abler-api 0.1.22 → 0.1.25

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,1798 @@
1
+ import require$$0$1 from 'crypto';
2
+ import require$$1 from 'abler-util';
3
+ import require$$2 from 'abler-db';
4
+ import require$$3 from 'abler-net';
5
+ import require$$0$2 from 'fs';
6
+ import require$$1$1 from 'path';
7
+
8
+ const crypto = require$$0$1;
9
+ const ppUtil$4 = require$$1.ppUtil;
10
+ const {
11
+ dbUtil,
12
+ kvStorage
13
+ } = require$$2;
14
+ const netUtil$1 = require$$3;
15
+ let conf$2, appSetting$1, err$1, dbSql;
16
+ const pnToken = "access_token",
17
+ hnToken = pnToken,
18
+ pnApiKey = "apiKey",
19
+ hnApiKey = pnApiKey.toLowerCase(),
20
+ // 我们接收到的 headers 中的字段名总是全小写的
21
+ pnApiSecret = "apiSecret",
22
+ hnApiSecret = pnApiSecret.toLowerCase();
23
+ const MD5 = ppUtil$4.MD5,
24
+ moveProperty = ppUtil$4.moveProperty;
25
+
26
+ class apiUtil$1 {
27
+ static debugFlag = ppUtil$4.newGuid(); //应用必须设置,否则谁也不知道是啥
28
+
29
+ static testFlag = ppUtil$4.newGuid();
30
+ static envId_dev = "?"; // static apiCallRecSaver;
31
+
32
+ static config(appConfig, appErrCfg, appDbSql) {
33
+ ppUtil$4.config(appConfig, appErrCfg);
34
+ conf$2 = appConfig;
35
+ appSetting$1 = conf$2?.appSetting;
36
+ err$1 = appErrCfg, dbSql = appDbSql;
37
+ apiUtil$1.debugFlag = appSetting$1?.debugFlag || apiUtil$1.debugFlag;
38
+ apiUtil$1.testFlag = appSetting$1?.testFlag || apiUtil$1.testFlag; // apiUtil.apiCallRecSaver = apiCallRecSaver;
39
+ } //#region ===== 需要应用系统重写的方法
40
+
41
+ /**
42
+ * 根据机构标识获取机构的 ApiSecret
43
+ * @param companyId
44
+ * @returns {*}
45
+ */
46
+
47
+
48
+ static _getApiSecret(companyId) {
49
+ return ppUtil$4.newGuid();
50
+ }
51
+ /**
52
+ * 保存 API 调用记录,应用系统必须重写此方法
53
+ * @param rec
54
+ * @param responseData
55
+ * @returns {Promise<unknown>}
56
+ */
57
+
58
+
59
+ static async _saveApiCallRec(rec, responseData) {
60
+ return false;
61
+ }
62
+ /**
63
+ * 检查API调用签名是否已经完成了验证
64
+ * @param req
65
+ */
66
+
67
+
68
+ static signatureVerified(req) {
69
+ return req.signatureVerified;
70
+ } //#endregion
71
+ //#region ===== API服务相关工具
72
+
73
+ /**
74
+ * 从请求中解出数据,包括路径参数、查询参数和Body
75
+ * @param req
76
+ * @returns {*}
77
+ */
78
+
79
+
80
+ static extractParams(req) {
81
+ if (!req._requestParams) {
82
+ if (req.method === "POST" || req.method === "PUT") {
83
+ let contentType = req.headers["content-type"] || "application/json";
84
+
85
+ if (contentType.startsWith("multipart/form-data")) {
86
+ req._requestParams = new Object();
87
+
88
+ for (let k in req.body) {
89
+ req._requestParams[k] = req.body[k];
90
+ }
91
+ } else {
92
+ req._requestParams = req.body;
93
+ }
94
+ } else {
95
+ req._requestParams = req.query;
96
+ }
97
+
98
+ if (req.headers["content-type"] !== "application/json") {
99
+ const obj = req._requestParams;
100
+
101
+ for (let key in obj) {
102
+ if (!obj.hasOwnProperty(key)) continue;
103
+ let value = obj[key];
104
+
105
+ if (typeof value === "string" && value.length > 0) {
106
+ if (value[0] === "{" || value[0] === "[") {
107
+ try {
108
+ obj[key] = JSON.parse(value);
109
+ continue;
110
+ } catch (e) {}
111
+ }
112
+
113
+ let x = JSON.hbDateConv(key, value);
114
+
115
+ if (x !== value) {
116
+ obj[key] = x;
117
+ }
118
+ }
119
+ }
120
+ }
121
+
122
+ if (req.params) {
123
+ req._requestParams = Object.assign(req.params, req._requestParams);
124
+ }
125
+
126
+ apiUtil$1.setParamsFunctions(req._requestParams);
127
+ }
128
+
129
+ return req._requestParams;
130
+ }
131
+
132
+ static extractTokenData(req) {
133
+ if (req.tokenData) {
134
+ return req.tokenData;
135
+ }
136
+
137
+ let params = apiUtil$1.extractParams(req);
138
+ let tokenData = {
139
+ apiKey: req.headers[hnApiKey] || params[pnApiKey],
140
+ apiSecret: req.headers[hnApiSecret] || params[pnApiSecret],
141
+ clientIp: apiUtil$1.getClientIp(req)
142
+ };
143
+ return tokenData;
144
+ }
145
+ /**
146
+ * 为从传入请求中解出的参数对象设置一些函数属性,包括 asNumber, asBool
147
+ * @param params
148
+ */
149
+
150
+
151
+ static setParamsFunctions(params) {
152
+ ppUtil$4.defUnenumProp(params, "asNumber", function (name, minValue, maxValue, defaultValue) {
153
+ // if (!this.hasOwnProperty(name)) // {} 定义的对象没有 hasOwnProperty 函数
154
+ if (this[name] === undefined) return defaultValue;
155
+ let result = +this[name];
156
+
157
+ if (typeof result !== "number" || result < minValue || result > maxValue) {
158
+ throw [err$1.INVALID_PARAM, `参数 ${name} 必须是 ${minValue} ~ ${maxValue} 之间的数字`];
159
+ }
160
+
161
+ return result;
162
+ });
163
+ ppUtil$4.defUnenumProp(params, "asBool", function (name, defaultValue) {
164
+ if (this[name] === undefined) return defaultValue;
165
+ let result = JSON.parse(this[name]);
166
+ return !!result;
167
+ });
168
+ }
169
+ /**
170
+ * 将返回结果转向到指定地址或者通过response发送返回结果
171
+ * @param res
172
+ * @param redirectUrl
173
+ * @param data
174
+ */
175
+
176
+
177
+ static sendOrRedirect(res, redirectUrl, data) {
178
+ if (redirectUrl) {
179
+ redirectUrl = urlAppendParams(redirectUrl, data, true);
180
+ res.redirect(redirectUrl);
181
+ } else {
182
+ res.send(data);
183
+ }
184
+ }
185
+ /**
186
+ * 生成 API 成功返回结果
187
+ * @param data
188
+ * @param req
189
+ * @returns {{datetime: Date, success: boolean, stateCode: number, message: string}}
190
+ */
191
+
192
+
193
+ static apiSuccess(data, req) {
194
+ let response = {
195
+ success: true,
196
+ stateCode: 0,
197
+ message: '',
198
+ datetime: new Date()
199
+ };
200
+
201
+ if (req && req.headers) {
202
+ let userAgent = req.headers["user-agent"];
203
+
204
+ if (userAgent && userAgent.startsWith("Postman")) {
205
+ response._elapse = (new Date().valueOf() - req.headers.timestamp) / 1000;
206
+ }
207
+ }
208
+
209
+ if (data && data._message_) {
210
+ response.message = data._message_;
211
+ delete data._message_;
212
+ }
213
+
214
+ response.data = data;
215
+ if (Array.isArray(data) && typeof data.recordCount != 'undefined') response.recordCount = data.recordCount;
216
+ return response;
217
+ }
218
+ /**
219
+ * 生成 API 失败返回结果
220
+ * @param error
221
+ * @param req
222
+ * @returns {*}
223
+ */
224
+
225
+
226
+ static apiFail(error, req) {
227
+ configNeeded();
228
+ let response = err$1.ERROR(error, err$1.errorLangParamFlag + ppUtil$4.getMsgLang(req));
229
+ response.datetime = new Date();
230
+
231
+ if (req && req.headers) {
232
+ let userAgent = req.headers["user-agent"];
233
+
234
+ if (userAgent && userAgent.startsWith("Postman")) {
