let mongoose = require('mongoose');
const jwt = require('jsonwebtoken');
// id 为自增主键，token 存储鉴权信息，state 为用户状态预留，其他为微信会返回的各用户信息字段
let UserSchema = new mongoose.Schema({
    id: {
        type: Number,
        unique: true,
        index: true
    },
    token: {
        type: String,
        index: true
    },
    openid: {
        type: String,
        unique: true
    },
    phone: {
        type: String,
        trim: true
    },
    nickname: {type: String},
    sex: {type: Number},
    language: {type: String},
    city: {type: String},
    province: {type: String},
    country: {type: String},
    headimgurl: {type: String},
    privilege: {type: Array},
    unionid: {type: String},
    state:{
        type:Number,
        default:1
    }
});

// 处理用户 id 自增
UserSchema.pre('save', function (next) {
    let doc = this;
    if (doc.isNew) {
        User.findOne({}, 'id', {sort: {id: -1}}).then(d => {
            doc.id = (d ? d.id : 0) + 1;
            next();
        });
    } else {
        next();
    }
});
// 重写 toJSON 在返回用户信息前隐藏敏感字段
UserSchema.methods.toJSON = function () {
    const User = this;
    const UserObject = User.toObject();
    delete UserObject._id;
    delete UserObject.__v;
    delete UserObject.openid;
    delete UserObject.unionid;
    return UserObject;
};

const User = mongoose.model('User', UserSchema);
module.exports = {User};

import {Injectable} from '@angular/core';
import {Headers, RequestOptions} from '@angular/http';
@Injectable()
export class CustomRequestOptions extends RequestOptions {
  constructor () {
    const headers = new Headers();
    headers.append('Accept', 'application/json');
    headers.append('Access-Control-Allow-Origin', '*'); // 处理跨域
    headers.append('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE,PATCH, OPTIONS');
    headers.append('Access-Control-Allow-Headers', 'X-Requested-With');
    headers.append('Content-Type', 'application/json');
    headers.append('crossDomain', 'true');
    headers.append('Authenticate', localStorage.token || 'empty'); // 附带 Token
    super({headers: headers});
  }
}

UserSchema.statics.authenticate = async function (token) {
    const User = this;
    return await User.findOne({'token': token});
};

const app = require('express');
const router = app.Router();

const {User} = require('../../models/user');

// token 验证
router.all('/**', async function (req, res, next) {
    try {
        let user = await User.authenticate(req.header('Authenticate') || 'empty');
        if (!user) {
            res.status(401);
            res.end();
        } else {
            req.user = user;
            req.body.userId = user.id;
            next();
        }
    } catch (e) {
        next(e)
    }
});

// 此后代码才需鉴权，并可在 req.user 内拿到 Token 对应的用户信息
router.use('/user', require('./user/route'));
router.use('/child', require('./child/route'));
router.use('/resources', require('./resources/route'));
router.use('/appointment', require('./appointment/route'));

module.exports = router;

router.all('/**', async function (req, res, next) {
    try {
        let user = await User.authenticate(req.header('Authenticate') || 'empty');
        if (!user) {
            let oauthUrl= `http://${req.header('host')}/api/v1/weixin/oauth?url=${req.header('Referer')}`;
            res.status(401).send(`https://open.weixin.qq.com/connect/oauth2/authorize?appid=${process.env.WX_ID}&redirect_uri=${encodeURIComponent(oauthUrl)}&response_type=code&scope=snsapi_userinfo#wechat_redirect`);
            res.end();
        } else {
            req.user = user;
            req.body.userId = user.id;
            next();
        }
    } catch (e) {
        next(e)
    }
});

