@wecode-team/cms-supabase-api 0.1.53 → 0.1.54

package/dist/index.d.ts

@@ -14,5 +14,6 @@ export { getConfig, updateConfig, } from "./handlers/configs";
 export type { SchemaField, JsonSchema, CmsModelAttributes, CmsModelCreationAttributes, ApiResponse, PaginatedResponse, SupabaseConfig, DatabaseConfig, TableDataOptions, SupabaseFilter, FieldTypeMapping, RelationType, RelationConfig, RelationOption, GetRelationOptionsParams, } from "./types";
 export type { User, UserInfo, LoginRequest, ForgotPasswordRequest, ResetPasswordRequest, LoginResponse, } from "./handlers/auth";
 export { createCmsRoutes, createModelRoute, createDynamicDataRoute, createDynamicAuthRoute, createDataRoute, createAuthRoute, createOssUploadRoute, createConfigRoute, } from "./utils/route-helpers";
+export type { CmsRouteOptions, } from "./utils/route-helpers";
 export { notifyCmsCrudErrorToFeishu, reportCmsCrudErrorToFeishu, } from "./utils/feishu-alert";
 export type { OssUploadProvider, OssUploadReturnMode, OssUploadConfig, NormalizedOssUploadConfig, OssUploadInput, OssUploadResult, UploadRouteResponse, } from "./types/upload";

package/dist/index.esm.js

@@ -7532,64 +7532,117 @@ function _supabaseCurrentUser() {
   return _supabaseCurrentUser.apply(this, arguments);
 }
 