235
+ response._elapse = (new Date().valueOf() - req.headers.timestamp) / 1000;
236
+ }
237
+ }
238
+
239
+ return response;
240
+ }
241
+ /**
242
+ * 生成面向服务商的API成功返回结果
243
+ * @param data
244
+ * @param req
245
+ * @returns {*}
246
+ */
247
+
248
+
249
+ static spoApiSucc(data, req) {
250
+ let params = apiUtil$1.extractParams(req);
251
+ return apiUtil$1.apiSuccess(data, req, params.spOrderNum);
252
+ }
253
+ /**
254
+ * 生成面向服务商的API失败返回结果
255
+ * @param error
256
+ * @param req
257
+ * @returns {*}
258
+ */
259
+
260
+
261
+ static spoApiFail(error, req) {
262
+ let params = apiUtil$1.extractParams(req);
263
+ return apiUtil$1.apiFail(error, req, params.spOrderNum);
264
+ }
265
+ /**
266
+ * API 服务结束,发送响应
267
+ * @param response
268
+ * @param promise
269
+ */
270
+
271
+
272
+ static sendResponse(response, promise) {
273
+ promise.then(function (data) {
274
+ if (!response.finished) {
275
+ try {
276
+ response.send(data);
277
+ } catch (e) {
278
+ console.log(`response.send 出错了,req.url: ${response.req.url}, response:`, response);
279
+ console.log("异常信息", e);
280
+ }
281
+ }
282
+ }, function (error) {
283
+ console.log('ERROR:', error);
284
+
285
+ if (!response.finished) {
286
+ response.send(error);
287
+ }
288
+ });
289
+ }
290
+ /**
291
+ * API 服务结束,包装数据并发送响应
292
+ * @param response
293
+ * @param promise
294
+ */
295
+
296
+
297
+ static async responseOf(response, promise) {
298
+ promise.then(function (data) {
299
+ // console.log('RES:', apiSuccess(data));
300
+ if (!response.finished) response.send(apiUtil$1.apiSuccess(data, response.req));
301
+ }, function (error) {
302
+ console.log('ERROR:', error);
303
+ if (!response.finished) response.send(apiUtil$1.apiFail(error, response.req));
304
+ });
305
+ }
306
+ /**
307
+ * 面向服务商的API结束,发送响应
308
+ * @param response
309
+ * @param promise
310
+ */
311
+
312
+
313
+ static async spoApiResponse(response, promise) {
314
+ promise.then(function (result) {
315
+ let responseData = apiUtil$1.spoApiSucc(result, response.req);
316
+
317
+ apiUtil$1._saveApiCallRec(response.req.apiCallRec, responseData);
318
+
319
+ if (!response.finished) response.send(responseData);
320
+ }, function (error) {
321
+ console.log('ERROR:', error);
322
+ let responseData = apiUtil$1.spoApiFail(error, response.req);
323
+
324
+ apiUtil$1._saveApiCallRec(response.req.apiCallRec, responseData);
325
+
326
+ if (!response.finished) response.send(responseData);
327
+ });
328
+ }
329
+ /**
330
+ * 从请求参数中获取查询参数
331
+ * @param req
332
+ * @param res
333
+ * @returns {*}
334
+ */
335
+
336
+
337
+ static getQueryOptions(req, res) {
338
+ req.headers.timestamp = new Date().valueOf(); // let options = {replacements: {}};
339
+
340
+ let options = {};
341
+ let parameters = apiUtil$1.extractParams(req);
342
+
343
+ for (let qryParam in parameters) {
344
+ if (qryParam !== 'token') {
345
+ if (['start', 'limit', 'orderby', 'orderBy'].indexOf(qryParam) >= 0) {
346
+ options[qryParam] = parameters[qryParam];
347
+ delete parameters[qryParam];
348
+ } // else
349
+ // options.replacements[qryParam] = parameters[qryParam];
350
+
351
+ }
352
+ }
353
+
354
+ if (options.limit && !options.start) {
355
+ options.start = 0;
356
+ }
357
+
358
+ if (options.orderby) {
359
+ options.orderBy = options.orderby;
360
+ } // options.__debug__ = req.headers['__debug__'] && req.headers['__debug__'] == "true";
361
+
362
+
363
+ options.replacements = parameters; // if (arguments.length > 1) //其后的每个参数是要求必须存在的参数名称
364
+ // {
365
+ // for(i=1; i<arguments.length; i++){
366
+ // var paramName = arguments[i];
367
+ // if (!qryOptions.replacements[paramName])
368
+ // error();
369
+ // }
370
+ // }
371
+
372
+ options.userInfo = req.userInfo;
373
+ return apiUtil$1.setOptionsPropFuncions(options, res);
374
+ }
375
+ /**
376
+ * 为API请求 options 设置属性
377
+ * @param options
378
+ * @param res
379
+ * @returns {{identifyLimit}|*}
380
+ */
381
+
382
+
383
+ static setOptionsPropFuncions(options, res) {
384
+ // if (!options.identifyLimit) {
385
+ // // 根据企业标识获取身份认证限制相关设置,如果没有传递企业标识,
386
+ // // 则尝试从options.companyInfo或options.contractOrder中获取
387
+ // Object.defineProperty(options, "companyId", {
388
+ // get: function () {
389
+ // var result;
390
+ // if (this.companyInfo) {
391
+ // result = this.companyInfo.companyId;
392
+ // } else if (this.contractOrder) {
393
+ // result = this.contractOrder.companyId;
394
+ // } else if (this._companyId) {
395
+ // result = this._companyId;
396
+ // }
397
+ // return result;
398
+ // }
399
+ // });
400
+ // Object.defineProperty(options, "identifyLimit", {
401
+ // get: function () {
402
+ // if (!this._identifyLimit) {
403
+ // // this._identifyLimit = ppUtil.waitPromise(_getIdentifyLimit(this.companyId));
404
+ // throw "options._identifyLimit 没有赋值";
405
+ // }
406
+ //
407
+ // return this._identifyLimit;
408
+ // },
409
+ // // configurable : true
410
+ // });
411
+ // }
412
+ if (res) {
413
+ Object.defineProperty(options, '_res', {
414
+ value: res,
415
+ enumerable: false
416
+ });
417
+ }
418
+
419
+ return options;
420
+ }
421
+ /**
422
+ * 从请求头获取token
423
+ * @param req
424
+ * @param res
425
+ * @param noErr
426
+ * @returns {Promise<*>}
427
+ */
428
+
429
+
430
+ static extractToken(req, res, noErr) {
431
+ configNeeded();
432
+
433
+ if (!req.accessToken) {
434
+ //检查post的信息或者url查询参数或者头信息
435
+ let token = req.headers[hnToken] || req.headers['x-access-token']; //向后兼容
436
+
437
+ if (!token) {
438
+ let params = apiUtil$1.extractParams(req);
439
+ token = params[pnToken];
440
+
441
+ if (token) {
442
+ delete params[pnToken];
443
+ } else if (params.token) {
444
+ token = params.token; //向后兼容
445
+
446
+ delete params.token;
447
+ } else {
448
+ // 如果没有token,则返回错误
449
+ console.log(err$1.TOKEN_NEEDED);
450
+
451
+ if (res) {
452
+ res.send(err$1.ERROR(err$1.TOKEN_NEEDED));
453
+ } else if (!noErr) {
454
+ throw err$1.TOKEN_NEEDED;
455
+ }
456
+ }
457
+ }
458
+
459
+ req.accessToken = token;
460
+ }
461
+
462
+ return req.accessToken;
463
+ }
464
+ /**
465
+ * 检查是不是内部调用,应用系统可替换此函数实施更隐秘的检查
466
+ * @param req
467
+ * @returns {Promise<boolean|undefined>}
468
+ */
469
+
470
+
471
+ static async checkInternalToken(req) {
472
+ // return await checkInternalToken(req);
473
+ const params = apiUtil$1.extractParams(req);
474
+ req.accessToken = req.accessToken || apiUtil$1.extractToken(req);
475
+
476
+ if (req.accessToken === MD5(ppUtil$4.idNumDisturbing)) {
