mm_os 2.8.9 → 2.9.1

package/demo/app/user/plugin/main/api_user_client/oauth/oauth.js

@@ -0,0 +1,315 @@
+const WXBizDataCrypt = require('./WXBizDataCrypt');
+const cg = require('./oauth.json');
+
+/**
+ * Oauth授权类
+ */
+class Oauth {
+	/**
+	 * 配置参数
+	 * @param {Object} config
+	 */
+	constructor(config) {
+		this.config = Object.assign({}, cg, config);
+	}
+}
+
+/**
+ * 构建配置模型
+ * @param {Object} config
+ * @return {Object} 返回配置
+ */
+Oauth.prototype.model = function(config) {
+	config.dict = Object.assign({
+		"code": "code",
+		"scope": "scope",
+		"client_id": "client_id",
+		"client_secret": "client_secret",
+		"openid": "openid",
+		"access_token": "access_token",
+		"refresh_token": "refresh_token",
+		"redirect_uri": "redirect_uri",
+		"state": "state"
+	}, config.dict);
+
+	return config;
+}
+
+/**
+ * 授权链接
+ */
+Oauth.prototype.connect = async function(db, ctx, config) {
+	console.log('connect');
+	return $.ret.body = {
+		url: config.url_code
+	}
+};
+
+/**
+ * 回调链接
+ */
+Oauth.prototype.callback = async function(db, ctx, config) {
+	console.log(req);
+};
+
+/**
+ * 绑定链接
+ */
+Oauth.prototype.bind = async function(db, ctx, config) {
+	var req = ctx.request;
+	var body = req.body;
+	var {
+		openid,
+		encryptedData,
+		iv,
+		appid,
+		session_key,
+		nickName,
+		city,
+		province,
+		country,
+		avatarUrl
+	} = body;
+
+	var pc = new WXBizDataCrypt(appid, session_key);
+	var data = pc.decryptData(encryptedData, iv);
+	if (!data) {
+		return $.ret.error(10000, "授权验证失败！");
+	}
+	var phone = data.phoneNumber;
+	if (!phone) {
+		return $.ret.error(70001, "未授权登录！");
+	}
+	var db1 = db.new("user_account", "user_id");
+	var user = await db1.getObj({
+		phone
+	});
+	if (!user) {
+		var len = phone.length;
+		var p = phone.substring(len - 6, len).md5();
+		var salt = p.substring(0, 6);
+		var password = (p + salt).md5();
+		var username = phone;
+		var invite_code = (username + password).md5().substring(0, 6);
+
+		await db1.add({
+			username,
+			salt,
+			password,
+			phone,
+			invite_code,
+			wallet_address: phone
+		});
+		// console.log("注册账户", db1.error);
+		user = await db1.getObj({
+			phone
+		});
+		if (!user) {
+			return $.ret.error(10000, "创建用户失败！");
+		}
+	}
+
+	user.nickname = nickName;
+	user.avatar = avatarUrl;
+
+	var db2 = db.new("user_info", "user_id");
+
+	var user_id = user.user_id;
+	var info = await db2.getObj({
+		user_id
+	});
+	if (!info) {
+		await db2.add({
+			user_id,
+			city,
+			country,
+			province
+		});
+		info = await db2.getObj({
+			user_id
+		});
+	}
+
+	var u = Object.assign({}, user);
+	delete u.password;
+	delete u.salt;
+	delete u.time_create;
+	ctx.session.user = user;
+	var ip = ctx.ip.replace('::ffff:', '');
+	// var user = Object.assign({}, u);
+	// 自动生成的uuid是通过IP和浏览器信息加密而成，如果需要解密确认其身份，可再加上user_id加密，自行生成uuid
+	var ret = $.ret.body({
+		token: ctx.session.uuid,
+		user,
+		ip
+	});
+	var userInfo = {
+		nickName,
+		city,
+		province,
+		country,
+		avatarUrl
+	};
+	var params = {
+		openid: openid,
+		info: JSON.stringify(userInfo)
+	};
+	await $.bind_account(db, params, user);
+	// $.log.debug('入场', body);
+	return ret
+};
+
+/**
+ * 解绑链接
+ */
+Oauth.prototype.unbind = async function(db, ctx, config) {
+
+};
+
+/**
+ * 1.通过code换取token
+ * @param {Object} req 查询参数
+ * @param {Object} db
+ * @param {Object} config
+ */
+Oauth.prototype.code_to_token = async function(db, ctx, config) {
