mirror of
https://github.com/chaos-zhu/easynode.git
synced 2026-10-07 14:58:08 +08:00
32 lines
1.2 KiB
JavaScript
32 lines
1.2 KiB
JavaScript
const { apiPrefix } = require('../config')
|
|
const { verifyAuthSync, enumLoginCode } = require('../utils/verify-auth')
|
|
|
|
let whitePath = [
|
|
'/login',
|
|
'/get-pub-pem'
|
|
].map(item => (apiPrefix + item))
|
|
consola.info('路由白名单：', whitePath)
|
|
|
|
const useAuth = async ({ request, res }, next) => {
|
|
const { path, headers: { token, uid } } = request
|
|
// consola.info('verify path: ', path)
|
|
if (whitePath.includes(path)) return next()
|
|
if (!token) return res.fail({ msg: '未登录(token)', status: 401 })
|
|
if (!uid) return res.fail({ msg: '未登录(uid)', status: 401 })
|
|
// 验证token
|
|
const { code } = await verifyAuthSync(token, uid)
|
|
switch (code) {
|
|
case enumLoginCode.SUCCESS:
|
|
return await next()
|
|
case enumLoginCode.EXPIRES:
|
|
return res.fail({ msg: '登录态已过期, 请重新登录', status: 401 })
|
|
case enumLoginCode.ERROR_TOKEN:
|
|
return res.fail({ msg: 'TOKEN校验失败, 请重新登录', status: 401 })
|
|
case enumLoginCode.ERROR_UID:
|
|
consola.warn('用户id校验失败(可能存在外部攻击): ', path)
|
|
return res.fail({ msg: 'UID错误!!!', status: 403 })
|
|
}
|
|
}
|
|
|
|
module.exports = useAuth
|