server/app/service/util/rk.js

'use strict';
const { CrudService } = require('naf-framework-mongoose-free/lib/service');
const { BusinessError, ErrorCode } = require('naf-core').Error;
const _ = require('lodash');
const assert = require('assert');

//
class RkService extends CrudService {
  constructor(ctx) {
    super(ctx, 'rk');
    this.redis = this.app.redis;
    this.keyPrefix = 'requestKey:';
  }
  // 检测,使用key
  async urk() {
    const key = _.get(this.ctx, 'request.header.rk');
    const keyName = this.getKeyName(key);
    const value = await this.redis.get(keyName);
    if (!value) throw new BusinessError(ErrorCode.SERVICE_FAULT, '未找到请求key');
    await this.redis.del(keyName);
    const keyInfo = JSON.parse(value);
    const obj = this.getKeyInfo();
    if (!_.isEqual(keyInfo, obj)) throw new BusinessError(ErrorCode.DATA_INVALID, 'key校验错误,拒绝请求', { keyInfo, obj });
  }
  // 生成key
  async crk() {
    const obj = this.getKeyInfo();
    const str = JSON.stringify(obj);
    const key = Math.random().toString(36).substr(2, 15);
    await this.redis.set(this.getKeyName(key), str, 'EX', 180);
    return key;
  }

  getKeyInfo() {
    const request = this.ctx.request;
    const ip = _.get(request, 'header.x-real-ip');
    const forward = _.get(request, 'header.x-forwarded-for');
    const host = _.get(request, 'header.host');
    const referer = _.get(request, 'header.referer');
    const query = this.ctx.query;
    const body = _.get(request, 'body');
    const userAgent = _.get(request, 'header.user-agent');
    const obj = {};
    const ut = _.get(request, 'header.token');
    const at = _.get(request, 'header.admin-token');
    if (!ip) throw new BusinessError(ErrorCode.DATA_INVALID, '1-缺少生成key的参数');
    if (!referer) throw new BusinessError(ErrorCode.DATA_INVALID, '2-缺少生成key的参数');
    if (forward) obj.forward = forward;
    if (host) obj.host = host;
    if (query) obj.query = query;
    if (body) obj.body = body;
    if (userAgent) obj.userAgent = userAgent;
    if (ut) obj.ut = ut;
    if (at) obj.at = at;
    obj.ip = ip;
    obj.referer = referer;
    return obj;
  }

  getKeyName(key) {
    return `${this.keyPrefix}${key}`;
  }
}

module.exports = RkService;