npm - w-web-api - Versions diffs - 1.0.52 → 1.0.55 - Mend

w-web-api 1.0.52 → 1.0.55

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (78) hide show

package/README.md +1 -1
package/dist/css/app.cad4a1ca.css +1 -0
package/dist/index.tmp +4 -2
package/dist/js/app-legacy.7687b23b.js +1 -0
package/dist/js/app.7687b23b.js +1 -0
package/dist/js/chunk-vendors-legacy.4c27cf51.js +15 -0
package/dist/js/chunk-vendors.4c27cf51.js +15 -0
package/dist/w-web-api.umd.js +2 -2
package/dist/w-web-api.umd.js.map +1 -1
package/docs/WWebApi.html +2 -2
package/docs/index.html +1 -1
package/docs/{WWebApi.mjs.html → server_WWebApi.mjs.html} +113 -66
package/docs/src_components_Common_CheckYesNo.vue.html +187 -0
package/g.getSettings.mjs +3 -0
package/logs/2026-06-19T16.log +6 -0
package/logs/2026-06-20T11.log +4 -0
package/logs/2026-06-20T14.log +2 -0
package/logs/2026-06-21T20.log +1 -0
package/logs/2026-06-21T21.log +4 -0
package/logs/2026-06-22T07.log +12 -0
package/logs/2026-06-22T08.log +808 -0
package/logs/2026-06-22T09.log +104 -0
package/logs/2026-06-22T10.log +26 -0
package/logs/2026-06-22T11.log +860 -0
package/logs/2026-06-22T12.log +430 -0
package/logs/2026-06-22T23.log +1547 -0
package/logs/2026-06-23T00.log +473 -0
package/logs/2026-06-23T08.log +231 -0
package/logs/2026-06-23T09.log +179 -0
package/logs/2026-07-01T11.log +488 -0
package/logs/2026-07-09T22.log +370 -0
package/logs/2026-07-09T23.log +370 -0
package/logs/2026-07-10T12.log +284 -0
package/logs/2026-07-10T13.log +777 -0
package/logs/2026-07-11T17.log +2 -0
package/package.json +20 -15
package/public/index.html +9 -2
package/server/WWebApi.mjs +110 -63
package/server/procApis.mjs +62 -0
package/server/procLang.mjs +372 -66
package/server/procProxy.mjs +120 -0
package/server/srLog.mjs +30 -0
package/server/staLogs/filterVpfsByWindow.mjs +27 -0
package/server/staLogs/staEvent.mjs +131 -0
package/server/staLogs/test_staEvent.mjs +198 -0
package/settings.json +18 -0
package/src/App.vue +11 -7
package/src/assets/scalar-ui.css +113 -0
package/src/components/Common/CheckYes.vue +102 -0
package/src/components/Common/CheckYesNo.vue +115 -0
package/src/components/Common/LoadingWinBar.vue +114 -0
package/src/components/Layout.vue +8 -26
package/src/components/LayoutContent.vue +299 -350
package/src/components/LayoutContentEdit.vue +577 -0
package/src/components/LayoutContentStats.vue +485 -0
package/src/components/LayoutContentTest.vue +781 -0
package/src/components/MdPanel.vue +80 -58
package/src/main.js +11 -8
package/src/plugins/mUI.mjs +19 -39
package/src/schema/tables/apis.mjs +30 -0
package/src/store/mutations.mjs +0 -14
package/src/store/types.mjs +0 -3
package/srv.mjs +50 -20
package/tableTags.json +1 -1
package/z/344/277/256/346/255/243/350/246/217/345/212/203/346/233/270.md +246 -0
package/.github/workflows/ci-test.yml +0 -24
package/.vscode/launch.json +0 -18
package/db/wapis/apis/data.mdb +0 -0
package/db/wapis/apis/lock.mdb +0 -0
package/dist/css/app.b5cf2ef5.css +0 -1
package/dist/js/app-legacy.927b5679.js +0 -1
package/dist/js/app.927b5679.js +0 -1
package/dist/js/chunk-vendors-legacy.ffb0c6c5.js +0 -13
package/dist/js/chunk-vendors.ffb0c6c5.js +0 -13
package/src/plugins/mDataSelectorSchema.mjs +0 -30
package/src/plugins/mShare.mjs +0 -44
package/tableTags-web-api.json +0 -1
package/test/all.test.mjs +0 -10