477
+ //todo: 检查IP
478
+ params.__internal__ = true;
479
+ req.ignoreToken = true; // if (params.idNum || params.personId) {
480
+ // return queryPersonUser(params.idNum, params.personId)
481
+ // .then(async userInfo => {
482
+ // if (!userInfo) {
483
+ // // console.log('queryPersonUser error.', e);
484
+ // throw err.TOKEN_INVALID;
485
+ // }
486
+ // if (req.tokenValidater) await req.tokenValidater(userInfo, req)
487
+ // req.userInfo = userInfo;
488
+ // return true
489
+ // })
490
+ // } else {
491
+ // return true
492
+ // }
493
+
494
+ return true;
495
+ } else {
496
+ // console.log('token error.', req.accessToken);
497
+ throw err$1.TOKEN_INVALID;
498
+ }
499
+ }
500
+ /**
501
+ * 检查请求是否存在合法的token,若不存在则抛出异常
502
+ * @param req
503
+ * @returns {Promise<void>}
504
+ */
505
+
506
+
507
+ static async checkRequestToken(req) {
508
+ req.accessToken = req.accessToken || apiUtil$1.extractToken(req);
509
+ const tokenKey = apiUtil$1.userTokenStoreKey(req.accessToken);
510
+ const expireTime = apiUtil$1.tokenExpireTime(req);
511
+ return await apiUtil$1.restoreTokenData(tokenKey, expireTime).then(async function (data) {
512
+ req.userInfo = apiUtil$1.setUserIdNo(data, data._idNo);
513
+ if (req.tokenValidater) await req.tokenValidater(req.userInfo, req);
514
+ return true;
515
+ }, async function (e) {
516
+ // 如果给定的token不存在,看看是不是平台内部调用
517
+ return await apiUtil$1.checkInternalToken(req);
518
+ });
519
+ }
520
+ /**
521
+ * 检查是不是调试模式
522
+ * @param req
523
+ * @returns {*|boolean|boolean}
524
+ */
525
+
526
+
527
+ static isDebugMode(req) {
528
+ if (req.__debug__ === undefined) {
529
+ let dbgToken = req.headers['__debug__'] || req.headers[apiUtil$1.debugFlag];
530
+
531
+ if (dbgToken) {
532
+ let envId = process.env.ECS_DEPLOY_ID;
533
+ req.__debug__ = dbgToken && dbgToken === MD5(req.headers.timestamp, ppUtil$4.commonHashDisturbing) && (envId === "florist_longdan" || envId === "shuzi");
534
+ } else {
535
+ req.__debug__ = false;
536
+ } // console.log("__debug__:", req.__debug__, "dbgToken:", dbgToken);
537
+
538
+ }
539
+
540
+ return req.__debug__; // return req.headers["postman-token"] || req.headers['__debug__'] && req.headers['__debug__'] == "true";
541
+ }
542
+ /**
543
+ * 检查是不是测试模式
544
+ * @param req
545
+ * @returns {*|boolean}
546
+ */
547
+
548
+
549
+ static isTestMode(req) {
550
+ if (req.__postman__ === undefined) {
551
+ let dbgToken = req.headers["__postman__"] || req.headers[apiUtil$1.testFlag];
552
+
553
+ if (dbgToken) {
554
+ let envId = process.env.ECS_DEPLOY_ID;
555
+ let testToken = MD5(req.headers.timestamp, apiUtil$1.extractToken(req, null, true) || req.headers.apikey);
556
+ req.__postman__ = dbgToken === testToken && (envId.indexOf("myfacesign.com") < 0 || envId.indexOf(".dev.") > 0);
557
+ } else {
558
+ req.__postman__ = false;
559
+ }
560
+ }
561
+
562
+ return req.__postman__;
563
+ }
564
+ /**
565
+ * 获取令牌过期时长
566
+ * @param req
567
+ * @returns {any}
568
+ */
569
+
570
+
571
+ static tokenExpireTime(req) {
572
+ return apiUtil$1.isDebugMode(req) ? 30 * 24 * 60 * 60 : apiUtil$1.isTestMode(req) ? 4 * 60 * 60 : appSetting$1.tokenExpireTime;
573
+ }
574
+ /**
575
+ * 获取用户令牌保存键
576
+ * @param token
577
+ * @returns {string}
578
+ */
579
+
580
+
581
+ static userTokenStoreKey(token) {
582
+ return "ut_" + token;
583
+ }
584
+ /**
585
+ * 获取机构令牌保存键
586
+ * @param token
587
+ * @returns {string}
588
+ */
589
+
590
+
591
+ static apiTokenStoreKey(token) {
592
+ return "api_" + token;
593
+ }
594
+ /**
595
+ * 判断是不是香港身份证
596
+ * @param idNum
597
+ * @returns {boolean}
598
+ */
599
+
600
+
601
+ static checkIsHKIC(idNum) {
602
+ return idNum.length === 8;
603
+ }
604
+ /**
605
+ * 将身份证号码暂存到用户信息中
606
+ * @param userInfo
607
+ * @param idNum
608
+ * @returns {*}
609
+ */
610
+
611
+
612
+ static setUserIdNo(userInfo, idNum) {
613
+ if (userInfo && idNum) {
614
+ userInfo._idNo = idNum;
615
+ userInfo.isHKIC = apiUtil$1.checkIsHKIC(idNum);
616
+ }
617
+
618
+ return userInfo;
619
+ }
620
+ /**
621
+ * 暂存令牌
622
+ * @param token
623
+ * @param tokenData
624
+ * @param dataId
625
+ * @param req
626
+ * @returns {Promise<void>}
627
+ */
628
+
629
+
630
+ static async storeToken(token, tokenData, dataId, req) {
631
+ // let timeout = tokenData.clientIp.substring(0, 8) == "192.168." ? 90 * 24 : 1;
632
+ let timeout = apiUtil$1.tokenExpireTime(req);
633
+
634
+ if (req.certPublicKey) {
635
+ tokenData.certPublicKey = req.certPublicKey;
636
+ }
637
+
638
+ kvStorage.storeObj(token, tokenData, timeout);
639
+
640
+ if (dataId) {
641
+ kvStorage.restoreValue("token_" + dataId).then(function (oldToken) {
642
+ if (oldToken !== token) {
643
+ kvStorage.unstoreValue(oldToken);
644
+ } else {
645
+ dataId = "";
646
+ }
647
+ }, function (e) {}).then(() => {
648
+ if (dataId !== "") kvStorage.storeValue("token_" + dataId, token, timeout);
649
+ });
650
+ }
651
+ }
652
+ /**
653
+ * 恢复令牌数据
654
+ * @param accessToken
655
+ * @param expireTime
656
+ * @returns {Promise<any>}
657
+ */
658
+
659
+
660
+ static async restoreTokenData(accessToken, expireTime) {
661
+ return await kvStorage.restoreObj(accessToken, expireTime);
662
+ }
663
+ /**
664
+ * 创建 API 调用记录
665
+ * @param tokenData
666
+ * @param req
667
+ * @returns {any}
668
+ */
669
+
670
+
671
+ static createApiCallRec(tokenData, req) {
672
+ if (!req.apiCallRec) {
673
+ if (req.apiCallRecId) {
674
+ return dbQueryOne(dbSql.loadApiUsage, {
675
+ replacements: {
676
+ id: req.apiCallRecId
677
+ }
678
+ }).then(rec => {
679
+ req.apiCallRec = rec;
680
+ return req.apiCallRec;
681
+ });
682
+ } else {
683
+ let params = extractParams(req); // let contentLength = parseInt(req.headers["content-length"]) || 0;
684
+
685
+ let rec = {
686
+ id: newGuid(),
687
+ companyId: tokenData.apiKey || '',
688
+ orderId: params.orderId || '',
689
+ signerId: params.signerId || '',
690
+ userId: params.userId || '',
691
+ contractName: params.contractName || '',
692
+ spOrderNum: params.spOrderNum || '',
693
+ notifyUri: params.notifyUri || '',
694
+ fileName: params.fileName || '',
695
+ fileHash: params.fileHash || '',
696
+ fileKeyHash: params.fileKeyHash || '',
697
+ fileSignedHash: params.fileSignedHash || '',
698
+ createTime: new Date(),
699
+ secret: tokenData.apiSecret || '',
700
+ fromIp: tokenData.clientIp || '',
701
+ method: req.method,
702
+ uri: req.route.path,
703
+ urlParams: req.url.split("?")[1] || "",
