w-web-sso 1.0.0

package/src/schema/tables/users.mjs

@@ -0,0 +1,110 @@
+import map from 'lodash-es/map.js'
+import keys from 'lodash-es/keys.js'
+import genID from 'wsemi/src/genID.mjs'
+import dtmapping from 'wsemi/src/dtmapping.mjs'
+import dtpick from 'wsemi/src/dtpick.mjs'
+import nowms2str from 'wsemi/src/nowms2str.mjs'
+import now2strp from 'wsemi/src/now2strp.mjs'
+
+
+let keyTable = 'users'
+let tableNameCht = '使用者'
+let tableNameEng = 'Users'
+
+
+let settings = {
+    id: {
+        pk: true,
+        name: '主鍵',
+        type: 'STRING',
+    },
+    order: {
+        name: '順序',
+        type: 'INTEGER',
+    },
+    account: {
+        name: '帳號',
+        type: 'STRING',
+    },
+    password: {
+        name: '密碼', //須儲存加鹽雜湊處理後密碼
+        type: 'STRING',
+    },
+    name: {
+        name: '姓名',
+        type: 'STRING',
+    },
+    email: {
+        name: '電子郵件',
+        type: 'STRING',
+    },
+    description: {
+        name: '描述',
+        type: 'TEXT',
+    },
+    from: {
+        name: '來源',
+        type: 'STRING',
+    },
+    ruleGroupsIds: {
+        name: '所屬權限群組主鍵', //多主鍵用分號區隔
+        type: 'STRING',
+    },
+    redir: {
+        name: '登入後轉址',
+        type: 'STRING',
+    },
+    isAdmin: {
+        name: '是否為系統管理員',
+        type: 'STRING',
+    },
+    userId: {
+        name: '創建使用者主鍵',
+        type: 'STRING',
+    },
+    timeCreate: {
+        name: '創建時間',
+        type: 'STRING',
+    },
+    userIdUpdate: {
+        name: '最新變更使用者主鍵',
+        type: 'STRING',
+    },
+    timeUpdate: {
+        name: '更新時間',
+        type: 'STRING',
+    },
+    isActive: {
+        name: '是否有效',
+        type: 'STRING',
+    },
+}
+
+let funNew = (ndata = {}) => {
+    let o = dtmapping(ndata, keys(settings))
+    o.id = `${now2strp()}-${genID()}`
+    o.isAdmin = 'n'
+    o.userIdUpdate = o.userId
+    o.timeCreate = nowms2str()
+    o.timeUpdate = o.timeCreate
+    o.isActive = 'y'
+    return o
+}
+
+let funTest = () => {
+    let rs = []
+    return rs
+}
+
+let tab = {
+    keyTable,
+    tableNameCht,
+    tableNameEng,
+    settings,
+    funNew,
+    funTest,
+}
+
+
+export default tab
+

package/src/store/actions.mjs

@@ -0,0 +1 @@
+//非同步執行, 不需要

package/src/store/getters.mjs

@@ -0,0 +1 @@
+//不需要

package/src/store/index.mjs

@@ -0,0 +1,25 @@
+import Vue from 'vue'
+import Vuex from 'vuex'
+import { state, mutations } from './mutations.mjs'
+import * as getters from './getters.mjs'
+import * as actions from './actions.mjs'
+import * as types from './types.mjs'
+
+
+//use
+Vue.use(Vuex)
+
+let st = new Vuex.Store({
+    state,
+    mutations,
+    getters,
+    actions,
+    strict: true, //嚴格模式禁止修改state
+})
+
+//save to $store
+st.types = types
+Vue.prototype.$store = st
+// console.log('$store', st)
+
+export default st

