yapi/server/controllers/base.js

import yapi from '../yapi.js';
import projectModel from '../models/project.js';
import userModel from '../models/user.js';
import interfaceModel from '../models/interface.js'
import groupModel from '../models/group.js'

import _ from 'underscore'
const jwt = require('jsonwebtoken');

class baseController {
    constructor(ctx) {
        this.ctx = ctx;
        //网站上线后，role对象key是不能修改的，value可以修改
        this.roles = {
            admin: 'Admin',
            member: '网站会员'
        };
    }

    async init(ctx) {
        this.$user = null;
        let ignoreRouter = [
            '/user/login_by_token',
            '/user/login',
            '/user/reg',
            '/user/status',
            '/user/logout'
        ];
        if (ignoreRouter.indexOf(ctx.path) > -1) {
            this.$auth = true;
        } else {
            await this.checkLogin(ctx);
        }

    }

    getUid() {
        return parseInt(this.$uid, 10);
    }

    async checkLogin(ctx) {
        let token = ctx.cookies.get('_yapi_token');
        let uid = ctx.cookies.get('_yapi_uid');

        try {
            if (!token || !uid) return false;
            let userInst = yapi.getInst(userModel); //创建user实体
            let result = await userInst.findById(uid);
            let decoded = jwt.verify(token, result.passsalt);

            if (decoded.uid == uid) {
                this.$uid = uid;
                this.$auth = true;
                this.$user = result;
                return true;
            }

            return false;
        } catch (e) {
            return false;
        }

    }

    async getLoginStatus(ctx) {
        if (await this.checkLogin(ctx) === true) {
            let result = yapi.commons.fieldSelect(this.$user, ['_id', 'username', 'email', 'up_time', 'add_time', 'role']);
            result.server_ip = yapi.WEBCONFIG.server_ip;
            return ctx.body = yapi.commons.resReturn(result);
        }
        return ctx.body = yapi.commons.resReturn(null, 300, 'Please login.');
    }

    getRole() {
        return this.$user.role;
    }

    /**
     * 
     * @param {*} id type对应的id
     * @param {*} type enum[interface, project, group] 
     * @param {*} action enum[ danger , edit ] danger只有owner或管理员才能操作,edit只要是dev或以上就能执行
     */
    async checkAuth(id, type, action) {
        let result = {};
        try {
            if (this.getRole() === 'admin') {
                return true;
            }
            if (type === 'interface') {
                let interfaceInst = yapi.getInst(interfaceModel);
                let interfaceData = await interfaceInst.get(id)
                result.interfaceData = interfaceData;
                if (interfaceData.uid === this.getUid()) {
                    return true;
                }
                type = 'project';
                id = interfaceData.project_id;
            }

            if (type === 'project') {
                let projectInst = yapi.getInst(projectModel);
                let projectData = await projectInst.get(id);   
                if(projectData.uid === this.getUid()){
                    return true;
                }             
                let memberData = _.find(projectData.members, (m) => {
                    if (m.uid === this.getUid()) {
                        return true;
                    }
                })

                if (memberData && memberData.role) {
                    if(action === 'danger' && memberData.role === 'owner'){
                        return true;
                    }
                    if(action === 'edit'){
                        return true;
                    }
                }
                type = 'group';
                id = projectData.group_id
            }

            if (type === 'group') {
                let groupInst = yapi.getInst(groupModel);
                let groupData = await groupInst.get(id);
                let groupMemberData = _.find(groupData.members, (m) => {
                    if (m.uid === this.getUid()) {
                        return true;
                    }
                })
                if (groupMemberData && groupMemberData.role) {
                    if(action === 'danger' && groupMemberData.role === 'owner'){
                        return true;
                    }
                    if(action === 'edit'){
                        return true;
                    }
                }
            }

            return false;
        }
        catch (e) {
            yapi.commons.log(e.message, 'error')
            return false;
        }
    }
}

module.exports = baseController;