midway-fatcms 0.0.1-beta.1

package/dist/models/userSession.d.ts

@@ -0,0 +1,61 @@
+import { KeysOfAuthType } from '../libs/crud-pro/models/keys';
+declare const sessionCookieCfg: {
+    signed: boolean;
+    encrypt: boolean;
+    httpOnly: boolean;
+    maxAge: number;
+};
+declare const SESSION_ID_KEY = "fatcmssessionid";
+declare const SYS_ACCOUNT_TYPE = "fatcms";
+interface ISessionInfo {
+    nickName: string;
+    avatar: string;
+    roleCodes: string[];
+    functionCodes: string[];
+    loginName: string;
+    sessionId: string;
+    accountId: string;
+    workbenchCode: string;
+    accountType: string;
+}
+interface IConsumerUserInfo {
+    workbenchCode: string;
+    accountType: string;
+    accountId: string;
+    nickName: string;
+    loginName: string;
+    avatar: string;
+}
+interface IBatchCheckProps {
+    permissionCodeList?: string[];
+    roleCodeList?: string[];
+}
+interface IBatchCheckRes {
+    permissionCodeResult: Record<string, boolean>;
+    roleCodeResult: Record<string, boolean>;
+}
+declare class UserSessionInfo {
+    private readonly sessionInfo;
+    private readonly superAdmin;
+    constructor(sessionInfo: ISessionInfo, superAdmin?: boolean);
+    getSessionInfo(): ISessionInfo;
+    getSessionValue(key: string): any;
+    isSuperAdmin(): boolean;
+    /**
+     * 是否是我自己的账号
+     * @param accountId
+     */
+    isMySelf(accountId: string): boolean;
+    isLogin(): boolean;
+    hasAnyPermission(funcCodeList: string | string[]): boolean;
+    hasPermission(funcCode: string): boolean;
+    hasAnyRole(roleCodeList: string | string[]): boolean;
+    hasRole(roleCode: string): boolean;
+    isAuthPass(authType: KeysOfAuthType, authConfig: string | string[]): boolean;
+    /**
+     * 批量检查权限
+     * @param params
+     */
+    batchCheckPermission(params: IBatchCheckProps): IBatchCheckRes;
+}
+export { ISessionInfo, UserSessionInfo, SESSION_ID_KEY, SYS_ACCOUNT_TYPE, IConsumerUserInfo, sessionCookieCfg };

