midway-fatcms 0.0.1-beta.7 → 0.0.1-beta.70

package/src/config/utils.ts

@@ -1,23 +1,22 @@
-import { readFileSync, existsSync } from 'fs';
-import * as path from 'path'
-
-export function readJsonFileSync(filePath0: string) {
-
-  const filePath = path.join(__dirname, filePath0)
-
-  try {
-    // 检查文件是否存在
-    if (!existsSync(filePath)) {
-      return {};
-    }
-
-    // 读取文件内容
-    const content = readFileSync(filePath, 'utf8');
-
-    // 解析JSON内容
-    return JSON.parse(content);
-  } catch (error) {
-    console.error(`读取JSON文件时出错: ${error.message}`);
-    return {};
-  }
-}
+import { readFileSync, existsSync } from 'fs';
+import * as path from 'path';
+
+export function readJsonFileSync(filePath0: string) {
+  const filePath = path.join(__dirname, filePath0);
+
+  try {
+    // 检查文件是否存在
+    if (!existsSync(filePath)) {
+      return {};
+    }
+
+    // 读取文件内容
+    const content = readFileSync(filePath, 'utf8');
+
+    // 解析JSON内容
+    return JSON.parse(content);
+  } catch (error) {
+    console.error(`读取JSON文件时出错: ${error.message}`);
+    return {};
+  }
+}

package/src/configuration.ts

@@ -1,83 +1,109 @@
-import { Configuration, App } from '@midwayjs/core';
-import * as koa from '@midwayjs/koa';
-import * as validate from '@midwayjs/validate';
-import * as info from '@midwayjs/info';
-import * as oss from '@midwayjs/oss';
-import * as upload from '@midwayjs/upload';
-import * as view from '@midwayjs/view-ejs';
-import * as redis from '@midwayjs/redis';
-import * as crossDomain from '@midwayjs/cross-domain';
-import * as _ from 'lodash';
-import { join } from 'path';
-// import { DefaultErrorFilter } from './filter/default.filter';
-// import { NotFoundFilter } from './filter/notfound.filter';
-import { GlobalMiddleware } from './middleware/global.middleware';
-import { ForbiddenMiddleware } from './middleware/forbidden.middleware';
-import { startSchedule } from './schedule';
-import { privateAES } from './libs/utils/crypto-utils';
-
-@Configuration({
-  imports: [
-    koa,
-    validate,
-    oss,
-    upload,
-    view,
-    crossDomain,
-    redis,
-    {
-      component: info,
-    },
-  ],
-  importConfigs: [join(__dirname, './config')],
-})
-export class ContainerLifeCycle {
-  @App()
-  app: koa.Application;
-
-  async onConfigLoad(): Promise<any> {
-    const config = this.app.getConfig();
-    const logger = this.app.getLogger();
-    const encryptedFieldList: string[] = config.encryptedFieldList || [];
-    const newConfig = {};
-
-    for (let i = 0; i < encryptedFieldList.length; i++) {
-      const field = encryptedFieldList[i];
-      try {
-
-        const encryptedValue = _.get(config, field);
-
-        if (encryptedValue && typeof encryptedValue === 'string') {
-          const newInput = await privateAES.time_decrypt_base64_utf8(encryptedValue);
-          _.set(newConfig, field, newInput);
-        }
-
-      } catch (e) {
-        console.error('ContainerLifeCycle ==> 解密配置字段失败： ' + field);
-        logger.error('ContainerLifeCycle ==> onConfigLoad 解密配置字段失败： ' + field);
-      }
-    }
-
-    return newConfig;
-  }
-
-  async onReady() {
-    const logger = this.app.getLogger();
-    const config = this.app.getConfig();
-
-    if (config.fatcmsScheduleService) {
-      // 启动定时任务
-      const scheduleServiceList = ['proxyApiLoadService', 'workbenchService', 'visitStatService'];
