向普通 Express 路由提供 parse authInfo 和 authorization 的支持

[jysperm]

有用户希望在普通 Express 路由中使用这两个中间件（

leanengine-node-sdk/lib/leanengine.js

Lines 85 to 181 in 5d9532e

	// parse authInfo
	Cloud.use(route, function(req, res, next) {
	var appId, appKey, masterKey, contentType, param, prod, prodHeader, prodValue, sessionToken;
	contentType = req.headers['content-type'];
	if (/^text\/plain.*/i.test(contentType)) {
	if (req.body && req.body !== '') {
	req.body = JSON.parse(req.body);
	}
	appId = req.body._ApplicationId;
	appKey = req.body._ApplicationKey;
	masterKey = req.body._MasterKey;
	prodValue = req.body._ApplicationProduction;
	sessionToken = req.body._SessionToken;
	for (param in req.body) {
	if (param.charAt(0) === '_') {
	delete req.body[param];
	}
	}
	prod = 1;
	if (prodValue === 0 || prodValue === false) {
	prod = 0;
	}
	req.AV = {
	id: appId,
	key: appKey,
	masterKey: masterKey,
	prod: prod,
	sessionToken: sessionToken
	};
	} else {
	appId = req.headers['x-lc-id'] ||
	req.headers['x-avoscloud-application-id'] ||
	req.headers['x-uluru-application-id'];
	appKey = req.headers['x-lc-key'] ||
	req.headers['x-avoscloud-application-key'] ||
	req.headers['x-uluru-application-key'];
	masterKey = req.headers['x-avoscloud-master-key'] || req.headers['x-uluru-master-key'];
	prodHeader = req.headers['x-lc-prod'] ||
	req.headers['x-avoscloud-application-production'] ||
	req.headers['x-uluru-application-production'];
	sessionToken = req.headers['x-lc-session'] ||
	req.headers['x-uluru-session-token'] ||
	req.headers['x-avoscloud-session-token'];
	prod = 1;
	if (prodHeader === '0' || prodHeader === 'false') {
	prod = 0;
	}
	if (appKey && (appKey.indexOf(',master') > 0)) {
	masterKey = appKey.slice(0, appKey.indexOf(','));
	appKey = null;
	}
	req.AV = {
	id: appId,
	key: appKey,
	masterKey: masterKey,
	prod: prod,
	sessionToken: sessionToken
	};
	}
	return next();
	});
	// authorization
	Cloud.use(route, function(req, res, next) {
	var key, master, requestSign, sign, timestamp, validSign, _ref;
	if (!req.AV.id) {
	return unauthResp(res);
	}
	if (AV.applicationId === req.AV.id &&
	(AV.applicationKey === req.AV.key ||
	AV.masterKey === req.AV.key ||
	AV.masterKey === req.AV.masterKey)) {
	if (AV.masterKey === req.AV.masterKey) {
	req.AV.authMasterKey = true;
	}
	return next();
	}
	requestSign = req.headers['x-lc-sign'] || req.headers['x-avoscloud-request-sign'];
	if (requestSign) {
	_ref = requestSign.split(',');
	sign = _ref[0];
	timestamp = _ref[1];
	master = _ref[2];
	key = master === 'master' ? AV.masterKey : AV.applicationKey;
	validSign = signByKey(timestamp, key);
	if (validSign === sign.toLowerCase()) {
	if (master === 'master') {
	req.AV.authMasterKey = true;
	req.AV.masterKey = key;
	} else {
	req.AV.key = key;
	}
	return next();
	}
	}
	return unauthResp(res);
	});

），可以考虑将 leanengine.js 中主要的中间件都拆分到单独的文件，以便用户可以自行使用。

[jysperm]

届时也可以支持一下 WebSocket

[aisk]

👍

[jysperm]

已在 #102 中支持