向普通 Express 路由提供 parse authInfo 和 authorization 的支持

[Wang Ziting]

有用户希望在普通 Express 路由中使用这两个中间件（

leanengine-node-sdk/lib/leanengine.js

Lines 85 to 181 in 5d9532e

 // parse authInfo 
 Cloud.use(route, function(req, res, next) { 
   var appId, appKey, masterKey, contentType, param, prod, prodHeader, prodValue, sessionToken; 
   contentType = req.headers['content-type']; 
   if (/^text\/plain.*/i.test(contentType)) { 
     if (req.body && req.body !== '') { 
       req.body = JSON.parse(req.body); 
     } 
     appId = req.body._ApplicationId; 
     appKey = req.body._ApplicationKey; 
     masterKey = req.body._MasterKey; 
     prodValue = req.body._ApplicationProduction; 
     sessionToken = req.body._SessionToken; 
     for (param in req.body) { 
       if (param.charAt(0) === '_') { 
         delete req.body[param]; 
       } 
     } 
     prod = 1; 
     if (prodValue === 0 || prodValue === false) { 
       prod = 0; 
     } 
     req.AV = { 
       id: appId, 
       key: appKey, 
       masterKey: masterKey, 
       prod: prod, 
       sessionToken: sessionToken 
     }; 
   } else { 
     appId = req.headers['x-lc-id'] || 
       req.headers['x-avoscloud-application-id'] || 
       req.headers['x-uluru-application-id']; 
     appKey = req.headers['x-lc-key'] || 
       req.headers['x-avoscloud-application-key'] || 
       req.headers['x-uluru-application-key']; 
     masterKey = req.headers['x-avoscloud-master-key'] || req.headers['x-uluru-master-key']; 
     prodHeader = req.headers['x-lc-prod'] || 
       req.headers['x-avoscloud-application-production'] || 
       req.headers['x-uluru-application-production']; 
     sessionToken = req.headers['x-lc-session'] || 
       req.headers['x-uluru-session-token'] || 
       req.headers['x-avoscloud-session-token']; 
     prod = 1; 
     if (prodHeader === '0' || prodHeader === 'false') { 
       prod = 0; 
     } 
     if (appKey && (appKey.indexOf(',master') > 0)) { 
       masterKey = appKey.slice(0, appKey.indexOf(',')); 
       appKey = null; 
     } 
     req.AV = { 
       id: appId, 
       key: appKey, 
       masterKey: masterKey, 
       prod: prod, 
       sessionToken: sessionToken 
     }; 
   } 
   return next(); 
 }); 
  
 // authorization 
 Cloud.use(route, function(req, res, next) { 
   var key, master, requestSign, sign, timestamp, validSign, _ref; 
   if (!req.AV.id) { 
     return unauthResp(res); 
   } 
   if (AV.applicationId === req.AV.id && 
       (AV.applicationKey === req.AV.key || 
        AV.masterKey === req.AV.key || 
        AV.masterKey === req.AV.masterKey)) { 
     if (AV.masterKey === req.AV.masterKey) { 
       req.AV.authMasterKey = true; 
     } 
     return next(); 
   } 
   requestSign = req.headers['x-lc-sign'] || req.headers['x-avoscloud-request-sign']; 
   if (requestSign) { 
     _ref = requestSign.split(','); 
     sign = _ref[0]; 
     timestamp = _ref[1]; 
     master = _ref[2]; 
     key = master === 'master' ? AV.masterKey : AV.applicationKey; 
     validSign = signByKey(timestamp, key); 
     if (validSign === sign.toLowerCase()) { 
       if (master === 'master') { 
         req.AV.authMasterKey = true; 
         req.AV.masterKey = key; 
       } else { 
         req.AV.key = key; 
       } 
       return next(); 
     } 
   } 
   return unauthResp(res); 
 }); 

），可以考虑将 leanengine.js 中主要的中间件都拆分到单独的文件，以便用户可以自行使用。

[Wang Ziting]

届时也可以支持一下 WebSocket

[AN Long]

👍

[Wang Ziting]

已在 #102 中支持