-      await startSchedule(this.app, scheduleServiceList);
-      logger.info('ContainerLifeCycle ==> onReady 启动定时任务 ' );
-    }
-
-
-    // add middleware
-    this.app.useMiddleware(ForbiddenMiddleware);
-    this.app.useMiddleware(GlobalMiddleware);
-
-    // add filter
-    // this.app.useFilter([NotFoundFilter, DefaultErrorFilter]);
-  }
-}
+import { Configuration, App } from '@midwayjs/core';
+import * as koa from '@midwayjs/koa';
+import * as validate from '@midwayjs/validate';
+import * as info from '@midwayjs/info';
+import * as oss from '@midwayjs/oss';
+import * as upload from '@midwayjs/upload';
+import * as view from '@midwayjs/view-ejs';
+import * as redis from '@midwayjs/redis';
+import * as crossDomain from '@midwayjs/cross-domain';
+import * as _ from 'lodash';
+import { join } from 'node:path';
+// import { DefaultErrorFilter } from './filter/default.filter';
+// import { NotFoundFilter } from './filter/notfound.filter';
+import { GlobalMiddleware } from './middleware/global.middleware';
+import { ForbiddenMiddleware } from './middleware/forbidden.middleware';
+import { SCHEDULE_QUEUE, ANONYMOUS_CONTEXT, INNER_SCHEDULE_INTERVAL } from './schedule';
+import { privateAES } from './libs/utils/crypto-utils';
+
+@Configuration({
+  // namespace: 'fatcms',
+  imports: [
+    koa,
+    validate,
+    oss,
+    upload,
+    view,
+    crossDomain,
+    redis,
+    {
+      component: info,
+    },
+  ],
+  importConfigs: [join(__dirname, './config')],
+})
+export class ContainerLifeCycle {
+  @App()
+  app: koa.Application;
+
+  async onConfigLoad(): Promise<any> {
+    const config = this.app.getConfig();
+    const logger = this.app.getLogger();
+    const encryptedFieldList: string[] = config.encryptedFieldList || [];
+    const newConfig = {};
+
+    for (let i = 0; i < encryptedFieldList.length; i++) {
+      const field = encryptedFieldList[i];
+      try {
+        const encryptedValue = _.get(config, field);
+
+        if (encryptedValue && typeof encryptedValue === 'string') {
+          const newInput = await privateAES.time_decrypt_base64_utf8(encryptedValue);
+          _.set(newConfig, field, newInput);
+        }
+      } catch (e) {
+        logger.error('ContainerLifeCycle ==> onConfigLoad 解密配置字段失败： ' + field);
+      }
+    }
+
+    return newConfig;
+  }
+
+  async onReady() {
+    /**
+     * 让ANONYMOUS_CONTEXT获取app对象
+     */
+    ANONYMOUS_CONTEXT.setApp(this.app);
+
+    /**
+     * 启动定时任务
+     */
+    await this.startScheduleOnReady();
+
+    // add middleware
+    this.app.useMiddleware(ForbiddenMiddleware);
+    this.app.useMiddleware(GlobalMiddleware);
+
+    // add filter
+    // this.app.useFilter([NotFoundFilter, DefaultErrorFilter]);
+  }
+
+  private async startScheduleOnReady() {
+    const logger = this.app.getLogger();
+    const config = this.app.getConfig();
+    const fatcmsScheduleService: boolean | any = config.fatcmsScheduleService;
+
+    // 关闭定时任务
+    if (fatcmsScheduleService === false || fatcmsScheduleService === null) {
+      return;
+    }
+
+    let scheduleIntervalCfg = INNER_SCHEDULE_INTERVAL;
+    if (typeof fatcmsScheduleService === 'object') {
+      scheduleIntervalCfg = fatcmsScheduleService;
+    }
+
+    const keys = Object.keys(scheduleIntervalCfg);
+    for (let i = 0; i < keys.length; i++) {