package/dist/models/userSession.js

@@ -0,0 +1,165 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sessionCookieCfg = exports.SYS_ACCOUNT_TYPE = exports.SESSION_ID_KEY = exports.UserSessionInfo = void 0;
+const _ = require("lodash");
+const keys_1 = require("../libs/crud-pro/models/keys");
+const MixinUtils_1 = require("../libs/crud-pro/utils/MixinUtils");
+const exceptions_1 = require("../libs/crud-pro/exceptions");
+const functions_1 = require("../libs/utils/functions");
+const sessionCookieCfg = {
+    signed: true,
+    encrypt: true,
+    httpOnly: true,
+    maxAge: 1000 * 3600 * 24 * 365,
+};
+exports.sessionCookieCfg = sessionCookieCfg;
+const SESSION_ID_KEY = 'fatcmssessionid';
+exports.SESSION_ID_KEY = SESSION_ID_KEY;
+const SYS_ACCOUNT_TYPE = 'fatcms';
+exports.SYS_ACCOUNT_TYPE = SYS_ACCOUNT_TYPE;
+function createEmptySessionInfo(superAdmin) {
+    return {
+        nickName: superAdmin ? 'SA' : '',
+        avatar: '',
+        roleCodes: [],
+        functionCodes: [],
+        loginName: '',
+        sessionId: '',
+        accountId: '',
+        workbenchCode: '',
+        accountType: '',
+    };
+}
+class UserSessionInfo {
+    constructor(sessionInfo, superAdmin) {
+        this.superAdmin = superAdmin === true;
+        if (sessionInfo) {
+            this.sessionInfo = sessionInfo;
+        }
+        else {
+            this.sessionInfo = createEmptySessionInfo(superAdmin);
+        }
+    }
+    getSessionInfo() {
+        return this.sessionInfo;
+    }
+    getSessionValue(key) {
+        return _.get(this.sessionInfo, key);
+    }
+    isSuperAdmin() {
+        return this.superAdmin;
+    }
+    /**
+     * 是否是我自己的账号
+     * @param accountId
+     */
+    isMySelf(accountId) {
+        const s = this.sessionInfo;
+        return s && accountId && s.accountId === accountId;
+    }
+    isLogin() {
+        const s = this.sessionInfo;
+        return !!(s && s.sessionId && s.accountId && s.sessionId.length > 1);
+    }
+    hasAnyPermission(funcCodeList) {
+        if (this.isSuperAdmin()) {
+            return true;
+        }
+        if (typeof funcCodeList === 'string') {
+            return this.hasPermission(funcCodeList);
+        }
+        if (Array.isArray(funcCodeList)) {
+            for (let i = 0; i < funcCodeList.length; i++) {
+                const funcCode = funcCodeList[i];
+                if (this.hasPermission(funcCode)) {
+                    return true;
+                }
+            }
+            return false;
+        }
+    }
+    hasPermission(funcCode) {
+        if (this.isSuperAdmin()) {
+            return true;
+        }
+        const ss = this.sessionInfo.functionCodes || [];
+        return ss.includes(funcCode);
+    }
+    hasAnyRole(roleCodeList) {
+        if (this.isSuperAdmin()) {
+            return true;
+        }
+        if (typeof roleCodeList === 'string') {
+            return this.hasRole(roleCodeList);
+        }
+        if (Array.isArray(roleCodeList)) {
+            for (let i = 0; i < roleCodeList.length; i++) {
+                const funcCode = roleCodeList[i];
+                if (this.hasRole(funcCode)) {
+                    return true;
+                }
+            }
+            return false;
+        }
+    }
+    hasRole(roleCode) {
+        if (this.isSuperAdmin()) {
+            return true;
+        }
+        const ss = this.sessionInfo.roleCodes || [];
+        return ss.includes(roleCode);
+    }
+    isAuthPass(authType, authConfig) {
+        if (authType === keys_1.KeysOfAuthType.free || !authType) {
+            return true; // 无需校验
+        }
+        if (!this.isLogin()) {
+            return false;
+        }
+        if (this.isSuperAdmin()) {
+            return true;
+        }
+        if (authType === keys_1.KeysOfAuthType.byFuncCode) {
+            const funcCodes = (0, functions_1.parseStringTrimArray)(authConfig);
+            if (MixinUtils_1.MixinUtils.isEmpty(funcCodes)) {
+                throw new exceptions_1.CommonException(exceptions_1.Exceptions.CFG_AUTH_CODE_EMPTY, '缺少权限编码配置');
+            }
+            return this.hasAnyPermission(funcCodes);
+        }
+        if (authType === keys_1.KeysOfAuthType.byRoleCode) {
+            const roleCodes = (0, functions_1.parseStringTrimArray)(authConfig);
+            if (MixinUtils_1.MixinUtils.isEmpty(roleCodes)) {
+                throw new exceptions_1.CommonException(exceptions_1.Exceptions.CFG_AUTH_CODE_EMPTY, '缺少角色编码配置');
+            }
+            return this.hasAnyRole(roleCodes);
+        }
+        return true;
+    }
+    /**
+     * 批量检查权限
+     * @param params
+     */
+    batchCheckPermission(params) {
+        const { permissionCodeList, roleCodeList } = params;
+        const permissionCodeResult = {};
+        const roleCodeResult = {};
+        if (Array.isArray(permissionCodeList)) {
+            for (let i = 0; i < permissionCodeList.length; i++) {
+                const permissionCode = permissionCodeList[i];
+                if (permissionCode && typeof permissionCode === 'string') {
+                    permissionCodeResult[permissionCode] = this.hasPermission(permissionCode);
+                }
+            }
+        }
+        if (Array.isArray(roleCodeList)) {
+            for (let i = 0; i < roleCodeList.length; i++) {
+                const roleCode = roleCodeList[i];
+                if (roleCode && typeof roleCode === 'string') {
+                    roleCodeResult[roleCode] = this.hasRole(roleCode);
+                }
+            }
+        }
+        return { permissionCodeResult, roleCodeResult };
+    }
+}
+exports.UserSessionInfo = UserSessionInfo;