+	var ret;
+	var req = ctx.request;
+	// req里面需传code和appid两个参数
+	var d = config.dict;
+	var query = req.query;
+	var code = query[d.code];
+	var appid = query[d.client_id];
+	db.table = config.name.replace("_mini", "") + "_app";
+	var qy = {};
+	qy[d.client_id] = appid;
+
+	var obj = await db.getObj(qy);
+	if (!obj) {
+		var conf = await $.config.conf();
+		if (conf.wechat_mini_appid === appid) {
+			obj = {
+				encrypt: conf.wechat_mini_encrypt,
+				appid: conf.wechat_mini_appid,
+				token: conf.wechat_mini_token,
+				encoding_aes_key: conf.wechat_mini_encoding_aes_key,
+				appsecret: conf.wechat_mini_appsecret,
+				type: "小程序"
+			};
+		} else {
+			return $.ret.error(60000, d.client_id + ":" + appid + "不存在!");
+		}
+	}
+	var url = config.url_token.replace("{client_id}", appid).replace("{code}", code).replace("{client_secret}",
+		obj[d.client_secret]);
+	var http = new $.Http();
+	var html = await http.get(url);
+	if (html.body) {
+		var json = html.body.toJson();
+		if (json.errcode && json.errmsg) {
+			return $.ret.error(30000, json.errmsg)
+		}
+		var openid = json[d.openid];
+		if (openid) {
+			if (obj.type == "小程序") {
+				db.table = "wechat_info";
+				var user_info = await db.getObj({
+					openid
+				});
+				if (user_info) {
+					var user_id = user_info.user_id;
+					db.table = "user_account";
+					var user = await db.getObj({
+						user_id
+					});
+					if (!user) {
+						return $.ret.body(json);
+					}
+					user.openid = openid;
+					var token = ctx.session.uuid;
+					user.token = token;
+					ctx.session.user = user;
+					
+					db.table = "user_state";
+					var state = await db.getObj({
+						user_id
+					});
+					
+					if (state) {
+						await db.set({
+							user_id
+						}, {
+							token,
+							times: state.times + 1
+						});
+					} else {
+						await db.add({
+							user_id,
+							token,
+							times: 1
+						});
+					}
+					return $.ret.body(user);
+				} else {
+					var bl = await db.add({
+						openid,
+						user_id: 0
+					});
+					return $.ret.body(json);
+				}
+			} else {
+				url = config.url_user_info.replace("{access_token}", json[d.access_token]).replace("{openid}",
+					openid);
+				html = await http.get(url);
+				if (html.body) {
+					var users = html.body.toJson();
+					db.table = "wechat_info";
+					db.key = "info_id";
+					qy = {};
+					qy["openid"] = openid;
+					user = await db.getObj(qy);
+					if (!user) {
+						var body = {};
+						body["openid"] = openid;
+						await db.add(body);
+						user = await db.getObj(qy);
+					}
+					if (user) {
+						user[d.access_token] = json[d.access_token];
+						user[d.refresh_token] = json[d.refresh_token];
+						user.info = JSON.stringify(users);
+						body = Object.assign({}, user, json, users);
+						delete body.info;
+						ret = $.ret.body(body);
+					}
+				}
+			}
+		}
+	}
+	return ret;
+};
+
+/**
+ * 运行
+ */
+Oauth.prototype.run = async function(db, ctx) {
+	var req = ctx.request;
+	var path = req.path;
+	var dict = this.config;
+	var ret = {};
+	for (var k in dict) {
+		var p = "/api/user/oauth/" + k + "/";
+		if (path.indexOf(p) === 0) {
+			var fun_name = path.replace(p, '');
+			if (this[fun_name]) {
+				// console.log("有此路径", fun_name);
+				dict[k].name = k;
+				ret = await this[fun_name](db, ctx, this.model(dict[k]));
+				break;
+			}
+		}
+	}
+	return ret;
+};
+
+module.exports = Oauth;

