Files
root 50f8a89d51 fix: 云函数鉴权加固与投票数据防护
- follow/cms-vote/cms-articles-like/cms-articles-collect 云对象写操作强制 checkToken,uid 以服务端令牌为准,杜绝客户端伪造身份
- user-info.getIP 仅允许查询本人登录 IP(get_user_info 公开资料保持不变)
- ext-storage-co 上传凭证需登录,删除文件仅限 admin 角色(原为完全裸奔)
- cms-vote/cms-vote-info/user_select_vote 三表 schema 写权限全部关闭(投票读写均走云对象)
- 修复 follow.reFollow 中 total<0 永假导致的逻辑错误
- 各云对象 package.json 补 uni-id-common 依赖声明
- main.js 登录过期跳转修正为实际页面路径 /pages/login/login
2026-09-10 21:31:25 +08:00

109 lines
2.2 KiB
JavaScript

const db = uniCloud.database();
const _ = db.command;
const uniID = require('uni-id-common');
module.exports = {
_before: function () { // 通用预处理器
this.uniID = uniID.createInstance({
context: this.getClientInfo()
});
},
async getIsFollow(query) {
try {
const {
uid,
fid
} = query;
let isFollow = false;
console.log(uid)
console.log(fid)
const res = await db.collection("follow").where({
uid: uid,
fid: fid
})
.count();
console.log(res.total);
if (res.total > 0) {
isFollow = true;
}
return {
code: 200,
isFollow: isFollow
}
} catch(e) {
return {
code: 500,
msg: e.message
}
}
},
async follow(query) {
try {
const payload = await this.uniID.checkToken(this.getUniIdToken());
if (payload.errCode) throw new Error('登录状态失效,请重新登录');
const uid = payload.uid; // 以服务端令牌为准,忽略客户端传入
const fid = query.fid;
const res = await db.collection("follow").where({
uid: uid,
fid: fid
}).count();
if (res.total > 0) {
return {
code: 201,
msg: "已关注"
}
} else {
let dateTime = new Date();
const add_res = await db.collection("follow").add({
uid: uid,
fid: fid,
create_time: dateTime
})
console.log(add_res)
return {
code: 200,
data: add_res
}
}
} catch(e) {
return {
code: 500,
msg: e.message
}
}
},
async reFollow(query) {
try {
const payload = await this.uniID.checkToken(this.getUniIdToken());
if (payload.errCode) throw new Error('登录状态失效,请重新登录');
const uid = payload.uid; // 以服务端令牌为准,忽略客户端传入
const fid = query.fid;
const res = await db.collection("follow").where({
uid: uid,
fid: fid
}).count();
if (res.total == 0) {
return {
code: 201,
msg: "未关注"
}
} else {
const re_res = await db.collection("follow").where({
uid: uid,
fid: fid
}).remove();
console.log(re_res)
return {
code: 200,
data: re_res
}
}
} catch(e) {
return {
code: 500,
msg: e.message
}
}
}
}