package/docs/WWebApi.html CHANGED Viewed

@@ -80,7 +80,7 @@
     <dt class="tag-source">Source:</dt>
     <dd class="tag-source"><ul class="dummy"><li>
-        <a href="WWebApi.mjs.html">WWebApi.mjs</a>, <a href="WWebApi.mjs.html#line132">line 132</a>
+        <a href="server_WWebApi.mjs.html">server/WWebApi.mjs</a>, <a href="server_WWebApi.mjs.html#line136">line 136</a>
     </li></ul></dd>
@@ -885,7 +885,7 @@
 <br class="clear">
 <footer>
-    Documentation generated by <a href="https://github.com/jsdoc3/jsdoc">JSDoc 4.0.2</a> on Sat Mar 28 2026 23:43:26 GMT+0800 (台北標準時間) using the <a href="https://github.com/clenemt/docdash">docdash</a> theme.
+    Documentation generated by <a href="https://github.com/jsdoc3/jsdoc">JSDoc 4.0.5</a> on Thu Jul 23 2026 11:15:32 GMT+0800 (台北標準時間) using the <a href="https://github.com/clenemt/docdash">docdash</a> theme.
 </footer>
 <script>prettyPrint();</script>

package/docs/index.html CHANGED Viewed

@@ -71,7 +71,7 @@
 <br class="clear">
 <footer>
-    Documentation generated by <a href="https://github.com/jsdoc3/jsdoc">JSDoc 4.0.2</a> on Sat Mar 28 2026 23:43:26 GMT+0800 (台北標準時間) using the <a href="https://github.com/clenemt/docdash">docdash</a> theme.
+    Documentation generated by <a href="https://github.com/jsdoc3/jsdoc">JSDoc 4.0.5</a> on Thu Jul 23 2026 11:15:32 GMT+0800 (台北標準時間) using the <a href="https://github.com/clenemt/docdash">docdash</a> theme.
 </footer>
 <script>prettyPrint();</script>

