yapi/server_dist/controllers/base.js

'use strict';

var _regenerator = require('babel-runtime/regenerator');

var _regenerator2 = _interopRequireDefault(_regenerator);

var _asyncToGenerator2 = require('babel-runtime/helpers/asyncToGenerator');

var _asyncToGenerator3 = _interopRequireDefault(_asyncToGenerator2);

var _classCallCheck2 = require('babel-runtime/helpers/classCallCheck');

var _classCallCheck3 = _interopRequireDefault(_classCallCheck2);

var _createClass2 = require('babel-runtime/helpers/createClass');

var _createClass3 = _interopRequireDefault(_createClass2);

var _yapi = require('../yapi.js');

var _yapi2 = _interopRequireDefault(_yapi);

var _project = require('../models/project.js');

var _project2 = _interopRequireDefault(_project);

var _user = require('../models/user.js');

var _user2 = _interopRequireDefault(_user);

var _interface = require('../models/interface.js');

var _interface2 = _interopRequireDefault(_interface);

var _group = require('../models/group.js');

var _group2 = _interopRequireDefault(_group);

var _underscore = require('underscore');

var _underscore2 = _interopRequireDefault(_underscore);

function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }

var jwt = require('jsonwebtoken');

var baseController = function () {
    function baseController(ctx) {
        (0, _classCallCheck3.default)(this, baseController);

        this.ctx = ctx;
        //网站上线后，role对象key是不能修改的，value可以修改
        this.roles = {
            admin: 'Admin',
            member: '网站会员'
        };
    }

    (0, _createClass3.default)(baseController, [{
        key: 'init',
        value: function () {
            var _ref = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee(ctx) {
                var ignoreRouter;
                return _regenerator2.default.wrap(function _callee$(_context) {
                    while (1) {
                        switch (_context.prev = _context.next) {
                            case 0:
                                this.$user = null;
                                ignoreRouter = ['/user/login_by_token', '/user/login', '/user/reg', '/user/status', '/user/logout'];

                                if (!(ignoreRouter.indexOf(ctx.path) > -1)) {
                                    _context.next = 6;
                                    break;
                                }

                                this.$auth = true;
                                _context.next = 8;
                                break;

                            case 6:
                                _context.next = 8;
                                return this.checkLogin(ctx);

                            case 8:
                            case 'end':
                                return _context.stop();
                        }
                    }
                }, _callee, this);
            }));

            function init(_x) {
                return _ref.apply(this, arguments);
            }

            return init;
        }()
    }, {
        key: 'getUid',
        value: function getUid() {
            return parseInt(this.$uid, 10);
        }
    }, {
        key: 'checkLogin',
        value: function () {
            var _ref2 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee2(ctx) {
                var token, uid, userInst, result, decoded;
                return _regenerator2.default.wrap(function _callee2$(_context2) {
                    while (1) {
                        switch (_context2.prev = _context2.next) {
                            case 0:
                                token = ctx.cookies.get('_yapi_token');
                                uid = ctx.cookies.get('_yapi_uid');
                                _context2.prev = 2;

                                if (!(!token || !uid)) {
                                    _context2.next = 5;
                                    break;
                                }

                                return _context2.abrupt('return', false);

                            case 5:
                                userInst = _yapi2.default.getInst(_user2.default); //创建user实体

                                _context2.next = 8;
                                return userInst.findById(uid);

                            case 8:
                                result = _context2.sent;
                                decoded = jwt.verify(token, result.passsalt);

                                if (!(decoded.uid == uid)) {
                                    _context2.next = 15;
                                    break;
                                }

                                this.$uid = uid;
                                this.$auth = true;
                                this.$user = result;
                                return _context2.abrupt('return', true);

                            case 15:
                                return _context2.abrupt('return', false);

                            case 18:
                                _context2.prev = 18;
                                _context2.t0 = _context2['catch'](2);
                                return _context2.abrupt('return', false);

                            case 21:
                            case 'end':
                                return _context2.stop();
                        }
                    }
                }, _callee2, this, [[2, 18]]);
            }));

            function checkLogin(_x2) {
                return _ref2.apply(this, arguments);
            }

            return checkLogin;
        }()
    }, {
        key: 'getLoginStatus',
        value: function () {
            var _ref3 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee3(ctx) {
                var result;
                return _regenerator2.default.wrap(function _callee3$(_context3) {
                    while (1) {
                        switch (_context3.prev = _context3.next) {
                            case 0:
                                _context3.next = 2;
                                return this.checkLogin(ctx);

                            case 2:
                                _context3.t0 = _context3.sent;

                                if (!(_context3.t0 === true)) {
                                    _context3.next = 7;
                                    break;
                                }

                                result = _yapi2.default.commons.fieldSelect(this.$user, ['_id', 'username', 'email', 'up_time', 'add_time', 'role']);

