mm_os 2.8.1 → 2.8.3

package/demo/app/user/plugin/main/api_user_client/forgot/api.json

@@ -1,37 +0,0 @@
-{
-	// 路由路径
-	"path": "/api/user/forgot",
-	// 名称, 用于动态增删改API配置
-	"name": "user_forgot",
-	// 标题, 用于开发文档显示
-	"title": "找回密码",
-	// 描述, 用于介绍该路由的作用
-	"description": "用于用户忘记密码时重置密码",
-	// 函数文件, 用于驱动脚本, 实现业务 
-	"func_file": "./index.js",
-	// 请求方法, 选填 GET, POST, ALL。 ALL指同时支持GET/POST
-	"method": "ALL",
-	// 开放域, 如果域未开放, 则只有特定的协议头才能访问该API, 同时API文档不接见
-	"scope": true,
-	// 缓存时长, 单位: 分钟。使用缓存后, 二次访问API直接从缓存读取, 不重复执行业务脚本
-	"cache": 0,
-	// 是否客户端缓存, 使用客户端则不再访问服务器, 直接从浏览器中拿; 使用服务端缓存则会访问服务器   
-	"client_cache": false,
-	// 参数配置路径, 用于校验API请求参数是否正确, 同时显示在API文档中 
-	"param_path": "./param.json",
-	/* 授权协议 */
-	"oauth": {
-		// 是否需要登录, true表示需要登录才能访问该接口
-		"signIn": false,
-		// 会员权限级别, 如果小于该值, 则无法访问, 0为不限制
-		"vip": 0,
-		// 管理员权限级别, 如果小于该值, 则无法访问, 0为不限制
-		"gm": 0,
-		// 商户/第三方权限级别, 如果小于该值, 则无法访问, 0为不限制
-		"mc": 0,
-		// 用户组, 允许访问该接口的普通用户群体, 传ID数组，例如: [1,5]
-		"user_group": [],
-		// 管理组, 允许访问该接口的管理员群体, 传ID数组，例如: [1,5]
-		"user_admin": []
-	}
-}

package/demo/app/user/plugin/main/api_user_client/forgot/index - /345/211/257/346/234/254.jsbat"

@@ -1,41 +0,0 @@
-/**
- * 接口主函数
- * @param {Object} ctx HTTP上下文
- * @param {Object} db 数据管理器,如: { next: async function{}, ret: {} }
- * @return {Object} 执行结果
- */
-async function main(ctx, db) {
-	// 获取请求参数
-	var req = ctx.request;
-	var {
-		query,
-		body
-	} = req;
-
-	var params = Object.assign({}, query, body);
-	var {
-		username,
-		password,
-		wallet_address,
-		signature
-	} = params;
-
-
-	db.table = "user_account";
-	db.key = "user_id";
-	var user = await db.getObj({
-		username
-	});
-	
-	if (!user) {
-		return $.ret.error(10000, "用户不存在");
-	} 
-	var address = $.ct.MetaMaskRecover(username.md5(), signature);
-	if(user.wallet_address.toLocaleLowerCase() !== address.toLocaleLowerCase()) {
-		return $.ret.error(30000, "连接的钱包地址与账户绑定的不一致");
-	}
-	user.password = (password + user.salt).md5();
-	return $.ret.bl(true, '密码重置成功！');
-};
-
-exports.main = main;

package/demo/app/user/plugin/main/api_user_client/forgot/index.js

@@ -1,36 +0,0 @@
-/**
- * 接口主函数
- * @param {Object} ctx HTTP上下文
- * @param {Object} db 数据管理器,如: { next: async function{}, ret: {} }
- * @return {Object} 执行结果
- */
-async function main(ctx, db) {
-	// 获取请求参数
-	var req = ctx.request;
-	var {
-		query,
-		body
-	} = req;
-
-	var params = Object.assign({}, query, body);
-	var {
-		account,
-		password,
-		code
-	} = params;
-	var phone = account;
-	
-	db.table = "user_account";
-	db.key = "user_id";
-	var user = await db.getObj({
-		phone
-	});
-	
-	if (!user) {
-		return $.ret.error(10000, "用户不存在");
-	} 
-	user.password = (password + user.salt).md5();
-	return $.ret.bl(true, '密码重置成功！');
-};
-
-exports.main = main;

