abler-api 0.1.24 → 0.1.27
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cjs/pp-util.js +71 -164
- package/dist/es/pp-util.js +1704 -0
- package/package.json +1 -1
|
@@ -0,0 +1,1704 @@
|
|
|
1
|
+
import require$$0 from 'crypto';
|
|
2
|
+
import require$$1 from 'abler-util';
|
|
3
|
+
import require$$2 from 'abler-db';
|
|
4
|
+
import require$$3 from 'abler-net';
|
|
5
|
+
import require$$0$1 from 'fs';
|
|
6
|
+
import require$$1$1 from 'path';
|
|
7
|
+
import require$$1$2 from 'abler-messenger';
|
|
8
|
+
|
|
9
|
+
const crypto = require$$0;
|
|
10
|
+
const ppUtil$3 = require$$1.ppUtil;
|
|
11
|
+
const {
|
|
12
|
+
dbUtil,
|
|
13
|
+
kvStorage
|
|
14
|
+
} = require$$2;
|
|
15
|
+
const netUtil$1 = require$$3;
|
|
16
|
+
let conf$2, appSetting$1, err$1, dbSql;
|
|
17
|
+
const pnToken = "access_token",
|
|
18
|
+
hnToken = pnToken,
|
|
19
|
+
pnApiKey = "apiKey",
|
|
20
|
+
hnApiKey = pnApiKey.toLowerCase(),
|
|
21
|
+
// 我们接收到的 headers 中的字段名总是全小写的
|
|
22
|
+
pnApiSecret = "apiSecret",
|
|
23
|
+
hnApiSecret = pnApiSecret.toLowerCase();
|
|
24
|
+
const MD5 = ppUtil$3.MD5,
|
|
25
|
+
moveProperty = ppUtil$3.moveProperty;
|
|
26
|
+
|
|
27
|
+
class apiUtil$1 {
|
|
28
|
+
static debugFlag = ppUtil$3.newGuid(); //应用必须设置,否则谁也不知道是啥
|
|
29
|
+
|
|
30
|
+
static testFlag = ppUtil$3.newGuid();
|
|
31
|
+
static envId_dev = "?"; // static apiCallRecSaver;
|
|
32
|
+
|
|
33
|
+
static config(appConfig, appErrCfg, appDbSql) {
|
|
34
|
+
ppUtil$3.config(appConfig, appErrCfg);
|
|
35
|
+
conf$2 = appConfig;
|
|
36
|
+
appSetting$1 = conf$2?.appSetting;
|
|
37
|
+
err$1 = appErrCfg, dbSql = appDbSql;
|
|
38
|
+
apiUtil$1.debugFlag = appSetting$1?.debugFlag || apiUtil$1.debugFlag;
|
|
39
|
+
apiUtil$1.testFlag = appSetting$1?.testFlag || apiUtil$1.testFlag; // apiUtil.apiCallRecSaver = apiCallRecSaver;
|
|
40
|
+
} //#region ===== 需要应用系统重写的方法
|
|
41
|
+
|
|
42
|
+
/**
|
|
43
|
+
* 根据机构标识获取机构的 ApiSecret
|
|
44
|
+
* @param companyId
|
|
45
|
+
* @returns {*}
|
|
46
|
+
*/
|
|
47
|
+
|
|
48
|
+
|
|
49
|
+
static _getApiSecret(companyId) {
|
|
50
|
+
return ppUtil$3.newGuid();
|
|
51
|
+
}
|
|
52
|
+
/**
|
|
53
|
+
* 保存 API 调用记录,应用系统必须重写此方法
|
|
54
|
+
* @param rec
|
|
55
|
+
* @param responseData
|
|
56
|
+
* @returns {Promise<unknown>}
|
|
57
|
+
*/
|
|
58
|
+
|
|
59
|
+
|
|
60
|
+
static async _saveApiCallRec(rec, responseData) {
|
|
61
|
+
return false;
|
|
62
|
+
}
|
|
63
|
+
/**
|
|
64
|
+
* 检查API调用签名是否已经完成了验证
|
|
65
|
+
* @param req
|
|
66
|
+
*/
|
|
67
|
+
|
|
68
|
+
|
|
69
|
+
static signatureVerified(req) {
|
|
70
|
+
return req.signatureVerified;
|
|
71
|
+
} //#endregion
|
|
72
|
+
//#region ===== API服务相关工具
|
|
73
|
+
|
|
74
|
+
/**
|
|
75
|
+
* 从请求中解出数据,包括路径参数、查询参数和Body
|
|
76
|
+
* @param req
|
|
77
|
+
* @returns {*}
|
|
78
|
+
*/
|
|
79
|
+
|
|
80
|
+
|
|
81
|
+
static extractParams(req) {
|
|
82
|
+
if (!req._requestParams) {
|
|
83
|
+
if (req.method === "POST" || req.method === "PUT") {
|
|
84
|
+
let contentType = req.headers["content-type"] || "application/json";
|
|
85
|
+
|
|
86
|
+
if (contentType.startsWith("multipart/form-data")) {
|
|
87
|
+
req._requestParams = new Object();
|
|
88
|
+
|
|
89
|
+
for (let k in req.body) {
|
|
90
|
+
req._requestParams[k] = req.body[k];
|
|
91
|
+
}
|
|
92
|
+
} else {
|
|
93
|
+
req._requestParams = req.body;
|
|
94
|
+
}
|
|
95
|
+
} else {
|
|
96
|
+
req._requestParams = req.query;
|
|
97
|
+
}
|
|
98
|
+
|
|
99
|
+
if (req.headers["content-type"] !== "application/json") {
|
|
100
|
+
const obj = req._requestParams;
|
|
101
|
+
|
|
102
|
+
for (let key in obj) {
|
|
103
|
+
if (!obj.hasOwnProperty(key)) continue;
|
|
104
|
+
let value = obj[key];
|
|
105
|
+
|
|
106
|
+
if (typeof value === "string" && value.length > 0) {
|
|
107
|
+
if (value[0] === "{" || value[0] === "[") {
|
|
108
|
+
try {
|
|
109
|
+
obj[key] = JSON.parse(value);
|
|
110
|
+
continue;
|
|
111
|
+
} catch (e) {}
|
|
112
|
+
}
|
|
113
|
+
|
|
114
|
+
let x = JSON.hbDateConv(key, value);
|
|
115
|
+
|
|
116
|
+
if (x !== value) {
|
|
117
|
+
obj[key] = x;
|
|
118
|
+
}
|
|
119
|
+
}
|
|
120
|
+
}
|
|
121
|
+
}
|
|
122
|
+
|
|
123
|
+
if (req.params) {
|
|
124
|
+
req._requestParams = Object.assign(req.params, req._requestParams);
|
|
125
|
+
}
|
|
126
|
+
|
|
127
|
+
apiUtil$1.setParamsFunctions(req._requestParams);
|
|
128
|
+
}
|
|
129
|
+
|
|
130
|
+
return req._requestParams;
|
|
131
|
+
}
|
|
132
|
+
|
|
133
|
+
static extractTokenData(req) {
|
|
134
|
+
if (req.tokenData) {
|
|
135
|
+
return req.tokenData;
|
|
136
|
+
}
|
|
137
|
+
|
|
138
|
+
let params = apiUtil$1.extractParams(req);
|
|
139
|
+
let tokenData = {
|
|
140
|
+
apiKey: req.headers[hnApiKey] || params[pnApiKey],
|
|
141
|
+
apiSecret: req.headers[hnApiSecret] || params[pnApiSecret],
|
|
142
|
+
clientIp: apiUtil$1.getClientIp(req)
|
|
143
|
+
};
|
|
144
|
+
return tokenData;
|
|
145
|
+
}
|
|
146
|
+
/**
|
|
147
|
+
* 为从传入请求中解出的参数对象设置一些函数属性,包括 asNumber, asBool
|
|
148
|
+
* @param params
|
|
149
|
+
*/
|
|
150
|
+
|
|
151
|
+
|
|
152
|
+
static setParamsFunctions(params) {
|
|
153
|
+
ppUtil$3.defUnenumProp(params, "asNumber", function (name, minValue, maxValue, defaultValue) {
|
|
154
|
+
// if (!this.hasOwnProperty(name)) // {} 定义的对象没有 hasOwnProperty 函数
|
|
155
|
+
if (this[name] === undefined) return defaultValue;
|
|
156
|
+
let result = +this[name];
|
|
157
|
+
|
|
158
|
+
if (typeof result !== "number" || result < minValue || result > maxValue) {
|
|
159
|
+
throw [err$1.INVALID_PARAM, `参数 ${name} 必须是 ${minValue} ~ ${maxValue} 之间的数字`];
|
|
160
|
+
}
|
|
161
|
+
|
|
162
|
+
return result;
|
|
163
|
+
});
|
|
164
|
+
ppUtil$3.defUnenumProp(params, "asBool", function (name, defaultValue) {
|
|
165
|
+
if (this[name] === undefined) return defaultValue;
|
|
166
|
+
let result = JSON.parse(this[name]);
|
|
167
|
+
return !!result;
|
|
168
|
+
});
|
|
169
|
+
}
|
|
170
|
+
/**
|
|
171
|
+
* 将返回结果转向到指定地址或者通过response发送返回结果
|
|
172
|
+
* @param res
|
|
173
|
+
* @param redirectUrl
|
|
174
|
+
* @param data
|
|
175
|
+
*/
|
|
176
|
+
|
|
177
|
+
|
|
178
|
+
static sendOrRedirect(res, redirectUrl, data) {
|
|
179
|
+
if (redirectUrl) {
|
|
180
|
+
redirectUrl = urlAppendParams(redirectUrl, data, true);
|
|
181
|
+
res.redirect(redirectUrl);
|
|
182
|
+
} else {
|
|
183
|
+
res.send(data);
|
|
184
|
+
}
|
|
185
|
+
}
|
|
186
|
+
/**
|
|
187
|
+
* 生成 API 成功返回结果
|
|
188
|
+
* @param data
|
|
189
|
+
* @param req
|
|
190
|
+
* @returns {{datetime: Date, success: boolean, stateCode: number, message: string}}
|
|
191
|
+
*/
|
|
192
|
+
|
|
193
|
+
|
|
194
|
+
static apiSuccess(data, req) {
|
|
195
|
+
let response = {
|
|
196
|
+
success: true,
|
|
197
|
+
stateCode: 0,
|
|
198
|
+
message: '',
|
|
199
|
+
datetime: new Date()
|
|
200
|
+
};
|
|
201
|
+
|
|
202
|
+
if (req && req.headers) {
|
|
203
|
+
let userAgent = req.headers["user-agent"];
|
|
204
|
+
|
|
205
|
+
if (userAgent && userAgent.startsWith("Postman")) {
|
|
206
|
+
response._elapse = (new Date().valueOf() - req.headers.timestamp) / 1000;
|
|
207
|
+
}
|
|
208
|
+
}
|
|
209
|
+
|
|
210
|
+
if (data && data._message_) {
|
|
211
|
+
response.message = data._message_;
|
|
212
|
+
delete data._message_;
|
|
213
|
+
}
|
|
214
|
+
|
|
215
|
+
response.data = data;
|
|
216
|
+
if (Array.isArray(data) && typeof data.recordCount != 'undefined') response.recordCount = data.recordCount;
