midway-fatcms 0.0.1-beta.1

package/dist/libs/utils/render-utils.js

@@ -0,0 +1,135 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRenderUtils = void 0;
+const _ = require("lodash");
+const moment = require("moment");
+const functions_1 = require("./functions");
+const fatcms_request_1 = require("./fatcms-request");
+const TypeUtils_1 = require("../crud-pro/utils/TypeUtils");
+function parseCookie(cookieStr) {
+    const cookies = {};
+    if (!cookieStr) {
+        return cookies;
+    }
+    // 分割每个 cookie 项
+    const cookieItems = cookieStr.split(';');
+    for (const item of cookieItems) {
+        // 去除空白字符
+        const trimmedItem = item.trim();
+        if (!trimmedItem) {
+            continue;
+        }
+        // 找到第一个等号的位置
+        const eqIndex = trimmedItem.indexOf('=');
+        if (eqIndex === -1) {
+            continue;
+        }
+        // 提取 key 和 value
+        const key = trimmedItem.substring(0, eqIndex).trim();
+        const value = trimmedItem.substring(eqIndex + 1).trim();
+        // 处理可能的引号
+        if (value.startsWith('"') && value.endsWith('"')) {
+            cookies[key] = value.slice(1, -1);
+        }
+        else {
+            cookies[key] = value;
+        }
+    }
+    return cookies;
+}
+class RenderUtils {
+    constructor(props) {
+        var _a, _b;
+        this.ctx = props.ctx;
+        this.workbenchInfo = props.workbenchInfo || {};
+        this.userInfo = props.userInfo || {};
+        this.appInfo = props.appInfo || {};
+        this.fatcmscsrftoken = props.fatcmscsrftoken;
+        const packageAssets = (0, functions_1.parseJsonObject)(props.package_assets) || {};
+        const fileList = _.get(packageAssets, 'data.fileList');
+        if (Array.isArray(fileList)) {
+            this.fileList = fileList.filter((f) => {
+                return f && f.fileUrl && typeof f.fileUrl === 'string' && f.fileUrl.length > 5; // 至少五个字符。
+            });
+        }
+        else {
+            this.fileList = [];
+            const time = moment().format('YYYY-MM-DD HH:mm:ss.SSS');
+            console.info(time + ' 解析fileList为空==>' + JSON.stringify({
+                workbench_code: (_a = this.workbenchInfo) === null || _a === void 0 ? void 0 : _a.workbench_code,
+                app_code: (_b = this.appInfo) === null || _b === void 0 ? void 0 : _b.app_code,
+            }));
+        }
+    }
+    renderCsrfToken() {
+        return `<script>window.__fatcmscsrftoken = "${this.fatcmscsrftoken}";</script>`;
+    }
+    renderUserInfo() {
+        return `<script>window.__user_info = ${JSON.stringify(this.userInfo)}  </script>`;
+    }
+    renderWorkbenchInfo() {
+        const infoPick = _.pick(this.workbenchInfo, [
+            'id', 'workbench_code', 'workbench_name', 'workbench_domain', 'workbench_desc', 'config_type', 'config_content'
+        ]);
+        return `<script>window.__workbench_info = ${JSON.stringify(infoPick)}</script>`;
+    }
+    renderAppInfo() {
+        const infoPick = _.pick(this.appInfo, [
+            'id', 'app_code', 'app_name', 'app_type', 'app_desc', 'config_type', 'config_content'
+        ]);
+        return `<script>window.__app_info = ${JSON.stringify(infoPick)}</script>`;
+    }
+    renderCookieInfo(keys) {
+        var _a;
+        try {
+            const cookies = parseCookie((_a = this.ctx.headers) === null || _a === void 0 ? void 0 : _a.cookie);
+            const cookieObj = {};
+            if (typeof keys === 'string') {
+                const keyArr = keys.split(',');
+                for (let i = 0; i < keyArr.length; i++) {
+                    const keyName = keyArr[i];
+                    cookieObj[keyName] = cookies[keyName];
+                }
+            }
+            return `<script>window.__cookie_info = ${JSON.stringify(cookieObj)}</script>`;
+        }
+        catch (e) {
+            return `<script>window.__cookie_info_error = ${e}; </script>`;
+        }
+    }
+    renderJsAssets() {
+        const fileList = this.fileList.filter((s) => {
+            return s.fileType === 'js' || s.fileUrl.endsWith('.js');
+        });
+        const arr = fileList.map(f => {
+            if (f.isModule) {
+                return `<script type="module" crossorigin src="${f.fileUrl}" ></script>`;
+            }
+            return `<script src="${f.fileUrl}" ></script>`;
+        });
+        return arr.join('\n');
+    }
+    renderCssAssets() {
+        const fileList = this.fileList.filter((s) => {
+            return s.fileType === 'css' || s.fileUrl.endsWith('.css');
+        });
+        const fileUrlList = fileList.map(f => {
+            return f.fileUrl;
+        });
+        const arr = fileUrlList.map((url) => {
+            return `<link href="${url}" rel="stylesheet" />`;
+        });
+        return arr.join('\n');
+    }
+    renderExtLocalLoaderPortByDevHeader() {
+        const loaderPort = (0, fatcms_request_1.getExtLocalLoaderPort)(this.ctx);
+        if (loaderPort && TypeUtils_1.TypeUtils.isNumeric(loaderPort)) {
+            return `<script>window.__local_loader_port_from_dev_header = ${loaderPort}</script>`;
+        }
+        return '';
+    }
+}
+function createRenderUtils(props) {
+    return new RenderUtils(props);
+}
+exports.createRenderUtils = createRenderUtils;

