396 lines
15 KiB
JavaScript
396 lines
15 KiB
JavaScript
'use strict';
|
||
|
||
const Controller = require('../core/base_controller');
|
||
|
||
const fileName = "verify";
|
||
|
||
const redisType = {
|
||
"B": "db0",
|
||
"C": "db1",
|
||
"M": "db2",
|
||
"T": "db5",
|
||
"E": "db6",
|
||
"A": "db7"
|
||
};
|
||
|
||
const modelType = {
|
||
"B": "bSide",
|
||
"C": "cSide",
|
||
"M": "insiders",
|
||
"T": "contest",
|
||
"E": "exam",
|
||
"A": "examManager"
|
||
};
|
||
|
||
const checkUid = async (thisPlace) => {
|
||
const ctx = thisPlace.ctx;
|
||
const uid = ctx.request.body.uid;
|
||
const token = ctx.request.header.authorization;
|
||
const redis = ctx.app.redis;
|
||
let rdmcode;
|
||
if (!uid) {
|
||
let allRedis = [];
|
||
Object.entries(redisType).forEach(([key, value]) => {
|
||
allRedis.push(redis.get(value).get(token));
|
||
});
|
||
const [buser, cuser, muser, tuser, euser, auser] = await Promise.all(allRedis);
|
||
rdmcode = buser || cuser || muser || tuser || euser || auser;
|
||
} else {
|
||
let decryptUid = thisPlace.decryptRequest(uid).split('?')[0];
|
||
const lastCode = decryptUid[decryptUid.length - 1];
|
||
rdmcode = await redis.get(redisType[lastCode]).get(token);
|
||
}
|
||
if (!rdmcode) {
|
||
return false;
|
||
}
|
||
return rdmcode;
|
||
};
|
||
|
||
class VerifyController extends Controller {
|
||
// 确定登录页面
|
||
async toLogin() {
|
||
const ctx = this.ctx;
|
||
try {
|
||
// 请求发出的源网址，适用于不同端用户登录不同域名网站
|
||
const origin_url = ctx.request.header.origin;
|
||
// 请求发出的具体网址，适用于不同端用户登录同一域名的网站
|
||
// const { origin_url } = ctx.request.body;
|
||
const result = await ctx.service.verify.toLogin(origin_url);
|
||
if (result == "error") {
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
return;
|
||
}
|
||
if (result) {
|
||
const data = { redirect: result.dataValues.login_url + '?client_id=' + result.dataValues.temporary_id };
|
||
this.setResponse(ctx, 200, '跳转到登录页', "deconstruction", data);
|
||
} else {
|
||
this.setResponse(ctx, 404, '未找到登录页', "none");
|
||
}
|
||
} catch (error) {
|
||
const blockName = fileName + "--" + "toLogin";
|
||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
}
|
||
}
|
||
|
||
// 确定登录状态
|
||
async loginStatus() {
|
||
const ctx = this.ctx;
|
||
try {
|
||
const body = ctx.request.body;
|
||
const uid = this.decryptRequest(body.data).split('?')[0];
|
||
const lastCode = uid[uid.length - 1];
|
||
const status = await ctx.app.redis.get(redisType[lastCode]).get(uid);
|
||
const client = await ctx.service.verify.loginClient(body.client_id);
|
||
if (client == "error") {
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
return;
|
||
}
|
||
if (status !== null && client.dataValues.login_url == ctx.request.header.referer.split('?')[0] && client.dataValues.client_id == JSON.parse(status).clientId) {
|
||
const timestamp = new Date().getTime();
|
||
const serverType = ctx.service[modelType[lastCode]];
|
||
await serverType.loginStatus(uid, 1);
|
||
const data = {
|
||
data: this.encryptRequest(uid + '?' + timestamp),
|
||
access_token: JSON.parse(status).accessToken,
|
||
refresh_token: JSON.parse(status).refreshToken,
|
||
redirect: client.dataValues.client_url + '?' + body.data,
|
||
};
|
||
this.setResponse(ctx, 200, '已登录', "deconstruction", data);
|
||
} else {
|
||