|
|
217
|
+
return response;
|
|
218
|
+
}
|
|
219
|
+
/**
|
|
220
|
+
* 生成 API 失败返回结果
|
|
221
|
+
* @param error
|
|
222
|
+
* @param req
|
|
223
|
+
* @returns {*}
|
|
224
|
+
*/
|
|
225
|
+
|
|
226
|
+
|
|
227
|
+
static apiFail(error, req) {
|
|
228
|
+
configNeeded();
|
|
229
|
+
let response = err$1.ERROR(error, err$1.errorLangParamFlag + ppUtil$3.getMsgLang(req));
|
|
230
|
+
response.datetime = new Date();
|
|
231
|
+
|
|
232
|
+
if (req && req.headers) {
|
|
233
|
+
let userAgent = req.headers["user-agent"];
|
|
234
|
+
|
|
235
|
+
if (userAgent && userAgent.startsWith("Postman")) {
|
|
236
|
+
response._elapse = (new Date().valueOf() - req.headers.timestamp) / 1000;
|
|
237
|
+
}
|
|
238
|
+
}
|
|
239
|
+
|
|
240
|
+
return response;
|
|
241
|
+
}
|
|
242
|
+
/**
|
|
243
|
+
* 生成面向服务商的API成功返回结果
|
|
244
|
+
* @param data
|
|
245
|
+
* @param req
|
|
246
|
+
* @returns {*}
|
|
247
|
+
*/
|
|
248
|
+
|
|
249
|
+
|
|
250
|
+
static spoApiSucc(data, req) {
|
|
251
|
+
let params = apiUtil$1.extractParams(req);
|
|
252
|
+
return apiUtil$1.apiSuccess(data, req, params.spOrderNum);
|
|
253
|
+
}
|
|
254
|
+
/**
|
|
255
|
+
* 生成面向服务商的API失败返回结果
|
|
256
|
+
* @param error
|
|
257
|
+
* @param req
|
|
258
|
+
* @returns {*}
|
|
259
|
+
*/
|
|
260
|
+
|
|
261
|
+
|
|
262
|
+
static spoApiFail(error, req) {
|
|
263
|
+
let params = apiUtil$1.extractParams(req);
|
|
264
|
+
return apiUtil$1.apiFail(error, req, params.spOrderNum);
|
|
265
|
+
}
|
|
266
|
+
/**
|
|
267
|
+
* API 服务结束,发送响应
|
|
268
|
+
* @param response
|
|
269
|
+
* @param promise
|
|
270
|
+
*/
|
|
271
|
+
|
|
272
|
+
|
|
273
|
+
static sendResponse(response, promise) {
|
|
274
|
+
promise.then(function (data) {
|
|
275
|
+
if (!response.finished) {
|
|
276
|
+
try {
|
|
277
|
+
response.send(data);
|
|
278
|
+
} catch (e) {
|
|
279
|
+
console.log(`response.send 出错了,req.url: ${response.req.url}, response:`, response);
|
|
280
|
+
console.log("异常信息", e);
|
|
281
|
+
}
|
|
282
|
+
}
|
|
283
|
+
}, function (error) {
|
|
284
|
+
console.log('ERROR:', error);
|
|
285
|
+
|
|
286
|
+
if (!response.finished) {
|
|
287
|
+
response.send(error);
|
|
288
|
+
}
|
|
289
|
+
});
|
|
290
|
+
}
|
|
291
|
+
/**
|
|
292
|
+
* API 服务结束,包装数据并发送响应
|
|
293
|
+
* @param response
|
|
294
|
+
* @param promise
|
|
295
|
+
*/
|
|
296
|
+
|
|
297
|
+
|
|
298
|
+
static async responseOf(response, promise) {
|
|
299
|
+
promise.then(function (data) {
|
|
300
|
+
// console.log('RES:', apiSuccess(data));
|
|
301
|
+
if (!response.finished) response.send(apiUtil$1.apiSuccess(data, response.req));
|
|
302
|
+
}, function (error) {
|
|
303
|
+
console.log('ERROR:', error);
|
|
304
|
+
if (!response.finished) response.send(apiUtil$1.apiFail(error, response.req));
|
|
305
|
+
});
|
|
306
|
+
}
|
|
307
|
+
/**
|
|
308
|
+
* 面向服务商的API结束,发送响应
|
|
309
|
+
* @param response
|
|
310
|
+
* @param promise
|
|
311
|
+
*/
|
|
312
|
+
|
|
313
|
+
|
|
314
|
+
static async spoApiResponse(response, promise) {
|
|
315
|
+
promise.then(function (result) {
|
|
316
|
+
let responseData = apiUtil$1.spoApiSucc(result, response.req);
|
|
317
|
+
|
|
318
|
+
apiUtil$1._saveApiCallRec(response.req.apiCallRec, responseData);
|
|
319
|
+
|
|
320
|
+
if (!response.finished) response.send(responseData);
|
|
321
|
+
}, function (error) {
|
|
322
|
+
console.log('ERROR:', error);
|
|
323
|
+
let responseData = apiUtil$1.spoApiFail(error, response.req);
|
|
324
|
+
|
|
325
|
+
apiUtil$1._saveApiCallRec(response.req.apiCallRec, responseData);
|
|
326
|
+
|
|
327
|
+
if (!response.finished) response.send(responseData);
|
|
328
|
+
});
|
|
329
|
+
}
|
|
330
|
+
/**
|
|
331
|
+
* 从请求参数中获取查询参数
|
|
332
|
+
* @param req
|
|
333
|
+
* @param res
|
|
334
|
+
* @returns {*}
|
|
335
|
+
*/
|
|
336
|
+
|
|
337
|
+
|
|
338
|
+
static getQueryOptions(req, res) {
|
|
339
|
+
req.headers.timestamp = new Date().valueOf(); // let options = {replacements: {}};
|
|
340
|
+
|
|
341
|
+
let options = {};
|
|
342
|
+
let parameters = apiUtil$1.extractParams(req);
|
|
343
|
+
|
|
344
|
+
for (let qryParam in parameters) {
|
|
345
|
+
if (qryParam !== 'token') {
|
|
346
|
+
if (['start', 'limit', 'orderby', 'orderBy'].indexOf(qryParam) >= 0) {
|
|
347
|
+
options[qryParam] = parameters[qryParam];
|
|
348
|
+
delete parameters[qryParam];
|
|
349
|
+
} // else
|
|
350
|
+
// options.replacements[qryParam] = parameters[qryParam];
|
|
351
|
+
|
|
352
|
+
}
|
|
353
|
+
}
|
|
354
|
+
|
|
355
|
+
if (options.limit && !options.start) {
|
|
356
|
+
options.start = 0;
|
|
357
|
+
}
|
|
358
|
+
|
|
359
|
+
if (options.orderby) {
|
|
360
|
+
options.orderBy = options.orderby;
|
|
361
|
+
} // options.__debug__ = req.headers['__debug__'] && req.headers['__debug__'] == "true";
|
|
362
|
+
|
|
363
|
+
|
|
364
|
+
options.replacements = parameters; // if (arguments.length > 1) //其后的每个参数是要求必须存在的参数名称
|
|
365
|
+
// {
|
|
366
|
+
// for(i=1; i<arguments.length; i++){
|
|
367
|
+
// var paramName = arguments[i];
|
|
368
|
+
// if (!qryOptions.replacements[paramName])
|
|
369
|
+
// error();
|
|
370
|
+
// }
|
|
371
|
+
// }
|
|
372
|
+
|
|
373
|
+
options.userInfo = req.userInfo;
|
|
374
|
+
return apiUtil$1.setOptionsPropFuncions(options, res);
|
|
375
|
+
}
|
|
376
|
+
/**
|
|
377
|
+
* 为API请求 options 设置属性
|
|
378
|
+
* @param options
|
|
379
|
+
* @param res
|
|
380
|
+
* @returns {{identifyLimit}|*}
|
|
381
|
+
*/
|
|
382
|
+
|
|
383
|
+
|
|
384
|
+
static setOptionsPropFuncions(options, res) {
|
|
385
|
+
// if (!options.identifyLimit) {
|
|
386
|
+
// // 根据企业标识获取身份认证限制相关设置,如果没有传递企业标识,
|
|
387
|
+
// // 则尝试从options.companyInfo或options.contractOrder中获取
|
|
388
|
+
// Object.defineProperty(options, "companyId", {
|
|
389
|
+
// get: function () {
|
|
390
|
+
// var result;
|
|
391
|
+
// if (this.companyInfo) {
|
|
392
|
+
// result = this.companyInfo.companyId;
|
|
393
|
+
// } else if (this.contractOrder) {
|
|
394
|
+
// result = this.contractOrder.companyId;
|
|
395
|
+
// } else if (this._companyId) {
|
|
396
|
+
// result = this._companyId;
|
|
397
|
+
// }
|
|
398
|
+
// return result;
|
|
399
|
+
// }
|
|
400
|
+
// });
|
|
401
|
+
// Object.defineProperty(options, "identifyLimit", {
|
|
402
|
+
// get: function () {
|
|
403
|
+
// if (!this._identifyLimit) {
|
|
404
|
+
// // this._identifyLimit = ppUtil.waitPromise(_getIdentifyLimit(this.companyId));
|
|
405
|
+
// throw "options._identifyLimit 没有赋值";
|
|
406
|
+
// }
|
|
407
|
+
//
|
|
408
|
+
// return this._identifyLimit;
|
|
409
|
+
// },
|
|
410
|
+
// // configurable : true
|
|
411
|
+
// });
|
|
412
|
+
// }
|
|
413
|
+
if (res) {
|
|
414
|
+
Object.defineProperty(options, '_res', {
|
|
415
|
+
value: res,
|
|
416
|
+
enumerable: false
|
|
417
|
+
});
|
|
418
|
+
}
|
|
419
|
+
|
|
420
|
+
return options;
|
|
421
|
+
}
|
|
422
|
+
/**
|
|
423
|
+
* 从请求头获取token
|
|
424
|
+
* @param req
|
|
425
|
+
* @param res
|
|
426
|
+
* @param noErr
|
|
427
|
+
* @returns {Promise<*>}
|
|
428
|
+
*/
|
|
429
|
+
|
|
430
|
+
|
|
431
|
+
static extractToken(req, res, noErr) {
|
|
432
|
+
configNeeded();
|
|
433
|
+
|
|
434
|
+
if (!req.accessToken) {
|
|
435
|
+
//检查post的信息或者url查询参数或者头信息
|
|
436
|
+
let token = req.headers[hnToken] || req.headers['x-access-token']; //向后兼容
|
|
437
|
+
|
|
438
|
+
if (!token) {
|
|
439
|
+
