yingzios-platform-backend-shared 1.0.1

package/dist/internal-auth/decorators/caller.decorator.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Caller = void 0;
+const common_1 = require("@nestjs/common");
+/**
+ * 获取调用方身份（支持服务和用户两种类型）
+ *
+ * 用于 @UseEitherGuard(ServiceKeyGuard, JwtAuthGuard) 场景，
+ * 自动识别是服务调用还是用户调用。
+ *
+ * @example
+ * ```typescript
+ * @UseEitherGuard(ServiceKeyGuard, JwtAuthGuard)
+ * @Get('/internal/orders')
+ * getOrders(@Caller() caller: CallerIdentity) {
+ *   if (caller.type === 'service') {
+ *     // 服务调用，无用户上下文
+ *   } else {
+ *     console.log(caller.user.id);
+ *   }
+ * }
+ * ```
+ */
+exports.Caller = (0, common_1.createParamDecorator)((data, ctx) => {
+    const request = ctx.switchToHttp().getRequest();
+    // 检查用户身份（JWT 认证）
+    if (request.user) {
+        return {
+            type: 'user',
+            user: request.user,
+        };
+    }
+    // 服务调用（通过 ServiceKeyGuard）
+    return {
+        type: 'service',
+    };
+});

package/dist/internal-auth/decorators/index.d.ts

@@ -0,0 +1,3 @@
+export * from './use-either-guard.decorator';
+export * from './caller.decorator';
+//# sourceMappingURL=index.d.ts.map

package/dist/internal-auth/decorators/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/internal-auth/decorators/index.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC"}

package/dist/internal-auth/decorators/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./use-either-guard.decorator"), exports);
+__exportStar(require("./caller.decorator"), exports);

package/dist/internal-auth/decorators/use-either-guard.decorator.d.ts

@@ -0,0 +1,31 @@
+import { CanActivate, ExecutionContext, Type } from '@nestjs/common';
+import { ModuleRef, Reflector } from '@nestjs/core';
+export declare const EITHER_GUARDS_KEY = "either-guards";
+/**
+ * Either Guard 执行器
+ *
+ * 依次尝试每个 Guard，任一通过即可。
+ * 如果所有 Guard 都失败，抛出 UnauthorizedException。
+ */
+export declare class EitherGuardExecutor implements CanActivate {
+    private readonly reflector;
+    private readonly moduleRef;
+    constructor(reflector: Reflector, moduleRef: ModuleRef);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}
+/**
+ * 组合多个 Guard，实现 OR 逻辑（任一通过即可）
+ *
+ * @param guards - 要组合的 Guard 类列表
+ * @returns 装饰器
+ *
+ * @example
+ * ```typescript
+ * // 服务调用或用户调用都可以
+ * @UseEitherGuard(ServiceApiKeyGuard, JwtAuthGuard)
+ * @Get('/internal/orders')
+ * getOrders(@Caller() caller: ServiceIdentity | UserIdentity) {}
+ * ```
+ */
+export declare function UseEitherGuard(...guards: Type<CanActivate>[]): MethodDecorator & ClassDecorator;
+//# sourceMappingURL=use-either-guard.decorator.d.ts.map

package/dist/internal-auth/decorators/use-either-guard.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-either-guard.decorator.d.ts","sourceRoot":"","sources":["../../../src/internal-auth/decorators/use-either-guard.decorator.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAGhB,IAAI,EAGL,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEpD,eAAO,MAAM,iBAAiB,kBAAkB,CAAC;AAEjD;;;;;GAKG;AACH,qBACa,mBAAoB,YAAW,WAAW;IAEnD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS;gBADT,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,SAAS;IAGjC,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CAoC/D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAC5B,GAAG,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,GAC7B,eAAe,GAAG,cAAc,CAKlC"}