const serverType = ctx.service[modelType[lastCode]];
|
||
await serverType.loginStatus(uid, 0);
|
||
this.setResponse(ctx, 404, '未登录', "none");
|
||
}
|
||
} catch (error) {
|
||
const blockName = fileName + "--" + "loginStatus";
|
||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
}
|
||
}
|
||
|
||
// 退出登录
|
||
async unLogin() {
|
||
const ctx = this.ctx;
|
||
try {
|
||
let rdmcode = await checkUid(this);
|
||
if (!rdmcode) {
|
||
this.setResponse(ctx, 401, 'token过期或错误', "none");
|
||
return;
|
||
}
|
||
const uid = JSON.parse(rdmcode).uid;
|
||
const lastCode = uid[uid.length - 1];
|
||
const serverType = ctx.service[modelType[lastCode]];
|
||
if(modelType == 'B' || modelType == 'C' || modelType == 'M') await serverType.loginStatus(uid, 0);
|
||
const redisDbType = redisType[lastCode];
|
||
await ctx.app.redis.get(redisDbType).del(ctx.request.body.access_token);
|
||
await ctx.app.redis.get(redisDbType).del(ctx.request.body.refresh_token);
|
||
await ctx.app.redis.get(redisDbType).del(uid);
|
||
this.setResponse(ctx, 200, 'unLogin', "none");
|
||
} catch (error) {
|
||
const blockName = fileName + "--" + "unLogin";
|
||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
}
|
||
}
|
||
|
||
// 获取 token
|
||
async getToken() {
|
||
const ctx = this.ctx;
|
||
try {
|
||
const body = ctx.request.body;
|
||
let code = body.code, type = this.decryptRequest(body.type), codeObj, typeMark = type, accessToken, refreshToken;
|
||
if (type === 'code') {
|
||
codeObj = await ctx.app.redis.get('db3').get(code);
|
||
if (!codeObj) {
|
||
typeMark = 'passLogin';
|
||
code = this.decryptRequest(code).split('?')[0];
|
||
const redisDbType = redisType[code[code.length - 1]];
|
||
codeObj = await ctx.app.redis.get(redisDbType).get(code);
|
||
if (!codeObj) return codeObj;
|
||
accessToken = JSON.parse(codeObj).accessToken;
|
||
refreshToken = JSON.parse(codeObj).refreshToken;
|
||
codeObj = await ctx.app.redis.get(redisDbType).get(refreshToken);
|
||
}
|
||
} else {
|
||
type = type.split('?')[0];
|
||
const redisDbType = redisType[type[type.length - 1]];
|
||
codeObj = await ctx.app.redis.get(redisDbType).get(code);
|
||
}
|
||
if (!codeObj) {
|
||
this.setResponse(ctx, 402, '请重新登录', "none");
|
||
} else {
|
||
const client_id = JSON.parse(codeObj).clientId;
|
||
const client = await ctx.service.verify.getToken(client_id);
|
||
const timestamp = new Date().getTime();
|
||
const origin_url = ctx.request.header.origin;
|
||
if (client == "error") {
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
} else if (client && typeMark == "passLogin") {
|
||
const data = {
|
||
data: this.encryptRequest(JSON.parse(codeObj).uid + '?' + timestamp),
|
||
access_token: accessToken,
|
||
refresh_token: refreshToken,
|
||
redirect: origin_url
|
||
};
|
||
this.setResponse(ctx, 200, '验证通过', "deconstruction", data);
|
||
} else if (client && typeMark !== "passLogin") {
|
||
const redisCode = { code, type };
|
||
const result = await ctx.curl('http://127.0.0.1:' + ctx.app.server.address().port + '/user/token', {
|
||
dataType: 'json',
|
||
contentType: 'application/x-www-form-urlencoded',
|
||
method: 'POST',
|
||
timeout: 3000,
|
||
data: {
|
||
grant_type: 'authorization_code',
|
||
code: JSON.stringify(redisCode),
|
||
client_id: client.dataValues.client_id,
|
||