package/dist/schedule/index.d.ts

@@ -0,0 +1,3 @@
+import * as koa from '@midwayjs/koa';
+declare function startSchedule(app: koa.Application, serviceList: string[]): Promise<void>;
+export { startSchedule };

package/dist/schedule/index.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startSchedule = void 0;
+const contextLogger_1 = require("../models/contextLogger");
+const Transaction_1 = require("../libs/crud-pro/models/Transaction");
+const userSession_1 = require("../models/userSession");
+const scheduleUserInfo = {
+    nickName: 'schedule_user',
+    avatar: '',
+    roleCodes: [],
+    functionCodes: [],
+    loginName: 'schedule_user',
+    sessionId: '',
+    accountId: '',
+    workbenchCode: '',
+    accountType: userSession_1.SYS_ACCOUNT_TYPE,
+};
+const scheduleWorkbenchInfo = {
+    id: 0,
+    workbench_code: 'schedule_workbench',
+    workbench_name: 'schedule_workbench',
+    workbench_domain: 'schedule_workbench',
+    workbench_desc: 'schedule_workbench',
+    html_content: 'schedule_workbench',
+    status: 1,
+    workbench_type: 0,
+};
+async function runScheduleService(app, serviceName) {
+    const ctx = app.createAnonymousContext();
+    ctx.app = app;
+    ctx.contextLogger = new contextLogger_1.ContextLogger(ctx);
+    ctx.transaction = new Transaction_1.Transaction();
+    ctx.userSession = new userSession_1.UserSessionInfo(scheduleUserInfo, true);
+    ctx.workbenchInfo = scheduleWorkbenchInfo;
+    try {
+        const serviceObject = await ctx.requestContext.getAsync(serviceName);
+        if (serviceObject && serviceObject.runBySchedule) {
+            await serviceObject.runBySchedule();
+        }
+        else {
+            ctx.logger.error(`runSchedule error , serviceName = ${serviceName}, 没有找到服务`);
+        }
+    }
+    catch (e) {
+        ctx.logger.error(`runSchedule error , serviceName = ${serviceName}`, e);
+    }
+    finally {
+        await ctx.transaction.releaseTx();
+    }
+}
+async function runSchedule(app, serviceList) {
+    for (let i = 0; i < serviceList.length; i++) {
+        const serviceName = serviceList[i];
+        try {
+            await runScheduleService(app, serviceName);
+        }
+        catch (e) {
+            const ctx = app.createAnonymousContext();
+            ctx.logger.error(`runSchedule error , serviceName = ${serviceName}`, e);
+        }
+    }
+}
+async function startSchedule(app, serviceList) {
+    await runSchedule(app, serviceList);
+    setInterval(() => {
+        runSchedule(app, serviceList);
+    }, 2 * 60 * 1000);
+}
+exports.startSchedule = startSchedule;