package/dist/internal-auth/decorators/use-either-guard.decorator.js

@@ -0,0 +1,79 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EitherGuardExecutor = exports.EITHER_GUARDS_KEY = void 0;
+exports.UseEitherGuard = UseEitherGuard;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+exports.EITHER_GUARDS_KEY = 'either-guards';
+/**
+ * Either Guard 执行器
+ *
+ * 依次尝试每个 Guard，任一通过即可。
+ * 如果所有 Guard 都失败，抛出 UnauthorizedException。
+ */
+let EitherGuardExecutor = class EitherGuardExecutor {
+    reflector;
+    moduleRef;
+    constructor(reflector, moduleRef) {
+        this.reflector = reflector;
+        this.moduleRef = moduleRef;
+    }
+    async canActivate(context) {
+        const guardClasses = this.reflector.get(exports.EITHER_GUARDS_KEY, context.getHandler());
+        if (!guardClasses || guardClasses.length === 0) {
+            // 没有配置任何 Guard，默认放行
+            return true;
+        }
+        const errors = [];
+        for (const GuardClass of guardClasses) {
+            try {
+                // 尝试从 DI 容器获取 Guard 实例
+                const guard = this.moduleRef.get(GuardClass, { strict: false });
+                const result = await guard.canActivate(context);
+                if (result) {
+                    // 任一 Guard 通过即可
+                    return true;
+                }
+            }
+            catch (error) {
+                // 记录错误信息，继续尝试下一个 Guard
+                errors.push(error instanceof Error ? error.message : 'Unknown auth error');
+                continue;
+            }
+        }
+        // 所有 Guard 都失败
+        throw new common_1.UnauthorizedException(`Authentication failed: ${errors.join(' | ')}`);
+    }
+};
+exports.EitherGuardExecutor = EitherGuardExecutor;
+exports.EitherGuardExecutor = EitherGuardExecutor = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.Reflector,
+        core_1.ModuleRef])
+], EitherGuardExecutor);
+/**
+ * 组合多个 Guard，实现 OR 逻辑（任一通过即可）
+ *
+ * @param guards - 要组合的 Guard 类列表
+ * @returns 装饰器
+ *
+ * @example
+ * ```typescript
+ * // 服务调用或用户调用都可以
+ * @UseEitherGuard(ServiceApiKeyGuard, JwtAuthGuard)
+ * @Get('/internal/orders')
+ * getOrders(@Caller() caller: ServiceIdentity | UserIdentity) {}
+ * ```
+ */
+function UseEitherGuard(...guards) {
+    return (0, common_1.applyDecorators)((0, common_1.SetMetadata)(exports.EITHER_GUARDS_KEY, guards), (0, common_1.UseGuards)(EitherGuardExecutor));
+}

package/dist/internal-auth/guards/index.d.ts

@@ -0,0 +1,2 @@
+export * from './service-key.guard';
+//# sourceMappingURL=index.d.ts.map

package/dist/internal-auth/guards/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/internal-auth/guards/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}

package/dist/internal-auth/guards/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./service-key.guard"), exports);

package/dist/internal-auth/guards/service-key.guard.d.ts

@@ -0,0 +1,36 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+/**
+ * Service Key 验证配置
+ */
+export interface ServiceKeyConfig {
+    /** 服务间共享的密钥 */
+    serviceKey: string;
+    /** Header 名称，默认 'x-service-key' */
+    headerName?: string;
+}
+export declare const SERVICE_KEY_CONFIG = "SERVICE_KEY_CONFIG";
+/**
+ * 服务间调用 Service Key 认证守卫
+ *
+ * 用于验证服务间调用的身份。服务 A 调用服务 B 时，
+ * 在请求头中携带 `X-Service-Key`，由本 Guard 验证。
+ *
+ * @example
+ * ```typescript
+ * // 仅允许服务调用
+ * @UseGuards(ServiceKeyGuard)
+ * @Get('/internal/config')
+ * getConfig() {}
+ * ```
+ */
+export declare class ServiceKeyGuard implements CanActivate {
+    private readonly reflector;
+    private readonly config?;
+    private readonly headerName;
+    private readonly serviceKey;
+    constructor(reflector: Reflector, config?: ServiceKeyConfig);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+    private extractServiceKey;
+}
+//# sourceMappingURL=service-key.guard.d.ts.map

package/dist/internal-auth/guards/service-key.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-key.guard.d.ts","sourceRoot":"","sources":["../../../src/internal-auth/guards/service-key.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAIjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAIzC;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,eAAe;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAEvD;;;;;;;;;;;;;GAaG;AACH,qBACa,eAAgB,YAAW,WAAW;IAK/C,OAAO,CAAC,QAAQ,CAAC,SAAS;IAG1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAP1B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAGjB,SAAS,EAAE,SAAS,EAGpB,MAAM,CAAC,EAAE,gBAAgB;IAQtC,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IA+B9D,OAAO,CAAC,iBAAiB;CAU1B"}

