北斗启航科技教育平台登录系统
This commit is contained in:
396
app/controller/verify.js
Normal file
396
app/controller/verify.js
Normal file
@@ -0,0 +1,396 @@
|
||||
'use strict';
|
||||
|
||||
const Controller = require('../core/base_controller');
|
||||
|
||||
const fileName = "verify";
|
||||
|
||||
const redisType = {
|
||||
"B": "db0",
|
||||
"C": "db1",
|
||||
"M": "db2",
|
||||
"T": "db5",
|
||||
"E": "db6",
|
||||
"A": "db7"
|
||||
};
|
||||
|
||||
const modelType = {
|
||||
"B": "bSide",
|
||||
"C": "cSide",
|
||||
"M": "insiders",
|
||||
"T": "contest",
|
||||
"E": "exam",
|
||||
"A": "examManager"
|
||||
};
|
||||
|
||||
const checkUid = async (thisPlace) => {
|
||||
const ctx = thisPlace.ctx;
|
||||
const uid = ctx.request.body.uid;
|
||||
const token = ctx.request.header.authorization;
|
||||
const redis = ctx.app.redis;
|
||||
let rdmcode;
|
||||
if (!uid) {
|
||||
let allRedis = [];
|
||||
Object.entries(redisType).forEach(([key, value]) => {
|
||||
allRedis.push(redis.get(value).get(token));
|
||||
});
|
||||
const [buser, cuser, muser, tuser, euser, auser] = await Promise.all(allRedis);
|
||||
rdmcode = buser || cuser || muser || tuser || euser || auser;
|
||||
} else {
|
||||
let decryptUid = thisPlace.decryptRequest(uid).split('?')[0];
|
||||
const lastCode = decryptUid[decryptUid.length - 1];
|
||||
rdmcode = await redis.get(redisType[lastCode]).get(token);
|
||||
}
|
||||
if (!rdmcode) {
|
||||
return false;
|
||||
}
|
||||
return rdmcode;
|
||||
};
|
||||
|
||||
class VerifyController extends Controller {
|
||||
// 确定登录页面
|
||||
async toLogin() {
|
||||
const ctx = this.ctx;
|
||||
try {
|
||||
// 请求发出的源网址，适用于不同端用户登录不同域名网站
|
||||
const origin_url = ctx.request.header.origin;
|
||||
// 请求发出的具体网址，适用于不同端用户登录同一域名的网站
|
||||
// const { origin_url } = ctx.request.body;
|
||||
const result = await ctx.service.verify.toLogin(origin_url);
|
||||
if (result == "error") {
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
return;
|
||||
}
|
||||
if (result) {
|
||||
const data = { redirect: result.dataValues.login_url + '?client_id=' + result.dataValues.temporary_id };
|
||||
this.setResponse(ctx, 200, '跳转到登录页', "deconstruction", data);
|
||||
} else {
|
||||
this.setResponse(ctx, 404, '未找到登录页', "none");
|
||||
}
|
||||
} catch (error) {
|
||||
const blockName = fileName + "--" + "toLogin";
|
||||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
}
|
||||
}
|
||||
|
||||
// 确定登录状态
|
||||
async loginStatus() {
|
||||
const ctx = this.ctx;
|
||||
try {
|
||||
const body = ctx.request.body;
|
||||
const uid = this.decryptRequest(body.data).split('?')[0];
|
||||
const lastCode = uid[uid.length - 1];
|
||||
const status = await ctx.app.redis.get(redisType[lastCode]).get(uid);
|
||||
const client = await ctx.service.verify.loginClient(body.client_id);
|
||||
if (client == "error") {
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
return;
|
||||
}
|
||||
if (status !== null && client.dataValues.login_url == ctx.request.header.referer.split('?')[0] && client.dataValues.client_id == JSON.parse(status).clientId) {
|
||||
const timestamp = new Date().getTime();
|
||||
const serverType = ctx.service[modelType[lastCode]];
|
||||
await serverType.loginStatus(uid, 1);
|
||||
const data = {
|
||||
data: this.encryptRequest(uid + '?' + timestamp),
|
||||
access_token: JSON.parse(status).accessToken,
|
||||
refresh_token: JSON.parse(status).refreshToken,
|
||||
redirect: client.dataValues.client_url + '?' + body.data,
|
||||
};
