mm_os 2.8.0 → 2.8.1

package/demo/app/user/plugin/main/api_user_client/forgot/api.json

@@ -0,0 +1,37 @@
+{
+	// 路由路径
+	"path": "/api/user/forgot",
+	// 名称, 用于动态增删改API配置
+	"name": "user_forgot",
+	// 标题, 用于开发文档显示
+	"title": "找回密码",
+	// 描述, 用于介绍该路由的作用
+	"description": "用于用户忘记密码时重置密码",
+	// 函数文件, 用于驱动脚本, 实现业务 
+	"func_file": "./index.js",
+	// 请求方法, 选填 GET, POST, ALL。 ALL指同时支持GET/POST
+	"method": "ALL",
+	// 开放域, 如果域未开放, 则只有特定的协议头才能访问该API, 同时API文档不接见
+	"scope": true,
+	// 缓存时长, 单位: 分钟。使用缓存后, 二次访问API直接从缓存读取, 不重复执行业务脚本
+	"cache": 0,
+	// 是否客户端缓存, 使用客户端则不再访问服务器, 直接从浏览器中拿; 使用服务端缓存则会访问服务器   
+	"client_cache": false,
+	// 参数配置路径, 用于校验API请求参数是否正确, 同时显示在API文档中 
+	"param_path": "./param.json",
+	/* 授权协议 */
+	"oauth": {
+		// 是否需要登录, true表示需要登录才能访问该接口
+		"signIn": false,
+		// 会员权限级别, 如果小于该值, 则无法访问, 0为不限制
+		"vip": 0,
+		// 管理员权限级别, 如果小于该值, 则无法访问, 0为不限制
+		"gm": 0,
+		// 商户/第三方权限级别, 如果小于该值, 则无法访问, 0为不限制
+		"mc": 0,
+		// 用户组, 允许访问该接口的普通用户群体, 传ID数组，例如: [1,5]
+		"user_group": [],
+		// 管理组, 允许访问该接口的管理员群体, 传ID数组，例如: [1,5]
+		"user_admin": []
+	}
+}

package/demo/app/user/plugin/main/api_user_client/forgot/index - /345/211/257/346/234/254.jsbat"

@@ -0,0 +1,41 @@
+/**
+ * 接口主函数
+ * @param {Object} ctx HTTP上下文
+ * @param {Object} db 数据管理器,如: { next: async function{}, ret: {} }
+ * @return {Object} 执行结果
+ */
+async function main(ctx, db) {
+	// 获取请求参数
+	var req = ctx.request;
+	var {
+		query,
+		body
+	} = req;
+
+	var params = Object.assign({}, query, body);
+	var {
+		username,
+		password,
+		wallet_address,
+		signature
+	} = params;
+
+
+	db.table = "user_account";
+	db.key = "user_id";
+	var user = await db.getObj({
+		username
+	});
+	
+	if (!user) {
+		return $.ret.error(10000, "用户不存在");
+	} 
+	var address = $.ct.MetaMaskRecover(username.md5(), signature);
+	if(user.wallet_address.toLocaleLowerCase() !== address.toLocaleLowerCase()) {
+		return $.ret.error(30000, "连接的钱包地址与账户绑定的不一致");
+	}
+	user.password = (password + user.salt).md5();
+	return $.ret.bl(true, '密码重置成功！');
+};
+
+exports.main = main;

package/demo/app/user/plugin/main/api_user_client/forgot/index.js

@@ -0,0 +1,36 @@
+/**
+ * 接口主函数
+ * @param {Object} ctx HTTP上下文
+ * @param {Object} db 数据管理器,如: { next: async function{}, ret: {} }
+ * @return {Object} 执行结果
+ */
+async function main(ctx, db) {
+	// 获取请求参数
+	var req = ctx.request;
+	var {
+		query,
+		body
+	} = req;
+
+	var params = Object.assign({}, query, body);
+	var {
+		account,
+		password,
+		code
+	} = params;
+	var phone = account;
+	
+	db.table = "user_account";
+	db.key = "user_id";
+	var user = await db.getObj({
+		phone
+	});
+	
+	if (!user) {
+		return $.ret.error(10000, "用户不存在");
+	} 
+	user.password = (password + user.salt).md5();
+	return $.ret.bl(true, '密码重置成功！');
+};
+
+exports.main = main;