package/demo/app/user/plugin/main/api_user_client/forgot/param.json

@@ -1,56 +0,0 @@
-{
-	// 是否启用过滤, 启用过滤后, 不符合的参数会被过滤掉
-	"filter": true,
-	// get请求
-	"get": {
-		// 正文必填参数
-		"query_required": ["account", "password", "confirm_password"]
-	},
-	// post请求
-	"post": {
-		// 正文必填参数
-		"body_required": ["account", "password", "confirm_password"]
-	},
-	// 校验列表
-	"list": [{
-			"name": "username",
-			"title": "用户名",
-			"type": "string",
-			"string": {
-				"format": "username"
-			}
-		},
-		{
-			"name": "password",
-			"title": "密码",
-			"type": "string",
-			"string": {
-				"format": "password",
-				"different": "username"
-			}
-		},
-		{
-			"name": "confirm_password",
-			"title": "确认密码",
-			"type": "string",
-			"string": {
-				"format": "password",
-				"identical": "password"
-			}
-		},
-		{
-			"name": "wallet_address",
-			"title": "钱包地址",
-			"type": "string",
-			"string": {
-				"min": 42,
-				"max": 42
-			}
-		},
-		{
-			"name": "signature",
-			"title": "签名",
-			"type": "string"
-		}
-	]
-}

package/demo/app/user/plugin/main/api_user_client/oauth/WXBizDataCrypt.js

@@ -1,33 +0,0 @@
-var crypto = require('crypto')
-
-function WXBizDataCrypt(appId, sessionKey) {
-  this.appId = appId
-  this.sessionKey = sessionKey
-}
-
-WXBizDataCrypt.prototype.decryptData = function (encryptedData, iv) {
-  // base64 decode
-  var sessionKey = Buffer.from(this.sessionKey, 'base64')
-  encryptedData = Buffer.from(encryptedData, 'base64')
-  iv = Buffer.from(iv, 'base64')
-
-  try {
-     // 解密
-    var decipher = crypto.createDecipheriv('aes-128-cbc', sessionKey, iv)
-    // 设置自动 padding 为 true，删除填充补位
-    decipher.setAutoPadding(true)
-    var decoded = decipher.update(encryptedData, 'binary', 'utf8')
-    decoded += decipher.final('utf8')
-    decoded = JSON.parse(decoded)
-  } catch (err) {
-    throw new Error('Illegal Buffer')
-  }
-
-  if (decoded.watermark.appid !== this.appId) {
-    throw new Error('Illegal Buffer')
-  }
-
-  return decoded
-}
-
-module.exports = WXBizDataCrypt

package/demo/app/user/plugin/main/api_user_client/oauth/api.json

@@ -1,31 +0,0 @@
-{
-	// 路由路径
-	"path": "/api/user/oauth*",
-	// 名称, 用于动态增删改API配置
-	"name": "user_oauth",
-	// 标题, 用于开发文档显示
-	"title": "第三方登录",
-	// 描述, 用于介绍该路由的作用
-	"description": "通过微信、淘宝、新浪等登录应用",
-	// 函数文件, 用于驱动脚本, 实现业务 
-	"func_file": "./index.js",
-	// 请求方法, 选填 GET, POST, ALL。 ALL指同时支持GET/POST
-	"method": "ALL",
-	// 参数配置路径, 用于校验API请求参数是否正确, 同时显示在API文档中 
-	"param_path": "./param.json",
-	/* 授权协议 */
-	"oauth": {
-		// 是否需要登录, true表示需要登录才能访问该接口
-		"signIn": false,
-		// 会员权限级别, 如果小于该值, 则无法访问, 0为不限制
-		"vip": 0,
-		// 管理员权限级别, 如果小于该值, 则无法访问, 0为不限制
-		"gm": 0,
-		// 商户/第三方权限级别, 如果小于该值, 则无法访问, 0为不限制
-		"mc": 0,
-		// 用户组, 允许访问该接口的普通用户群体, 传ID数组，例如: [1,5]
-		"user_group": [],
-		// 管理组, 允许访问该接口的管理员群体, 传ID数组，例如: [1,5]
-		"user_admin": []
-	}
-}

