mm_power 1.0.1 → 1.0.3

package/lib/tools/index.js

@@ -0,0 +1,16 @@
+'use strict';
+const fs = require('fs');
+const path = require('path');
+/** 模块能力层：懒加载工具实现，避免模块入口被 require 时加载全部实现 */
+module.exports = new Proxy({}, {
+  get(_t, key) {
+    if (typeof key !== 'string') return undefined;
+    if (!fs.existsSync(path.join(__dirname, key, 'index.js'))) return undefined;
+    return require('./' + key);
+  },
+  has(_t, key) {
+    return typeof key === 'string' && fs.existsSync(path.join(__dirname, key, 'index.js'));
+  },
+  ownKeys() { return fs.readdirSync(__dirname, { withFileTypes: true }).filter(e => e.isDirectory()).map(e => e.name); },
+  getOwnPropertyDescriptor(_t, key) { return this.has(_t, key) ? { enumerable: true, configurable: true } : undefined; }
+});

package/lib/tools/power/index.js

@@ -0,0 +1,62 @@
+'use strict';
+/**
+ * power —— RBAC 权限校验工具
+ * 复用模块自身的 Power 实例（os.js 注入配置），只做参数整形，不重写鉴权规则。
+ */
+const { powerAdmin } = require('../../../index.js');
+
+/**
+ * 取作用域内的鉴权实例
+ * @param {string} scope 作用域
+ * @returns {object} Power 实例
+ */
+function _power(scope) {
+  return powerAdmin(scope || 'os');
+}
+
+async function main(params, ctx, options) {
+  void options;
+  const p = params || {};
+  const action = p.action || 'check';
+  const done = (data) => { ctx.output = data; return data; };
+
+  try {
+    const power = _power(p.scope);
+
+    if (action === 'user') {
+      return done({ code: 0, msg: '成功', user: power.getUser(p.user) });
+    }
+
+    if (action === 'admin') {
+      if (!p.admin) throw new TypeError('admin 管理组名称不能为空');
+      const reason = power.checkAdmin(p.user, p.admin);
+      return done({ code: 0, msg: reason || '通过', ok: !reason, reason: reason || '' });
+    }
+
+    if (action === 'field') {
+      const need = p.power || {};
+      const reason = power.checkField(p.user, {
+        vip: Number(need.vip || 0),
+        gm: Number(need.gm || 0),
+        mc: Number(need.mc || 0)
+      });
+      return done({ code: 0, msg: reason || '通过', ok: !reason, reason: reason || '' });
+    }
+
+    if (action === 'check') {
+      const reason = power.check(p.user, p.power || {});
+      return done({ code: 0, msg: reason || '通过', ok: !reason, reason: reason || '' });
+    }
+
+    return done({ code: 10001, msg: '不支持的操作: ' + action, ok: false });
+  } catch (error) {
+    return done({
+      code: 10000,
+      msg: '鉴权执行失败：' + error.message,
+      ok: false,
+      error: { name: error.name, message: error.message }
+    });
+  }
+}
+
+module.exports = { main };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mm_power",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "功能完整的JavaScript鉴权模块，支持RBAC模型和字段权限控制，完全满足gm、vip、mc等用户账户字段鉴权需求",
   "main": "index.js",
   "scripts": {
@@ -12,9 +12,11 @@
     "example-async": "node example_async.js"
   },
   "keywords": [
+    "mm_mod",
+    "mm_crosscut",
+    "mm_authz_policy",
     "鉴权",
     "权限管理",
-    "RBAC",
     "权限控制",
     "用户权限",
     "路由权限",
@@ -27,11 +29,13 @@
     "rbac",
     "access-control"
   ],
+  "layer": "interface",
+  "group": "gateway",
   "author": "MM Modules",
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://gitee.com/mm_modules_ok/mm_power.git"
+    "url": "https://gitee.com/qiuwenwu91/mm_power.git"
   },
   "engines": {
     "node": ">=12.0.0"
@@ -42,11 +46,15 @@
   },
   "dependencies": {
     "eslint-plugin-jsdoc": "^64.0.1",
-    "mm_expand": "^2.5.1"
+    "mm_admin": "^1.1.0",
+    "mm_helper": "^1.0.0",
+    "mm_kv_store": "^1.0.1"
   },
   "files": [
     "index.js",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "tool",
+    "lib"
   ]
 }

package/tool/power/index.js

@@ -0,0 +1,7 @@
+'use strict';
+/**
+ * power —— 工具契约适配层
+ * 业务实现归位于模块 lib/tools/power/，本文件只把模块能力暴露给加载器。
+ * 其它模块可直接 require('mm_power').tools.power 复用。
+ */
+module.exports = require('../../lib/tools/power');

package/tool/power/tool.json

@@ -0,0 +1,76 @@
+{
+  "name": "power",
+  "title": "RBAC 权限校验",
+  "description": "基于 mm_power 的鉴权能力：按用户对象校验管理组、字段等级（gm/vip/mc）与综合权限（路径/方法/角色/用户组）。适用场景：判断某用户能否访问接口、字段等级是否达标、是否属于指定管理组。工作流提示：action 选 check/admin/field/user，check 传 user 与 power，admin 传 user 与 admin，field 传 user 与 power{vip,gm,mc}。",
+  "category": "权限安全",
+  "group": "security",
+  "type": "function",
+  "main": "./index.js",
+  "params": {
+    "type": "object",
+    "properties": {
+      "action": {
+        "type": "string",
+        "description": "操作类型: check(综合权限校验)/admin(管理组校验)/field(字段等级校验)/user(取标准用户对象)",
+        "enum": [
+          "check",
+          "admin",
+          "field",
+          "user"
+        ],
+        "default": "check"
+      },
+      "user": {
+        "type": "object",
+        "description": "用户对象，支持 gm/vip/mc、roles、groups、admins、user_id 等字段"
+      },
+      "admin": {
+        "type": "string",
+        "description": "管理组名称(admin 操作必填)"
+      },
+      "power": {
+        "type": "object",
+        "description": "权限要求：check 传 {path,method,role,group}，field 传 {vip,gm,mc} 等级阈值"
+      },
+      "scope": {
+        "type": "string",
+        "description": "权限实例作用域，缺省 os（与 os.js 注入的实例一致）",
+        "default": "os"
+      }
+    },
+    "required": [
+      "action",
+      "user"
+    ]
+  },
+  "returns": {
+    "type": "object",
+    "properties": {
+      "code": {
+        "type": "number",
+        "description": "0 表示校验完成，10000 表示执行异常"
+      },
+      "msg": {
+        "type": "string",
+        "description": "结果描述，校验通过时为「通过」"
+      },
+      "ok": {
+        "type": "boolean",
+        "description": "是否通过校验"
+      },
+      "reason": {
+        "type": "string",
+        "description": "不通过原因"
+      },
+      "user": {
+        "type": "object",
+        "description": "标准化的用户对象(user 操作)"
+      },
+      "error": {
+        "type": "object",
+        "description": "异常对象 { name, message }"
+      }
+    }
+  },
+  "handler": "manager"
+}