwt.name;
-    }
-    const ttl = exp - time;
-    if (ttl <= 0) {
-        return true;
-    }
-    await link.set(name + '_block_' + token, '1', ttl + 1);
-    return true;
-}
-/**
- * @param ctr 模型实例
- * @param opt name, ttl, ssl, secret, auth: false, true 则优先从头 Authorization 或 post _auth 值读取 token
- * @param link 实例
- */
-export async function get(ctr, opt = {}, link) {
-    const jwt = new Jwt();
-    await jwt.init(ctr, opt, link);
-    return jwt;
-}