+function isSkipAuthRequest(c) {
+  return c.req.header("X-CMS-Skip-Auth") === "true";
+}
+function withAdmin() {
+  return [(/*#__PURE__*/function () {
+    var _ref = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee(c, next) {
+      return _regeneratorRuntime.wrap(function (_context) {
+        while (1) switch (_context.prev = _context.next) {
+          case 0:
+            if (!isSkipAuthRequest(c)) {
+              _context.next = 2;
+              break;
+            }
+            _context.next = 1;
+            return next();
+          case 1:
+            return _context.abrupt("return");
+          case 2:
+            return _context.abrupt("return", requireJwtAuth(c, next));
+          case 3:
+          case "end":
+            return _context.stop();
+        }
+      }, _callee);
+    }));
+    return function (_x, _x2) {
+      return _ref.apply(this, arguments);
+    };
+  }()), (/*#__PURE__*/function () {
+    var _ref2 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee2(c, next) {
+      return _regeneratorRuntime.wrap(function (_context2) {
+        while (1) switch (_context2.prev = _context2.next) {
+          case 0:
+            if (!isSkipAuthRequest(c)) {
+              _context2.next = 2;
+              break;
+            }
+            _context2.next = 1;
+            return next();
+          case 1:
+            return _context2.abrupt("return");
+          case 2:
+            return _context2.abrupt("return", requireAdminRole(c, next));
+          case 3:
+          case "end":
+            return _context2.stop();
+        }
+      }, _callee2);
+    }));
+    return function (_x3, _x4) {
+      return _ref2.apply(this, arguments);
+    };
+  }())];
+}
 // 创建模型路由处理器
 function createModelRoute(app) {
-  // CMS 管理接口：要求登录 + admin 权限（兼容 Supabase Auth JWT / 旧 CMS JWT）
-  app.get("/models", requireJwtAuth, requireAdminRole, getModels);
-  app.post("/models", requireJwtAuth, requireAdminRole, createModel);
-  app.put("/models", requireJwtAuth, requireAdminRole, updateModel);
-  app["delete"]("/models", requireJwtAuth, requireAdminRole, deleteModel);
+  app.get.apply(app, ["/models"].concat(_toConsumableArray(withAdmin()), [getModels]));
+  app.post.apply(app, ["/models"].concat(_toConsumableArray(withAdmin()), [createModel]));
+  app.put.apply(app, ["/models"].concat(_toConsumableArray(withAdmin()), [updateModel]));
+  app["delete"].apply(app, ["/models"].concat(_toConsumableArray(withAdmin()), [deleteModel]));
   return app;
 }
 // 创建数据表路由处理器（固定表名）
 function createDataRoute(app, tableName) {
-  app.get("/data/".concat(tableName), requireJwtAuth, requireAdminRole, function (c) {
+  app.get.apply(app, ["/data/".concat(tableName)].concat(_toConsumableArray(withAdmin()), [function (c) {
     return getTableData(c, tableName);
-  });
-  app.post("/data/".concat(tableName), requireJwtAuth, requireAdminRole, function (c) {
+  }]));
+  app.post.apply(app, ["/data/".concat(tableName)].concat(_toConsumableArray(withAdmin()), [function (c) {
     return createTableData(c, tableName);
-  });
-  app.put("/data/".concat(tableName), requireJwtAuth, requireAdminRole, function (c) {
+  }]));
+  app.put.apply(app, ["/data/".concat(tableName)].concat(_toConsumableArray(withAdmin()), [function (c) {
     return updateTableData(c, tableName);
-  });
-  app["delete"]("/data/".concat(tableName), requireJwtAuth, requireAdminRole, function (c) {
+  }]));
+  app["delete"].apply(app, ["/data/".concat(tableName)].concat(_toConsumableArray(withAdmin()), [function (c) {
     return deleteTableData(c, tableName);
-  });
+  }]));
   return app;
 }
 // 动态创建数据表路由处理器（从URL参数获取表名）
 function createDynamicDataRoute(app) {
   // 获取关联表选项（放在 :tableName 路由之前，避免被匹配）
-  app.get("/relation/:tableName/options", requireJwtAuth, requireAdminRole, function (c) {
-    var tableName = c.req.param("tableName");
+  app.get.apply(app, ["/relation/:tableName/options"].concat(_toConsumableArray(withAdmin()), [function (c) {
+    var tableName = c.req.param("tableName") || "";
     return getRelationOptions(c, tableName);
-  });
+  }]));
   // 获取带关联数据的表数据
-  app.get("/data/:tableName/with-relations", requireJwtAuth, requireAdminRole, function (c) {
-    var tableName = c.req.param("tableName");
+  app.get.apply(app, ["/data/:tableName/with-relations"].concat(_toConsumableArray(withAdmin()), [function (c) {
+    var tableName = c.req.param("tableName") || "";
     return getTableDataWithRelations(c, tableName);
-  });
-  app.get("/data/:tableName", requireJwtAuth, requireAdminRole, function (c) {
-    var tableName = c.req.param("tableName");
+  }]));
+  app.get.apply(app, ["/data/:tableName"].concat(_toConsumableArray(withAdmin()), [function (c) {
+    var tableName = c.req.param("tableName") || "";
     return getTableData(c, tableName);
-  });
-  app.post("/data/:tableName", requireJwtAuth, requireAdminRole, function (c) {
-    var tableName = c.req.param("tableName");
+  }]));
+  app.post.apply(app, ["/data/:tableName"].concat(_toConsumableArray(withAdmin()), [function (c) {
+    var tableName = c.req.param("tableName") || "";
     return createTableData(c, tableName);
-  });
-  app.put("/data/:tableName", requireJwtAuth, requireAdminRole, function (c) {
-    var tableName = c.req.param("tableName");
+  }]));
+  app.put.apply(app, ["/data/:tableName"].concat(_toConsumableArray(withAdmin()), [function (c) {
+    var tableName = c.req.param("tableName") || "";
     return updateTableData(c, tableName);
-  });
-  app["delete"]("/data/:tableName", requireJwtAuth, requireAdminRole, function (c) {
-    var tableName = c.req.param("tableName");
+  }]));
+  app["delete"].apply(app, ["/data/:tableName"].concat(_toConsumableArray(withAdmin()), [function (c) {
+    var tableName = c.req.param("tableName") || "";
     return deleteTableData(c, tableName);
-  });
+  }]));
   // 删除表的所有外键约束（用于解决外键引用错误表的问题）
-  app["delete"]("/data/:tableName/foreign-keys", requireJwtAuth, requireAdminRole, function (c) {
-    var tableName = c.req.param("tableName");
+  app["delete"].apply(app, ["/data/:tableName/foreign-keys"].concat(_toConsumableArray(withAdmin()), [function (c) {
+    var tableName = c.req.param("tableName") || "";
     return dropForeignKeys(c, tableName);
-  });
+  }]));
   return app;
 }
 // 动态创建认证路由处理器（从URL参数获取表名）
@@ -7672,14 +7725,14 @@ function createAuthRoute(app, tableName) {
   return app;
 }
 function createOssUploadRoute(app) {
-  app.post("/upload", requireJwtAuth, requireAdminRole, uploadToOss);
+  app.post.apply(app, ["/upload"].concat(_toConsumableArray(withAdmin()), [uploadToOss]));
   return app;
 }
 function createConfigRoute(app) {
-  app.get("/configs", requireJwtAuth, requireAdminRole, getConfig);
-  app.put("/configs/:namespace", requireJwtAuth, requireAdminRole, function (c) {
+  app.get.apply(app, ["/configs"].concat(_toConsumableArray(withAdmin()), [getConfig]));
+  app.put.apply(app, ["/configs/:namespace"].concat(_toConsumableArray(withAdmin()), [function (c) {
     return updateConfig(c);
-  });
+  }]));
   return app;
 }
 // 一键创建所有CMS路由