package/docs/{WWebApi.mjs.html → server_WWebApi.mjs.html} RENAMED Viewed

@@ -3,7 +3,7 @@
 <head>
     <meta charset="utf-8">
-    <title>WWebApi.mjs - Documentation</title>
+    <title>server/WWebApi.mjs - Documentation</title>
     <script src="scripts/prettify/prettify.js"></script>
@@ -35,7 +35,7 @@
 <div id="main">
-    <h1 class="page-title">WWebApi.mjs</h1>
+    <h1 class="page-title">server/WWebApi.mjs</h1>
@@ -73,6 +73,10 @@ import replace from 'wsemi/src/replace.mjs'
 import WServHapiServer from 'w-serv-hapi/src/WServHapiServer.mjs'
 import WServOrm from 'w-serv-orm/src/WServOrm.mjs'
 import procLang from './procLang.mjs'
+import procProxy from './procProxy.mjs'
+import procApis from './procApis.mjs'
+import staEvent from './staLogs/staEvent.mjs'
+import srLogInit from './srLog.mjs'
 import ds from '../src/schema/index.mjs'
@@ -273,6 +277,7 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
     //params
     let showLanguage = get(opt, 'showLanguage', 'y')
     let language = get(opt, 'language', 'eng')
+    let logFd = get(opt, 'logFd', './logs') //srLog 寫入 + staEvent 統計共用之 log 資料夾
     //kpLangExt
@@ -294,11 +299,45 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
         wp = WServOrm(ds, WOrm, url, db, optWServOrm)
     }
     catch (err) {
-        console.log(err)
+        //ORM 為必要依賴：初始化失敗即 fail-fast，不以 wp={} 帶 undefined woItems/procOrm 殘缺啟動（與建構子其餘必要依賴一致）
+        console.log('WServOrm init failed', err)
+        throw err
     }
     let { woItems, procOrm } = wp
+    //srLog（後端 log；錯誤一律 log err-key 供識別，對齊 w-web-sso）
+    let srLog = srLogInit(opt)
+    //maskTok：debug console.log 不印完整 token/authorization（憑證），僅前 4 碼 + ***，避免憑證落入 stdout
+    let maskTok = (t) => isestr(t) ? (strleft(t, 4) + '***') : t
+    //kpFunExt 邊界統一處理：成功記 info（供 staEvent 統計呼叫頻率）；catch 後端錯誤 → srLog 該 err-key →
+    //原樣 re-reject（前端依 key 查自己 lang 顯示）。event 統一加 'kpfun-' 前綴 → 專用事件、與 api/verifyConn 區分。
+    let wrapErrLog = (event, fn) => {
+        let ev = 'kpfun-' + event
+        return async (...args) => {
+            try {
+                let result = await fn(...args)
+                srLog.info({ event: ev }) //成功也記 info
+                return result
+            }
+            catch (err) {
+                srLog.error({ event: ev, err })
+                return Promise.reject(err)
+            }
+        }
+    }
+    //procProxy
+    let { proxyRequest } = procProxy({ srLog })
+    //procApis
+    let { getApisList, saveApi, deleteApi } = procApis({ woItems, procOrm, ds })
     //getWebInfor
     let getWebInfor = (userId) => {
         return {
@@ -321,26 +360,26 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
         if (!isestr(id)) {
             console.log('user', user)
             console.log('can not get the userId')
-            return Promise.reject(`can not get the userId`)
+            return Promise.reject('errUserIdMissing')
         }
         let email = get(user, 'email', '')
         if (!isestr(email)) {
             console.log('user', user)
             console.log('can not get the email of user')
-            return Promise.reject(`can not get the email of user`)
+            return Promise.reject('errUserEmailMissing')
         }
         let name = get(user, 'name', '')
         if (!isestr(name)) {
             console.log('user', user)
             console.log('can not get userName')
-            return Promise.reject(`can not get userName`)
+            return Promise.reject('errUserNameMissing')
         }
         let isAdmin = get(user, 'isAdmin', '')
         if (isAdmin !== 'y' &amp;&amp; isAdmin !== 'n') {
             console.log('user', user)
             console.log('user.isAdmin is not y or n', user.isAdmin)
             console.log('can not get the role of user')
-            return Promise.reject(`can not get the role of user`)
+            return Promise.reject('errUserRoleMissing')
         }
         return true
     }
@@ -356,14 +395,7 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
         }
         //check
-        if (true) {
-            // if (!iseobj(userSelf)) {
-            //     console.log(`token`, token)
-            //     console.log(`can not find the user from token`)
-            //     return Promise.reject(`can not find the user from token`)
-            // }
-            await checkUser(userSelf)
-        }
+        await checkUser(userSelf)
         return userSelf
     }
@@ -402,9 +434,10 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
         if (!b) {
             console.log('user', user)
             console.log(`user does not have permission`)
-            return Promise.reject(`user does not have permission`)
