@tachybase/plugin-auth-wechat 0.23.8

package/dist/server/actions/redirect.js

@@ -0,0 +1,77 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var redirect_exports = {};
+__export(redirect_exports, {
+  redirect: () => redirect
+});
+module.exports = __toCommonJS(redirect_exports);
+var import_server = require("@tachybase/server");
+var import_utils = require("@tachybase/utils");
+var import_constants = require("../../constants");
+const redirect = async (ctx, next) => {
+  let { state } = ctx.request.query;
+  state = Array.isArray(state) ? state[0] : state;
+  const search = new URLSearchParams(state);
+  const authenticator = search.get("name");
+  const appName = search.get("app");
+  const redirect2 = search.get("redirect") || "/admin";
+  let prefix = process.env.APP_PUBLIC_PATH || "";
+  if (appName && appName !== "main") {
+    const appSupervisor = import_server.AppSupervisor.getInstance();
+    if ((appSupervisor == null ? void 0 : appSupervisor.runningMode) !== "single") {
+      prefix += `apps/${appName}`;
+    }
+  }
+  const auth = await ctx.app.authManager.get(authenticator, ctx);
+  if (prefix.endsWith("/")) {
+    prefix = prefix.slice(0, -1);
+  }
+  const bindToken = search.get("bindToken");
+  if (bindToken) {
+    try {
+      const user = await ctx.app.authManager.jwt.decode(bindToken);
+      if (!user) {
+        ctx.throw(401, "Bind user failed: no user found");
+      }
+      await auth.bindUser(user.userId);
+      ctx.redirect(`${prefix}${redirect2}`);
+    } catch (error) {
+      ctx.logger.error("WeChat auth error", { error });
+      ctx.redirect(`${prefix}${redirect2}?error=${error.message}`);
+    }
+    return next();
+  }
+  const ts = search.get("ts") ? +search.get("ts") : 0;
+  if (ts) {
+    if (ts < (0, import_utils.dayjs)().subtract(import_constants.AUTH_TIMEOUT_MINUTE, "minute").unix()) {
+      ctx.throw(400, "timeout");
+    }
+  }
+  try {
+    const { token } = await auth.signIn();
+    ctx.redirect(`${prefix}${redirect2}?authenticator=${authenticator}&token=${token}`);
+  } catch (error) {
+    ctx.logger.error("WeChat auth error", { error });
+    ctx.redirect(`${prefix}/signin?redirect=${redirect2}&authenticator=${authenticator}&error=${error.message}`);
+  }
+  await next();
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  redirect
+});

package/dist/server/index.d.ts

@@ -0,0 +1 @@
+export { default } from './plugin';

package/dist/server/index.js

@@ -0,0 +1,33 @@
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var server_exports = {};
+__export(server_exports, {
+  default: () => import_plugin.default
+});
+module.exports = __toCommonJS(server_exports);
+var import_plugin = __toESM(require("./plugin"));

package/dist/server/plugin.d.ts

@@ -0,0 +1,11 @@
+import { InstallOptions, Plugin } from '@tachybase/server';
+export declare class WeChatAuthPlugin extends Plugin {
+    afterAdd(): void;
+    beforeLoad(): void;
+    load(): Promise<void>;
+    install(options?: InstallOptions): Promise<void>;
+    afterEnable(): Promise<void>;
+    afterDisable(): Promise<void>;
+    remove(): Promise<void>;
+}
+export default WeChatAuthPlugin;

package/dist/server/plugin.js

@@ -0,0 +1,74 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var plugin_exports = {};
+__export(plugin_exports, {
+  WeChatAuthPlugin: () => WeChatAuthPlugin,
+  default: () => plugin_default
+});
+module.exports = __toCommonJS(plugin_exports);
+var import_server = require("@tachybase/server");
+var import_constants = require("../constants");
+var import_actions = require("./actions");
+var import_wechat_auth = require("./wechat-auth");
+class WeChatAuthPlugin extends import_server.Plugin {
+  afterAdd() {
+  }
+  beforeLoad() {
+  }
+  async load() {
+    this.app.authManager.registerTypes(import_constants.authType, {
+      auth: import_wechat_auth.WeChatAuth
+    });
+    this.app.resourcer.define({
+      name: "wechatAuth",
+      actions: {
+        getAuthCfg: import_actions.getAuthCfg,
+        redirect: import_actions.redirect
+      }
+    });
+    this.app.acl.allow("wechatAuth", "*", "public");
+    import_server.Gateway.getInstance().addAppSelectorMiddleware(async (ctx, next) => {
+      const { req } = ctx;
+      const url = new URL(req.url, `http://${req.headers.host}`);
+      const params = url.searchParams;
+      const state = params.get("state");
+      if (!state) {
+        return next();
+      }
+      const search = new URLSearchParams(state);
+      const appName = search.get("app");
+      if (appName) {
+        ctx.resolvedAppName = appName;
+      }
+      await next();
+    });
+  }
+  async install(options) {
+  }
+  async afterEnable() {
+  }
+  async afterDisable() {
+  }
+  async remove() {
+  }
+}
+var plugin_default = WeChatAuthPlugin;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  WeChatAuthPlugin
+});