|
||||
this.setResponse(ctx, 200, '已登录', "deconstruction", data);
|
||||
} else {
|
||||
const serverType = ctx.service[modelType[lastCode]];
|
||||
await serverType.loginStatus(uid, 0);
|
||||
this.setResponse(ctx, 404, '未登录', "none");
|
||||
}
|
||||
} catch (error) {
|
||||
const blockName = fileName + "--" + "loginStatus";
|
||||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
}
|
||||
}
|
||||
|
||||
// 退出登录
|
||||
async unLogin() {
|
||||
const ctx = this.ctx;
|
||||
try {
|
||||
let rdmcode = await checkUid(this);
|
||||
if (!rdmcode) {
|
||||
this.setResponse(ctx, 401, 'token过期或错误', "none");
|
||||
return;
|
||||
}
|
||||
const uid = JSON.parse(rdmcode).uid;
|
||||
const lastCode = uid[uid.length - 1];
|
||||
const serverType = ctx.service[modelType[lastCode]];
|
||||
if(modelType == 'B' || modelType == 'C' || modelType == 'M') await serverType.loginStatus(uid, 0);
|
||||
const redisDbType = redisType[lastCode];
|
||||
await ctx.app.redis.get(redisDbType).del(ctx.request.body.access_token);
|
||||
await ctx.app.redis.get(redisDbType).del(ctx.request.body.refresh_token);
|
||||
await ctx.app.redis.get(redisDbType).del(uid);
|
||||
this.setResponse(ctx, 200, 'unLogin', "none");
|
||||
} catch (error) {
|
||||
const blockName = fileName + "--" + "unLogin";
|
||||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
}
|
||||
}
|
||||
|
||||
// 获取 token
|
||||
async getToken() {
|
||||
const ctx = this.ctx;
|
||||
try {
|
||||
const body = ctx.request.body;
|
||||
let code = body.code, type = this.decryptRequest(body.type), codeObj, typeMark = type, accessToken, refreshToken;
|
||||
if (type === 'code') {
|
||||
codeObj = await ctx.app.redis.get('db3').get(code);
|
||||
if (!codeObj) {
|
||||
typeMark = 'passLogin';
|
||||
code = this.decryptRequest(code).split('?')[0];
|
||||
const redisDbType = redisType[code[code.length - 1]];
|
||||
codeObj = await ctx.app.redis.get(redisDbType).get(code);
|
||||
if (!codeObj) return codeObj;
|
||||
accessToken = JSON.parse(codeObj).accessToken;
|
||||
refreshToken = JSON.parse(codeObj).refreshToken;
|
||||
codeObj = await ctx.app.redis.get(redisDbType).get(refreshToken);
|
||||
}
|
||||
} else {
|
||||
type = type.split('?')[0];
|
||||
const redisDbType = redisType[type[type.length - 1]];
|
||||
codeObj = await ctx.app.redis.get(redisDbType).get(code);
|
||||
}
|
||||
if (!codeObj) {
|
||||
this.setResponse(ctx, 402, '请重新登录', "none");
|
||||
} else {
|
||||
const client_id = JSON.parse(codeObj).clientId;
|
||||
const client = await ctx.service.verify.getToken(client_id);
|
||||
const timestamp = new Date().getTime();
|
||||
const origin_url = ctx.request.header.origin;
|
||||
if (client == "error") {
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
} else if (client && typeMark == "passLogin") {
|
||||
const data = {
|
||||
data: this.encryptRequest(JSON.parse(codeObj).uid + '?' + timestamp),
|
||||
access_token: accessToken,
|
||||
refresh_token: refreshToken,
|
||||
redirect: origin_url
|
||||
};
|
||||
this.setResponse(ctx, 200, '验证通过', "deconstruction", data);
|
||||
} else if (client && typeMark !== "passLogin") {
|
||||
const redisCode = { code, type };
|
||||
const result = await ctx.curl('http://127.0.0.1:' + ctx.app.server.address().port + '/user/token', {
|
||||
dataType: 'json',
|
||||
contentType: 'application/x-www-form-urlencoded',
|
||||
method: 'POST',
|
||||
timeout: 3000,
|
||||
data: {
|
||||
grant_type: 'authorization_code',
|
||||