+            return Promise.reject('errUserNoPermission')
         }
+        srLog.info({ event: 'verifyClientUser', from, userId: get(user, 'id', '') }) //瀏覽使用者驗證通過
         return user
     }
@@ -427,7 +460,7 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
         if (!iseobj(user)) {
             console.log(`token`, token)
             console.log(`can not find the user from token`)
-            return Promise.reject(`can not find the user from token`)
+            return Promise.reject('errUserNotFound')
         }
         //verifyAppUser
@@ -440,9 +473,10 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
         if (!b) {
             console.log('user', user)
             console.log(`user does not have permission`)
-            return Promise.reject(`user does not have permission`)
+            return Promise.reject('errUserNoPermission')
         }
+        srLog.info({ event: 'verifyAppUser', from, userId: get(user, 'id', '') }) //應用程式使用者驗證通過
         return user
     }
@@ -469,7 +503,7 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
         if (!iseobj(payload)) {
             console.log('payload', payload)
             console.log(`invalid payload in req`)
-            return Promise.reject(`invalid payload in req`)
+            return Promise.reject('errPayloadInvalid')
         }
         //group
@@ -479,7 +513,7 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
         if (!isestr(group)) {
             console.log('payload', payload)
             console.log(`invalid group in payload`)
-            return Promise.reject(`invalid group in payload`)
+            return Promise.reject('errGroupInvalid')
         }
         //rows
@@ -489,7 +523,7 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
         if (!isearr(rows)) {
             console.log('payload', payload)
             console.log(`invalid rows in payload`)
-            return Promise.reject(`invalid rows in payload`)
+            return Promise.reject('errRowsInvalid')
         }
         //r
@@ -529,7 +563,7 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
             console.log('inp', inp)
             console.log('group', group)
             console.log(`invalid group`)
-            return Promise.reject(`invalid group`)
+            return Promise.reject('errGroupInvalid')
         }
         //rows
@@ -540,7 +574,7 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
         if (!isearr(rows)) {
             console.log('inp', inp)
             console.log('keyTable', keyTable)
-            return Promise.reject(`invalid rows`)
+            return Promise.reject('errRowsInvalid')
         }
         //save from
@@ -611,6 +645,7 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
         c = replace(c, '/mapi/', '{sfd}/') //方法同genEntry
         c = replace(c, '{sfd}', subfolder)
         c = replace(c, '{urlRedirect}', urlRedirect)
+        c = replace(c, '{language}', language) //注入初始語系 → window.___pmwperm___.language（前端 getLang 之來源之一）
         fs.writeFileSync(fpEntryOut, c, 'utf8')
     }
     catch (err) {
@@ -636,10 +671,9 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
                     //check
                     if (!isestr(token)) {
                         console.log('req.query', get(req, 'query'))
-                        console.log('token', token)
+                        console.log('token', maskTok(token))
                         console.log('[API]getUserByToken/check token: invalid token')
-                        console.log(`token does not have permission`)
-                        return Promise.reject(`token does not have permission`)
+                        return Promise.reject('errTokenNoPermission')
                     }
                     //getAndVerifyClientUser
@@ -647,12 +681,12 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
                     //check
                     if (!iseobj(user)) {
-                        console.log('token', token)
+                        console.log('token', maskTok(token))
                         console.log('[API]getUserByToken/check user: invalid user')
-                        console.log(`token does not have permission`)
-                        return Promise.reject(`token does not have permission`)
+                        return Promise.reject('errTokenNoPermission')
                     }
+                    srLog.info({ event: 'api/getUserByToken', userId: get(user, 'id', '') })
                     return user
                 }
@@ -683,8 +717,7 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
         //                 console.log('req.query', get(req, 'query'))
         //                 console.log('token', token)
