mm_os 2.9.3 → 2.9.5

package/demo/app/user/plugin/main/api_user_client/oauth/oauth.js

@@ -1,315 +0,0 @@
-const WXBizDataCrypt = require('./WXBizDataCrypt');
-const cg = require('./oauth.json');
-
-/**
- * Oauth授权类
- */
-class Oauth {
-	/**
-	 * 配置参数
-	 * @param {Object} config
-	 */
-	constructor(config) {
-		this.config = Object.assign({}, cg, config);
-	}
-}
-
-/**
- * 构建配置模型
- * @param {Object} config
- * @return {Object} 返回配置
- */
-Oauth.prototype.model = function(config) {
-	config.dict = Object.assign({
-		"code": "code",
-		"scope": "scope",
-		"client_id": "client_id",
-		"client_secret": "client_secret",
-		"openid": "openid",
-		"access_token": "access_token",
-		"refresh_token": "refresh_token",
-		"redirect_uri": "redirect_uri",
-		"state": "state"
-	}, config.dict);
-
-	return config;
-}
-
-/**
- * 授权链接
- */
-Oauth.prototype.connect = async function(db, ctx, config) {
-	console.log('connect');
-	return $.ret.body = {
-		url: config.url_code
-	}
-};
-
-/**
- * 回调链接
- */
-Oauth.prototype.callback = async function(db, ctx, config) {
-	console.log(req);
-};
-
-/**
- * 绑定链接
- */
-Oauth.prototype.bind = async function(db, ctx, config) {
-	var req = ctx.request;
-	var body = req.body;
-	var {
-		openid,
-		encryptedData,
-		iv,
-		appid,
-		session_key,
-		nickName,
-		city,
-		province,
-		country,
-		avatarUrl
-	} = body;
-
-	var pc = new WXBizDataCrypt(appid, session_key);
-	var data = pc.decryptData(encryptedData, iv);
-	if (!data) {
-		return $.ret.error(10000, "授权验证失败！");
-	}
-	var phone = data.phoneNumber;
-	if (!phone) {
-		return $.ret.error(70001, "未授权登录！");
-	}
-	var db1 = db.new("user_account", "user_id");
-	var user = await db1.getObj({
-		phone
-	});
-	if (!user) {
-		var len = phone.length;
-		var p = phone.substring(len - 6, len).md5();
-		var salt = p.substring(0, 6);
-		var password = (p + salt).md5();
-		var username = phone;
-		var invite_code = (username + password).md5().substring(0, 6);
-
-		await db1.add({
-			username,
-			salt,
-			password,
-			phone,
-			invite_code,
-			wallet_address: phone
-		});
-		// console.log("注册账户", db1.error);
-		user = await db1.getObj({
-			phone
-		});
-		if (!user) {
-			return $.ret.error(10000, "创建用户失败！");
-		}
-	}
-
-	user.nickname = nickName;
-	user.avatar = avatarUrl;
-
-	var db2 = db.new("user_info", "user_id");
-
-	var user_id = user.user_id;
-	var info = await db2.getObj({
-		user_id
-	});
-	if (!info) {
-		await db2.add({
-			user_id,
-			city,
-			country,
-			province
-		});
-		info = await db2.getObj({
-			user_id
-		});
-	}
-
-	var u = Object.assign({}, user);
-	delete u.password;
-	delete u.salt;
-	delete u.time_create;
-	ctx.session.user = user;
-	var ip = ctx.ip.replace('::ffff:', '');
-	// var user = Object.assign({}, u);
-	// 自动生成的uuid是通过IP和浏览器信息加密而成，如果需要解密确认其身份，可再加上user_id加密，自行生成uuid
-	var ret = $.ret.body({
-		token: ctx.session.uuid,
-		user,
-		ip
-	});
-	var userInfo = {
-		nickName,
-		city,
-		province,
-		country,
-		avatarUrl
-	};
-	var params = {
-		openid: openid,
-		info: JSON.stringify(userInfo)
-	};
-	await $.bind_account(db, params, user);
-	// $.log.debug('入场', body);
-	return ret
-};
-
-/**
- * 解绑链接
- */
-Oauth.prototype.unbind = async function(db, ctx, config) {
-
-};
-
-/**
- * 1.通过code换取token
- * @param {Object} req 查询参数
- * @param {Object} db
- * @param {Object} config
- */
-Oauth.prototype.code_to_token = async function(db, ctx, config) {
