w-web-sso 1.0.37 → 1.0.39

package/src/plugins/mUI.mjs

@@ -1,4 +1,5 @@
 import Vue from 'vue'
+import ot from 'dayjs'
 import min from 'lodash-es/min.js'
 import size from 'lodash-es/size.js'
 import take from 'lodash-es/take.js'
@@ -17,7 +18,6 @@ import dropRight from 'lodash-es/dropRight.js'
 import groupBy from 'lodash-es/groupBy.js'
 import sortBy from 'lodash-es/sortBy.js'
 import cloneDeep from 'lodash-es/cloneDeep.js'
-import cint from 'wsemi/src/cint.mjs'
 import delay from 'wsemi/src/delay.mjs'
 import isarr from 'wsemi/src/isarr.mjs'
 import isestr from 'wsemi/src/isestr.mjs'
@@ -25,6 +25,9 @@ import isfun from 'wsemi/src/isfun.mjs'
 import iseobj from 'wsemi/src/iseobj.mjs'
 import isearr from 'wsemi/src/isearr.mjs'
 import isEle from 'wsemi/src/isEle.mjs'
+import istimemsTZ from 'wsemi/src/istimemsTZ.mjs'
+import cstr from 'wsemi/src/cstr.mjs'
+import cint from 'wsemi/src/cint.mjs'
 import strleft from 'wsemi/src/strleft.mjs'
 import strdelleft from 'wsemi/src/strdelleft.mjs'
 import sep from 'wsemi/src/sep.mjs'
@@ -34,27 +37,49 @@ import haskey from 'wsemi/src/haskey.mjs'
 import genPm from 'wsemi/src/genPm.mjs'
 import pmSeries from 'wsemi/src/pmSeries.mjs'
 import waitFun from 'wsemi/src/waitFun.mjs'
-import browserView from 'wsemi/src/browserView.mjs'
 import arrHas from 'wsemi/src/arrHas.mjs'
 import arrSort from 'wsemi/src/arrSort.mjs'
 import arrInsert from 'wsemi/src/arrInsert.mjs'
 import replace from 'wsemi/src/replace.mjs'
 import timemsTZ2past from 'wsemi/src/timemsTZ2past.mjs'
 import convertToTree from 'wsemi/src/convertToTree.mjs'
-// import WUiDwload from 'w-ui-dwload/src/WUiDwload.mjs'
 
 
 let vo = Vue.prototype
 
 
+let kpFallback = {
+    csIng: {
+        eng: 'Connecting...',
+        cht: '連線中...',
+    },
+    csLogin: {
+        eng: 'Logged in',
+        cht: '已登入',
+    },
+    csLogout: {
+        eng: 'Logged out',
+        cht: '已登出',
+    },
+    csErrConn: {
+        eng: 'Unable to connect',
+        cht: '無法連線',
+    },
+    csErrLogin: {
+        eng: 'Login denied',
+        cht: '拒絕登入',
+    },
+}
+
+
 function setVo(vObj) {
     vo = vObj
 }
 
 
-// function updateConnState(connState) {
-//     vo.$store.commit(vo.$store.types.UpdateConnState, connState)
-// }
+function updateConnState(connState) {
+    vo.$store.commit(vo.$store.types.UpdateConnState, connState)
+}
 
 
 function updateLoading(loading) {
@@ -108,16 +133,19 @@ function validLang(lang) {
 function getLang() {
     let lang = ''
 
-    //from window
+    //from URL ?lang= (轉址攜帶語系時最優先，例如登入後 redirect 帶當前語系)
     if (!isestr(lang)) {
-        let _lang = get(window, '___pmwsso___.language', '')
-        // console.log('_lang(from window)', _lang)
-        if (isestr(_lang)) {
-            lang = validLang(_lang) //有可能取到未取代前模板符號
+        try {
+            let _lang = new URLSearchParams(window.location.search).get('lang') || ''
+            // console.log('_lang(from url)', _lang)
+            if (isestr(_lang)) {
+                lang = validLang(_lang)
+            }
         }
+        catch (err) {}
     }
 