package/demo/app/user/plugin/main/api_user_client/oauth/index.js

@@ -1,16 +0,0 @@
-const Oauth = require("./oauth.js");
-
-var oauth = new Oauth();
-
-/**
- * 接口主函数
- * @param {Object} ctx HTTP上下文
- * @param {Object} db 数据管理器,如: { next: async function{}, ret: {} }
- * @return {Object} 执行结果
- */
-async function main(ctx, db) {
-	// 获取请求参数
-	return oauth.run(db, ctx);
-};
-
-exports.main = main;

package/demo/app/user/plugin/main/api_user_client/oauth/oauth.js

@@ -1,270 +0,0 @@
-const WXBizDataCrypt = require('./WXBizDataCrypt');
-const cg = require('./oauth.json');
-
-/**
- * Oauth授权类
- */
-class Oauth {
-	/**
-	 * 配置参数
-	 * @param {Object} config
-	 */
-	constructor(config) {
-		this.config = Object.assign({}, cg, config);
-	}
-}
-
-/**
- * 构建配置模型
- * @param {Object} config
- * @return {Object} 返回配置
- */
-Oauth.prototype.model = function(config) {
-	config.dict = Object.assign({
-		"code": "code",
-		"scope": "scope",
-		"client_id": "client_id",
-		"client_secret": "client_secret",
-		"open_id": "open_id",
-		"access_token": "access_token",
-		"refresh_token": "refresh_token",
-		"redirect_uri": "redirect_uri",
-		"state": "state"
-	}, config.dict);
-
-	return config;
-}
-
-/**
- * 授权链接
- */
-Oauth.prototype.connect = async function(db, ctx, config) {
-	console.log('connect');
-	return $.ret.body = {
-		url: config.url_code
-	}
-};
-
-/**
- * 回调链接
- */
-Oauth.prototype.callback = async function(db, ctx, config) {
-	console.log(req);
-};
-
-/**
- * 绑定链接
- */
-Oauth.prototype.bind = async function(db, ctx, config) {
-	var req = ctx.request;
-	var body = req.body;
-	var {
-		openid,
-		encryptedData,
-		iv,
-		appid,
-		session_key,
-		nickName,
-		city,
-		province,
-		country,
-		avatarUrl
-	} = body;
-	
-	var pc = new WXBizDataCrypt(appid, session_key);
-	var data = pc.decryptData(encryptedData, iv);
-	if(!data){
-		return $.ret.error(10000, "创建用户失败！");
-	}
-	var phone = data.phoneNumber;
-	var db1 = db.new("user_account", "user_id");
-	var user = await db1.getObj({
-		phone
-	});
-	if (!user) {
-		var len = phone.length;
-		var p = phone.substring(len - 6, len).md5();
-		var salt = p.substring(0, 6);
-		var password = (p + salt).md5();
-		var username = phone;
-		var invite_code = (username + password).md5().substring(0, 6);
-
-		await db1.add({
-			username,
-			salt,
-			password,
-			phone,
-			invite_code,
-			wallet_address: phone
-		});
-		// console.log("注册账户", db1.error);
-		user = await db1.getObj({
-			phone
-		});
-	}
-	if (!user) {
-		return $.ret.error(10000, "创建用户失败！");
-	}
-	user.nickname = nickName;
-	user.avatar = avatarUrl;
-
-	var db2 = db.new("user_info", "user_id");
-
-	var user_id = user.user_id;
-	info = await db2.getObj({
-		user_id
-	});
-	if (!info) {
-		await db2.add({
-			user_id,
-			city,
-			country,
-			province
-		});
-		info = await db2.getObj({
-			user_id
-		});
-	}
-
-	var u = Object.assign({}, user);
-	delete u.password;
-	delete u.salt;
-	delete u.time_create;
-	ctx.session.user = user;
-	var ip = ctx.ip.replace('::ffff:', '');
-	// var user = Object.assign({}, u);
-	// 自动生成的uuid是通过IP和浏览器信息加密而成，如果需要解密确认其身份，可再加上user_id加密，自行生成uuid
-	var ret = $.ret.body({
-		token: ctx.session.uuid,