code: JSON.stringify(redisCode),
|
||||
client_id: client.dataValues.client_id,
|
||||
client_secret: client.dataValues.client_secret,
|
||||
redirect_uri: 'http://127.0.0.1:' + ctx.app.server.address().port + '/getToken/',
|
||||
},
|
||||
});
|
||||
if (result.status == 200) {
|
||||
const data = {
|
||||
data: this.encryptRequest(result.data.access_token.uid + '?' + timestamp),
|
||||
access_token: result.data.access_token.token,
|
||||
refresh_token: result.data.refresh_token,
|
||||
redirect: client.dataValues.client_id == "insiders-manager" ? origin_url : client.dataValues.client_url
|
||||
}
|
||||
this.setResponse(ctx, 200, '验证通过', "deconstruction", data);
|
||||
} else {
|
||||
this.setResponse(ctx, 402, '请重新登录', "none");
|
||||
}
|
||||
} else {
|
||||
this.setResponse(ctx, 402, '请重新登录', "none");
|
||||
}
|
||||
}
|
||||
} catch (error) {
|
||||
const blockName = fileName + "--" + "getToken";
|
||||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
}
|
||||
}
|
||||
|
||||
// 验证token
|
||||
async getMsg() {
|
||||
const { ctx } = this;
|
||||
try {
|
||||
// 客户端实现
|
||||
// 访问 /user/token 端口验证 accessToken，获取用户信息
|
||||
let accessToken = {
|
||||
access_token: ctx.request.header.authorization,
|
||||
uid: this.decryptRequest(ctx.request.body.data).split('?')[0]
|
||||
};
|
||||
const result = await ctx.curl('http://127.0.0.1:' + ctx.app.server.address().port + '/user/authenticate', {
|
||||
dataType: 'json',
|
||||
contentType: 'application/x-www-form-urlencoded',
|
||||
method: 'POST',
|
||||
timeout: 3000,
|
||||
data: {
|
||||
status: 'success',
|
||||
access_token: JSON.stringify(accessToken)
|
||||
},
|
||||
});
|
||||
if (result.status == 200) {
|
||||
let uid = result.data.data.token.user.uid;
|
||||
let lastCode = uid[uid.length - 1];
|
||||
const userdata = await ctx.service[modelType[lastCode]].uidfinder(uid);
|
||||
if (userdata == "error") {
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
return;
|
||||
}
|
||||
const timestamp = new Date().getTime();
|
||||
const encryptData = this.encryptRequest(userdata.uid + '?' + timestamp);
|
||||
if (userdata) {
|
||||
const data = { data: encryptData };
|
||||
this.setResponse(ctx, 200, '验证通过', "deconstruction", data);
|
||||
} else {
|
||||
this.setResponse(ctx, 401, 'token错误或过期', "none");
|
||||
}
|
||||
} else {
|
||||
this.setResponse(ctx, 401, 'token错误或过期', "none");
|
||||
}
|
||||
} catch (error) {
|
||||
const blockName = fileName + "--" + "getMsg";
|
||||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
}
|
||||
}
|
||||
|
||||
async show() {
|
||||
const ctx = this.ctx;
|
||||
try {
|
||||
const data = { data: ctx.state.oauth };
|
||||
this.setResponse(ctx, 200, '返回信息', "deconstruction", data);
|
||||
} catch (error) {
|
||||
const blockName = fileName + "--" + "show";
|
||||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
}
|
||||
}
|
||||
|
||||
// 获取用户基本信息
|
||||
async getUser() {
|
||||
const ctx = this.ctx;
|
||||
try {
|
||||
let rdmcode = await checkUid(this);
|
||||
if (!rdmcode) {
|
||||
this.setResponse(ctx, 401, 'token过期或错误', "none");
|
||||
return;
|
||||
}
|
||||
const uid = JSON.parse(rdmcode).uid;
|
||||
const lastCode = uid[uid.length - 1];
|
||||
const userData = await ctx.service[modelType[lastCode]].getUser(uid);
|
||||
if (userData == "error") {
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
return;
|
||||
}
|
||||
if (userData) {
|
||||
const data = { userData };
|
||||
this.setResponse(ctx, 200, '获取用户基本信息成功', "deconstruction", data);
