Authored by 陈峰

Merge branch 'feature/session' into 'release/5.5.1'

sessionkey修改为authcode加密解密



See merge request !410
... ... @@ -8,18 +8,18 @@ const authcode = require('../../utils/authcode');
module.exports = () => {
return (req, res, next) => {
// 从 SESSION 中获取到当前登录用户的 UID
// if (req.session && _.isNumber(req.session.LOGIN_UID)) {
// // 不要使用 === 判断uid的值,如果需要判断使用 ==
// req.user.uid = {
// toString: () => {
// return req.session.LOGIN_UID;
// },
// sessionKey: req.session.SESSION_KEY
// };
// let userData = _.get(req.session, 'USER', {});
if (req.session && _.isNumber(req.session.LOGIN_UID)) {
// 不要使用 === 判断uid的值,如果需要判断使用 ==
req.user.uid = {
toString: () => {
return req.session.LOGIN_UID;
},
sessionKey: req.session.SESSION_KEY
};
let userData = _.get(req.session, 'USER', {});
// _.merge(req.user, userData);
// }
_.merge(req.user, userData);
}
// session 没有读取到的时候,从 cookie 读取 UID
if (!req.user.uid && req.cookies._UID) {
... ...