From 812b079d45e99ed84ae05357670f207d6fa5f654 Mon Sep 17 00:00:00 2001 From: DCloud_json <630033903@qq.com> Date: Sun, 23 May 2021 22:15:26 +0800 Subject: [PATCH] Update index.js --- .../cloudfunctions/uni-id-cf/index.js | 618 +++++++++--------- 1 file changed, 309 insertions(+), 309 deletions(-) diff --git a/uniCloud-aliyun/cloudfunctions/uni-id-cf/index.js b/uniCloud-aliyun/cloudfunctions/uni-id-cf/index.js index 8a573dcd..6e0a2df4 100644 --- a/uniCloud-aliyun/cloudfunctions/uni-id-cf/index.js +++ b/uniCloud-aliyun/cloudfunctions/uni-id-cf/index.js @@ -1,14 +1,14 @@ -'use strict'; -let uniID = require('uni-id') -const uniCaptcha = require('uni-captcha') -const createConfig = require('uni-config-center') -const uniIdConfig = createConfig({ - pluginId: 'uni-id' -})._config -const db = uniCloud.database() -const dbCmd = db.command +'use strict'; +let uniID = require('uni-id') +const uniCaptcha = require('uni-captcha') +const createConfig = require('uni-config-center') +const uniIdConfig = createConfig({ + pluginId: 'uni-id' +})._config +const db = uniCloud.database() +const dbCmd = db.command exports.main = async (event, context) => { - //UNI_WYQ:这里的uniID换成新的，保证多人访问不会冲突 + //UNI_WYQ:这里的uniID换成新的，保证多人访问不会冲突 uniID = uniID.createInstance({context}) console.log('event : ' + JSON.stringify(event)) /* @@ -17,7 +17,7 @@ exports.main = async (event, context) => { params：业务数据内容 uniIdToken：系统自动传递的token，数据来源客户端的 uni.getStorageSync('uni_id_token') */ - const {action,uniIdToken,params} = event; + const {action,uniIdToken} = event; let params = event.params || {}; /* 2.在某些操作之前我们要对用户对身份进行校验（也就是要检查用户的token）再将得到的uid写入params.uid @@ -36,117 +36,117 @@ exports.main = async (event, context) => { 用户就这样轻易地伪造了他人的uid传递给服务端，有一句话叫：前端从来的数据是不可信任的 所以这里我们需要将uniID.checkToken返回的uid写入到params.uid */ - let noCheckAction = ['register','checkToken','login','logout','sendSmsCode','createCaptcha','verifyCaptcha','refreshCaptcha','inviteLogin','login_by_weixin','login_by_univerify','login_by_apple','loginBySms','resetPwdBySmsCode'] - if (!noCheckAction.includes(action)) { - if (!uniIdToken) { - return { - code: 403, - msg: '缺少token' - } - } - let payload = await uniID.checkToken(uniIdToken) - if (payload.code && payload.code > 0) { - return payload - } - params.uid = payload.uid - } - - //3.注册成功后创建新用户的积分表方法 - async function registerSuccess(uid) { - await db.collection('uni-id-scores').add({ - user_id: uid, - score: 1, - type: 1, - balance: 1, - comment: "", - create_date: Date.now() - }) - } - //4.记录成功登录的日志方法 - const loginLog = async (res = {}, type = 'login') => { - const now = Date.now() - const uniIdLogCollection = db.collection('uni-id-log') - let logData = { - deviceId: params.deviceId || context.DEVICEID, - ip: params.ip || context.CLIENTIP, - type, - ua: context.CLIENTUA, - create_date: now - }; - - Object.assign(logData, - res.code === 0 ? { - user_id: res.uid, - state: 1 - } : { - state: 0 - }) - if (res.type == 'register') { - await registerSuccess(res.uid) - } - return await uniIdLogCollection.add(logData) - } - + let noCheckAction = ['register','checkToken','login','logout','sendSmsCode','createCaptcha','verifyCaptcha','refreshCaptcha','inviteLogin','login_by_weixin','login_by_univerify','login_by_apple','loginBySms','resetPwdBySmsCode'] + if (!noCheckAction.includes(action)) { + if (!uniIdToken) { + return { + code: 403, + msg: '缺少token' + } + } + let payload = await uniID.checkToken(uniIdToken) + if (payload.code && payload.code > 0) { + return payload + } + params.uid = payload.uid + } + + //3.