package/dist/service/AuthService.d.ts

@@ -0,0 +1,70 @@
+import { IConsumerUserInfo, ISessionInfo } from '../models/userSession';
+import { CommonResult } from '../libs/utils/common-dto';
+export declare class AuthService {
+    private ctx;
+    private superAdminList;
+    private curdMixService;
+    private userService;
+    private userSessionService;
+    /**
+     * 明文密码转unsaltedPwd密码
+     * @param plainPwd
+     * @param loginName
+     */
+    toUnsaltedPwd(plainPwd: string, loginName: string): string;
+    /**
+     * front: pw1 = md5(md5(input_pw) + "_" + loginName)
+     * db: pw2 = md5(pwd_salt + pw1)
+     * 检查用户名密码是否正确
+     * @param loginName
+     * @param unsaltedPwd
+     */
+    checkLoginPassword(loginName: string, unsaltedPwd: string): Promise<CommonResult>;
+    /**
+     * 创建一个toC端的UserSession
+     * @param consumerUserInfo
+     */
+    createUserSessionForConsumer(consumerUserInfo: IConsumerUserInfo): Promise<{
+        sessionId: string;
+        loginName: string;
+        accountId: string;
+        nickName: string;
+        avatar: string;
+        workbenchCode: string;
+        accountType: string;
+    }>;
+    /**
+     * 创建一个Session
+     * @param loginName
+     * @param workbenchCode
+     */
+    createUserSession(loginName: string, workbenchCode: string): Promise<{
+        sessionId: string;
+        loginName: string;
+        accountId: any;
+        nickName: any;
+        avatar: any;
+        workbenchCode: string;
+        accountType: string;
+    }>;
+    /**
+     * 获取用户
+     * @param loginName
+     * @private
+     */
+    private queryUserAccountByLoginName;
+    /**
+     * 查询此accountId下关联的角色code列表
+     * @param accountId
+     * @private
+     */
+    private queryUserRoleCodeList;
+    /**
+     * 查询此roleCodeList下面关联的所有功能点列表
+     * @param roleCodeList
+     * @private
+     */
+    private queryFunctionCodeList;
+    removeUserSession(sessionId: string): Promise<any>;
+    refreshSession(sessionInfo: ISessionInfo): Promise<ISessionInfo>;
+}

