w-web-sso 1.0.0

package/server/proc.mjs

@@ -0,0 +1,543 @@
+import path from 'path'
+import fs from 'fs'
+import ot from 'dayjs'
+import get from 'lodash-es/get.js'
+import each from 'lodash-es/each.js'
+import size from 'lodash-es/size.js'
+import keys from 'lodash-es/keys.js'
+import iseobj from 'wsemi/src/iseobj.mjs'
+import isestr from 'wsemi/src/isestr.mjs'
+import ispint from 'wsemi/src/ispint.mjs'
+import isearr from 'wsemi/src/isearr.mjs'
+import ispnum from 'wsemi/src/ispnum.mjs'
+import isfun from 'wsemi/src/isfun.mjs'
+import ispm from 'wsemi/src/ispm.mjs'
+import cint from 'wsemi/src/cint.mjs'
+import j2o from 'wsemi/src/j2o.mjs'
+import strleft from 'wsemi/src/strleft.mjs'
+import strright from 'wsemi/src/strright.mjs'
+import strdelright from 'wsemi/src/strdelright.mjs'
+import pm2resolve from 'wsemi/src/pm2resolve.mjs'
+import pmSeries from 'wsemi/src/pmSeries.mjs'
+import ds from '../src/schema/index.mjs'
+import hashPassword from './hashPassword.mjs'
+
+
+function proc(woItems, { salt, timeExpired }) {
+
+
+    //getGenUserByKV
+    let getGenUserByKV = async(keyUser, valueUser) => {
+
+        //us
+        let us = await woItems.users.select({ [keyUser]: valueUser, isActive: 'y' })
+
+        //u
+        let u = get(us, 0, null)
+
+        //check
+        if (!iseobj(u)) {
+            return null
+        }
+
+        return u
+    }
+
+
+    // //getGenUserByUserId
+    // let getGenUserByUserId = async(userId) => {
+
+    //     //u
+    //     let u = await getGenUserByKV('id', userId)
+
+    //     //check
+    //     if (!iseobj(u)) {
+    //         return null
+    //     }
+
+    //     return u
+    // }
+
+
+    //getGenUserByUserAc
+    let getGenUserByUserAc = async(account) => {
+
+        //u
+        let u = await getGenUserByKV('account', account)
+
+        //check
+        if (!iseobj(u)) {
+            return null
+        }
+
+        return u
+    }
+
+
+    //loginByAccountAndPassword
+    let loginByAccountAndPassword = async(account, password) => {
+
+        //hashPassword
+        let passwordTest = hashPassword(password, salt)
+        // console.log('password', password, 'salt', salt)
+        // console.log('passwordTest', passwordTest)
+
+        //getGenUserByUserAc
+        let u = await getGenUserByUserAc(account)
+        // console.log('u', u)
+
+        //check
+        if (!iseobj(u)) {
+            console.log(`account`, account)
+            console.log(`can not find the user from account`)
+            return Promise.reject(`can not find the user from account`)
+        }
+
+        //passwordTrue
+        let passwordTrue = get(u, 'password', '')
+        // console.log('passwordTrue', passwordTrue)
+
+        //check
+        if (passwordTest !== passwordTrue) {
+            return Promise.reject(`incorrect user account or password`)
+        }
+
+        //userId
+        let userId = get(u, 'id', '')
+        // console.log('userId', userId)
+
+        //createToken
+        let token = await createToken(userId)
+        // console.log('token', token)
+
+        //bbb 待加入創建usersRecs儲存使用者登入資訊與紀錄
+
+        //r
+        let r = {
+            account: u.account,
+            name: u.name,
+            email: u.email,
+            description: u.description,
+            from: u.from,
+            ruleGroupsIds: u.ruleGroupsIds,
+            redir: u.redir,
+            isAdmin: u.isAdmin,
+            token,
+        }
+
+        return r
+    }
+
+
+    //createToken
+    let createToken = async (userId) => {
+        let errTemp = null
+
+        //t
+        let t = ds.tokens.funNew({
+            userId,
+        })
+        // console.log('funNew', t)
+
+        //token
+        let token = get(t, 'token', '')
+
+        //insert
+        await woItems.tokens.insert(t)
+            .catch((err) => {
+                errTemp = err
+            })
+
+        //check
+        if (errTemp) {
+            console.log(errTemp)
+            console.log(`token`, token)
+            console.log(`Can not create a token from userId`)
+            return Promise.reject(`Can not create a token from userId`)
+        }
+
+        return token
+    }
+
+
+    //checkTokenCore
+    let checkTokenCore = async (tk) => {
+
+        //timeEnd
+        let timeEnd = get(tk, 'timeEnd', '')
+
+        //tt
+        let tt = ot(timeEnd, 'YYYY-MM-DDTHH:mm:ss.SSSZ')
+        // console.log('tt', tt)
+
+        //tn
+        let tn = ot()
+
+        //dmin
+        let dmin = tt.diff(tn, 'minutes')
+        // console.log('dmin', dmin)
+
+        //check
+        if (dmin > timeExpired) {
+            console.log(`tk`, tk)
+            console.log(`dmin`, dmin, `dmitimeExpiredn`, timeExpired)
+            console.log(`token expired`)