let params = apiUtil$1.extractParams(req);
|
|
440
|
+
token = params[pnToken];
|
|
441
|
+
|
|
442
|
+
if (token) {
|
|
443
|
+
delete params[pnToken];
|
|
444
|
+
} else if (params.token) {
|
|
445
|
+
token = params.token; //向后兼容
|
|
446
|
+
|
|
447
|
+
delete params.token;
|
|
448
|
+
} else {
|
|
449
|
+
// 如果没有token,则返回错误
|
|
450
|
+
console.log(err$1.TOKEN_NEEDED);
|
|
451
|
+
|
|
452
|
+
if (res) {
|
|
453
|
+
res.send(err$1.ERROR(err$1.TOKEN_NEEDED));
|
|
454
|
+
} else if (!noErr) {
|
|
455
|
+
throw err$1.TOKEN_NEEDED;
|
|
456
|
+
}
|
|
457
|
+
}
|
|
458
|
+
}
|
|
459
|
+
|
|
460
|
+
req.accessToken = token;
|
|
461
|
+
}
|
|
462
|
+
|
|
463
|
+
return req.accessToken;
|
|
464
|
+
}
|
|
465
|
+
/**
|
|
466
|
+
* 检查是不是内部调用,应用系统可替换此函数实施更隐秘的检查
|
|
467
|
+
* @param req
|
|
468
|
+
* @returns {Promise<boolean|undefined>}
|
|
469
|
+
*/
|
|
470
|
+
|
|
471
|
+
|
|
472
|
+
static async checkInternalToken(req) {
|
|
473
|
+
// return await checkInternalToken(req);
|
|
474
|
+
const params = apiUtil$1.extractParams(req);
|
|
475
|
+
req.accessToken = req.accessToken || apiUtil$1.extractToken(req);
|
|
476
|
+
|
|
477
|
+
if (req.accessToken === MD5(ppUtil$3.idNumDisturbing)) {
|
|
478
|
+
//todo: 检查IP
|
|
479
|
+
params.__internal__ = true;
|
|
480
|
+
req.ignoreToken = true; // if (params.idNum || params.personId) {
|
|
481
|
+
// return queryPersonUser(params.idNum, params.personId)
|
|
482
|
+
// .then(async userInfo => {
|
|
483
|
+
// if (!userInfo) {
|
|
484
|
+
// // console.log('queryPersonUser error.', e);
|
|
485
|
+
// throw err.TOKEN_INVALID;
|
|
486
|
+
// }
|
|
487
|
+
// if (req.tokenValidater) await req.tokenValidater(userInfo, req)
|
|
488
|
+
// req.userInfo = userInfo;
|
|
489
|
+
// return true
|
|
490
|
+
// })
|
|
491
|
+
// } else {
|
|
492
|
+
// return true
|
|
493
|
+
// }
|
|
494
|
+
|
|
495
|
+
return true;
|
|
496
|
+
} else {
|
|
497
|
+
// console.log('token error.', req.accessToken);
|
|
498
|
+
throw err$1.TOKEN_INVALID;
|
|
499
|
+
}
|
|
500
|
+
}
|
|
501
|
+
/**
|
|
502
|
+
* 检查请求是否存在合法的token,若不存在则抛出异常
|
|
503
|
+
* @param req
|
|
504
|
+
* @returns {Promise<void>}
|
|
505
|
+
*/
|
|
506
|
+
|
|
507
|
+
|
|
508
|
+
static async checkRequestToken(req) {
|
|
509
|
+
req.accessToken = req.accessToken || apiUtil$1.extractToken(req);
|
|
510
|
+
const tokenKey = apiUtil$1.userTokenStoreKey(req.accessToken);
|
|
511
|
+
const expireTime = apiUtil$1.tokenExpireTime(req);
|
|
512
|
+
return await apiUtil$1.restoreTokenData(tokenKey, expireTime).then(async function (data) {
|
|
513
|
+
req.userInfo = apiUtil$1.setUserIdNo(data, data._idNo);
|
|
514
|
+
if (req.tokenValidater) await req.tokenValidater(req.userInfo, req);
|
|
515
|
+
return true;
|
|
516
|
+
}, async function (e) {
|
|
517
|
+
// 如果给定的token不存在,看看是不是平台内部调用
|
|
518
|
+
return await apiUtil$1.checkInternalToken(req);
|
|
519
|
+
});
|
|
520
|
+
}
|
|
521
|
+
/**
|
|
522
|
+
* 检查是不是调试模式
|
|
523
|
+
* @param req
|
|
524
|
+
* @returns {*|boolean|boolean}
|
|
525
|
+
*/
|
|
526
|
+
|
|
527
|
+
|
|
528
|
+
static isDebugMode(req) {
|
|
529
|
+
if (req.__debug__ === undefined) {
|
|
530
|
+
let dbgToken = req.headers['__debug__'] || req.headers[apiUtil$1.debugFlag];
|
|
531
|
+
|
|
532
|
+
if (dbgToken) {
|
|
533
|
+
let envId = process.env.ECS_DEPLOY_ID;
|
|
534
|
+
req.__debug__ = dbgToken && dbgToken === MD5(req.headers.timestamp, ppUtil$3.commonHashDisturbing) && (envId === "florist_longdan" || envId === "shuzi");
|
|
535
|
+
} else {
|
|
536
|
+
req.__debug__ = false;
|
|
537
|
+
} // console.log("__debug__:", req.__debug__, "dbgToken:", dbgToken);
|
|
538
|
+
|
|
539
|
+
}
|
|
540
|
+
|
|
541
|
+
return req.__debug__; // return req.headers["postman-token"] || req.headers['__debug__'] && req.headers['__debug__'] == "true";
|
|
542
|
+
}
|
|
543
|
+
/**
|
|
544
|
+
* 检查是不是测试模式
|
|
545
|
+
* @param req
|
|
546
|
+
* @returns {*|boolean}
|
|
547
|
+
*/
|
|
548
|
+
|
|
549
|
+
|
|
550
|
+
static isTestMode(req) {
|
|
551
|
+
if (req.__postman__ === undefined) {
|
|
552
|
+
let dbgToken = req.headers["__postman__"] || req.headers[apiUtil$1.testFlag];
|
|
553
|
+
|
|
554
|
+
if (dbgToken) {
|
|
555
|
+
let envId = process.env.ECS_DEPLOY_ID;
|
|
556
|
+
let testToken = MD5(req.headers.timestamp, apiUtil$1.extractToken(req, null, true) || req.headers.apikey);
|
|
557
|
+
req.__postman__ = dbgToken === testToken && (envId.indexOf("myfacesign.com") < 0 || envId.indexOf(".dev.") > 0);
|
|
558
|
+
} else {
|
|
559
|
+
req.__postman__ = false;
|
|
560
|
+
}
|
|
561
|
+
}
|
|
562
|
+
|
|
563
|
+
return req.__postman__;
|
|
564
|
+
}
|
|
565
|
+
/**
|
|
566
|
+
* 获取令牌过期时长
|
|
567
|
+
* @param req
|
|
568
|
+
* @returns {any}
|
|
569
|
+
*/
|
|
570
|
+
|
|
571
|
+
|
|
572
|
+
static tokenExpireTime(req) {
|
|
573
|
+
return apiUtil$1.isDebugMode(req) ? 30 * 24 * 60 * 60 : apiUtil$1.isTestMode(req) ? 4 * 60 * 60 : appSetting$1.tokenExpireTime;
|
|
574
|
+
}
|
|
575
|
+
/**
|
|
576
|
+
* 获取用户令牌保存键
|
|
577
|
+
* @param token
|
|
578
|
+
* @returns {string}
|
|
579
|
+
*/
|
|
580
|
+
|
|
581
|
+
|
|
582
|
+
static userTokenStoreKey(token) {
|
|
583
|
+
return "ut_" + token;
|
|
584
|
+
}
|
|
585
|
+
/**
|
|
586
|
+
* 获取机构令牌保存键
|
|
587
|
+
* @param token
|
|
588
|
+
* @returns {string}
|
|
589
|
+
*/
|
|
590
|
+
|
|
591
|
+
|
|
592
|
+
static apiTokenStoreKey(token) {
|
|
593
|
+
return "api_" + token;
|
|
594
|
+
}
|
|
595
|
+
/**
|
|
596
|
+
* 判断是不是香港身份证
|
|
597
|
+
* @param idNum
|
|
598
|
+
* @returns {boolean}
|
|
599
|
+
*/
|
|
600
|
+
|
|
601
|
+
|
|
602
|
+
static checkIsHKIC(idNum) {
|
|
603
|
+
return idNum.length === 8;
|
|
604
|
+
}
|
|
605
|
+
/**
|
|
606
|
+
* 将身份证号码暂存到用户信息中
|
|
607
|
+
* @param userInfo
|
|
608
|
+
* @param idNum
|
|
609
|
+
* @returns {*}
|
|
610
|
+
*/
|
|
611
|
+
|
|
612
|
+
|
|
613
|
+
static setUserIdNo(userInfo, idNum) {
|
|
614
|
+
if (userInfo && idNum) {
|
|
615
|
+
userInfo._idNo = idNum;
|
|
616
|
+
userInfo.isHKIC = apiUtil$1.checkIsHKIC(idNum);
|
|
617
|
+
}
|
|
618
|
+
|
|
619
|
+
return userInfo;
|
|
620
|
+
}
|
|
621
|
+
/**
|
|
622
|
+
* 暂存令牌
|
|
623
|
+
* @param token
|
|
624
|
+
* @param tokenData
|
|
625
|
+
* @param dataId
|
|
626
|
+
* @param req
|
|
627
|
+
* @returns {Promise<void>}
|
|
628
|
+
*/
|
|
629
|
+
|
|
630
|
+
|
|
631
|
+
static async storeToken(token, tokenData, dataId, req) {
|
|
632
|
+
// let timeout = tokenData.clientIp.substring(0, 8) == "192.168." ? 90 * 24 : 1;
|
|
633
|
+
let timeout = apiUtil$1.tokenExpireTime(req);
|
|
634
|
+
|
|
635
|
+
if (req.certPublicKey) {
|
|
636
|
+
tokenData.certPublicKey = req.certPublicKey;
|
|
637
|
+
}
|
|
638
|
+
|
|
639
|
+
kvStorage.storeObj(token, tokenData, timeout);
|
|
640
|
+
|
|
641
|
+
if (dataId) {
|
|
642
|
+
kvStorage.restoreValue("token_" + dataId).then(function (oldToken) {
|
|
643
|
+
if (oldToken !== token) {
|
|
644
|
+
kvStorage.unstoreValue(oldToken);
|
|
645
|
+
} else {
|
|
646
|
+
dataId = "";
|
|
647
|
+
}
|
|
648
|
+
}, function (e) {}).then(() => {
|
|
649
|
+
if (dataId !== "") kvStorage.storeValue("token_" + dataId, token, timeout);
|
|
650
|
+
});
|
|
651
|
+
}
|
|
652
|
+
}
|
|
653
|
+
/**
|
|
654
|
+
* 恢复令牌数据
|
|
655
|
+
* @param accessToken
|
|
656
|
+
* @param expireTime
|
|
657
|
+
* @returns {Promise<any>}
|
|
658
|
+
*/
|
|
659
|
+
|
|
660
|
+
|
|
661
|
+
