@pangza/express 0.0.0-stage → 1.0.0

package/Auth/AuthUtil.js

@@ -0,0 +1,305 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthUtil = void 0;
+exports.configureAuth = configureAuth;
+exports.getAuthOptions = getAuthOptions;
+exports.isSessionExpired = isSessionExpired;
+const context_1 = require("./context");
+const errors_1 = require("./errors");
+const store_1 = require("./store");
+const token_1 = require("./token");
+const DEFAULT_TIMEOUT = 2 * 60 * 60 * 1000;
+const DEFAULT_JWT_SECRET = "pangza-admin-express-jwt-secret";
+let authOptions = {
+    tokenName: "satoken",
+    header: "Authorization",
+    tokenPrefix: "Bearer",
+    timeout: DEFAULT_TIMEOUT,
+    activityTimeout: -1,
+    allowConcurrentLogin: true,
+    isShare: false,
+    tokenStyle: "uuid",
+    jwtSecret: DEFAULT_JWT_SECRET,
+    jwtAlgorithm: "HS256",
+    ignore: [],
+    readCookie: true,
+    checkMode: "OR",
+};
+function resolveExpireTime(timeoutMs, now = Date.now()) {
+    if (timeoutMs < 0)
+        return Number.MAX_SAFE_INTEGER;
+    return now + timeoutMs;
+}
+function configureAuth(options = {}) {
+    authOptions = {
+        ...authOptions,
+        ...options,
+        tokenName: options.tokenName ?? authOptions.tokenName,
+        header: options.header ?? authOptions.header,
+        tokenPrefix: options.tokenPrefix !== undefined
+            ? options.tokenPrefix
+            : authOptions.tokenPrefix,
+        timeout: options.timeout ?? authOptions.timeout,
+        activityTimeout: options.activityTimeout ?? authOptions.activityTimeout,
+        allowConcurrentLogin: options.allowConcurrentLogin ?? authOptions.allowConcurrentLogin,
+        isShare: options.isShare ?? authOptions.isShare,
+        tokenStyle: options.tokenStyle ?? authOptions.tokenStyle,
+        createToken: options.createToken ?? authOptions.createToken,
+        jwtSecret: options.jwtSecret ?? authOptions.jwtSecret,
+        jwtAlgorithm: options.jwtAlgorithm ?? authOptions.jwtAlgorithm,
+        ignore: options.ignore ?? authOptions.ignore,
+        readCookie: options.readCookie ?? authOptions.readCookie,
+        redis: options.redis ?? authOptions.redis,
+        checkMode: options.checkMode ?? authOptions.checkMode,
+    };
+    if (options.redis) {
+        (0, store_1.setSessionStore)(new store_1.RedisStore(options.redis));
+    }
+    else if (options.redis === undefined && !authOptions.redis) {
+        (0, store_1.setSessionStore)(new store_1.MemoryStore());
+    }
+}
+function getAuthOptions() {
+    return authOptions;
+}
+function normalizeLoginArgs(rolesOrOptions, permissions, profile) {
+    if (rolesOrOptions &&
+        !Array.isArray(rolesOrOptions) &&
+        typeof rolesOrOptions === "object") {
+        return rolesOrOptions;
+    }
+    return {
+        roles: rolesOrOptions ?? [],
+        permissions: permissions ?? [],
+        username: profile?.username,
+        avatar: profile?.avatar,
+        device: profile?.device,
+    };
+}
+function isSessionExpired(session, options = authOptions) {
+    const now = Date.now();
+    if (now > session.expireTime)
+        return true;
+    if (options.activityTimeout >= 0 &&
+        now - (session.lastActiveTime || session.createTime) >
+            options.activityTimeout) {
+        return true;
+    }
+    return false;
+}
+class AuthUtil {
+    static async login(loginId, rolesOrOptions = [], permissions = [], profile) {
+        const opt = normalizeLoginArgs(rolesOrOptions, permissions, profile);
+        const store = (0, store_1.getSessionStore)();
+        const timeout = opt.timeout ?? authOptions.timeout;
+        const device = opt.device;
+        const now = Date.now();
+        if (authOptions.isShare) {
+            const tokens = await store.listTokensByLoginId(loginId);
+            for (const t of tokens) {
+                const old = await store.getByToken(t);
+                if (!old || isSessionExpired(old)) {
+                    if (old)
+                        await store.removeByToken(t);
+                    continue;
+                }
+                if (device && old.device && old.device !== device)
+                    continue;
+                if (!device && old.device)
+                    continue;
+                old.roles = opt.roles ?? old.roles;
+                old.permissions = opt.permissions ?? old.permissions;
+                old.username = opt.username ?? old.username;
+                old.avatar = opt.avatar ?? old.avatar;
+                old.expireTime = resolveExpireTime(timeout, now);
+                old.lastActiveTime = now;
+                await store.set(old);
+                this.syncContext(old.token, old);
+                return old.token;
+            }
+        }
+        if (!authOptions.allowConcurrentLogin) {
+            if (device) {
+                const tokens = await store.listTokensByLoginId(loginId);
+                for (const t of tokens) {
+                    const old = await store.getByToken(t);
+                    if (old && (!old.device || old.device === device)) {
+                        await store.removeByToken(t);
+                    }
+                }
+            }
+            else {
+                await store.removeByLoginId(loginId);
+            }
+        }
+        const token = await (0, token_1.createAuthToken)(authOptions, {
+            loginId,
+            device,
+            timeout,
+        });
+        const session = {
+            token,
+            loginId,
+            device,
+            roles: opt.roles ?? [],
+            permissions: opt.permissions ?? [],