package/demo/app/user/plugin/main/api_user_client/oauth/oauth.json

@@ -0,0 +1,88 @@
+{
+	"wechat": {
+		"client_id": "",
+		"client_secret": "",
+		"token": "",
+		"scope": "snsapi_userinfo",
+		"url_code": "https://open.weixin.qq.com/connect/oauth2/authorize?appid={client_id}&redirect_uri={redirect_uri}&response_type=code&scope={scope}&state={state}#wechat_redirect",
+		"url_token": "https://api.weixin.qq.com/sns/oauth2/access_token?appid={client_id}&secret={client_secret}&code={code}&grant_type=authorization_code",
+		"url_user_info": "https://api.weixin.qq.com/sns/userinfo?access_token={access_token}&openid={openid}&lang=zh_CN",
+		"url_check_token": "https://api.weixin.qq.com/sns/auth?access_token={access_token}&openid={openid}",
+		"url_refresh_token": "https://api.weixin.qq.com/sns/oauth2/refresh_token?appid={client_id}&grant_type=refresh_token&refresh_token={refresh_token}",
+		"dict": {
+			"client_id": "appid",
+			"client_secret": "secret",
+			"openid": "openid"
+		}
+	},
+	"wechat_mini": {
+		"client_id": "wx9af97e2bea3bc126",
+		"client_secret": "",
+		"token": "",
+		"scope": "snsapi_userinfo",
+		"url_code": "https://open.weixin.qq.com/connect/oauth2/authorize?appid={client_id}&redirect_uri={redirect_uri}&response_type=code&scope={scope}&state={state}#wechat_redirect",
+		"url_token": "https://api.weixin.qq.com/sns/jscode2session?appid={client_id}&secret={client_secret}&js_code={code}&grant_type=authorization_code",
+		"url_user_info": "https://api.weixin.qq.com/sns/userinfo?access_token={access_token}&openid={openid}&lang=zh_CN",
+		"url_check_token": "https://api.weixin.qq.com/sns/auth?access_token={access_token}&openid={openid}",
+		"url_refresh_token": "https://api.weixin.qq.com/sns/oauth2/refresh_token?appid={client_id}&grant_type=refresh_token&refresh_token={refresh_token}",
+		"dict": {
+			"client_id": "appid",
+			"client_secret": "appsecret",
+			"openid": "openid"
+		}
+	},
+	"qq": {
+		"client_id": "",
+		"client_secret": "",
+		"scope": "get_user_info",
+		"url_code": "https://graph.qq.com/oauth2.0/authorize?grant_type=code&client_id={client_id}&redirect_uri={redirect_uri}&state={state}&scope={scope}&display=mobile",
+		"url_token": "https://graph.qq.com/oauth2.0/token?grant_type=authorization_code&client_id={client_id}&client_secret={client_secret}",
+		"url_user_info": "https://graph.qq.com/user/get_user_info?access_token={access_token}&oauth_consumer_key={client_id}&openid={openid}",
+		"url_check_token": "https://graph.qq.com/user/get_user_info?access_token{access_token}&oauth_consumer_key={client_id}&openid={openid}&format=json",
+		"url_refresh_token": "https://graph.qq.com/oauth2.0/token?grant_type=refresh_token&client_id={client_id}&client_secret={client_secret}&refresh_token={refresh_token}",
+		"dict": {
+			"openid": "openid",
+			"access_token": "client_secret"
+		}
+	},
+	"taobao": {
+		"client_id": "",
+		"client_secret": "",
+		"url_code": "https://oauth.taobao.com/authorize?response_type=code&client_id={client_id}&redirect_uri={redirect_uri}&state={state}&view=web",
+		"url_token": "https://oauth.taobao.com/token?grant_type=authorization_code&client_id={client_id}&client_secret={client_secret}&client_secret={client_secret}&code={code}&redirect_uri={redirect_uri}",
+		"url_user_info": "",
+		"url_check_token": "",
+		"url_refresh_token": "",
+		"dict": {
+			"expires_in": "expires_in",
+			"openid": "taobao_user_id"
+		}
+	},
+	"sina": {
+		"client_id": "",
+		"client_secret": "",
+		"url_code": "",
+		"url_token": "",
+		"url_user_info": "",
+		"url_check_token": "",
+		"url_refresh_token": ""
+	},
+	"github": {
+		"client_id": "",
+		"client_secret": "",
+		"url_code": "",
+		"url_token": "",
+		"url_user_info": "",
+		"url_check_token": "",
+		"url_refresh_token": ""
+	},
+	"gitee": {
+		"client_id": "",
+		"client_secret": "",
+		"url_code": "",
+		"url_token": "",
+		"url_user_info": "",
+		"url_check_token": "",
+		"url_refresh_token": ""
+	}
+}