-    //from store
+    //from store (使用者當下選的，或 App.vue beforeMount 已設定)
     if (!isestr(lang)) {
         let _lang = get(vo, '$store.state.lang', '')
         // console.log('_lang(from store)', _lang)
@@ -126,10 +154,18 @@ function getLang() {
         }
     }
 
-    //return
+    //from window (server 預設語系，fallback)
     if (!isestr(lang)) {
-        return 'eng'
+        let _lang = get(window, '___pmwsso___.language', '')
+        // console.log('_lang(from window)', _lang)
+        if (isestr(_lang)) {
+            lang = validLang(_lang) //有可能取到未取代前模板符號
+        }
     }
+
+    //validLang
+    lang = validLang(lang) //有可能給予非預期lang
+
     return lang
 }
 
@@ -141,9 +177,7 @@ function setLang(lang = null, from = '') {
     if (!isestr(lang)) {
         lang = getLang()
     }
-    else {
-        lang = validLang(lang)
-    }
+    lang = validLang(lang)
     // console.log('get lang', lang)
 
     //check, 若有變更才commit
@@ -181,6 +215,11 @@ function getKpText(key) {
 
     //t
     let t = get(kpText, key, '')
+    if (!isestr(t)) {
+        // fallback: 後端語系尚未載入時使用預設值
+        let lang = getLang()
+        t = get(kpFallback, `${key}.${lang}`, '')
+    }
     if (!isestr(t)) {
         t = key
     }
@@ -189,16 +228,20 @@ function getKpText(key) {
 }
 
 
-function gv(o, k, cv = null) {
-    let r = get(o, k, '')
-    if (!isestr(r)) {
-        let def = getKpText('empty')
-        return def
-    }
-    if (isfun(cv)) {
-        r = cv(r)
+//getKpTextErr: 錯誤訊息專用翻譯 — 先 getKpText(key) 取得模板, 再插值密碼政策值 (minLength / maxLength /
+//consecutiveCharsMinMatch 來自 webInfor.passwordPolicyInfo, 即時反映 settings). 供「錯誤 reject key」顯示用:
+//多數錯誤 key 無模板變數 (replace 為 no-op); 僅密碼政策 key (userPassword_keyLim*) 含 {minLength} 等需插值.
+//設計: 後端一律 reject key 字串 (msg-key 契約), 前端統一以 $tErr(key) 翻譯+插值顯示.
+function getKpTextErr(key) {
+    let t = getKpText(key)
+    if (!isestr(t)) {
+        return t
     }
-    return r
+    let p = get(vo, '$store.state.webInfor.passwordPolicyInfo', {})
+    t = t.replace('{minLength}', get(p, 'minLength', ''))
+    t = t.replace('{maxLength}', get(p, 'maxLength', ''))
+    t = t.replace('{consecutiveCharsMinMatch}', get(p, 'consecutiveCharsMinMatch', ''))
+    return t
 }
 
 
@@ -287,21 +330,23 @@ function getUrlView() {
 }
 
 
-function goUrl(url, token) {
+function goUrl(url, token, lang) {
 
-    //replace
+    //replace {token}
     url = url.replaceAll('{token}', token)
 
+    //replace {lang} 佔位符（若 redir 模板顯式包含）
+    if (isestr(lang)) {
+        url = url.replaceAll('{lang}', lang)
+    }
+
+    //自動 append &lang= 給轉址後的系統作為依據（已含 lang 參數則不覆寫）
+    if (isestr(lang) && !/[?&]lang=/.test(url)) {
+        let sep = url.includes('?') ? '&' : '?'
+        url = `${url}${sep}lang=${encodeURIComponent(lang)}`
+    }
+
     //href
-    // if (isDev()) {
-    //     console.log('10s後重導至:', url)
-    //     setTimeout(() => {
-    //         window.location.href = url
-    //     }, 10 * 1000)
-    // }
-    // else {
-    //     window.location.href = url
-    // }
     window.location.href = url
 
 }
@@ -322,10 +367,10 @@ function login(account, password, opt = {}) {
     //pm
     let pm = genPm()
 
-    async function core() {
+    //hideLoading, 結束預設隱藏loading, 只有當成功登入要轉址時不隱藏loading, 其他成功或失敗都要隱藏
+    let hideLoadingForEnd = true
 
-        //show loading
-        updateLoading(true)
+    let core = async() => {
 
