-
-
Notifications
You must be signed in to change notification settings - Fork 256
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
12 changed files
with
223 additions
and
66 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,17 +1,143 @@ | ||
| import { Context, Schema } from 'koishi' | ||
| import {} from '@koishijs/plugin-console' | ||
| import { Awaitable, Context, pick, Schema, Time, User } from 'koishi' | ||
| import { DataService, SocketHandle } from '@koishijs/plugin-console' | ||
| import { resolve } from 'path' | ||
| import { v4 } from 'uuid' | ||
|
|
||
| export interface Config {} | ||
| declare module 'koishi' { | ||
| interface User { | ||
| password: string | ||
| token: string | ||
| expire: number | ||
| } | ||
| } | ||
|
|
||
| declare module '@koishijs/plugin-console' { | ||
| interface SocketHandle { | ||
| user?: AuthUser | ||
| } | ||
|
|
||
| export const name = 'auth' | ||
| export const using = ['console'] as const | ||
| export const schema: Schema<Config> = Schema.object({}) | ||
| namespace Console { | ||
| interface Services { | ||
| user: AuthService | ||
| } | ||
| } | ||
|
|
||
| export function apply(ctx: Context) { | ||
| if (ctx.console.config.devMode) { | ||
| ctx.console.addEntry(resolve(__dirname, '../client/index.ts')) | ||
| } else { | ||
| ctx.console.addEntry(resolve(__dirname, '../dist')) | ||
| interface Events { | ||
| 'login/platform'(this: SocketHandle, platform: string, userId: string): Awaitable<LoginUser> | ||
| 'login/password'(this: SocketHandle, name: string, password: string): void | ||
| 'login/token'(this: SocketHandle, id: string, token: string): void | ||
| 'user/modify'(this: SocketHandle, data: Partial<Pick<User, 'name' | 'password'>>): void | ||
| } | ||
| } | ||
|
|
||
| export type AuthUser = Pick<User, 'id' | 'name' | 'password' | 'authority' | 'token' | 'expire'> | ||
| export type LoginUser = Pick<User, 'id' | 'name' | 'token' | 'expire'> | ||
|
|
||
| const authFields = ['name', 'password', 'authority', 'id', 'expire', 'token'] as (keyof AuthUser)[] | ||
|
|
||
| function initAuth(handle: SocketHandle, value: AuthUser) { | ||
| handle.user = value | ||
| handle.send({ type: 'data', body: { key: 'user', value } }) | ||
| } | ||
|
|
||
| class AuthService extends DataService<AuthUser> { | ||
| static using = ['console', 'database'] as const | ||
|
|
||
| constructor(ctx: Context, private config: AuthService.Config) { | ||
| super(ctx, 'user') | ||
|
|
||
| ctx.model.extend('user', { | ||
| password: 'string(63)', | ||
| token: 'string(63)', | ||
| expire: 'unsigned(20)', | ||
| }) | ||
|
|
||
| if (ctx.console.config.devMode) { | ||
| ctx.console.addEntry(resolve(__dirname, '../client/index.ts')) | ||
| } else { | ||
| ctx.console.addEntry(resolve(__dirname, '../dist')) | ||
| } | ||
|
|
||
| this.initLogin() | ||
| } | ||
|
|
||
| initLogin() { | ||
| const { ctx, config } = this | ||
| const states: Record<string, [string, number, SocketHandle]> = {} | ||
|
|
||
| ctx.console.addListener('login/password', async function (name, password) { | ||
| const user = await ctx.database.getUser('name', name, authFields) | ||
| if (!user || user.password !== password) throw new Error('用户名或密码错误。') | ||
| user.token = v4() | ||
| user.expire = Date.now() + config.authTokenExpire | ||
| await ctx.database.setUser('name', name, pick(user, ['token', 'expire'])) | ||
| initAuth(this, user) | ||
| }) | ||
|
|
||
| ctx.console.addListener('login/token', async function (id, token) { | ||
| const user = await ctx.database.getUser('id', id, authFields) | ||
| if (!user) throw new Error('用户不存在。') | ||
| if (user.token !== token || user.expire <= Date.now()) throw new Error('令牌已失效。') | ||
| initAuth(this, user) | ||
| }) | ||
|
|
||
| ctx.console.addListener('login/platform', async function (platform, userId) { | ||
| const user = await ctx.database.getUser(platform, userId, ['name']) | ||
| if (!user) throw new Error('找不到此账户。') | ||
| const id = `${platform}:${userId}` | ||
| const token = v4() | ||
| const expire = Date.now() + config.loginTokenExpire | ||
| states[id] = [token, expire, this] | ||
|
|
||
| const listener = () => { | ||
| delete states[id] | ||
| dispose() | ||
| this.socket.off('close', listener) | ||
| } | ||
| const dispose = ctx.setTimeout(() => { | ||
| if (states[id]?.[1] >= Date.now()) listener() | ||
| }, config.loginTokenExpire) | ||
| this.socket.on('close', listener) | ||
|
|
||
| return { id: user.id, name: user.name, token, expire } | ||
| }) | ||
|
|
||
| ctx.any().private().middleware(async (session, next) => { | ||
| const state = states[session.uid] | ||
| if (state && state[0] === session.content) { | ||
| const user = await session.observeUser(authFields) | ||
| user.token = v4() | ||
| user.expire = Date.now() + config.authTokenExpire | ||
| return initAuth(state[2], user) | ||
| } | ||
| return next() | ||
| }, true) | ||
|
|
||
| ctx.on('console/intercept', async (handle, listener) => { | ||
| if (!listener.authority) return false | ||
| if (!handle.user) return true | ||
| if (handle.user.expire <= Date.now()) return true | ||
| return handle.user.authority < listener.authority | ||
| }) | ||
|
|
||
| ctx.console.addListener('user/modify', async function ({ name, password }) { | ||
| // const user = await ctx.database.getUser('id', id, ['token', 'expire', 'authority', 'password']) | ||
| // if (!user || password === user.password) return | ||
| // await ctx.database.setUser('id', id, { password }) | ||
| }) | ||
| } | ||
| } | ||
|
|
||
| namespace AuthService { | ||
| export interface Config { | ||
| authTokenExpire?: number | ||
| loginTokenExpire?: number | ||
| } | ||
|
|
||
| export const Config: Schema<Config> = Schema.object({ | ||
| authTokenExpire: Schema.natural().role('ms').default(Time.week).description('用户令牌有效期。'), | ||
| loginTokenExpire: Schema.natural().role('ms').default(Time.minute * 10).description('登录令牌有效期。'), | ||
| }) | ||
| } | ||
|
|
||
| export default AuthService |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.