session_auth.js 4.2 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798
  1. 'use strict';
  2. // 加密类
  3. const crypto = require('crypto');
  4. const messageType = require('../const/message_type');
  5. module.exports = options => {
  6. /**
  7. * session判断中间件
  8. *
  9. * @param {function} next - 中间件继续执行的方法
  10. * @return {void}
  11. */
  12. return function* sessionAuth(next) {
  13. try {
  14. // 判断session
  15. const sessionUser = this.session.sessionUser;
  16. if (sessionUser === undefined) {
  17. throw '不存在session';
  18. }
  19. // 校验session
  20. if (sessionUser.account === undefined || sessionUser.loginTime === undefined) {
  21. throw '用户数据不完整';
  22. }
  23. // 校验session
  24. const sessionToken = crypto.createHmac('sha1', sessionUser.loginTime + '')
  25. .update(sessionUser.account).digest('hex').toString('base64');
  26. if (sessionToken !== sessionUser.sessionToken) {
  27. throw 'session数据错误';
  28. }
  29. // 获取用户新建标段权利
  30. const accountInfo = yield this.service.projectAccount.getDataById(this.session.sessionUser.accountId);
  31. this.session.sessionUser.permission = accountInfo !== undefined && accountInfo.permission !== '' ? JSON.parse(accountInfo.permission) : null;
  32. const projectData = yield this.service.project.getDataById(this.session.sessionProject.id);
  33. this.session.sessionProject.page_show = yield this.service.projectAccount.getPageShow(projectData.page_show);
  34. this.session.sessionProject.custom = projectData.custom;
  35. this.session.sessionProject.dataCollect = projectData.data_collect;
  36. this.session.sessionProject.customType = projectData.customType;
  37. // 判断是否有权限查看决策大屏
  38. let showDataCollect = 0;
  39. if (projectData.data_collect) {
  40. if (sessionUser.is_admin) {
  41. showDataCollect = 1;
  42. } else {
  43. const grounpInfo = yield this.service.datacollectAudit.getGroupInfo(projectData.id, accountInfo.account_group);
  44. if (grounpInfo) {
  45. showDataCollect = 1;
  46. } else {
  47. const auditInfo = yield this.service.datacollectAudit.getDataByCondition({ pid: projectData.id, uid: accountInfo.id });
  48. if (auditInfo) {
  49. showDataCollect = 1;
  50. }
  51. }
  52. }
  53. }
  54. this.session.sessionProject.showDataCollect = showDataCollect;
  55. // 同步消息
  56. yield this.service.notify.syncNotifyData();
  57. // 同步系统维护信息
  58. yield this.service.maintain.syncMaintainData();
  59. if (this.session === null) {
  60. throw '系统维护中~';
  61. }
  62. // 对sub_menu项目默认打开页进行配置
  63. const path = yield this.service.settingShow.getDefaultPath(this.session.sessionProject.id);
  64. path && (this.curListUrl = path);
  65. } catch (error) {
  66. if (this.helper.isAjax(this.request)) {
  67. return this.body = {
  68. err: 2,
  69. msg: '登录信息异常,请重新登录',
  70. data: '',
  71. };
  72. } else if (this.session === null) {
  73. if (this.helper.isWap(this.request)) {
  74. this.session.wapTenderID = this.params.id ? this.params.id : null;
  75. return this.redirect('/wap/login?referer=' + this.url);
  76. }
  77. return this.redirect('/login?referer=' + this.url);
  78. }
  79. if (this.helper.isWap(this.request)) {
  80. this.session.wapTenderID = this.params.id ? this.params.id : null;
  81. return this.redirect('/wap/login?referer=' + this.url);
  82. }
  83. this.session.message = {
  84. type: messageType.ERROR,
  85. icon: 'exclamation-circle',
  86. message: '登录信息异常,请重新登录',
  87. };
  88. return this.redirect('/login?referer=' + this.url);
  89. }
  90. yield next;
  91. };
  92. };