package/demo/app/user/plugin/main/api_user_client/oauth/param.json

@@ -0,0 +1,111 @@
+{
+	// 是否启用过滤, 启用过滤后, 不符合的参数会被过滤掉
+	"filter": true,
+	// 校验脚本文件, 可以使用脚本的方式加一步进行校验, 让传参更加安全
+	"func_file": "",
+	// get请求
+	"get": {
+		// 查询参数校验项
+		"query": ["client_id", "client_secret", "redirect_uri", "scope", "state", "code", "access_token",
+			"refresh_token", "openid"
+		],
+		// 查询必填参数
+		"query_required": []
+	},
+	// post请求
+	"post": {
+		// 查询参数校验项
+		"query": [],
+		// 查询必填参数
+		"query_required": [],
+		// 正文参数校验项
+		"body": ["client_id", "client_secret", "redirect_uri", "scope", "state", "code", "access_token",
+			"refresh_token", "openid"
+		],
+		// 正文必填参数
+		"body_required": []
+	},
+	// 校验列表
+	"list": [{
+		// 参数key名
+		"name": "client_id",
+		// 参数中文名
+		"title": "应用ID",
+		// 描述
+		"desction": "填写第三方的AppID",
+		// 数据类型
+		"type": "string"
+	}, {
+		// 参数key名
+		"name": "redirect_uri",
+		// 参数中文名
+		"title": "回调URL",
+		// 描述
+		"desction": "用于校验、登录成功后的回调跳转地址",
+		// 数据类型
+		"type": "string"
+	}, {
+		// 参数key名
+		"name": "scope",
+		// 参数中文名
+		"title": "授权域",
+		// 描述
+		"desction": "从第三方申请的，用户允许的授权功能范围",
+		// 数据类型
+		"type": "string"
+	}, {
+		// 参数key名
+		"name": "state",
+		// 参数中文名
+		"title": "回调状态",
+		// 描述
+		"desction": "用来校验识别是否非法操作",
+		// 数据类型
+		"type": "string"
+	}, {
+		// 参数key名
+		"name": "client_secret",
+		// 参数中文名
+		"title": "应用secret",
+		// 描述
+		"desction": "应用密钥，用来获取临时访问牌token",
+		// 数据类型
+		"type": "string"
+	}, {
+		// 参数key名
+		"name": "code",
+		// 参数中文名
+		"title": "授权访问码",
+		// 描述
+		"desction": "临时授权，用来换取临时访问牌token",
+		// 数据类型
+		"type": "string"
+	}, {
+		// 参数key名
+		"name": "access_token",
+		// 参数中文名
+		"title": "访问牌token",
+		// 描述
+		"desction": "临时访问牌，用来获取用户信息等",
+		// 数据类型
+		"type": "string"
+	}, {
+		// 参数key名
+		"name": "refresh_token",
+		// 参数中文名
+		"title": "刷新访问牌token",
+		// 描述
+		"desction": "用来刷新临时访问牌，重新获取token",
+		// 数据类型
+		"type": "string"
+	}, {
+		// 参数key名
+		"name": "openid",
+		// 参数中文名
+		"title": "用户开放ID",
+		// 描述
+		"desction": "用来识别获取用户信息",
+		// 数据类型
+		"type": "string"
+	}]
+}