                                result.server_ip = _yapi2.default.WEBCONFIG.server_ip;
                                return _context3.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(result));

                            case 7:
                                return _context3.abrupt('return', ctx.body = _yapi2.default.commons.resReturn(null, 300, 'Please login.'));

                            case 8:
                            case 'end':
                                return _context3.stop();
                        }
                    }
                }, _callee3, this);
            }));

            function getLoginStatus(_x3) {
                return _ref3.apply(this, arguments);
            }

            return getLoginStatus;
        }()
    }, {
        key: 'getRole',
        value: function getRole() {
            return this.$user.role;
        }

        /**
         * 
         * @param {*} id type对应的id
         * @param {*} type enum[interface, project, group] 
         * @param {*} action enum[ danger , edit ] danger只有owner或管理员才能操作,edit只要是dev或以上就能执行
         */

    }, {
        key: 'checkAuth',
        value: function () {
            var _ref4 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee4(id, type, action) {
                var _this = this;

                var result, interfaceInst, interfaceData, projectInst, projectData, memberData, groupInst, groupData, groupMemberData;
                return _regenerator2.default.wrap(function _callee4$(_context4) {
                    while (1) {
                        switch (_context4.prev = _context4.next) {
                            case 0:
                                result = {};
                                _context4.prev = 1;

                                if (!(this.getRole() === 'admin')) {
                                    _context4.next = 4;
                                    break;
                                }

                                return _context4.abrupt('return', true);

                            case 4:
                                if (!(type === 'interface')) {
                                    _context4.next = 14;
                                    break;
                                }

                                interfaceInst = _yapi2.default.getInst(_interface2.default);
                                _context4.next = 8;
                                return interfaceInst.get(id);

                            case 8:
                                interfaceData = _context4.sent;

                                result.interfaceData = interfaceData;

                                if (!(interfaceData.uid === this.getUid())) {
                                    _context4.next = 12;
                                    break;
                                }

                                return _context4.abrupt('return', true);

                            case 12:
                                type = 'project';
                                id = interfaceData.project_id;

                            case 14:
                                if (!(type === 'project')) {
                                    _context4.next = 29;
                                    break;
                                }

                                projectInst = _yapi2.default.getInst(_project2.default);
                                _context4.next = 18;
                                return projectInst.get(id);

                            case 18:
                                projectData = _context4.sent;

                                if (!(projectData.uid === this.getUid())) {
                                    _context4.next = 21;
                                    break;
                                }

                                return _context4.abrupt('return', true);

                            case 21:
                                memberData = _underscore2.default.find(projectData.members, function (m) {
                                    if (m.uid === _this.getUid()) {
                                        return true;
                                    }
                                });

                                if (!(memberData && memberData.role)) {
                                    _context4.next = 27;
                                    break;
                                }

                                if (!(action === 'danger' && memberData.role === 'owner')) {
                                    _context4.next = 25;
                                    break;
                                }

                                return _context4.abrupt('return', true);

                            case 25:
                                if (!(action === 'edit')) {
                                    _context4.next = 27;
                                    break;
                                }

                                return _context4.abrupt('return', true);

                            case 27:
                                type = 'group';
                                id = projectData.group_id;

                            case 29:
                                if (!(type === 'group')) {
                                    _context4.next = 40;
                                    break;
                                }

                                groupInst = _yapi2.default.getInst(_group2.default);
                                _context4.next = 33;
                                return groupInst.get(id);

                            case 33:
                                groupData = _context4.sent;
                                groupMemberData = _underscore2.default.find(groupData.members, function (m) {
                                    if (m.uid === _this.getUid()) {
                                        return true;
                                    }
                                });

                                if (!(groupMemberData && groupMemberData.role)) {
                                    _context4.next = 40;
                                    break;
                                }

                                if (!(action === 'danger' && groupMemberData.role === 'owner')) {
                                    _context4.next = 38;
                                    break;
                                }

                                return _context4.abrupt('return', true);

                            case 38:
                                if (!(action === 'edit')) {
                                    _context4.next = 40;
                                    break;
                                }

                                return _context4.abrupt('return', true);

                            case 40:
                                return _context4.abrupt('return', false);

                            case 43:
                                _context4.prev = 43;
                                _context4.t0 = _context4['catch'](1);

                                _yapi2.default.commons.log(_context4.t0.message, 'error');
                                return _context4.abrupt('return', false);

                            case 47:
                            case 'end':
                                return _context4.stop();
                        }
                    }
                }, _callee4, this, [[1, 43]]);
            }));

            function checkAuth(_x4, _x5, _x6) {
                return _ref4.apply(this, arguments);
            }

            return checkAuth;
        }()
    }]);
    return baseController;
}();

module.exports = baseController;