static async restoreTokenData(accessToken, expireTime) {
|
|
662
|
+
return await kvStorage.restoreObj(accessToken, expireTime);
|
|
663
|
+
}
|
|
664
|
+
/**
|
|
665
|
+
* 创建 API 调用记录
|
|
666
|
+
* @param tokenData
|
|
667
|
+
* @param req
|
|
668
|
+
* @returns {any}
|
|
669
|
+
*/
|
|
670
|
+
|
|
671
|
+
|
|
672
|
+
static createApiCallRec(tokenData, req) {
|
|
673
|
+
if (!req.apiCallRec) {
|
|
674
|
+
if (req.apiCallRecId) {
|
|
675
|
+
return dbQueryOne(dbSql.loadApiUsage, {
|
|
676
|
+
replacements: {
|
|
677
|
+
id: req.apiCallRecId
|
|
678
|
+
}
|
|
679
|
+
}).then(rec => {
|
|
680
|
+
req.apiCallRec = rec;
|
|
681
|
+
return req.apiCallRec;
|
|
682
|
+
});
|
|
683
|
+
} else {
|
|
684
|
+
let params = extractParams(req); // let contentLength = parseInt(req.headers["content-length"]) || 0;
|
|
685
|
+
|
|
686
|
+
let rec = {
|
|
687
|
+
id: newGuid(),
|
|
688
|
+
companyId: tokenData.apiKey || '',
|
|
689
|
+
orderId: params.orderId || '',
|
|
690
|
+
signerId: params.signerId || '',
|
|
691
|
+
userId: params.userId || '',
|
|
692
|
+
contractName: params.contractName || '',
|
|
693
|
+
spOrderNum: params.spOrderNum || '',
|
|
694
|
+
notifyUri: params.notifyUri || '',
|
|
695
|
+
fileName: params.fileName || '',
|
|
696
|
+
fileHash: params.fileHash || '',
|
|
697
|
+
fileKeyHash: params.fileKeyHash || '',
|
|
698
|
+
fileSignedHash: params.fileSignedHash || '',
|
|
699
|
+
createTime: new Date(),
|
|
700
|
+
secret: tokenData.apiSecret || '',
|
|
701
|
+
fromIp: tokenData.clientIp || '',
|
|
702
|
+
method: req.method,
|
|
703
|
+
uri: req.route.path,
|
|
704
|
+
urlParams: req.url.split("?")[1] || "",
|
|
705
|
+
contentType: (req.headers["content-type"] || '').substring(0, 45),
|
|
706
|
+
// body: contentLength < 500 ? req.rawBody || '' : 'lob data, size:' + contentLength,
|
|
707
|
+
body: _getBodyLogStr(req),
|
|
708
|
+
resultCode: params.resultCode || '0',
|
|
709
|
+
resultInfo: params.resultInfo || '',
|
|
710
|
+
resultData: params.resultData || ''
|
|
711
|
+
};
|
|
712
|
+
|
|
713
|
+
if (rec.secret !== "") {
|
|
714
|
+
rec.secret = ppUtil$3.getEncAse192(rec.secret);
|
|
715
|
+
}
|
|
716
|
+
|
|
717
|
+
req.apiCallRec = rec;
|
|
718
|
+
}
|
|
719
|
+
}
|
|
720
|
+
|
|
721
|
+
return req.apiCallRec;
|
|
722
|
+
}
|
|
723
|
+
/**
|
|
724
|
+
* 查询机构信息
|
|
725
|
+
* @param companyId
|
|
726
|
+
* @param nullable
|
|
727
|
+
* @returns {Promise<null|*>}
|
|
728
|
+
*/
|
|
729
|
+
|
|
730
|
+
|
|
731
|
+
static async queryCompanyInfo(companyId, nullable) {
|
|
732
|
+
return await dbUtil.dbQueryOne(dbSql.queryCompanyInfo, {
|
|
733
|
+
companyId
|
|
734
|
+
}, nullable);
|
|
735
|
+
}
|
|
736
|
+
/**
|
|
737
|
+
* 获取企业有效证书
|
|
738
|
+
* @param companyId: 企业标识
|
|
739
|
+
*/
|
|
740
|
+
|
|
741
|
+
|
|
742
|
+
static async getCompanyCertificate(companyId) {
|
|
743
|
+
let certInfo = {
|
|
744
|
+
// 正式启用的证书
|
|
745
|
+
certLiving: null,
|
|
746
|
+
certLivingId: '',
|
|
747
|
+
// 备用证书
|
|
748
|
+
certSpare: null,
|
|
749
|
+
certSpareId: ''
|
|
750
|
+
};
|
|
751
|
+
return await dbUtil.dbQueryOne(dbSql.queryCertDataByOwner, {
|
|
752
|
+
ownerId: companyId,
|
|
753
|
+
applyId: "company"
|
|
754
|
+
}, false).then(certRec => {
|
|
755
|
+
// console.log('当前证书:\n', certRec);
|
|
756
|
+
// checkCertStatus(certRec);
|
|
757
|
+
let certData = JSON.parse(certRec.certBody);
|
|
758
|
+
let pubKeyData = Buffer.from(certData.cert, "base64").toString(); // 公司正式证书
|
|
759
|
+
|
|
760
|
+
certInfo.certLiving = pubKeyData;
|
|
761
|
+
certInfo.certLivingId = certRec.id;
|
|
762
|
+
return dbUtil.dbQueryOne(dbSql.queryCertDataByOwner, {
|
|
763
|
+
ownerId: companyId,
|
|
764
|
+
applyId: "company_spare"
|
|
765
|
+
}, false).then(certRec1 => {
|
|
766
|
+
// console.log('备用证书:\n', certRec1);
|
|
767
|
+
// checkCertStatus(certRec1);
|
|
768
|
+
let certData1 = JSON.parse(certRec1.certBody);
|
|
769
|
+
let pubKeyData1 = Buffer.from(certData1.cert, "base64").toString(); // 公司备用证书
|
|
770
|
+
|
|
771
|
+
certInfo.certSpare = pubKeyData1;
|
|
772
|
+
certInfo.certSpareId = certRec1.id;
|
|
773
|
+
}).catch(e => {
|
|
774
|
+
// console.log('获取备用证书失败。', e);
|
|
775
|
+
certInfo.certSpare = null;
|
|
776
|
+
});
|
|
777
|
+
}).then(() => {
|
|
778
|
+
return certInfo;
|
|
779
|
+
}).catch(e => {
|
|
780
|
+
console.log('获取企业证书失败:\n', e);
|
|
781
|
+
throw [err$1.ACCESS_REFUSED, `获取企业证书失败:${err$1.ERROR(e).message}`];
|
|
782
|
+
});
|
|
783
|
+
}
|
|
784
|
+
/**
|
|
785
|
+
* 验证API调用签名
|
|
786
|
+
* @param tokenData
|
|
787
|
+
* @param req
|
|
788
|
+
* @returns {Promise<*|boolean>}
|
|
789
|
+
*/
|
|
790
|
+
|
|
791
|
+
|
|
792
|
+
static async verifyApiSignature(tokenData, req) {
|
|
793
|
+
try {
|
|
794
|
+
if (!req.headers.timestamp) {
|
|
795
|
+
throw [err$1.ACCESS_REFUSED, `必须在请求头中设置时戳`];
|
|
796
|
+
}
|
|
797
|
+
|
|
798
|
+
let timestamp = parseInt(req.headers.timestamp);
|
|
799
|
+
let currentTime = new Date().valueOf();
|
|
800
|
+
let maxTimeDiff = apiUtil$1.isDebugMode(req) ? 7 * 24 * 3600 : apiUtil$1.isTestMode(req) ? 4 * 3600 : 100; // 100
|
|
801
|
+
|
|
802
|
+
if (timestamp.toString() == "NaN" || currentTime < timestamp - 5000 || currentTime - timestamp > maxTimeDiff * 1000) {
|
|
803
|
+
throw [err$1.ACCESS_REFUSED, `时戳(${timestamp})无效,当前时戳:${currentTime},时差 ${(currentTime - timestamp) / 1000}秒`];
|
|
804
|
+
}
|
|
805
|
+
|
|
806
|
+
let signature = req.headers.signature;
|
|
807
|
+
|
|
808
|
+
if (!signature) {
|
|
809
|
+
throw [err$1.ACCESS_REFUSED, `必须在请求头中提供签名`];
|
|
810
|
+
}
|
|
811
|
+
|
|
812
|
+
let signData = apiUtil$1.extractToken(req, null, true) || tokenData.apiKey;
|
|
813
|
+
signData += timestamp;
|
|
814
|
+
|
|
815
|
+
if (apiUtil$1.isDebugMode(req) || apiUtil$1.isTestMode(req)) {
|
|
816
|
+
let publicKey = req.headers.publickey || req.body.publicKey || req.query.publicKey;
|
|
817
|
+
|
|
818
|
+
if (publicKey) {
|
|
819
|
+
publicKey = decodeURIComponent(publicKey);
|
|
820
|
+
tokenData.certPublicKey = publicKey;
|
|
821
|
+
req.certPublicKey = publicKey;
|
|
822
|
+
}
|
|
823
|
+
}
|
|
824
|
+
|
|
825
|
+
if (tokenData.certPublicKey) {
|
|
826
|
+
let verifyResult = doVerify(signData, signature, tokenData.certPublicKey);
|
|
827
|
+
return await verifyResult;
|
|
828
|
+
}
|
|
829
|
+
|
|
830
|
+
return apiUtil$1.getCompanyCertificate(tokenData.apiKey).then(info => {
|
|
831
|
+
tokenData.certPublicKey = info.certLiving;
|
|
832
|
+
tokenData.certPublicKeySpare = info.certSpare;
|
|
833
|
+
tokenData.certLivingId = info.certLivingId;
|
|
834
|
+
tokenData.certSpareId = info.certSpareId;
|
|
835
|
+
req.certPublicKey = info.certLiving;
|
|
836
|
+
let token = apiUtil$1.extractToken(req, null, true);
|
|
837
|
+
|
|
838
|
+
if (token) {
|
|
839
|
+
apiUtil$1.storeToken(apiUtil$1.apiTokenStoreKey(token), tokenData, tokenData.apiKey, req);
|
|
840
|
+
}
|
|
841
|
+
}).then(() => {
|
|
842
|
+
return doVerify(signData, signature, tokenData.certPublicKey);
|
|
843
|
+
});
|
|
844
|
+
} catch (e) {
|
|
845
|
+
// return Promise.reject(e);
|
|
846
|
+
throw e;
|
|
847
|
+
}
|
|
848
|
+
|
|
849
|
+
function doVerify(signData, signature) {
|
|
850
|
+
let verify = crypto.createVerify('SHA256');
|
|
851
|
+
verify.write(signData);
|
|
852
|
+
verify.end();
|
|
853
|
+
let verifyOK = false;
|
|
854
|
+
|
|
855
|
+
try {
|
|
856
|
+
// 先用正式证书验证
|
|
857
|
+
