|
1
|
|
|
const Redis = require('./libraries/redis') |
|
|
|
|
|
|
2
|
|
|
const Constant = require('./libraries/constant') |
|
|
|
|
|
|
3
|
|
|
const ApiError = require('./util/api_error') |
|
|
|
|
|
|
4
|
|
|
const _ = require('underscore') |
|
|
|
|
|
|
5
|
|
|
const ServiceAudit = require('./services/catering/audit') |
|
|
|
|
|
|
6
|
|
|
|
|
7
|
|
|
module.exports = function (permission) { |
|
8
|
|
|
|
|
9
|
|
|
return async function (ctx, next) { |
|
|
|
|
|
|
10
|
|
|
|
|
11
|
|
|
async function checkToken() { |
|
|
|
|
|
|
12
|
|
|
let token = (typeof (ctx.request.headers.token) == 'undefined' || !ctx.request.headers.token) ? |
|
13
|
|
|
ctx.cookies.get('token') : ctx.request.headers.token |
|
14
|
|
|
let uid = (typeof (ctx.request.headers.uid) == 'undefined' || !ctx.request.headers.uid) ? |
|
15
|
|
|
ctx.cookies.get('uid') : ctx.request.headers.uid |
|
16
|
|
|
|
|
17
|
|
|
if (!token || !uid) { |
|
18
|
|
|
console.log('token: ' + token) |
|
|
|
|
|
|
19
|
|
|
console.log('uid: ' + uid) |
|
20
|
|
|
throw new ApiError('auth.error', 'token missing') |
|
|
|
|
|
|
21
|
|
|
} |
|
22
|
|
|
|
|
23
|
|
|
sessionKey = Constant.CATERING_SESSION + token |
|
|
|
|
|
|
24
|
|
|
session = await Redis.get(sessionKey) |
|
|
|
|
|
|
25
|
|
|
session = JSON.parse(session) |
|
26
|
|
|
if (!session) { |
|
27
|
|
|
throw new ApiError('auth.error', 'token error') |
|
28
|
|
|
} |
|
29
|
|
|
|
|
30
|
|
|
if (session.uid == uid) { |
|
31
|
|
|
ctx.uid = uid |
|
32
|
|
|
return true |
|
33
|
|
|
} else { |
|
|
|
|
|
|
34
|
|
|
throw new ApiError('auth.error', 'no permission') |
|
35
|
|
|
} |
|
36
|
|
|
|
|
37
|
|
|
} |
|
38
|
|
|
|
|
39
|
|
|
async function checkUser() { |
|
|
|
|
|
|
40
|
|
|
await checkToken() |
|
|
|
|
|
|
41
|
|
|
await next() |
|
42
|
|
|
} |
|
43
|
|
|
|
|
44
|
|
|
async function checkAudit() { |
|
|
|
|
|
|
45
|
|
|
await checkToken() |
|
|
|
|
|
|
46
|
|
|
await isAudit() |
|
47
|
|
|
await next() |
|
48
|
|
|
} |
|
49
|
|
|
|
|
50
|
|
|
async function isAudit() { |
|
51
|
|
|
let check = await ServiceAudit.getAudit(ctx.uid) |
|
|
|
|
|
|
52
|
|
|
if (_.isEmpty(check)) throw new ApiError('auth.error', 'no permission audit') |
|
|
|
|
|
|
53
|
|
|
return true |
|
54
|
|
|
} |
|
55
|
|
|
|
|
56
|
|
|
// 检查header |
|
57
|
|
|
if (!_.has(ctx.request.headers, 'store-id')) { |
|
|
|
|
|
|
58
|
|
|
throw new ApiError('validate.error', 'store-id') |
|
|
|
|
|
|
59
|
|
|
} |
|
60
|
|
|
if (!_.has(ctx.request.headers, 'mina-source')) { |
|
61
|
|
|
throw new ApiError('validate.error', 'mina-source') |
|
62
|
|
|
} |
|
63
|
|
|
|
|
64
|
|
|
// guest |
|
65
|
|
|
if (permission === 'guest') { |
|
66
|
|
|
await next() |
|
|
|
|
|
|
67
|
|
|
} else if (permission === 'user') { |
|
68
|
|
|
return await checkUser() |
|
|
|
|
|
|
69
|
|
|
} else if (permission === 'audit') { |
|
70
|
|
|
return await checkAudit() |
|
|
|
|
|
|
71
|
|
|
} else { |
|
72
|
|
|
throw new ApiError('role.notExist') |
|
73
|
|
|
} |
|
74
|
|
|
|
|
75
|
|
|
} |
|
76
|
|
|
|
|
77
|
|
|
} |
|
78
|
|
|
|
garyvv /
node-sharp
Loading history...