-		user,
-		ip
-	});
-	var userInfo = {
-		nickName,
-		city,
-		province,
-		country,
-		avatarUrl
-	};
-	var params = {
-		open_id: openid,
-		info: JSON.stringify(userInfo)
-	};
-	$.bind_account(db, params, user);
-	// $.log.debug('入场', body);
-	return ret
-};
-
-/**
- * 解绑链接
- */
-Oauth.prototype.unbind = async function(db, ctx, config) {
-
-};
-
-/**
- * 1.通过code换取token
- * @param {Object} req 查询参数
- * @param {Object} db
- * @param {Object} config
- */
-Oauth.prototype.code_to_token = async function(db, ctx, config) {
-	var ret;
-	var req = ctx.request;
-	// req里面需传code和appid两个参数
-	var d = config.dict;
-	var query = req.query;
-	var code = query[d.code];
-	var appid = query[d.client_id];
-	db.table = config.name.replace("_mini", "") + "_app";
-	// console.log(d.code,code,d.client_id,appid);
-	var qy = {};
-	qy[d.client_id] = appid;
-	var obj = await db.getObj(qy);
-	if (!obj) {
-		return $.ret.error(60000, d.client_id + ":" + appid + "不存在!");
-	}
-	var url = config.url_token.replace("{client_id}", appid).replace("{code}", code).replace("{client_secret}",
-		obj[d.client_secret]);
-	var http = new $.Http();
-	var html = await http.get(url);
-	if (html.body) {
-		var json = html.body.toJson();
-		if (json.errcode && json.errmsg) {
-			return $.ret.error(30000, json.errmsg)
-		}
-		if (json[d.open_id]) {
-			if (obj.type == "小程序") {
-				db.table = "wechat_info";
-				var user_info = await db.getObj({
-					open_id: json[d.open_id]
-				});
-				if (user_info) {
-					var user_id = user_info.user_id;
-					db.table = "user_account";
-					var user = await db.getObj({
-						user_id
-					});
-					user.open_id = json[d.open_id];
-					user.token = ctx.session.uuid;
-					ctx.session.user = user;
-					return $.ret.body(user);
-				} else {
-					return $.ret.body(json);
-				}
-			} else {
-				url = config.url_user_info.replace("{access_token}", json[d.access_token]).replace("{open_id}",
-					json[d.open_id]);
-				html = await http.get(url);
-				if (html.body) {
-					var users = html.body.toJson();
-					db.table = "wechat_info";
-					db.key = "info_id";
-					qy = {};
-					qy["open_id"] = json[d.open_id];
-					user = await db.getObj(qy);
-					if (!user) {
-						var body = {};
-						body["open_id"] = json[d.open_id];
-						await db.add(body);
-						user = await db.getObj(qy);
-					}
-					if (user) {
-						user[d.access_token] = json[d.access_token];
-						user[d.refresh_token] = json[d.refresh_token];
-						user.info = JSON.stringify(users);
-						body = Object.assign({}, user, json, users);
-						delete body.info;
-						ret = $.ret.body(body);
-					}
-				}
-			}
-		}
-	}
-	return ret;
-};
-
-/**
- * 运行
- */
-Oauth.prototype.run = async function(db, ctx) {
-	var req = ctx.request;
-	var path = req.path;
-	var dict = this.config;
-	var ret = {};
-	for (var k in dict) {
-		var p = "/api/user/oauth/" + k + "/";
-		if (path.indexOf(p) === 0) {
-			var fun_name = path.replace(p, '');
-			if (this[fun_name]) {
-				// console.log("有此路径", fun_name);
-				dict[k].name = k;
-				ret = await this[fun_name](db, ctx, this.model(dict[k]));
-				break;
-			}
-		}
-	}
-	return ret;
-};
-
-module.exports = Oauth;