client_secret: client.dataValues.client_secret,
|
||
redirect_uri: 'http://127.0.0.1:' + ctx.app.server.address().port + '/getToken/',
|
||
},
|
||
});
|
||
if (result.status == 200) {
|
||
const data = {
|
||
data: this.encryptRequest(result.data.access_token.uid + '?' + timestamp),
|
||
access_token: result.data.access_token.token,
|
||
refresh_token: result.data.refresh_token,
|
||
redirect: client.dataValues.client_id == "insiders-manager" ? origin_url : client.dataValues.client_url
|
||
}
|
||
this.setResponse(ctx, 200, '验证通过', "deconstruction", data);
|
||
} else {
|
||
this.setResponse(ctx, 402, '请重新登录', "none");
|
||
}
|
||
} else {
|
||
this.setResponse(ctx, 402, '请重新登录', "none");
|
||
}
|
||
}
|
||
} catch (error) {
|
||
const blockName = fileName + "--" + "getToken";
|
||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
}
|
||
}
|
||
|
||
// 验证token
|
||
async getMsg() {
|
||
const { ctx } = this;
|
||
try {
|
||
// 客户端实现
|
||
// 访问 /user/token 端口验证 accessToken，获取用户信息
|
||
let accessToken = {
|
||
access_token: ctx.request.header.authorization,
|
||
uid: this.decryptRequest(ctx.request.body.data).split('?')[0]
|
||
};
|
||
const result = await ctx.curl('http://127.0.0.1:' + ctx.app.server.address().port + '/user/authenticate', {
|
||
dataType: 'json',
|
||
contentType: 'application/x-www-form-urlencoded',
|
||
method: 'POST',
|
||
timeout: 3000,
|
||
data: {
|
||
status: 'success',
|
||
access_token: JSON.stringify(accessToken)
|
||
},
|
||
});
|
||
if (result.status == 200) {
|
||
let uid = result.data.data.token.user.uid;
|
||
let lastCode = uid[uid.length - 1];
|
||
const userdata = await ctx.service[modelType[lastCode]].uidfinder(uid);
|
||
if (userdata == "error") {
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
return;
|
||
}
|
||
const timestamp = new Date().getTime();
|
||
const encryptData = this.encryptRequest(userdata.uid + '?' + timestamp);
|
||
if (userdata) {
|
||
const data = { data: encryptData };
|
||
this.setResponse(ctx, 200, '验证通过', "deconstruction", data);
|
||
} else {
|
||
this.setResponse(ctx, 401, 'token错误或过期', "none");
|
||
}
|
||
} else {
|
||
this.setResponse(ctx, 401, 'token错误或过期', "none");
|
||
}
|
||
} catch (error) {
|
||
const blockName = fileName + "--" + "getMsg";
|
||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
}
|
||
}
|
||
|
||
async show() {
|
||
const ctx = this.ctx;
|
||
try {
|
||
const data = { data: ctx.state.oauth };
|
||
this.setResponse(ctx, 200, '返回信息', "deconstruction", data);
|
||
} catch (error) {
|
||
const blockName = fileName + "--" + "show";
|
||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
}
|
||
}
|
||
|
||
// 获取用户基本信息
|
||
async getUser() {
|
||
const ctx = this.ctx;
|
||
try {
|
||
let rdmcode = await checkUid(this);
|
||
if (!rdmcode) {
|
||
this.setResponse(ctx, 401, 'token过期或错误', "none");
|
||
return;
|
||
}
|
||
const uid = JSON.parse(rdmcode).uid;
|
||
const lastCode = uid[uid.length - 1];
|
||
const userData = await ctx.service[modelType[lastCode]].getUser(uid);
|
||
if (userData == "error") {
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
return;
|
||
}
|
||
if (userData) {
|
||
const data = { userData };
|
||
this.setResponse(ctx, 200, '获取用户基本信息成功', "deconstruction", data);
|
||
} else {
|
||
this.setResponse(ctx, 404, '获取用户基本信息失败', "none");
