midway-fatcms 0.0.1-beta.3 → 0.0.1-beta.30

package/dist/libs/utils/render-utils.js

@@ -1,135 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createRenderUtils = void 0;
-const _ = require("lodash");
-const moment = require("moment");
-const functions_1 = require("./functions");
-const fatcms_request_1 = require("./fatcms-request");
-const TypeUtils_1 = require("../crud-pro/utils/TypeUtils");
-function parseCookie(cookieStr) {
-    const cookies = {};
-    if (!cookieStr) {
-        return cookies;
-    }
-    // 分割每个 cookie 项
-    const cookieItems = cookieStr.split(';');
-    for (const item of cookieItems) {
-        // 去除空白字符
-        const trimmedItem = item.trim();
-        if (!trimmedItem) {
-            continue;
-        }
-        // 找到第一个等号的位置
-        const eqIndex = trimmedItem.indexOf('=');
-        if (eqIndex === -1) {
-            continue;
-        }
-        // 提取 key 和 value
-        const key = trimmedItem.substring(0, eqIndex).trim();
-        const value = trimmedItem.substring(eqIndex + 1).trim();
-        // 处理可能的引号
-        if (value.startsWith('"') && value.endsWith('"')) {
-            cookies[key] = value.slice(1, -1);
-        }
-        else {
-            cookies[key] = value;
-        }
-    }
-    return cookies;
-}
-class RenderUtils {
-    constructor(props) {
-        var _a, _b;
-        this.ctx = props.ctx;
-        this.workbenchInfo = props.workbenchInfo || {};
-        this.userInfo = props.userInfo || {};
-        this.appInfo = props.appInfo || {};
-        this.fatcmscsrftoken = props.fatcmscsrftoken;
-        const packageAssets = (0, functions_1.parseJsonObject)(props.package_assets) || {};
-        const fileList = _.get(packageAssets, 'data.fileList');
-        if (Array.isArray(fileList)) {
-            this.fileList = fileList.filter((f) => {
-                return f && f.fileUrl && typeof f.fileUrl === 'string' && f.fileUrl.length > 5; // 至少五个字符。
-            });
-        }
-        else {
-            this.fileList = [];
-            const time = moment().format('YYYY-MM-DD HH:mm:ss.SSS');
-            console.info(time + ' 解析fileList为空==>' + JSON.stringify({
-                workbench_code: (_a = this.workbenchInfo) === null || _a === void 0 ? void 0 : _a.workbench_code,
-                app_code: (_b = this.appInfo) === null || _b === void 0 ? void 0 : _b.app_code,
-            }));
-        }
-    }
-    renderCsrfToken() {
-        return `<script>window.__fatcmscsrftoken = "${this.fatcmscsrftoken}";</script>`;
-    }
-    renderUserInfo() {
-        return `<script>window.__user_info = ${JSON.stringify(this.userInfo)}  </script>`;
-    }
-    renderWorkbenchInfo() {
-        const infoPick = _.pick(this.workbenchInfo, [
-            'id', 'workbench_code', 'workbench_name', 'workbench_domain', 'workbench_desc', 'config_type', 'config_content'
-        ]);
-        return `<script>window.__workbench_info = ${JSON.stringify(infoPick)}</script>`;
-    }
-    renderAppInfo() {
-        const infoPick = _.pick(this.appInfo, [
-            'id', 'app_code', 'app_name', 'app_type', 'app_desc', 'config_type', 'config_content'
-        ]);
-        return `<script>window.__app_info = ${JSON.stringify(infoPick)}</script>`;
-    }
-    renderCookieInfo(keys) {
-        var _a;
-        try {
-            const cookies = parseCookie((_a = this.ctx.headers) === null || _a === void 0 ? void 0 : _a.cookie);
-            const cookieObj = {};
-            if (typeof keys === 'string') {
-                const keyArr = keys.split(',');
-                for (let i = 0; i < keyArr.length; i++) {
-                    const keyName = keyArr[i];
-                    cookieObj[keyName] = cookies[keyName];
-                }
-            }
-            return `<script>window.__cookie_info = ${JSON.stringify(cookieObj)}</script>`;
-        }
-        catch (e) {
-            return `<script>window.__cookie_info_error = ${e}; </script>`;
-        }
-    }
-    renderJsAssets() {
-        const fileList = this.fileList.filter((s) => {
-            return s.fileType === 'js' || s.fileUrl.endsWith('.js');
-        });
-        const arr = fileList.map(f => {
-            if (f.isModule) {
-                return `<script type="module" crossorigin src="${f.fileUrl}" ></script>`;
-            }
-            return `<script src="${f.fileUrl}" ></script>`;
-        });
-        return arr.join('\n');
-    }
-    renderCssAssets() {
-        const fileList = this.fileList.filter((s) => {
-            return s.fileType === 'css' || s.fileUrl.endsWith('.css');
-        });
-        const fileUrlList = fileList.map(f => {
-            return f.fileUrl;
-        });
-        const arr = fileUrlList.map((url) => {
-            return `<link href="${url}" rel="stylesheet" />`;
-        });
-        return arr.join('\n');
-    }
-    renderExtLocalLoaderPortByDevHeader() {
-        const loaderPort = (0, fatcms_request_1.getExtLocalLoaderPort)(this.ctx);
-        if (loaderPort && TypeUtils_1.TypeUtils.isNumeric(loaderPort)) {
-            return `<script>window.__local_loader_port_from_dev_header = ${loaderPort}</script>`;
-        }
-        return '';
-    }
-}
-function createRenderUtils(props) {
-    return new RenderUtils(props);
-}
-exports.createRenderUtils = createRenderUtils;