package/dist/middleware/forbidden.middleware.d.ts

@@ -0,0 +1,10 @@
+import { IMiddleware } from '@midwayjs/core';
+import { NextFunction, Context } from '@midwayjs/koa';
+/**
+ * 针对一些路径禁止访问。避免一些爬虫抓取网站内容，实际上这里枚举的路径，本身就是不存在的。只是为了提前拦截，为了服务器性能考虑。
+ */
+export declare class ForbiddenMiddleware implements IMiddleware<Context, NextFunction> {
+    match(ctx: Context): boolean;
+    resolve(): (ctx: Context, next: NextFunction) => Promise<void>;
+    static getName(): string;
+}

package/dist/middleware/forbidden.middleware.js

@@ -0,0 +1,70 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ForbiddenMiddleware = void 0;
+const core_1 = require("@midwayjs/core");
+// 一些爬虫/漏洞分析工具会来请求这玩意。
+const blackEqualList = [
+    '/config.json',
+    '/backend/.env',
+    '/application.yml',
+    '/db.ini',
+    '/.well-known/security.txt',
+];
+const blackPrefixList = [
+    '/.aws/',
+    '/.git/',
+    '/.svn/',
+    '/.env/',
+    '/src/',
+    '/var/logs/',
+    '/var/log/',
+    '/cgi-bin/',
+    '/php-cgi/',
+];
+/**
+ * 针对一些路径禁止访问。避免一些爬虫抓取网站内容，实际上这里枚举的路径，本身就是不存在的。只是为了提前拦截，为了服务器性能考虑。
+ */
+let ForbiddenMiddleware = class ForbiddenMiddleware {
+    match(ctx) {
+        const path = ctx.path;
+        if (path === '/') {
+            return false;
+        }
+        if (path.startsWith('/ns/')) {
+            return false;
+        }
+        for (let i = 0; i < blackEqualList.length; i++) {
+            const backlistElement = blackEqualList[i];
+            if (path === backlistElement) {
+                return true;
+            }
+        }
+        for (let i = 0; i < blackPrefixList.length; i++) {
+            const blackPrefix = blackPrefixList[i];
+            if (path.startsWith(blackPrefix)) {
+                return true;
+            }
+        }
+        return !!(path.includes('/wp-includes/') || path.endsWith('.php') || path.endsWith('/.git/config'));
+    }
+    resolve() {
+        return async (ctx, next) => {
+            ctx.set({ "content-type": "text/html; charset=utf-8" });
+            ctx.status = 404;
+            ctx.body = "404！404！404！重要的事情说三遍！";
+        };
+    }
+    static getName() {
+        return 'ForbiddenMiddleware';
+    }
+};
+ForbiddenMiddleware = __decorate([
+    (0, core_1.Middleware)()
+], ForbiddenMiddleware);
+exports.ForbiddenMiddleware = ForbiddenMiddleware;

package/dist/middleware/global.middleware.d.ts

@@ -0,0 +1,10 @@
+import { IMiddleware } from '@midwayjs/core';
+import { NextFunction, Context } from '@midwayjs/koa';
+/**
+ * 全局中间件
+ */
+export declare class GlobalMiddleware implements IMiddleware<Context, NextFunction> {
+    match(ctx: Context): boolean;
+    resolve(): (ctx: Context, next: NextFunction) => Promise<any>;
+    static getName(): string;
+}