+            username: opt.username,
+            avatar: opt.avatar,
+            createTime: now,
+            expireTime: resolveExpireTime(timeout, now),
+            lastActiveTime: now,
+        };
+        await store.set(session);
+        this.syncContext(token, session);
+        return token;
+    }
+    static syncContext(token, session) {
+        const ctx = (0, context_1.getAuthStore)();
+        if (ctx) {
+            ctx.token = token;
+            ctx.session = session;
+        }
+    }
+    static async logout(token) {
+        const value = token ?? this.getTokenValue();
+        if (value)
+            await (0, store_1.getSessionStore)().removeByToken(value);
+        const ctx = (0, context_1.getAuthStore)();
+        if (ctx && (!token || ctx.token === token)) {
+            ctx.token = null;
+            ctx.session = null;
+        }
+    }
+    static async logoutByLoginId(loginId) {
+        await (0, store_1.getSessionStore)().removeByLoginId(loginId);
+    }
+    static async logoutByDevice(loginId, device) {
+        const store = (0, store_1.getSessionStore)();
+        const tokens = await store.listTokensByLoginId(loginId);
+        for (const t of tokens) {
+            const session = await store.getByToken(t);
+            if (session?.device === device) {
+                await store.removeByToken(t);
+            }
+        }
+    }
+    static getTokenValue() {
+        const store = (0, context_1.getAuthStore)();
+        if (store?.token)
+            return store.token;
+        if (store?.req)
+            return this.readTokenFromRequest(store.req);
+        return null;
+    }
+    static readTokenFromRequest(req) {
+        const tryRaw = (raw) => {
+            if (typeof raw !== "string" || !raw.trim())
+                return null;
+            const value = raw.trim();
+            const prefix = authOptions.tokenPrefix;
+            if (prefix && value.startsWith(`${prefix} `)) {
+                return value.slice(prefix.length + 1).trim() || null;
+            }
+            return value || null;
+        };
+        const byName = tryRaw(req.headers[authOptions.tokenName.toLowerCase()]);
+        if (byName)
+            return byName;
+        const headerName = authOptions.header.toLowerCase();
+        if (headerName !== authOptions.tokenName.toLowerCase()) {
+            const byHeader = tryRaw(req.headers[headerName]);
+            if (byHeader)
+                return byHeader;
+        }
+        if (authOptions.readCookie) {
+            const cookies = req.cookies;
+            if (cookies) {
+                const byCookie = tryRaw(cookies[authOptions.tokenName]);
+                if (byCookie)
+                    return byCookie;
+            }
+        }
+        return null;
+    }
+    static async loadSession(token, options = { touch: true }) {
+        if (!token)
+            return null;
+        if (!(0, token_1.verifyAuthToken)(authOptions, token)) {
+            await (0, store_1.getSessionStore)().removeByToken(token);
+            return null;
+        }
+        const session = await (0, store_1.getSessionStore)().getByToken(token);
+        if (!session)
+            return null;
+        if (!session.lastActiveTime) {
+            session.lastActiveTime = session.createTime;
+        }
+        if (isSessionExpired(session)) {
+            await (0, store_1.getSessionStore)().removeByToken(token);
+            return null;
+        }
+        if (options.touch !== false) {
+            session.lastActiveTime = Date.now();
+            await (0, store_1.getSessionStore)().touch(session);
+        }
+        return session;
+    }
+    static async getSession() {
+        const ctx = (0, context_1.getAuthStore)();
+        if (ctx?.session) {
+            if (isSessionExpired(ctx.session)) {
+                await this.logout(ctx.session.token);
+                return null;
+            }
+            return ctx.session;
+        }
+        const token = this.getTokenValue();
+        const session = await this.loadSession(token);
+        if (ctx)
+            ctx.session = session;
+        return session;
+    }
+    static async isLogin() {
+        return (await this.getSession()) !== null;
+    }
+    static async checkLogin() {
+        const session = await this.getSession();
+        if (!session)
+            throw new errors_1.NotLoginError();
+        return session.loginId;
+    }
+    static async getLoginId() {
+        return this.checkLogin();
+    }
+    static async getLoginIdDefaultNull() {
+        return (await this.getSession())?.loginId ?? null;
+    }
+    static async getLoginDevice() {
+        return (await this.getSession())?.device;
+    }
+    static async getRoleList() {
+        return (await this.getSession())?.roles ?? [];
+    }
+    static async getPermissionList() {
+        return (await this.getSession())?.permissions ?? [];
+    }
+    static async hasRole(role) {
+        return (await this.getRoleList()).includes(role);
+    }
+    static async hasPermission(permission) {
+        return (await this.getPermissionList()).includes(permission);
+    }
+    static async checkRole(role) {
+        await this.checkLogin();
+        if (!(await this.hasRole(role)))
+            throw new errors_1.NotRoleError(`无角色: ${role}`);
+    }
+    static async checkPermission(permission) {
+        await this.checkLogin();
+        if (!(await this.hasPermission(permission))) {
+            throw new errors_1.NotPermissionError(`无权限: ${permission}`);
+        }
+    }
+}
+exports.AuthUtil = AuthUtil;
+//# sourceMappingURL=AuthUtil.js.map