package/dist/internal-auth/guards/service-key.guard.js

@@ -0,0 +1,86 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServiceKeyGuard = exports.SERVICE_KEY_CONFIG = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const public_decorator_1 = require("../../jwt/decorators/public.decorator");
+exports.SERVICE_KEY_CONFIG = 'SERVICE_KEY_CONFIG';
+/**
+ * 服务间调用 Service Key 认证守卫
+ *
+ * 用于验证服务间调用的身份。服务 A 调用服务 B 时，
+ * 在请求头中携带 `X-Service-Key`，由本 Guard 验证。
+ *
+ * @example
+ * ```typescript
+ * // 仅允许服务调用
+ * @UseGuards(ServiceKeyGuard)
+ * @Get('/internal/config')
+ * getConfig() {}
+ * ```
+ */
+let ServiceKeyGuard = class ServiceKeyGuard {
+    reflector;
+    config;
+    headerName;
+    serviceKey;
+    constructor(reflector, config) {
+        this.reflector = reflector;
+        this.config = config;
+        this.headerName = config?.headerName || 'x-service-key';
+        // 优先使用注入的配置，否则从环境变量读取
+        this.serviceKey = config?.serviceKey || process.env.INTERNAL_SERVICE_KEY || '';
+        console.log('[ServiceKeyGuard] constructor, serviceKey:', this.serviceKey ? '***' : 'EMPTY');
+    }
+    async canActivate(context) {
+        // 检查路由是否标记为公开
+        const isPublic = this.reflector.getAllAndOverride(public_decorator_1.IS_PUBLIC_KEY, [
+            context.getHandler(),
+            context.getClass(),
+        ]);
+        if (isPublic) {
+            return true;
+        }
+        const request = context.switchToHttp().getRequest();
+        const serviceKey = this.extractServiceKey(request);
+        if (!serviceKey) {
+            throw new common_1.UnauthorizedException('Missing service key');
+        }
+        if (!this.serviceKey) {
+            throw new common_1.UnauthorizedException('Service key not configured');
+        }
+        if (serviceKey !== this.serviceKey) {
+            throw new common_1.UnauthorizedException('Invalid service key');
+        }
+        return true;
+    }
+    extractServiceKey(request) {
+        const serviceKey = request.headers[this.headerName];
+        if (typeof serviceKey === 'string') {
+            return serviceKey;
+        }
+        if (Array.isArray(serviceKey) && serviceKey.length > 0) {
+            return serviceKey[0];
+        }
+        return null;
+    }
+};
+exports.ServiceKeyGuard = ServiceKeyGuard;
+exports.ServiceKeyGuard = ServiceKeyGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Inject)(exports.SERVICE_KEY_CONFIG)),
+    __metadata("design:paramtypes", [core_1.Reflector, Object])
+], ServiceKeyGuard);

package/dist/internal-auth/index.d.ts

@@ -0,0 +1,43 @@
+/**
+ * 服务间调用认证模块
+ *
+ * 提供服务间调用的认证能力：
+ * - Service Key 认证：用于服务间调用（共享密钥）
+ * - JWT 透传：用于服务代用户调用（需用户上下文）
+ *
+ * @example
+ * ```typescript
+ * // 1. 在 AppModule 中注册
+ * import { InternalAuthModule, EnvService } from 'yz-web-server-shared';
+ *
+ * @Module({
+ *   imports: [
+ *     InternalAuthModule.forRootAsync({
+ *       useFactory: (envService: EnvService) => ({
+ *         serviceKey: envService.getItem('INTERNAL_SERVICE_KEY'),
+ *       }),
+ *       inject: [EnvService],
+ *     }),
+ *   ],
+ * })
+ * export class AppModule {}
+ *
+ * // 2. 在 Controller 中使用
+ * import { ServiceKeyGuard, UseEitherGuard, Caller } from 'yz-web-server-shared';
+ *
+ * // 仅允许服务调用
+ * @UseGuards(ServiceKeyGuard)
+ * @Get('/internal/config')
+ * getConfig() {}
+ *
+ * // 服务或用户调用都可以
+ * @UseEitherGuard(ServiceKeyGuard, JwtAuthGuard)
+ * @Get('/internal/orders')
+ * getOrders(@Caller() caller: CallerIdentity) {}
+ * ```
+ */
+export * from './internal-auth.module';
+export * from './guards';
+export * from './decorators';
+export * from './internal-http.service';
+//# sourceMappingURL=index.d.ts.map