注册成功后创建新用户的积分表方法 + async function registerSuccess(uid) { + await db.collection('uni-id-scores').add({ + user_id: uid, + score: 1, + type: 1, + balance: 1, + comment: "", + create_date: Date.now() + }) + } + //4.记录成功登录的日志方法 + const loginLog = async (res = {}, type = 'login') => { + const now = Date.now() + const uniIdLogCollection = db.collection('uni-id-log') + let logData = { + deviceId: params.deviceId || context.DEVICEID, + ip: params.ip || context.CLIENTIP, + type, + ua: context.CLIENTUA, + create_date: now + }; + + Object.assign(logData, + res.code === 0 ? { + user_id: res.uid, + state: 1 + } : { + state: 0 + }) + if (res.type == 'register') { + await registerSuccess(res.uid) + } + return await uniIdLogCollection.add(logData) + } + let res = {} - switch (action) { //根据action的值执行对应的操作 - case 'bind_mobile_by_univerify': - let { - appid, apiKey, apiSecret - } = uniIdConfig.service.univerify - let univerifyRes = await uniCloud.getPhoneNumber({ - provider: 'univerify', - appid, - apiKey, - apiSecret, - access_token: params.access_token, - openid: params.openid - }) - if (univerifyRes.code === 0) { - res = await uniID.bindMobile({ - uid: params.uid, - mobile: univerifyRes.phoneNumber - }) - res.mobile = univerifyRes.phoneNumber - } - break; - case 'bind_mobile_by_sms': - console.log({ - uid: params.uid, - mobile: params.mobile, - code: params.code - }); - res = await uniID.bindMobile({ - uid: params.uid, - mobile: params.mobile, - code: params.code - }) - console.log(res); - break; - case 'register': - var { - username, password, nickname - } = params - if (/^1\d{10}$/.test(username)) { - return { - code: 401, - msg: '用户名不能是手机号' - } - }; - if (/^(\w-*\.*)+@(\w-?)+(\.\w{2,})+$/.test(username)) { - return { - code: 401, - msg: '用户名不能是邮箱' - } - } - res = await uniID.register({ - username, - password, - nickname - }); - if (res.code === 0) { - await registerSuccess(res.uid) - } - break; + switch (action) { //根据action的值执行对应的操作 + case 'bind_mobile_by_univerify': + let { + appid, apiKey, apiSecret + } = uniIdConfig.service.univerify + let univerifyRes = await uniCloud.getPhoneNumber({ + provider: 'univerify', + appid, + apiKey, + apiSecret, + access_token: params.access_token, + openid: params.openid + }) + if (univerifyRes.code === 0) { + res = await uniID.bindMobile({ + uid: params.uid, + mobile: univerifyRes.phoneNumber + }) + res.mobile = univerifyRes.phoneNumber + } + break; + case 'bind_mobile_by_sms': + console.log({ + uid: params.uid, + mobile: params.mobile, + code: params.code + }); + res = await uniID.bindMobile({ + uid: params.uid, + mobile: params.mobile, + code: params.code + }) + console.log(res); + break; + case 'register': + var { + username, password, nickname + } = params + if (/^1\d{10}$/.test(username)) { + return { + code: 401, + msg: '用户名不能是手机号' + } + }; + if (/^(\w-*\.*)+@(\w-?)+(\.\w{2,})+$/.test(username)) { + return { + code: 401, + msg: '用户名不能是邮箱' + } + } + res = await uniID.register({ + username, + password, + nickname + }); + if (res.code === 0) { + await registerSuccess(res.uid) + } + break; case 'login': //防止黑客恶意破解登录，连续登录失败一定次数后，需要用户提供验证码 const getNeedCaptcha = async () => { @@ -165,192 +165,192 @@ exports.main = async (event, context) => { .get(); return recentRecord.data.filter(item => item.state === 0).length === recordSize; } - - let passed = false; - let needCaptcha = await getNeedCaptcha(); - console.log('needCaptcha', needCaptcha); - if (needCaptcha) { - res = await uniCaptcha.verify({ - ...params, - scene: 'login' - }) - if (res.code === 0) passed = true; - } - - if (!needCaptcha || passed) { - res = await uniID.login({ - ...params, - queryField: ['username', 'email', 'mobile'] - }); - await loginLog(res); - needCaptcha = await getNeedCaptcha(); - } - - res.needCaptcha = needCaptcha; - break; - case 'login_by_weixin': - res = await uniID.loginByWeixin(params); - await uniID.updateUser({ - uid: res.uid, - username: "微信用户" - }); - res.userInfo.username = "微信用户" - await loginLog(res) - break; - case 'login_by_univerify': - res = await uniID.loginByuniverify(params) - await loginLog(res) - break; - case 'login_by_apple': - res = await uniID.loginByApple(params) - await loginLog(res) - break; - case 'checkToken': - res = await uniID.checkToken(uniIdToken); - break; - case 'logout': - res = await uniID.logout(uniIdToken) - break; - case 'sendSmsCode': - // 测试期间短信统一用 123456 正式项目删除即可 - return uniID.setVerifyCode({ - mobile: params.mobile, - code: '123456', - type: params.type - }) - // 简单限制一下客户端调用频率 - const ipLimit = await db.collection('uni-verify').where({ - ip: context.CLIENTIP, - created_at: dbCmd.gt(Date.now() - 60000) - }).get() - if (ipLimit.data.length > 0) { - return { - code: 429, - msg: '请求过于频繁' - } - } - const templateId = '11753' // 替换为自己申请的模板id - if (!templateId) { - return { - code: 500, - msg: 'sendSmsCode需要传入自己的templateId，参考https://uniapp.dcloud.net.cn/uniCloud/uni-id?id=sendsmscode' - } - } - const randomStr = '00000' + Math.floor(Math.random() * 1000000) - const code = randomStr.substring(randomStr.length - 6) - res = await uniID.sendSmsCode({ - mobile: params.mobile, - code, - type: params.type, - templateId - }) - await loginLog(res) - break; - case 'loginBySms': - if (!params.code) { - return { - code: 500, - msg: '请填写验证码' - } - } - if (!/^1\d{10}$/.test(params.mobile)) { - return { - code: 500, - msg: '手机号码填写错误' - } - } - res = await uniID.loginBySms(params) - await loginLog(res) - break; - case 'inviteLogin': - if (!params.code) { - return { - code: 500, - msg: '请填写验证码' - } - } - res = await uniID.loginBySms({ - ...params, - type: 'register' - }) - break; - case 'resetPwdBySmsCode': - if (!params.code) { - return { - code: 500, - msg: '请填写验证码' - } - } - if (!/^1\d{10}$/.test(params.mobile)) { - return { - code: 500, - msg: '手机号码填写错误' - } - } - let loginBySmsRes = await uniID.loginBySms(params) - console.log(loginBySmsRes); - if (loginBySmsRes.code === 0) { - res = await uniID.resetPwd({ - password: params.password, - "uid": loginBySmsRes.uid - }) - } else { - return loginBySmsRes - } - break; - case 'getInviteCode': - res = await uniID.getUserInfo({ - uid: params.uid, - field: ['my_invite_code'] - }) - if (res.code === 0) { - res.myInviteCode = res.userInfo.my_invite_code - delete res.userInfo - } - break; - case 'getInvitedUser': - res = await uniID.getInvitedUser(params) - break; - case 'updatePwd': - res = await uniID.updatePwd({ - uid: params.uid, - ...params - }) - break; - case 'createCaptcha': - res = await uniCaptcha.create(params) - break; - case 'refreshCaptcha': - res = await uniCaptcha.refresh(params) - break; - case 'registerAdmin': - var { - username, password - } = params - let { - total - } = await db.collection('uni-id-users').where({ - role: 'admin' - }).count() - if (total) { - return { - code: 10001, - message: '超级管理员已存在，请登录...' - } - } - return this.ctx.uniID.register({ - username, - password, - role: ["admin"] - }) - break; - default: - res = { - code: 403, - msg: '非法访问' - } - break; - } - //返回数据给客户端 - return res + + let passed = false; + let needCaptcha = await getNeedCaptcha(); + console.log('needCaptcha', needCaptcha); + if (needCaptcha) { + res = await