704
+ contentType: (req.headers["content-type"] || '').substring(0, 45),
705
+ // body: contentLength < 500 ? req.rawBody || '' : 'lob data, size:' + contentLength,
706
+ body: _getBodyLogStr(req),
707
+ resultCode: params.resultCode || '0',
708
+ resultInfo: params.resultInfo || '',
709
+ resultData: params.resultData || ''
710
+ };
711
+
712
+ if (rec.secret !== "") {
713
+ rec.secret = ppUtil$4.getEncAse192(rec.secret);
714
+ }
715
+
716
+ req.apiCallRec = rec;
717
+ }
718
+ }
719
+
720
+ return req.apiCallRec;
721
+ }
722
+ /**
723
+ * 查询机构信息
724
+ * @param companyId
725
+ * @param nullable
726
+ * @returns {Promise<null|*>}
727
+ */
728
+
729
+
730
+ static async queryCompanyInfo(companyId, nullable) {
731
+ return await dbUtil.dbQueryOne(dbSql.queryCompanyInfo, {
732
+ companyId
733
+ }, nullable);
734
+ }
735
+ /**
736
+ * 获取企业有效证书
737
+ * @param companyId: 企业标识
738
+ */
739
+
740
+
741
+ static async getCompanyCertificate(companyId) {
742
+ let certInfo = {
743
+ // 正式启用的证书
744
+ certLiving: null,
745
+ certLivingId: '',
746
+ // 备用证书
747
+ certSpare: null,
748
+ certSpareId: ''
749
+ };
750
+ return await dbUtil.dbQueryOne(dbSql.queryCertDataByOwner, {
751
+ ownerId: companyId,
752
+ applyId: "company"
753
+ }, false).then(certRec => {
754
+ // console.log('当前证书:\n', certRec);
755
+ // checkCertStatus(certRec);
756
+ let certData = JSON.parse(certRec.certBody);
757
+ let pubKeyData = Buffer.from(certData.cert, "base64").toString(); // 公司正式证书
758
+
759
+ certInfo.certLiving = pubKeyData;
760
+ certInfo.certLivingId = certRec.id;
761
+ return dbUtil.dbQueryOne(dbSql.queryCertDataByOwner, {
762
+ ownerId: companyId,
763
+ applyId: "company_spare"
764
+ }, false).then(certRec1 => {
765
+ // console.log('备用证书:\n', certRec1);
766
+ // checkCertStatus(certRec1);
767
+ let certData1 = JSON.parse(certRec1.certBody);
768
+ let pubKeyData1 = Buffer.from(certData1.cert, "base64").toString(); // 公司备用证书
769
+
770
+ certInfo.certSpare = pubKeyData1;
771
+ certInfo.certSpareId = certRec1.id;
772
+ }).catch(e => {
773
+ // console.log('获取备用证书失败。', e);
774
+ certInfo.certSpare = null;
775
+ });
776
+ }).then(() => {
777
+ return certInfo;
778
+ }).catch(e => {
779
+ console.log('获取企业证书失败:\n', e);
780
+ throw [err$1.ACCESS_REFUSED, `获取企业证书失败:${err$1.ERROR(e).message}`];
781
+ });
782
+ }
783
+ /**
784
+ * 验证API调用签名
785
+ * @param tokenData
786
+ * @param req
787
+ * @returns {Promise<*|boolean>}
788
+ */
789
+
790
+
791
+ static async verifyApiSignature(tokenData, req) {
792
+ try {
793
+ if (!req.headers.timestamp) {
794
+ throw [err$1.ACCESS_REFUSED, `必须在请求头中设置时戳`];
795
+ }
796
+
797
+ let timestamp = parseInt(req.headers.timestamp);
798
+ let currentTime = new Date().valueOf();
799
+ let maxTimeDiff = apiUtil$1.isDebugMode(req) ? 7 * 24 * 3600 : apiUtil$1.isTestMode(req) ? 4 * 3600 : 100; // 100
800
+
801
+ if (timestamp.toString() == "NaN" || currentTime < timestamp - 5000 || currentTime - timestamp > maxTimeDiff * 1000) {
802
+ throw [err$1.ACCESS_REFUSED, `时戳(${timestamp})无效,当前时戳:${currentTime},时差 ${(currentTime - timestamp) / 1000}秒`];
803
+ }
804
+
805
+ let signature = req.headers.signature;
806
+
807
+ if (!signature) {
808
+ throw [err$1.ACCESS_REFUSED, `必须在请求头中提供签名`];
809
+ }
810
+
811
+ let signData = apiUtil$1.extractToken(req, null, true) || tokenData.apiKey;
812
+ signData += timestamp;
813
+
814
+ if (apiUtil$1.isDebugMode(req) || apiUtil$1.isTestMode(req)) {
815
+ let publicKey = req.headers.publickey || req.body.publicKey || req.query.publicKey;
816
+
817
+ if (publicKey) {
818
+ publicKey = decodeURIComponent(publicKey);
819
+ tokenData.certPublicKey = publicKey;
820
+ req.certPublicKey = publicKey;
821
+ }
822
+ }
823
+
824
+ if (tokenData.certPublicKey) {
825
+ let verifyResult = doVerify(signData, signature, tokenData.certPublicKey);
826
+ return await verifyResult;
827
+ }
828
+
829
+ return apiUtil$1.getCompanyCertificate(tokenData.apiKey).then(info => {
830
+ tokenData.certPublicKey = info.certLiving;
831
+ tokenData.certPublicKeySpare = info.certSpare;
832
+ tokenData.certLivingId = info.certLivingId;
833
+ tokenData.certSpareId = info.certSpareId;
834
+ req.certPublicKey = info.certLiving;
835
+ let token = apiUtil$1.extractToken(req, null, true);
836
+
837
+ if (token) {
838
+ apiUtil$1.storeToken(apiUtil$1.apiTokenStoreKey(token), tokenData, tokenData.apiKey, req);
839
+ }
840
+ }).then(() => {
841
+ return doVerify(signData, signature, tokenData.certPublicKey);
842
+ });
843
+ } catch (e) {
844
+ // return Promise.reject(e);
845
+ throw e;
846
+ }
847
+
848
+ function doVerify(signData, signature) {
849
+ let verify = crypto.createVerify('SHA256');
850
+ verify.write(signData);
851
+ verify.end();
852
+ let verifyOK = false;
853
+
854
+ try {
855
+ // 先用正式证书验证
856
+ verifyOK = verify.verify(tokenData.certPublicKey, signature, 'base64');
857
+ } catch (e) {
858
+ console.log("SPO服务签名验证异常(正式证书), ", e);
859
+ verifyOK = false;
860
+
861
+ if (!tokenData.certPublicKeySpare) {
862
+ throw {
863
+ eo: err$1.ACCESS_REFUSED,
864
+ msgArgv: "签名验证异常",
865
+ data: e
866
+ };
867
+ }
868
+ }
869
+
870
+ if (!verifyOK && tokenData.certPublicKeySpare) {
871
+ try {
872
+ // 再用备用证书验证
873
+ let verifySpare = crypto.createVerify('SHA256');
874
+ verifySpare.write(signData);
875
+ verifySpare.end();
876
+ verifyOK = verifySpare.verify(tokenData.certPublicKeySpare, signature, 'base64');
877
+
878
+ if (verifyOK) {
879
+ // 备用证书验证成功了,则将备用证书替换为正式证书
880
+ console.log(`公司(${tokenData.apiKey})备用证书验签成功,正式启用...`);
881
+ return dbUtil.dbTrans(trans => {
882
+ let p1 = dbUtil.dbExec(dbSql.deleteCertRecById, {
883
+ replacements: {
884
+ id: tokenData.certLivingId
885
+ },
886
+ transaction: trans
887
+ });
888
+ let p2 = dbUtil.dbExec(dbSql.spareCertToLiving, {
889
+ replacements: {
890
+ id: tokenData.certSpareId
891
+ },
892
+ transaction: trans
893
+ });
894
+ return Promise.all([p1, p2]);
895
+ }).then(() => {
896
+ tokenData.certPublicKey = tokenData.certPublicKeySpare;
897
+ delete tokenData.certLivingId;
898
+ delete tokenData.certSpareId;
899
+ delete tokenData.certPublicKeySpare;
900
+ let token = apiUtil$1.extractToken(req);
901
+
902
+ if (token) {
903
+ apiUtil$1.storeToken(apiTokenStoreKey(token), tokenData, tokenData.apiKey, req);
904
+ }
905
+
906
+ console.log(`公司(${tokenData.apiKey})备用证书成功转换为正式证书`);
907
+ });
908
+ }
909
+ } catch (e) {
910