verifyOK = verify.verify(tokenData.certPublicKey, signature, 'base64');
|
|
858
|
+
} catch (e) {
|
|
859
|
+
console.log("SPO服务签名验证异常(正式证书), ", e);
|
|
860
|
+
verifyOK = false;
|
|
861
|
+
|
|
862
|
+
if (!tokenData.certPublicKeySpare) {
|
|
863
|
+
throw {
|
|
864
|
+
eo: err$1.ACCESS_REFUSED,
|
|
865
|
+
msgArgv: "签名验证异常",
|
|
866
|
+
data: e
|
|
867
|
+
};
|
|
868
|
+
}
|
|
869
|
+
}
|
|
870
|
+
|
|
871
|
+
if (!verifyOK && tokenData.certPublicKeySpare) {
|
|
872
|
+
try {
|
|
873
|
+
// 再用备用证书验证
|
|
874
|
+
let verifySpare = crypto.createVerify('SHA256');
|
|
875
|
+
verifySpare.write(signData);
|
|
876
|
+
verifySpare.end();
|
|
877
|
+
verifyOK = verifySpare.verify(tokenData.certPublicKeySpare, signature, 'base64');
|
|
878
|
+
|
|
879
|
+
if (verifyOK) {
|
|
880
|
+
// 备用证书验证成功了,则将备用证书替换为正式证书
|
|
881
|
+
console.log(`公司(${tokenData.apiKey})备用证书验签成功,正式启用...`);
|
|
882
|
+
return dbUtil.dbTrans(trans => {
|
|
883
|
+
let p1 = dbUtil.dbExec(dbSql.deleteCertRecById, {
|
|
884
|
+
replacements: {
|
|
885
|
+
id: tokenData.certLivingId
|
|
886
|
+
},
|
|
887
|
+
transaction: trans
|
|
888
|
+
});
|
|
889
|
+
let p2 = dbUtil.dbExec(dbSql.spareCertToLiving, {
|
|
890
|
+
replacements: {
|
|
891
|
+
id: tokenData.certSpareId
|
|
892
|
+
},
|
|
893
|
+
transaction: trans
|
|
894
|
+
});
|
|
895
|
+
return Promise.all([p1, p2]);
|
|
896
|
+
}).then(() => {
|
|
897
|
+
tokenData.certPublicKey = tokenData.certPublicKeySpare;
|
|
898
|
+
delete tokenData.certLivingId;
|
|
899
|
+
delete tokenData.certSpareId;
|
|
900
|
+
delete tokenData.certPublicKeySpare;
|
|
901
|
+
let token = apiUtil$1.extractToken(req);
|
|
902
|
+
|
|
903
|
+
if (token) {
|
|
904
|
+
apiUtil$1.storeToken(apiTokenStoreKey(token), tokenData, tokenData.apiKey, req);
|
|
905
|
+
}
|
|
906
|
+
|
|
907
|
+
console.log(`公司(${tokenData.apiKey})备用证书成功转换为正式证书`);
|
|
908
|
+
});
|
|
909
|
+
}
|
|
910
|
+
} catch (e) {
|
|
911
|
+
console.log("SPO服务签名验证异常(备用证书), ", e);
|
|
912
|
+
throw {
|
|
913
|
+
eo: err$1.ACCESS_REFUSED,
|
|
914
|
+
msgArgv: "签名验证异常(spare)",
|
|
915
|
+
data: e
|
|
916
|
+
};
|
|
917
|
+
}
|
|
918
|
+
}
|
|
919
|
+
|
|
920
|
+
if (!verifyOK) {
|
|
921
|
+
console.log("SPO服务签名验证失败, tokenData: ", tokenData);
|
|
922
|
+
throw [err$1.ACCESS_REFUSED, "签名验证未通过"];
|
|
923
|
+
}
|
|
924
|
+
|
|
925
|
+
return verifyOK;
|
|
926
|
+
}
|
|
927
|
+
}
|
|
928
|
+
/**
|
|
929
|
+
* 检查API调用之合法性
|
|
930
|
+
* @param tokenData
|
|
931
|
+
* @param req
|
|
932
|
+
* @returns {Promise<any>}
|
|
933
|
+
*/
|
|
934
|
+
|
|
935
|
+
|
|
936
|
+
static async checkApiCallValid(tokenData, req) {
|
|
937
|
+
if (!tokenData.companyInfo) {
|
|
938
|
+
tokenData.companyInfo = await apiUtil$1.queryCompanyInfo(tokenData.apiKey, true).catch(e => {
|
|
939
|
+
console.log("执行企业信息查询发生异常", e);
|
|
940
|
+
throw [err$1.API_KEY_INVALID, "执行企业信息查询发生异常:" + e.message || ""];
|
|
941
|
+
});
|
|
942
|
+
}
|
|
943
|
+
|
|
944
|
+
const companyInfo = tokenData.companyInfo;
|
|
945
|
+
|
|
946
|
+
if (companyInfo != null) {
|
|
947
|
+
let secret = apiUtil$1._getApiSecret(tokenData.apiKey);
|
|
948
|
+
|
|
949
|
+
if (secret !== tokenData.apiSecret) throw err$1.API_SCREPT_INVALID; // 不再检查 IP 白名单,改为验证证书签名
|
|
950
|
+
// console.log("fromIp:", tokenData.clientIp, "ipWhiteList:", companyInfo.ipWhiteList);
|
|
951
|
+
// let whiteList = companyInfo.ipWhiteList || "";
|
|
952
|
+
// // 没有设置ip白名单的就不检查了
|
|
953
|
+
// if (whiteList == "" || ipMatched(tokenData.clientIp, whiteList + ",127.0.0.1,1"))
|
|
954
|
+
|
|
955
|
+
if (apiUtil$1.signatureVerified()) return companyInfo;
|
|
956
|
+
return apiUtil$1.verifyApiSignature(tokenData, req).then(x => {
|
|
957
|
+
return companyInfo;
|
|
958
|
+
}, e => {
|
|
959
|
+
throw e;
|
|
960
|
+
});
|
|
961
|
+
}
|
|
962
|
+
|
|
963
|
+
throw [err$1.API_KEY_INVALID, tokenData.apiKey];
|
|
964
|
+
}
|
|
965
|
+
/**
|
|
966
|
+
* 检查令牌数据是否存在
|
|
967
|
+
* @param token
|
|
968
|
+
* @returns {*}
|
|
969
|
+
*/
|
|
970
|
+
|
|
971
|
+
|
|
972
|
+
static tokenDataExist(token) {
|
|
973
|
+
return kvStorage.stored(token);
|
|
974
|
+
}
|
|
975
|
+
|
|
976
|
+
static parametersOK(params) {
|
|
977
|
+
configNeeded();
|
|
978
|
+
let paramSufix = params._param_sufix || "";
|
|
979
|
+
|
|
980
|
+
for (let i = 1; i < arguments.length; i++) {
|
|
981
|
+
let paramName = arguments[i];
|
|
982
|
+
let paramExists = false;
|
|
983
|
+
|
|
984
|
+
if (paramName.includes("/")) {
|
|
985
|
+
let names = paramName.split("/"); // if (params[names[0]]) {
|
|
986
|
+
// paramExists = true;
|
|
987
|
+
// } else {
|
|
988
|
+
// if (params[names[1]]) {
|
|
989
|
+
// paramExists = true;
|
|
990
|
+
// params[names[0]] = params[names[1]];
|
|
991
|
+
// delete params[names[1]];
|
|
992
|
+
// }
|
|
993
|
+
// }
|
|
994
|
+
|
|
995
|
+
for (let ind in names) {
|
|
996
|
+
let name = names[ind];
|
|
997
|
+
|
|
998
|
+
if (typeof params[name] != 'undefined') {
|
|
999
|
+
paramExists = true;
|
|
1000
|
+
break;
|
|
1001
|
+
}
|
|
1002
|
+
|
|
1003
|
+
if (paramSufix != "" && typeof params[name + paramSufix] != 'undefined') {
|
|
1004
|
+
paramExists = true;
|
|
1005
|
+
break;
|
|
1006
|
+
}
|
|
1007
|
+
}
|
|
1008
|
+
|
|
1009
|
+
paramName = `${paramName} 之一`;
|
|
1010
|
+
} else {
|
|
1011
|
+
paramExists = typeof params[paramName] != 'undefined' || typeof params[paramName + paramSufix] != 'undefined';
|
|
1012
|
+
}
|
|
1013
|
+
|
|
1014
|
+
if (!paramExists) return ppUtil$3.errorPormise(err$1.ERROR(err$1.PARAMETER_NEEDED, paramName));
|
|
1015
|
+
}
|
|
1016
|
+
|
|
1017
|
+
return Promise.resolve(paramSufix);
|
|
1018
|
+
}
|
|
1019
|
+
/**
|
|
1020
|
+
* 获取客户端IP地址
|
|
1021
|
+
* @param req
|
|
1022
|
+
* @returns {*|string|string}
|
|
1023
|
+
*/
|
|
1024
|
+
|
|
1025
|
+
|
|
1026
|
+
static getClientIp(req) {
|
|
1027
|
+
let ip = req.headers["x-real-ip"] || req.headers["x-true-ip"] || req.headers['x-forwarded-for'] || req.headers['x-forward-for'] || req.connection.remoteAddress || req.socket.remoteAddress || req.headers['host'] || ""; // console.log("Request IP:", ip, "req: ", req);
|
|
1028
|
+
|
|
1029
|
+
if (ip.indexOf(",") >= 0) {
|
|
1030
|
+
ip = ip.split(',')[0];
|
|
1031
|
+
}
|
|
1032
|
+
|
|
1033
|
+
if (ip.indexOf(":") >= 0) {
|
|
1034
|
+
ip = ip.substring(ip.lastIndexOf(':') + 1);
|
|
1035
|
+
}
|
|
1036
|
+
|
|
1037
|
+
return ip;
|
|
1038
|
+
}
|
|
1039
|
+
/**
|
|
1040
|
+
* 获取与本机一起提供服务的所有主机
|
|
1041
|
+
* @param params
|
|
1042
|
+
* @returns {{port: (number|number), hosts: [string]}}
|
|
1043
|
+
*/
|
|
1044
|
+
|
|
1045
|
+
|
|
1046
|
+
static getEnvHosts(params) {
|
|
1047
|
+
configNeeded();
|
|
1048
|
+
return {
|
|
1049
|
+
hosts: appSetting$1.serverHosts || ["localhost"],
|
|
1050
|
+
port: appSetting$1.listenPort || +params.port || 8443
|
|
1051
|
+
};
|
|
1052
|
+
}
|
|
1053
|
+
/**
|
|
1054
|
+
* 检查指定的host和发送请求的ip是不是自己的ip
|
|
1055
|
+
* @param host
|
|
1056
|
+
* @param req
|
|
1057
|
+
* @returns {Promise<*>}
|
|
1058
|
+
*/
|
|
1059
|
+
|
|
1060
|
+
|
|
1061
|
+
static async hostIsMySelf(host, req) {
|
|
1062
|
+
let clientIp = apiUtil$1.getClientIp(req);
|
|
1063
|
+
return ppUtil$3.getMyIp({
|
|
1064
|
+
hosts: [host, clientIp]
|
|
1065
|
+
});
|
|
1066
|
+
}
|
|
1067
|
+
/**
|
|
1068
|
+
* 检查是否应该把请求转发到其它服务器,若是则转发
|
|
1069
|
+
* @param options
|
|
1070
|
+
* @returns {Promise<boolean>}
|
|
1071
|
+
*/
|
|
1072
|
