mirror of
https://github.com/labring/FastGPT.git
synced 2025-07-22 20:37:48 +00:00

* chore: upgrade mongoose to v8.10.x for security * chore: remove duplicate code * fix: ts error
72 lines
1.8 KiB
TypeScript
72 lines
1.8 KiB
TypeScript
import { AppDetailType } from '@fastgpt/global/core/app/type';
|
|
import { OutLinkSchema } from '@fastgpt/global/support/outLink/type';
|
|
import { parseHeaderCert } from '../controller';
|
|
import { MongoOutLink } from '../../outLink/schema';
|
|
import { OutLinkErrEnum } from '@fastgpt/global/common/error/code/outLink';
|
|
import { OwnerPermissionVal } from '@fastgpt/global/support/permission/constant';
|
|
import { authAppByTmbId } from '../app/auth';
|
|
import { AuthModeType, AuthResponseType } from '../type';
|
|
|
|
/* crud outlink permission */
|
|
export async function authOutLinkCrud({
|
|
outLinkId,
|
|
per = OwnerPermissionVal,
|
|
...props
|
|
}: AuthModeType & {
|
|
outLinkId: string;
|
|
}): Promise<
|
|
AuthResponseType & {
|
|
app: AppDetailType;
|
|
outLink: OutLinkSchema;
|
|
}
|
|
> {
|
|
const result = await parseHeaderCert(props);
|
|
const { tmbId, teamId } = result;
|
|
|
|
const { app, outLink } = await (async () => {
|
|
const outLink = await MongoOutLink.findOne({ _id: outLinkId, teamId });
|
|
if (!outLink) {
|
|
return Promise.reject(OutLinkErrEnum.unExist);
|
|
}
|
|
|
|
if (String(outLink.teamId) !== teamId) {
|
|
return Promise.reject(OutLinkErrEnum.unAuthLink);
|
|
}
|
|
|
|
const { app } = await authAppByTmbId({
|
|
tmbId,
|
|
appId: outLink.appId,
|
|
per
|
|
});
|
|
|
|
return {
|
|
outLink,
|
|
app
|
|
};
|
|
})();
|
|
|
|
return {
|
|
...result,
|
|
permission: app.permission,
|
|
app,
|
|
outLink
|
|
};
|
|
}
|
|
|
|
/* outLink exist and it app exist */
|
|
export async function authOutLinkValid({ shareId }: { shareId?: string }) {
|
|
if (!shareId) {
|
|
return Promise.reject(OutLinkErrEnum.linkUnInvalid);
|
|
}
|
|
const outLinkConfig = await MongoOutLink.findOne({ shareId }).lean();
|
|
|
|
if (!outLinkConfig) {
|
|
return Promise.reject(OutLinkErrEnum.linkUnInvalid);
|
|
}
|
|
|
|
return {
|
|
appId: outLinkConfig.appId,
|
|
outLinkConfig
|
|
};
|
|
}
|