+ console.log("SPO服务签名验证异常(备用证书), ", e);
911
+ throw {
912
+ eo: err$1.ACCESS_REFUSED,
913
+ msgArgv: "签名验证异常(spare)",
914
+ data: e
915
+ };
916
+ }
917
+ }
918
+
919
+ if (!verifyOK) {
920
+ console.log("SPO服务签名验证失败, tokenData: ", tokenData);
921
+ throw [err$1.ACCESS_REFUSED, "签名验证未通过"];
922
+ }
923
+
924
+ return verifyOK;
925
+ }
926
+ }
927
+ /**
928
+ * 检查API调用之合法性
929
+ * @param tokenData
930
+ * @param req
931
+ * @returns {Promise<any>}
932
+ */
933
+
934
+
935
+ static async checkApiCallValid(tokenData, req) {
936
+ if (!tokenData.companyInfo) {
937
+ tokenData.companyInfo = await apiUtil$1.queryCompanyInfo(tokenData.apiKey, true).catch(e => {
938
+ console.log("执行企业信息查询发生异常", e);
939
+ throw [err$1.API_KEY_INVALID, "执行企业信息查询发生异常:" + e.message || ""];
940
+ });
941
+ }
942
+
943
+ const companyInfo = tokenData.companyInfo;
944
+
945
+ if (companyInfo != null) {
946
+ let secret = apiUtil$1._getApiSecret(tokenData.apiKey);
947
+
948
+ if (secret !== tokenData.apiSecret) throw err$1.API_SCREPT_INVALID; // 不再检查 IP 白名单,改为验证证书签名
949
+ // console.log("fromIp:", tokenData.clientIp, "ipWhiteList:", companyInfo.ipWhiteList);
950
+ // let whiteList = companyInfo.ipWhiteList || "";
951
+ // // 没有设置ip白名单的就不检查了
952
+ // if (whiteList == "" || ipMatched(tokenData.clientIp, whiteList + ",127.0.0.1,1"))
953
+
954
+ if (apiUtil$1.signatureVerified()) return companyInfo;
955
+ return apiUtil$1.verifyApiSignature(tokenData, req).then(x => {
956
+ return companyInfo;
957
+ }, e => {
958
+ throw e;
959
+ });
960
+ }
961
+
962
+ throw [err$1.API_KEY_INVALID, tokenData.apiKey];
963
+ }
964
+ /**
965
+ * 检查令牌数据是否存在
966
+ * @param token
967
+ * @returns {*}
968
+ */
969
+
970
+
971
+ static tokenDataExist(token) {
972
+ return kvStorage.stored(token);
973
+ }
974
+
975
+ static parametersOK(params) {
976
+ configNeeded();
977
+ let paramSufix = params._param_sufix || "";
978
+
979
+ for (let i = 1; i < arguments.length; i++) {
980
+ let paramName = arguments[i];
981
+ let paramExists = false;
982
+
983
+ if (paramName.includes("/")) {
984
+ let names = paramName.split("/"); // if (params[names[0]]) {
985
+ // paramExists = true;
986
+ // } else {
987
+ // if (params[names[1]]) {
988
+ // paramExists = true;
989
+ // params[names[0]] = params[names[1]];
990
+ // delete params[names[1]];
991
+ // }
992
+ // }
993
+
994
+ for (let ind in names) {
995
+ let name = names[ind];
996
+
997
+ if (typeof params[name] != 'undefined') {
998
+ paramExists = true;
999
+ break;
1000
+ }
1001
+
1002
+ if (paramSufix != "" && typeof params[name + paramSufix] != 'undefined') {
1003
+ paramExists = true;
1004
+ break;
1005
+ }
1006
+ }
1007
+
1008
+ paramName = `${paramName} 之一`;
1009
+ } else {
1010
+ paramExists = typeof params[paramName] != 'undefined' || typeof params[paramName + paramSufix] != 'undefined';
1011
+ }
1012
+
1013
+ if (!paramExists) return ppUtil$4.errorPormise(err$1.ERROR(err$1.PARAMETER_NEEDED, paramName));
1014
+ }
1015
+
1016
+ return Promise.resolve(paramSufix);
1017
+ }
1018
+ /**
1019
+ * 获取客户端IP地址
1020
+ * @param req
1021
+ * @returns {*|string|string}
1022
+ */
1023
+
1024
+
1025
+ static getClientIp(req) {
1026
+ let ip = req.headers["x-real-ip"] || req.headers["x-true-ip"] || req.headers['x-forwarded-for'] || req.headers['x-forward-for'] || req.connection.remoteAddress || req.socket.remoteAddress || req.headers['host'] || ""; // console.log("Request IP:", ip, "req: ", req);
1027
+
1028
+ if (ip.indexOf(",") >= 0) {
1029
+ ip = ip.split(',')[0];
1030
+ }
1031
+
1032
+ if (ip.indexOf(":") >= 0) {
1033
+ ip = ip.substring(ip.lastIndexOf(':') + 1);
1034
+ }
1035
+
1036
+ return ip;
1037
+ }
1038
+ /**
1039
+ * 获取与本机一起提供服务的所有主机
1040
+ * @param params
1041
+ * @returns {{port: (number|number), hosts: [string]}}
1042
+ */
1043
+
1044
+
1045
+ static getEnvHosts(params) {
1046
+ configNeeded();
1047
+ return {
1048
+ hosts: appSetting$1.serverHosts || ["localhost"],
1049
+ port: appSetting$1.listenPort || +params.port || 8443
1050
+ };
1051
+ }
1052
+ /**
1053
+ * 检查指定的host和发送请求的ip是不是自己的ip
1054
+ * @param host
1055
+ * @param req
1056
+ * @returns {Promise<*>}
1057
+ */
1058
+
1059
+
1060
+ static async hostIsMySelf(host, req) {
1061
+ let clientIp = apiUtil$1.getClientIp(req);
1062
+ return ppUtil$4.getMyIp({
1063
+ hosts: [host, clientIp]
1064
+ });
1065
+ }
1066
+ /**
1067
+ * 检查是否应该把请求转发到其它服务器,若是则转发
1068
+ * @param options
1069
+ * @returns {Promise<boolean>}
1070
+ */
1071
+
1072
+
1073
+ static async checkForwardsHost(options) {
1074
+ configNeeded();
1075
+ const params = options.replacements;
1076
+ const myEnvHosts = apiUtil$1.getEnvHosts(params);
1077
+ const myIp = ppUtil$4.getMyIp();
1078
+ const host = params.host || myIp;
1079
+ if (!myEnvHosts.hosts.contains(host)) throw [err$1.ACCESS_REFUSED, `环境${conf$2.envId}貌似无此主机:${params.host}`];
1080
+
1081
+ if (!apiUtil$1.hostIsMySelf(host, options._res.req)) {
1082
+ let result = await apiUtil$1.forwardsTo(host, myEnvHosts.port, params, options._res.req, myIp);
1083
+
1084
+ options._res.send(result);
1085
+
1086
+ return true;
1087
+ }
1088
+
1089
+ return false;
1090
+ }
1091
+ /**
1092
+ * 将收到的请求转发到另一台主机
1093
+ * @param anotherIp
1094
+ * @param port
1095
+ * @param params
1096
+ * @param req
1097
+ * @param lanClient
1098
+ * @returns {Promise<*>}
1099
+ */
1100
+
1101
+
1102
+ static async forwardsTo(anotherIp, port, params, req, lanClient) {
1103
+ let url = anotherIp.indexOf("://") > 0 ? anotherIp : `${req.headers.scheme}://${anotherIp}:${port}${req.originalUrl}`;
1104
+
1105
+ if (url.indexOf("?") > 0) {
1106
+ url = url.substring(0, url.indexOf("?"));
1107
+ }
1108
+
1109
+ let reqOptions = {
1110
+ method: req.method,
1111
+ url: url,
1112
+ data: params
1113
+ };
1114
+ let result = await netUtil$1.apiRequest(reqOptions);
1115
+
1116
+ if (result.status !== 200) {
1117
+ console.log(`访问 ${reqOptions.url} 出错`, result.status, result.res.statusMessage);
1118
+ throw [err$1.EXCEPTION, `[${result.status}] - ${result.res.statusMessage}`];
1119
+ }
1120
+
1121
+ return result.data;
1122
+ }
1123
+ /**
1124
+ * 解析配置项路径
1125
+ * @param keyPath
1126
+ * @returns {{parent: null, parentKey: string, value, key: string}}
1127
+ */
1128
+
1129
+
1130
+ static parseCfgPath(keyPath) {
1131
+ let keys = Array.isArray(keyPath) ? keyPath : keyPath.split(".");
1132
+ let parentKey = "";
1133
+ let key = "config";
1134
+ let value = conf$2;
1135
