@steedos/service-identity-jwt 2.2.54-beta.10

package/LICENSE.txt

@@ -0,0 +1,22 @@
+Steedos Licensing
+
+SOFTWARE LICENSING
+
+To determine under which license you may use a file from the Steedos source code,
+please resort to the header of that file.
+
+If the file has no header, the following rules apply
+1. enterprise features are licensed under Steedos Enterprise Terms, see License.enterprise.txt
+2. source code that is neither (1) is licensed under MIT, see https://opensource.org/licenses/MIT
+
+On request, licenses under different terms are available.
+
+Source code of enterprise features are files that
+* are in folders named "ee" or start with "ee_", or in subfolders of such folders.
+* contain the strings "ee_" in its filename name.
+The files can be found by running the command `find . -iname ee -or -iname "*_ee*" -or -iname "*ee_*"`
+
+STEEDOS TRADEMARK GUIDELINES
+
+Your use of the mark Steedos is subject to Steedos, Inc's prior written approval. For trademark approval or any questions
+you have about using these trademarks, please email zhuangjianguo@steedos.com

package/main/default/routes/account.d.ts

@@ -0,0 +1,8 @@
+export declare class Account {
+    static ssoLogin(req: any, res: any, options?: {
+        user: any;
+        err: any;
+        redirect: boolean;
+        accessToken: any;
+    }): Promise<any>;
+}

package/main/default/routes/account.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Account = void 0;
+const tslib_1 = require("tslib");
+/*
+ * @Author: baozhoutao@steedos.com
+ * @Date: 2022-06-27 15:17:27
+ * @LastEditors: baozhoutao@steedos.com
+ * @LastEditTime: 2022-07-16 12:01:45
+ * @Description:
+ */
+const accounts_1 = require("@steedos/accounts");
+const requestIp = require("request-ip");
+const objectql_1 = require("@steedos/objectql");
+const getUserAgent = (req) => {
+    let userAgent = req.headers['user-agent'] || '';
+    if (req.headers['x-ucbrowser-ua']) {
+        // special case of UC Browser
+        userAgent = req.headers['x-ucbrowser-ua'];
+    }
+    return userAgent;
+};
+class Account {
+    static ssoLogin(req, res, options = { user: null, err: null, redirect: true, accessToken: null }) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            let { user, err } = options;
+            //TODO
+            if (err || !user) {
+                (0, objectql_1.getSteedosSchema)().broker.logger.error(`oidc sso login error: ${err}`);
+                return res.redirect("/api/global/auth/oidc/error-callback");
+            }
+            let userAgent = getUserAgent(req) || '';
+            const ip = requestIp.getClientIp(req);
+            let logout_other_clients = false;
+            let login_expiration_in_days = null;
+            let phone_logout_other_clients = false;
+            let phone_login_expiration_in_days = null;
+            let space = null;
+            // 获取用户简档
+            const userProfile = yield accounts_1.accountsServer.getUserProfile(user.id);
+            if (userProfile) {
+                logout_other_clients = userProfile.logout_other_clients || false;
+                login_expiration_in_days = userProfile.login_expiration_in_days;
+                phone_logout_other_clients =
+                    userProfile.phone_logout_other_clients || false;
+                phone_login_expiration_in_days =
+                    userProfile.phone_login_expiration_in_days;
+                space = userProfile.space;
+            }
+            // 更新user_providers
+            const loginResult = yield accounts_1.accountsServer.loginWithUser(user, Object.assign({}, {
+                ip,
+                userAgent
+            }, {
+                logout_other_clients,
+                login_expiration_in_days,
+                phone_logout_other_clients,
+                phone_login_expiration_in_days,
+                space,
+                provider: 'jwt',
+                // jwtToken: options.accessToken  // 如果使用jwt token 会导致cookie太大
+            }));
+            (0, accounts_1.setAuthCookies)(req, res, loginResult.user._id, loginResult.token, loginResult.tokens.accessToken);
+            if (options.redirect) {
+                res.redirect(`/accounts/a/?uid=${loginResult.user._id}`);
+            }
+            else {
+                return loginResult;
+            }
+        });
+    }
+}
+exports.Account = Account;

package/main/default/routes/apps.router.d.ts

@@ -0,0 +1 @@
+export {};