         //                 console.log('[API]getAPIsList/check token: invalid token')
-        //                 console.log(`token does not have permission`)
-        //                 return Promise.reject(`token does not have permission`)
+        //                 return Promise.reject('errTokenNoPermission')
         //             }
         //             //getAndVerifyClientUser
@@ -694,8 +727,7 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
         //             if (!iseobj(user)) {
         //                 console.log('token', token)
         //                 console.log('[API]getAPIsList/check user: invalid user')
-        //                 console.log(`token does not have permission`)
-        //                 return Promise.reject(`token does not have permission`)
+        //                 return Promise.reject('errTokenNoPermission')
         //             }
         //             //getAPIsList
@@ -732,8 +764,7 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
         //                 console.log('req.query', get(req, 'query'))
         //                 console.log('token', token)
         //                 console.log('[API]updateAPIs/check token: invalid token')
-        //                 console.log(`token does not have permission`)
-        //                 return Promise.reject(`token does not have permission`)
+        //                 return Promise.reject('errTokenNoPermission')
         //             }
         //             //getAndVerifyClientUser
@@ -743,8 +774,7 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
         //             if (!iseobj(user)) {
         //                 console.log('token', token)
         //                 console.log('[API]updateAPIs/check user: invalid user')
-        //                 console.log(`token does not have permission`)
-        //                 return Promise.reject(`token does not have permission`)
+        //                 return Promise.reject('errTokenNoPermission')
         //             }
         //             //parsePayload
@@ -782,10 +812,9 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
                     //check
                     if (!isestr(token)) {
                         console.log('req.query', get(req, 'query'))
-                        console.log('token', token)
+                        console.log('token', maskTok(token))
                         console.log('[API]syncAndReplaceTabs/check token: invalid token')
-                        console.log(`token does not have permission`)
-                        return Promise.reject(`token does not have permission`)
+                        return Promise.reject('errTokenNoPermission')
                     }
                     //keyTable
@@ -796,15 +825,14 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
                         console.log('req.query', get(req, 'query'))
                         console.log('keyTable', keyTable)
                         console.log('[API]syncAndReplaceTabs/check keyTable: invalid keyTable')
-                        console.log(`token does not have permission`)
-                        return Promise.reject(`token does not have permission`)
+                        return Promise.reject('errKeyTableInvalid')
                     }
                     //check keyTable
                     let allowedTables = ['apis']
                     if (!allowedTables.includes(keyTable)) {
                         console.log('[API]syncAndReplaceTabs/check keyTable: unexpected keyTable', keyTable)
-                        return Promise.reject(`invalid keyTable: ${keyTable}`)
+                        return Promise.reject('errKeyTableInvalid')
                     }
                     //getAndVerifyAppUser
@@ -812,10 +840,9 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
                     //check
                     if (!iseobj(user)) {
-                        console.log('token', token)
+                        console.log('token', maskTok(token))
                         console.log('[API]syncAndReplaceTabs/check user: invalid user')
-                        console.log(`token does not have permission`)
-                        return Promise.reject(`token does not have permission`)
+                        return Promise.reject('errTokenNoPermission')
                     }
                     //userId
@@ -823,11 +850,10 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
                     //check userId
                     if (!isestr(userId)) {
-                        console.log('token', token)
+                        console.log('token', maskTok(token))
                         console.log('user', user)