+      const service = keys[i];
+      const interval = scheduleIntervalCfg[service];
+      if (typeof interval !== 'number') {
+        throw new Error('Invalid scheduleIntervalCfg ' + service + ',  interval must be a number');
+      }
+      SCHEDULE_QUEUE.setScheduleTask(service, interval);
+    }
+
+    await SCHEDULE_QUEUE.startScheduleLoop();
+    logger.info('ContainerLifeCycle ==> onReady 启动定时任务 ： ' + JSON.stringify(scheduleIntervalCfg));
+  }
+}

package/src/controller/base/BaseApiController.ts

@@ -1,145 +1,209 @@
-import { Controller, Inject } from '@midwayjs/core';
-import { Context } from '@midwayjs/koa';
-import { CurdMixService } from '../../service/curd/CurdMixService';
-import { IFuncCfgModel, IRequestCfgModel, IValidatorCfgItem } from '../../libs/crud-pro/interfaces';
-import { KeyOfCrudTypes, KeysOfSimpleSQL } from '../../libs/crud-pro/models/keys';
-import { GLOBAL_STATIC_CONFIG } from '@/libs/global-config/global-config';
-import { UserAccountService } from '../../service/UserAccountService';
-import { RelatedType } from '../../service/curd/CurdMixUtils';
-import { BaseService } from '../../service/base/BaseService';
-
-export interface IExecuteSimpleSqlParams {
-  updateCfg?: Record<string, IFuncCfgModel>;
-  allowCfg?: Record<string, string[]>;
-  rejectCfg?: Record<string, string[]>;
-  validateCfg?: Record<string, IValidatorCfgItem[]>;
-  columns?: string | string[]; // ..."columns": "id,name,age,sex,addr",
-}
-
-@Controller('/api/BaseApiController')
-export class BaseApiController extends BaseService {
-  @Inject()
-  protected ctx: Context;
-
-  @Inject()
-  protected curdMixService: CurdMixService;
-
-  @Inject()
-  protected userAccountService: UserAccountService;
-
-  protected getUserSessionInfo() {
-    if (!this.ctx.userSession) {
-      return null;
-    }
-    return this.ctx.userSession.getSessionInfo();
-  }
-
-  async executeSysSQL(executeSql: string, executeSqlArgs: any[]) {
-    const { SystemDbName, SystemDbType } = GLOBAL_STATIC_CONFIG.getConfig();
-    return await this.curdMixService.executeSQL({
-      executeSql: executeSql,
-      executeSqlArgs: executeSqlArgs,
-      sqlDatabase: SystemDbName,
-      sqlDdType: SystemDbType,
-      crudType: KeyOfCrudTypes.SYS_QUERY,
-    });
-  }
-
-  /**
-   * 查询sys表中的SQL语句。sys表的表结构都是标准的。
-   * @param sqlTable
-   * @param sqlSimpleName
-   * @param params
-   * @protected
-   */
-  protected async executeSysSimpleSQL(sqlTable: string, sqlSimpleName: KeysOfSimpleSQL, params?: IExecuteSimpleSqlParams) {
-    const { SystemDbName, SystemDbType } = GLOBAL_STATIC_CONFIG.getConfig();
-    const body = this.ctx.request.body as any;
-    const req = this.ctx.req;
-    const cfgModel: IRequestCfgModel = {
-      method: `${req.method}:${req.url}`,
-      sqlTable,
-      sqlSimpleName,
-      sqlDatabase: SystemDbName,
-      sqlDdType: SystemDbType,
-      updateCfg: {},
-    };
-
-    if (params && typeof params === 'object') {
-      Object.assign(cfgModel, params);
-    }
-
-    //自动关联用户基本信息
-    this.addAccountBasicInfoCfgModel(cfgModel);
-
-    //自动关联工作台基本信息
-    this.addWorkbenchBasicInfoCfgModel(cfgModel);
-
-    return await this.curdMixService.executeCrudByCfg(body, cfgModel);
-  }
-
-  protected get sysDBUtil() {
-    const { SystemDbName, SystemDbType } = GLOBAL_STATIC_CONFIG.getConfig();
