cgserver 6.0.6 → 6.0.9

package/dist/lib/ThirdParty/WechatTool.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WechatTool = exports.GWechatTool = exports.WechatUserInfo = void 0;
+const _ = require("underscore");
+const URLEncode = require("urlencode");
+const HttpTool_1 = require("../Logic/HttpTool");
+const FrameworkConfig_1 = require("../Config/FrameworkConfig");
+const Log_1 = require("../Logic/Log");
+class WechatUserInfo {
+    openid = "OPENID";
+    nickname = "NICKNAME";
+    sex = 1;
+    province = "PROVINCE";
+    city = "CITY";
+    country = "COUNTRY";
+    headimgurl = "http://wx.qlogo.cn/mmopen/g3MonUZtNHkdmzicIlibx6iaFqAc56vxLSUfpb6n5WKSYVY0ChQKkiaJSgQ1dZuTOgvLLrhJbERQQ4eMsv84eavHiaiceqxibJxCfHe/0";
+    privilege = [
+        "PRIVILEGE1",
+        "PRIVILEGE2"
+    ];
+    unionid = "o6_bmasdasdsad6_2sgVt7hMZOPfL";
+}
+exports.WechatUserInfo = WechatUserInfo;
+exports.GWechatTool = null;
+class WechatTool {
+    /**
+     * 获取获取code的url
+     */
+    getAuthCodeUrl() {
+        let appid = "wx80f0f10fe1304e9d";
+        let url = "https://open.weixin.qq.com/connect/qrconnect?appid=" + FrameworkConfig_1.GFCfg.third_cfg.wechat.app_id;
+        url += "&redirect_uri=" + URLEncode.encode(FrameworkConfig_1.GFCfg.third_cfg.wechat.redirect_uri);
+        url += "&response_type=code&scope=snsapi_login";
+        //必须	client端的状态值。用于第三方应用防止CSRF攻击，成功授权后回调时会原样带回。请务必严格按照流程检查用户与state参数状态的绑定。
+        let state = _.random(1000000, 9999999);
+        url += "&state=" + state;
+        return url;
+    }
+    async getAccessInfo(auth_code) {
+        if (!auth_code) {
+            return null;
+        }
+        let url = "https://api.weixin.qq.com/sns/oauth2/access_token?appid=" + FrameworkConfig_1.GFCfg.third_cfg.wechat.app_id + "&secret=" + FrameworkConfig_1.GFCfg.third_cfg.wechat.app_key + "&code=" + auth_code + "&grant_type=authorization_code";
+        let rs = await HttpTool_1.GHttpTool.httpRequest(url);
+        /*
+        {
+            "access_token":"ACCESS_TOKEN",
+            "expires_in":7200,
+            "refresh_token":"REFRESH_TOKEN",
+            "openid":"OPENID",
+            "scope":"SCOPE",
+            "unionid": "o6_bmasdasdsad6_2sgVt7hMZOPfL"
+        }
+        {"errcode":40029,"errmsg":"invalid code"}
+        */
+        if (rs.body && rs.body.access_token) {
+            return rs.body;
+        }
+        else {
+            Log_1.GLog.error(rs.body);
+        }
+        return null;
+    }
+    async getUserInfo(access_token, openid) {
+        let url = "https://api.weixin.qq.com/sns/userinfo?access_token=" + access_token + "&openid=" + openid;
+        let rs = await HttpTool_1.GHttpTool.httpRequest(url);
+        if (rs.body) {
+            return rs.body;
+        }
+        return null;
+    }
+}
+exports.WechatTool = WechatTool;
+exports.GWechatTool = new WechatTool();