package/dist/middleware/forbidden.middleware.d.ts

@@ -1,10 +0,0 @@
-import { IMiddleware } from '@midwayjs/core';
-import { NextFunction, Context } from '@midwayjs/koa';
-/**
- * 针对一些路径禁止访问。避免一些爬虫抓取网站内容，实际上这里枚举的路径，本身就是不存在的。只是为了提前拦截，为了服务器性能考虑。
- */
-export declare class ForbiddenMiddleware implements IMiddleware<Context, NextFunction> {
-    match(ctx: Context): boolean;
-    resolve(): (ctx: Context, next: NextFunction) => Promise<void>;
-    static getName(): string;
-}

package/dist/middleware/forbidden.middleware.js

@@ -1,70 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ForbiddenMiddleware = void 0;
-const core_1 = require("@midwayjs/core");
-// 一些爬虫/漏洞分析工具会来请求这玩意。
-const blackEqualList = [
-    '/config.json',
-    '/backend/.env',
-    '/application.yml',
-    '/db.ini',
-    '/.well-known/security.txt',
-];
-const blackPrefixList = [
-    '/.aws/',
-    '/.git/',
-    '/.svn/',
-    '/.env/',
-    '/src/',
-    '/var/logs/',
-    '/var/log/',
-    '/cgi-bin/',
-    '/php-cgi/',
-];
-/**
- * 针对一些路径禁止访问。避免一些爬虫抓取网站内容，实际上这里枚举的路径，本身就是不存在的。只是为了提前拦截，为了服务器性能考虑。
- */
-let ForbiddenMiddleware = class ForbiddenMiddleware {
-    match(ctx) {
-        const path = ctx.path;
-        if (path === '/') {
-            return false;
-        }
-        if (path.startsWith('/ns/')) {
-            return false;
-        }
-        for (let i = 0; i < blackEqualList.length; i++) {
-            const backlistElement = blackEqualList[i];
-            if (path === backlistElement) {
-                return true;
-            }
-        }
-        for (let i = 0; i < blackPrefixList.length; i++) {
-            const blackPrefix = blackPrefixList[i];
-            if (path.startsWith(blackPrefix)) {
-                return true;
-            }
-        }
-        return !!(path.includes('/wp-includes/') || path.endsWith('.php') || path.endsWith('/.git/config'));
-    }
-    resolve() {
-        return async (ctx, next) => {
-            ctx.set({ "content-type": "text/html; charset=utf-8" });
-            ctx.status = 404;
-            ctx.body = "404！404！404！重要的事情说三遍！";
-        };
-    }
-    static getName() {
-        return 'ForbiddenMiddleware';
-    }
-};
-ForbiddenMiddleware = __decorate([
-    (0, core_1.Middleware)()
-], ForbiddenMiddleware);
-exports.ForbiddenMiddleware = ForbiddenMiddleware;

package/dist/middleware/global.middleware.d.ts

@@ -1,10 +0,0 @@
-import { IMiddleware } from '@midwayjs/core';
-import { NextFunction, Context } from '@midwayjs/koa';
-/**
- * 全局中间件
- */
-export declare class GlobalMiddleware implements IMiddleware<Context, NextFunction> {
-    match(ctx: Context): boolean;
-    resolve(): (ctx: Context, next: NextFunction) => Promise<any>;
-    static getName(): string;
-}