-	var ret;
-	var req = ctx.request;
-	// req里面需传code和appid两个参数
-	var d = config.dict;
-	var query = req.query;
-	var code = query[d.code];
-	var appid = query[d.client_id];
-	db.table = config.name.replace("_mini", "") + "_app";
-	var qy = {};
-	qy[d.client_id] = appid;
-
-	var obj = await db.getObj(qy);
-	if (!obj) {
-		var conf = await $.config.conf();
-		if (conf.wechat_mini_appid === appid) {
-			obj = {
-				encrypt: conf.wechat_mini_encrypt,
-				appid: conf.wechat_mini_appid,
-				token: conf.wechat_mini_token,
-				encoding_aes_key: conf.wechat_mini_encoding_aes_key,
-				appsecret: conf.wechat_mini_appsecret,
-				type: "小程序"
-			};
-		} else {
-			return $.ret.error(60000, d.client_id + ":" + appid + "不存在!");
-		}
-	}
-	var url = config.url_token.replace("{client_id}", appid).replace("{code}", code).replace("{client_secret}",
-		obj[d.client_secret]);
-	var http = new $.Http();
-	var html = await http.get(url);
-	if (html.body) {
-		var json = html.body.toJson();
-		if (json.errcode && json.errmsg) {
-			return $.ret.error(30000, json.errmsg)
-		}
-		var openid = json[d.openid];
-		if (openid) {
-			if (obj.type == "小程序") {
-				db.table = "wechat_info";
-				var user_info = await db.getObj({
-					openid
-				});
-				if (user_info) {
-					var user_id = user_info.user_id;
-					db.table = "user_account";
-					var user = await db.getObj({
-						user_id
-					});
-					if (!user) {
-						return $.ret.body(json);
-					}
-					user.openid = openid;
-					var token = ctx.session.uuid;
-					user.token = token;
-					ctx.session.user = user;
-					
-					db.table = "user_state";
-					var state = await db.getObj({
-						user_id
-					});
-					
-					if (state) {
-						await db.set({
-							user_id
-						}, {
-							token,
-							times: state.times + 1
-						});
-					} else {
-						await db.add({
-							user_id,
-							token,
-							times: 1
-						});
-					}
-					return $.ret.body(user);
-				} else {
-					var bl = await db.add({
-						openid,
-						user_id: 0
-					});
-					return $.ret.body(json);
-				}
-			} else {
-				url = config.url_user_info.replace("{access_token}", json[d.access_token]).replace("{openid}",
-					openid);
-				html = await http.get(url);
-				if (html.body) {
-					var users = html.body.toJson();
-					db.table = "wechat_info";
-					db.key = "info_id";
-					qy = {};
-					qy["openid"] = openid;
-					user = await db.getObj(qy);
-					if (!user) {
-						var body = {};
-						body["openid"] = openid;
-						await db.add(body);
-						user = await db.getObj(qy);
-					}
-					if (user) {
-						user[d.access_token] = json[d.access_token];
-						user[d.refresh_token] = json[d.refresh_token];
-						user.info = JSON.stringify(users);
-						body = Object.assign({}, user, json, users);
-						delete body.info;
-						ret = $.ret.body(body);
-					}
-				}
-			}
-		}
-	}
-	return ret;
-};
-
-/**
- * 运行
- */
-Oauth.prototype.run = async function(db, ctx) {
-	var req = ctx.request;
-	var path = req.path;
-	var dict = this.config;
-	var ret = {};
-	for (var k in dict) {
-		var p = "/api/user/oauth/" + k + "/";
-		if (path.indexOf(p) === 0) {
-			var fun_name = path.replace(p, '');
-			if (this[fun_name]) {
-				// console.log("有此路径", fun_name);
-				dict[k].name = k;
-				ret = await this[fun_name](db, ctx, this.model(dict[k]));
-				break;
-			}
-		}
-	}
-	return ret;
-};
-
-module.exports = Oauth;