package/dist/lib/WebServer/Controller/BaseController.js

@@ -0,0 +1,112 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BaseController = void 0;
+class BaseController {
+    _request = null;
+    get request() {
+        return this._request;
+    }
+    _response = null;
+    get response() {
+        return this._response;
+    }
+    //模块名称
+    _module = "";
+    _ctr_name = "";
+    get ctrName() {
+        return this._ctr_name;
+    }
+    _engine = null;
+    get postData() {
+        if (!this._request) {
+            return {};
+        }
+        return this._request.postData || {};
+    }
+    get paramData() {
+        if (!this._request) {
+            return {};
+        }
+        return this._request.params || {};
+    }
+    constructor(req, res, engine) {
+        this._engine = engine;
+        this._request = req;
+        this._response = res;
+        //静态控制器，传过来全是空
+        if (this._request) {
+            this._request.debugInfo();
+        }
+    }
+    async init() {
+    }
+    /**
+     * 方便static ctr使用
+     * @param req
+     * @param res
+     * @param engine
+     */
+    initStatic(req, res, engine) {
+        this._engine = engine;
+        this._request = req;
+        this._response = res;
+        this._request.debugInfo();
+    }
+    //填充每个页面需要的通用数据
+    _init_data(model) {
+        model = model || {};
+        model.webName = this._engine.cfg.web_name;
+        return { model };
+    }
+    showJson(model) {
+        this._response.renderJson(model, this._request.headers.origin);
+    }
+    show(model) {
+        let html = this._engine.getRenderHtml(this._request, this._response, this._init_data(model));
+        this._response.renderHtml(html);
+    }
+    showText(text, noMeta) {
+        if (!noMeta) {
+            text = "<meta http-equiv='Content-Type' content='text/html; charset=utf-8' />" + text;
+        }
+        this._response.renderHtml(text);
+    }
+    redirect(module, controller, action, params) {
+        module = module || this._module;
+        controller = controller || this._ctr_name;
+        let url = this.parseFullUrl(module, controller, action);
+        params = params || {};
+        let str_p = "";
+        for (let key in params) {
+            str_p += "&" + key + "=" + params[key];
+        }
+        if (str_p.length > 0) {
+            str_p = "?" + str_p.substring(1);
+        }
+        url += str_p;
+        this._response.redirect(url);
+    }
+    parseFullUrl(module, controller, action) {
+        if (typeof action === "undefined" || !action) {
+            action = "index";
+            if (this._engine.cfg.routs.defaults.action == action) {
+                action = null;
+            }
+        }
+        let url = "";
+        if (this._engine.cfg.routs.onlyModule) {
+            url = this._request.root + "/" + controller;
+        }
+        else {
+            url = this._request.root + "/" + module + "/" + controller;
+        }
+        if (action) {
+            url += "/" + action;
+        }
+        return url;
+    }
+    get remoteHost() {
+        return this._request.remoteHost;
+    }
+}
+exports.BaseController = BaseController;

