Initial commit

2018-09-14 19:26:46 +08:00
commit 9e2009bbf4
431 changed files with 84342 additions and 0 deletions
@@ -0,0 +1,109 @@
+var xtend = require('xtend');
+
+function parseCookie(auth, cookieHeader) {
+    var cookieParser = auth.cookieParser(auth.secret);
+    var req = {
+        headers:{
+            cookie: cookieHeader
+        }
+    };
+    var result;
+    cookieParser(req, {}, function (err) {
+        if (err) throw err;
+        result = req.signedCookies || req.cookies;
+    });
+    return result;
+}
+
+function authorize(options) {
+    var defaults = {
+        passport:     require('passport'),
+        key:          'connect.sid',
+        secret:       null,
+        store:        null,
+        success:      function (data, accept) {
+            if (data.socketio_version_1) {
+                accept();
+            } else {
+                accept(null, true);
+            }
+        },
+        fail:         function (data, message, critical, accept) {
+            if (data.socketio_version_1) {
+                accept(new Error(message));
+            } else {
+                accept(null, false);
+            }
+        }
+    };
+
+    var auth = xtend(defaults, options);
+
+    auth.userProperty = auth.passport._userProperty || 'user';
+
+    if (!auth.cookieParser) {
+        throw new Error('cookieParser is required use connect.cookieParser or express.cookieParser');
+    }
+
+    return function (data, accept) {
+
+        // socket.io v1.0 now provides socket handshake data via `socket.request`
+        if (data.request) {
+            data = data.request;
+            data.socketio_version_1 = true;
+        }
+
+        data.cookie = parseCookie(auth, data.headers.cookie || '');
+        data.sessionID = (data.query && data.query.session_id) || data.cookie[auth.key] || '';
+        data[auth.userProperty] = {
+            logged_in: false
+        };
+
+        if (data.xdomain && !data.sessionID)
+            return auth.fail(data, 'Can not read cookies from CORS-Requests. See CORS-Workaround in the readme.', false, accept);
+
+        auth.store.get(data.sessionID, function (err, session) {
+            if (err)
+                return auth.fail(data, 'Error in session store:\n' + err.message, true, accept);
+            if (!session)
+                return auth.fail(data, 'No session found', false, accept);
+            if (!session[auth.passport._key])
+                return auth.fail(data, 'Passport was not initialized', true, accept);
+
+            var userKey = session[auth.passport._key][auth.userProperty];
+
+            if (!userKey)
+                return auth.fail(data, 'User not authorized through passport. (User Property not found)', false, accept);
+
+            // Because of authentication error removed
+            /*auth.passport.deserializeUser(userKey, function(err, user) {
+             if (err)
+             return auth.fail(data, err, true, accept);
+             if (!user)
+             return auth.fail(data, "User not found", false, accept);
+             data[auth.userProperty] = user;
+             data[auth.userProperty].logged_in = true;
+             auth.success(data, accept);
+             });*/
+            data[auth.userProperty] = userKey;
+            data[auth.userProperty].logged_in = true;
+            data.client._user = userKey;
+            auth.success(data, accept);
+        });
+
+    };
+}
+
+function filterSocketsByUser(socketIo, filter) {
+    var handshaken = socketIo.sockets.manager.handshaken;
+    return Object.keys(handshaken || {})
+        .filter(function (skey) {
+            return filter(handshaken[skey].user);
+        })
+        .map(function (skey) {
+            return socketIo.sockets.manager.sockets.sockets[skey];
+        });
+}
+
+exports.authorize = authorize;
+exports.filterSocketsByUser = filterSocketsByUser;