package/dist/service/AuthService.js

@@ -0,0 +1,248 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthService = void 0;
+const core_1 = require("@midwayjs/core");
+const keys_1 = require("../libs/crud-pro/models/keys");
+const CurdMixService_1 = require("./curd/CurdMixService");
+const md5 = require("md5");
+const UserAccountService_1 = require("./UserAccountService");
+const functions_1 = require("../libs/utils/functions");
+const userSession_1 = require("../models/userSession");
+const SystemTables_1 = require("../models/SystemTables");
+const UserSessionService_1 = require("./UserSessionService");
+const common_dto_1 = require("../libs/utils/common-dto");
+const fatcms_request_1 = require("../libs/utils/fatcms-request");
+const exceptions_1 = require("../libs/crud-pro/exceptions");
+let AuthService = class AuthService {
+    /**
+     * 明文密码转unsaltedPwd密码
+     * @param plainPwd
+     * @param loginName
+     */
+    toUnsaltedPwd(plainPwd, loginName) {
+        const pw2 = md5(md5(plainPwd) + '_' + loginName);
+        return pw2;
+    }
+    /**
+     * front: pw1 = md5(md5(input_pw) + "_" + loginName)
+     * db: pw2 = md5(pwd_salt + pw1)
+     * 检查用户名密码是否正确
+     * @param loginName
+     * @param unsaltedPwd
+     */
+    async checkLoginPassword(loginName, unsaltedPwd) {
+        const message = '用户名或密码错误';
+        const errorCode = 'USERNAME_OR_PASSWORD_IS_INCORRECT';
+        if (!loginName) {
+            return common_dto_1.CommonResult.errorRes(message, errorCode, '!loginName');
+        }
+        if (!unsaltedPwd) {
+            return common_dto_1.CommonResult.errorRes(message, errorCode, '!unsaltedPwd');
+        }
+        const userAccount = await this.queryUserAccountByLoginName(loginName);
+        if (!userAccount) {
+            return common_dto_1.CommonResult.errorRes(message, errorCode, '!userAccount');
+        }
+        if (userAccount.status !== 1) {
+            return common_dto_1.CommonResult.errorRes(message, errorCode, 'userAccount.status !== 1');
+        }
+        if (!userAccount.pwd_md5) {
+            return common_dto_1.CommonResult.errorRes(message, errorCode, '!userAccount.pwd_md5');
+        }
+        const pwd_salt = userAccount.pwd_salt;
+        const pwd_md5 = md5(unsaltedPwd + pwd_salt);
+        if (userAccount['pwd_md5'] !== pwd_md5) {
+            return common_dto_1.CommonResult.errorRes(message, errorCode, "userAccount['pwd_md5'] !== pwd_md5");
+        }
+        return common_dto_1.CommonResult.successRes();
+    }
+    /**
+     * 创建一个toC端的UserSession
+     * @param consumerUserInfo
+     */
+    async createUserSessionForConsumer(consumerUserInfo) {
+        const sessionId = (0, functions_1.createUniqueId)();
+        const sessionInfo = {
+            nickName: consumerUserInfo.nickName,
+            avatar: consumerUserInfo.avatar,
+            roleCodes: [],
+            functionCodes: [],
+            loginName: consumerUserInfo.loginName,
+            sessionId,
+            accountId: consumerUserInfo.accountId,
+            workbenchCode: consumerUserInfo.workbenchCode,
+            accountType: consumerUserInfo.accountType,
+        };
+        await this.userSessionService.saveUserSession(sessionInfo);
+        return {
+            sessionId,
+            loginName: sessionInfo.loginName,
+            accountId: sessionInfo.accountId,
+            nickName: sessionInfo.nickName,
+            avatar: sessionInfo.avatar,
+            workbenchCode: sessionInfo.workbenchCode,
+            accountType: sessionInfo.accountType,
+        };
+    }
+    /**
+     * 创建一个Session
+     * @param loginName
+     * @param workbenchCode
+     */
+    async createUserSession(loginName, workbenchCode) {
+        const userAccount = await this.queryUserAccountByLoginName(loginName);
+        if (!userAccount) {
+            throw new exceptions_1.CommonException('USER_ACCOUNT_NOT_EXIST', '用户账号不存在');
+        }
+        const accountId = userAccount.account_id;
+        const sessionId = (0, functions_1.createUniqueId)();
+        const roleCodes = await this.queryUserRoleCodeList(accountId);
+        const functionCodes = await this.queryFunctionCodeList(roleCodes);
+        const sessionInfo = {
+            nickName: userAccount.nick_name,
+            avatar: userAccount.avatar,
+            roleCodes,
+            functionCodes,
+            loginName,
+            sessionId,
+            accountId,
+            workbenchCode,
+            accountType: userSession_1.SYS_ACCOUNT_TYPE
+        };
+        await this.userSessionService.saveUserSession(sessionInfo);
+        return {
+            sessionId,
+            loginName,
+            accountId,
+            nickName: userAccount.nick_name,
+            avatar: userAccount.avatar,
+            workbenchCode: sessionInfo.workbenchCode,
+            accountType: sessionInfo.accountType,
+        };
+    }
+    /**
+     * 获取用户
+     * @param loginName
+     * @private
+     */
+    async queryUserAccountByLoginName(loginName) {
+        const superAdminList = this.superAdminList;
+        const findFromSuperAdmin = () => {