package/dist/middleware/global.middleware.js

@@ -0,0 +1,246 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GlobalMiddleware = void 0;
+const core_1 = require("@midwayjs/core");
+const _ = require("lodash");
+const Transaction_1 = require("../libs/crud-pro/models/Transaction");
+const UserSessionService_1 = require("../service/UserSessionService");
+const WorkbenchService_1 = require("../service/WorkbenchService");
+const userSession_1 = require("../models/userSession");
+const common_dto_1 = require("../libs/utils/common-dto");
+const fatcms_request_1 = require("../libs/utils/fatcms-request");
+const contextLogger_1 = require("../models/contextLogger");
+const node_stream_1 = require("node:stream");
+const VisitStatService_1 = require("../service/VisitStatService");
+function isFunction(fun) {
+    return typeof fun === 'function';
+}
+function isObject(obj) {
+    return obj && typeof obj === 'object';
+}
+function isArrayBuffer(obj) {
+    if (!obj) {
+        return false;
+    }
+    return obj instanceof ArrayBuffer || Object.prototype.toString.call(obj) === '[object ArrayBuffer]';
+}
+function isBlob(obj) {
+    var _a;
+    return ((_a = obj === null || obj === void 0 ? void 0 : obj.constructor) === null || _a === void 0 ? void 0 : _a.name) === 'Blob';
+}
+function isStream(obj) {
+    return obj && obj instanceof node_stream_1.Stream;
+}
+/**
+ * 专门对ExecuteSqlContext对象进行处理
+ * @param res
+ */
+function handleExecuteSqlContext(res) {
+    // ExecuteSqlContext
+    if (res && isFunction(res.getResMessage) && isFunction(res.getResModel)) {
+        const message = res.getResMessage();
+        return { success: true, message: message, data: res.getResModel() };
+    }
+    return res;
+}
+/**
+ * 处理空数据
+ * @param res
+ */
+function handleNullRes(res) {
+    if (res === null || typeof res === 'undefined') {
+        return { success: false, message: '接口没有返回任何数据', data: null };
+    }
+    return res;
+}
+/**
+ * 处理普通数组数据
+ * @param res
+ */
+function handleArrayRes(res) {
+    if (Array.isArray(res) && res.length) {
+        return { success: true, data: res };
+    }
+    return res;
+}
+function addDebugInfoFromContext(debugInfo, ctx) {
+    const userSession = ctx.userSession;
+    const contextLogger = ctx.contextLogger;
+    if (isObject(userSession)) {
+        const sessionInfo = userSession.getSessionInfo();
+        _.set(debugInfo, 'sessionInfo', sessionInfo);
+    }
+    if (isObject(contextLogger)) {
+        _.set(debugInfo, 'logList', contextLogger.getLogList());
+    }
+}
+/**
+ * 处理调试信息
+ * @param beforeRes 上一个输出
+ * @param ctx
+ * @param originRes 最原始的输出
+ */
+function handleDebugRes(beforeRes, ctx, originRes) {
+    const isDebug = (0, fatcms_request_1.isEnableDebug)(ctx);
+    if (!isDebug) {
+        // 没有开启debug模式
+        if (beforeRes && beforeRes.debugInfo) {
+            delete beforeRes.debugInfo;
+        }
+        return beforeRes;
+    }
+    // 开启了debug模式
+    const debugInfo = {};
+    addDebugInfoFromContext(debugInfo, ctx);
+    //debugInfo3. 响应中本身就有debugInfo
+    if (isObject(originRes)) {
+        if (typeof originRes.debugInfo === 'string') {
+            _.set(debugInfo, 'debugInfo', originRes.debugInfo);
+        }
+        if (isObject(beforeRes.debugInfo)) {
+            Object.assign(debugInfo, originRes.debugInfo);
+        }
+        if (isFunction(originRes.getReqModel)) {
+            _.set(debugInfo, 'reqMode', originRes.getReqModel());
+        }
+        if (isObject(originRes.cfgModel)) {
+            _.set(debugInfo, 'cfgMode', originRes.cfgModel);
+        }
+    }
+    // debugInfo处理完毕
+    const nextRes = {};
+    if (isObject(beforeRes)) {
+        Object.assign(nextRes, beforeRes);
+    }
+    nextRes.debugInfo = debugInfo;
+    return nextRes;
+}
+async function getUserSessionService(ctx) {
+    return ctx.requestContext.getAsync(UserSessionService_1.UserSessionService);
+}
+async function getWorkbenchService(ctx) {
+    return ctx.requestContext.getAsync(WorkbenchService_1.WorkbenchService);
+}
+async function getVisitStatService(ctx) {