package/dist/lib/WebServer/Controller/BaseUserController.js

@@ -0,0 +1,168 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BaseUserController = void 0;
+const BaseController_1 = require("./BaseController");
+const UserService_1 = require("../../Service/UserService");
+const CacheTool_1 = require("../../Logic/CacheTool");
+const FrameworkConfig_1 = require("../../Config/FrameworkConfig");
+const RedisManager_1 = require("../../Database/RedisManager");
+const MongoCacheService_1 = require("../../Service/MongoCacheService");
+const ini_1 = require("../../Service/ini");
+class BaseUserController extends BaseController_1.BaseController {
+    _user_session_id = "user_session_id";
+    _self_user = null;
+    _user = null; //网页内容的所属，比如，查看别人的博客，那这个信息就是作者的
+    _session_id = null;
+    get selfUser() {
+        return this._self_user;
+    }
+    get isSelf() {
+        return this._self_user && (this._self_user.id == this._user.id);
+    }
+    get isLogin() {
+        return this._self_user && true;
+    }
+    get isCreator() {
+        return this._self_user && (this._self_user.role_group == ini_1.ERoleGroup.Creator);
+    }
+    get isAdmin() {
+        return this._self_user && (this._self_user.role_group == ini_1.ERoleGroup.Admin || this._self_user.role_group == ini_1.ERoleGroup.Creator);
+    }
+    get isProxy() {
+        return this._self_user && (this._self_user.role_group == ini_1.ERoleGroup.Proxy);
+    }
+    get isCommon() {
+        return this._self_user && (this._self_user.role_group == ini_1.ERoleGroup.Common);
+    }
+    async init() {
+        this._engine.cfg.session_type = this._engine.cfg.session_type || FrameworkConfig_1.ESessionType.Cache;
+        this._session_id = this._request.getCookie(this._user_session_id) || this._request.params.session_id || this._request.postData.session_id;
+        let userId = -1;
+        if (this._session_id) {
+            let user = null;
+            if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Cache) {
+                user = CacheTool_1.GCacheTool.get(this._session_id);
+            }
+            else if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Redis) {
+                let user_id = parseInt((await RedisManager_1.GRedisMgr.get(this._session_id)) || "-1");
+                if (user_id > 0) {
+                    user = (await UserService_1.GUserSer.getById(user_id));
+                }
+            }
+            else if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Mongo) {
+                let user_id = (await MongoCacheService_1.GMongoCacheSer.getData(this._session_id)) || -1;
+                if (user_id > 0) {
+                    user = (await UserService_1.GUserSer.getById(user_id));
+                }
+            }
+            if (!user) {
+                this._update_session();
+                //Session不存在清除客户端cookie
+                this._response.clearCookie(this._user_session_id);
+            }
+            else {
+                await this._login(user);
+                userId = user.id;
+            }
+        }
+        let params = this._request.params;
+        if (params.userId && params.userId != userId + "") {
+            this._user = (await UserService_1.GUserSer.getById(params.userId));
+        }
+        else {
+            //不是别人的信息就查看自己的
+            this._user = this._self_user;
+        }
+    }
+    _logout() {
+        if (this._session_id) {
+            if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Cache) {
+                CacheTool_1.GCacheTool.remove(this._session_id);
+            }
+            else if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Redis) {
+                RedisManager_1.GRedisMgr.del(this._session_id);
+            }
+            else if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Mongo) {
+                MongoCacheService_1.GMongoCacheSer.deleteOne({ key: this._session_id });
+            }
+            this._session_id = null;
+        }
+        this._response.clearCookie(this._user_session_id);
+    }
+    _login(user) {
+        if (!user) {
+            return;
+        }
+        if (!this._session_id) {
+            this._session_id = Math.random().toString(36).substr(2) + user.id;
+        }
+        let time = 0;
+        if (this._request.postData.remember == "on") {
+            time = this._engine.cfg.cookie.expires.account_remember;
+        }
+        else {
+            time = this._engine.cfg.cookie.expires.account;
+        }
+        this._response.setCookie(this._user_session_id, this._session_id, time);
+        if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Cache) {
+            CacheTool_1.GCacheTool.add(this._session_id, user, time * 1000);
+        }
+        else if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Redis) {
+            RedisManager_1.GRedisMgr.set(this._session_id, user.id).then(() => {
+                RedisManager_1.GRedisMgr.expire(this._session_id, time);
+            });
+        }
+        else if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Mongo) {
+            let cm = new MongoCacheService_1.MongoCacheModel();
+            cm.key = this._session_id;
+            cm.data = user.id;
+            cm.expireAt = Date.now() + time * 1000;
+            MongoCacheService_1.GMongoCacheSer.updateOne(cm, { key: cm.key }, true);
+        }
+        this._self_user = user;
+    }
+    /**
+     * 用户信息发生更改，同步更新session里面的用户信息
+     */
+    async _update_session() {
+        if (!this._session_id) {
+            return;
+        }
+        let user_id = -1;
+        let um = null;
+        if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Cache) {
+            um = CacheTool_1.GCacheTool.get(this._session_id);
+            if (um) {
+                user_id = um.id;
+            }
+        }
+        else if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Redis) {
+            user_id = parseInt((await RedisManager_1.GRedisMgr.get(this._session_id)) || "-1");
+        }
+        if (user_id < 0) {
+            this._session_id = null;
+            return;
+        }
+        um = (await UserService_1.GUserSer.getById(user_id));
+        this._login(um);
+    }
+    async update_user(user_id) {
+        let user = (await UserService_1.GUserSer.getById(user_id));
+        if (this._user && this._user.id == user.id) {
+            this._user = user;
+        }
+        if (this._self_user && this._self_user.id == user.id) {
+            this._login(user);
+        }
+    }
+    //填充每个页面需要的通用数据
+    _init_data(datas) {
+        let data = super._init_data(datas);
+        data.model.isLogin = this.isLogin;
+        data.model.user = this._user;
+        data.model.selfUser = this._self_user;
+        data.model.isSelf = this.isSelf;
+        return data;
+    }
+}
+exports.BaseUserController = BaseUserController;