         //delay
         await delay(1000)
@@ -342,11 +387,15 @@ function login(account, password, opt = {}) {
             //reject
             pm.reject('invalid $keyLS')
 
+            //結束後隱藏loading
+            hideLoadingForEnd = true
+
             return
         }
 
-        //loginByAccountAndPassword
-        let u = await vo.$fapi.loginByAccountAndPassword(account, password)
+        //loginByAccountAndPassword (帶 lang, 後端 reject { key, msg } 之 msg 依 lang 翻譯)
+        let langLogin = get(vo, '$store.state.lang', 'eng')
+        let u = await vo.$fapi.loginByAccountAndPassword(langLogin, account, password)
         // console.log('u', u)
 
         //key
@@ -363,6 +412,9 @@ function login(account, password, opt = {}) {
             //reject
             pm.reject('invalid user')
 
+            //結束後隱藏loading
+            hideLoadingForEnd = true
+
             return
         }
 
@@ -379,6 +431,9 @@ function login(account, password, opt = {}) {
             //reject
             pm.reject('invalid token')
 
+            //結束後隱藏loading
+            hideLoadingForEnd = true
+
             return
         }
 
@@ -389,6 +444,13 @@ function login(account, password, opt = {}) {
         updateUserToken(token)
         updateUserSelf(u)
 
+        //強制變更密碼模式: 不論原本是否要 useRedir, 一律不走 redir,
+        //並把 view 切到 'user' 確保 PageUser 進入強制變更模式 (見 PageUser.mounted)
+        if (get(u, 'isForceChangePw', '') === 'y') {
+            useRedir = false
+            updateViewState('user')
+        }
+
         //useRedir
         if (useRedir) {
 
@@ -405,43 +467,57 @@ function login(account, password, opt = {}) {
                 //reject
                 pm.reject('invalid redir')
 
+                //結束後隱藏loading
+                hideLoadingForEnd = true
+
                 return
             }
 
-            //goUrl
-            goUrl(redir, token)
-            // console.log('goUrl', redir, 'token', token)
+            //goUrl，帶上當前 lang 讓轉址後系統能讀 ?lang=
+            let lang = get(vo, '$store.state.lang', '')
+            goUrl(redir, token, lang)
+            // console.log('goUrl', redir, 'token', token, 'lang', lang)
 
             //resolve
             pm.resolve('redir')
 
-            // //hide loading, 登入成功不能先隱藏loading, 開始轉址到轉跳會有一段時間, 持續顯示loading不隱藏, 避免使用者誤會登入失敗
-            // updateLoading(false)
+            //結束後不隱藏loading, 因開始轉址到轉跳會有一段時間, 持續顯示loading不隱藏, 避免使用者誤會登入失敗
+            hideLoadingForEnd = false
 
             return
         }
 
-        //hide loading, 登入成功後且非轉址時隱藏loading
-        updateLoading(false)
+        //結束後隱藏loading, 登入成功後且非轉址時隱藏loading
+        hideLoadingForEnd = true
 
         //resolve
         pm.resolve('done')
 
     }
 
+    //show loading
+    updateLoading(true)
+
     //core
     core()
         .catch((err) => {
             // console.log('login', err)
 
-            //alert
-            vo.$alert(vo.$t('failedLoginForCatch'), { type: 'error' })
+            // //alert
+            // vo.$alert(vo.$t('failedLoginForCatch'), { type: 'error' })
 
             //reject
             pm.reject(err)
 
-            //hide loading, 登入失敗後隱藏loading
-            updateLoading(false)
+        })
+        .finally(() => {
+
+            if (hideLoadingForEnd) {
+
+                //hide loading, 登入失敗後隱藏loading
+                updateLoading(false)
+
+            }
 
         })
 
@@ -467,7 +543,7 @@ function autoLogin(opt = {}) {
     //pm
     let pm = genPm()
 
-    async function core() {
+    let core = async () => {
         let errTemp = null
 
         //waitFun, 因須使用webKey故須等待syncState
@@ -504,29 +580,33 @@ function autoLogin(opt = {}) {
 
         //check
         if (!isestr(token)) {
-            // console.log('invalid token')
+            // console.log('no token')
 