+    return ctx.requestContext.getAsync(VisitStatService_1.VisitStatService);
+}
+/**
+ * 检查是否是超级管理员
+ * @param ctx
+ * @param sessionInfo
+ */
+function checkIsSuperAdmin(ctx, sessionInfo) {
+    if (!sessionInfo || !sessionInfo.loginName) {
+        return false;
+    }
+    if (!(0, fatcms_request_1.isEnableSuperAdmin)(ctx)) {
+        return false;
+    }
+    const currentLoginName = sessionInfo.loginName;
+    const superAdminList = ctx.app.getConfig('superAdminList');
+    if (Array.isArray(superAdminList)) {
+        for (let i = 0; i < superAdminList.length; i++) {
+            const element = superAdminList[i];
+            const login_name = _.get(element, 'login_name');
+            if (login_name && login_name === currentLoginName) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+function handleDebugError(e, ctx) {
+    ctx.logger.error('GlobalMiddleware', e);
+    let errorStack = null;
+    let errorCode = null;
+    let errorMessage = '' + e;
+    if (isObject(e)) {
+        if (e.message) {
+            errorMessage = e.message;
+        }
+        if (e.code) {
+            errorCode = e.code;
+        }
+        errorStack = e.stack;
+    }
+    const res = common_dto_1.CommonResult.errorRes(errorMessage, errorCode);
+    if ((0, fatcms_request_1.isEnableDebug)(ctx)) {
+        const debugInfo = { errorStack };
+        addDebugInfoFromContext(debugInfo, ctx);
+        res.debugInfo = debugInfo;
+    }
+    return res;
+}
+async function trackRequest(ctx) {
+    try {
+        const visitStatService = await getVisitStatService(ctx);
+        await visitStatService.trackRequest(ctx.path, 'path');
+    }
+    catch (e) {
+        console.error('trackRequestError', e);
+    }
+}
+/**
+ * 全局中间件
+ */
+let GlobalMiddleware = class GlobalMiddleware {
+    match(ctx) {
+        const path = ctx.path;
+        return !(path.startsWith('/ns/static/'));
+    }
+    resolve() {
+        return async (ctx, next) => {
+            ctx.contextLogger = new contextLogger_1.ContextLogger(ctx);
+            ctx.transaction = new Transaction_1.Transaction();
+            try {
+                // 支持的站点
+                const workbenchService = await getWorkbenchService(ctx);
+                const isSupportTheHost = await workbenchService.isSupportCurrentHostForForMiddleware();
+                if (isSupportTheHost !== true) {
+                    return isSupportTheHost;
+                }
+                const sessionService = await getUserSessionService(ctx);
+                const sessionInfo = await sessionService.getCurrentUserSessionForMiddleware();
+                const isSuperAdmin = checkIsSuperAdmin(ctx, sessionInfo);
+                ctx.userSession = new userSession_1.UserSessionInfo(sessionInfo, isSuperAdmin);
+                ctx.workbenchInfo = await workbenchService.getCurrentHostWorkbenchInfo();
+                // 数据埋点
+                await trackRequest(ctx);
+                const res0 = await next();
+                // 基本数据类型：需要搞成字符串
+                if (['bigint', 'symbol'].includes(typeof res0)) {
+                    return res0.toString();
+                }
+                // 基本数据类型: 交给KOA处理的
+                if (!res0 || ['string', 'number', 'boolean'].includes(typeof res0) || Buffer.isBuffer(res0) || isArrayBuffer(res0) || isStream(res0) || isBlob(res0)) {
+                    return res0;
+                }
+                // 其他：普通的JSON数据
+                let res = handleExecuteSqlContext(res0);
+                res = handleNullRes(res);
+                res = handleArrayRes(res);
+                res = handleDebugRes(res, ctx, res0);
+                return res;
+            }
+            catch (e) {
+                return handleDebugError(e, ctx);
+            }
+            finally {
+                await ctx.transaction.releaseTx();
+            }
+        };
+    }
+    static getName() {
+        return 'GlobalMiddleware';
+    }
+};
+GlobalMiddleware = __decorate([
+    (0, core_1.Middleware)()
+], GlobalMiddleware);
+exports.GlobalMiddleware = GlobalMiddleware;