package/dist/server/wechat-auth.d.ts

@@ -0,0 +1,17 @@
+import { AuthConfig, BaseAuth } from '@tachybase/auth';
+export { Model } from '@tachybase/database';
+export declare class WeChatAuth extends BaseAuth {
+    constructor(config: AuthConfig);
+    validate(): Promise<any>;
+    getUnionid(getInfo?: boolean): Promise<{
+        unionid?: string;
+        info?: any;
+    }>;
+    bindUser(userId: number): Promise<void>;
+    getAuthCfg(redirect: string): Promise<{
+        appId: any;
+        scope: string;
+        redirectUrl: string;
+        state: string;
+    }>;
+}

package/dist/server/wechat-auth.js

@@ -0,0 +1,138 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var wechat_auth_exports = {};
+__export(wechat_auth_exports, {
+  Model: () => import_database.Model,
+  WeChatAuth: () => WeChatAuth
+});
+module.exports = __toCommonJS(wechat_auth_exports);
+var import_auth = require("@tachybase/auth");
+var import_utils = require("@tachybase/utils");
+var import_constants = require("../constants");
+var import_database = require("@tachybase/database");
+class WeChatAuth extends import_auth.BaseAuth {
+  constructor(config) {
+    const { ctx } = config;
+    super({
+      ...config,
+      userCollection: ctx.db.getCollection("users")
+    });
+  }
+  async validate() {
+    var _a;
+    const { ctx } = this;
+    try {
+      const { unionid } = await this.getUnionid();
+      const authenticator = this.authenticator;
+      const user = await authenticator.findUser(unionid);
+      if (user) {
+        return user;
+      }
+      const { autoSignUp } = ((_a = this.options) == null ? void 0 : _a.public) || {};
+      if (!autoSignUp) {
+        ctx.logger.error(`User not found: ${unionid}`);
+        ctx.throw(401, ctx.t("User not found", { ns: import_constants.namespace }));
+      }
+      return await authenticator.newUser(unionid, {
+        unionid
+      });
+    } catch (err) {
+      ctx.logger.error(`Failed in validate: ${err}`);
+      ctx.throw(401, (err == null ? void 0 : err.message) || ctx.t("Unauthorized", { ns: import_constants.namespace }));
+    }
+  }
+  async getUnionid(getInfo = false) {
+    var _a, _b, _c, _d;
+    const { ctx } = this;
+    let { code } = ctx.request.query || {};
+    code = Array.isArray(code) ? code[0] : code;
+    if (!code) {
+      ctx.logger.error("Failed to get code");
+      ctx.throw(401, ctx.t("Unauthorized", { ns: import_constants.namespace }));
+    }
+    try {
+      const getAccessTokenRsp = await fetch(
+        `${import_constants.weChatApiOauthBaseUrl}/oauth2/access_token?appid=${(_b = (_a = this.options) == null ? void 0 : _a.wechatAuth) == null ? void 0 : _b.AppID}&secret=${(_d = (_c = this.options) == null ? void 0 : _c.wechatAuth) == null ? void 0 : _d.AppSecret}&code=${code}&grant_type=authorization_code`
+      );
+      const getAccessTokenRspJson = await getAccessTokenRsp.json();
+      if (getAccessTokenRspJson.errcode) {
+        ctx.logger.error(`Failed to get user accessToken: ${getAccessTokenRspJson.errmsg}`);
+        ctx.throw(401, ctx.t("Failed to get accessToken", { ns: import_constants.namespace }));
+      }
+      const { access_token, unionid, openid } = getAccessTokenRspJson;
+      if (getInfo) {
+        const getInfoRsp = await fetch(
+          `${import_constants.weChatApiOauthBaseUrl}/userinfo?access_token=${access_token}&openid=${openid}&lang=zh_CN`
+        );
+        const getInfoRspJson = await getInfoRsp.json();
+        if (!getInfoRspJson.errcode) {
+          return { unionid, info: getInfoRspJson };
+        }
+      }
+      return { unionid };
+    } catch (e) {
+      ctx.logger.error("Failed to get code");
+      return {};
+    }
+  }
+  async bindUser(userId) {
+    const { unionid, info } = await this.getUnionid(true);
+    if (!unionid) {
+      this.ctx.throw(400, "Bind user failed: no weixin user found");
+    }
+    const authenticator = this.authenticator;
+    const existUser = await authenticator.findUser(unionid);
+    if (existUser) {
+      this.ctx.throw(400, "Bind user failed: wechat can bine one user!");
+    }
+    await authenticator.bindUser(userId, unionid, {
+      nickname: info == null ? void 0 : info.nickname,
+      avatar: info == null ? void 0 : info.headimgurl
+    });
+  }
+  async getAuthCfg(redirect) {
+    var _a, _b;
+    const appID = (_b = (_a = this.options) == null ? void 0 : _a.wechatAuth) == null ? void 0 : _b.AppID;
+    const app = this.ctx.app.name;
+    const ctx = this.ctx;
+    const referer = ctx.req.headers["referer"];
+    let redirectUrl;
+    if (referer) {
+      const clientUrl = new URL(referer);
+      redirectUrl = `${clientUrl.protocol}//${clientUrl.host}${process.env.API_BASE_PATH}wechatAuth:redirect`;
+    } else {
+      redirectUrl = `${this.ctx.protocol}://${this.ctx.host}${process.env.API_BASE_PATH}wechatAuth:redirect`;
+    }
+    const state = encodeURIComponent(
+      encodeURIComponent(
+        `redirect=${redirect}&app=${app}&name=${this.ctx.headers["x-authenticator"]}&ts=${(0, import_utils.dayjs)().unix()}`
+      )
+    );
+    return {
+      appId: appID,
+      scope: import_constants.weChatApiOauthScope,
+      redirectUrl: encodeURIComponent(redirectUrl),
+      state
+    };
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  Model,
+  WeChatAuth
+});