package/dist/lib/WebServer/Controller/MongoBaseUserController.js

@@ -0,0 +1,168 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MongoBaseUserController = void 0;
+const BaseController_1 = require("./BaseController");
+const CacheTool_1 = require("../../Logic/CacheTool");
+const FrameworkConfig_1 = require("../../Config/FrameworkConfig");
+const RedisManager_1 = require("../../Database/RedisManager");
+const MongoCacheService_1 = require("../../Service/MongoCacheService");
+const MongoUserService_1 = require("../../Service/MongoUserService");
+const ini_1 = require("../../Service/ini");
+class MongoBaseUserController extends BaseController_1.BaseController {
+    _user_session_id = "user_session_id";
+    _self_user = null;
+    _user = null; //网页内容的所属，比如，查看别人的博客，那这个信息就是作者的
+    _session_id = null;
+    get selfUser() {
+        return this._self_user;
+    }
+    get isSelf() {
+        return this._self_user && (this._self_user.id == this._user.id);
+    }
+    get isLogin() {
+        return this._self_user && true;
+    }
+    get isCreator() {
+        return this._self_user && (this._self_user.role_group == ini_1.ERoleGroup.Creator);
+    }
+    get isAdmin() {
+        return this._self_user && (this._self_user.role_group == ini_1.ERoleGroup.Admin || this._self_user.role_group == ini_1.ERoleGroup.Creator);
+    }
+    get isProxy() {
+        return this._self_user && (this._self_user.role_group == ini_1.ERoleGroup.Proxy);
+    }
+    get isCommon() {
+        return this._self_user && (this._self_user.role_group == ini_1.ERoleGroup.Common);
+    }
+    async init() {
+        this._engine.cfg.session_type = this._engine.cfg.session_type || FrameworkConfig_1.ESessionType.Cache;
+        this._session_id = this._request.getCookie(this._user_session_id) || this._request.params.session_id || this._request.postData.session_id;
+        let userId = -1;
+        if (this._session_id) {
+            let user = null;
+            if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Cache) {
+                user = CacheTool_1.GCacheTool.get(this._session_id);
+            }
+            else if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Redis) {
+                let user_id = parseInt((await RedisManager_1.GRedisMgr.get(this._session_id)) || "-1");
+                if (user_id > 0) {
+                    user = (await MongoUserService_1.GUserSer.getById(user_id));
+                }
+            }
+            else if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Mongo) {
+                let user_id = (await MongoCacheService_1.GMongoCacheSer.getData(this._session_id)) || -1;
+                if (user_id > 0) {
+                    user = (await MongoUserService_1.GUserSer.getById(user_id));
+                }
+            }
+            if (!user) {
+                this._update_session();
+                //Session不存在清除客户端cookie
+                this._response.clearCookie(this._user_session_id);
+            }
+            else {
+                await this._login(user);
+                userId = user.id;
+            }
+        }
+        let params = this._request.params;
+        if (params.userId && params.userId != userId + "") {
+            this._user = (await MongoUserService_1.GUserSer.getById(params.userId));
+        }
+        else {
+            //不是别人的信息就查看自己的
+            this._user = this._self_user;
+        }
+    }
+    _logout() {
+        if (this._session_id) {
+            if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Cache) {
+                CacheTool_1.GCacheTool.remove(this._session_id);
+            }
+            else if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Redis) {
+                RedisManager_1.GRedisMgr.del(this._session_id);
+            }
+            else if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Mongo) {
+                MongoCacheService_1.GMongoCacheSer.deleteOne({ key: this._session_id });
+            }
+            this._session_id = null;
+        }
+        this._response.clearCookie(this._user_session_id);
+    }
+    _login(user) {
+        if (!user) {
+            return;
+        }
+        if (!this._session_id) {
+            this._session_id = Math.random().toString(36).substr(2) + user.id;
+        }
+        let time = 0;
+        if (this._request.postData.remember == "on") {
+            time = this._engine.cfg.cookie.expires.account_remember;
+        }
+        else {
+            time = this._engine.cfg.cookie.expires.account;
+        }
+        this._response.setCookie(this._user_session_id, this._session_id, time);
+        if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Cache) {
+            CacheTool_1.GCacheTool.add(this._session_id, user, time * 1000);
+        }
+        else if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Redis) {
+            RedisManager_1.GRedisMgr.set(this._session_id, user.id).then(() => {
+                RedisManager_1.GRedisMgr.expire(this._session_id, time);
+            });
+        }
+        else if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Mongo) {
+            let cm = new MongoCacheService_1.MongoCacheModel();
+            cm.key = this._session_id;
+            cm.data = user.id;
+            cm.expireAt = Date.now() + time * 1000;
+            MongoCacheService_1.GMongoCacheSer.updateOne(cm, { key: cm.key }, true);
+        }
+        this._self_user = user;
+    }
+    /**
+     * 用户信息发生更改，同步更新session里面的用户信息
+     */
+    async _update_session() {
+        if (!this._session_id) {
+            return;
+        }
+        let user_id = -1;
+        let um = null;
+        if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Cache) {
+            um = CacheTool_1.GCacheTool.get(this._session_id);
+            if (um) {
+                user_id = um.id;
+            }
+        }
+        else if (this._engine.cfg.session_type == FrameworkConfig_1.ESessionType.Redis) {
+            user_id = parseInt((await RedisManager_1.GRedisMgr.get(this._session_id)) || "-1");
+        }
+        if (user_id < 0) {
+            this._session_id = null;
+            return;
+        }
+        um = (await MongoUserService_1.GUserSer.getById(user_id));
+        this._login(um);
+    }
+    async update_user(user_id) {
+        let user = (await MongoUserService_1.GUserSer.getById(user_id));
+        if (this._user && this._user.id == user.id) {
+            this._user = user;
+        }
+        if (this._self_user && this._self_user.id == user.id) {
+            this._login(user);
+        }
+    }
+    //填充每个页面需要的通用数据
+    _init_data(datas) {
+        let data = super._init_data(datas);
+        data.model.isLogin = this.isLogin;
+        data.model.user = this._user;
+        data.model.selfUser = this._self_user;
+        data.model.isSelf = this.isSelf;
+        return data;
+    }
+}
+exports.MongoBaseUserController = MongoBaseUserController;