package/dist/internal-auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/internal-auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAGH,cAAc,wBAAwB,CAAC;AAGvC,cAAc,UAAU,CAAC;AAGzB,cAAc,cAAc,CAAC;AAG7B,cAAc,yBAAyB,CAAC"}

package/dist/internal-auth/index.js

@@ -0,0 +1,62 @@
+"use strict";
+/**
+ * 服务间调用认证模块
+ *
+ * 提供服务间调用的认证能力：
+ * - Service Key 认证：用于服务间调用（共享密钥）
+ * - JWT 透传：用于服务代用户调用（需用户上下文）
+ *
+ * @example
+ * ```typescript
+ * // 1. 在 AppModule 中注册
+ * import { InternalAuthModule, EnvService } from 'yz-web-server-shared';
+ *
+ * @Module({
+ *   imports: [
+ *     InternalAuthModule.forRootAsync({
+ *       useFactory: (envService: EnvService) => ({
+ *         serviceKey: envService.getItem('INTERNAL_SERVICE_KEY'),
+ *       }),
+ *       inject: [EnvService],
+ *     }),
+ *   ],
+ * })
+ * export class AppModule {}
+ *
+ * // 2. 在 Controller 中使用
+ * import { ServiceKeyGuard, UseEitherGuard, Caller } from 'yz-web-server-shared';
+ *
+ * // 仅允许服务调用
+ * @UseGuards(ServiceKeyGuard)
+ * @Get('/internal/config')
+ * getConfig() {}
+ *
+ * // 服务或用户调用都可以
+ * @UseEitherGuard(ServiceKeyGuard, JwtAuthGuard)
+ * @Get('/internal/orders')
+ * getOrders(@Caller() caller: CallerIdentity) {}
+ * ```
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// Module
+__exportStar(require("./internal-auth.module"), exports);
+// Guards
+__exportStar(require("./guards"), exports);
+// Decorators
+__exportStar(require("./decorators"), exports);
+// HTTP Client
+__exportStar(require("./internal-http.service"), exports);

package/dist/internal-auth/internal-auth.module.d.ts

@@ -0,0 +1,62 @@
+import { DynamicModule } from '@nestjs/common';
+/**
+ * 服务间调用认证模块配置
+ */
+export interface InternalAuthModuleOptions {
+    /**
+     * 服务间共享的密钥
+     */
+    serviceKey?: string;
+    /**
+     * 请求超时时间（毫秒），默认 10000
+     */
+    timeout?: number;
+}
+/**
+ * 服务间调用认证模块
+ *
+ * 提供服务间调用的认证能力：
+ * - Service Key 认证（服务身份）
+ * - InternalHttpService（服务间 HTTP 调用）
+ *
+ * @example
+ * ```typescript
+ * // 在 AppModule 中注册
+ * @Module({
+ *   imports: [
+ *     InternalAuthModule.forRootAsync({
+ *       useFactory: (envService: EnvService) => ({
+ *         serviceKey: envService.getItem('INTERNAL_SERVICE_KEY'),
+ *       }),
+ *       inject: [EnvService],
+ *     }),
+ *   ],
+ * })
+ * export class AppModule {}
+ *
+ * // 在 Service 中使用
+ * @Injectable()
+ * export class MyService {
+ *   constructor(private readonly internalHttp: InternalHttpService) {}
+ *
+ *   async getPlatformConfig() {
+ *     return this.internalHttp.get('platform', '/portal/api/platform/internal/config');
+ *   }
+ * }
+ * ```
+ */
+export declare class InternalAuthModule {
+    /**
+     * 同步注册模块
+     */
+    static forRoot(options?: InternalAuthModuleOptions): DynamicModule;
+    /**
+     * 异步注册模块（支持依赖注入配置）
+     */
+    static forRootAsync(options: {
+        imports?: any[];
+        useFactory: (...args: any[]) => Promise<InternalAuthModuleOptions> | InternalAuthModuleOptions;
+        inject?: any[];
+    }): DynamicModule;
+}
+//# sourceMappingURL=internal-auth.module.d.ts.map

package/dist/internal-auth/internal-auth.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal-auth.module.d.ts","sourceRoot":"","sources":["../../src/internal-auth/internal-auth.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAoB,MAAM,gBAAgB,CAAC;AAajE;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,qBACa,kBAAkB;IAC7B;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,OAAO,GAAE,yBAA8B,GAAG,aAAa;IA6BtE;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE;QAC3B,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;QAChB,UAAU,EAAE,CACV,GAAG,IAAI,EAAE,GAAG,EAAE,KACX,OAAO,CAAC,yBAAyB,CAAC,GAAG,yBAAyB,CAAC;QACpE,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;KAChB,GAAG,aAAa;CAiClB"}

