nsgm-cli/client/utils/sso.ts

A CLI tool to run Next/Style-components and Graphql/Mysql fullstack project

import axios from "axios";
import { setCookie, getCookie, delCookie } from "./cookie";
import { getUrlParamByKey, getLocalApiPrefix, getLocalEnv, handleXSS } from "./common";
import _ from "lodash";

const env = getLocalEnv();

const LOGIN_COOKIE_ID = `${env}_cas_nsgm`;
const LOGIN_COOKIE_USER = `${env}_nsgm_user`;

const getPrincipalUrl = () => {
  const url = `${getLocalApiPrefix()}/rest/sso/sessionCheck`;
  return url;
};

const getValidateUrl = () => {
  const url = `${getLocalApiPrefix()}/rest/sso/ticketCheck`;
  return url;
};

const handleLocationHref = () => {
  let newHref = "";
  if (typeof window !== "undefined") {
    const locationHref = window.location.href;
    if (locationHref.indexOf("?") !== -1) {
      const locationHrefArr = locationHref.split("?");
      const locationHrefArrLen = locationHrefArr.length;

      let newParamStr = "";

      if (locationHrefArrLen > 1) {
        const paramStr = locationHrefArr[1];
        if (paramStr.indexOf("&") !== -1) {
          const paramArr = paramStr.split("&");

          _.each(paramArr, (item) => {
            if (item.indexOf("=") !== -1) {
              const itemArr = item.split("=");
              const itemArrLen = itemArr.length;

              const key = itemArr[0];
              let value = "";
              if (itemArrLen > 1) value = itemArr[1];

              if ("ticket" !== key) {
                newParamStr += `${key}=${value}&`;
              }
            }
          });

          newParamStr = newParamStr.substring(0, newParamStr.length - 1);
        } else {
          if (paramStr.indexOf("ticket") === -1) {
            newParamStr = paramStr;
          }
        }
      }

      const locationHrefArrFirst = locationHrefArr[0];
      if (newParamStr !== "") newHref = `${locationHrefArrFirst}?${newParamStr}`;
      else newHref = locationHrefArrFirst;
    } else {
      newHref = locationHref;
    }
  }
  return encodeURIComponent(newHref);
};

const jumpToLogin = () => {
  delCookie(LOGIN_COOKIE_ID);
  delCookie(LOGIN_COOKIE_USER);

  if (typeof window !== "undefined") {
    window.location.href = `${window.location.origin}/login`;
  }
};

const principalLogin = (cookie: string, callback: any) => {
  let url = getPrincipalUrl();

  if (typeof window !== "undefined") {
    url += `?cookieValue=${cookie}&redirectUrl=${handleLocationHref()}`;
  }

  axios
    .get(url, { params: { credentials: "include" } })
    .then((res: any) => {
      const { data } = res;
      if (data) {
        const { returnCode, userAttr } = data;
        if (returnCode !== 0) {
          jumpToLogin();
        } else {
          storeLoginUser(userAttr, callback);
        }
      } else {
        jumpToLogin();
      }
    })
    .catch((e) => {
      console.error("principalLogin_exception", e);
      jumpToLogin();
    });
};

const storeLoginUser = (userAttr: any, callback: any) => {
  if (userAttr) {
    const user = JSON.stringify(userAttr, [
      "city",
      "company",
      "department",
      "displayName",
      "employee",
      "mail",
      "name",
      "sn",
    ]);
    setCookie(LOGIN_COOKIE_USER, user, null);
    callback?.(JSON.parse(user));
  } else {
    callback?.();
  }
};

const storeLogin = (cookie: any, cookieExpire: any, userAttr: any, callback: any) => {
  if (cookie) {
    setCookie(LOGIN_COOKIE_ID, cookie, cookieExpire);
  }

  storeLoginUser(userAttr, callback);
};

const validateLogin = (ticket: string, name = "", callback: any) => {
  let url = getValidateUrl();

  if (typeof window !== "undefined") {
    url += `?ticket=${ticket}`;

    if (name !== "") {
      url += `&name=${name}`;
    }
  }

  axios
    .get(url, { params: { credentials: "include" } })
    .then((res: any) => {
      if (res) {
        const { data } = res;
        if (data) {
          const { cookieValue, cookieExpire, returnCode, userAttr } = data;
          if (returnCode === 0) {
            storeLogin(cookieValue, cookieExpire, userAttr, callback);
          } else {
            jumpToLogin();
          }
        } else {
          jumpToLogin();
        }
      } else {
        jumpToLogin();
      }
    })
    .catch((e) => {
      console.error("validateLogin_exception", e);
    });
};

export const login = (callback: any) => {
  const cookieLoginValue = getCookie(LOGIN_COOKIE_ID);

  if (typeof window !== "undefined") {
    const locationHref = window.location.href;

    // 如果已经在登录页面，不需要进行登录检查
    if (locationHref.indexOf("/login") !== -1) {
      callback?.();
      return;
    }

    // 如果没有登录凭证，立即跳转到登录页面
    if (cookieLoginValue === "") {
      const urlParamTicket = getUrlParamByKey("ticket");
      const urlParamName = getUrlParamByKey("name");

      if (urlParamTicket !== "") {
        validateLogin(urlParamTicket, urlParamName, callback);
      } else {
        // 没有ticket参数，直接跳转到登录页
        jumpToLogin();
        // 不执行回调，因为页面将被重定向
        return;
      }
    } else {
      // 有登录凭证，验证登录状态
      principalLogin(cookieLoginValue, callback);
    }
  } else {
    callback?.();
  }
};

export const directLogin = (userName: string, userPassword: string, callback: any) => {
  if (userName === "") {
    return { success: false, message: "请输入用户名" };
  }
  if (userPassword === "") {
    return { success: false, message: "请输入密码" };
  }

  // 使用 encodeURIComponent 处理可能的特殊字符，然后再进行 Base64 编码
  const safeStr = handleXSS(`${userName},${userPassword}`);
  const encodedName = btoa(encodeURIComponent(safeStr));
  const apiPrefix = getLocalApiPrefix();
  const url = `${apiPrefix}/rest/sso/ticketCheck?ticket=XXX&name=${encodedName}`;

  console.warn("[Login] Login URL:", url);
  console.warn("[Login] Username:", userName);

  return fetch(url)
    .then((response) => {
      console.warn("[Login] Response status:", response.status);
      return response.json();
    })
    .then((data) => {
      console.warn("[Login] Response data:", data);
      if (data && data.returnCode === 0) {
        // 登录成功，设置cookie
        if (typeof window !== "undefined") {
          console.warn("[Login] Login successful");
          storeLogin(data.cookieValue, data.cookieExpire, data.userAttr, callback);
          return { success: true };
        }
      }
      console.warn("[Login] Login failed, returnCode:", data?.returnCode, "message:", data?.message);
      return { success: false, message: "用户名或密码错误" };
    })
    .catch((error) => {
      console.warn("[Login] Login request failed:", error);
      return { success: false, message: "登录请求失败，请稍后重试" };
    });
};

export const logout = () => {
  jumpToLogin();
};