package/dist/middleware/permission.middleware.d.ts

@@ -0,0 +1,18 @@
+import { NextFunction, Context } from '@midwayjs/koa';
+import { Exceptions } from '../libs/crud-pro/exceptions';
+declare function checkPermission(codeList: string | string[]): (ctx: Context, next: NextFunction) => Promise<{
+    success: boolean;
+    message: string;
+    code: Exceptions;
+}>;
+declare function checkRole(codeList: string | string[]): (ctx: Context, next: NextFunction) => Promise<{
+    success: boolean;
+    message: string;
+    code: Exceptions;
+}>;
+declare function checkLogin(): (ctx: Context, next: NextFunction) => Promise<{
+    success: boolean;
+    message: string;
+    code: Exceptions;
+}>;
+export { checkPermission, checkLogin, checkRole };

package/dist/middleware/permission.middleware.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkRole = exports.checkLogin = exports.checkPermission = void 0;
+const exceptions_1 = require("../libs/crud-pro/exceptions");
+function checkPermission(codeList) {
+    return async (ctx, next) => {
+        const userSession = ctx.userSession;
+        //  只有登录用户才会有功能点权限，所以必须登录
+        if (!userSession.isLogin()) {
+            return {
+                success: false,
+                message: '用户未登录, 请先登录',
+                code: exceptions_1.Exceptions.NOT_LOGIN,
+            };
+        }
+        // 查询当前用户是否用此功能点的权限
+        const hasPermission = userSession.hasAnyPermission(codeList);
+        if (!hasPermission) {
+            let message;
+            const loginName = userSession.getSessionInfo().loginName;
+            if (loginName === 'devopsviewer') {
+                message = "开放体验账号不支持这些操作：新增、修改、删除、上传";
+            }
+            else {
+                message = '缺少权限: ' + JSON.stringify(codeList);
+            }
+            return {
+                success: false,
+                message: message,
+                code: exceptions_1.Exceptions.NO_AUTH,
+            };
+        }
+        await next();
+    };
+}
+exports.checkPermission = checkPermission;
+function checkRole(codeList) {
+    return async (ctx, next) => {
+        const userSession = ctx.userSession;
+        //  只有登录用户才会有功能点权限，所以必须登录
+        if (!userSession.isLogin()) {
+            return {
+                success: false,
+                message: '用户未登录, 请先登录',
+                code: exceptions_1.Exceptions.NOT_LOGIN,
+            };
+        }
+        // 查询当前用户是否用此功能点的权限
+        const hasRole = userSession.hasAnyRole(codeList);
+        if (!hasRole) {
+            return {
+                success: false,
+                message: '缺少角色权限: ' + JSON.stringify(codeList),
+                code: exceptions_1.Exceptions.NO_AUTH,
+            };
+        }
+        await next();
+    };
+}
+exports.checkRole = checkRole;
+function checkLogin() {
+    return async (ctx, next) => {
+        const userSession = ctx.userSession;
+        if (!userSession.isLogin()) {
+            return {
+                success: false,
+                message: '用户未登录, 请先登录',
+                code: exceptions_1.Exceptions.NOT_LOGIN,
+            };
+        }
+        await next();
+    };
+}
+exports.checkLogin = checkLogin;

package/dist/middleware/tx.middleware.d.ts

@@ -0,0 +1,9 @@
+import { IMiddleware } from '@midwayjs/core';
+import { NextFunction, Context } from '@midwayjs/koa';
+/**
+ * 事务中间件
+ */
+export declare class TxMiddleware implements IMiddleware<Context, NextFunction> {
+    resolve(): (ctx: Context, next: NextFunction) => Promise<any>;
+    static getName(): string;
+}

package/dist/middleware/tx.middleware.js

@@ -0,0 +1,40 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TxMiddleware = void 0;
+const core_1 = require("@midwayjs/core");
+/**
+ * 事务中间件
+ */
+let TxMiddleware = class TxMiddleware {
+    resolve() {
+        return async (ctx, next) => {
+            const transaction = ctx.transaction;
+            try {
+                await transaction.beginTx();
+                const res = await next();
+                await transaction.commitTx();
+                return res;
+            }
+            catch (e) {
+                ctx.contextLogger.error('ReportMiddleware', e);
+                await transaction.rollbackTx();
+            }
+            finally {
+                await transaction.releaseTx();
+            }
+        };
+    }
+    static getName() {
+        return 'TxMiddleware';
+    }
+};
+TxMiddleware = __decorate([
+    (0, core_1.Middleware)()
+], TxMiddleware);
+exports.TxMiddleware = TxMiddleware;