package/dist/swagger/index.d.ts

@@ -0,0 +1,143 @@
+declare const _default: {
+    info: {
+        title: string;
+    };
+    paths: {
+        '/wechatAuth:getAuthCfg': {
+            security: any[];
+            get: {
+                description: string;
+                tags: string[];
+                parameters: {
+                    name: string;
+                    description: string;
+                    in: string;
+                    schema: {
+                        type: string;
+                    };
+                    required: boolean;
+                }[];
+                responses: {
+                    200: {
+                        description: string;
+                        content: {
+                            'application/json': {
+                                schema: {
+                                    type: string;
+                                };
+                            };
+                        };
+                    };
+                };
+            };
+        };
+        '/wechatAuth:signIn': {
+            security: any[];
+            post: {
+                description: string;
+                tags: string[];
+                parameters: {
+                    name: string;
+                    description: string;
+                    in: string;
+                    schema: {
+                        type: string;
+                    };
+                    required: boolean;
+                }[];
+                requestBody: {
+                    content: {
+                        'application/json': {
+                            schema: {
+                                type: string;
+                                properties: {
+                                    code: {
+                                        type: string;
+                                    };
+                                    state: {
+                                        type: string;
+                                    };
+                                    iss: {
+                                        type: string;
+                                    };
+                                };
+                            };
+                        };
+                    };
+                };
+                responses: {
+                    200: {
+                        description: string;
+                        content: {
+                            'application/json': {
+                                schema: {
+                                    type: string;
+                                    properties: {
+                                        token: {
+                                            type: string;
+                                        };
+                                        user: {
+                                            type: string;
+                                            description: string;
+                                            properties: {
+                                                id: {
+                                                    type: string;
+                                                    description: string;
+                                                };
+                                                nickname: {
+                                                    type: string;
+                                                    description: string;
+                                                };
+                                                email: {
+                                                    type: string;
+                                                    description: string;
+                                                };
+                                                phone: {
+                                                    type: string;
+                                                    description: string;
+                                                };
+                                                appLang: {
+                                                    type: string;
+                                                    description: string;
+                                                };
+                                                systemSettings: {
+                                                    type: string;
+                                                    description: string;
+                                                    properties: {
+                                                        theme: {
+                                                            type: string;
+                                                            description: string;
+                                                        };
+                                                    };
+                                                };
+                                                createdAt: {
+                                                    type: string;
+                                                    format: string;
+                                                    description: string;
+                                                };
+                                                updatedAt: {
+                                                    type: string;
+                                                    format: string;
+                                                    description: string;
+                                                };
+                                                createdById: {
+                                                    type: string;
+                                                    description: string;
+                                                };
+                                                updatedById: {
+                                                    type: string;
+                                                    description: string;
+                                                };
+                                            };
+                                        };
+                                    };
+                                };
+                            };
+                        };
+                    };
+                };
+            };
+        };
+    };
+};
+export default _default;