             //reject
-            pm.reject('invalid token')
+            pm.reject('no token')
 
             return
         }
 
         //checkToken
-        await vo.$fapi.checkToken(token) //斷線有重試機制, resolve僅回傳true, reject代表無效token或檢測token發生錯誤
+        let b = false
+        await vo.$fapi.checkToken(token) //斷線有重試機制; 後端 wrapper 在過期/無效時一律 reject, 僅在有效時 resolve(true), 不會 resolve(false)
+            .then((res) => {
+                b = res === true
+            })
             .catch((err) => {
                 // console.log('checkToken catch', err)
                 errTemp = err
             })
 
         //check
-        if (errTemp) {
+        if (errTemp || !b) {
 
             //setItem, 清空token
             await localStorage.setItem(key, '')
 
             //reject
-            pm.reject('token error')
+            pm.reject(errTemp ? 'token error' : 'token expired')
 
             return
         }
@@ -549,6 +629,13 @@ function autoLogin(opt = {}) {
         updateUserToken(token)
         updateUserSelf(u)
 
+        //強制變更密碼模式: 不論原本是否要 useRedir, 一律不走 redir,
+        //並把 view 切到 'user' 確保 PageUser 進入強制變更模式 (見 PageUser.mounted)
+        if (get(u, 'isForceChangePw', '') === 'y') {
+            useRedir = false
+            updateViewState('user')
+        }
+
         //useRedir
         if (useRedir) {
 
@@ -569,9 +656,10 @@ function autoLogin(opt = {}) {
                 return
             }
 
-            //goUrl
-            goUrl(redir, token)
-            // console.log('goUrl', redir, 'token', token)
+            //goUrl，帶上當前 lang 讓轉址後系統能讀 ?lang=
+            let lang = get(vo, '$store.state.lang', '')
+            goUrl(redir, token, lang)
+            // console.log('goUrl', redir, 'token', token, 'lang', lang)
 
             //resolve
             pm.resolve('redir')
@@ -589,8 +677,8 @@ function autoLogin(opt = {}) {
         .catch((err) => {
             // console.log('autoLogin', err)
 
-            //alert
-            vo.$alert(vo.$t('failedLoginForCatch'), { type: 'error' })
+            // //alert
+            // vo.$alert(vo.$t('failedLoginForCatch'), { type: 'error' })
 
             //reject
             pm.reject(err)
@@ -672,11 +760,40 @@ function getIcon(icon) {
 }
 
 
+function gv(o, k, cv = null) {
+    let r = get(o, k, '')
+    if (!isestr(r)) {
+        let def = getKpText('empty')
+        return def
+    }
+    if (isfun(cv)) {
+        r = cv(r)
+    }
+    return r
+}
+
+
+function getTimemsTZ(v) {
+    if (istimemsTZ(v)) {
+        return ot(v).format('YYYY-MM-DDTHH:mm:ss.SSSZ')
+    }
+    return ''
+}
+
+
+function getTimeMin(v, def) {
+    if (istimemsTZ(v)) {
+        return ot(v).format('YYYY-MM-DD HH:mm')
+    }
+    return def
+}
+
+
 let mUI = {
 
     setVo,
 
-    // updateConnState,
+    updateConnState,
     updateLoading,
     updateViewState,
     updateUserToken,
@@ -685,8 +802,8 @@ let mUI = {
 
     setLang,
     getKpText,
+    getKpTextErr,
 
-    gv,
     syncHeight,
 
     // waitData,
@@ -701,6 +818,11 @@ let mUI = {
 
     getIcon,
 
+    gv,
+    getTimemsTZ,
+    getTimeMin,
+    cstr,
+
 }
 
 