package/main/default/routes/apps.router.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+/*
+ * @Author: baozhoutao@steedos.com
+ * @Date: 2022-06-08 23:28:39
+ * @LastEditors: baozhoutao@steedos.com
+ * @LastEditTime: 2022-07-16 16:18:31
+ * @Description:
+ */
+const express = require("express");
+const account_1 = require("./account");
+const passport = require('passport');
+const router = express.Router();
+router.use('/accounts/jwt/login', passport.authenticate('jwt', { session: false }), (req, res) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
+    account_1.Account.ssoLogin(req, res, { err: null, user: req.user, redirect: false, accessToken: null }).then((loginResult) => {
+        delete loginResult.user.services;
+        delete loginResult.user.thirdPartyUser;
+        return res.status(200).send(loginResult);
+    }).catch((err) => {
+        console.log(`err`, err);
+        return res.status(500).send(err.message);
+    });
+}));
+exports.default = router;

package/package.json

@@ -0,0 +1,24 @@
+{
+    "name": "@steedos/service-identity-jwt",
+    "version": "2.2.54-beta.10",
+    "main": "package.service.js",
+    "keywords": [
+        "steedos"
+    ],
+    "scripts": {
+        "build": "tsc"
+    },
+    "description": "steedos package",
+    "repository": {},
+    "dependencies": {
+        "@steedos/accounts": "2.2.54-beta.10",
+        "express": "4.18.1",
+        "passport-jwt": "^4.0.0"
+    },
+    "license": "MIT",
+    "private": false,
+    "publishConfig": {
+        "access": "public"
+    },
+    "gitHead": "a9abdeb7aaaaf8eee1cecc28efc6cd89ba65a9fe"
+}

package/package.service.js

@@ -0,0 +1,124 @@
+/*
+ * @Author: baozhoutao@steedos.com
+ * @Date: 2022-06-11 18:09:20
+ * @LastEditors: baozhoutao@steedos.com
+ * @LastEditTime: 2022-07-16 18:24:42
+ * @Description: 
+ */
+"use strict";
+const project = require('./package.json');
+const packageName = project.name;
+const objectql = require('@steedos/objectql');
+const packageLoader = require('@steedos/service-package-loader');
+const passport = require('passport');
+const JwtStrategy = require("passport-jwt").Strategy
+const ExtractJwt = require('passport-jwt').ExtractJwt;
+
+
+const authError = function (done, message, err = null) {
+	return done(
+		message,
+		null
+	);
+};
+
+module.exports = {
+	name: packageName,
+	namespace: "steedos",
+	mixins: [packageLoader],
+	/**
+	 * Settings
+	 */
+	settings: {
+		packageInfo: {
+			path: __dirname,
+			name: packageName,
+			isPackage: true
+		},
+		jwt: {
+			secret: process.env.STEEDOS_IDENTITY_JWT_SECRET,
+		}
+	},
+
+	/**
+	 * Dependencies
+	 */
+	dependencies: [],
+
+	/**
+	 * Actions
+	 */
+	actions: {
+
+	},
+
+	/**
+	 * Events
+	 */
+	events: {
+
+	},
+
+	/**
+	 * Methods
+	 */
+	methods: {
+		beforeStart: async function () {
+			if(!this.settings.jwt.secret){
+				throw new Error(`${packageName} jwt secret is not defined`);
+			}
+		}
+	},
+
+	/**
+	 * Service created lifecycle event handler
+	 */
+	created() {
+	},
+
+	/**
+	 * Service started lifecycle event handler
+	 */
+	async started() {
+		try {
+            if(this.settings.jwt.secret){
+				const jwtOptions = {
+					secretOrKey: this.settings.jwt.secret,
+					jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken()
+				}
+				
+				const jwtAuthenticate = function (jwt_payload, done) {
+					try {
+						const { profile } = jwt_payload;
+						if(profile && profile._json && profile._json.email){
+							objectql.getObject('users').find({filters: [['email', '=', profile._json.email]], fields: ['_id', 'name', 'email', 'username']}).then((records)=>{
+								if(records.length > 0){
+									const user = records[0];
+									return done(null, Object.assign({}, user, {id: user._id}))
+								}else{
+									return done('user not find', null)
+								}
+							})
+						}else{
+							return done('JWT invalid', null)
+						}
+					} catch (err) {
+						return authError(done, "JWT invalid", err)
+					}
+				}
+				
+				passport.use(new JwtStrategy(jwtOptions, jwtAuthenticate))
+			}
+        } catch (error) {
+            // this.setError(error);
+			this.broker.logger.error(error)
+        }
+	},
+
+	/**
+	 * Service stopped lifecycle event handler
+	 */
+	async stopped() {
+
+	}
+};