package/demo/app/user/plugin/main/api_user_client/oauth/oauth.json

@@ -1,88 +0,0 @@
-{
-	"wechat": {
-		"client_id": "",
-		"client_secret": "",
-		"token": "",
-		"scope": "snsapi_userinfo",
-		"url_code": "https://open.weixin.qq.com/connect/oauth2/authorize?appid={client_id}&redirect_uri={redirect_uri}&response_type=code&scope={scope}&state={state}#wechat_redirect",
-		"url_token": "https://api.weixin.qq.com/sns/oauth2/access_token?appid={client_id}&secret={client_secret}&code={code}&grant_type=authorization_code",
-		"url_user_info": "https://api.weixin.qq.com/sns/userinfo?access_token={access_token}&openid={openid}&lang=zh_CN",
-		"url_check_token": "https://api.weixin.qq.com/sns/auth?access_token={access_token}&openid={openid}",
-		"url_refresh_token": "https://api.weixin.qq.com/sns/oauth2/refresh_token?appid={client_id}&grant_type=refresh_token&refresh_token={refresh_token}",
-		"dict": {
-			"client_id": "appid",
-			"client_secret": "secret",
-			"openid": "openid"
-		}
-	},
-	"wechat_mini": {
-		"client_id": "wx9af97e2bea3bc126",
-		"client_secret": "",
-		"token": "",
-		"scope": "snsapi_userinfo",
-		"url_code": "https://open.weixin.qq.com/connect/oauth2/authorize?appid={client_id}&redirect_uri={redirect_uri}&response_type=code&scope={scope}&state={state}#wechat_redirect",
-		"url_token": "https://api.weixin.qq.com/sns/jscode2session?appid={client_id}&secret={client_secret}&js_code={code}&grant_type=authorization_code",
-		"url_user_info": "https://api.weixin.qq.com/sns/userinfo?access_token={access_token}&openid={openid}&lang=zh_CN",
-		"url_check_token": "https://api.weixin.qq.com/sns/auth?access_token={access_token}&openid={openid}",
-		"url_refresh_token": "https://api.weixin.qq.com/sns/oauth2/refresh_token?appid={client_id}&grant_type=refresh_token&refresh_token={refresh_token}",
-		"dict": {
-			"client_id": "appid",
-			"client_secret": "appsecret",
-			"openid": "openid"
-		}
-	},
-	"qq": {
-		"client_id": "",
-		"client_secret": "",
-		"scope": "get_user_info",
-		"url_code": "https://graph.qq.com/oauth2.0/authorize?grant_type=code&client_id={client_id}&redirect_uri={redirect_uri}&state={state}&scope={scope}&display=mobile",
-		"url_token": "https://graph.qq.com/oauth2.0/token?grant_type=authorization_code&client_id={client_id}&client_secret={client_secret}",
-		"url_user_info": "https://graph.qq.com/user/get_user_info?access_token={access_token}&oauth_consumer_key={client_id}&openid={openid}",
-		"url_check_token": "https://graph.qq.com/user/get_user_info?access_token{access_token}&oauth_consumer_key={client_id}&openid={openid}&format=json",
-		"url_refresh_token": "https://graph.qq.com/oauth2.0/token?grant_type=refresh_token&client_id={client_id}&client_secret={client_secret}&refresh_token={refresh_token}",
-		"dict": {
-			"openid": "openid",
-			"access_token": "client_secret"
-		}
-	},
-	"taobao": {
-		"client_id": "",
-		"client_secret": "",
-		"url_code": "https://oauth.taobao.com/authorize?response_type=code&client_id={client_id}&redirect_uri={redirect_uri}&state={state}&view=web",
-		"url_token": "https://oauth.taobao.com/token?grant_type=authorization_code&client_id={client_id}&client_secret={client_secret}&client_secret={client_secret}&code={code}&redirect_uri={redirect_uri}",
-		"url_user_info": "",
-		"url_check_token": "",
-		"url_refresh_token": "",
-		"dict": {
-			"expires_in": "expires_in",
-			"openid": "taobao_user_id"
-		}
-	},
-	"sina": {
-		"client_id": "",
-		"client_secret": "",
-		"url_code": "",
-		"url_token": "",
-		"url_user_info": "",
-		"url_check_token": "",
-		"url_refresh_token": ""
-	},
-	"github": {
-		"client_id": "",
-		"client_secret": "",
-		"url_code": "",
-		"url_token": "",
-		"url_user_info": "",
-		"url_check_token": "",
-		"url_refresh_token": ""
-	},
-	"gitee": {
-		"client_id": "",
-		"client_secret": "",
-		"url_code": "",
-		"url_token": "",
-		"url_user_info": "",
-		"url_check_token": "",
-		"url_refresh_token": ""
-	}
-}