package/Auth/AuthUtil.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthUtil.js","sourceRoot":"","sources":["../../../../src/framework/Auth/AuthUtil.ts"],"names":[],"mappings":";;;AA6CA,sCA8BC;AAGD,wCAEC;AAwBD,4CAcC;AAtHD,uCAAyC;AACzC,qCAA2E;AAC3E,mCAKiB;AACjB,mCAA2D;AAU3D,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3C,MAAM,kBAAkB,GAAG,iCAAiC,CAAC;AAG7D,IAAI,WAAW,GAAwB;IACrC,SAAS,EAAE,SAAS;IACpB,MAAM,EAAE,eAAe;IACvB,WAAW,EAAE,QAAQ;IACrB,OAAO,EAAE,eAAe;IACxB,eAAe,EAAE,CAAC,CAAC;IACnB,oBAAoB,EAAE,IAAI;IAC1B,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,kBAAkB;IAC7B,YAAY,EAAE,OAAO;IACrB,MAAM,EAAE,EAAE;IACV,UAAU,EAAE,IAAI;IAChB,SAAS,EAAE,IAAI;CAChB,CAAC;AAEF,SAAS,iBAAiB,CAAC,SAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC5D,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC;IAClD,OAAO,GAAG,GAAG,SAAS,CAAC;AACzB,CAAC;AAGD,SAAgB,aAAa,CAAC,UAAuB,EAAE;IACrD,WAAW,GAAG;QACZ,GAAG,WAAW;QACd,GAAG,OAAO;QACV,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,WAAW,CAAC,SAAS;QACrD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM;QAC5C,WAAW,EACT,OAAO,CAAC,WAAW,KAAK,SAAS;YAC/B,CAAC,CAAC,OAAO,CAAC,WAAW;YACrB,CAAC,CAAC,WAAW,CAAC,WAAW;QAC7B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO;QAC/C,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,WAAW,CAAC,eAAe;QACvE,oBAAoB,EAClB,OAAO,CAAC,oBAAoB,IAAI,WAAW,CAAC,oBAAoB;QAClE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO;QAC/C,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC,UAAU;QACxD,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC,WAAW;QAC3D,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,WAAW,CAAC,SAAS;QACrD,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,WAAW,CAAC,YAAY;QAC9D,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM;QAC5C,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC,UAAU;QACxD,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC,KAAK;QACzC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,WAAW,CAAC,SAAS;KACtD,CAAC;IAEF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,IAAA,uBAAe,EAAC,IAAI,kBAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,CAAC;SAAM,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAC7D,IAAA,uBAAe,EAAC,IAAI,mBAAW,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAGD,SAAgB,cAAc;IAC5B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CACzB,cAAwC,EACxC,WAAsB,EACtB,OAAiE;IAEjE,IACE,cAAc;QACd,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QAC9B,OAAO,cAAc,KAAK,QAAQ,EAClC,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,OAAO;QACL,KAAK,EAAG,cAAuC,IAAI,EAAE;QACrD,WAAW,EAAE,WAAW,IAAI,EAAE;QAC9B,QAAQ,EAAE,OAAO,EAAE,QAAQ;QAC3B,MAAM,EAAE,OAAO,EAAE,MAAM;QACvB,MAAM,EAAE,OAAO,EAAE,MAAM;KACxB,CAAC;AACJ,CAAC;AAGD,SAAgB,gBAAgB,CAC9B,OAAoB,EACpB,UAA+B,WAAW;IAE1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,GAAG,OAAO,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC1C,IACE,OAAO,CAAC,eAAe,IAAI,CAAC;QAC5B,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,UAAU,CAAC;YAClD,OAAO,CAAC,eAAe,EACzB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAMD,MAAa,QAAQ;IAQnB,MAAM,CAAC,KAAK,CAAC,KAAK,CAChB,OAAgB,EAChB,iBAA0C,EAAE,EAC5C,cAAwB,EAAE,EAC1B,OAAiE;QAEjE,MAAM,GAAG,GAAG,kBAAkB,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAA,uBAAe,GAAE,CAAC;QAChC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC;QACnD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAGvB,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACxD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACtC,IAAI,CAAC,GAAG,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClC,IAAI,GAAG;wBAAE,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;oBACtC,SAAS;gBACX,CAAC;gBACD,IAAI,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;oBAAE,SAAS;gBAC5D,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM;oBAAE,SAAS;gBAEpC,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC;gBACnC,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC;gBACrD,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC;gBAC5C,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;gBACtC,GAAG,CAAC,UAAU,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACjD,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACrB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACjC,OAAO,GAAG,CAAC,KAAK,CAAC;YACnB,CAAC;QACH,CAAC;QAGD,IAAI,CAAC,WAAW,CAAC,oBAAoB,EAAE,CAAC;YACtC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;gBACxD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;oBACvB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBACtC,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;wBAClD,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;oBAC/B,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAA,uBAAe,EAAC,WAAW,EAAE;YAC/C,OAAO;YACP,MAAM;YACN,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,OAAO,GAAgB;YAC3B,KAAK;YACL,OAAO;YACP,MAAM;YACN,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE;YACtB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