package/dist/swagger/index.js

@@ -0,0 +1,178 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var swagger_exports = {};
+__export(swagger_exports, {
+  default: () => swagger_default
+});
+module.exports = __toCommonJS(swagger_exports);
+const user = {
+  type: "object",
+  description: "\u7528\u6237",
+  properties: {
+    id: {
+      type: "integer",
+      description: "ID"
+    },
+    nickname: {
+      type: "string",
+      description: "\u6635\u79F0"
+    },
+    email: {
+      type: "string",
+      description: "\u90AE\u7BB1"
+    },
+    phone: {
+      type: "string",
+      description: "\u624B\u673A\u53F7"
+    },
+    appLang: {
+      type: "string",
+      description: "\u7528\u6237\u4F7F\u7528\u8BED\u8A00"
+    },
+    systemSettings: {
+      type: "object",
+      description: "\u5E94\u7528\u914D\u7F6E",
+      properties: {
+        theme: {
+          type: "string",
+          description: "\u7528\u6237\u4F7F\u7528\u4E3B\u9898"
+        }
+      }
+    },
+    createdAt: {
+      type: "string",
+      format: "date-time",
+      description: "\u521B\u5EFA\u65F6\u95F4"
+    },
+    updatedAt: {
+      type: "string",
+      format: "date-time",
+      description: "\u66F4\u65B0\u65F6\u95F4"
+    },
+    createdById: {
+      type: "integer",
+      description: "\u521B\u5EFA\u4EBA"
+    },
+    updatedById: {
+      type: "integer",
+      description: "\u66F4\u65B0\u4EBA"
+    }
+  }
+};
+var swagger_default = {
+  info: {
+    title: "TachyBase API - WeChat Auth plugin"
+  },
+  paths: {
+    "/wechatAuth:getAuthCfg": {
+      security: [],
+      get: {
+        description: "Get WeChat authorization configuration",
+        tags: ["WeChat"],
+        parameters: [
+          {
+            name: "X-Authenticator",
+            description: "\u767B\u5F55\u65B9\u5F0F\u6807\u8BC6",
+            in: "header",
+            schema: {
+              type: "string"
+            },
+            required: true
+          }
+        ],
+        responses: {
+          200: {
+            description: "ok",
+            content: {
+              "application/json": {
+                schema: {
+                  type: "string"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/wechatAuth:signIn": {
+      security: [],
+      post: {
+        description: "WeChat sign in",
+        tags: ["WeChat"],
+        parameters: [
+          {
+            name: "X-Authenticator",
+            description: "\u767B\u5F55\u65B9\u5F0F\u6807\u8BC6",
+            in: "header",
+            schema: {
+              type: "string"
+            },
+            required: true
+          },
+          {
+            name: "tachybase_wechat_auth",
+            description: "state\u6821\u9A8C\u503C",
+            in: "cookie",
+            schema: {
+              type: "string"
+            },
+            required: true
+          }
+        ],
+        requestBody: {
+          content: {
+            "application/json": {
+              schema: {
+                type: "object",
+                properties: {
+                  code: {
+                    type: "string"
+                  },
+                  state: {
+                    type: "string"
+                  },
+                  iss: {
+                    type: "string"
+                  }
+                }
+              }
+            }
+          }
+        },
+        responses: {
+          200: {
+            description: "ok",
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object",
+                  properties: {
+                    token: {
+                      type: "string"
+                    },
+                    user
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+};