package/dist/lib/WebServer/Decorator/AdminValidate.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminValidate = void 0;
+function AdminValidate(target, propertyName, descriptor) {
+    let method = descriptor.value;
+    descriptor.value = function () {
+        let self = this;
+        if (!self.isLogin) {
+            self.redirect(null, "Login");
+            return;
+        }
+        if (!self.isAdmin) {
+            self.showText("需要管理员权限");
+            return;
+        }
+        return method.apply(this, arguments);
+    };
+}
+exports.AdminValidate = AdminValidate;

package/dist/lib/WebServer/Decorator/AuthorityValidate.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorityValidate = void 0;
+let AuthorityValidate = function (rg, ctr_name) {
+    ctr_name = ctr_name || "Wechat";
+    return function (target, propertyName, descriptor) {
+        let method = descriptor.value;
+        descriptor.value = function () {
+            let self = this;
+            if (!self.isLogin) {
+                self.redirect(null, ctr_name);
+                return;
+            }
+            if (rg && self.selfUser.role_group != rg) {
+                self.redirect(null, ctr_name); //权限不足
+                return;
+            }
+            return method.apply(this, arguments);
+        };
+    };
+};
+exports.AuthorityValidate = AuthorityValidate;

package/dist/lib/WebServer/Decorator/CreatorValidate.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreatorValidate = void 0;
+function CreatorValidate(target, propertyName, descriptor) {
+    let method = descriptor.value;
+    descriptor.value = function () {
+        let self = this;
+        if (!self.isLogin) {
+            self.redirect(null, "Login");
+            return;
+        }
+        if (!self.isCreator) {
+            self.showText("需要创始人权限");
+            return;
+        }
+        return method.apply(this, arguments);
+    };
+}
+exports.CreatorValidate = CreatorValidate;

package/dist/lib/WebServer/Decorator/JsonAdminValidate.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JsonAdminValidate = void 0;
+function JsonAdminValidate(target, propertyName, descriptor) {
+    let method = descriptor.value;
+    descriptor.value = function () {
+        let self = this;
+        if (!self.isAdmin) {
+            self.showJson({ errcode: { id: 1, des: "需要管理员或创始人权限" }, err: "需要管理员或创始人权限" });
+            return;
+        }
+        return method.apply(this, arguments);
+    };
+}
+exports.JsonAdminValidate = JsonAdminValidate;

package/dist/lib/WebServer/Decorator/JsonAuthorityValidate.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JsonAuthorityValidate = void 0;
+let JsonAuthorityValidate = function (rg) {
+    return function (target, propertyName, descriptor) {
+        let method = descriptor.value;
+        descriptor.value = function () {
+            let self = this;
+            if (!self.isLogin) {
+                self.showJson({ errcode: { id: 1, des: "未登陆" }, err: "未登陆" });
+            }
+            if (rg && self.selfUser.role_group != rg) {
+                self.showJson({ errcode: { id: 2, des: "权限不足" }, err: "权限不足" });
+                return;
+            }
+            return method.apply(this, arguments);
+        };
+    };
+};
+exports.JsonAuthorityValidate = JsonAuthorityValidate;

package/dist/lib/WebServer/Decorator/JsonCreatorValidate.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JsonCreatorValidate = void 0;
+function JsonCreatorValidate(target, propertyName, descriptor) {
+    let method = descriptor.value;
+    descriptor.value = function () {
+        let self = this;
+        if (!self.isLogin) {
+            self.showJson({ errcode: { id: 1, des: "请登陆后尝试" }, err: "请登陆后尝试" });
+            return;
+        }
+        if (!self.isCreator) {
+            self.showJson({ errcode: { id: 1, des: "需要创始人权限" }, err: "需要创始人权限" });
+            return;
+        }
+        return method.apply(this, arguments);
+    };
+}
+exports.JsonCreatorValidate = JsonCreatorValidate;