;YAClC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC;YAC3C,cAAc,EAAE,GAAG;SACpB,CAAC;QACF,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,KAAa,EAAE,OAA2B;QACnE,MAAM,GAAG,GAAG,IAAA,sBAAY,GAAE,CAAC;QAC3B,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;YAClB,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACxB,CAAC;IACH,CAAC;IAMD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAc;QAChC,MAAM,KAAK,GAAG,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,KAAK;YAAE,MAAM,IAAA,uBAAe,GAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,IAAA,sBAAY,GAAE,CAAC;QAC3B,IAAI,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC;YACjB,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IAGD,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,OAAgB;QAC3C,MAAM,IAAA,uBAAe,GAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IAGD,MAAM,CAAC,KAAK,CAAC,cAAc,CACzB,OAAgB,EAChB,MAAc;QAEd,MAAM,KAAK,GAAG,IAAA,uBAAe,GAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,OAAO,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC/B,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAGD,MAAM,CAAC,aAAa;QAClB,MAAM,KAAK,GAAG,IAAA,sBAAY,GAAE,CAAC;QAC7B,IAAI,KAAK,EAAE,KAAK;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC;QACrC,IAAI,KAAK,EAAE,GAAG;YAAE,OAAO,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAQD,MAAM,CAAC,oBAAoB,CAAC,GAG3B;QACC,MAAM,MAAM,GAAG,CAAC,GAAY,EAAiB,EAAE;YAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;gBAAE,OAAO,IAAI,CAAC;YACxD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC;YACvC,IAAI,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7C,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;YACvD,CAAC;YACD,OAAO,KAAK,IAAI,IAAI,CAAC;QACvB,CAAC,CAAC;QAGF,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACxE,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAG1B,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACpD,IAAI,UAAU,KAAK,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;YACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;YACjD,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;QAChC,CAAC;QAGD,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YAC5B,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;gBACxD,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAC;YAChC,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAKD,MAAM,CAAC,KAAK,CAAC,WAAW,CACtB,KAAoB,EACpB,UAA+B,EAAE,KAAK,EAAE,IAAI,EAAE;QAE9C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,CAAC,IAAA,uBAAe,EAAC,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC;YACzC,MAAM,IAAA,uBAAe,GAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,uBAAe,GAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAG1B,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YAC5B,OAAO,CAAC,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC;QAC9C,CAAC;QAED,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAA,uBAAe,GAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YAC5B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACpC,MAAM,IAAA,uBAAe,GAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAGD,MAAM,CAAC,KAAK,CAAC,UAAU;QACrB,MAAM,GAAG,GAAG,IAAA,sBAAY,GAAE,CAAC;QAC3B,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;YACjB,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACrC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,GAAG,CAAC,OAAO,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,GAAG;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QAC/B,OAAO,OAAO,CAAC;IACjB,CAAC;IAGD,MAAM,CAAC,KAAK,CAAC,OAAO;QAClB,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,KAAK,IAAI,CAAC;IAC5C,CAAC;IAGD,MAAM,CAAC,KAAK,CAAC,UAAU;QACrB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,sBAAa,EAAE,CAAC;QACxC,OAAO,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC;IAGD,MAAM,CAAC,KAAK,CAAC,UAAU;QACrB,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;IAC3B,CAAC;IAGD,MAAM,CAAC,KAAK,CAAC,qBAAqB;QAChC,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC;IACpD,CAAC;IAGD,MAAM,CAAC,KAAK,CAAC,cAAc;QACzB,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,CAAC;IAC3C,CAAC;IAGD,MAAM,CAAC,KAAK,CAAC,WAAW;QACtB,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;IAChD,CAAC;IAGD,MAAM,CAAC,KAAK,CAAC,iBAAiB;QAC5B,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC;IACtD,CAAC;IAGD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAY;QAC/B,OAAO,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAGD,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,UAAkB;QAC3C,OAAO,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC/D,CAAC;IAGD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAY;QACjC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,qBAAY,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IAGD,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,UAAkB;QAC7C,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,2BAAkB,CAAC,QAAQ,UAAU,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;CACF;AA7RD,4BA6RC"}

