130 lines
3.0 KiB
TypeScript
130 lines
3.0 KiB
TypeScript
import { NextRequest } from 'next/server';
|
|
|
|
export type AuthInfo = {
|
|
password?: string;
|
|
username?: string;
|
|
signature?: string;
|
|
timestamp?: number;
|
|
role?: 'owner' | 'admin' | 'user';
|
|
tokenId?: string;
|
|
refreshToken?: string;
|
|
refreshExpires?: number;
|
|
};
|
|
|
|
function getAuthTokenFromHeader(value: string): string {
|
|
const trimmed = value.trim();
|
|
if (!trimmed) {
|
|
return '';
|
|
}
|
|
|
|
const bearerMatch = trimmed.match(/^Bearer\s+(.+)$/i);
|
|
if (bearerMatch) {
|
|
return bearerMatch[1].trim();
|
|
}
|
|
|
|
const tokenMatch = trimmed.match(/^Token\s+(.+)$/i);
|
|
if (tokenMatch) {
|
|
return tokenMatch[1].trim();
|
|
}
|
|
|
|
return trimmed;
|
|
}
|
|
|
|
export function parseAuthInfo(value?: string | null): AuthInfo | null {
|
|
if (!value) {
|
|
return null;
|
|
}
|
|
|
|
let decoded = value;
|
|
|
|
try {
|
|
decoded = decodeURIComponent(decoded);
|
|
} catch (error) {
|
|
decoded = value;
|
|
}
|
|
|
|
if (decoded.includes('%')) {
|
|
try {
|
|
decoded = decodeURIComponent(decoded);
|
|
} catch (error) {
|
|
decoded = value;
|
|
}
|
|
}
|
|
|
|
try {
|
|
return JSON.parse(decoded) as AuthInfo;
|
|
} catch (error) {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
// 从cookie获取认证信息 (服务端使用)
|
|
export function getAuthInfoFromCookie(request: NextRequest): AuthInfo | null {
|
|
const authHeader = request.headers.get('authorization');
|
|
if (authHeader) {
|
|
const headerValue = getAuthTokenFromHeader(authHeader);
|
|
const headerAuthInfo = parseAuthInfo(headerValue);
|
|
if (headerAuthInfo) {
|
|
return headerAuthInfo;
|
|
}
|
|
}
|
|
|
|
const authCookie = request.cookies.get('auth');
|
|
|
|
if (!authCookie) {
|
|
return null;
|
|
}
|
|
|
|
return parseAuthInfo(authCookie.value);
|
|
}
|
|
|
|
// 从cookie获取认证信息 (客户端使用)
|
|
export function getAuthInfoFromBrowserCookie(): AuthInfo | null {
|
|
if (typeof window === 'undefined') {
|
|
return null;
|
|
}
|
|
|
|
try {
|
|
// 解析 document.cookie
|
|
const cookies = document.cookie.split(';').reduce((acc, cookie) => {
|
|
const trimmed = cookie.trim();
|
|
const firstEqualIndex = trimmed.indexOf('=');
|
|
|
|
if (firstEqualIndex > 0) {
|
|
const key = trimmed.substring(0, firstEqualIndex);
|
|
const value = trimmed.substring(firstEqualIndex + 1);
|
|
if (key && value) {
|
|
acc[key] = value;
|
|
}
|
|
}
|
|
|
|
return acc;
|
|
}, {} as Record<string, string>);
|
|
|
|
const authCookie = cookies['auth'];
|
|
if (!authCookie) {
|
|
return null;
|
|
}
|
|
|
|
return parseAuthInfo(authCookie);
|
|
} catch (error) {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
// 清除浏览器中的认证cookie (客户端使用)
|
|
export function clearAuthCookie(): void {
|
|
if (typeof window === 'undefined') {
|
|
return;
|
|
}
|
|
|
|
try {
|
|
// 清除 auth cookie，设置过期时间为过去
|
|
document.cookie = 'auth=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Lax';
|
|
// 如果有其他域名或路径的cookie，也尝试清除
|
|
document.cookie = 'auth=; path=/; domain=' + window.location.hostname + '; expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Lax';
|
|
} catch (error) {
|
|
console.error('[Auth] Failed to clear cookie:', error);
|
|
}
|
|
}
|