+ let parent = null;
1136
+
1137
+ for (let i = 0; i < keys.length; i++) {
1138
+ parent = value;
1139
+ parentKey += (parentKey ? "." : "") + key;
1140
+ key = keys[i];
1141
+ value = parent[key];
1142
+
1143
+ if (value === undefined) {
1144
+ throw [err$1.INVALID_PARAM, `无此配置项: ${key}`];
1145
+ }
1146
+ }
1147
+
1148
+ return {
1149
+ parent,
1150
+ parentKey,
1151
+ key,
1152
+ value
1153
+ };
1154
+ } //#endregion
1155
+ //region ====中间件
1156
+
1157
+ /**
1158
+ * 检查令牌,若存在则将其的用户信息置入req,否则返回错误信息
1159
+ */
1160
+
1161
+
1162
+ static async $checkToken(req, res, next) {
1163
+ try {
1164
+ await apiUtil$1.checkRequestToken(req);
1165
+ await next();
1166
+ } catch (e) {
1167
+ res.send(err$1.ERROR(e));
1168
+ }
1169
+
1170
+ return false;
1171
+ }
1172
+ /**
1173
+ * 检查令牌,若存在则将其用户信息置入req
1174
+ */
1175
+
1176
+
1177
+ static async $getToken(req, res, next) {
1178
+ function extractToken(req, res) {
1179
+ if (!req.accessToken) {
1180
+ //检查post的信息或者url查询参数或者头信息
1181
+ let token = req.headers["access_token"] || req.headers['x-access-token']; //向后兼容
1182
+
1183
+ if (!token) {
1184
+ let params = apiUtil$1.extractParams(req);
1185
+ token = params["access_token"];
1186
+
1187
+ if (token) {
1188
+ delete params["access_token"];
1189
+ } else if (params.token) {
1190
+ token = params.token; //向后兼容
1191
+
1192
+ delete params.token; // } else if (res) {
1193
+ // // 如果没有token,则返回错误
1194
+ // console.log(err.TOKEN_NEEDED);
1195
+ // res.send(err.ERROR(err.TOKEN_NEEDED));
1196
+ }
1197
+ }
1198
+
1199
+ req.accessToken = token;
1200
+ }
1201
+
1202
+ return req.accessToken;
1203
+ }
1204
+
1205
+ try {
1206
+ if (extractToken(req, res)) {
1207
+ await apiUtil$1.restoreTokenData(apiUtil$1.userTokenStoreKey(req.accessToken), apiUtil$1.tokenExpireTime(req)).then(function (data) {
1208
+ req.userInfo = apiUtil$1.setUserIdNo(data, data._idNo);
1209
+ }, function (e) {//no token
1210
+ });
1211
+ }
1212
+
1213
+ return true;
1214
+ } catch (e) {
1215
+ res.send(err$1.ERROR(e));
1216
+ return false;
1217
+ }
1218
+ }
1219
+ /**
1220
+ * 标识此请求已经完成了签名验证或者无需进行签名验证
1221
+ */
1222
+
1223
+
1224
+ static $signatureVerified(req, res, next) {
1225
+ req.signatureVerified = true;
1226
+ return true;
1227
+ }
1228
+ /**
1229
+ * 标识此请求是从前端发过来的,比如移动端、PC浏览器等,区别于SPO一般的服务端后台请求。
1230
+ * 如果在请求参数中包含有签名参数,则将其移到请求头中
1231
+ */
1232
+
1233
+
1234
+ static $isMobile(req, res, next) {
1235
+ req.isMobile = true;
1236
+
1237
+ if (!req.signatureVerified) {
1238
+ let params = apiUtil$1.extractParams(req);
1239
+ moveProperty(params, req.headers, "access_token");
1240
+ moveProperty(params, req.headers, "timestamp");
1241
+
1242
+ if (moveProperty(params, req.headers, "signature")) {
1243
+ req.headers.signature = decodeURIComponent(req.headers.signature);
1244
+ }
1245
+ }
1246
+
1247
+ next();
1248
+ }
1249
+ /**
1250
+ * 检查企业 API 调用合法性 (apiKey, apiSecret)
1251
+ * @param req
1252
+ * @param res
1253
+ * @param next
1254
+ */
1255
+
1256
+
1257
+ static $checkApiKeyOld(req, res, next) {
1258
+ //检查post的信息或者url查询参数或者头信息
1259
+ let tokenData = apiUtil$1.extractTokenData(req);
1260
+ let params = apiUtil$1.extractParams(req);
1261
+ apiUtil$1.createApiCallRec(tokenData, req);
1262
+ let errResponse = null;
1263
+
1264
+ if (!tokenData.clientIp) {
1265
+ errResponse = apiUtil$1.spoApiFail(err$1.GET_CLIENTIP_FAIL, req);
1266
+ } else if (!tokenData.apiKey) {
1267
+ errResponse = apiUtil$1.spoApiFail([err$1.PARAMETER_NEEDED, "apiKey"], req);
1268
+ } else if (!tokenData.apiSecret) {
1269
+ errResponse = apiUtil$1.spoApiFail([err$1.PARAMETER_NEEDED, "apiSecret"], req);
1270
+ }
1271
+
1272
+ if (errResponse != null) {
1273
+ apiUtil$1._saveApiCallRec(req.apiCallRec, errResponse);
1274
+
1275
+ apiUtil$1.sendOrRedirect(req, res, errResponse);
1276
+ } else {
1277
+ apiUtil$1.checkApiCallValid(tokenData, req).then(companyInfo => {
1278
+ params.companyId = params.companyId || companyInfo.companyId;
1279
+ req.companyInfo = companyInfo;
1280
+ next();
1281
+ }, e => {
1282
+ console.log('apiCallInvalid:', e);
1283
+ let errResponse = spoApiFail(e, req);
1284
+
1285
+ apiUtil$1._saveApiCallRec(req.apiCallRec, errResponse);
1286
+
1287
+ apiUtil$1.sendOrRedirect(req, res, errResponse);
1288
+ });
1289
+ }
1290
+ }
1291
+ /**
1292
+ * 检查机构令牌
1293
+ */
1294
+
1295
+
1296
+ static $checkApiKey(req, res, next) {
1297
+ if (req.ignoreToken) {
1298
+ next();
1299
+ return;
1300
+ }
1301
+
1302
+ let accessToken = apiUtil$1.extractToken(req);
1303
+
1304
+ if (!accessToken) {
1305
+ res.send(apiUtil$1.spoApiFail(err$1.TOKEN_NEEDED, req)); // apiUtil.sendOrRedirect(req, res, spoApiFail(err.TOKEN_NEEDED, req));
1306
+
1307
+ return;
1308
+ }
1309
+
1310
+ apiUtil$1.restoreTokenData(apiUtil$1.apiTokenStoreKey(accessToken)).then(p => {
1311
+ // req.headers[hnApiKey] = p.apiKey || '';
1312
+ // req.headers[hnApiSecret] = p.apiSecret || '';
1313
+ if (req.isMobile) {
1314
+ // GET 请求的应该都是H5页面,由手机前端发起,需要把headers中的请求方ip换成服务端的
1315
+ // todo: 如何在API访问记录中记住请求者(手机端)的真实IP
1316
+ req.headers['x-phone-ip'] = apiUtil$1.getClientIp(req);
1317
+ req.headers['x-real-ip'] = p.clientIp;
1318
+ } else {
1319
+ p.clientIp = apiUtil$1.getClientIp(req);
1320
+ }
1321
+
1322
+ req.isApiCall = true;
1323
+ req.tokenData = p;
1324
+ return apiUtil$1.$checkApiKeyOld(req, res, next);
1325
+ }).catch(e => {
1326
+ apiUtil$1.sendOrRedirect(req, res, apiUtil$1.spoApiFail(err$1.TOKEN_INVALID, req));
1327
+ });
1328
+ }
1329
+ /**
1330
+ * 检查请求令牌,允许个人用户令牌和机构令牌,若不存在或不合法,则返回错误信息
1331
+ * @param req
1332
+ * @param res
1333
+ * @param next
1334
+ * @returns {Promise<void|boolean|boolean|undefined>}
1335
+ */
1336
+
1337
+
1338
+ static async $checkTokenOrApiKey(req, res, next) {
1339
+ let accessToken = apiUtil$1.extractToken(req, res);
1340
+
1341
+ if (accessToken) {
1342
+ let tokenExist = await apiUtil$1.tokenDataExist(apiUtil$1.userTokenStoreKey(accessToken));
1343
+
1344
+ if (tokenExist) {
1345
+ return await apiUtil$1.$checkToken(req, res, next);
1346
+ }
1347
+
1348
+ tokenExist = await apiUtil$1.tokenDataExist(apiUtil$1.apiTokenStoreKey(accessToken));
1349
+
1350
+ if (tokenExist) {
1351
+ return apiUtil$1.$checkApiKey(req, res, next);
1352
+ } // 如果给定的token不存在,看看是不是平台内部调用
1353
+
1354
+
1355
+ return await apiUtil$1.checkInternalToken(req).catch(e => {
1356
+ res.send(apiUtil$1.apiFail(e, req));
1357
+ return false;
1358
+ });
1359
+ }
1360
+ } //#endregion
