mm_os 2.8.9 → 2.9.1

package/demo/app/user/plugin/main/api_user_client/sign_auto/index.js

@@ -0,0 +1,141 @@
+/**
+ * 接口主函数
+ * @param {Object} ctx HTTP上下文
+ * @param {Object} db 数据管理器,如: { next: async function{}, ret: {} }
+ * @return {Object} 执行结果
+ */
+async function main(ctx, db) {
+	// 获取请求参数
+	var req = ctx.request;
+	var {
+		query,
+		body
+	} = req;
+	var ret;
+	var pm = Object.assign({}, query, body);
+	var {
+		openid,
+		register
+	} = pm;
+	if (!openid) {
+		return $.ret.error(10000, "用户开放ID(oepn_id)不能为空！");
+	}
+	var db1 = db.new("wechat_info", "info_id");
+	var db2 = db.new("user_account", "user_id");
+	var info = await db1.getObj({
+		openid
+	});
+	if (!info) {
+		return $.ret.error(70001, "错误的openid");
+	}
+	var user;
+	var user_id = 0;
+	if (info.user_id) {
+		user_id = info.user_id;
+		user = await db2.getObj({
+			user_id
+		});
+	}
+	if (!user) {
+		if (!register) {
+			return $.ret.error(70002, "用户未注册！");
+		} else {
+			// 没有账号进行注册
+			var username = openid.md5().substring(0, 10);
+			var nickname = '微信用户';
+			var index = await db2.add({
+				username,
+				nickname
+			});
+			if (index > 0) {
+				user = await db2.getObj({
+					username
+				});
+				if (user) {
+					var user_id = user.user_id;
+					db.table = "user_count";
+					await db.add({
+						user_id,
+						coin: 0
+					});
+					db.table = "user_info";
+					await db.add({
+						user_id
+					});
+					db.table = "user_sns";
+					await db.add({
+						user_id
+					});
+				} else {
+					return $.ret.error(10000, '数据库业务逻辑错误。 ' + JSON.stringify(db.error, true));
+				}
+			} else {
+				return $.ret.error(10000, '数据库业务逻辑错误。 ' + JSON.stringify(db.error, true));
+			}
+		}
+	}
+	//进行登录
+	ctx.session.user = user;
+	var token = ctx.session.uuid;
+	var login_period = await $.config.get('login_period') || 7200;
+	// 7200为2小时
+	$.cache.set("ofName_" + user.nickname, token, login_period);
+	$.cache.set("ofToken_" + token, user.nickname, login_period);
+	$.cache.set($.dict.session_id + "_" + token, user, login_period);
+
+	var obj = await db1.getObj({
+		user_id: user.user_id
+	});
+	if (obj) {
+		await db1.set({
+			user_id: user.user_id
+		}, {
+			openid
+		});
+	} else {
+		var obj = await db1.getObj({
+			openid
+		});
+		if (obj) {
+			await db1.set({
+				openid
+			}, {
+				user_id: user.user_id
+			});
+		} else {
+			await db1.add({
+				user_id: user.user_id,
+				openid
+			});
+		}
+	}
+
+	db.table = "user_state";
+	db.key = "user_id";
+	var state = await db.getObj({
+		user_id
+	});
+
+	if (state) {
+		await db.set({
+			user_id
+		}, {
+			token,
+			times: state.times + 1
+		});
+	} else {
+		await db.add({
+			user_id,
+			token,
+			times: 1
+		});
+	}
+
+	var ret = $.ret.body({
+		token,
+		user
+	});
+	return ret;
+};
+
+exports.main = main;

package/demo/app/user/plugin/main/api_user_client/sign_auto/param.json

@@ -0,0 +1,42 @@
+{
+	// 是否启用过滤, 启用过滤后, 不符合的参数会被过滤掉
+	"filter": true,
+	// 校验脚本文件, 可以使用脚本的方式加一步进行校验, 让传参更加安全
+	"func_file": "",
+	// get请求
+	"get": {
+		// 查询参数校验项
+		"query": [],
+		// 查询必填参数
+		"query_required": []
+	},
+	// post请求
+	"post": {
+		// 查询参数校验项
+		"query": [],
+		// 查询必填参数
+		"query_required": [],
+		// 正文参数校验项
+		"body": ["openid", "mode"],
+		// 正文必填参数
+		"body_required": []
+	},
+	// 校验列表
+	"list": [{
+			// 参数key名
+			"name": "openid",
+			// 参数中文名
+			"title": "用户ID",
+			// 数据类型
+			"type": "string"
+		},
+		{
+			// 参数key名
+			"name": "mode",
+			// 参数中文名
+			"title": "方式",
+			// 数据类型
+			"type": "string"
+		}
+	]
+}