package/dist/middleware/global.middleware.js

@@ -1,246 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.GlobalMiddleware = void 0;
-const core_1 = require("@midwayjs/core");
-const _ = require("lodash");
-const Transaction_1 = require("../libs/crud-pro/models/Transaction");
-const UserSessionService_1 = require("../service/UserSessionService");
-const WorkbenchService_1 = require("../service/WorkbenchService");
-const userSession_1 = require("../models/userSession");
-const common_dto_1 = require("../libs/utils/common-dto");
-const fatcms_request_1 = require("../libs/utils/fatcms-request");
-const contextLogger_1 = require("../models/contextLogger");
-const node_stream_1 = require("node:stream");
-const VisitStatService_1 = require("../service/VisitStatService");
-function isFunction(fun) {
-    return typeof fun === 'function';
-}
-function isObject(obj) {
-    return obj && typeof obj === 'object';
-}
-function isArrayBuffer(obj) {
-    if (!obj) {
-        return false;
-    }
-    return obj instanceof ArrayBuffer || Object.prototype.toString.call(obj) === '[object ArrayBuffer]';
-}
-function isBlob(obj) {
-    var _a;
-    return ((_a = obj === null || obj === void 0 ? void 0 : obj.constructor) === null || _a === void 0 ? void 0 : _a.name) === 'Blob';
-}
-function isStream(obj) {
-    return obj && obj instanceof node_stream_1.Stream;
-}
-/**
- * 专门对ExecuteSqlContext对象进行处理
- * @param res
- */
-function handleExecuteSqlContext(res) {
-    // ExecuteSqlContext
-    if (res && isFunction(res.getResMessage) && isFunction(res.getResModel)) {
-        const message = res.getResMessage();
-        return { success: true, message: message, data: res.getResModel() };
-    }
-    return res;
-}
-/**
- * 处理空数据
- * @param res
- */
-function handleNullRes(res) {
-    if (res === null || typeof res === 'undefined') {
-        return { success: false, message: '接口没有返回任何数据', data: null };
-    }
-    return res;
-}
-/**
- * 处理普通数组数据
- * @param res
- */
-function handleArrayRes(res) {
-    if (Array.isArray(res) && res.length) {
-        return { success: true, data: res };
-    }
-    return res;
-}
-function addDebugInfoFromContext(debugInfo, ctx) {
-    const userSession = ctx.userSession;
-    const contextLogger = ctx.contextLogger;
-    if (isObject(userSession)) {
-        const sessionInfo = userSession.getSessionInfo();
-        _.set(debugInfo, 'sessionInfo', sessionInfo);
-    }
-    if (isObject(contextLogger)) {
-        _.set(debugInfo, 'logList', contextLogger.getLogList());
-    }
-}
-/**
- * 处理调试信息
- * @param beforeRes 上一个输出
- * @param ctx
- * @param originRes 最原始的输出
- */
-function handleDebugRes(beforeRes, ctx, originRes) {
-    const isDebug = (0, fatcms_request_1.isEnableDebug)(ctx);
-    if (!isDebug) {
-        // 没有开启debug模式
-        if (beforeRes && beforeRes.debugInfo) {
-            delete beforeRes.debugInfo;
-        }
-        return beforeRes;
-    }
-    // 开启了debug模式
-    const debugInfo = {};
-    addDebugInfoFromContext(debugInfo, ctx);
-    //debugInfo3. 响应中本身就有debugInfo
-    if (isObject(originRes)) {
-        if (typeof originRes.debugInfo === 'string') {
-            _.set(debugInfo, 'debugInfo', originRes.debugInfo);
-        }
-        if (isObject(beforeRes.debugInfo)) {
-            Object.assign(debugInfo, originRes.debugInfo);
-        }
-        if (isFunction(originRes.getReqModel)) {
-            _.set(debugInfo, 'reqMode', originRes.getReqModel());
-        }
-        if (isObject(originRes.cfgModel)) {
-            _.set(debugInfo, 'cfgMode', originRes.cfgModel);
-        }
-    }
-    // debugInfo处理完毕
-    const nextRes = {};
-    if (isObject(beforeRes)) {
-        Object.assign(nextRes, beforeRes);
-    }
-    nextRes.debugInfo = debugInfo;
-    return nextRes;
-}
-async function getUserSessionService(ctx) {
-    return ctx.requestContext.getAsync(UserSessionService_1.UserSessionService);
-}
-async function getWorkbenchService(ctx) {
-    return ctx.requestContext.getAsync(WorkbenchService_1.WorkbenchService);
-}
-async function getVisitStatService(ctx) {