-    return this.curdMixService.getBbUtil(SystemDbName, SystemDbType);
-  }
-
-  private addAccountBasicInfoCfgModel(cfgModel: IRequestCfgModel) {
-    let columnsRelation = cfgModel.columnsRelation;
-    if (!columnsRelation) {
-      columnsRelation = [];
-      cfgModel.columnsRelation = columnsRelation;
-    }
-    let createdByRelation = columnsRelation.find(s => s.relatedType === RelatedType.accountBasic && s.sourceColumn === 'created_by');
-    if (!createdByRelation) {
-      createdByRelation = {
-        relatedType: RelatedType.accountBasic,
-        sourceColumn: 'created_by',
-        targetColumns: [], // 使用默认
-      };
-      columnsRelation.push(createdByRelation);
-    }
-
-    let modifiedByRelation = columnsRelation.find(s => s.relatedType === RelatedType.accountBasic && s.sourceColumn === 'modified_by');
-    if (!modifiedByRelation) {
-      modifiedByRelation = {
-        relatedType: RelatedType.accountBasic,
-        sourceColumn: 'modified_by',
-        targetColumns: [], // 使用默认
-      };
-      columnsRelation.push(modifiedByRelation);
-    }
-  }
-
-  private addWorkbenchBasicInfoCfgModel(cfgModel: IRequestCfgModel) {
-    let columnsRelation = cfgModel.columnsRelation;
-    if (!columnsRelation) {
-      columnsRelation = [];
-      cfgModel.columnsRelation = columnsRelation;
-    }
-    let createdByRelation = columnsRelation.find(s => s.relatedType === RelatedType.workbenchBasic && s.sourceColumn === 'workbench_code');
-    if (!createdByRelation) {
-      createdByRelation = {
-        relatedType: RelatedType.workbenchBasic,
-        sourceColumn: 'workbench_code',
-        targetColumns: [
-          { from: 'workbench_domain', to: 'workbench_info.workbench_domain' },
-          { from: 'workbench_name', to: 'workbench_info.workbench_name' },
-        ],
-      };
-      columnsRelation.push(createdByRelation);
-    }
-
-    let createdByRelation2 = columnsRelation.find(s => s.relatedType === RelatedType.workbenchBasic && s.sourceColumn === 'workbench_code_array');
-    if (!createdByRelation2) {
-      createdByRelation2 = {
-        relatedType: RelatedType.workbenchBasic,
-        sourceColumn: 'workbench_code_array',
-        targetColumns: [
-          { from: 'workbench_domain', to: 'workbench_info_array[$ARRAY_INDEX].workbench_domain' },
-          { from: 'workbench_name', to: 'workbench_info_array[$ARRAY_INDEX].workbench_name' },
-        ],
-      };
-      columnsRelation.push(createdByRelation2);
-    }
-  }
-}
+import { Controller, Inject } from '@midwayjs/core';
+import { Context } from '@midwayjs/koa';
+import { CurdMixService } from '@/service/curd/CurdMixService';
+import { IFuncCfgModel, IRequestCfgModel, IValidatorCfgItem } from '@/libs/crud-pro/interfaces';
+import { KeyOfCrudTypes, KeysOfSimpleSQL } from '@/libs/crud-pro/models/keys';
+import { GLOBAL_STATIC_CONFIG } from '@/libs/global-config/global-config';
+import { UserAccountService } from '@/service/UserAccountService';
+import { RelatedType } from '@/service/curd/CurdMixUtils';
+import { BaseService } from '@/service/base/BaseService';
+import * as moment from 'moment';
+import { CommonException } from '@/libs/crud-pro/exceptions';
+import { RedisKeys } from '@/models/RedisKeys';
+import { Aes128CBC } from 'aes-128-cbc';
+import * as md5 from 'md5';