package/demo/app/user/plugin/main/api_user_client/forgot/param.json

@@ -0,0 +1,56 @@
+{
+	// 是否启用过滤, 启用过滤后, 不符合的参数会被过滤掉
+	"filter": true,
+	// get请求
+	"get": {
+		// 正文必填参数
+		"query_required": ["account", "password", "confirm_password"]
+	},
+	// post请求
+	"post": {
+		// 正文必填参数
+		"body_required": ["account", "password", "confirm_password"]
+	},
+	// 校验列表
+	"list": [{
+			"name": "username",
+			"title": "用户名",
+			"type": "string",
+			"string": {
+				"format": "username"
+			}
+		},
+		{
+			"name": "password",
+			"title": "密码",
+			"type": "string",
+			"string": {
+				"format": "password",
+				"different": "username"
+			}
+		},
+		{
+			"name": "confirm_password",
+			"title": "确认密码",
+			"type": "string",
+			"string": {
+				"format": "password",
+				"identical": "password"
+			}
+		},
+		{
+			"name": "wallet_address",
+			"title": "钱包地址",
+			"type": "string",
+			"string": {
+				"min": 42,
+				"max": 42
+			}
+		},
+		{
+			"name": "signature",
+			"title": "签名",
+			"type": "string"
+		}
+	]
+}

package/demo/app/user/plugin/main/api_user_client/oauth/WXBizDataCrypt.js

@@ -0,0 +1,33 @@
+var crypto = require('crypto')
+
+function WXBizDataCrypt(appId, sessionKey) {
+  this.appId = appId
+  this.sessionKey = sessionKey
+}
+
+WXBizDataCrypt.prototype.decryptData = function (encryptedData, iv) {
+  // base64 decode
+  var sessionKey = Buffer.from(this.sessionKey, 'base64')
+  encryptedData = Buffer.from(encryptedData, 'base64')
+  iv = Buffer.from(iv, 'base64')
+
+  try {
+     // 解密
+    var decipher = crypto.createDecipheriv('aes-128-cbc', sessionKey, iv)
+    // 设置自动 padding 为 true，删除填充补位
+    decipher.setAutoPadding(true)
+    var decoded = decipher.update(encryptedData, 'binary', 'utf8')
+    decoded += decipher.final('utf8')
+    decoded = JSON.parse(decoded)
+  } catch (err) {
+    throw new Error('Illegal Buffer')
+  }
+
+  if (decoded.watermark.appid !== this.appId) {
+    throw new Error('Illegal Buffer')
+  }
+
+  return decoded
+}
+
+module.exports = WXBizDataCrypt

package/demo/app/user/plugin/main/api_user_client/oauth/api.json

@@ -0,0 +1,31 @@
+{
+	// 路由路径
+	"path": "/api/user/oauth*",
+	// 名称, 用于动态增删改API配置
+	"name": "user_oauth",
+	// 标题, 用于开发文档显示
+	"title": "第三方登录",
+	// 描述, 用于介绍该路由的作用
+	"description": "通过微信、淘宝、新浪等登录应用",
+	// 函数文件, 用于驱动脚本, 实现业务 
+	"func_file": "./index.js",
+	// 请求方法, 选填 GET, POST, ALL。 ALL指同时支持GET/POST
+	"method": "ALL",
+	// 参数配置路径, 用于校验API请求参数是否正确, 同时显示在API文档中 
+	"param_path": "./param.json",
+	/* 授权协议 */
+	"oauth": {
+		// 是否需要登录, true表示需要登录才能访问该接口
+		"signIn": false,
+		// 会员权限级别, 如果小于该值, 则无法访问, 0为不限制
+		"vip": 0,
+		// 管理员权限级别, 如果小于该值, 则无法访问, 0为不限制
+		"gm": 0,
+		// 商户/第三方权限级别, 如果小于该值, 则无法访问, 0为不限制
+		"mc": 0,
+		// 用户组, 允许访问该接口的普通用户群体, 传ID数组，例如: [1,5]
+		"user_group": [],
+		// 管理组, 允许访问该接口的管理员群体, 传ID数组，例如: [1,5]
+		"user_admin": []
+	}
+}