package/demo/app/user/plugin/main/api_user_client/sign_in/api.json

@@ -0,0 +1,11 @@
+{
+	"path": "/api/user/sign_in",
+	"type": "api",
+	"name": "user_sign_in",
+	"title": "账户登录",
+	"cache": 0,
+	"func_file": "./index.js",
+	"method": "ALL",
+	"param_path": "./param.json",
+	"check_param": true
+}

package/demo/app/user/plugin/main/api_user_client/sign_in/index.js

@@ -0,0 +1,274 @@
+/**
+ * 账户缓存
+ */
+$.state_cache = async function(ctx, db, user) {
+	if (!user) {
+		return $.ret.error(10000, '账号不存在');
+	}
+	var login_ip = ctx.ip.replace('::ffff:', '');
+	var user_id = user.user_id;
+	var time = (new Date()).toStr('yyyy-MM-dd hh:mm:ss');
+	// 记录当前登录所用的IP地址
+	await db.set({
+		user_id
+	}, {
+		login_ip,
+		login_time: time
+	});
+
+	ctx.session.user = user;
+	var token = ctx.session.uuid;
+	var login_period = await $.config.get('login_period') || 7200;
+	// 7200为2小时
+	$.cache.set("ofName_" + user.nickname, token, login_period);
+	$.cache.set("ofToken_" + token, user.nickname, login_period);
+	$.cache.set($.dict.session_id + "_" + token, user, login_period);
+
+	db.table = "user_state";
+	db.key = "user_id";
+	var state = await db.getObj({
+		user_id
+	});
+
+	if (state) {
+		await db.set({
+			user_id
+		}, {
+			token,
+			times: state.times + 1
+		});
+	} else {
+		await db.add({
+			user_id,
+			token,
+			times: 1
+		});
+	}
+	user.token = token;
+	var u = Object.assign({}, user);
+	u.password_pay = u.password_pay ? "******" : "";
+	u.password = u.password ? "******" : "";
+	delete u.salt;
+	delete u.time_create;
+
+	// 自动生成的uuid是通过IP和浏览器信息加密而成，如果需要解密确认其身份，可再加上user_id加密，自行生成uuid
+	var body = $.ret.body(user);
+	return body
+}
+
+/**
+ * 账户登录
+ */
+async function account_sign_in(ctx, db, account, password) {
+	// 如果登陆方式为1，则使用第三方社交账号和本站密码进行登录
+	if (!password) {
+		return $.ret.error(30002, "密码(password)不能为空");
+	}
+	db.table = "user_account";
+	db.key = "user_id";
+	// 使用用户名登录
+	var users = await db.getSql(`phone='${account}' || username='${account}' || email='${account}'`);
+	if (users.length <= 0) {
+		return $.ret.error(60001, "用户不存在");
+	}
+	var user = users[0];
+	var pass = (password + user.salt).md5();
+	if (pass !== user.password) {
+		return $.ret.error(30003, "密码(password)错误");
+	}
+	return await $.state_cache(ctx, db, user);
+}
+
+/**
+ * 快捷注册并登录
+ */
+async function fast_sign_in(db, params, user) {
+	var info = params.info;
+	if (info) {
+		var json_info = JSON.parse(info);
+		user.nickname = json_info.nickName;
+		user.avatar = json_info.avatarUrl;
+	}
+	await $.bind_account(db, params, user);
+}
+
+/**
+ * 手机号码登录
+ */
+async function phone_sign_in() {
+	// 使用手机号+验证码登录
+	db.table = "user_account";
+	db.key = "user_id";
+	var code = params['code']
+	var phone = account;
+	if (!code) {
+		return $.ret.error(10000, "验证码(code)不能为空！");
+	}
+	// 短信验证码判断
+	var key = "code_sign_" + phone;
+	var value = await $.cache.get(key);
+	if (!value) {
+		return $.ret.error(10000, '请先发送验证码！');
+	}
+	var json = value.toJson();
+	if (code !== json.code) {