+
|
|
1073
|
+
|
|
1074
|
+
static async checkForwardsHost(options) {
|
|
1075
|
+
configNeeded();
|
|
1076
|
+
const params = options.replacements;
|
|
1077
|
+
const myEnvHosts = apiUtil$1.getEnvHosts(params);
|
|
1078
|
+
const myIp = ppUtil$3.getMyIp();
|
|
1079
|
+
const host = params.host || myIp;
|
|
1080
|
+
if (!myEnvHosts.hosts.contains(host)) throw [err$1.ACCESS_REFUSED, `环境${conf$2.envId}貌似无此主机:${params.host}`];
|
|
1081
|
+
|
|
1082
|
+
if (!apiUtil$1.hostIsMySelf(host, options._res.req)) {
|
|
1083
|
+
let result = await apiUtil$1.forwardsTo(host, myEnvHosts.port, params, options._res.req, myIp);
|
|
1084
|
+
|
|
1085
|
+
options._res.send(result);
|
|
1086
|
+
|
|
1087
|
+
return true;
|
|
1088
|
+
}
|
|
1089
|
+
|
|
1090
|
+
return false;
|
|
1091
|
+
}
|
|
1092
|
+
/**
|
|
1093
|
+
* 将收到的请求转发到另一台主机
|
|
1094
|
+
* @param anotherIp
|
|
1095
|
+
* @param port
|
|
1096
|
+
* @param params
|
|
1097
|
+
* @param req
|
|
1098
|
+
* @param lanClient
|
|
1099
|
+
* @returns {Promise<*>}
|
|
1100
|
+
*/
|
|
1101
|
+
|
|
1102
|
+
|
|
1103
|
+
static async forwardsTo(anotherIp, port, params, req, lanClient) {
|
|
1104
|
+
let url = anotherIp.indexOf("://") > 0 ? anotherIp : `${req.headers.scheme}://${anotherIp}:${port}${req.originalUrl}`;
|
|
1105
|
+
|
|
1106
|
+
if (url.indexOf("?") > 0) {
|
|
1107
|
+
url = url.substring(0, url.indexOf("?"));
|
|
1108
|
+
}
|
|
1109
|
+
|
|
1110
|
+
let reqOptions = {
|
|
1111
|
+
method: req.method,
|
|
1112
|
+
url: url,
|
|
1113
|
+
data: params
|
|
1114
|
+
};
|
|
1115
|
+
let result = await netUtil$1.apiRequest(reqOptions);
|
|
1116
|
+
|
|
1117
|
+
if (result.status !== 200) {
|
|
1118
|
+
console.log(`访问 ${reqOptions.url} 出错`, result.status, result.res.statusMessage);
|
|
1119
|
+
throw [err$1.EXCEPTION, `[${result.status}] - ${result.res.statusMessage}`];
|
|
1120
|
+
}
|
|
1121
|
+
|
|
1122
|
+
return result.data;
|
|
1123
|
+
}
|
|
1124
|
+
/**
|
|
1125
|
+
* 解析配置项路径
|
|
1126
|
+
* @param keyPath
|
|
1127
|
+
* @returns {{parent: null, parentKey: string, value, key: string}}
|
|
1128
|
+
*/
|
|
1129
|
+
|
|
1130
|
+
|
|
1131
|
+
static parseCfgPath(keyPath) {
|
|
1132
|
+
let keys = Array.isArray(keyPath) ? keyPath : keyPath.split(".");
|
|
1133
|
+
let parentKey = "";
|
|
1134
|
+
let key = "config";
|
|
1135
|
+
let value = conf$2;
|
|
1136
|
+
let parent = null;
|
|
1137
|
+
|
|
1138
|
+
for (let i = 0; i < keys.length; i++) {
|
|
1139
|
+
parent = value;
|
|
1140
|
+
parentKey += (parentKey ? "." : "") + key;
|
|
1141
|
+
key = keys[i];
|
|
1142
|
+
value = parent[key];
|
|
1143
|
+
|
|
1144
|
+
if (value === undefined) {
|
|
1145
|
+
throw [err$1.INVALID_PARAM, `无此配置项: ${key}`];
|
|
1146
|
+
}
|
|
1147
|
+
}
|
|
1148
|
+
|
|
1149
|
+
return {
|
|
1150
|
+
parent,
|
|
1151
|
+
parentKey,
|
|
1152
|
+
key,
|
|
1153
|
+
value
|
|
1154
|
+
};
|
|
1155
|
+
} //#endregion
|
|
1156
|
+
//region ====中间件
|
|
1157
|
+
|
|
1158
|
+
/**
|
|
1159
|
+
* 检查令牌,若存在则将其的用户信息置入req,否则返回错误信息
|
|
1160
|
+
*/
|
|
1161
|
+
|
|
1162
|
+
|
|
1163
|
+
static async $checkToken(req, res, next) {
|
|
1164
|
+
try {
|
|
1165
|
+
await apiUtil$1.checkRequestToken(req);
|
|
1166
|
+
await next();
|
|
1167
|
+
} catch (e) {
|
|
1168
|
+
res.send(err$1.ERROR(e));
|
|
1169
|
+
}
|
|
1170
|
+
|
|
1171
|
+
return false;
|
|
1172
|
+
}
|
|
1173
|
+
/**
|
|
1174
|
+
* 检查令牌,若存在则将其用户信息置入req
|
|
1175
|
+
*/
|
|
1176
|
+
|
|
1177
|
+
|
|
1178
|
+
static async $getToken(req, res, next) {
|
|
1179
|
+
function extractToken(req, res) {
|
|
1180
|
+
if (!req.accessToken) {
|
|
1181
|
+
//检查post的信息或者url查询参数或者头信息
|
|
1182
|
+
let token = req.headers["access_token"] || req.headers['x-access-token']; //向后兼容
|
|
1183
|
+
|
|
1184
|
+
if (!token) {
|
|
1185
|
+
let params = apiUtil$1.extractParams(req);
|
|
1186
|
+
token = params["access_token"];
|
|
1187
|
+
|
|
1188
|
+
if (token) {
|
|
1189
|
+
delete params["access_token"];
|
|
1190
|
+
} else if (params.token) {
|
|
1191
|
+
token = params.token; //向后兼容
|
|
1192
|
+
|
|
1193
|
+
delete params.token; // } else if (res) {
|
|
1194
|
+
// // 如果没有token,则返回错误
|
|
1195
|
+
// console.log(err.TOKEN_NEEDED);
|
|
1196
|
+
// res.send(err.ERROR(err.TOKEN_NEEDED));
|
|
1197
|
+
}
|
|
1198
|
+
}
|
|
1199
|
+
|
|
1200
|
+
req.accessToken = token;
|
|
1201
|
+
}
|
|
1202
|
+
|
|
1203
|
+
return req.accessToken;
|
|
1204
|
+
}
|
|
1205
|
+
|
|
1206
|
+
try {
|
|
1207
|
+
if (extractToken(req, res)) {
|
|
1208
|
+
await apiUtil$1.restoreTokenData(apiUtil$1.userTokenStoreKey(req.accessToken), apiUtil$1.tokenExpireTime(req)).then(function (data) {
|
|
1209
|
+
req.userInfo = apiUtil$1.setUserIdNo(data, data._idNo);
|
|
1210
|
+
}, function (e) {//no token
|
|
1211
|
+
});
|
|
1212
|
+
}
|
|
1213
|
+
|
|
1214
|
+
return true;
|
|
1215
|
+
} catch (e) {
|
|
1216
|
+
res.send(err$1.ERROR(e));
|
|
1217
|
+
return false;
|
|
1218
|
+
}
|
|
1219
|
+
}
|
|
1220
|
+
/**
|
|
1221
|
+
* 标识此请求已经完成了签名验证或者无需进行签名验证
|
|
1222
|
+
*/
|
|
1223
|
+
|
|
1224
|
+
|
|
1225
|
+
static $signatureVerified(req, res, next) {
|
|
1226
|
+
req.signatureVerified = true;
|
|
1227
|
+
return true;
|
|
1228
|
+
}
|
|
1229
|
+
/**
|
|
1230
|
+
* 标识此请求是从前端发过来的,比如移动端、PC浏览器等,区别于SPO一般的服务端后台请求。
|
|
1231
|
+
* 如果在请求参数中包含有签名参数,则将其移到请求头中
|
|
1232
|
+
*/
|
|
1233
|
+
|
|
1234
|
+
|
|
1235
|
+
static $isMobile(req, res, next) {
|
|
1236
|
+
req.isMobile = true;
|
|
1237
|
+
|
|
1238
|
+
if (!req.signatureVerified) {
|
|
1239
|
+
let params = apiUtil$1.extractParams(req);
|
|
1240
|
+
moveProperty(params, req.headers, "access_token");
|
|
1241
|
+
moveProperty(params, req.headers, "timestamp");
|
|
1242
|
+
|
|
1243
|
+
if (moveProperty(params, req.headers, "signature")) {
|
|
1244
|
+
req.headers.signature = decodeURIComponent(req.headers.signature);
|
|
1245
|
+
}
|
|
1246
|
+
}
|
|
1247
|
+
|
|
1248
|
+
next();
|
|
1249
|
+
}
|
|
1250
|
+
/**
|
|
1251
|
+
* 检查企业 API 调用合法性 (apiKey, apiSecret)
|
|
1252
|
+
* @param req
|
|
1253
|
+
* @param res
|
|
1254
|
+
* @param next
|
|
1255
|
+
*/
|
|
1256
|
+
|
|
1257
|
+
|
|
1258
|
+
static $checkApiKeyOld(req, res, next) {
|
|
1259
|
+
//检查post的信息或者url查询参数或者头信息
|
|
1260
|
+
let tokenData = apiUtil$1.extractTokenData(req);
|
|
1261
|
+
let params = apiUtil$1.extractParams(req);
|
|
1262
|
+
apiUtil$1.createApiCallRec(tokenData, req);
|
|
1263
|
+
let errResponse = null;
|
|
1264
|
+
|
|
1265
|
+
if (!tokenData.clientIp) {
|
|
1266
|
+
errResponse = apiUtil$1.spoApiFail(err$1.GET_CLIENTIP_FAIL, req);
|
|
1267
|
+
} else if (!tokenData.apiKey) {
|
|
1268
|
+
errResponse = apiUtil$1.spoApiFail([err$1.PARAMETER_NEEDED, "apiKey"], req);
|
|
1269
|
+
} else if (!tokenData.apiSecret) {
|
|
1270
|
+
errResponse = apiUtil$1.spoApiFail([err$1.PARAMETER_NEEDED, "apiSecret"], req);
|
|
1271
|
+
}
|
|
1272
|
+
|
|
1273
|
+
if (errResponse != null) {
|
|
1274
|
+
apiUtil$1._saveApiCallRec(req.apiCallRec, errResponse);
|
|
1275
|
+
|
|
1276
|
+
apiUtil$1.sendOrRedirect(req, res, errResponse);
|
|
1277
|
+
} else {
|
|
1278
|
+
apiUtil$1.checkApiCallValid(tokenData, req).then(companyInfo => {
|
|
1279
|
+
params.companyId = params.companyId || companyInfo.companyId;
|
|
1280
|
+
req.companyInfo = companyInfo;
|
|
1281
|
+
next();
|
|
1282
|
+
}, e => {
|
|
1283
|
+
console.log('apiCallInvalid:', e);
|
|
1284
|
+
let errResponse = spoApiFail(e, req);
|
|
1285
|