+import { AsymmetricCrypto } from '@/libs/utils/AsymmetricCrypto';
+
+export interface IExecuteSimpleSqlParams {
+  updateCfg?: Record<string, IFuncCfgModel>;
+  allowCfg?: Record<string, string[]>;
+  rejectCfg?: Record<string, string[]>;
+  validateCfg?: Record<string, IValidatorCfgItem[]>;
+  columns?: string | string[]; // ..."columns": "id,name,age,sex,addr",
+}
+
+export interface ISecretBody {
+  secretPayload: string;
+  secretKey: string; // 使用RSA公钥加密的AES密钥
+}
+
+@Controller('/api/BaseApiController')
+export class BaseApiController extends BaseService {
+  @Inject()
+  protected ctx: Context;
+
+  @Inject()
+  protected curdMixService: CurdMixService;
+
+  @Inject()
+  protected userAccountService: UserAccountService;
+
+  /**
+   * 检查用户是否在指定时间内重复执行了某个操作
+   * @param actionCode 操作编码
+   * @param limitSecond 限制时间，单位：秒
+   */
+  protected async checkUserActionTimeLimit(actionCode: string, limitSecond = 60) {
+    const userSessionInfo = this.getUserSessionInfo();
+    if (!userSessionInfo) {
+      throw new CommonException('USER_SESSION_INFO_IS_NOT_EXIST', '用户会话信息不存在');
+    }
+    const key = `${RedisKeys.USER_ACTION_TIME_LIMIT_PREFIX}${userSessionInfo.sessionId}_${actionCode}`;
+    const lock = await this.redisService.set(key, 1, 'EX', limitSecond, 'NX');
+    if (lock !== 'OK') {
+      throw new CommonException('TOO_MANY_REQUESTS_PLEASE_WAIT', `您操作太频繁了，请${limitSecond}秒后再试`);
+    }
+  }
+
+  protected getUserSessionInfo() {
+    if (!this.ctx.userSession) {
+      return null;
+    }
+    return this.ctx.userSession.getSessionInfo();
+  }
+
+  async executeSysSQL(executeSql: string, executeSqlArgs: any[]) {
+    const { SystemDbName, SystemDbType } = GLOBAL_STATIC_CONFIG.getConfig();
+    return await this.curdMixService.executeSQL({
+      executeSql: executeSql,
+      executeSqlArgs: executeSqlArgs,
+      sqlDatabase: SystemDbName,
+      sqlDbType: SystemDbType,
+      crudType: KeyOfCrudTypes.SYS_QUERY,
+    });
+  }
+
+  /**
+   * 查询sys表中的SQL语句。sys表的表结构都是标准的。
+   * @param sqlTable
+   * @param sqlSimpleName
+   * @param params
+   * @protected
+   */
+  protected async executeSysSimpleSQL(sqlTable: string, sqlSimpleName: KeysOfSimpleSQL, params?: IExecuteSimpleSqlParams) {
+    const { SystemDbName, SystemDbType } = GLOBAL_STATIC_CONFIG.getConfig();
+    const body = this.ctx.request.body as any;
+    const req = this.ctx.req;
+    const cfgModel: IRequestCfgModel = {
+      method: `${req.method}:${req.url}`,
+      sqlTable,
+      sqlSimpleName,
+      sqlDatabase: SystemDbName,
+      sqlDbType: SystemDbType,
+      updateCfg: {},
+    };
+
+    if (params && typeof params === 'object') {
+      Object.assign(cfgModel, params);
+    }
+
+    //自动关联用户基本信息
+    this.addAccountBasicInfoCfgModel(cfgModel);
+
+    //自动关联工作台基本信息
+    this.addWorkbenchBasicInfoCfgModel(cfgModel);
+
+    //sys系统表都是标准的，都有modified_at字段。
+    if (sqlSimpleName === KeysOfSimpleSQL.SIMPLE_UPDATE && body.data) {
+      body.data['modified_at'] = moment(Date.now()).format('YYYY-MM-DD HH:mm:ss.SSS');
+    }
+
+    return await this.curdMixService.executeCrudByCfg(body, cfgModel);
+  }
+
+  protected get sysDBUtil() {
+    const { SystemDbName, SystemDbType } = GLOBAL_STATIC_CONFIG.getConfig();
+    return this.curdMixService.getBbUtil(SystemDbName, SystemDbType);
+  }
+
+  private addAccountBasicInfoCfgModel(cfgModel: IRequestCfgModel) {