package/Auth/context.d.ts

@@ -0,0 +1,5 @@
+import { AsyncLocalStorage } from "async_hooks";
+import type { AuthContextStore } from "./types";
+export declare const authContext: AsyncLocalStorage<AuthContextStore>;
+export declare function getAuthStore(): AuthContextStore | undefined;
+//# sourceMappingURL=context.d.ts.map

package/Auth/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../../src/framework/Auth/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAMhD,eAAO,MAAM,WAAW,qCAA4C,CAAC;AAGrE,wBAAgB,YAAY,IAAI,gBAAgB,GAAG,SAAS,CAE3D"}

package/Auth/context.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authContext = void 0;
+exports.getAuthStore = getAuthStore;
+const async_hooks_1 = require("async_hooks");
+exports.authContext = new async_hooks_1.AsyncLocalStorage();
+function getAuthStore() {
+    return exports.authContext.getStore();
+}
+//# sourceMappingURL=context.js.map

package/Auth/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../../src/framework/Auth/context.ts"],"names":[],"mappings":";;;AAUA,oCAEC;AAZD,6CAAgD;AAOnC,QAAA,WAAW,GAAG,IAAI,+BAAiB,EAAoB,CAAC;AAGrE,SAAgB,YAAY;IAC1B,OAAO,mBAAW,CAAC,QAAQ,EAAE,CAAC;AAChC,CAAC"}

package/Auth/errors.d.ts

@@ -0,0 +1,15 @@
+import { ResponseCode } from "../types/enums";
+export declare class AuthError extends Error {
+    readonly code: ResponseCode;
+    constructor(message: string, code: ResponseCode);
+}
+export declare class NotLoginError extends AuthError {
+    constructor(message?: string);
+}
+export declare class NotPermissionError extends AuthError {
+    constructor(message?: string);
+}
+export declare class NotRoleError extends AuthError {
+    constructor(message?: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/Auth/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../src/framework/Auth/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAGvD,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;gBAEhB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY;CAKhD;AAGD,qBAAa,aAAc,SAAQ,SAAS;gBAC9B,OAAO,SAAQ;CAI5B;AAGD,qBAAa,kBAAmB,SAAQ,SAAS;gBACnC,OAAO,SAAS;CAI7B;AAGD,qBAAa,YAAa,SAAQ,SAAS;gBAC7B,OAAO,SAAS;CAI7B"}

package/Auth/errors.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotRoleError = exports.NotPermissionError = exports.NotLoginError = exports.AuthError = void 0;
+const enums_1 = require("../types/enums");
+class AuthError extends Error {
+    constructor(message, code) {
+        super(message);
+        this.name = "AuthError";
+        this.code = code;
+    }
+}
+exports.AuthError = AuthError;
+class NotLoginError extends AuthError {
+    constructor(message = "未登录") {
+        super(message, enums_1.ResponseCode.UNAUTHORIZED);
+        this.name = "NotLoginError";
+    }
+}
+exports.NotLoginError = NotLoginError;
+class NotPermissionError extends AuthError {
+    constructor(message = "无此权限") {
+        super(message, enums_1.ResponseCode.FORBIDDEN);
+        this.name = "NotPermissionError";
+    }
+}
+exports.NotPermissionError = NotPermissionError;
+class NotRoleError extends AuthError {
+    constructor(message = "无此角色") {
+        super(message, enums_1.ResponseCode.FORBIDDEN);
+        this.name = "NotRoleError";
+    }
+}
+exports.NotRoleError = NotRoleError;
+//# sourceMappingURL=errors.js.map

package/Auth/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../../src/framework/Auth/errors.ts"],"names":[],"mappings":";;;AAAA,mDAAuD;AAGvD,MAAa,SAAU,SAAQ,KAAK;IAGlC,YAAY,OAAe,EAAE,IAAkB;QAC7C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AARD,8BAQC;AAGD,MAAa,aAAc,SAAQ,SAAS;IAC1C,YAAY,OAAO,GAAG,KAAK;QACzB,KAAK,CAAC,OAAO,EAAE,oBAAY,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AALD,sCAKC;AAGD,MAAa,kBAAmB,SAAQ,SAAS;IAC/C,YAAY,OAAO,GAAG,MAAM;QAC1B,KAAK,CAAC,OAAO,EAAE,oBAAY,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AALD,gDAKC;AAGD,MAAa,YAAa,SAAQ,SAAS;IACzC,YAAY,OAAO,GAAG,MAAM;QAC1B,KAAK,CAAC,OAAO,EAAE,oBAAY,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AALD,oCAKC"}