|
||
}
|
||
} catch (error) {
|
||
const blockName = fileName + "--" + "getUser";
|
||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
}
|
||
}
|
||
|
||
// 修改用户基本信息
|
||
async editUser() {
|
||
const ctx = this.ctx;
|
||
try {
|
||
let rdmcode = await checkUid(this);
|
||
if (!rdmcode) {
|
||
this.setResponse(ctx, 401, 'token过期或错误', "none");
|
||
return;
|
||
}
|
||
const uid = JSON.parse(rdmcode).uid;
|
||
const body = ctx.request.body;
|
||
const lastCode = uid[uid.length - 1];
|
||
const userData = await ctx.service[modelType[lastCode]].editUser(body.userMsg, uid);
|
||
if (userData == "error") {
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
return;
|
||
}
|
||
if (userData[0] != 0) {
|
||
this.setResponse(ctx, 200, '修改用户基本信息成功', "none");
|
||
} else {
|
||
this.setResponse(ctx, 404, '修改用户基本信息失败', "none");
|
||
}
|
||
} catch (error) {
|
||
const blockName = fileName + "--" + "editUser";
|
||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
}
|
||
}
|
||
|
||
// 修改密码
|
||
async changePassword() {
|
||
const ctx = this.ctx;
|
||
try {
|
||
let rdmcode = await checkUid(this);
|
||
if (!rdmcode) {
|
||
this.setResponse(ctx, 401, 'token过期或错误', "none");
|
||
return;
|
||
}
|
||
const uid = JSON.parse(rdmcode).uid;
|
||
const lastCode = uid[uid.length - 1];
|
||
const body = ctx.request.body;
|
||
const oldPassword = this.decryptRequest(body.passwordForm.oldPassword);
|
||
const newPassword = this.decryptRequest(body.passwordForm.newPassword);
|
||
const changeList = await ctx.service[modelType[lastCode]].changePassword(uid, oldPassword, newPassword);
|
||
if (changeList == "error") {
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
return;
|
||
}
|
||
if (changeList && changeList[0] !== 0) {
|
||
this.setResponse(ctx, 200, '修改密码成功', "none");
|
||
} else {
|
||
this.setResponse(ctx, 404, '修改密码失败', "none");
|
||
}
|
||
} catch (error) {
|
||
const blockName = fileName + "--" + "changePassword";
|
||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
}
|
||
}
|
||
|
||
// 重置密码
|
||
async resetPassword() {
|
||
const ctx = this.ctx;
|
||
try {
|
||
let rdmcode = await checkUid(this);
|
||
if (!rdmcode) {
|
||
this.setResponse(ctx, 401, 'token过期或错误', "none");
|
||
return;
|
||
}
|
||
const uid = JSON.parse(rdmcode).uid;
|
||
const lastCode = uid[uid.length - 1];
|
||
const body = ctx.request.body;
|
||
const model = this.decryptRequest(body.model);
|
||
const defaultPassword = this.decryptRequest(body.defaultPassword);
|
||
const password = this.decryptRequest(body.password);
|
||
const requestMsg = body.userMsg;
|
||
const resetType = body.resetType;
|
||
const resetList = await ctx.service[modelType[lastCode]].resetPassword(uid, model, defaultPassword, password, requestMsg, resetType);
|
||
if (resetList == "error") {
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
return;
|
||
}
|
||
if (resetList) {
|
||
this.setResponse(ctx, 200, '重置密码成功', "none");
|
||
} else {
|
||
this.setResponse(ctx, 404, '重置密码失败', "none");
|
||
}
|
||
} catch (error) {
|
||
const blockName = fileName + "--" + "resetPassword";
|
||
ctx.app.middleware.log('../../controllerLog', blockName + ">>>>" + error);
|
||
this.setResponse(ctx, 500, '服务器错误', "none");
|
||
}
|
||
}
|
||
}
|
||
|
||
module.exports = VerifyController; |