feat: 支持登陆时发放云函数调试令牌；支持配置 token 过期时间；

labring · Aug 4, 2021 · 2b33cc4 · 2b33cc4
1 parent 7d2f7f9
commit 2b33cc4
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 2 deletions.
diff --git a/packages/devops-server/src/config.ts b/packages/devops-server/src/config.ts
@@ -109,6 +109,13 @@ export default class Config {
     return (process.env.PORT ?? 9000) as number
   }
 
+  /**
+   * 指定服务端令牌默认过期时间（小时）
+   */
+  static get TOKEN_EXPIRED_TIME(): number{
+    return (process.env.TOKEN_EXPIRED_TIME ?? 24) as number
+  }
+
   /**
    * 是否生产环境
    */

diff --git a/packages/devops-server/src/router/admin/handlers.ts b/packages/devops-server/src/router/admin/handlers.ts
@@ -3,6 +3,7 @@ import { getToken } from '../../lib/utils/token'
 import { checkPermission, getPermissions } from '../../api/permission'
 import { hashPassword } from '../../lib/utils/hash'
 import { Globals } from '../../lib/globals'
+import Config from '../../config'
 
 const db = Globals.sys_db
 const logger = Globals.logger
@@ -37,8 +38,7 @@ export async function handleAdminLogin(req: Request, res: Response) {
   if (ret.ok && ret.data.length) {
     const admin = ret.data[0]
 
-    // 默认 token 有效期为 7 天
-    const expire = Math.floor(Date.now() / 1000) + 60 * 60 * 24 * 7
+    const expire = Math.floor(Date.now() / 1000) + 60 * 60 * Config.TOKEN_EXPIRED_TIME
     const payload = {
       uid: admin._id,
       type: 'admin',
@@ -47,10 +47,19 @@ export async function handleAdminLogin(req: Request, res: Response) {
     const access_token = getToken(payload)
     logger.info(`[${requestId}] admin login success: ${admin._id} ${username}`)
 
+    let debug_token = undefined
+
+    // if user has debug function permission
+    const canDebug = await checkPermission(admin._id, 'function.debug')
+    if (canDebug === 0) {
+      debug_token = getToken({ uid: admin._id, type: 'debug', exp: expire }, Config.APP_SERVER_SECRET_SALT)
+    }
+
     return res.send({
       code: 0,
       data: {
         access_token,
+        debug_token,
         username,
         uid: admin._id,
         expire