MCSManager/onlinefs/controller/auth.js

const express = require("express");
const router = express.Router();
const { FileOperateStructure } = require("../model/fsoperate_session");
const permission = require("../../helper/Permission");
const serverModel = require("../../model/ServerModel");
const pathm = require("path");
const loginedContainer = require("../../helper/LoginedContainer");

const SERVERS_DIR = "./server/server_core/";

router.all("/auth_master/pwd", (req, res) => {
  let userName = req.session["username"];

  //基础检查
  if (!userName) {
    res.send("[ 权限阻止 ] 您未登录");
    return;
  }

  //统一登录逻辑性检查
  if (!loginedContainer.isLogined(req.sessionID, userName)) {
    res.send("[ 权限阻止 ] 您未登录");
    return;
  }

  // 判断是否为管理员
  if (permission.IsSessionMaster(req, res)) {
    MCSERVER.log("[Online Fs]", "管理员", userName, "访问服务端存放目录");
    const absServersDir = pathm.normalize(pathm.join(pathm.join(__dirname, "../../"), SERVERS_DIR));
    req.session.fsos = new FileOperateStructure(absServersDir, "./");
    req.session.fsoperate = {};
    req.session.fsoperate.tmp = [];
    req.session.save();
    res.redirect("/public/onlinefs_public");
  }
});

//自定义扩展
router.all("/auth/:servername", (req, res) => {
  let serverName = req.params.servername;
  let userName = req.session["username"];

  //基础检查
  if (!serverName || !userName) {
    res.send("[ 权限阻止 ] 您未登录");
    return;
  }

  //统一登录逻辑性检查
  if (!loginedContainer.isLogined(req.sessionID, userName)) {
    res.send("[ 权限阻止 ] 您未登录");
    return;
  }

  let dataModel = null;
  if (serverModel.ServerManager().isExist(serverName) && permission.isCanServer(userName, serverName)) {
    dataModel = serverModel.ServerManager().getServer(serverName).dataModel || null;
  }
  if (!dataModel || !dataModel.cwd) {
    res.send("[ 权限阻止 ] dataModel 空，无权限操作的服务器！");
    return;
  }
  let cwd = null;
  if (!pathm.isAbsolute(dataModel.cwd)) cwd = pathm.normalize(pathm.join(pathm.join(__dirname, "../../"), dataModel.cwd));
  else cwd = dataModel.cwd;
  MCSERVER.log("[Online Fs]", "用户", userName, "访问服务器", serverName, "根:", cwd);

  req.session.fsos = new FileOperateStructure(cwd, "./");
  req.session.fsoperate = {};
  req.session.fsoperate.tmp = [];
  req.session.save();
  res.redirect("/public/onlinefs_public");
});

router.all("/logout", (req, res) => {
  req.session.fsos = null;
  req.session.fsoperate = null;
  res.send("<script> window.close();</script>");
});

module.exports = router;