123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350 |
- // 获取配置
- const createConfig = safeRequire('uni-config-center')
- const {QuillDeltaToHtmlConverter, QuillDeltaToJSONConverter} = safeRequire('quill-delta-converter')
- const config = createConfig({
- pluginId: 'uni-cms'
- }).config()
- // 获取数据库实例
- const db = uniCloud.database()
- // 文章数据库名称
- const articleDBName = 'uni-cms-articles'
- // 解锁内容数据库名称
- const unlockContentDBName = 'uni-cms-unlock-record'
- // 安全检测文本内容
- async function checkContentSec(content, requestId, errorMsg) {
- // 安全引入内容安全检测模块
- const UniSecCheck = safeRequire('uni-sec-check')
- // 创建内容安全检测实例
- const uniSecCheck = new UniSecCheck({
- provider: 'mp-weixin',
- requestId
- })
- // 调用文本安全检测接口
- const res = await uniSecCheck.textSecCheck({
- content, // 待检测的文本内容
- scene: 1, // 表示资料类场景
- version: 1 // 调用检测API的版本号
- })
- // 如果存在敏感词,抛出异常
- if (res.errCode === uniSecCheck.ErrorCode.RISK_CONTENT) {
- throw new Error(errorMsg || '存在敏感词,请修改后提交')
- } else if (res.errCode !== 0) {
- console.error(res)
- throw new Error('内容安全检测异常:' + res.errCode)
- }
- }
- // 安全检测图片内容
- async function checkImageSec(image, requestId, errorMsg) {
- // 安全引入内容安全检测模块
- const UniSecCheck = safeRequire('uni-sec-check')
- // 创建内容安全检测实例
- const uniSecCheck = new UniSecCheck({
- provider: 'mp-weixin',
- requestId
- })
- const images = typeof image === "string" ? [image]: image
- for (let item of images) {
- // 处理cloud://开头的链接
- if (item.startsWith('cloud://')) {
- const res = await uniCloud.getTempFileURL({
- fileList: [item]
- })
- if (res.fileList && res.fileList.length > 0) {
- item = res.fileList[0].tempFileURL
- }
- }
- // 调用图片安全检测接口
- const res = await uniSecCheck.imgSecCheck({
- image: item, // 待检测的图片URL
- scene: 1, // 表示资料类场景
- version: 1 // 调用检测API的版本号
- })
- // 如果存在违规内容,抛出异常
- if (res.errCode === uniSecCheck.ErrorCode.RISK_CONTENT) {
- throw new Error(errorMsg || '图片违规,请修改后提交')
- } else if (res.errCode !== 0) {
- console.error(res)
- throw new Error('内容安全检测异常:' + res.errCode)
- }
- }
- }
- // 检测内容安全开关
- function checkContentSecurityEnable(field) {
- // 1. 从配置中心获取配置
- return config.contentSecurity && config.contentSecurity.allowCheckType && config.contentSecurity.allowCheckType.includes(field)
- }
- // 安全require
- function safeRequire(module) {
- try {
- return require(module)
- } catch (e) {
- if (e.code === 'MODULE_NOT_FOUND') {
- throw new Error(`${module} 公共模块不存在,请在 uniCloud/database 目录右击"配置schema扩展公共模块"添加 ${module} 模块`)
- }
- }
- }
- module.exports = {
- trigger: {
- // 创建文章前触发
- beforeCreate: async function ({clientInfo, addDataList}) {
- // addDataList 是一个数组,因为可以一次性创建多条数据
- if (addDataList.length <= 0) return
- // 检测内容安全开关
- const allowCheckContent = checkContentSecurityEnable('content')
- const allowCheckImage = checkContentSecurityEnable('image')
- // 遍历数组,对每一条数据进行安全检测
- for (const addData of addDataList) {
- // 如果是草稿,不检测
- if (addData.article_status !== 1) continue
- // 并行检测
- const parallel = []
- // 检测标题
- if (allowCheckContent && addData.title) {
- parallel.push(checkContentSec(addData.title, clientInfo.requestId, '标题存在敏感字,请修改后提交'))
- }
- // 检测摘要
- if (allowCheckContent && addData.excerpt) {
- parallel.push(checkContentSec(addData.excerpt, clientInfo.requestId, '摘要存在敏感字,请修改后提交'))
- }
- // 检测内容
- if (allowCheckContent && addData.content) {
- parallel.push(checkContentSec(JSON.stringify(addData.content), clientInfo.requestId, '内容存在敏感字,请修改后提交'))
- }
- // 检测封面图
- if (allowCheckImage && addData.thumbnail) {
- parallel.push(checkImageSec(addData.thumbnail, clientInfo.requestId, '封面图存在违规,请修改后提交'))
- }
- // 等待所有并行检测完成
- await Promise.all(parallel)
- }
- },
- // 更新文章前触发
- beforeUpdate: async function ({clientInfo, where, updateData}) {
- const id = where && where._id
- if (!id) return
- // 如果是草稿,不检测
- if (updateData.article_status !== 1) return
- // 检测内容安全开关
- const allowCheckContent = checkContentSecurityEnable('content')
- const allowCheckImage = checkContentSecurityEnable('image')
- // 并行检测
- const parallel = []
- // 检测标题
- if (allowCheckContent && updateData.title) {
- parallel.push(checkContentSec(updateData.title, clientInfo.requestId, '标题存在敏感字,请修改后提交'))
- }
- // 检测摘要
- if (allowCheckContent && updateData.excerpt) {
- parallel.push(checkContentSec(updateData.excerpt, clientInfo.requestId, '摘要存在敏感字,请修改后提交'))
- }
- // 检测内容
- if (allowCheckContent && updateData.content) {
- parallel.push(checkContentSec(JSON.stringify(updateData.content), clientInfo.requestId, '内容存在敏感字,请修改后提交'))
- }
- // 检测封面图