package/demo/app/user/plugin/main/api_user_client/oauth/oauth.json

@@ -1,88 +0,0 @@
-{
-	"wechat": {
-		"client_id": "",
-		"client_secret": "",
-		"token": "",
-		"scope": "snsapi_userinfo",
-		"url_code": "https://open.weixin.qq.com/connect/oauth2/authorize?appid={client_id}&redirect_uri={redirect_uri}&response_type=code&scope={scope}&state={state}#wechat_redirect",
-		"url_token": "https://api.weixin.qq.com/sns/oauth2/access_token?appid={client_id}&secret={client_secret}&code={code}&grant_type=authorization_code",
-		"url_user_info": "https://api.weixin.qq.com/sns/userinfo?access_token={access_token}&openid={open_id}&lang=zh_CN",
-		"url_check_token": "https://api.weixin.qq.com/sns/auth?access_token={access_token}&openid={open_id}",
-		"url_refresh_token": "https://api.weixin.qq.com/sns/oauth2/refresh_token?appid={client_id}&grant_type=refresh_token&refresh_token={refresh_token}",
-		"dict": {
-			"client_id": "appid",
-			"client_secret": "secret",
-			"open_id": "openid"
-		}
-	},
-	"wechat_mini": {
-		"client_id": "wx9af97e2bea3bc126",
-		"client_secret": "",
-		"token": "",
-		"scope": "snsapi_userinfo",
-		"url_code": "https://open.weixin.qq.com/connect/oauth2/authorize?appid={client_id}&redirect_uri={redirect_uri}&response_type=code&scope={scope}&state={state}#wechat_redirect",
-		"url_token": "https://api.weixin.qq.com/sns/jscode2session?appid={client_id}&secret={client_secret}&js_code={code}&grant_type=authorization_code",
-		"url_user_info": "https://api.weixin.qq.com/sns/userinfo?access_token={access_token}&openid={open_id}&lang=zh_CN",
-		"url_check_token": "https://api.weixin.qq.com/sns/auth?access_token={access_token}&openid={open_id}",
-		"url_refresh_token": "https://api.weixin.qq.com/sns/oauth2/refresh_token?appid={client_id}&grant_type=refresh_token&refresh_token={refresh_token}",
-		"dict": {
-			"client_id": "appid",
-			"client_secret": "appsecret",
-			"open_id": "openid"
-		}
-	},
-	"qq": {
-		"client_id": "",
-		"client_secret": "",
-		"scope": "get_user_info",
-		"url_code": "https://graph.qq.com/oauth2.0/authorize?grant_type=code&client_id={client_id}&redirect_uri={redirect_uri}&state={state}&scope={scope}&display=mobile",
-		"url_token": "https://graph.qq.com/oauth2.0/token?grant_type=authorization_code&client_id={client_id}&client_secret={client_secret}",
-		"url_user_info": "https://graph.qq.com/user/get_user_info?access_token={access_token}&oauth_consumer_key={client_id}&openid={open_id}",
-		"url_check_token": "https://graph.qq.com/user/get_user_info?access_token{access_token}&oauth_consumer_key={client_id}&openid={open_id}&format=json",
-		"url_refresh_token": "https://graph.qq.com/oauth2.0/token?grant_type=refresh_token&client_id={client_id}&client_secret={client_secret}&refresh_token={refresh_token}",
-		"dict": {
-			"open_id": "openid",
-			"access_token": "client_secret"
-		}
-	},
-	"taobao": {
-		"client_id": "",
-		"client_secret": "",
-		"url_code": "https://oauth.taobao.com/authorize?response_type=code&client_id={client_id}&redirect_uri={redirect_uri}&state={state}&view=web",
-		"url_token": "https://oauth.taobao.com/token?grant_type=authorization_code&client_id={client_id}&client_secret={client_secret}&client_secret={client_secret}&code={code}&redirect_uri={redirect_uri}",
-		"url_user_info": "",
-		"url_check_token": "",
-		"url_refresh_token": "",
-		"dict": {
-			"expires_in": "expires_in",
-			"open_id": "taobao_user_id"
-		}
-	},
-	"sina": {
-		"client_id": "",
-		"client_secret": "",
-		"url_code": "",
-		"url_token": "",
-		"url_user_info": "",
-		"url_check_token": "",
-		"url_refresh_token": ""
-	},
-	"github": {
-		"client_id": "",
-		"client_secret": "",
-		"url_code": "",
-		"url_token": "",
-		"url_user_info": "",
-		"url_check_token": "",
-		"url_refresh_token": ""
-	},
-	"gitee": {
-		"client_id": "",
-		"client_secret": "",
-		"url_code": "",
-		"url_token": "",
-		"url_user_info": "",
-		"url_check_token": "",
-		"url_refresh_token": ""
-	}
-}