package/dist/internal-auth/internal-auth.module.js

@@ -0,0 +1,118 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var InternalAuthModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InternalAuthModule = void 0;
+const common_1 = require("@nestjs/common");
+const service_key_guard_1 = require("./guards/service-key.guard");
+const use_either_guard_decorator_1 = require("./decorators/use-either-guard.decorator");
+const internal_http_service_1 = require("./internal-http.service");
+/**
+ * 服务间调用认证模块
+ *
+ * 提供服务间调用的认证能力：
+ * - Service Key 认证（服务身份）
+ * - InternalHttpService（服务间 HTTP 调用）
+ *
+ * @example
+ * ```typescript
+ * // 在 AppModule 中注册
+ * @Module({
+ *   imports: [
+ *     InternalAuthModule.forRootAsync({
+ *       useFactory: (envService: EnvService) => ({
+ *         serviceKey: envService.getItem('INTERNAL_SERVICE_KEY'),
+ *       }),
+ *       inject: [EnvService],
+ *     }),
+ *   ],
+ * })
+ * export class AppModule {}
+ *
+ * // 在 Service 中使用
+ * @Injectable()
+ * export class MyService {
+ *   constructor(private readonly internalHttp: InternalHttpService) {}
+ *
+ *   async getPlatformConfig() {
+ *     return this.internalHttp.get('platform', '/portal/api/platform/internal/config');
+ *   }
+ * }
+ * ```
+ */
+let InternalAuthModule = InternalAuthModule_1 = class InternalAuthModule {
+    /**
+     * 同步注册模块
+     */
+    static forRoot(options = {}) {
+        const providers = [
+            service_key_guard_1.ServiceKeyGuard,
+            use_either_guard_decorator_1.EitherGuardExecutor,
+            internal_http_service_1.InternalHttpService,
+        ];
+        if (options.serviceKey) {
+            providers.push({
+                provide: service_key_guard_1.SERVICE_KEY_CONFIG,
+                useValue: { serviceKey: options.serviceKey },
+            });
+            providers.push({
+                provide: internal_http_service_1.INTERNAL_HTTP_CONFIG,
+                useValue: {
+                    serviceKey: options.serviceKey,
+                    timeout: options.timeout,
+                },
+            });
+        }
+        return {
+            module: InternalAuthModule_1,
+            providers,
+            exports: [service_key_guard_1.ServiceKeyGuard, use_either_guard_decorator_1.EitherGuardExecutor, internal_http_service_1.InternalHttpService],
+            global: true,
+        };
+    }
+    /**
+     * 异步注册模块（支持依赖注入配置）
+     */
+    static forRootAsync(options) {
+        return {
+            module: InternalAuthModule_1,
+            imports: options.imports || [],
+            providers: [
+                service_key_guard_1.ServiceKeyGuard,
+                use_either_guard_decorator_1.EitherGuardExecutor,
+                internal_http_service_1.InternalHttpService,
+                {
+                    provide: service_key_guard_1.SERVICE_KEY_CONFIG,
+                    useFactory: async (...args) => {
+                        const config = await options.useFactory(...args);
+                        console.log('[InternalAuthModule] SERVICE_KEY_CONFIG useFactory called, serviceKey:', config.serviceKey);
+                        return { serviceKey: config.serviceKey };
+                    },
+                    inject: options.inject || [],
+                },
+                {
+                    provide: internal_http_service_1.INTERNAL_HTTP_CONFIG,
+                    useFactory: async (...args) => {
+                        const config = await options.useFactory(...args);
+                        return {
+                            serviceKey: config.serviceKey,
+                            timeout: config.timeout,
+                        };
+                    },
+                    inject: options.inject || [],
+                },
+            ],
+            exports: [service_key_guard_1.ServiceKeyGuard, use_either_guard_decorator_1.EitherGuardExecutor, internal_http_service_1.InternalHttpService],
+            global: true,
+        };
+    }
+};
+exports.InternalAuthModule = InternalAuthModule;
+exports.InternalAuthModule = InternalAuthModule = InternalAuthModule_1 = __decorate([
+    (0, common_1.Module)({})
+], InternalAuthModule);