package/src/store/mutations.mjs

@@ -0,0 +1,333 @@
+import each from 'lodash-es/each.js'
+import set from 'lodash-es/set.js'
+import * as types from './types.mjs'
+import ds from '../schema/index.mjs'
+
+
+//state, 全域狀態
+let state = {
+
+    hostname: `${window.location.origin}`,
+    webInfor: {},
+    connState: '連線中...',
+    syncState: false,
+    viewState: 'lists',
+    loading: false,
+    settings: {
+        leftDrawerWidth: 200,
+    },
+
+    heightApp: 0,
+    heightAppEff: 0,
+    heightToolbar: 60,
+
+    menu: {}, //初始值需為物件, 否則LayoutContent會取menu.key出錯
+
+    userToken: '',
+    user: {
+        id: '', //id-for-admin
+        name: '', //測試者
+        email: '', //admin@example.com
+        isAdmin: 'n',
+    },
+
+    lang: 'cht',
+    keyLangs: {
+
+        systemMessage: {
+            eng: 'System message',
+            cht: '系統確認訊息',
+        },
+        ok: {
+            eng: 'OK',
+            cht: '確認',
+        },
+        no: {
+            eng: 'No',
+            cht: '取消',
+        },
+        yes: {
+            eng: 'Yes',
+            cht: '確定',
+        },
+
+        empty: {
+            eng: 'Empty',
+            cht: '無',
+        },
+        waitingData: {
+            eng: 'Waiting data...',
+            cht: '等待數據中...',
+        },
+
+        isEditabled: {
+            eng: 'Editable',
+            cht: '是否編輯',
+        },
+        saveChanges: {
+            eng: `Save changes`,
+            cht: `儲存變更`,
+        },
+        from: {
+            eng: `From`,
+            cht: `來源`,
+        },
+        save: {
+            eng: `Save`,
+            cht: `儲存`,
+        },
+        close: {
+            eng: `Close`,
+            cht: `關閉`,
+        },
+        cancel: {
+            eng: `Cancel`,
+            cht: `取消`,
+        },
+        processing: {
+            eng: `Processing...`,
+            cht: `處理中請稍後...`,
+        },
+        anUnexpectedErrorOccurred: {
+            eng: `An unexpected error occurred, please contact the administrator`,
+            cht: `發生非預期錯誤，請洽管理員`,
+        },
+        unknow: {
+            eng: `Unknow`,
+            cht: `未知`,
+        },
+
+        account: {
+            eng: `Account`,
+            cht: `帳號`,
+        },
+        password: {
+            eng: `Password`,
+            cht: `密碼`,
+        },
+        username: {
+            eng: `Username`,
+            cht: `使用者姓名`,
+        },
+        email: {
+            eng: `Email`,
+            cht: `電子郵件`,
+        },
+        name: {
+            eng: `Name`,
+            cht: `名稱`,
+        },
+        description: {
+            eng: `Description`,
+            cht: `說明`,
+        },
+        noDescription: {
+            eng: `No description`,
+            cht: `無說明`,
+        },
+
+        login: {
+            eng: `Login`,
+            cht: `登入`,
+        },
+        logout: {
+            eng: `Logout`,
+            cht: `登出`,
+        },
+
+        failedLoginForNoWebKey: {
+            eng: `Can not get the web key`,
+            cht: `無有效站台唯一識別資訊`,
+        },
+        failedLoginForNoToken: {
+            eng: `Can not get the token`,
+            cht: `無有效金鑰`,
+        },
+        failedLoginForNoRedir: {
+            eng: `Can not get the url for redirection`,
+            cht: `無有效轉址`,
+        },
+        failedLoginForCatch: {
+            eng: `User account or password is incorrect`,
+            cht: `使用者帳密錯誤無法登入`,
+        },
+
+        userList: {
+            eng: `User list`,
+            cht: `使用者分類清單`,
+        },
+        addUser: {
+            eng: `Add user`,
+            cht: `新增使用者`,
+        },
+
+        editUser: {
+            eng: `Edit user`,
+            cht: `編修使用者`,
+        },
+        isAManager: {
+            eng: `Is a manager`,
+            cht: `是否為管理者`,
+        },