- if (allowCheckImage && updateData.thumbnail) {
- parallel.push(checkImageSec(updateData.thumbnail, clientInfo.requestId, '封面图存在违规,请修改后提交'))
- }
- // 等待所有并行检测完成
- await Promise.all(parallel)
- },
- // 读取文章后触发
- afterRead: async function ({userInfo, clientInfo, result, where, field}) {
- const isAdmin = field && field.length && field.includes('is_admin')
- // 检查是否配置了clientAppIds字段,如果没有则抛出错误
- if ((!config.clientAppIds || !config.clientAppIds.length) && !isAdmin) {
- throw new Error('请在 uni-cms 配置文件中配置 clientAppIds 字段后访问,详见:https://uniapp.dcloud.net.cn/uniCloud/uni-cms.html#uni-cms-config')
- }
- // 如果clientAppIds字段未配置或当前appId不在clientAppIds中,则返回
- if (!config.clientAppIds || !config.clientAppIds.includes(clientInfo.appId)) return
- // 获取广告配置
- const adConfig = config.adConfig || {}
- // 获取文章id
- const id = where && where._id
- // 如果id不存在或者field不包含content,则返回
- if (id && field.includes('content')) {
- // 读取了content字段后view_count加1
- await db.collection(articleDBName).where(where).update({
- view_count: db.command.inc(1)
- })
- }
- // 如果查询结果为空,则返回
- if (!result.data || result.data.length <= 0) return
- // 获取文章
- const article = result.data[0]
- // 如果文章内容不存在,则返回
- if (!article.content) return
- let needUnlock = false
- let unlockContent = []
- // 获取文章内容中的图片
- article.content_images = article.content.ops.reduce((imageBlocks, block) => {
- if (!block.insert.image) return imageBlocks
- const {attributes} = block
- const {'data-custom': custom = ""} = attributes || {}
- const parseCustom = custom.split('&').reduce((obj, item) => {
- const [key, value] = item.split('=')
- obj[key] = value
- return obj
- })
- return imageBlocks.concat(
- parseCustom.source ||
- block.insert.image
- )
- }, [])
- for (const op of article.content.ops) {
- unlockContent.push(op)
- // 遍历文章内容,找到解锁内容
- if (op.insert.unlockContent) {
- needUnlock = true
- break
- }
- }
- // 如果文章不需要解锁,则返回
- if (!needUnlock) {
- article.content = getRenderableArticleContent(article.content, clientInfo)
- return
- }
- // 获取唯一标识符
- const uniqueId = adConfig.watchAdUniqueType === 'user' ? userInfo.uid : clientInfo.deviceId
- // 如果未登录或者文章未解锁,则返回解锁内容
- if (!uniqueId || !article._id) {
- article.content = getRenderableArticleContent({
- ops: unlockContent
- }, clientInfo)
- return
- }
- // 查询解锁记录
- const unlockRecord = await db.collection(unlockContentDBName).where({
- unique_id: uniqueId,
- article_id: article._id
- }).get()
- // 如果未解锁,则返回解锁内容
- if (unlockRecord.data && unlockRecord.data.length <= 0) {
- article.content = getRenderableArticleContent({
- ops: unlockContent
- }, clientInfo)
- return
- }
- // 将文章解锁替换为行结束符 \n
- article.content = getRenderableArticleContent({
- ops: article.content.ops.map(op => {
- if (op.insert.unlockContent) {
- op.insert = "\n"
- }
- return op
- })
- }, clientInfo)
- }
- }
- }
- function getRenderableArticleContent (rawArticleContent, clientInfo) {
- const isUniAppX = /uni-app-x/i.test(clientInfo.userAgent)
- if (!isUniAppX) {
- const quillDeltaConverter = new QuillDeltaToJSONConverter(rawArticleContent.ops)
- return quillDeltaConverter.convert()
- }
- const deltaOps = []
- for (let i = 0; i < rawArticleContent.ops.length; i++) {
- const op = rawArticleContent.ops[i]
- if (typeof op.insert === 'object') {
- const insertType = Object.keys(op.insert)
- const blockRenderList = ['image', 'divider', 'unlockContent', 'mediaVideo']
- if (insertType && insertType.length > 0 && blockRenderList.includes(insertType[0])) {
- deltaOps.push({
- type: insertType[0],
- ops: [op]
- })
- // 一般块级节点后面都跟一个换行,需要把这个换行给去掉
- const nextOps = rawArticleContent.ops[i + 1]
- if (nextOps && nextOps.insert === '\n') {
- i ++
- }
- continue
- }
- }
- const currentIndex = deltaOps.length > 0 ? deltaOps.length - 1: 0
- if (
- typeof deltaOps[currentIndex] !== "object" ||
- (deltaOps[currentIndex] && deltaOps[currentIndex].type !== 'rich-text')
- ) {
- deltaOps.push({
- type: 'rich-text',
- ops: []
- })
- }
- deltaOps[deltaOps.length - 1].ops.push(op)
- }
- return deltaOps.reduce((content, item) => {
- const isRichText = item.type === 'rich-text'
- let block = {
- type: item.type,
- data: isRichText ? item.ops: item.ops[0]
- }
- if (item.type === 'rich-text') {
- const lastOp = item.ops.length > 0 ? item.ops[item.ops.length - 1]: null
- if (lastOp !== null && lastOp.insert === "\n") {
- item.ops.pop()
- }
- const quillDeltaConverter = new QuillDeltaToHtmlConverter(item.ops)
- block.data = quillDeltaConverter.convert()
- }
- return content.concat(block)
- }, [])
- }
|