uniCaptcha.verify({ + ...params, + scene: 'login' + }) + if (res.code === 0) passed = true; + } + + if (!needCaptcha || passed) { + res = await uniID.login({ + ...params, + queryField: ['username', 'email', 'mobile'] + }); + await loginLog(res); + needCaptcha = await getNeedCaptcha(); + } + + res.needCaptcha = needCaptcha; + break; + case 'login_by_weixin': + res = await uniID.loginByWeixin(params); + await uniID.updateUser({ + uid: res.uid, + username: "微信用户" + }); + res.userInfo.username = "微信用户" + await loginLog(res) + break; + case 'login_by_univerify': + res = await uniID.loginByuniverify(params) + await loginLog(res) + break; + case 'login_by_apple': + res = await uniID.loginByApple(params) + await loginLog(res) + break; + case 'checkToken': + res = await uniID.checkToken(uniIdToken); + break; + case 'logout': + res = await uniID.logout(uniIdToken) + break; + case 'sendSmsCode': + // 测试期间短信统一用 123456 正式项目删除即可 + return uniID.setVerifyCode({ + mobile: params.mobile, + code: '123456', + type: params.type + }) + // 简单限制一下客户端调用频率 + const ipLimit = await db.collection('uni-verify').where({ + ip: context.CLIENTIP, + created_at: dbCmd.gt(Date.now() - 60000) + }).get() + if (ipLimit.data.length > 0) { + return { + code: 429, + msg: '请求过于频繁' + } + } + const templateId = '11753' // 替换为自己申请的模板id + if (!templateId) { + return { + code: 500, + msg: 'sendSmsCode需要传入自己的templateId，参考https://uniapp.dcloud.net.cn/uniCloud/uni-id?id=sendsmscode' + } + } + const randomStr = '00000' + Math.floor(Math.random() * 1000000) + const code = randomStr.substring(randomStr.length - 6) + res = await uniID.sendSmsCode({ + mobile: params.mobile, + code, + type: params.type, + templateId + }) + await loginLog(res) + break; + case 'loginBySms': + if (!params.code) { + return { + code: 500, + msg: '请填写验证码' + } + } + if (!/^1\d{10}$/.test(params.mobile)) { + return { + code: 500, + msg: '手机号码填写错误' + } + } + res = await uniID.loginBySms(params) + await loginLog(res) + break; + case 'inviteLogin': + if (!params.code) { + return { + code: 500, + msg: '请填写验证码' + } + } + res = await uniID.loginBySms({ + ...params, + type: 'register' + }) + break; + case 'resetPwdBySmsCode': + if (!params.code) { + return { + code: 500, + msg: '请填写验证码' + } + } + if (!/^1\d{10}$/.test(params.mobile)) { + return { + code: 500, + msg: '手机号码填写错误' + } + } + let loginBySmsRes = await uniID.loginBySms(params) + console.log(loginBySmsRes); + if (loginBySmsRes.code === 0) { + res = await uniID.resetPwd({ + password: params.password, + "uid": loginBySmsRes.uid + }) + } else { + return loginBySmsRes + } + break; + case 'getInviteCode': + res = await uniID.getUserInfo({ + uid: params.uid, + field: ['my_invite_code'] + }) + if (res.code === 0) { + res.myInviteCode = res.userInfo.my_invite_code + delete res.userInfo + } + break; + case 'getInvitedUser': + res = await uniID.getInvitedUser(params) + break; + case 'updatePwd': + res = await uniID.updatePwd({ + uid: params.uid, + ...params + }) + break; + case 'createCaptcha': + res = await uniCaptcha.create(params) + break; + case 'refreshCaptcha': + res = await uniCaptcha.refresh(params) + break; + case 'registerAdmin': + var { + username, password + } = params + let { + total + } = await db.collection('uni-id-users').where({ + role: 'admin' + }).count() + if (total) { + return { + code: 10001, + message: '超级管理员已存在，请登录...' + } + } + return this.ctx.uniID.register({ + username, + password, + role: ["admin"] + }) + break; + default: + res = { + code: 403, + msg: '非法访问' + } + break; + } + //返回数据给客户端 + return res }; -- GitLab