package/demo/app/user/plugin/main/api_user_client/password/api.json

@@ -0,0 +1,21 @@
+{
+	// 路由路径
+	"path": "/api/user/password",
+	// 名称, 用于动态增删改API配置
+	"name": "user_password",
+	// 标题, 用于开发文档显示
+	"title": "修改密码",
+	// 描述, 用于介绍该路由的作用
+	"description": "描述接口使用方法",
+	// 函数文件, 用于驱动脚本, 实现业务 
+	"func_file": "./index.js",
+	// 请求方法, 选填 GET, POST, ALL。 ALL指同时支持GET/POST
+	"method": "POST",
+	// 开放域, 如果域未开放, 则只有特定的协议头才能访问该API, 同时API文档不接见
+	"scope": true,
+	/* 授权协议 */
+	"oauth": {
+		// 是否需要登录, true表示需要登录才能访问该接口
+		"signIn": true
+	}
+}

package/demo/app/user/plugin/main/api_user_client/password/index.js

@@ -0,0 +1,64 @@
+/**
+ * @description 接口主函数
+ * @param {Object} ctx HTTP上下文
+ * @param {Object} db 数据管理器,如: { next: async function{}, ret: {} }
+ * @return {Object} 执行结果
+ */
+async function main(ctx, db) {
+	// 获取请求参数
+	var req = ctx.request;
+	var {
+		query,
+		body
+	} = req;
+	var user = ctx.session.user;
+	if (!user) {
+		var token = ctx.headers[$.dict.token];
+		if (token) {
+			user = await $.cache.get($.dict.session_id + '_' + token);
+		}
+		if (!user) {
+			return $.ret.error(10001, '账户未登录！');
+		}
+	}
+	var {
+		password_old,
+		password,
+		confirm_password,
+		ticket
+	} = body;
+
+	var db1 = db.new("user_account", "user_id");
+	var obj = await db1.getObj({
+		username: user.username
+	});
+	if (!obj) {
+		return $.ret.error(10001, '账户不存在！');
+	}
+	if (ticket) {
+		if (ticket !== user.token.md5()) {
+			return $.ret.error(10002, '身份验证失败，无法修改密码！');
+		}
+	} else {
+		var pass = (password_old + user.salt).md5();
+		if (pass !== obj.password) {
+			return $.ret.error(10002, '原密码输入错误！');
+		}
+	}
+	var password = (password + user.salt).md5();
+	var user_id = user.user_id;
+	var bl = await db1.set({
+		user_id
+	}, {
+		password
+	});
+
+	if (bl > 0) {
+		user.password = password;
+		ctx.session.user = user;
+		return $.ret.bl(true, "密码修改成功！");
+	}
+	return $.ret.bl(false, "密码修改失败！");
+};
+
+exports.main = main;

package/demo/app/user/plugin/main/api_user_client/password/param.json

@@ -0,0 +1,45 @@
+{
+	// 是否启用过滤, 启用过滤后, 不符合的参数会被过滤掉
+	"filter": true,
+	// get请求
+	"get": {
+		// 正文必填参数
+		"query_required": ["password_old", "password", "confirm_password"]
+	},
+	// post请求
+	"post": {
+		// 正文必填参数
+		"body_required": ["password_old", "password", "confirm_password"]
+	},
+	// 校验列表
+	"list": [
+		{
+			"name": "password",
+			"title": "密码",
+			"type": "string",
+			"string": {
+				"format": "password",
+				"different": "username",
+				"min": 6
+			}
+		},
+		{
+			"name": "confirm_password",
+			"title": "确认密码",
+			"type": "string",
+			"string": {
+				"format": "password",
+				"identical": "password"
+			}
+		},
+		{
+			"name": "password_old",
+			"title": "旧密码",
+			"type": "string",
+			"string": {
+				"format": "password",
+				"different": "password"
+			}
+		}
+	]
+}