+		return $.ret.error(30000, '验证码不正确！');
+	}
+	var user = await db.getObj({
+		phone
+	});
+	if (!user) {
+		var username = phone;
+		//没有账号，去注册
+		var invite_code = await $.getCode(db, username, password);
+		var index = await db.add({
+			username,
+			phone,
+			invite_code
+		});
+		if (index > 0) {
+			var user = await db.getObj({
+				username
+			});
+			if (user) {
+				var user_id = user.user_id;
+				db.table = "user_count";
+				await db.add({
+					user_id
+				});
+			}
+		}
+	}
+	return await $.state_cache(ctx, db, user);
+}
+
+/**
+ * 社交账号登录
+ */
+async function sns_sign_in() {
+	// 如果登陆方式为1，则使用第三方社交账号和本站密码进行登录
+	if (!password) {
+		return $.ret.error(30002, "密码(password)不能为空");
+	}
+	db.table = "user_sns";
+	var mm = params["mm"];
+	var arr = [];
+	if (mm) {
+		// 使用超级美眉账号登录
+		arr = await db.get({
+			mm
+		});
+	} else {
+		var qq = params["qq"];
+		if (qq) {
+			// 使用QQ账号登录
+			arr = await db.get({
+				qq
+			});
+		} else {
+			var baidu = params["baidu"];
+			if (baidu) {
+				// 使用百度账号登录
+				arr = await db.get({
+					baidu
+				});
+			} else {
+				var taotao = params["taotao"];
+				if (taotao) {
+					// 使用淘宝账号登录
+					arr = await db.get({
+						taotao
+					});
+				} else {
+					var wechat = params["wechat"];
+					if (wechat) {
+						// 使用微信账号登录
+						arr = await db.get({
+							wechat
+						});
+					} else {
+						return $.ret.error(30000, '不支持的SNS账号');
+					}
+				}
+			}
+		}
+	}
+	if (arr.length > 0) {
+		var o = arr[0];
+		db.table = "user_sns";
+		user = await db.getObj({
+			user_id: o.user_id
+		});
+	}
+	return await $.state_cache(ctx, db, user);
+}
+
+/**
+ * 关联创建
+ */
+async function sns_sign_in() {
+
+}
+
+$.bind_account = async function(db, body, user) {
+	var openid = body.openid;
+	var user_id = user.user_id;
+	if (openid) {
+		var way = body.way || "wechat";
+		db.table = way + "_info";
+		var info = await db.getObj({
+			openid
+		});
+		if (info) {
+			var obj = {
+				user_id,
+				openid,
+				info: body.info
+			}
+			await db.set({
+				openid
+			}, obj);
+		} else {
+			await db.add({
+				user_id,
+				openid,
+				info: body.info
+			});
+		}
+		return user;
+	}
+}
+
+/**
+ * @description 接口主函数
+ * @param {Object} ctx HTTP上下文
+ * @param {Object} db 数据管理器,如: { next: async function{}, ret: {} }
+ * @return {Object} 执行结果
+ */
+async function main(ctx, db) {
+	var params = {};
+	if (ctx.method === "POST") {
+		params = ctx.request.body;
+	} else {
+		params = ctx.request.query;
+	}
+	if (ctx.session.user) {
+		ctx.session.user = null;
+	}
+	var password = params['password'];
+	var account = params["account"];
+
+
+	// 获取登录方式
+	var method = params["method"];
+	// $.log.debug('登录方式', method);
+	if (!method) {
+		return await account_sign_in(ctx, db, account, password);
+	} else if (method === 'phone') {
+		return await phone_sign_in(ctx, db, account, password);
+	} else if (method === "sns") {
+		return await sns_sign_in(ctx, db, account, password);
+	}
+};
+
+exports.main = main;