1361
+ //region ====一些通用服务功能
1362
+
1363
+ /**
1364
+ * 获取配置数据
1365
+ * @param options
1366
+ * @returns {Promise<boolean|*>}
1367
+ */
1368
+ // api/config/appSetting.ossEnabled
1369
+
1370
+
1371
+ static async getConfigValue(options) {
1372
+ configNeeded();
1373
+ const params = options.replacements;
1374
+ let item = params.item;
1375
+ delete params.item;
1376
+ if (await apiUtil$1.checkForwardsHost(options)) return true;
1377
+ let c = apiUtil$1.parseCfgPath(item);
1378
+ delete c.parent;
1379
+ c.host = ppUtil$4.getMyIp();
1380
+ return c;
1381
+ }
1382
+ /**
1383
+ * 设置配置数据
1384
+ * @param options
1385
+ * @returns {Promise<*>}
1386
+ */
1387
+
1388
+
1389
+ static async setConfigValue(options) {
1390
+ configNeeded();
1391
+ const params = options.replacements;
1392
+ let item = params.item;
1393
+ delete params.item; // if (await checkForwardsHost(options))
1394
+ // return true;
1395
+
1396
+ await apiUtil$1.parametersOK(params, "value");
1397
+ let c = apiUtil$1.parseCfgPath(item);
1398
+
1399
+ if (typeof c.value === "object") {
1400
+ throw [err$1.ACCESS_REFUSED, `暂不支持修改复杂配置`];
1401
+ } // c.oldValue = c.value;
1402
+
1403
+
1404
+ c.newValue = params.value;
1405
+ c.parent[c.key] = c.newValue;
1406
+ delete c.parent;
1407
+ c.host = ppUtil$4.getMyIp();
1408
+ return c; // 应用层自行处理多机同步
1409
+ } //#endregion
1410
+
1411
+
1412
+ }
1413
+
1414
+ function configNeeded() {
1415
+ if (!conf$2 || !err$1) {
1416
+ ppUtil$4.configNeeded();
1417
+ conf$2 = ppUtil$4.appConfig;
1418
+ appSetting$1 = conf$2.appSetting;
1419
+ err$1 = ppUtil$4.appErrCfg;
1420
+ }
1421
+ }
1422
+
1423
+ var ppUtilApi = apiUtil$1;
1424
+
1425
+ const fs = require$$0$2;
1426
+ const path = require$$1$1;
1427
+ const ppUtil$3 = require$$1.ppUtil;
1428
+ const redisUtil = require$$2.redisUtil;
1429
+ let conf$1, err; // const dbCheck = require('../dbupdate/dd-version');
1430
+
1431
+ /**
1432
+ * API服务启动时前置条件检查
1433
+ * ok = await preconditions
1434
+ * .setAppName(conf.thisApp)
1435
+ * .addCheckPromise(preconditions.checkExEnvSetting())
1436
+ * .addCheckPromise(preconditions.checkRedis())
1437
+ * .addCheckPromise(checkDatabase())
1438
+ * .addChecker(myChecker, args)
1439
+ * .checkAll()
1440
+ */
1441
+
1442
+ class preconditions$1 {
1443
+ static appName;
1444
+ static checkFunctions = [];
1445
+ static checkPromises = [];
1446
+
1447
+ static setAppName(aName) {
1448
+ ppUtil$3.configNeeded();
1449
+ conf$1 = ppUtil$3.appConfig;
1450
+ err = ppUtil$3.appErrCfg;
1451
+ preconditions$1.appName = aName || conf$1.thisApp;
1452
+ return preconditions$1;
1453
+ }
1454
+
1455
+ static addCheckPromise(p) {
1456
+ preconditions$1.checkPromises.push(p);
1457
+ return preconditions$1;
1458
+ }
1459
+
1460
+ static addChecker(checkFunc, args) {
1461
+ preconditions$1.checkFunctions.push({
1462
+ check: checkFunc,
1463
+ args: args
1464
+ });
1465
+ return preconditions$1;
1466
+ }
1467
+
1468
+ static async checkAll() {
1469
+ for (let i = 0; i < preconditions$1.checkFunctions.length; i++) {
1470
+ const f = preconditions$1.checkFunctions[i];
1471
+ preconditions$1.addCheckPromise(f.check(f.args));
1472
+ }
1473
+
1474
+ for (let i = 0; i < preconditions$1.checkPromises.length; i++) {
1475
+ let msg = await preconditions$1.checkPromises[i];
1476
+
1477
+ if (msg) {
1478
+ if (!preconditions$1.messages) {
1479
+ preconditions$1.messages = [];
1480
+ }
1481
+
1482
+ preconditions$1.messages.push(`${preconditions$1.messages.length + 1}. ${msg}`);
1483
+ }
1484
+ }
1485
+
1486
+ let text = "";
1487
+
1488
+ if (preconditions$1.messages) {
1489
+ text = `*** 由于以下原因,${preconditions$1.appName} 尚不能正常提供服务:\n\n` + preconditions$1.messages.join("\n\n") + "\n\n*** 请检查以上各项条件,修复后重新启动服务";
1490
+ console.log("\n" + text); // for (let i = 0; i < preconditions.messages.length; i++) {
1491
+ // console.log(preconditions.messages[i]);
1492
+ // }
1493
+ }
1494
+
1495
+ if (!(await fs.async_exists("../log"))) {
1496
+ await fs.async_mkdir("../log");
1497
+ }
1498
+
1499
+ await fs.async_writeFile(`../log/preconditions`, text);
1500
+ return !text;
1501
+ } // 检查器
1502
+
1503
+ /**
1504
+ * 检查本机外部配置文件版本
1505
+ */
1506
+
1507
+
1508
+ static async checkExEnvSetting(loadjs) {
1509
+ return await checkExEnvSetting(loadjs);
1510
+ }
1511
+ /**
1512
+ * redis 可用性检查
1513
+ */
1514
+
1515
+
1516
+ static async checkRedis() {
1517
+ return await checkRedis();
1518
+ } // /**
1519
+ // * 数据库可用性及业务数据版本版本检查
1520
+ // */
1521
+ // static async checkDatabase() {
1522
+ // return await checkDatabase();
1523
+ // }
1524
+
1525
+
1526
+ }
1527
+
1528
+ async function createEnvSettingFile(fileName) {
1529
+ try {
1530
+ const cfgText = await ppUtil$3.doCreateEnvSettingFile(fileName);
1531
+
1532
+ if (cfgText.indexOf(`cfgVersion: "${conf$1._envSetting.cfgVersion}"`) > 0) {
1533
+ console.log(`\n*** 已創建新的本機環境配置文件\n${fileName}\n请檢查各項內容是否正确(此项更新服务可正常运行)\n\n`);
1534
+ return "";
1535
+ }
1536
+
1537
+ return `已創建新的本機環境配置文件\n${fileName}\n请檢查並正確設置各項內容,然後將配置版本號修改為${conf$1._envSettings.default.cfgVersion}`;
1538
+ } catch (e) {
1539
+ return `創建本機環境配置文件失敗\n《${fileName}》\n${err.ERROR(e).message}`;
1540
+ }
1541
+ }
1542
+
1543
+ async function checkExEnvSetting(loadjs) {
1544
+ if (!conf$1._envSetting.localSettingImported) {
1545
+ let fileName = conf$1.getEnvSettingFileName();
1546
+
1547
+ if (!fs.existsSync(fileName)) {
1548
+ return await createEnvSettingFile(fileName);
1549
+ }
1550
+
1551
+ let envSettingEx = loadjs(fileName);
1552
+
1553
+ if (envSettingEx.cfgVersion !== conf$1._envSettings.default.cfgVersion) {
1554
+ if (envSettingEx.cfgVersion !== "0.0") {
1555
+ let fp = path.parse(fileName);
1556
+ let newFileName = path.join(fp.dir, fp.name + envSettingEx.cfgVersion + fp.ext);
1557
+
1558
+ if (!fs.existsSync(newFileName)) {
1559
+ fs.renameSync(fileName, newFileName);
1560
+ }
1561
+ }
1562
+
1563
+ return await createEnvSettingFile(fileName);
1564
+ }
1565
+ }
1566
+ } // async function checkDatabase() {
1567
+ // return dbCheck.check().then(info => info.updateMessage);
1568
+ // }
1569
+
1570
+
1571
+ async function checkRedis() {
1572
+ if (!conf$1.redis.enabled) return "";
1573
+ const redis = redisUtil.newClient("io"); // console.log(`checkRedis begin:`);
1574
+
1575
+ await ppUtil$3.wait(15 * 1000, param => {
1576
+ if (redis.ready && redis.connected || redis.error) {
1577
+ return true;
1578
+ }
1579
+ }).catch(e => {