package/demo/app/user/plugin/main/api_user_client/oauth/param.json

@@ -1,111 +0,0 @@
-{
-	// 是否启用过滤, 启用过滤后, 不符合的参数会被过滤掉
-	"filter": true,
-	// 校验脚本文件, 可以使用脚本的方式加一步进行校验, 让传参更加安全
-	"func_file": "",
-	// get请求
-	"get": {
-		// 查询参数校验项
-		"query": ["client_id", "client_secret", "redirect_uri", "scope", "state", "code", "access_token",
-			"refresh_token", "openid"
-		],
-		// 查询必填参数
-		"query_required": []
-	},
-	// post请求
-	"post": {
-		// 查询参数校验项
-		"query": [],
-		// 查询必填参数
-		"query_required": [],
-		// 正文参数校验项
-		"body": ["client_id", "client_secret", "redirect_uri", "scope", "state", "code", "access_token",
-			"refresh_token", "openid"
-		],
-		// 正文必填参数
-		"body_required": []
-	},
-	// 校验列表
-	"list": [{
-		// 参数key名
-		"name": "client_id",
-		// 参数中文名
-		"title": "应用ID",
-		// 描述
-		"desction": "填写第三方的AppID",
-		// 数据类型
-		"type": "string"
-	}, {
-		// 参数key名
-		"name": "redirect_uri",
-		// 参数中文名
-		"title": "回调URL",
-		// 描述
-		"desction": "用于校验、登录成功后的回调跳转地址",
-		// 数据类型
-		"type": "string"
-	}, {
-		// 参数key名
-		"name": "scope",
-		// 参数中文名
-		"title": "授权域",
-		// 描述
-		"desction": "从第三方申请的，用户允许的授权功能范围",
-		// 数据类型
-		"type": "string"
-	}, {
-		// 参数key名
-		"name": "state",
-		// 参数中文名
-		"title": "回调状态",
-		// 描述
-		"desction": "用来校验识别是否非法操作",
-		// 数据类型
-		"type": "string"
-	}, {
-		// 参数key名
-		"name": "client_secret",
-		// 参数中文名
-		"title": "应用secret",
-		// 描述
-		"desction": "应用密钥，用来获取临时访问牌token",
-		// 数据类型
-		"type": "string"
-	}, {
-		// 参数key名
-		"name": "code",
-		// 参数中文名
-		"title": "授权访问码",
-		// 描述
-		"desction": "临时授权，用来换取临时访问牌token",
-		// 数据类型
-		"type": "string"
-	}, {
-		// 参数key名
-		"name": "access_token",
-		// 参数中文名
-		"title": "访问牌token",
-		// 描述
-		"desction": "临时访问牌，用来获取用户信息等",
-		// 数据类型
-		"type": "string"
-	}, {
-		// 参数key名
-		"name": "refresh_token",
-		// 参数中文名
-		"title": "刷新访问牌token",
-		// 描述
-		"desction": "用来刷新临时访问牌，重新获取token",
-		// 数据类型
-		"type": "string"
-	}, {
-		// 参数key名
-		"name": "openid",
-		// 参数中文名
-		"title": "用户开放ID",
-		// 描述
-		"desction": "用来识别获取用户信息",
-		// 数据类型
-		"type": "string"
-	}]
-}