UserSchema.methods.generateAuthToken = async function () {
    const doc = this;
    doc.token = jwt.sign({
        id: doc.id,
        name: doc.nickname,
        headimgurl: doc.headimgurl,
        sex: doc.sex,
        timestamp: +new Date()
    }, process.env.JWT_SECRET).toString();
    return await doc.save();
};

const express = require('express');
const router = express.Router();
const axios = require('axios');

const {User} = require('../../../models/user');

router.get('/', async function (req, res, next) {
    try {
        // 通过微信的 App ID、Secret 和用户的 Code 获取用户的 access token
        let userAccessToken = (await axios.get(`https://api.weixin.qq.com/sns/oauth2/access_token?appid=${process.env.WX_ID}&secret=${process.env.WX_SECRET}&code=${req.query.code}&grant_type=authorization_code`)).data;
        if (userAccessToken.errcode) {
            userAccessToken.param = 'userAccessToken';
            next(new Error(JSON.stringify(userAccessToken)));
            return;
        }
        // 通过用户的 access token 从微信拉取微信的用户信息
        let userInfo = (await axios.get(`https://api.weixin.qq.com/sns/userinfo?access_token=${userAccessToken.access_token}&openid=${userAccessToken.openid}&lang=zh_CN`)).data;
        if (userInfo.errcode) {
            userAccessToken.param = 'userInfo';
            next(new Error(JSON.stringify(userInfo)));
            return;
        }
        // 通过用户的 openid 查询，如果不存在该用户则添加
        let user = await User.findOne({
            openid: userInfo.openid
        });
        if (!user) {
            user = new User(userInfo);
            await user.save();
            console.log('create new wx user finished');
        }
        // 生成用户 token
        user = await user.generateAuthToken();

        // 处理重定向 url，在其中添加 query 参数 token
        let url=req.query.url.split('?');
        let q=[];
        if(url.length!==1){
            q=url[1].split('&');
        }
        q.push(`token=${user.token}`);
        // 因微信通过 get 的方式在浏览器内访问该接口，我们可以通过 res.redirect 进行重定向
        res.redirect(`${url[0]}?${q.join('&')}`);
        res.end();
    } catch (e) {
        next(e);
    }
});

module.exports = router;

function getQueryString(name) {
   var reg = new RegExp("(^|&)" + name + "=([^&]*)(&|$)", "i");
   var r = window.location.search.substr(1).match(reg);
   if (r != null) return unescape(r[2]);
   return null;
 }
 function delParam(url,paramKey){
   var urlParam = url.substr(url.indexOf("?")+1);
   var beforeUrl = url.substr(0,url.indexOf("?"));
   var nextUrl = "";

   var arr = [];
   if(urlParam!==""){
     var urlParamArr = urlParam.split("&");

     for(var i=0;i<urlParamArr.length;i++){
       var paramArr = urlParamArr[i].split("=");
       if(paramArr[0]!==paramKey){
         arr.push(urlParamArr[i]);
       }
     }
   }

   if(arr.length>0){
     nextUrl = "?"+arr.join("&");
   }
   url = beforeUrl+nextUrl;
   return url;
 }
 if(getQueryString("token")){
   localStorage.token = getQueryString("token");
   location.href = delParam(window.location.href,"token");
 }

app.use("/**", function (req, res) {
  res.sendfile(staticPath+"/index.html", {maxAge: 0});
});

const options = process.env.env == 'prod' ? {maxAge: '3d'} : {maxAge: '1m'};
app.use(express.static(path.join(__dirname, staticPath), options));
});

const express = require('express');
const path = require('path');
const http = require('http');

const app = express();
const staticPath=process.env.static ||'dist';
const port=process.env.port || 3000;

const options = process.env.env == 'prod' ? {maxAge: '3d'} : {maxAge: '1m'};
app.use(express.static(path.join(__dirname, staticPath), options));

app.use("/**", function (req, res) {
  res.sendfile(staticPath+"/index.html", {maxAge: 0});
});

const server = http.createServer(app);
server.listen(port);

console.log(`env:${process.env.env}`);
console.log(`path:${staticPath}`);
console.log(`port:${port}`);