package/demo/app/user/plugin/main/api_user_client/oauth/index.js

@@ -0,0 +1,16 @@
+const Oauth = require("./oauth.js");
+
+var oauth = new Oauth();
+
+/**
+ * 接口主函数
+ * @param {Object} ctx HTTP上下文
+ * @param {Object} db 数据管理器,如: { next: async function{}, ret: {} }
+ * @return {Object} 执行结果
+ */
+async function main(ctx, db) {
+	// 获取请求参数
+	return oauth.run(db, ctx);
+};
+
+exports.main = main;

package/demo/app/user/plugin/main/api_user_client/oauth/oauth.js

@@ -0,0 +1,270 @@
+const WXBizDataCrypt = require('./WXBizDataCrypt');
+const cg = require('./oauth.json');
+
+/**
+ * Oauth授权类
+ */
+class Oauth {
+	/**
+	 * 配置参数
+	 * @param {Object} config
+	 */
+	constructor(config) {
+		this.config = Object.assign({}, cg, config);
+	}
+}
+
+/**
+ * 构建配置模型
+ * @param {Object} config
+ * @return {Object} 返回配置
+ */
+Oauth.prototype.model = function(config) {
+	config.dict = Object.assign({
+		"code": "code",
+		"scope": "scope",
+		"client_id": "client_id",
+		"client_secret": "client_secret",
+		"open_id": "open_id",
+		"access_token": "access_token",
+		"refresh_token": "refresh_token",
+		"redirect_uri": "redirect_uri",
+		"state": "state"
+	}, config.dict);
+
+	return config;
+}
+
+/**
+ * 授权链接
+ */
+Oauth.prototype.connect = async function(db, ctx, config) {
+	console.log('connect');
+	return $.ret.body = {
+		url: config.url_code
+	}
+};
+
+/**
+ * 回调链接
+ */
+Oauth.prototype.callback = async function(db, ctx, config) {
+	console.log(req);
+};
+
+/**
+ * 绑定链接
+ */
+Oauth.prototype.bind = async function(db, ctx, config) {
+	var req = ctx.request;
+	var body = req.body;
+	var {
+		openid,
+		encryptedData,
+		iv,
+		appid,
+		session_key,
+		nickName,
+		city,
+		province,
+		country,
+		avatarUrl
+	} = body;
+	
+	var pc = new WXBizDataCrypt(appid, session_key);
+	var data = pc.decryptData(encryptedData, iv);
+	if(!data){
+		return $.ret.error(10000, "创建用户失败！");
+	}
+	var phone = data.phoneNumber;
+	var db1 = db.new("user_account", "user_id");
+	var user = await db1.getObj({
+		phone
+	});
+	if (!user) {
+		var len = phone.length;
+		var p = phone.substring(len - 6, len).md5();
+		var salt = p.substring(0, 6);
+		var password = (p + salt).md5();
+		var username = phone;
+		var invite_code = (username + password).md5().substring(0, 6);
+
+		await db1.add({
+			username,
+			salt,
+			password,
+			phone,
+			invite_code,
+			wallet_address: phone
+		});
+		// console.log("注册账户", db1.error);
+		user = await db1.getObj({
+			phone
+		});
+	}
+	if (!user) {
+		return $.ret.error(10000, "创建用户失败！");
+	}
+	user.nickname = nickName;
+	user.avatar = avatarUrl;
+
+	var db2 = db.new("user_info", "user_id");
+
+	var user_id = user.user_id;
+	info = await db2.getObj({
+		user_id
+	});
+	if (!info) {
+		await db2.add({
+			user_id,
+			city,
+			country,
+			province
+		});
+		info = await db2.getObj({
+			user_id
+		});
+	}
+
+	var u = Object.assign({}, user);
+	delete u.password;
+	delete u.salt;
+	delete u.time_create;
+	ctx.session.user = user;
+	var ip = ctx.ip.replace('::ffff:', '');
+	// var user = Object.assign({}, u);
+	// 自动生成的uuid是通过IP和浏览器信息加密而成，如果需要解密确认其身份，可再加上user_id加密，自行生成uuid
+	var ret = $.ret.body({
+		token: ctx.session.uuid,