+            if (!(0, fatcms_request_1.isEnableSuperAdmin)(this.ctx)) {
+                return null;
+            }
+            if (!Array.isArray(superAdminList)) {
+                return null;
+            }
+            for (let i = 0; i < superAdminList.length; i++) {
+                const element = superAdminList[i];
+                if (element && element.login_name === loginName) {
+                    const nick_name = 'SA' + i;
+                    return {
+                        nick_name: element.nick_name || nick_name,
+                        avatar: '',
+                        account_id: nick_name,
+                        status: 1,
+                        login_name: element.login_name,
+                        pwd_salt: element.pwd_salt,
+                        pwd_md5: element.pwd_md5,
+                    };
+                }
+            }
+        };
+        const superAdmin = findFromSuperAdmin();
+        if (superAdmin) {
+            return superAdmin;
+        }
+        return this.userService.queryUserAccountByLoginName(loginName);
+    }
+    /**
+     * 查询此accountId下关联的角色code列表
+     * @param accountId
+     * @private
+     */
+    async queryUserRoleCodeList(accountId) {
+        const res = await this.curdMixService.executeCrudByCfg({
+            condition: { account_id: accountId },
+            limit: 10000,
+        }, {
+            sqlTable: SystemTables_1.SystemTables.sys_perm_user_role,
+            sqlSimpleName: keys_1.KeysOfSimpleSQL.SIMPLE_QUERY,
+            sqlDatabase: SystemTables_1.SystemDbName,
+            sqlDdType: SystemTables_1.SystemDbType,
+        });
+        const rows = res.getResModel().rows || [];
+        const roleCodes = rows.map(({ role_code }) => {
+            return role_code;
+        });
+        return [...new Set(roleCodes)];
+    }
+    /**
+     * 查询此roleCodeList下面关联的所有功能点列表
+     * @param roleCodeList
+     * @private
+     */
+    async queryFunctionCodeList(roleCodeList) {
+        if (!roleCodeList || roleCodeList.length === 0) {
+            return [];
+        }
+        const res = await this.curdMixService.executeCrudByCfg({
+            condition: { role_code: { $in: roleCodeList } },
+            limit: 10000,
+        }, {
+            sqlTable: SystemTables_1.SystemTables.sys_perm_role_func,
+            sqlSimpleName: keys_1.KeysOfSimpleSQL.SIMPLE_QUERY,
+            sqlDatabase: SystemTables_1.SystemDbName,
+            sqlDdType: SystemTables_1.SystemDbType,
+        });
+        const rows = res.getResModel().rows || [];
+        const funcCodes = rows.map(({ func_code }) => {
+            return func_code;
+        });
+        return [...new Set(funcCodes)];
+    }
+    async removeUserSession(sessionId) {
+        return this.userSessionService.removeUserSession(sessionId);
+    }
+    async refreshSession(sessionInfo) {
+        const oldSessionId = sessionInfo.sessionId;
+        const sessionId = (0, functions_1.createUniqueId)();
+        const newSessionInfo = { ...sessionInfo, sessionId };
+        await this.userSessionService.saveUserSession(newSessionInfo);
+        await this.removeUserSession(oldSessionId);
+        return newSessionInfo;
+    }
+};
+__decorate([
+    (0, core_1.Inject)(),
+    __metadata("design:type", Object)
+], AuthService.prototype, "ctx", void 0);
+__decorate([
+    (0, core_1.Config)('superAdminList'),
+    __metadata("design:type", Array)
+], AuthService.prototype, "superAdminList", void 0);
+__decorate([
+    (0, core_1.Inject)(),
+    __metadata("design:type", CurdMixService_1.CurdMixService)
+], AuthService.prototype, "curdMixService", void 0);
+__decorate([
+    (0, core_1.Inject)(),
+    __metadata("design:type", UserAccountService_1.UserAccountService)
+], AuthService.prototype, "userService", void 0);
+__decorate([
+    (0, core_1.Inject)(),
+    __metadata("design:type", UserSessionService_1.UserSessionService)
+], AuthService.prototype, "userSessionService", void 0);
+AuthService = __decorate([
+    (0, core_1.Provide)()
+], AuthService);
+exports.AuthService = AuthService;

package/dist/service/EnumInfoService.d.ts

@@ -0,0 +1,30 @@
+import { Context } from '@midwayjs/koa';
+import { RelatedType } from './curd/CurdMixUtils';
+import { IEnumInfo } from '../libs/utils/parseConfig';
+interface IQueryEnumInfo {
+    type: RelatedType;
+    code: string;
+}
+interface IQueryEnumResult {
+    type: RelatedType;
+    code: string;
+    values: IEnumInfo[];
+}
+export declare class EnumInfoService {
+    ctx: Context;
+    private curdProService;
+    private curdMixByLinkToCustomService;
+    private redisCacheService;
+    queryEnumInfo(codeList: IQueryEnumInfo[], refreshCache: boolean): Promise<IQueryEnumResult[]>;
+    /**
+     * code形如：fatcms~~~sys_perm_role~~~role_code,role_name,xxx_name
+     * code形如：fatcms~~~sys_perm_role~~~id,*
+     * 【数据库】~~~【表名】~~~【label】,【value】，【style】
+     * @param code
+     * @private
+     */
+    private queryEnumInfoByLinkToCustom;
+    private queryEnumInfoBySysCfgEnum;
+    private queryEnumInfoItemByDict;
+}
+export {};