+
|
|
1286
|
+
apiUtil$1._saveApiCallRec(req.apiCallRec, errResponse);
|
|
1287
|
+
|
|
1288
|
+
apiUtil$1.sendOrRedirect(req, res, errResponse);
|
|
1289
|
+
});
|
|
1290
|
+
}
|
|
1291
|
+
}
|
|
1292
|
+
/**
|
|
1293
|
+
* 检查机构令牌
|
|
1294
|
+
*/
|
|
1295
|
+
|
|
1296
|
+
|
|
1297
|
+
static $checkApiKey(req, res, next) {
|
|
1298
|
+
if (req.ignoreToken) {
|
|
1299
|
+
next();
|
|
1300
|
+
return;
|
|
1301
|
+
}
|
|
1302
|
+
|
|
1303
|
+
let accessToken = apiUtil$1.extractToken(req);
|
|
1304
|
+
|
|
1305
|
+
if (!accessToken) {
|
|
1306
|
+
res.send(apiUtil$1.spoApiFail(err$1.TOKEN_NEEDED, req)); // apiUtil.sendOrRedirect(req, res, spoApiFail(err.TOKEN_NEEDED, req));
|
|
1307
|
+
|
|
1308
|
+
return;
|
|
1309
|
+
}
|
|
1310
|
+
|
|
1311
|
+
apiUtil$1.restoreTokenData(apiUtil$1.apiTokenStoreKey(accessToken)).then(p => {
|
|
1312
|
+
// req.headers[hnApiKey] = p.apiKey || '';
|
|
1313
|
+
// req.headers[hnApiSecret] = p.apiSecret || '';
|
|
1314
|
+
if (req.isMobile) {
|
|
1315
|
+
// GET 请求的应该都是H5页面,由手机前端发起,需要把headers中的请求方ip换成服务端的
|
|
1316
|
+
// todo: 如何在API访问记录中记住请求者(手机端)的真实IP
|
|
1317
|
+
req.headers['x-phone-ip'] = apiUtil$1.getClientIp(req);
|
|
1318
|
+
req.headers['x-real-ip'] = p.clientIp;
|
|
1319
|
+
} else {
|
|
1320
|
+
p.clientIp = apiUtil$1.getClientIp(req);
|
|
1321
|
+
}
|
|
1322
|
+
|
|
1323
|
+
req.isApiCall = true;
|
|
1324
|
+
req.tokenData = p;
|
|
1325
|
+
return apiUtil$1.$checkApiKeyOld(req, res, next);
|
|
1326
|
+
}).catch(e => {
|
|
1327
|
+
apiUtil$1.sendOrRedirect(req, res, apiUtil$1.spoApiFail(err$1.TOKEN_INVALID, req));
|
|
1328
|
+
});
|
|
1329
|
+
}
|
|
1330
|
+
/**
|
|
1331
|
+
* 检查请求令牌,允许个人用户令牌和机构令牌,若不存在或不合法,则返回错误信息
|
|
1332
|
+
* @param req
|
|
1333
|
+
* @param res
|
|
1334
|
+
* @param next
|
|
1335
|
+
* @returns {Promise<void|boolean|boolean|undefined>}
|
|
1336
|
+
*/
|
|
1337
|
+
|
|
1338
|
+
|
|
1339
|
+
static async $checkTokenOrApiKey(req, res, next) {
|
|
1340
|
+
let accessToken = apiUtil$1.extractToken(req, res);
|
|
1341
|
+
|
|
1342
|
+
if (accessToken) {
|
|
1343
|
+
let tokenExist = await apiUtil$1.tokenDataExist(apiUtil$1.userTokenStoreKey(accessToken));
|
|
1344
|
+
|
|
1345
|
+
if (tokenExist) {
|
|
1346
|
+
return await apiUtil$1.$checkToken(req, res, next);
|
|
1347
|
+
}
|
|
1348
|
+
|
|
1349
|
+
tokenExist = await apiUtil$1.tokenDataExist(apiUtil$1.apiTokenStoreKey(accessToken));
|
|
1350
|
+
|
|
1351
|
+
if (tokenExist) {
|
|
1352
|
+
return apiUtil$1.$checkApiKey(req, res, next);
|
|
1353
|
+
} // 如果给定的token不存在,看看是不是平台内部调用
|
|
1354
|
+
|
|
1355
|
+
|
|
1356
|
+
return await apiUtil$1.checkInternalToken(req).catch(e => {
|
|
1357
|
+
res.send(apiUtil$1.apiFail(e, req));
|
|
1358
|
+
return false;
|
|
1359
|
+
});
|
|
1360
|
+
}
|
|
1361
|
+
} //#endregion
|
|
1362
|
+
//region ====一些通用服务功能
|
|
1363
|
+
|
|
1364
|
+
/**
|
|
1365
|
+
* 获取配置数据
|
|
1366
|
+
* @param options
|
|
1367
|
+
* @returns {Promise<boolean|*>}
|
|
1368
|
+
*/
|
|
1369
|
+
// api/config/appSetting.ossEnabled
|
|
1370
|
+
|
|
1371
|
+
|
|
1372
|
+
static async getConfigValue(options) {
|
|
1373
|
+
configNeeded();
|
|
1374
|
+
const params = options.replacements;
|
|
1375
|
+
let item = params.item;
|
|
1376
|
+
delete params.item;
|
|
1377
|
+
if (await apiUtil$1.checkForwardsHost(options)) return true;
|
|
1378
|
+
let c = apiUtil$1.parseCfgPath(item);
|
|
1379
|
+
delete c.parent;
|
|
1380
|
+
c.host = ppUtil$3.getMyIp();
|
|
1381
|
+
return c;
|
|
1382
|
+
}
|
|
1383
|
+
/**
|
|
1384
|
+
* 设置配置数据
|
|
1385
|
+
* @param options
|
|
1386
|
+
* @returns {Promise<*>}
|
|
1387
|
+
*/
|
|
1388
|
+
|
|
1389
|
+
|
|
1390
|
+
static async setConfigValue(options) {
|
|
1391
|
+
configNeeded();
|
|
1392
|
+
const params = options.replacements;
|
|
1393
|
+
let item = params.item;
|
|
1394
|
+
delete params.item; // if (await checkForwardsHost(options))
|
|
1395
|
+
// return true;
|
|
1396
|
+
|
|
1397
|
+
await apiUtil$1.parametersOK(params, "value");
|
|
1398
|
+
let c = apiUtil$1.parseCfgPath(item);
|
|
1399
|
+
|
|
1400
|
+
if (typeof c.value === "object") {
|
|
1401
|
+
throw [err$1.ACCESS_REFUSED, `暂不支持修改复杂配置`];
|
|
1402
|
+
} // c.oldValue = c.value;
|
|
1403
|
+
|
|
1404
|
+
|
|
1405
|
+
c.newValue = params.value;
|
|
1406
|
+
c.parent[c.key] = c.newValue;
|
|
1407
|
+
delete c.parent;
|
|
1408
|
+
c.host = ppUtil$3.getMyIp();
|
|
1409
|
+
return c; // 应用层自行处理多机同步
|
|
1410
|
+
} //#endregion
|
|
1411
|
+
|
|
1412
|
+
|
|
1413
|
+
}
|
|
1414
|
+
|
|
1415
|
+
function configNeeded() {
|
|
1416
|
+
if (!conf$2 || !err$1) {
|
|
1417
|
+
ppUtil$3.configNeeded();
|
|
1418
|
+
conf$2 = ppUtil$3.appConfig;
|
|
1419
|
+
appSetting$1 = conf$2.appSetting;
|
|
1420
|
+
err$1 = ppUtil$3.appErrCfg;
|
|
1421
|
+
}
|
|
1422
|
+
}
|
|
1423
|
+
|
|
1424
|
+
var ppUtilApi = apiUtil$1;
|
|
1425
|
+
|
|
1426
|
+
const fs = require$$0$1;
|
|
1427
|
+
const path = require$$1$1;
|
|
1428
|
+
const ppUtil$2 = require$$1.ppUtil;
|
|
1429
|
+
const redisUtil = require$$2.redisUtil;
|
|
1430
|
+
let conf$1, err; // const dbCheck = require('../dbupdate/dd-version');
|
|
1431
|
+
|
|
1432
|
+
/**
|
|
1433
|
+
* API服务启动时前置条件检查
|
|
1434
|
+
* ok = await preconditions
|
|
1435
|
+
* .setAppName(conf.thisApp)
|
|
1436
|
+
* .addCheckPromise(preconditions.checkExEnvSetting())
|
|
1437
|
+
* .addCheckPromise(preconditions.checkRedis())
|
|
1438
|
+
* .addCheckPromise(checkDatabase())
|
|
1439
|
+
* .addChecker(myChecker, args)
|
|
1440
|
+
* .checkAll()
|
|
1441
|
+
*/
|
|
1442
|
+
|
|
1443
|
+
class preconditions$1 {
|
|
1444
|
+
static appName;
|
|
1445
|
+
static checkFunctions = [];
|
|
1446
|
+
static checkPromises = [];
|
|
1447
|
+
|
|
1448
|
+
static setAppName(aName) {
|
|
1449
|
+
ppUtil$2.configNeeded();
|
|
1450
|
+
conf$1 = ppUtil$2.appConfig;
|
|
1451
|
+
err = ppUtil$2.appErrCfg;
|
|
1452
|
+
preconditions$1.appName = aName || conf$1.thisApp;
|
|
1453
|
+
return preconditions$1;
|
|
1454
|
+
}
|
|
1455
|
+
|
|
1456
|
+
static addCheckPromise(p) {
|
|
1457
|
+
preconditions$1.checkPromises.push(p);
|
|
1458
|
+
return preconditions$1;
|
|
1459
|
+
}
|
|
1460
|
+
|
|
1461
|
+
static addChecker(checkFunc, args) {
|
|
1462
|
+
preconditions$1.checkFunctions.push({
|
|
1463
|
+
check: checkFunc,
|
|
1464
|
+
args: args
|
|
1465
|
+
});
|
|
1466
|
+
return preconditions$1;
|
|
1467
|
+
}
|
|
1468
|
+
|
|
1469
|
+
static async checkAll() {
|
|
1470
|
+
for (let i = 0; i < preconditions$1.checkFunctions.length; i++) {
|
|
1471
|
+
const f = preconditions$1.checkFunctions[i];
|
|
1472
|
+
preconditions$1.addCheckPromise(f.check(f.args));
|
|
1473
|
+
}
|
|
1474
|
+
|
|
1475
|
+
for (let i = 0; i < preconditions$1.checkPromises.length; i++) {
|
|
1476
|
+
let msg = await preconditions$1.checkPromises[i];
|
|
1477
|
+
|
|
1478
|
+
if (msg) {
|
|
1479
|
+
if (!preconditions$1.messages) {
|
|
1480
|
+
preconditions$1.messages = [];
|
|
1481
|
+
}
|
|
1482
|
+
|
|
1483
|
+
preconditions$1.messages.push(`${preconditions$1.messages.length + 1}. ${msg}`);
|
|
1484
|
+
}
|
|
1485
|
+
}
|
|
1486
|
+
|
|
1487
|
+
let text = "";
|
|
1488
|
+
|
|
1489
|
+
if (preconditions$1.messages) {
|
|
1490
|
+
text = `*** 由于以下原因,${preconditions$1.appName} 尚不能正常提供服务:\n\n` + preconditions$1.messages.join("\n\n") + "\n\n*** 请检查以上各项条件,修复后重新启动服务";
|
|
1491
|
+
console.log("\n" + text); // for (let i = 0; i < preconditions.messages.length; i++) {