+		user,
+		ip
+	});
+	var userInfo = {
+		nickName,
+		city,
+		province,
+		country,
+		avatarUrl
+	};
+	var params = {
+		open_id: openid,
+		info: JSON.stringify(userInfo)
+	};
+	$.bind_account(db, params, user);
+	// $.log.debug('入场', body);
+	return ret
+};
+
+/**
+ * 解绑链接
+ */
+Oauth.prototype.unbind = async function(db, ctx, config) {
+
+};
+
+/**
+ * 1.通过code换取token
+ * @param {Object} req 查询参数
+ * @param {Object} db
+ * @param {Object} config
+ */
+Oauth.prototype.code_to_token = async function(db, ctx, config) {
+	var ret;
+	var req = ctx.request;
+	// req里面需传code和appid两个参数
+	var d = config.dict;
+	var query = req.query;
+	var code = query[d.code];
+	var appid = query[d.client_id];
+	db.table = config.name.replace("_mini", "") + "_app";
+	// console.log(d.code,code,d.client_id,appid);
+	var qy = {};
+	qy[d.client_id] = appid;
+	var obj = await db.getObj(qy);
+	if (!obj) {
+		return $.ret.error(60000, d.client_id + ":" + appid + "不存在!");
+	}
+	var url = config.url_token.replace("{client_id}", appid).replace("{code}", code).replace("{client_secret}",
+		obj[d.client_secret]);
+	var http = new $.Http();
+	var html = await http.get(url);
+	if (html.body) {
+		var json = html.body.toJson();
+		if (json.errcode && json.errmsg) {
+			return $.ret.error(30000, json.errmsg)
+		}
+		if (json[d.open_id]) {
+			if (obj.type == "小程序") {
+				db.table = "wechat_info";
+				var user_info = await db.getObj({
+					open_id: json[d.open_id]
+				});
+				if (user_info) {
+					var user_id = user_info.user_id;
+					db.table = "user_account";
+					var user = await db.getObj({
+						user_id
+					});
+					user.open_id = json[d.open_id];
+					user.token = ctx.session.uuid;
+					ctx.session.user = user;
+					return $.ret.body(user);
+				} else {
+					return $.ret.body(json);
+				}
+			} else {
+				url = config.url_user_info.replace("{access_token}", json[d.access_token]).replace("{open_id}",
+					json[d.open_id]);
+				html = await http.get(url);
+				if (html.body) {
+					var users = html.body.toJson();
+					db.table = "wechat_info";
+					db.key = "info_id";
+					qy = {};
+					qy["open_id"] = json[d.open_id];
+					user = await db.getObj(qy);
+					if (!user) {
+						var body = {};
+						body["open_id"] = json[d.open_id];
+						await db.add(body);
+						user = await db.getObj(qy);
+					}
+					if (user) {
+						user[d.access_token] = json[d.access_token];
+						user[d.refresh_token] = json[d.refresh_token];
+						user.info = JSON.stringify(users);
+						body = Object.assign({}, user, json, users);
+						delete body.info;
+						ret = $.ret.body(body);
+					}
+				}
+			}
+		}
+	}
+	return ret;
+};
+
+/**
+ * 运行
+ */
+Oauth.prototype.run = async function(db, ctx) {
+	var req = ctx.request;
+	var path = req.path;
+	var dict = this.config;
+	var ret = {};
+	for (var k in dict) {
+		var p = "/api/user/oauth/" + k + "/";
+		if (path.indexOf(p) === 0) {
+			var fun_name = path.replace(p, '');
+			if (this[fun_name]) {
+				// console.log("有此路径", fun_name);
+				dict[k].name = k;
+				ret = await this[fun_name](db, ctx, this.model(dict[k]));
+				break;
+			}
+		}
+	}
+	return ret;
+};
+
+module.exports = Oauth;