+            return Promise.reject(`token expired`)
+        }
+
+        return true
+    }
+
+
+    //checkToken
+    let checkToken = async (token) => {
+
+        //tks
+        let tks = await woItems.tokens.select({ token })
+
+        //ntks
+        let ntks = size(tks)
+
+        //check
+        if (ntks === 0) {
+            console.log(`token`, token)
+            console.log(`can not find the token`)
+            return Promise.reject(`can not find the token`)
+        }
+
+        //check
+        if (ntks >= 2) {
+            console.log(`token`, token)
+            console.log(`duplicate tokens`)
+            return Promise.reject(`duplicate tokens`)
+        }
+
+        //tk
+        let tk = get(tks, 0, '')
+        // console.log('tk', tk)
+
+        //checkTokenCore
+        await checkTokenCore(tk)
+
+        return true
+    }
+
+
+    //refreshToken
+    let refreshToken = async (token) => {
+        let errTemp = null
+
+        //tks
+        let tks = await woItems.tokens.select({ token })
+
+        //ntks
+        let ntks = size(tks)
+
+        //check
+        if (ntks === 0) {
+            console.log(`token`, token)
+            console.log(`can not find the token`)
+            return Promise.reject(`can not find the token`)
+        }
+
+        //check
+        if (ntks >= 2) {
+            console.log(`token`, token)
+            console.log(`duplicate tokens`)
+            return Promise.reject(`duplicate tokens`)
+        }
+
+        //tk
+        let tk = get(tks, 0, '')
+        // console.log('tk', tk)
+
+        //timeEnd
+        let timeEnd = get(tk, 'timeEnd', '')
+
+        //tt
+        let tt = ot(timeEnd, 'YYYY-MM-DDTHH:mm:ss.SSSZ')
+        // console.log('tt', tt)
+
+        //tn
+        let tn = ot()
+
+        //dmin
+        let dmin = tt.diff(tn, 'minutes')
+        // console.log('dmin', dmin)
+
+        //check
+        if (dmin > timeExpired) {
+            console.log(`token`, token)
+            console.log(`dmin`, dmin, `timeExpired`, timeExpired)
+            console.log(`token expired`)
+            return Promise.reject(`token expired`)
+        }
+
+        //timeEndNew
+        let timeEndNew = tn.format('YYYY-MM-DDTHH:mm:ss.SSSZ')
+        // console.log('timeEndNew', timeEndNew)
+
+        //save
+        await woItems.tokens.save({
+            id: tk.id,
+            timeEnd: timeEndNew,
+        })
+            .catch((err) => {
+                errTemp = err
+            })
+
+        //check
+        if (errTemp) {
+            console.log(errTemp)
+            console.log(`token`, token)
+            console.log(`Can not update time for token`)
+            return Promise.reject(`Can not update time for token`)
+        }
+
+        return true
+    }
+
+
+    //getUserByToken
+    let getUserByToken = async(token) => {
+        let errTemp = null
+
+        //tks
+        let tks = await woItems.tokens.select({ token })
+
+        //ntks
+        let ntks = size(tks)
+
+        //check
+        if (ntks === 0) {
+            console.log(`token`, token)
+            console.log(`can not find the token`)
+            return Promise.reject(`can not find the token`)
+        }
+
+        //check
+        if (ntks >= 2) {
+            console.log(`token`, token)
+            console.log(`duplicate tokens`)
+            return Promise.reject(`duplicate tokens`)
+        }
+
+        //tk
+        let tk = get(tks, 0, '')
+        // console.log('tk', tk)
+
+        //userId
+        let userId = get(tk, 'userId', '')
+        // console.log('userId', userId)
+
+        //us
+        let us = await woItems.users.select({ id: userId })
+            .catch((err) => {
+                errTemp = err
+            })
+
+        //check
+        if (errTemp) {
+            console.log(errTemp)
+            console.log(`userId`, userId)
+            console.log(`Failed to find user`)
+            return Promise.reject(`Failed to find user`)
+        }
+
+        //nus
+        let nus = size(us)
+
+        //check
+        if (nus === 0) {
+            console.log(`userId`, userId)
+            console.log(`can not find the user by userId`)
+            return Promise.reject(`can not find the user by userId`)
+        }
+
+        //check
+        if (nus >= 2) {
+            console.log(`userId`, userId)
+            console.log(`duplicate userId`)
+            return Promise.reject(`duplicate userId`)
+        }
+
+        //u
+        let u = get(us, 0, '')
+        // console.log('u', u)
+
+        //r
+        let r = {
+            account: u.account,
+            name: u.name,
+            email: u.email,
+            description: u.description,
+            from: u.from,