-    return ctx.requestContext.getAsync(VisitStatService_1.VisitStatService);
-}
-/**
- * 检查是否是超级管理员
- * @param ctx
- * @param sessionInfo
- */
-function checkIsSuperAdmin(ctx, sessionInfo) {
-    if (!sessionInfo || !sessionInfo.loginName) {
-        return false;
-    }
-    if (!(0, fatcms_request_1.isEnableSuperAdmin)(ctx)) {
-        return false;
-    }
-    const currentLoginName = sessionInfo.loginName;
-    const superAdminList = ctx.app.getConfig('superAdminList');
-    if (Array.isArray(superAdminList)) {
-        for (let i = 0; i < superAdminList.length; i++) {
-            const element = superAdminList[i];
-            const login_name = _.get(element, 'login_name');
-            if (login_name && login_name === currentLoginName) {
-                return true;
-            }
-        }
-    }
-    return false;
-}
-function handleDebugError(e, ctx) {
-    ctx.logger.error('GlobalMiddleware', e);
-    let errorStack = null;
-    let errorCode = null;
-    let errorMessage = '' + e;
-    if (isObject(e)) {
-        if (e.message) {
-            errorMessage = e.message;
-        }
-        if (e.code) {
-            errorCode = e.code;
-        }
-        errorStack = e.stack;
-    }
-    const res = common_dto_1.CommonResult.errorRes(errorMessage, errorCode);
-    if ((0, fatcms_request_1.isEnableDebug)(ctx)) {
-        const debugInfo = { errorStack };
-        addDebugInfoFromContext(debugInfo, ctx);
-        res.debugInfo = debugInfo;
-    }
-    return res;
-}
-async function trackRequest(ctx) {
-    try {
-        const visitStatService = await getVisitStatService(ctx);
-        await visitStatService.trackRequest(ctx.path, 'path');
-    }
-    catch (e) {
-        console.error('trackRequestError', e);
-    }
-}
-/**
- * 全局中间件
- */
-let GlobalMiddleware = class GlobalMiddleware {
-    match(ctx) {
-        const path = ctx.path;
-        return !(path.startsWith('/ns/static/'));
-    }
-    resolve() {
-        return async (ctx, next) => {
-            ctx.contextLogger = new contextLogger_1.ContextLogger(ctx);
-            ctx.transaction = new Transaction_1.Transaction();
-            try {
-                // 支持的站点
-                const workbenchService = await getWorkbenchService(ctx);
-                const isSupportTheHost = await workbenchService.isSupportCurrentHostForForMiddleware();
-                if (isSupportTheHost !== true) {
-                    return isSupportTheHost;
-                }
-                const sessionService = await getUserSessionService(ctx);
-                const sessionInfo = await sessionService.getCurrentUserSessionForMiddleware();
-                const isSuperAdmin = checkIsSuperAdmin(ctx, sessionInfo);
-                ctx.userSession = new userSession_1.UserSessionInfo(sessionInfo, isSuperAdmin);
-                ctx.workbenchInfo = await workbenchService.getCurrentHostWorkbenchInfo();
-                // 数据埋点
-                await trackRequest(ctx);
-                const res0 = await next();
-                // 基本数据类型：需要搞成字符串
-                if (['bigint', 'symbol'].includes(typeof res0)) {
-                    return res0.toString();
-                }
-                // 基本数据类型: 交给KOA处理的
-                if (!res0 || ['string', 'number', 'boolean'].includes(typeof res0) || Buffer.isBuffer(res0) || isArrayBuffer(res0) || isStream(res0) || isBlob(res0)) {
-                    return res0;
-                }
-                // 其他：普通的JSON数据
-                let res = handleExecuteSqlContext(res0);
-                res = handleNullRes(res);
-                res = handleArrayRes(res);
-                res = handleDebugRes(res, ctx, res0);
-                return res;
-            }
-            catch (e) {
-                return handleDebugError(e, ctx);
-            }
-            finally {
-                await ctx.transaction.releaseTx();
-            }
-        };
-    }
-    static getName() {
-        return 'GlobalMiddleware';
-    }
-};
-GlobalMiddleware = __decorate([
-    (0, core_1.Middleware)()
-], GlobalMiddleware);
-exports.GlobalMiddleware = GlobalMiddleware;