package/Auth/flag.d.ts

@@ -0,0 +1,2 @@
+export declare const AUTH_MIDDLEWARE_FLAG: unique symbol;
+//# sourceMappingURL=flag.d.ts.map

package/Auth/flag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flag.d.ts","sourceRoot":"","sources":["../../../../src/framework/Auth/flag.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,oBAAoB,eAAuC,CAAC"}

package/Auth/flag.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUTH_MIDDLEWARE_FLAG = void 0;
+exports.AUTH_MIDDLEWARE_FLAG = Symbol.for("pangza.auth.middleware");
+//# sourceMappingURL=flag.js.map

package/Auth/flag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flag.js","sourceRoot":"","sources":["../../../../src/framework/Auth/flag.ts"],"names":[],"mappings":";;;AACa,QAAA,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC"}

package/Auth/index.d.ts

@@ -0,0 +1,11 @@
+import { NextFunction, Request, Response } from "express";
+import type { AuthOptions } from "./types";
+export declare function matchesIgnore(path: string, ignore?: string[]): boolean;
+export declare function isGloballyIgnored(path: string): boolean;
+export default function Auth(options?: AuthOptions): (req: Request, _res: Response, next: NextFunction) => void;
+export { AuthUtil, getAuthOptions, isSessionExpired } from "./AuthUtil";
+export { AUTH_MIDDLEWARE_FLAG } from "./flag";
+export { AuthError, NotLoginError, NotPermissionError, NotRoleError, } from "./errors";
+export { createAuthToken, generateStyleToken, verifyAuthToken } from "./token";
+export type { AuthOptions, AuthSession, LoginId, LoginOptions, TokenStyle, AuthCheckMode, ResolvedAuthOptions, } from "./types";
+//# sourceMappingURL=index.d.ts.map

package/Auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/framework/Auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAI1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AA4B3C,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,EAAO,GAAG,OAAO,CAK1E;AAgED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAkBD,MAAM,CAAC,OAAO,UAAU,IAAI,CAAC,OAAO,GAAE,WAAgB,SAG3B,OAAO,QAAQ,QAAQ,QAAQ,YAAY,UAgCrE;AAED,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,SAAS,EACT,aAAa,EACb,kBAAkB,EAClB,YAAY,GACb,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/E,YAAY,EACV,WAAW,EACX,WAAW,EACX,OAAO,EACP,YAAY,EACZ,UAAU,EACV,aAAa,EACb,mBAAmB,GACpB,MAAM,SAAS,CAAC"}