|
||||
} else {
|
||||
this.setResponse(ctx, 404, '获取用户基本信息失败', "none");
|
||||
}
|
||||
} catch (error) {
|
||||
const blockName = fileName + "--" + "getUser";
|
||||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
}
|
||||
}
|
||||
|
||||
// 修改用户基本信息
|
||||
async editUser() {
|
||||
const ctx = this.ctx;
|
||||
try {
|
||||
let rdmcode = await checkUid(this);
|
||||
if (!rdmcode) {
|
||||
this.setResponse(ctx, 401, 'token过期或错误', "none");
|
||||
return;
|
||||
}
|
||||
const uid = JSON.parse(rdmcode).uid;
|
||||
const body = ctx.request.body;
|
||||
const lastCode = uid[uid.length - 1];
|
||||
const userData = await ctx.service[modelType[lastCode]].editUser(body.userMsg, uid);
|
||||
if (userData == "error") {
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
return;
|
||||
}
|
||||
if (userData[0] != 0) {
|
||||
this.setResponse(ctx, 200, '修改用户基本信息成功', "none");
|
||||
} else {
|
||||
this.setResponse(ctx, 404, '修改用户基本信息失败', "none");
|
||||
}
|
||||
} catch (error) {
|
||||
const blockName = fileName + "--" + "editUser";
|
||||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
}
|
||||
}
|
||||
|
||||
// 修改密码
|
||||
async changePassword() {
|
||||
const ctx = this.ctx;
|
||||
try {
|
||||
let rdmcode = await checkUid(this);
|
||||
if (!rdmcode) {
|
||||
this.setResponse(ctx, 401, 'token过期或错误', "none");
|
||||
return;
|
||||
}
|
||||
const uid = JSON.parse(rdmcode).uid;
|
||||
const lastCode = uid[uid.length - 1];
|
||||
const body = ctx.request.body;
|
||||
const oldPassword = this.decryptRequest(body.passwordForm.oldPassword);
|
||||
const newPassword = this.decryptRequest(body.passwordForm.newPassword);
|
||||
const changeList = await ctx.service[modelType[lastCode]].changePassword(uid, oldPassword, newPassword);
|
||||
if (changeList == "error") {
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
return;
|
||||
}
|
||||
if (changeList && changeList[0] !== 0) {
|
||||
this.setResponse(ctx, 200, '修改密码成功', "none");
|
||||
} else {
|
||||
this.setResponse(ctx, 404, '修改密码失败', "none");
|
||||
}
|
||||
} catch (error) {
|
||||
const blockName = fileName + "--" + "changePassword";
|
||||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
}
|
||||
}
|
||||
|
||||
// 重置密码
|
||||
async resetPassword() {
|
||||
const ctx = this.ctx;
|
||||
try {
|
||||
let rdmcode = await checkUid(this);
|
||||
if (!rdmcode) {
|
||||
this.setResponse(ctx, 401, 'token过期或错误', "none");
|
||||
return;
|
||||
}
|
||||
const uid = JSON.parse(rdmcode).uid;
|
||||
const lastCode = uid[uid.length - 1];
|
||||
const body = ctx.request.body;
|
||||
const model = this.decryptRequest(body.model);
|
||||
const defaultPassword = this.decryptRequest(body.defaultPassword);
|
||||
const password = this.decryptRequest(body.password);
|
||||
const requestMsg = body.userMsg;
|
||||
const resetType = body.resetType;
|
||||
const resetList = await ctx.service[modelType[lastCode]].resetPassword(uid, model, defaultPassword, password, requestMsg, resetType);
|
||||
if (resetList == "error") {
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
return;
|
||||
}
|
||||
if (resetList) {
|
||||
this.setResponse(ctx, 200, '重置密码成功', "none");
|
||||
} else {
|
||||
this.setResponse(ctx, 404, '重置密码失败', "none");
|
||||
}
|
||||
} catch (error) {
|
||||
const blockName = fileName + "--" + "resetPassword";
|
||||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
module.exports = VerifyController;
|
||||
Reference in New Issue
Block a user