|
|
1492
|
+
// console.log(preconditions.messages[i]);
|
|
1493
|
+
// }
|
|
1494
|
+
}
|
|
1495
|
+
|
|
1496
|
+
if (!(await fs.async_exists("../log"))) {
|
|
1497
|
+
await fs.async_mkdir("../log");
|
|
1498
|
+
}
|
|
1499
|
+
|
|
1500
|
+
await fs.async_writeFile(`../log/preconditions`, text);
|
|
1501
|
+
return !text;
|
|
1502
|
+
} // 检查器
|
|
1503
|
+
|
|
1504
|
+
/**
|
|
1505
|
+
* 检查本机外部配置文件版本
|
|
1506
|
+
*/
|
|
1507
|
+
|
|
1508
|
+
|
|
1509
|
+
static async checkExEnvSetting(loadjs) {
|
|
1510
|
+
return await checkExEnvSetting(loadjs);
|
|
1511
|
+
}
|
|
1512
|
+
/**
|
|
1513
|
+
* redis 可用性检查
|
|
1514
|
+
*/
|
|
1515
|
+
|
|
1516
|
+
|
|
1517
|
+
static async checkRedis() {
|
|
1518
|
+
return await checkRedis();
|
|
1519
|
+
} // /**
|
|
1520
|
+
// * 数据库可用性及业务数据版本版本检查
|
|
1521
|
+
// */
|
|
1522
|
+
// static async checkDatabase() {
|
|
1523
|
+
// return await checkDatabase();
|
|
1524
|
+
// }
|
|
1525
|
+
|
|
1526
|
+
|
|
1527
|
+
}
|
|
1528
|
+
|
|
1529
|
+
async function createEnvSettingFile(fileName) {
|
|
1530
|
+
try {
|
|
1531
|
+
const cfgText = await ppUtil$2.doCreateEnvSettingFile(fileName);
|
|
1532
|
+
|
|
1533
|
+
if (cfgText.indexOf(`cfgVersion: "${conf$1._envSetting.cfgVersion}"`) > 0) {
|
|
1534
|
+
console.log(`\n*** 已創建新的本機環境配置文件\n${fileName}\n请檢查各項內容是否正确(此项更新服务可正常运行)\n\n`);
|
|
1535
|
+
return "";
|
|
1536
|
+
}
|
|
1537
|
+
|
|
1538
|
+
return `已創建新的本機環境配置文件\n${fileName}\n请檢查並正確設置各項內容,然後將配置版本號修改為${conf$1._envSettings.default.cfgVersion}`;
|
|
1539
|
+
} catch (e) {
|
|
1540
|
+
return `創建本機環境配置文件失敗\n《${fileName}》\n${err.ERROR(e).message}`;
|
|
1541
|
+
}
|
|
1542
|
+
}
|
|
1543
|
+
|
|
1544
|
+
async function checkExEnvSetting(loadjs) {
|
|
1545
|
+
if (!conf$1._envSetting.localSettingImported) {
|
|
1546
|
+
let fileName = conf$1.getEnvSettingFileName();
|
|
1547
|
+
|
|
1548
|
+
if (!fs.existsSync(fileName)) {
|
|
1549
|
+
return await createEnvSettingFile(fileName);
|
|
1550
|
+
}
|
|
1551
|
+
|
|
1552
|
+
let envSettingEx = loadjs(fileName);
|
|
1553
|
+
|
|
1554
|
+
if (envSettingEx.cfgVersion !== conf$1._envSettings.default.cfgVersion) {
|
|
1555
|
+
if (envSettingEx.cfgVersion !== "0.0") {
|
|
1556
|
+
let fp = path.parse(fileName);
|
|
1557
|
+
let newFileName = path.join(fp.dir, fp.name + envSettingEx.cfgVersion + fp.ext);
|
|
1558
|
+
|
|
1559
|
+
if (!fs.existsSync(newFileName)) {
|
|
1560
|
+
fs.renameSync(fileName, newFileName);
|
|
1561
|
+
}
|
|
1562
|
+
}
|
|
1563
|
+
|
|
1564
|
+
return await createEnvSettingFile(fileName);
|
|
1565
|
+
}
|
|
1566
|
+
}
|
|
1567
|
+
} // async function checkDatabase() {
|
|
1568
|
+
// return dbCheck.check().then(info => info.updateMessage);
|
|
1569
|
+
// }
|
|
1570
|
+
|
|
1571
|
+
|
|
1572
|
+
async function checkRedis() {
|
|
1573
|
+
if (!conf$1.redis.enabled) return "";
|
|
1574
|
+
const redis = redisUtil.newClient("io"); // console.log(`checkRedis begin:`);
|
|
1575
|
+
|
|
1576
|
+
await ppUtil$2.wait(15 * 1000, param => {
|
|
1577
|
+
if (redis.ready && redis.connected || redis.error) {
|
|
1578
|
+
return true;
|
|
1579
|
+
}
|
|
1580
|
+
}).catch(e => {
|
|
1581
|
+
redis.error = e;
|
|
1582
|
+
});
|
|
1583
|
+
|
|
1584
|
+
if (redis.error) {
|
|
1585
|
+
console.log(`未能成功連接 redis: ${redis.error},請檢查相關設置`);
|
|
1586
|
+
return `未能成功連接 redis: ${redis.error},請檢查相關設置`;
|
|
1587
|
+
} // console.log(`checkRedis done:`);
|
|
1588
|
+
// console.log(redis);
|
|
1589
|
+
|
|
1590
|
+
}
|
|
1591
|
+
|
|
1592
|
+
var ppPrecond = preconditions$1;
|
|
1593
|
+
|
|
1594
|
+
// 若 redis 可用,则使用基于 redis 的消息订阅发布系统
|
|
1595
|
+
// 若 redis 不可用,则将消息转发到其它主机
|
|
1596
|
+
|
|
1597
|
+
const {
|
|
1598
|
+
ppUtil: ppUtil$1
|
|
1599
|
+
} = require$$1;
|
|
1600
|
+
const RedisMessenger = require$$1$2;
|
|
1601
|
+
const {
|
|
1602
|
+
netUtil
|
|
1603
|
+
} = require$$3;
|
|
1604
|
+
let conf;
|
|
1605
|
+
|
|
1606
|
+
class commonMessenger$1 {
|
|
1607
|
+
static myMsgAddr = "";
|
|
1608
|
+
static redisMessenger = null;
|
|
1609
|
+
static onMessage = [];
|
|
1610
|
+
|
|
1611
|
+
static initMessenger(appConfig, appErrCfg, msgChannel) {
|
|
1612
|
+
conf = appConfig;
|
|
1613
|
+
this.redisMessenger = conf.redis.enabled ? new RedisMessenger(appConfig, appErrCfg, msgChannel).subscribe(msgChannel) : null;
|
|
1614
|
+
this.myMsgAddr = commonMessenger$1.getMyMsgAddr();
|
|
1615
|
+
}
|
|
1616
|
+
|
|
1617
|
+
static getMyMsgAddr() {
|
|
1618
|
+
if (!conf.myMsgAddr) {
|
|
1619
|
+
conf.pm_id = process.env.pm_id || "0";
|
|
1620
|
+
let myIp = ppUtil$1.getMyIp();
|
|
1621
|
+
|
|
1622
|
+
if (this.redisMessenger) {
|
|
1623
|
+
myIp = `${conf.pm_id}@${myIp}`;
|
|
1624
|
+
}
|
|
1625
|
+
|
|
1626
|
+
conf.myMsgAddr = myIp;
|
|
1627
|
+
console.log(`myMsgAddr: `, conf.myMsgAddr);
|
|
1628
|
+
}
|
|
1629
|
+
|
|
1630
|
+
return conf.myMsgAddr;
|
|
1631
|
+
}
|
|
1632
|
+
|
|
1633
|
+
static setMessageHandle(messageHandle) {
|
|
1634
|
+
if (this.redisMessenger) {
|
|
1635
|
+
return this.redisMessenger.setMessageHandle(messageHandle, msgChannel);
|
|
1636
|
+
}
|
|
1637
|
+
|
|
1638
|
+
if (commonMessenger$1.onMessage.indexOf(messageHandle) < 0) {
|
|
1639
|
+
commonMessenger$1.onMessage.push(messageHandle);
|
|
1640
|
+
}
|
|
1641
|
+
|
|
1642
|
+
return commonMessenger$1;
|
|
1643
|
+
}
|
|
1644
|
+
|
|
1645
|
+
static async publishMessage(message) {
|
|
1646
|
+
if (this.redisMessenger) {
|
|
1647
|
+
return this.redisMessenger.publish(message, msgChannel);
|
|
1648
|
+
} else {
|
|
1649
|
+
//没有消息处理器,则将消息转发到目标地址(不支持pm2多进程)
|
|
1650
|
+
if (message.destAddr) {
|
|
1651
|
+
await forwardMessage(message);
|
|
1652
|
+
} else {
|
|
1653
|
+
for (let i = 0; i < conf.appSetting.serverHosts.length; i++) {
|
|
1654
|
+
message.destAddr = conf.appSetting.serverHosts[i];
|
|
1655
|
+
|
|
1656
|
+
if (message.destAddr !== conf.myMsgAddr) {
|
|
1657
|
+
await forwardMessage(message);
|
|
1658
|
+
}
|
|
1659
|
+
}
|
|
1660
|
+
}
|
|
1661
|
+
}
|
|
1662
|
+
}
|
|
1663
|
+
|
|
1664
|
+
static async handleInternalMessage(options) {
|
|
1665
|
+
const message = options.replacements;
|
|
1666
|
+
|
|
1667
|
+
for (let i = 0; i < commonMessenger$1.onMessage.length; i++) {
|
|
1668
|
+
const appMsgHandle = commonMessenger$1.onMessage[i];
|
|
1669
|
+
|
|
1670
|
+
try {
|
|
1671
|
+
await appMsgHandle(message);
|
|
1672
|
+
} catch (e) {
|
|
1673
|
+
console.log(e);
|
|
1674
|
+
}
|
|
1675
|
+
}
|
|
1676
|
+
}
|
|
1677
|
+
|
|
1678
|
+
}
|
|
1679
|
+
|
|
1680
|
+
async function forwardMessage(message) {
|
|
1681
|
+
let reqOptions = {
|
|
1682
|
+
url: `https://${message.destAddr}:${appSetting.listenPort}/api/message`,
|
|
1683
|
+
method: "POST",
|
|
1684
|
+
data: message
|
|
1685
|
+
};
|
|
1686
|
+
let res = await netUtil.apiRequest(reqOptions).catch(e => {
|
|
1687
|
+
console.log(`转发消息失败, url: ${reqOptions.url}`, e);
|
|
1688
|
+
throw e;
|
|
1689
|
+
});
|
|
1690
|
+
return res.data;
|
|
1691
|
+
}
|
|
1692
|
+
|
|
1693
|
+
var ppMessengerEx = commonMessenger$1;
|
|
1694
|
+
|
|
1695
|
+
const apiUtil = ppUtilApi;
|
|
1696
|
+
const preconditions = ppPrecond;
|
|
1697
|
+
const commonMessenger = ppMessengerEx;
|
|
1698
|
+
var ppUtil = {
|
|
1699
|
+
apiUtil,
|
|
1700
|
+
preconditions,
|
|
1701
|
+
commonMessenger
|
|
1702
|
+
};
|
|
1703
|
+
|
|
1704
|
+
export { ppUtil as default };
|