package/src/routes/account.ts

@@ -0,0 +1,76 @@
+/*
+ * @Author: baozhoutao@steedos.com
+ * @Date: 2022-06-27 15:17:27
+ * @LastEditors: baozhoutao@steedos.com
+ * @LastEditTime: 2022-07-16 12:01:45
+ * @Description: 
+ */
+import { accountsServer, setAuthCookies } from '@steedos/accounts';
+
+import * as requestIp from 'request-ip';
+
+import { getSteedosSchema } from '@steedos/objectql';
+
+const getUserAgent = (req: any) => {
+    let userAgent: string = (req.headers['user-agent'] as string) || '';
+    if (req.headers['x-ucbrowser-ua']) {
+      // special case of UC Browser
+      userAgent = req.headers['x-ucbrowser-ua'] as string;
+    }
+    return userAgent;
+  };
+
+export class Account {
+    static async ssoLogin(req, res, options = { user: null, err: null, redirect: true, accessToken: null }) {
+        let { user , err } = options;
+        //TODO
+        if (err || !user) { 
+            getSteedosSchema().broker.logger.error(`oidc sso login error: ${err}`);
+            return res.redirect("/api/global/auth/oidc/error-callback");
+        }
+        let userAgent = getUserAgent(req) || '';
+        const ip = requestIp.getClientIp(req);
+        let logout_other_clients = false;
+        let login_expiration_in_days = null;
+        let phone_logout_other_clients = false;
+        let phone_login_expiration_in_days = null;
+        let space = null;
+        // 获取用户简档
+        const userProfile = await accountsServer.getUserProfile(
+            user.id
+        );
+        if (userProfile) {
+            logout_other_clients = userProfile.logout_other_clients || false;
+            login_expiration_in_days = userProfile.login_expiration_in_days;
+            phone_logout_other_clients =
+                userProfile.phone_logout_other_clients || false;
+            phone_login_expiration_in_days =
+                userProfile.phone_login_expiration_in_days;
+            space = userProfile.space;
+        }
+
+        // 更新user_providers
+        const loginResult = await accountsServer.loginWithUser(
+            user,
+            Object.assign({}, {
+                ip,
+                userAgent
+            }, {
+                logout_other_clients,
+                login_expiration_in_days,
+                phone_logout_other_clients,
+                phone_login_expiration_in_days,
+                space,
+                provider: 'jwt',
+                // jwtToken: options.accessToken  // 如果使用jwt token 会导致cookie太大
+            })
+        );
+        setAuthCookies(req, res, loginResult.user._id, loginResult.token, loginResult.tokens.accessToken);
+        
+        if(options.redirect){
+            res.redirect(`/accounts/a/?uid=${loginResult.user._id}`);
+        }else{
+            return loginResult;
+        }
+    }
+}

package/src/routes/apps.router.ts

@@ -0,0 +1,25 @@
+/*
+ * @Author: baozhoutao@steedos.com
+ * @Date: 2022-06-08 23:28:39
+ * @LastEditors: baozhoutao@steedos.com
+ * @LastEditTime: 2022-07-16 16:18:31
+ * @Description: 
+ */
+import * as express from 'express';
+import { Account } from './account'
+const passport = require('passport');
+
+const router = express.Router();
+
+router.use('/accounts/jwt/login', passport.authenticate('jwt', { session: false }), async (req: any, res) => {
+    Account.ssoLogin(req, res, { err: null, user: req.user, redirect: false, accessToken: null }).then((loginResult) => {
+        delete loginResult.user.services;
+        delete loginResult.user.thirdPartyUser;
+        return res.status(200).send(loginResult)
+    }).catch((err) => {
+        console.log(`err`, err)
+        return res.status(500).send(err.message);
+    })
+});
+
+exports.default = router;

package/tsconfig.json

@@ -0,0 +1,37 @@
+{   
+  "compilerOptions": {
+      "outDir": "./main/default/routes",
+      "target": "es6",
+      "module": "commonjs",
+      "moduleResolution": "node",
+      "importHelpers": true,
+      "emitDecoratorMetadata": true,
+      "experimentalDecorators": true,
+      "sourceMap": false,
+      "declarationMap": false,
+      "noImplicitAny": false,
+      "declaration": true,
+      "noFallthroughCasesInSwitch": true,
+      //"noImplicitReturns": true,
+      "stripInternal": true,
+      "pretty": true,
+      "noUnusedLocals": true,
+      "downlevelIteration": true,
+      "strictNullChecks": false,
+      "skipLibCheck": true,
+      "lib": [
+        "es5",
+        "es6",
+        "es2015",
+        "es2016",
+        "es2017",
+        "esnext"
+      ],
+  },
+  "include": [
+    "./src/**/*"
+  ],
+  "exclude": [
+    "../../node_modules/"
+  ]
+}