package/Auth/index.js

@@ -0,0 +1,128 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyAuthToken = exports.generateStyleToken = exports.createAuthToken = exports.NotRoleError = exports.NotPermissionError = exports.NotLoginError = exports.AuthError = exports.AUTH_MIDDLEWARE_FLAG = exports.isSessionExpired = exports.getAuthOptions = exports.AuthUtil = void 0;
+exports.matchesIgnore = matchesIgnore;
+exports.isGloballyIgnored = isGloballyIgnored;
+exports.default = Auth;
+const context_1 = require("./context");
+const AuthUtil_1 = require("./AuthUtil");
+const flag_1 = require("./flag");
+const DEFAULT_IGNORE_PATHS = [
+    "/.well-known",
+    "/favicon.ico",
+    "/robots.txt",
+    "/sitemap.xml",
+];
+function normalizeIgnorePath(p) {
+    if (!p)
+        return "/";
+    let s = p.trim();
+    if (!s.startsWith("/"))
+        s = `/${s}`;
+    if (s.length > 1 && s.endsWith("/") && !s.endsWith("*/") && !s.endsWith("**/")) {
+        s = s.slice(0, -1);
+    }
+    return s;
+}
+function matchesIgnore(path, ignore = []) {
+    const requestPath = normalizeIgnorePath(path);
+    const list = [...DEFAULT_IGNORE_PATHS, ...ignore].map(normalizeIgnorePath);
+    return list.some((pattern) => matchIgnorePattern(requestPath, pattern));
+}
+function matchIgnorePattern(requestPath, pattern) {
+    if (pattern.endsWith("/**")) {
+        const base = pattern.slice(0, -3);
+        if (!base || base === "/") {
+            return true;
+        }
+        return requestPath === base || requestPath.startsWith(`${base}/`);
+    }
+    if (pattern.endsWith("/*")) {
+        const base = pattern.slice(0, -2);
+        if (!requestPath.startsWith(`${base}/`))
+            return false;
+        const rest = requestPath.slice(base.length + 1);
+        return rest.length > 0 && !rest.includes("/");
+    }
+    if (pattern.endsWith("*") && !pattern.slice(0, -1).includes("*")) {
+        return requestPath.startsWith(pattern.slice(0, -1));
+    }
+    if (pattern.includes("*")) {
+        return globToRegExp(pattern).test(requestPath);
+    }
+    return requestPath === pattern || requestPath.startsWith(`${pattern}/`);
+}
+function globToRegExp(pattern) {
+    let i = 0;
+    let out = "^";
+    while (i < pattern.length) {
+        const ch = pattern[i];
+        if (ch === "*" && pattern[i + 1] === "*") {
+            out += ".*";
+            i += 2;
+            if (pattern[i] === "/")
+                i += 1;
+            continue;
+        }
+        if (ch === "*") {
+            out += "[^/]*";
+            i += 1;
+            continue;
+        }
+        if (".+^${}()|[]\\".includes(ch)) {
+            out += `\\${ch}`;
+        }
+        else {
+            out += ch;
+        }
+        i += 1;
+    }
+    out += "/?$";
+    return new RegExp(out);
+}
+function isGloballyIgnored(path) {
+    return matchesIgnore(path, (0, AuthUtil_1.getAuthOptions)().ignore ?? []);
+}
+function Auth(options = {}) {
+    (0, AuthUtil_1.configureAuth)(options);
+    const middleware = (req, _res, next) => {
+        if (req.method === "OPTIONS" || matchesIgnore(req.path, options.ignore)) {
+            return next();
+        }
+        const token = AuthUtil_1.AuthUtil.readTokenFromRequest(req);
+        void (async () => {
+            try {
+                const session = await AuthUtil_1.AuthUtil.loadSession(token, { touch: true });
+                context_1.authContext.run({
+                    req,
+                    token,
+                    session,
+                }, () => next());
+            }
+            catch (err) {
+                next(err);
+            }
+        })();
+    };
+    Object.defineProperty(middleware, flag_1.AUTH_MIDDLEWARE_FLAG, {
+        value: true,
+        enumerable: false,
+    });
+    return middleware;
+}
+var AuthUtil_2 = require("./AuthUtil");
+Object.defineProperty(exports, "AuthUtil", { enumerable: true, get: function () { return AuthUtil_2.AuthUtil; } });
+Object.defineProperty(exports, "getAuthOptions", { enumerable: true, get: function () { return AuthUtil_2.getAuthOptions; } });
+Object.defineProperty(exports, "isSessionExpired", { enumerable: true, get: function () { return AuthUtil_2.isSessionExpired; } });
+var flag_2 = require("./flag");
+Object.defineProperty(exports, "AUTH_MIDDLEWARE_FLAG", { enumerable: true, get: function () { return flag_2.AUTH_MIDDLEWARE_FLAG; } });
+var errors_1 = require("./errors");
+Object.defineProperty(exports, "AuthError", { enumerable: true, get: function () { return errors_1.AuthError; } });
+Object.defineProperty(exports, "NotLoginError", { enumerable: true, get: function () { return errors_1.NotLoginError; } });
+Object.defineProperty(exports, "NotPermissionError", { enumerable: true, get: function () { return errors_1.NotPermissionError; } });
+Object.defineProperty(exports, "NotRoleError", { enumerable: true, get: function () { return errors_1.NotRoleError; } });
+var token_1 = require("./token");
+Object.defineProperty(exports, "createAuthToken", { enumerable: true, get: function () { return token_1.createAuthToken; } });
+Object.defineProperty(exports, "generateStyleToken", { enumerable: true, get: function () { return token_1.generateStyleToken; } });
+Object.defineProperty(exports, "verifyAuthToken", { enumerable: true, get: function () { return token_1.verifyAuthToken; } });
+//# sourceMappingURL=index.js.map