                         console.log('[API]syncAndReplaceTabs/check userId: invalid userId')
-                        console.log(`token does not have permission`)
-                        return Promise.reject(`token does not have permission`)
+                        return Promise.reject('errTokenNoPermission')
                     }
                     //parsePayload
@@ -836,6 +862,7 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
                     //syncAndReplaceTabs
                     let r = await syncAndReplaceTabs(userId, inp, keyTable)
+                    srLog.info({ event: 'api/syncAndReplaceTabs', userId, keyTable })
                     return r
                 }
@@ -863,7 +890,7 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
     //WServHapiServer
     instWServHapiServer = new WServHapiServer({
-        port: opt.serverPort,
+        port: serverPort,
         pathStaticFiles,
         apiName: 'api',
         apis,
@@ -878,28 +905,28 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
             //check
             if (!isestr(token)) {
                 console.log('apiType', apiType)
-                console.log('authorization', authorization)
+                console.log('authorization', maskTok(authorization))
                 console.log('invalid token')
                 return false
             }
-            //checkToken
+            //checkToken：套件層連線閘僅做「token 認證」（解析 user + 驗欄位齊備）。**授權**（如限管理員）屬
+            //套件使用者之責——由其提供之 getUserByToken（可對非授權者回 {}）/ verifyClientUser / verifyAppUser，
+            //或 WServOrm 之 useCheckUser/useExcludeWhenNotAdmin 等鉤子決定；套件不對連線層強加特定授權政策（避免越界、
+            //保留使用者彈性）。詳見 spec/設計要點與取捨.md「套件授權責任」。
             let b = await p.checkToken(token)
-            // console.log('b', b)
+            srLog.info({ event: 'verifyConn', apiType }) //連線之 token 認證通過（checkToken 失敗會 throw 不到此）
             return b
         },
         getUserIdByToken: async (token) => { //可使用async或sync函數
             // console.log('getUserIdByToken', token)
-            return ''
-            // let user = await getUserByToken(token) //api儲存時須使用
-            // let userId = get(user, 'id', '')
-            // if (!isestr(userId)) {
-            //     console.log('token', token)
-            //     console.log('userId', userId)
-            //     return Promise.reject(`can not find user.id`)
-            // }
-            // return userId
+            if (!isestr(token)) {
+                return ''
+            }
+            let user = await getUserByToken(token)
+            let userId = get(user, 'id', '')
+            return userId
         },
         useDbOrm: true,
         kpOrm: woItems,
@@ -907,9 +934,29 @@ function WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser,
         tableNamesExec,
         methodsExec: ['select', 'insert', 'save', 'del'], //mix需於procOrm內註冊以提供
         tableNamesSync,
-        kpFunExt: { //接收參數第1個為userId, 之後才是前端給予參數
-            getWebInfor,
+        kpFunExt: { //接收參數第1個為userId, 之後才是前端給予參數（皆經 wrapErrLog：錯誤 srLog err-key 後 re-reject）
+            getWebInfor: wrapErrLog('getWebInfor', getWebInfor),
+            proxyRequest: wrapErrLog('proxyRequest', (userId, reqSpec) => {
+                return proxyRequest(reqSpec)
+            }),
+            getApisList: wrapErrLog('getApisList', (userId) => {
+                return getApisList(userId)
+            }),
+            saveApi: wrapErrLog('saveApi', (userId, row) => {
+                return saveApi(userId, row)
+            }),
+            deleteApi: wrapErrLog('deleteApi', (userId, id) => {
+                return deleteApi(userId, id)
+            }),
+            //統計資訊頁：回傳各 event 之時段發生頻率（讀 logFd 之 log）。連線之 token 認證由 verifyConn 把關；
+            //授權（限管理員）屬套件使用者責任（見 verifyConn 註解與設計要點與取捨「套件授權責任」）。timeLength 天數 / timeInterval 'hr'|'day'。
+            getStaEvent: wrapErrLog('getStaEvent', (userId, timeLength = 7, timeInterval = 'hr') => {
+                return staEvent(timeLength, timeInterval, { fdLog: logFd })
+            }),
             // getAPIsList: (userId, query = {}) => { //待提供api管理系統界面使用
             //     return getAPIsList(query)
@@ -942,7 +989,7 @@ export default WWebApi
 <br class="clear">
 <footer>
-    Documentation generated by <a href="https://github.com/jsdoc3/jsdoc">JSDoc 4.0.2</a> on Sat Mar 28 2026 23:43:26 GMT+0800 (台北標準時間) using the <a href="https://github.com/clenemt/docdash">docdash</a> theme.
+    Documentation generated by <a href="https://github.com/jsdoc3/jsdoc">JSDoc 4.0.5</a> on Thu Jul 23 2026 11:15:32 GMT+0800 (台北標準時間) using the <a href="https://github.com/clenemt/docdash">docdash</a> theme.
 </footer>
 <script>prettyPrint();</script>