package/demo/app/user/plugin/main/api_user_client/password/api.json

@@ -1,21 +0,0 @@
-{
-	// 路由路径
-	"path": "/api/user/password",
-	// 名称, 用于动态增删改API配置
-	"name": "user_password",
-	// 标题, 用于开发文档显示
-	"title": "修改密码",
-	// 描述, 用于介绍该路由的作用
-	"description": "描述接口使用方法",
-	// 函数文件, 用于驱动脚本, 实现业务 
-	"func_file": "./index.js",
-	// 请求方法, 选填 GET, POST, ALL。 ALL指同时支持GET/POST
-	"method": "POST",
-	// 开放域, 如果域未开放, 则只有特定的协议头才能访问该API, 同时API文档不接见
-	"scope": true,
-	/* 授权协议 */
-	"oauth": {
-		// 是否需要登录, true表示需要登录才能访问该接口
-		"signIn": true
-	}
-}

package/demo/app/user/plugin/main/api_user_client/password/index.js

@@ -1,64 +0,0 @@
-/**
- * @description 接口主函数
- * @param {Object} ctx HTTP上下文
- * @param {Object} db 数据管理器,如: { next: async function{}, ret: {} }
- * @return {Object} 执行结果
- */
-async function main(ctx, db) {
-	// 获取请求参数
-	var req = ctx.request;
-	var {
-		query,
-		body
-	} = req;
-	var user = ctx.session.user;
-	if (!user) {
-		var token = ctx.headers[$.dict.token];
-		if (token) {
-			user = await $.cache.get($.dict.session_id + '_' + token);
-		}
-		if (!user) {
-			return $.ret.error(10001, '账户未登录！');
-		}
-	}
-	var {
-		password_old,
-		password,
-		confirm_password,
-		ticket
-	} = body;
-
-	var db1 = db.new("user_account", "user_id");
-	var obj = await db1.getObj({
-		username: user.username
-	});
-	if (!obj) {
-		return $.ret.error(10001, '账户不存在！');
-	}
-	if (ticket) {
-		if (ticket !== user.token.md5()) {
-			return $.ret.error(10002, '身份验证失败，无法修改密码！');
-		}
-	} else {
-		var pass = (password_old + user.salt).md5();
-		if (pass !== obj.password) {
-			return $.ret.error(10002, '原密码输入错误！');
-		}
-	}
-	var password = (password + user.salt).md5();
-	var user_id = user.user_id;
-	var bl = await db1.set({
-		user_id
-	}, {
-		password
-	});
-
-	if (bl > 0) {
-		user.password = password;
-		ctx.session.user = user;
-		return $.ret.bl(true, "密码修改成功！");
-	}
-	return $.ret.bl(false, "密码修改失败！");
-};
-
-exports.main = main;

package/demo/app/user/plugin/main/api_user_client/password/param.json

@@ -1,45 +0,0 @@
-{
-	// 是否启用过滤, 启用过滤后, 不符合的参数会被过滤掉
-	"filter": true,
-	// get请求
-	"get": {
-		// 正文必填参数
-		"query_required": ["password_old", "password", "confirm_password"]
-	},
-	// post请求
-	"post": {
-		// 正文必填参数
-		"body_required": ["password_old", "password", "confirm_password"]
-	},
-	// 校验列表
-	"list": [
-		{
-			"name": "password",
-			"title": "密码",
-			"type": "string",
-			"string": {
-				"format": "password",
-				"different": "username",
-				"min": 6
-			}
-		},
-		{
-			"name": "confirm_password",
-			"title": "确认密码",
-			"type": "string",
-			"string": {
-				"format": "password",
-				"identical": "password"
-			}
-		},
-		{
-			"name": "password_old",
-			"title": "旧密码",
-			"type": "string",
-			"string": {
-				"format": "password",
-				"different": "password"
-			}
-		}
-	]
-}