FastGPT/admin/service/route/system.js

import jwt from 'jsonwebtoken';
import { System } from '../schema.js';

const adminAuth = {
  username: process.env.ADMIN_USER,
  password: process.env.ADMIN_PASS
};
const authSecret = process.env.ADMIN_SECRET;

const postParent = () => {
  fetch(`${process.env.PARENT_URL}/api/system/updateEnv`, {
    headers: {
      rootkey: process.env.PARENT_ROOT_KEY
    }
  });
};

export const useSystemRoute = (app) => {
  app.post('/api/login', (req, res) => {
    if (!adminAuth.username || !adminAuth.password) {
      res.status(401).end('Server not set env: ADMIN_USER, ADMIN_PASS');
      return;
    }

    const { username, password } = req.body;

    if (username === adminAuth.username && password === adminAuth.password) {
      // 用户名和密码都正确，返回token
      const token = jwt.sign(
        {
          username,
          platform: 'admin'
        },
        authSecret,
        {
          expiresIn: '2h'
        }
      );

      res.json({
        username,
        token: token,
        expiredAt: new Date().valueOf() + 2 * 60 * 60 * 1000
      });
    } else {
      res.status(401).end('username or password incorrect');
    }
  });
  app.get('/system', auth(), async (req, res) => {
    try {
      const data = await System.find();
      const totalCount = await System.countDocuments();

      res.header('Access-Control-Expose-Headers', 'X-Total-Count');
      res.header('X-Total-Count', totalCount);
      res.json(
        data.map((item) => {
          const obj = item.toObject();
          return {
            ...obj,
            id: obj._id
          };
        })
      );
    } catch (error) {
      console.log(error);

      res.status(500).json({ error: 'Error creating system env' });
    }
  });
  app.post('/system', auth(), async (req, res) => {
    try {
      await System.create({
        ...req.body,
        sensitiveCheck: req.body.sensitiveCheck === 'true'
      });
      postParent();
      res.json({});
    } catch (error) {
      res.status(500).json({ error: 'Error creating system env' });
    }
  });
  app.put('/system/:id', auth(), async (req, res) => {
    try {
      const _id = req.params.id;
      await System.findByIdAndUpdate(_id, {
        ...req.body,
        sensitiveCheck: req.body.sensitiveCheck === 'true'
      });
      postParent();
      res.json({});
    } catch (error) {
      res.status(500).json({ error: 'Error updating system env' });
    }
  });
  app.delete('/system/:id', auth(), async (req, res) => {
    try {
      const _id = req.params.id;
      await System.findByIdAndDelete(_id);

      res.json({});
    } catch (error) {
      res.status(500).json({ error: 'Error updating system env' });
    }
  });
};

export const auth = () => {
  return (req, res, next) => {
    try {
      const authorization = req.headers.authorization;
      if (!authorization) {
        res.status(401).end('not found authorization in headers');
        return;
      }

      const token = authorization.slice('Bearer '.length);

      const payload = jwt.verify(token, authSecret);
      if (typeof payload === 'string') {
        res.status(401).end('payload type error');
        return;
      }
      if (payload.platform !== 'admin') {
        res.status(401).end('Payload invalid');
        return;
      }

      next();
    } catch (err) {
      res.status(401).end(String(err));
    }
  };
};