+        isActive: {
+            eng: 'Is active',
+            cht: '是否有效',
+        },
+        remark: {
+            eng: `Remark`,
+            cht: `備註`,
+        },
+        dayCreate: {
+            eng: 'Create day',
+            cht: '創建日期',
+        },
+        newUser: {
+            eng: `New user`,
+            cht: `新使用者`,
+        },
+        failedToAddUser: {
+            eng: `Failed to add the user`,
+            cht: `新增使用者失敗`,
+        },
+        successfulToAddUser: {
+            eng: `Add the user successfully`,
+            cht: `新增使用者成功`,
+        },
+        confirmToDeleteUser: {
+            eng: `Do you want to delete the user[{name}]?`,
+            cht: `確認是否刪除使用者`,
+        },
+        failedToDeleteUser: {
+            eng: `Failed to delete the user`,
+            cht: `刪除使用者失敗`,
+        },
+        successfulToDeleteUser: {
+            eng: `Delete the user successfully`,
+            cht: `刪除使用者成功`,
+        },
+        cannotShowUserDetailsInViewMode: {
+            eng: `Can not show the user details in the view mode`,
+            cht: `非編輯模式無法查閱使用者詳細資訊`,
+        },
+
+        allDefaults: {
+            eng: `All defaults`,
+            cht: `全部項目預設值`,
+        },
+        show: {
+            eng: `Show`,
+            cht: `顯示`,
+        },
+        active: {
+            eng: `Active`,
+            cht: `啟用`,
+        },
+        showChildren: {
+            eng: `Show children`,
+            cht: `所屬顯示`,
+        },
+        hideChildren: {
+            eng: `Hide children`,
+            cht: `所屬不顯示`,
+        },
+        activateChildren: {
+            eng: `Activate children`,
+            cht: `所屬啟用`,
+        },
+        deactivateChildren: {
+            eng: `Deactivate children`,
+            cht: `所屬不啟用`,
+        },
+        isUsernameEmpty: {
+            eng: `Username is empty`,
+            cht: `使用者名稱不得為空`,
+        },
+        failedToSaveUser: {
+            eng: `Failed to save the user`,
+            cht: `變更使用者失敗`,
+        },
+        successfulToSaveUser: {
+            eng: `Save the user successfully`,
+            cht: `變更使用者成功`,
+        },
+
+    },
+    kpText: {},
+
+}
+
+//添加各資料表
+each(ds, (v, k) => {
+    state[k] = null //初始化null
+})
+
+//儲存至state
+export { state }
+
+//mutations, 同步執行
+export let mutations = {
+
+    [types.UpdateWebInfor] (state, webInfor) {
+        state.webInfor = webInfor
+    },
+
+    [types.UpdateLang] (state, lang) {
+        state.lang = lang
+    },
+
+    [types.UpdateKpText] (state, kpText) {
+        state.kpText = kpText
+    },
+
+    [types.UpdateConnState] (state, connState) {
+        state.connState = connState
+    },
+
+    [types.UpdateSyncState] (state, syncState) {
+        state.syncState = syncState
+    },
+
+    [types.UpdateLoading] (state, loading) {
+        state.loading = loading
+    },
+
+    [types.UpdateViewState] (state, viewState) {
+        state.viewState = viewState
+    },
+
+    [types.UpdateTableData] (state, msg) {
+        state[msg.tableName] = msg.data
+    },
+
+    [types.UpdateData] (state, msg) {
+        //msg.path內為存取路徑, 需使用set處理
+        // console.log('UpdateData msg', msg)
+        set(state, msg.path, msg.data)
+    },
+
+    [types.UpdateHeightApp] (state, heightApp) {
+        state.heightApp = heightApp
+    },
+
+    [types.UpdateHeightAppEff] (state, heightAppEff) {
+        state.heightAppEff = heightAppEff
+    },
+
+    [types.UpdateHeightToolbar] (state, heightToolbar) {
+        state.heightToolbar = heightToolbar
+    },
+
+    [types.UpdateMenu] (state, menu) {
+        state.menu = menu
+    },
+
+    [types.UpdateUserToken] (state, userToken) {
+        state.userToken = userToken
+    },
+
+    [types.UpdateUserSelf] (state, userSelf) {
+        state.userSelf = userSelf
+    },
+
+}
+

