mirror of https://github.com/nocodb/nocodb
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
108 lines
3.4 KiB
108 lines
3.4 KiB
import { message } from 'ant-design-vue' |
|
import { defineNuxtRouteMiddleware, navigateTo } from '#app' |
|
import { useApi, useGlobal } from '#imports' |
|
|
|
/** |
|
* Global auth middleware |
|
* |
|
* On page transitions, this middleware checks if the target route requires authentication. |
|
* If the user is not signed in, the user is redirected to the sign in page. |
|
* If the user is signed in and attempts to access a route that does not require authentication (i.e. signin/signup pages), |
|
* the user is redirected to the home page. |
|
* |
|
* By default, we assume that auth is required |
|
* If not required, mark the page as |
|
* ``` |
|
* definePageMeta({ |
|
* requiresAuth: false |
|
* }) |
|
* ``` |
|
* |
|
* If auth should be circumvented completely mark the page as public |
|
* ``` |
|
* definePageMeta({ |
|
* public: true |
|
* }) |
|
* ``` |
|
* |
|
* @example |
|
* ``` |
|
* definePageMeta({ |
|
* requiresAuth: false, |
|
* ... |
|
* }) |
|
* ``` |
|
*/ |
|
export default defineNuxtRouteMiddleware(async (to, from) => { |
|
const state = useGlobal() |
|
|
|
const { api } = useApi() |
|
|
|
/** if user isn't signed in and google auth is enabled, try to check if sign-in data is present */ |
|
if (!state.signedIn && state.appInfo.value.googleAuthEnabled) await tryGoogleAuth() |
|
|
|
/** if public allow all visitors */ |
|
if (to.meta.public) return |
|
|
|
/** if shared base allow without validating */ |
|
if (to.params?.projectType === 'base') return |
|
|
|
/** if auth is required or unspecified (same as required) and user is not signed in, redirect to signin page */ |
|
if ((to.meta.requiresAuth || typeof to.meta.requiresAuth === 'undefined') && !state.signedIn.value) { |
|
/** If this is the first usern navigate to signup page directly */ |
|
if (state.appInfo.value.firstUser) { |
|
return navigateTo('/signup') |
|
} |
|
|
|
return navigateTo('/signin') |
|
} else if (to.meta.requiresAuth === false && state.signedIn.value) { |
|
/** |
|
* if user was turned away from non-auth page but also came from a non-auth page (e.g. user went to /signin and reloaded the page) |
|
* redirect to home page |
|
* |
|
* else redirect back to the page they were coming from |
|
*/ |
|
if (from.meta.requiresAuth === false) { |
|
return navigateTo('/') |
|
} else { |
|
return navigateTo(from.path) |
|
} |
|
} else { |
|
/** if users are accessing the projects without having enough permissions, redirect to My Projects page */ |
|
if (to.params.projectId && from.params.projectId !== to.params.projectId) { |
|
const user = await api.auth.me({ project_id: to?.params?.projectId as string }) |
|
if (user?.roles?.user) { |
|
message.error("You don't have enough permission to access the project.") |
|
return navigateTo('/') |
|
} |
|
} |
|
} |
|
}) |
|
|
|
/** |
|
* If present, try using google auth data to sign user in before navigating to the next page |
|
*/ |
|
async function tryGoogleAuth() { |
|
const { signIn } = useGlobal() |
|
|
|
const { api } = useApi() |
|
|
|
if (window.location.search && /\bscope=|\bstate=/.test(window.location.search) && /\bcode=/.test(window.location.search)) { |
|
try { |
|
const { |
|
data: { token }, |
|
} = await api.instance.post( |
|
`/auth/${window.location.search.includes('state=github') ? 'github' : 'google'}/genTokenByCode${window.location.search}`, |
|
) |
|
|
|
signIn(token) |
|
} catch (e: any) { |
|
if (e.response && e.response.data && e.response.data.msg) { |
|
message.error({ content: e.response.data.msg }) |
|
} |
|
} |
|
|
|
const newURL = window.location.href.split('?')[0] |
|
window.history.pushState('object', document.title, newURL) |
|
} |
|
}
|
|
|