package/demo/app/user/plugin/main/api_user_client/oauth/oauth.json

@@ -0,0 +1,88 @@
+{
+	"wechat": {
+		"client_id": "",
+		"client_secret": "",
+		"token": "",
+		"scope": "snsapi_userinfo",
+		"url_code": "https://open.weixin.qq.com/connect/oauth2/authorize?appid={client_id}&redirect_uri={redirect_uri}&response_type=code&scope={scope}&state={state}#wechat_redirect",
+		"url_token": "https://api.weixin.qq.com/sns/oauth2/access_token?appid={client_id}&secret={client_secret}&code={code}&grant_type=authorization_code",
+		"url_user_info": "https://api.weixin.qq.com/sns/userinfo?access_token={access_token}&openid={open_id}&lang=zh_CN",
+		"url_check_token": "https://api.weixin.qq.com/sns/auth?access_token={access_token}&openid={open_id}",
+		"url_refresh_token": "https://api.weixin.qq.com/sns/oauth2/refresh_token?appid={client_id}&grant_type=refresh_token&refresh_token={refresh_token}",
+		"dict": {
+			"client_id": "appid",
+			"client_secret": "secret",
+			"open_id": "openid"
+		}
+	},
+	"wechat_mini": {
+		"client_id": "wx9af97e2bea3bc126",
+		"client_secret": "",
+		"token": "",
+		"scope": "snsapi_userinfo",
+		"url_code": "https://open.weixin.qq.com/connect/oauth2/authorize?appid={client_id}&redirect_uri={redirect_uri}&response_type=code&scope={scope}&state={state}#wechat_redirect",
+		"url_token": "https://api.weixin.qq.com/sns/jscode2session?appid={client_id}&secret={client_secret}&js_code={code}&grant_type=authorization_code",
+		"url_user_info": "https://api.weixin.qq.com/sns/userinfo?access_token={access_token}&openid={open_id}&lang=zh_CN",
+		"url_check_token": "https://api.weixin.qq.com/sns/auth?access_token={access_token}&openid={open_id}",
+		"url_refresh_token": "https://api.weixin.qq.com/sns/oauth2/refresh_token?appid={client_id}&grant_type=refresh_token&refresh_token={refresh_token}",
+		"dict": {
+			"client_id": "appid",
+			"client_secret": "appsecret",
+			"open_id": "openid"
+		}
+	},
+	"qq": {
+		"client_id": "",
+		"client_secret": "",
+		"scope": "get_user_info",
+		"url_code": "https://graph.qq.com/oauth2.0/authorize?grant_type=code&client_id={client_id}&redirect_uri={redirect_uri}&state={state}&scope={scope}&display=mobile",
+		"url_token": "https://graph.qq.com/oauth2.0/token?grant_type=authorization_code&client_id={client_id}&client_secret={client_secret}",
+		"url_user_info": "https://graph.qq.com/user/get_user_info?access_token={access_token}&oauth_consumer_key={client_id}&openid={open_id}",
+		"url_check_token": "https://graph.qq.com/user/get_user_info?access_token{access_token}&oauth_consumer_key={client_id}&openid={open_id}&format=json",
+		"url_refresh_token": "https://graph.qq.com/oauth2.0/token?grant_type=refresh_token&client_id={client_id}&client_secret={client_secret}&refresh_token={refresh_token}",
+		"dict": {
+			"open_id": "openid",
+			"access_token": "client_secret"
+		}
+	},
+	"taobao": {
+		"client_id": "",
+		"client_secret": "",
+		"url_code": "https://oauth.taobao.com/authorize?response_type=code&client_id={client_id}&redirect_uri={redirect_uri}&state={state}&view=web",
+		"url_token": "https://oauth.taobao.com/token?grant_type=authorization_code&client_id={client_id}&client_secret={client_secret}&client_secret={client_secret}&code={code}&redirect_uri={redirect_uri}",
+		"url_user_info": "",
+		"url_check_token": "",
+		"url_refresh_token": "",
+		"dict": {
+			"expires_in": "expires_in",
+			"open_id": "taobao_user_id"
+		}
+	},
+	"sina": {
+		"client_id": "",
+		"client_secret": "",
+		"url_code": "",
+		"url_token": "",
+		"url_user_info": "",
+		"url_check_token": "",
+		"url_refresh_token": ""
+	},
+	"github": {
+		"client_id": "",
+		"client_secret": "",
+		"url_code": "",
+		"url_token": "",
+		"url_user_info": "",
+		"url_check_token": "",
+		"url_refresh_token": ""
+	},
+	"gitee": {
+		"client_id": "",
+		"client_secret": "",
+		"url_code": "",
+		"url_token": "",
+		"url_user_info": "",
+		"url_check_token": "",
+		"url_refresh_token": ""
+	}
+}