package/src/store/types.mjs

@@ -0,0 +1,15 @@
+export const UpdateWebInfor = 'UpdateWebInfor'
+export const UpdateLang = 'UpdateLang'
+export const UpdateKpText = 'UpdateKpText'
+export const UpdateConnState = 'UpdateConnState'
+export const UpdateSyncState = 'UpdateSyncState'
+export const UpdateLoading = 'UpdateLoading'
+export const UpdateViewState = 'UpdateViewState'
+export const UpdateTableData = 'UpdateTableData'
+export const UpdateData = 'UpdateData'
+export const UpdateHeightApp = 'UpdateHeightApp'
+export const UpdateHeightAppEff = 'UpdateHeightAppEff'
+export const UpdateHeightToolbar = 'UpdateHeightToolbar'
+export const UpdateMenu = 'UpdateMenu'
+export const UpdateUserToken = 'UpdateUserToken'
+export const UpdateUserSelf = 'UpdateUserSelf'

package/srv.mjs

@@ -0,0 +1,84 @@
+import WOrm from 'w-orm-mongodb/src/WOrmMongodb.mjs' //自行選擇引用ORM, 使用Mongodb測試
+import WWebSso from './server/WWebSso.mjs'
+import getSettings from './g.getSettings.mjs'
+
+
+//st
+let st = getSettings()
+
+let url = `mongodb://${st.dbUsername}:${st.dbPassword}@${st.dbIP}:${st.dbPort}` //使用Mongodb測試
+let db = st.dbName
+let opt = {
+
+    bCheckUser: false,
+    getUserById: null,
+    bExcludeWhenNotAdmin: false,
+
+    serverPort: 11007,
+    subfolder: '', //msso
+    urlRedirect: 'https://www.google.com/', //本機測試時得先編譯, 再瀏覽: http://localhost:11007/
+
+    webName: {
+        'eng': 'Single Sign-On System',
+        'cht': '使用者單一登入系統',
+    },
+    webDescription: {
+        'eng': 'A web service package for Single Sign-On.',
+        'cht': 'A web service package for Single Sign-On.',
+    },
+    webLogo: 'data:image/svg+xml;base64,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',
+    webBackgoundGradientColors: ['#FFE0B2', '#FFCC80', '#FFF59D', 'rgba(255, 224, 178, 0.5)', 'rgba(240, 220, 190, 0.7)'],
+    webKey: 'ksso',
+
+    salt: '{salt}',
+
+    timeExpired: 30, //min
+
+}
+
+let getUserByToken = async (token) => {
+    // return {} //測試無法登入
+    if (token === '{token-for-application}') { //提供外部應用系統作為存取使用者
+        return {
+            id: 'id-for-application',
+            name: 'application',
+            email: 'application@example.com',
+            isAdmin: 'y',
+        }
+    }
+    if (token === 'sys') { //開發階段w-ui-loginout自動給予browser使用者(且位於localhost)的token為sys
+        return {
+            id: 'id-for-admin',
+            name: 'tester',
+            email: 'admin@example.com', //mappingBy為email, 開發階段時會使用email找到所建置之使用者資料
+            isAdmin: 'y',
+        }
+    }
+    console.log('invalid token', token)
+    console.log('於生產環境時得加入SSO等驗證token機制')
+    return {}
+}
+
+let verifyBrowserUser = (user, caller) => {
+    console.log('verifyBrowserUser/user', user)
+    // return false //測試無法登入
+    console.log('於生產環境時得加入限制瀏覽器使用者身份機制')
+    return user.isAdmin === 'y' //測試僅系統管理者使用
+}
+
+let verifyAppUser = (user, caller) => {
+    console.log('verifyAppUser/user', user)
+    // return false //測試無法登入
+    console.log('於生產環境時得加入限制應用程式使用者身份機制')
+    return user.isAdmin === 'y' //測試僅系統管理者使用
+}
+
+//WWebSso
+let instWWebSso = WWebSso(WOrm, url, db, getUserByToken, verifyBrowserUser, verifyAppUser, opt)
+
+instWWebSso.on('error', (err) => {
+    console.log(err)
+})
+
+
+//node --experimental-modules srv.mjs