package/docs/src_components_Common_CheckYesNo.vue.html ADDED Viewed

@@ -0,0 +1,187 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="utf-8">
+    <title>src/components/Common/CheckYesNo.vue - Documentation</title>
+    <script src="scripts/prettify/prettify.js"></script>
+    <script src="scripts/prettify/lang-css.js"></script>
+    <!--[if lt IE 9]>
+      <script src="//html5shiv.googlecode.com/svn/trunk/html5.js"></script>
+    <![endif]-->
+    <link type="text/css" rel="stylesheet" href="styles/prettify.css">
+    <link type="text/css" rel="stylesheet" href="styles/jsdoc.css">
+    <script src="scripts/nav.js" defer></script>
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+</head>
+<body>
+<input type="checkbox" id="nav-trigger" class="nav-trigger" />
+<label for="nav-trigger" class="navicon-button x">
+  <div class="navicon"></div>
+</label>
+<label for="nav-trigger" class="overlay"></label>
+<nav >
+    <h2><a href="index.html">Home</a></h2><h3>Classes</h3><ul><li><a href="WWebApi.html">WWebApi</a></li></ul>
+</nav>
+<div id="main">
+    <h1 class="page-title">src/components/Common/CheckYesNo.vue</h1>
+    <section>
+        <article>
+            <pre class="prettyprint source linenums"><code>&lt;template>
+    &lt;WConfirm
+        :show.sync="bShow"
+        :title="$t('systemMessage')"
+        :content="content"
+        :_contentColor="'white'"
+        :_contentIconColor="'white'"
+        :_contentBackgroundColor="'orange lighten-5'"
+        :_titleColor="'white'"
+        :headerBackgroundColor="'grey lighten-3'"
+        :noBtnText="$t('no')"
+        :yesBtnText="$t('yes')"
+        @click-no="clickBtn(false)"
+        @click-yes="clickBtn(true)"
+    >&lt;/WConfirm>
+&lt;/template>
+&lt;script>
+import Vue from 'vue'
+import genPm from 'wsemi/src/genPm.mjs'
+import WConfirm from 'w-component-vue/src/components/WConfirm.vue'
+export default {
+    components: {
+        WConfirm,
+    },
+    props: {
+    },
+    data: function() {
+        return {
+            bShow: false,
+            pm: null,
+            content: '',
+        }
+    },
+    mounted: function() {
+        //console.log('mounted')
+        let vo = this
+        //set
+        Vue.prototype.$dg.showCheckYesNo = vo.show
+    },
+    computed: {
+    },
+    methods: {
+        /**
+         * 顯示 Yes/No 確認對話框並回傳 Promise。
+         *
+         * **Contract** (caller 須遵守):
+         *   - 使用者點 **Yes** → Promise `resolve()` (無值, 進 `.then()`)
+         *   - 使用者點 **No** → Promise `reject('close')` (進 `.catch(err => err === 'close')`)
+         *
+         * 正確 caller pattern:
+         *
+         *     vo.$dg.showCheckYesNo('確定要 X？')
+         *         .then(() => {
+         *             //使用者點 Yes
+         *             doX()
+         *         })
+         *         .catch((err) => {
+         *             //使用者點 No (err === 'close') 為正常路徑, 靜默處理
+         *             if (err === 'close') return
+         *             //非預期錯誤 (CheckYesNo 本身故障等)
+         *             console.log('showCheckYesNo unexpected error', err)
+         *         })
+         *
+         * @param {string} content - 顯示在 modal 中的訊息文字
+         * @returns {Promise&lt;void>} Yes → resolve(); No → reject('close')
+         */
+        show: function(content) {
+            //console.log('methods show', content)
+            let vo = this
+            //pm
+            vo.pm = genPm()
+            //save
+            vo.content = content
+            //show
+            vo.bShow = true
+            return vo.pm
+        },
+        clickBtn: function(mode) {
+            //console.log('methods clickBtn', mode)
+            let vo = this
+            if (mode) {
+                vo.pm.resolve()
+            }
+            else {
+                vo.pm.reject('close')
+            }
+            //hide
+            vo.bShow = false
+        },
+    }
+}
+&lt;/script>
+&lt;style scoped>
+&lt;/style>
+</code></pre>
+        </article>
+    </section>
+</div>
+<br class="clear">
+<footer>
+    Documentation generated by <a href="https://github.com/jsdoc3/jsdoc">JSDoc 4.0.5</a> on Thu Jul 23 2026 11:15:32 GMT+0800 (台北標準時間) using the <a href="https://github.com/clenemt/docdash">docdash</a> theme.
+</footer>
+<script>prettyPrint();</script>
+<script src="scripts/polyfill.js"></script>
+<script src="scripts/linenumber.js"></script>
+</body>
+</html>

package/g.getSettings.mjs CHANGED Viewed

@@ -12,6 +12,9 @@ function getSettings() {
         // 'dbPort': 27017,
         'dbUrl': './db',
         'dbName': 'wapis',
+        'ssoBaseUrl': 'http://localhost:11007',
+        'ssoAppToken': '', //部署時填入SSO tokens表中isApp=y的app token
+        'ssoLoginUrl': 'http://localhost:11007/', //未登入時導向之SSO登入頁
     }
 }

package/logs/2026-06-19T16.log ADDED Viewed

@@ -0,0 +1,6 @@
+{"level":50,"time":1781856410899,"pid":16564,"hostname":"semi-win-dev3","event":"proxyRequest","err":"errReqUrlInvalid"}
+{"level":50,"time":1781856420503,"pid":16564,"hostname":"semi-win-dev3","event":"proxyRequest","err":"errReqUrlInvalid"}
+{"level":50,"time":1781856490388,"pid":16564,"hostname":"semi-win-dev3","event":"proxyRequest","err":"errReqUrlInvalid"}
+{"level":50,"time":1781856524374,"pid":16564,"hostname":"semi-win-dev3","event":"proxyRequest","err":"errReqUrlInvalid"}
+{"level":50,"time":1781856931047,"pid":16564,"hostname":"semi-win-dev3","event":"proxyRequest","err":"errReqUrlInvalid"}
+{"level":50,"time":1781856965662,"pid":16564,"hostname":"semi-win-dev3","event":"proxyRequest","err":"errReqUrlInvalid"}