package/src/schema/tables/users.mjs

@@ -54,6 +54,10 @@ let settings = {
         name: '是否為系統管理員',
         type: 'STRING',
     },
+    tokenVerify: {
+        name: '註冊後驗證用token',
+        type: 'STRING',
+    },
     timeVerified: {
         name: '驗證時間',
         type: 'STRING',
@@ -66,6 +70,10 @@ let settings = {
         name: '封鎖時間',
         type: 'STRING',
     },
+    isForceChangePw: { //僅'y'或'n'
+        name: '是否須強制變更密碼',
+        type: 'STRING',
+    },
     userId: {
         name: '創建使用者主鍵',
         type: 'STRING',
@@ -82,7 +90,7 @@ let settings = {
         name: '更新時間',
         type: 'STRING',
     },
-    isActive: {
+    isActive: { //僅'y'或'n'
         name: '是否有效',
         type: 'STRING',
     },
@@ -96,6 +104,9 @@ let funNew = (ndata = {}) => {
     o.userIdUpdate = o.userId
     o.timeUpdate = o.timeCreate
     o.isActive = 'y'
+    if (o.isForceChangePw !== 'y' && o.isForceChangePw !== 'n') {
+        o.isForceChangePw = 'n'
+    }
     return o
 }
 

package/src/store/mutations.mjs

@@ -26,7 +26,7 @@ let state = {
     userToken: '',
     userSelf: {},
 
-    lang: 'cht', //'eng', 'cht'
+    lang: 'eng', //'eng', 'cht'
     kpText: {}, //一定要放在vuex內, 否則無法用broadcast驅動變更語系文字
 
 }
@@ -54,9 +54,9 @@ export let mutations = {
         state.kpText = kpText
     },
 
-    // [types.UpdateConnState] (state, connState) {
-    //     state.connState = connState
-    // },
+    [types.UpdateConnState] (state, connState) {
+        state.connState = connState
+    },
 
     [types.UpdateSyncState] (state, syncState) {
         state.syncState = syncState

package/src/store/types.mjs

@@ -1,7 +1,7 @@
 export const UpdateWebInfor = 'UpdateWebInfor'
 export const UpdateLang = 'UpdateLang'
 export const UpdateKpText = 'UpdateKpText'
-// export const UpdateConnState = 'UpdateConnState'
+export const UpdateConnState = 'UpdateConnState'
 export const UpdateSyncState = 'UpdateSyncState'
 export const UpdateLoading = 'UpdateLoading'
 export const UpdateViewState = 'UpdateViewState'

package/srv.mjs

@@ -8,10 +8,10 @@ let st = getSettings()
 
 let url = st.dbUrl
 let db = st.dbName
-let pathSettings = './settings.json'
+let pathSettings = process.argv[2] || './settings.json'
 
 //WWebSso
-let instWWebSso = WWebSso(WOrm, url, db, pathSettings)
+let instWWebSso = WWebSso(WOrm, url, db, pathSettings, st)
 
 instWWebSso.on('error', (err) => {
     console.log(err)
@@ -43,3 +43,22 @@ instWWebSso.on('error', (err) => {
 //http://localhost:11007/api/getSsoUserInfor?token=token-for-app&key=token&value=token-for-app => 無使用者id-for-app, 要能取得虛擬使用者資訊
 
 //node srv.mjs
+
+
+let t=`
+
+密碼長度需在8~16碼，且須符合以下5項規則：
+
+(1)有0~9的數字
+
+(2)有英文字母(不限大小寫)
+
+(3)有特殊字元(非大小寫字母及數字，例如以下字元： ! @ # $ ^ & * ( ) - + < > ? …等字元)
+
+(4)不可和駭客最常猜測複雜密碼相同，例如1qaz@WSX、P@ssw0rd等
+
+(5)不可包含與自己姓名代號相同之2個以上之連續字元(例如姓名代號123456，密碼不可包含12、23、34、45、56)
+
+(6)不可包含「\」
+
+`