package/dist/middleware/permission.middleware.d.ts

@@ -1,18 +0,0 @@
-import { NextFunction, Context } from '@midwayjs/koa';
-import { Exceptions } from '../libs/crud-pro/exceptions';
-declare function checkPermission(codeList: string | string[]): (ctx: Context, next: NextFunction) => Promise<{
-    success: boolean;
-    message: string;
-    code: Exceptions;
-}>;
-declare function checkRole(codeList: string | string[]): (ctx: Context, next: NextFunction) => Promise<{
-    success: boolean;
-    message: string;
-    code: Exceptions;
-}>;
-declare function checkLogin(): (ctx: Context, next: NextFunction) => Promise<{
-    success: boolean;
-    message: string;
-    code: Exceptions;
-}>;
-export { checkPermission, checkLogin, checkRole };

package/dist/middleware/permission.middleware.js

@@ -1,74 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.checkRole = exports.checkLogin = exports.checkPermission = void 0;
-const exceptions_1 = require("../libs/crud-pro/exceptions");
-function checkPermission(codeList) {
-    return async (ctx, next) => {
-        const userSession = ctx.userSession;
-        //  只有登录用户才会有功能点权限，所以必须登录
-        if (!userSession.isLogin()) {
-            return {
-                success: false,
-                message: '用户未登录, 请先登录',
-                code: exceptions_1.Exceptions.NOT_LOGIN,
-            };
-        }
-        // 查询当前用户是否用此功能点的权限
-        const hasPermission = userSession.hasAnyPermission(codeList);
-        if (!hasPermission) {
-            let message;
-            const loginName = userSession.getSessionInfo().loginName;
-            if (loginName === 'devopsviewer') {
-                message = "开放体验账号不支持这些操作：新增、修改、删除、上传";
-            }
-            else {
-                message = '缺少权限: ' + JSON.stringify(codeList);
-            }
-            return {
-                success: false,
-                message: message,
-                code: exceptions_1.Exceptions.NO_AUTH,
-            };
-        }
-        await next();
-    };
-}
-exports.checkPermission = checkPermission;
-function checkRole(codeList) {
-    return async (ctx, next) => {
-        const userSession = ctx.userSession;
-        //  只有登录用户才会有功能点权限，所以必须登录
-        if (!userSession.isLogin()) {
-            return {
-                success: false,
-                message: '用户未登录, 请先登录',
-                code: exceptions_1.Exceptions.NOT_LOGIN,
-            };
-        }
-        // 查询当前用户是否用此功能点的权限
-        const hasRole = userSession.hasAnyRole(codeList);
-        if (!hasRole) {
-            return {
-                success: false,
-                message: '缺少角色权限: ' + JSON.stringify(codeList),
-                code: exceptions_1.Exceptions.NO_AUTH,
-            };
-        }
-        await next();
-    };
-}
-exports.checkRole = checkRole;
-function checkLogin() {
-    return async (ctx, next) => {
-        const userSession = ctx.userSession;
-        if (!userSession.isLogin()) {
-            return {
-                success: false,
-                message: '用户未登录, 请先登录',
-                code: exceptions_1.Exceptions.NOT_LOGIN,
-            };
-        }
-        await next();
-    };
-}
-exports.checkLogin = checkLogin;

package/dist/middleware/tx.middleware.d.ts

@@ -1,9 +0,0 @@
-import { IMiddleware } from '@midwayjs/core';
-import { NextFunction, Context } from '@midwayjs/koa';
-/**
- * 事务中间件
- */
-export declare class TxMiddleware implements IMiddleware<Context, NextFunction> {
-    resolve(): (ctx: Context, next: NextFunction) => Promise<any>;
-    static getName(): string;
-}

package/dist/middleware/tx.middleware.js

@@ -1,40 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TxMiddleware = void 0;
-const core_1 = require("@midwayjs/core");
-/**
- * 事务中间件
- */
-let TxMiddleware = class TxMiddleware {
-    resolve() {
-        return async (ctx, next) => {
-            const transaction = ctx.transaction;
-            try {
-                await transaction.beginTx();
-                const res = await next();
-                await transaction.commitTx();
-                return res;
-            }
-            catch (e) {
-                ctx.contextLogger.error('ReportMiddleware', e);
-                await transaction.rollbackTx();
-            }
-            finally {
-                await transaction.releaseTx();
-            }
-        };
-    }
-    static getName() {
-        return 'TxMiddleware';
-    }
-};
-TxMiddleware = __decorate([
-    (0, core_1.Middleware)()
-], TxMiddleware);
-exports.TxMiddleware = TxMiddleware;