package/tableTags-web-sso.json

@@ -0,0 +1 @@
+{}

package/test/all.test.mjs

@@ -0,0 +1,10 @@
+import assert from 'assert'
+
+
+describe('all', function() {
+
+    it('test in localhost', function() {
+        assert.strict.deepEqual(1, 1)
+    })
+
+})

package/toolg/addVersion.mjs

@@ -0,0 +1,4 @@
+import addVersion from 'w-package-tools/src/addVersion.mjs'
+
+
+addVersion()

package/toolg/cleanFolder.mjs

@@ -0,0 +1,4 @@
+import cleanFolder from 'w-package-tools/src/cleanFolder.mjs'
+
+
+cleanFolder('docs')

package/toolg/gDistRollup.mjs

@@ -0,0 +1,36 @@
+// import rollupFiles from 'w-package-tools/src/rollupFiles.mjs'
+import rollupFile from 'w-package-tools/src/rollupFile.mjs' //因只有1檔案且不需刪除dsit故改用rollupFile
+
+
+let fdSrc = './server' //'./src'
+let fdTar = './dist'
+
+
+rollupFile({
+    // fns: ['WWebSso.mjs'],
+    fn: 'WWebSso.mjs',
+    fdSrc,
+    fdTar,
+    nameDistType: 'kebabCase',
+    globals: {
+        '@hapi/hapi': '@hapi/hapi',
+        '@hapi/inert': '@hapi/inert',
+        'path': 'path',
+        'fs': 'fs',
+        'events': 'events',
+        'stream': 'stream',
+        // 'form-data': 'FormData',
+        'crypto': 'crypto', //因crypto-js修改使用內建crypto方式, 會偵測nodejs並使用require內建的crypto, 故需剔除
+    },
+    external: [
+        '@hapi/hapi',
+        '@hapi/inert',
+        'path',
+        'fs',
+        'events',
+        'stream',
+        // 'form-data',
+        'crypto',
+    ],
+})
+

package/toolg/genEntry.mjs

@@ -0,0 +1,23 @@
+import path from 'path'
+import fs from 'fs'
+// import _ from 'lodash-es'
+import w from 'wsemi'
+
+
+let fdTar = './dist'
+let fnEntryIn = 'index.html'
+let fnEntryOut = 'index.tmp'
+let fpEntryIn = path.resolve(fdTar, fnEntryIn)
+let fpEntryOut = path.resolve(fdTar, fnEntryOut)
+
+//readFileSync
+let c = fs.readFileSync(fpEntryIn, 'utf8')
+
+//replace
+c = w.replace(c, '/msso/', '{sfd}/')
+
+//writeFileSync
+fs.writeFileSync(fpEntryOut, c, 'utf8')
+
+//unlinkSync
+fs.unlinkSync(fpEntryIn)

package/toolg/modifyReadme.mjs

@@ -0,0 +1,4 @@
+import modifyReadme from 'w-package-tools/src/modifyReadme.mjs'
+
+
+modifyReadme()

package/vue.config.js

@@ -0,0 +1,15 @@
+module.exports = {
+    lintOnSave: false, //禁止eslint-loader於編譯時檢查語法
+    devServer: {
+        proxy: {
+            '/api': {
+                target: 'http://localhost:11007',
+                pathRewrite: {
+                    '^/api': '/api'
+                },
+            },
+        }
+    },
+    // transpileDependencies: [''],
+    publicPath: process.env.NODE_ENV === 'production' ? '/msso/' : '/', //預先編譯至msso子目錄下, 待轉成模板, 並於伺服器啟動後依照設定檔取代
+}