package/dist/css/app.beea8385.css

@@ -1 +0,0 @@
-.pgc-rotate[data-v-5b4e8bee]{width:100%;height:100%;margin:auto;position:absolute;top:0;bottom:0;left:0;right:0;z-index:1;-webkit-transition:all .6s ease-in-out;transition:all .6s ease-in-out;-webkit-animation:progress-circular-rotate-5b4e8bee 1.4s linear infinite;animation:progress-circular-rotate-5b4e8bee 1.4s linear infinite;-webkit-transform-origin:center center;transform-origin:center center}.pgc-dash[data-v-5b4e8bee]{-webkit-animation:progress-circular-dash-5b4e8bee 1.4s ease-in-out infinite;animation:progress-circular-dash-5b4e8bee 1.4s ease-in-out infinite;stroke-linecap:round;stroke-dasharray:80,200;stroke-dashoffset:0px}@-webkit-keyframes progress-circular-dash-5b4e8bee{0%{stroke-dasharray:1,200;stroke-dashoffset:0px}50%{stroke-dasharray:100,200;stroke-dashoffset:-15px}to{stroke-dasharray:100,200;stroke-dashoffset:-124px}}@keyframes progress-circular-dash-5b4e8bee{0%{stroke-dasharray:1,200;stroke-dashoffset:0px}50%{stroke-dasharray:100,200;stroke-dashoffset:-15px}to{stroke-dasharray:100,200;stroke-dashoffset:-124px}}@-webkit-keyframes progress-circular-rotate-5b4e8bee{to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}@keyframes progress-circular-rotate-5b4e8bee{to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}.WPopperFix[data-popper-reference-hidden][data-v-14d6bcb4]{visibility:hidden;pointer-events:none}.fade-enter-active[data-v-a0c94508],.fade-leave-active[data-v-a0c94508]{-webkit-transition:all .3s;transition:all .3s}.fade-enter[data-v-a0c94508],.fade-leave-to[data-v-a0c94508]{-webkit-transform:scaleX(0);transform:scaleX(0)}.fade-enter-to[data-v-a0c94508],.fade-leave[data-v-a0c94508]{-webkit-transform:scaleX(100%);transform:scaleX(100%)}.sb[data-v-6ce5bdb1]{-webkit-transition:opacity .3s;transition:opacity .3s;scrollbar-width:thin;scrollbar-color:rgba(0,0,0,.3) transparent}.sb[data-v-6ce5bdb1]::-webkit-scrollbar{width:8px;height:8px}.sb[data-v-6ce5bdb1]::-webkit-scrollbar-track{background:transparent}.sb[data-v-6ce5bdb1]::-webkit-scrollbar-thumb{background:rgba(0,0,0,.3);border-radius:20px;border:3px solid transparent}.ts[data-v-9a483320]{-webkit-transition:all .3s cubic-bezier(.25,.8,.5,1);transition:all .3s cubic-bezier(.25,.8,.5,1)}.bs[data-v-9a483320]{-webkit-box-shadow:0 8px 2px -8px rgba(0,0,0,.3),0 16px 24px 2px rgba(0,0,0,.3),0 6px 30px 5px rgba(0,0,0,.3);box-shadow:0 8px 2px -8px rgba(0,0,0,.3),0 16px 24px 2px rgba(0,0,0,.3),0 6px 30px 5px rgba(0,0,0,.3)}@media (min-width:640px){.sm\:grid-cols-2[data-v-99dfb112]{grid-template-columns:repeat(2,minmax(0,1fr))}}@media (min-width:1024px){.lg\:grid-cols-1[data-v-99dfb112]{grid-template-columns:repeat(1,minmax(0,1fr))}.lg\:grid-cols-4[data-v-99dfb112]{grid-template-columns:repeat(4,minmax(0,1fr))}}.status-danger[data-v-0620fb52]{background-color:#fef2f2;color:#b91c1c;border:1px solid #fecaca}.status-warning[data-v-0620fb52]{background-color:#fffbeb;color:#b45309;border:1px solid #fde68a}.status-success[data-v-0620fb52]{background-color:#f0fdf4;color:#15803d;border:1px solid #bbf7d0}.status-info[data-v-0620fb52]{background-color:#f8fafc;color:#475569;border:1px solid #e2e8f0}.ts[data-v-b624c7f8]{-webkit-transition:all .3s;transition:all .3s}.bs[data-v-b624c7f8]{-webkit-box-shadow:0 2px 4px -1px rgba(0,0,0,.2),0 4px 5px 0 rgba(0,0,0,.14),0 1px 10px 0 rgba(0,0,0,.12);box-shadow:0 2px 4px -1px rgba(0,0,0,.2),0 4px 5px 0 rgba(0,0,0,.14),0 1px 10px 0 rgba(0,0,0,.12)}body,html{font-family:微軟正黑體,Microsoft JhengHei,MicrosoftJhengHeiRegular,Avenir,Helvetica,Arial,sans-serif;overflow-y:hidden}a,button,div,input,p,pre,span,textarea{font-family:inherit}