package/demo/app/user/plugin/main/api_user_client/sign_in/param.json

@@ -0,0 +1,125 @@
+{
+	"title": "用户登录验证模型",
+	"name": "user_sign_in",
+	"filter": true,
+	"file": "",
+	"get": {
+		"query": ["account", "qq", "wechat", "mm", "baidu", "taobao", "code"],
+		"query_required": []
+	},
+	"post": {
+		"body": ["account", "qq", "wechat", "mm", "baidu", "taobao", "code"],
+		"body_required": []
+	},
+	"list": [
+		{
+			"name": "phone",
+			"title": "手机号码",
+			"type": "string",
+			// 字符串类型时设置
+			"string": {
+				"format": "phone",
+				// 传值范围，字符串时为限制字符长度
+				"range": [11, 11]
+			}
+		},
+		{
+			"name": "code",
+			"title": "短信验证码",
+			"type": "string"
+		},
+		{
+			"name": "method",
+			"title": "登录方式",
+			"description": "如果为sns则表示使用社交账号登录",
+			"type": "string"
+		}, {
+			"name": "account",
+			"title": "账号",
+			"type": "string",
+			"string": {
+				"min": 5,
+				"max": 16,
+				"format": "username"
+			}
+		},
+		{
+			"name": "password",
+			"title": "密码",
+			"description": "由注册密码进行md5加密后获得",
+			"type": "string",
+			"string": {
+				"min": 32,
+				"max": 32,
+				"format": "password",
+				"different": "username"
+			}
+		},
+		{
+			"name": "qq",
+			"title": "QQ号",
+			"description": "",
+			"type": "string",
+			"dataType": "varchar",
+			"string": {
+				"range": [
+					5,
+					12
+				]
+			}
+		},
+		{
+			"name": "wechat",
+			"title": "微信号",
+			"description": "",
+			"type": "string",
+			"dataType": "varchar",
+			"string": {
+				"range": [
+					5,
+					16
+				]
+			}
+		},
+		{
+			"name": "mm",
+			"title": "MM号",
+			"description": "",
+			"type": "string",
+			"dataType": "varchar",
+			"string": {
+				"range": [
+					5,
+					16
+				]
+			}
+		},
+		{
+			"name": "baidu",
+			"title": "百度账号",
+			"description": "",
+			"type": "string",
+			"dataType": "varchar",
+			"string": {
+				"range": [
+					5,
+					14
+				]
+			}
+		},
+		{
+			"name": "taobao",
+			"title": "淘宝账号",
+			"description": "",
+			"type": "string",
+			"dataType": "varchar",
+			"string": {
+				"range": [
+					5,
+					10
+				]
+			}
+		}
+
+	]
+}

package/demo/app/user/plugin/main/api_user_client/sign_in/state.js

@@ -0,0 +1,37 @@
+/**
+ * @description 接口主函数
+ * @param {Object} ctx HTTP上下文
+ * @param {Object} db 数据管理器,如: { next: async function{}, ret: {} }
+ * @return {Object} 执行结果
+ */
+async function main(ctx, db) {
+	// 获取请求参数
+	if (ctx.session.user) {
+		var user = Object.assign({}, ctx.session.user);
+		// delete user.user_id;
+		return $.ret.body(user);
+	} else {
+		var token = ctx.headers[$.dict.token];
+		if (token) {
+			var u = await $.cache.get($.dict.session_id + '_' + token);
+			if (u) {
+				var type = typeof(u);
+				if (type === "string") {
+					var o = u.toJson();
+					// delete o.user.user_id;
+					return $.ret.body(o.user);
+				} else if (type === "object") {
+					if (Object.keys(u).length > 0) {
+						var o = Object.assign({}, u);
+						// delete o.user.user_id;
+						return $.ret.body(o.user);
+					}
+				}
+			}
+			return $.ret.error(50000, '非法访问');
+		}
+		return $.ret.error(40000, '用户未登录');
+	}
+};
+
+exports.main = main;

package/demo/app/user/plugin/main/api_user_client/sign_out/api.json

@@ -0,0 +1,9 @@
+{
+	"path": "/api/user/sign_out",
+	"type": "api",
+	"name": "user_sign_out",
+	"title": "退出",
+	"cache": 0,
+	"func_file": "./index.js",
+	"method": "ALL"
+}

package/demo/app/user/plugin/main/api_user_client/sign_out/index.js

@@ -0,0 +1,28 @@
+
+/**
+ * @description 接口主函数
+ * @param {Object} ctx HTTP上下文
+ * @param {Object} db 数据管理器,如: { next: async function{}, ret: {} }
+ * @return {Object} 执行结果
+ */
+async function main(ctx, db) {
+	// 获取请求参数
+	if (ctx.session.user) {
+		ctx.session = null;
+		return $.ret.bl(true, "账户已退出");
+	} else {
+		var token = ctx.headers[$.dict.token];
+		if (token) {
+			$.cache.del($.dict.session_id + '_' + token);
+			var nickname = await $.cache.get("ofToken_" + token);
+			$.cache.del("ofName_" + nickname);
+			$.cache.del("ofToken_" + token);
+			return $.ret.bl(true, "账户已退出");
+		} else {
+			return $.ret.bl(false, "账户未登录");
+		}
+	}
+};
+
+exports.main = main;
+

package/demo/app/user/plugin/main/api_user_client/sign_up/api.json

@@ -0,0 +1,12 @@
+{
+	"path": "/api/user/sign_up",
+	"type": "api",
+	"name": "user_sign_up",
+	"title": "账户注册",
+	"description": "用来注册账户",
+	"func_file": "./index.js",
+	"method": "POST",
+	"cache": 0,
+	"client_cache": false,
+	"param_path": "./param.json"
+}