1580
+ redis.error = e;
1581
+ });
1582
+
1583
+ if (redis.error) {
1584
+ console.log(`未能成功連接 redis: ${redis.error},請檢查相關設置`);
1585
+ return `未能成功連接 redis: ${redis.error},請檢查相關設置`;
1586
+ } // console.log(`checkRedis done:`);
1587
+ // console.log(redis);
1588
+
1589
+ }
1590
+
1591
+ var ppPrecond = preconditions$1;
1592
+
1593
+ var require$$0 = require$$2;
1594
+
1595
+ function _interopDefaultLegacy(e) {
1596
+ return e && typeof e === 'object' && 'default' in e ? e : {
1597
+ 'default': e
1598
+ };
1599
+ }
1600
+
1601
+ var require$$0__default = /*#__PURE__*/_interopDefaultLegacy(require$$0); // const logger = require("log4js").getLogger();
1602
+
1603
+
1604
+ const redis = require$$0__default["default"].redisUtil;
1605
+
1606
+ class Messenger {
1607
+ constructor(appConfig, appErrCfg) {
1608
+ if (appConfig) {
1609
+ redis.config(appConfig, appErrCfg);
1610
+ }
1611
+
1612
+ this.channel = "ecs_messenger"; //default channel
1613
+
1614
+ this.publisher = redis.newClient("publisher");
1615
+ this.subscriber = redis.newClient("subscriber");
1616
+ this.subscriber.on("subscribe", function (channel, count) {
1617
+ console.log("chanel subscribed :", channel, count);
1618
+ });
1619
+ this.subscriber.on("message", this.handleMessage);
1620
+ }
1621
+
1622
+ setMessageHandle(handle, channel) {
1623
+ channel = channel || this.channel;
1624
+ Messenger.onmessage = Messenger.onmessage || {};
1625
+ Messenger.onmessage[channel] = Messenger.onmessage[channel] || [];
1626
+ const appMsgHandles = Messenger.onmessage[channel];
1627
+
1628
+ for (let i = 0; i < appMsgHandles.length; i++) {
1629
+ if (appMsgHandles[i] === handle) return this;
1630
+ }
1631
+
1632
+ appMsgHandles.push(handle);
1633
+ return this;
1634
+ }
1635
+
1636
+ subscribe(channel) {
1637
+ channel = channel || this.channel;
1638
+ this.subscriber.subscribe(channel);
1639
+ return this;
1640
+ }
1641
+
1642
+ async handleMessage(channel, message) {
1643
+ console.log(`通道[${channel}]收到订阅消息:`, message);
1644
+ let appMsgHandles = Messenger.onmessage[channel] || [];
1645
+
1646
+ for (let i = 0; i < appMsgHandles.length; i++) {
1647
+ const appMsgHandle = appMsgHandles[i];
1648
+
1649
+ try {
1650
+ let msgObj = JSON.parse(message); // await appMsgHandle(msgObj);
1651
+
1652
+ appMsgHandle(msgObj);
1653
+ } catch (e) {
1654
+ console.log(e);
1655
+ }
1656
+ }
1657
+ }
1658
+
1659
+ async publish(message, channel) {
1660
+ channel = channel || this.channel;
1661
+ let msgStr = typeof message === "object" ? JSON.stringify(message) : message.toString();
1662
+ console.log(`通道[${channel}]发布消息:`, message);
1663
+ await this.publisher.publish(channel, msgStr);
1664
+ return this;
1665
+ }
1666
+
1667
+ }
1668
+
1669
+ var ppMessenger$1 = Messenger;
1670
+ const ppMessenger = ppMessenger$1;
1671
+ var ppUtil$2 = ppMessenger;
1672
+ var ppUtil_1 = ppUtil$2;
1673
+
1674
+ // 若 redis 可用,则使用基于 redis 的消息订阅发布系统
1675
+ // 若 redis 不可用,则将消息转发到其它主机
1676
+
1677
+ const RedisMessenger = ppUtil_1;
1678
+ const {
1679
+ netUtil
1680
+ } = require$$3;
1681
+ let conf;
1682
+
1683
+ class noneRedisMessenger {
1684
+ static onMessage = [];
1685
+
1686
+ static async publishMessage(message) {
1687
+ //没有消息处理器,则将消息转发到目标地址(不支持pm2多进程)
1688
+ if (message.destAddr) {
1689
+ await forwardMessage(message);
1690
+ } else {
1691
+ for (let i = 0; i < conf.appSetting.serverHosts.length; i++) {
1692
+ message.destAddr = conf.appSetting.serverHosts[i];
1693
+
1694
+ if (message.destAddr !== conf.myMsgAddr) {
1695
+ await forwardMessage(message);
1696
+ }
1697
+ }
1698
+ }
1699
+ }
1700
+
1701
+ static setMessageHandle(messageHandle) {
1702
+ if (noneRedisMessenger.onMessage.indexOf(messageHandle) < 0) {
1703
+ noneRedisMessenger.onMessage.push(messageHandle);
1704
+ }
1705
+
1706
+ return noneRedisMessenger;
1707
+ }
1708
+
1709
+ static async handleInternalMessage(options) {
1710
+ const message = options.replacements;
1711
+
1712
+ for (let i = 0; i < noneRedisMessenger.onMessage.length; i++) {
1713
+ const appMsgHandle = noneRedisMessenger.onMessage[i];
1714
+
1715
+ try {
1716
+ // await appMsgHandle(message);
1717
+ appMsgHandle(message);
1718
+ } catch (e) {
1719
+ console.log(e);
1720
+ }
1721
+ }
1722
+ }
1723
+
1724
+ }
1725
+
1726
+ class commonMessenger$1 {
1727
+ static myMsgAddr = "";
1728
+ static redisMessenger = null;
1729
+
1730
+ static initMessenger(appConfig, appErrCfg, msgChannel) {
1731
+ conf = appConfig;
1732
+ this.redisMessenger = conf.redis.enabled ? new RedisMessenger(appConfig, appErrCfg, msgChannel).subscribe(msgChannel) : null;
1733
+ this.myMsgAddr = commonMessenger$1.getMyMsgAddr();
1734
+ }
1735
+
1736
+ static getMyMsgAddr() {
1737
+ if (!conf.myMsgAddr) {
1738
+ conf.pm_id = process.env.pm_id || "0";
1739
+ let myIp = ppUtil.getMyIp();
1740
+
1741
+ if (this.redisMessenger) {
1742
+ myIp = `${conf.pm_id}@${myIp}`;
1743
+ }
1744
+
1745
+ conf.myMsgAddr = myIp;
1746
+ console.log(`myMsgAddr: `, conf.myMsgAddr);
1747
+ }
1748
+
1749
+ return conf.myMsgAddr;
1750
+ }
1751
+
1752
+ static setMessageHandle(messageHandle) {
1753
+ if (this.redisMessenger) {
1754
+ return this.redisMessenger.setMessageHandle(messageHandle, msgChannel);
1755
+ }
1756
+
1757
+ return noneRedisMessenger.setMessageHandle(messageHandle);
1758
+ }
1759
+
1760
+ static async publishMessage(message) {
1761
+ if (this.redisMessenger) {
1762
+ return this.redisMessenger.publish(message, msgChannel);
1763
+ } else {
1764
+ return noneRedisMessenger.publishMessage(message);
1765
+ }
1766
+ }
1767
+
1768
+ static async handleInternalMessage(options) {
1769
+ return await noneRedisMessenger.handleInternalMessage(options);
1770
+ }
1771
+
1772
+ }
1773
+
1774
+ async function forwardMessage(message) {
1775
+ let reqOptions = {
1776
+ url: `https://${message.destAddr}:${appSetting.listenPort}/api/message`,
1777
+ method: "POST",
1778
+ data: message
1779
+ };
1780
+ let res = await netUtil.apiRequest(reqOptions).catch(e => {
1781
+ console.log(`转发消息失败, url: ${reqOptions.url}`, e);
1782
+ throw e;
1783
+ });
1784
+ return res.data;
1785
+ }
1786
+
1787
+ var ppMessengerEx = commonMessenger$1;
1788
+
1789
+ const apiUtil = ppUtilApi;
1790
+ const preconditions = ppPrecond;
1791
+ const commonMessenger = ppMessengerEx;
1792
+ var ppUtil$1 = {
1793
+ apiUtil,
1794
+ preconditions,
1795
+ commonMessenger
1796
+ };
1797
+
1798
+ export { ppUtil$1 as default };