package/Auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/framework/Auth/index.ts"],"names":[],"mappings":";;;AAgCA,sCAKC;AAgED,8CAEC;AAkBD,uBAmCC;AA3JD,uCAAwC;AACxC,yCAAqE;AACrE,iCAA8C;AAI9C,MAAM,oBAAoB,GAAG;IAC3B,cAAc;IACd,cAAc;IACd,aAAa;IACb,cAAc;CACf,CAAC;AAEF,SAAS,mBAAmB,CAAC,CAAS;IACpC,IAAI,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IACnB,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IAEpC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/E,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AASD,SAAgB,aAAa,CAAC,IAAY,EAAE,SAAmB,EAAE;IAC/D,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,CAAC,GAAG,oBAAoB,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAE3E,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB,EAAE,OAAe;IAE9D,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;IACpE,CAAC;IAGD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;IAGD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjE,OAAO,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAGD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC;IAGD,OAAO,WAAW,KAAK,OAAO,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;AAC1E,CAAC;AAGD,SAAS,YAAY,CAAC,OAAe;IACnC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACzC,GAAG,IAAI,IAAI,CAAC;YACZ,CAAC,IAAI,CAAC,CAAC;YAEP,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,IAAI,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,GAAG,IAAI,OAAO,CAAC;YACf,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACjC,GAAG,IAAI,KAAK,EAAE,EAAE,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,EAAE,CAAC;QACZ,CAAC;QACD,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,GAAG,IAAI,KAAK,CAAC;IACb,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAGD,SAAgB,iBAAiB,CAAC,IAAY;IAC5C,OAAO,aAAa,CAAC,IAAI,EAAE,IAAA,yBAAc,GAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC;AAkBD,SAAwB,IAAI,CAAC,UAAuB,EAAE;IACpD,IAAA,wBAAa,EAAC,OAAO,CAAC,CAAC;IAEvB,MAAM,UAAU,GAAG,CAAC,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE;QAEtE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACxE,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,KAAK,GAAG,mBAAQ,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAEjD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,mBAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAEnE,qBAAW,CAAC,GAAG,CACb;oBACE,GAAG;oBACH,KAAK;oBACL,OAAO;iBACR,EACD,GAAG,EAAE,CAAC,IAAI,EAAE,CACb,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;IAEF,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,2BAAoB,EAAE;QACtD,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,KAAK;KAClB,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,uCAAwE;AAA/D,oGAAA,QAAQ,OAAA;AAAE,0GAAA,cAAc,OAAA;AAAE,4GAAA,gBAAgB,OAAA;AACnD,+BAA8C;AAArC,4GAAA,oBAAoB,OAAA;AAC7B,mCAKkB;AAJhB,mGAAA,SAAS,OAAA;AACT,uGAAA,aAAa,OAAA;AACb,4GAAA,kBAAkB,OAAA;AAClB,sGAAA,YAAY,OAAA;AAEd,iCAA+E;AAAtE,wGAAA,eAAe,OAAA;AAAE,2GAAA,kBAAkB,OAAA;AAAE,wGAAA,eAAe,OAAA"}

package/Auth/store.d.ts

@@ -0,0 +1,47 @@
+import type { AuthSession, LoginId } from "./types";
+export interface SessionStore {
+    set(session: AuthSession): Promise<void>;
+    getByToken(token: string): Promise<AuthSession | null>;
+    removeByToken(token: string): Promise<void>;
+    removeByLoginId(loginId: LoginId): Promise<void>;
+    listTokensByLoginId(loginId: LoginId): Promise<string[]>;
+    touch(session: AuthSession): Promise<void>;
+}
+export declare class MemoryStore implements SessionStore {
+    private tokenMap;
+    private loginIdMap;
+    set(session: AuthSession): Promise<void>;
+    getByToken(token: string): Promise<AuthSession | null>;
+    removeByToken(token: string): Promise<void>;
+    removeByLoginId(loginId: LoginId): Promise<void>;
+    listTokensByLoginId(loginId: LoginId): Promise<string[]>;
+    touch(session: AuthSession): Promise<void>;
+}
+export type RedisLike = {
+    setJSON(key: string, value: unknown, ttlSeconds?: number): Promise<void>;
+    getJSON<T = unknown>(key: string): Promise<T | null>;
+    del(...keys: string[]): Promise<number>;
+    sAdd(key: string, ...members: string[]): Promise<number>;
+    sMembers(key: string): Promise<string[]>;
+    sRem(key: string, ...members: string[]): Promise<number>;
+    expire?(key: string, ttlSeconds: number): Promise<boolean>;
+    ttl?(key: string): Promise<number>;
+};
+export declare class RedisStore implements SessionStore {
+    private readonly redis;
+    constructor(redis: RedisLike);
+    private tokenKey;
+    private uidKey;
+    private ttlSeconds;
+    private refreshUidExpire;
+    set(session: AuthSession): Promise<void>;
+    getByToken(token: string): Promise<AuthSession | null>;
+    removeByToken(token: string): Promise<void>;
+    private pruneUidTokens;
+    removeByLoginId(loginId: LoginId): Promise<void>;
+    listTokensByLoginId(loginId: LoginId): Promise<string[]>;
+    touch(session: AuthSession): Promise<void>;
+}
+export declare function getSessionStore(): SessionStore;
+export declare function setSessionStore(store: SessionStore): void;
+//# sourceMappingURL=store.d.ts.map

package/Auth/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../../src/framework/Auth/store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGpD,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACvD,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjD,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEzD,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C;AAOD,qBAAa,WAAY,YAAW,YAAY;IAC9C,OAAO,CAAC,QAAQ,CAAkC;IAClD,OAAO,CAAC,UAAU,CAAkC;IAE9C,GAAG,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAWxC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAItD,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAY3C,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAUhD,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAKxD,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAGjD;AAGD,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrD,GAAG,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE3D,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACpC,CAAC;AAQF,qBAAa,UAAW,YAAW,YAAY;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,SAAS;IAE7C,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,UAAU;YAYJ,gBAAgB;IAcxB,GAAG,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAItD,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAYnC,cAAc;IAqBtB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAUhD,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIxD,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAKjD;AAKD,wBAAgB,eAAe,IAAI,YAAY,CAE9C;AAGD,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAEzD"}