+    let columnsRelation = cfgModel.columnsRelation;
+    if (!columnsRelation) {
+      columnsRelation = [];
+      cfgModel.columnsRelation = columnsRelation;
+    }
+    let createdByRelation = columnsRelation.find(s => s.relatedType === RelatedType.accountBasic && s.sourceColumn === 'created_by');
+    if (!createdByRelation) {
+      createdByRelation = {
+        relatedType: RelatedType.accountBasic,
+        sourceColumn: 'created_by',
+        targetColumns: [], // 使用默认
+      };
+      columnsRelation.push(createdByRelation);
+    }
+
+    let modifiedByRelation = columnsRelation.find(s => s.relatedType === RelatedType.accountBasic && s.sourceColumn === 'modified_by');
+    if (!modifiedByRelation) {
+      modifiedByRelation = {
+        relatedType: RelatedType.accountBasic,
+        sourceColumn: 'modified_by',
+        targetColumns: [], // 使用默认
+      };
+      columnsRelation.push(modifiedByRelation);
+    }
+  }
+
+  private addWorkbenchBasicInfoCfgModel(cfgModel: IRequestCfgModel) {
+    let columnsRelation = cfgModel.columnsRelation;
+    if (!columnsRelation) {
+      columnsRelation = [];
+      cfgModel.columnsRelation = columnsRelation;
+    }
+    let createdByRelation = columnsRelation.find(s => s.relatedType === RelatedType.workbenchBasic && s.sourceColumn === 'workbench_code');
+    if (!createdByRelation) {
+      createdByRelation = {
+        relatedType: RelatedType.workbenchBasic,
+        sourceColumn: 'workbench_code',
+        targetColumns: [
+          { from: 'workbench_domain', to: 'workbench_info.workbench_domain' },
+          { from: 'workbench_name', to: 'workbench_info.workbench_name' },
+        ],
+      };
+      columnsRelation.push(createdByRelation);
+    }
+
+    let createdByRelation2 = columnsRelation.find(s => s.relatedType === RelatedType.workbenchBasic && s.sourceColumn === 'workbench_code_array');
+    if (!createdByRelation2) {
+      createdByRelation2 = {
+        relatedType: RelatedType.workbenchBasic,
+        sourceColumn: 'workbench_code_array',
+        targetColumns: [
+          { from: 'workbench_domain', to: 'workbench_info_array[$ARRAY_INDEX].workbench_domain' },
+          { from: 'workbench_name', to: 'workbench_info_array[$ARRAY_INDEX].workbench_name' },
+        ],
+      };
+      columnsRelation.push(createdByRelation2);
+    }
+  }
+
+
+  protected async decodeBodyBySession<T>(body: any): Promise<any> {
+    const sessionInfo = this.getUserSessionInfo();
+    const sessionId = sessionInfo?.sessionId;
+    if (!sessionId) {
+      throw new Error('[decodeBodyBySessionId] sessionId is null');
+    }
+
+    const secretBody = body as ISecretBody;
+
+    if (!secretBody.secretPayload || !secretBody.secretKey) {
+      return body;
+    }
+
+    const { privateKey } = sessionInfo;
+
+    const secretPayload: string = secretBody.secretPayload;
+    const secretKey: string = secretBody.secretKey; // 使用RSA加密的AES密钥  
+    const aesKey = await AsymmetricCrypto.decrypt(privateKey, secretKey); // 解密AES密钥
+
+    const createAes128 = () => {
+      const iv = md5(aesKey + sessionId);
+      return new Aes128CBC(aesKey, iv);
+    }
+    const aes128 = createAes128();
+    const decryptedPayload = await aes128.time_decrypt_base64_utf8(secretPayload);
+    return JSON.parse(decryptedPayload);
+  }
+
+
+}