SEEC-Portal-Front/server/controller/auth.js

const Response = require('../util/response');
const jwt = require('jsonwebtoken');

class AuthController{
    static checkClient(ctx){
        const allowed_client_ids = ['seec-portal', 'seec-seec', 'seec-mooc', 'seec-helper'];
        const allowed_redirect_domains = ['localhost:3000', 'localhost:8000', 'p.seecoder.cn', 'seec.seecoder.cn', 'mooc.seecoder.cn', 'helper.seecoder.cn' ];

        const query = ctx.query;
        console.log('query', query);

        const {client_id, redirect_uri, scope} = query;
        if(!client_id || !redirect_uri || !scope){
            ctx.body=Response.failed("非法请求,拒绝访问");
        }
        else if(allowed_client_ids.indexOf(client_id) < 0 || scope !== "openid" || (redirect_uri.indexOf('https://')!==0 && redirect_uri.indexOf('http://')!==0) ){
            ctx.body=Response.failed("非法请求,拒绝访问");
        }
        else{
            let durl=/http:\/\/([^\/]+)\//i;
            let domain = redirect_uri.match(durl)[1];
            // console.log('domain',domain);
            if(allowed_redirect_domains.indexOf(domain) < 0){
                ctx.body=Response.failed("非法请求,拒绝访问");
            }else{
              ctx.cookies.set('redirect_uri', redirect_uri, {
                maxAge:60*1000*3
              });
              ctx.cookies.set('client_id', client_id, {
                maxAge:60*1000*3
              });
              ctx.redirect("/login");
            }
        }



    }


  static processIDToken(ctx){
    const query = ctx.query;
    const {id_token} = query;
    if(!id_token){
      ctx.body = Response.failed("非法请求！")
    }else{
      jwt.verify(id_token, 'SEEC-1919810-OIDC-114514', (err, authData) => {
        if(err) {
          console.log("err:", err);
          ctx.redirect("/error");
        }
        else {
          const { iss, sub, aud, auth_time, iat, exp} = authData;
          if(!iss || !sub || !aud || !auth_time || !iat || !exp){
            ctx.redirect("/error");
          }
          else if(iss !== "p.seecoder.cn" || aud!=='seec-portal' ){
            ctx.redirect("/error");
          }
          else{
            let claims = sub.split('%26');
            let user = {
              id: parseInt(claims[0]),
              name: claims[1],
              phone: claims[2]
            };
            let my_token = jwt.sign(
              user,'seec-portal',{ expiresIn: '1day' }
            );

            console.log('ctx', ctx);
            // console.log('$cookies', ctx.app.$cookies);

            // ctx.res.setHeader("Access-Control-Allow-Origin", "http://localhost:3000");
            // ctx.res.setHeader("Access-Control-Allow-Credentials", true);

            // ctx.cookies.user = user;
            // ctx.cookies.token = my_token;
            //
            // console.log("origin_path", origin_path)
            //
            // ctx.redirect(origin_path);

            let url = '/setToken?token=' + my_token + '&id=' + user.id + '&name=' + user.name + '&phone=' + user.phone;
            // store.commit("saveUser", user);
            // store.commit("saveToken", my_token);
            ctx.redirect(url);
          }
        }
      });

    }

  }

  static authenticate(ctx){
    const query = ctx.query;

    let return_uri = encodeURIComponent(ctx.origin+"/api/receiveIDToken");
    let url = ctx.origin+'/api/interaction?'+
      'client_id='+ 'seec-portal' +
      '&scope=openid' +
      '&redirect_uri=' + return_uri;


    console.log("redirect to " + url);

    return ctx.redirect(url);
  }

}

module.exports = AuthController;