@waline/vercel 1.16.0 → 1.17.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@waline/vercel",
-  "version": "1.16.0",
+  "version": "1.17.0",
   "description": "vercel server for waline comment system",
   "keywords": [
     "waline",
@@ -26,15 +26,15 @@
     "jsonwebtoken": "^8.5.1",
     "katex": "^0.15.3",
     "leancloud-storage": "^4.12.2",
-    "markdown-it": "^12.3.2",
-    "markdown-it-emoji": "^2.0.0",
+    "markdown-it": "^13.0.1",
+    "markdown-it-emoji": "^2.0.2",
     "markdown-it-sub": "^1.0.0",
     "markdown-it-sup": "^1.0.0",
     "mathjax-full": "^3.2.0",
-    "nodemailer": "^6.7.3",
+    "nodemailer": "^6.7.4",
     "nunjucks": "^3.2.3",
     "phpass": "^0.1.1",
-    "prismjs": "^1.27.0",
+    "prismjs": "^1.28.0",
     "request": "^2.88.2",
     "request-promise-native": "^1.0.9",
     "speakeasy": "^2.0.0",

package/src/config/config.js

@@ -107,7 +107,7 @@ module.exports = {
   disallowIPList: [],
   secureDomains: SECURE_DOMAINS ? SECURE_DOMAINS.split(/\s*,\s*/) : undefined,
   disableUserAgent: DISABLE_USERAGENT && !isFalse(DISABLE_USERAGENT),
-  disableReigon: DISABLE_REGION && !isFalse(DISABLE_REGION),
+  disableRegion: DISABLE_REGION && !isFalse(DISABLE_REGION),
   levels:
     !LEVELS || isFalse(LEVELS)
       ? false

package/src/controller/comment.js

@@ -25,6 +25,7 @@ async function formatCmt(
     comment.mail = user.email;
     comment.link = user.url;
     comment.type = user.type;
+    comment.label = user.label;
   }
 
   const avatarUrl =
@@ -112,7 +113,14 @@ module.exports = class extends BaseRest {
           users = await userModel.select(
             { objectId: ['IN', user_ids] },
             {
-              field: ['display_name', 'email', 'url', 'type', 'avatar'],
+              field: [
+                'display_name',
+                'email',
+                'url',
+                'type',
+                'avatar',
+                'label',
+              ],
             }
           );
         }
@@ -192,7 +200,14 @@ module.exports = class extends BaseRest {
           users = await userModel.select(
             { objectId: ['IN', user_ids] },
             {
-              field: ['display_name', 'email', 'url', 'type', 'avatar'],
+              field: [
+                'display_name',
+                'email',
+                'url',
+                'type',
+                'avatar',
+                'label',
+              ],
             }
           );
         }
@@ -314,7 +329,14 @@ module.exports = class extends BaseRest {
           users = await userModel.select(
             { objectId: ['IN', user_ids] },
             {
-              field: ['display_name', 'email', 'url', 'type', 'avatar'],
+              field: [
+                'display_name',
+                'email',
+                'url',
+                'type',
+                'avatar',
+                'label',
+              ],
             }
           );
         }

package/src/controller/user.js

@@ -11,6 +11,26 @@ module.exports = class extends BaseRest {
     );
   }
 
+  async getAction() {
+    const { page, pageSize } = this.get();
+
+    const count = await this.modelInstance.count({});
+    const users = await this.modelInstance.select(
+      {},
+      {
+        desc: 'insertedAt',
+        limit: pageSize,
+        offset: Math.max((page - 1) * pageSize, 0),
+      }
+    );
+    return this.success({
+      page,
+      totalPages: Math.ceil(count / pageSize),
+      pageSize,
+      data: users,
+    });
+  }
+
   async postAction() {
     const data = this.post();
     const resp = await this.modelInstance.select({
@@ -92,12 +112,20 @@ module.exports = class extends BaseRest {
   }
 
   async putAction() {
-    const { display_name, url, avatar, password } = this.post();
+    const { display_name, url, avatar, password, type, label } = this.post();
     const { objectId } = this.ctx.state.userInfo;
     const twoFactorAuth = this.post('2fa');
 
     const updateData = {};
 
+    if (this.id && type) {
+      updateData.type = type;
+    }
+
+    if (think.isString(label)) {
+      updateData.label = label;
+    }
+
     if (display_name) {
       updateData.display_name = display_name;
     }
@@ -130,7 +158,9 @@ module.exports = class extends BaseRest {
       return this.success();
     }
 
-    await this.modelInstance.update(updateData, { objectId });
+    await this.modelInstance.update(updateData, {
+      objectId: this.id || objectId,
+    });
 
     return this.success();
   }

package/src/extend/think.js

@@ -56,12 +56,12 @@ module.exports = {
     try {
       const search = helper.promisify(regionSearch.btreeSearch, regionSearch);
       const { region } = await search(ip);
-      const [,, province, city, isp] = region.split('|');
+      const [, , province, city, isp] = region.split('|');
       const address = Array.from(new Set([province, city, isp]));
       return address.slice(0, depth).join(' ');
-    } catch(e) {
+    } catch (e) {
       console.log(e);
       return '';
     }
-  }
+  },
 };

package/src/logic/base.js

@@ -8,6 +8,7 @@ module.exports = class extends think.Logic {
       `storage/${this.config('storage')}`,
       'Users'
     );
+    this.id = this.getId();
   }
 
   async __before() {
@@ -89,4 +90,20 @@ module.exports = class extends think.Logic {
     this.ctx.state.userInfo = userInfo;
     this.ctx.state.token = token;
   }
+
+  getId() {
+    const id = this.get('id');
+
+    if (id && (think.isString(id) || think.isNumber(id))) {
+      return id;
+    }
+
+    const last = decodeURIComponent(this.ctx.path.split('/').pop());
+
+    if (last !== this.resource && /^([a-z0-9]+,?)*$/i.test(last)) {
+      return last;
+    }
+
+    return '';
+  }
 };

package/src/logic/user.js

@@ -1,6 +1,24 @@
 const Base = require('./base');
 
 module.exports = class extends Base {
+  getAction() {
+    const { userInfo } = this.ctx.state;
+    if (think.isEmpty(userInfo) || userInfo.type !== 'administrator') {
+      return this.fail();
+    }
+
+    this.rules = {
+      page: {
+        int: true,
+        default: 1,
+      },
+      pageSize: {
+        int: { max: 100 },
+        default: 10,
+      },
+    };
+  }
+
   /**
    * @api {POST} /user user register
    * @apiGroup User
@@ -30,9 +48,15 @@ module.exports = class extends Base {
    * @apiSuccess  (200) {String}  errmsg  return error message if error
    */
   putAction() {
+    // you need login to update yourself profile
     const { userInfo } = this.ctx.state;
     if (think.isEmpty(userInfo)) {
       return this.fail();
     }
+
+    // you should be a administrator to update otherself info
+    if (this.id && userInfo.type !== 'administrator') {
+      return this.fail();
+    }
   }
 };