+            ruleGroupsIds: u.ruleGroupsIds,
+            redir: u.redir,
+            isAdmin: u.isAdmin,
+            token,
+        }
+
+        return r
+    }
+
+
+    //logOutByToken
+    let logOutByToken = async(token) => {
+        let errTemp = null
+
+        //tks
+        let tks = await woItems.tokens.select({ token })
+
+        //ntks
+        let ntks = size(tks)
+
+        //check
+        if (ntks === 0) {
+            console.log(`token`, token)
+            console.log(`can not find the token`)
+            return Promise.reject(`can not find the token`)
+        }
+
+        //check
+        if (ntks >= 2) {
+            console.log(`token`, token)
+            console.log(`duplicate tokens`)
+            return Promise.reject(`duplicate tokens`)
+        }
+
+        //tk
+        let tk = get(tks, 0, '')
+        // console.log('tk', tk)
+
+        //userId
+        let userId = get(tk, 'userId', '') //bbb 先保留userId供後續功能使用
+        // console.log('userId', userId)
+
+        //del
+        await woItems.tokens.del({ token })
+            .catch((err) => {
+                errTemp = err
+            })
+
+        //check
+        if (errTemp) {
+            console.log(errTemp)
+            console.log(`token`, token)
+            console.log(`Failed to delete key`)
+            return Promise.reject(`Failed to delete key`)
+        }
+
+        //bbb 待加入創建usersRecs儲存使用者登出紀錄
+
+        //bbb 待加入通知程序(訂閱者,監聽器)之使用者登出訊息
+
+        return true
+    }
+
+
+    //cleanTokens
+    let cleanTokens = async () => {
+
+        //tks
+        let tks = await woItems.tokens.select()
+        // console.log('tks', tks)
+
+        //tksDels
+        let tksDels = []
+        await pmSeries(tks, async (tk) => {
+
+            //checkTokenCore
+            let errTemp = null
+            await checkTokenCore(tk)
+                .catch((err) => {
+                    errTemp = err
+                })
+
+            //check
+            if (errTemp) {
+                tksDels.push(tk)
+            }
+
+        })
+
+        //check
+        if (size(tksDels) > 0) {
+
+            await pmSeries(tks, async (tk) => {
+
+                //del
+                await woItems.tokens.del({ token: tk.token })
+                    .catch(() => { })
+
+                //bbb 待加入創建usersRecs儲存使用者登出紀錄
+
+                //bbb 待加入通知程序(訂閱者,監聽器)之使用者登出訊息
+
+            })
+
+        }
+
+    }
+
+
+    //createUser
+    let createUser = async () => {
+    //bbb
+    }
+
+
+    //ModifyUser
+    let ModifyUser = async () => {
+    //bbb
+    }
+
+
+    //DeleteUser
+    let DeleteUser = async () => {
+    //bbb
+    }
+
+
+    //AuthUser
+    let AuthUser = async () => {
+    //bbb
+    }
+
+
+    //EmailUser
+    let EmailUser = async () => {
+    //bbb
+    }
+
+
+    //getUsersList
+    let getUsersList = async (token) => {
+        //bbb
+        // let rs = await woItems.users.select() //isActive為y或n都需要提供, 給前端編輯
+        // return rs
+    }
+
+
+    //p
+    let p = {
+        loginByAccountAndPassword,
+        checkToken,
+        refreshToken,
+        getUserByToken,
+        logOutByToken,
+        cleanTokens,
+        createUser,
+        ModifyUser,
+        DeleteUser,
+        AuthUser,
+        EmailUser,
+        getUsersList,
+    }
+
+
+    return p
+}
+
+
+export default proc

package/server/provideUsers.mjs

@@ -0,0 +1,68 @@
+import axios from 'axios'
+import ltdtpick from 'wsemi/src/ltdtpick.mjs'
+import genPm from 'wsemi/src/genPm.mjs'
+
+
+async function provideUsers(url, from, users) {
+    //url: 指權限伺服器提供的調整users網址, 例如 http://localhost:11007/syncAndReplaceUsers
+    //from: 指user來源
+
+    //pm
+    let pm = genPm()
+
+    //ks
+    let ks = [
+        'id',
+        'order',
+        'name',
+        'email',
+        'description',
+        'from',
+        'ruleGroupsIds',
+        'isAdmin',
+        'userId',
+        'timeCreate',
+        'userIdUpdate',
+        'timeUpdate',
+        'isActive',
+    ]
+
+    //ltdtpick
+    users = ltdtpick(users, ks)
+
+    //rin
+    let rin = {
+        from,
+        users,
+    }
+    // rin = JSON.stringify(rin)
+
+    //axios
+    await axios({
+        method: 'post',
+        url,
+        headers: { 'Content-Type': 'application/json; charset=utf-8' },
+        data: rin,
+    })
+        .then((res) => {
+            // console.log(res)
+            let r = {
+                msg: '成功傳輸Users清單',
+                res,
+            }
+            pm.resolve(r)
+        })
+        .catch((err) => {
+            // console.log(err)
+            let r = {
+                msg: '無法傳輸Users清單',
+                res: err,
+            }
+            pm.reject(r)
+        })
+
+    return pm
+}
+
+
+export default provideUsers