v4.6 -1 (#459)

projects/app/src/pages/api/support/outLink/create.ts

@@ -1,9 +1,8 @@
 import type { NextApiRequest, NextApiResponse } from 'next';
-import { jsonRes } from '@/service/response';
+import { jsonRes } from '@fastgpt/service/common/response';
 import { connectToDatabase } from '@/service/mongo';
 import { MongoOutLink } from '@fastgpt/service/support/outLink/schema';
-import { authApp } from '@/service/utils/auth';
-import { authUser } from '@fastgpt/service/support/user/auth';
+import { authApp } from '@fastgpt/service/support/permission/auth/app';
 import type { OutLinkEditType } from '@fastgpt/global/support/outLink/type.d';
 import { customAlphabet } from 'nanoid';
 import { OutLinkTypeEnum } from '@fastgpt/global/support/outLink/constant';
@@ -18,17 +17,13 @@ export default async function handler(req: NextApiRequest, res: NextApiResponse)
       type: `${OutLinkTypeEnum}`;
     };
 
-    const { userId } = await authUser({ req, authToken: true });
-    await authApp({
-      appId,
-      userId,
-      authOwner: false
-    });
+    const { teamId, tmbId } = await authApp({ req, authToken: true, appId, per: 'w' });
 
     const shareId = nanoid();
     await MongoOutLink.create({
       shareId,
-      userId,
+      teamId,
+      tmbId,
       appId,
       ...props
     });

projects/app/src/pages/api/support/outLink/delete.ts

@@ -1,8 +1,8 @@
 import type { NextApiRequest, NextApiResponse } from 'next';
-import { jsonRes } from '@/service/response';
+import { jsonRes } from '@fastgpt/service/common/response';
 import { connectToDatabase } from '@/service/mongo';
 import { MongoOutLink } from '@fastgpt/service/support/outLink/schema';
-import { authUser } from '@fastgpt/service/support/user/auth';
+import { authOutLinkCrud } from '@fastgpt/service/support/permission/auth/outLink';
 
 /* delete a shareChat by shareChatId */
 export default async function handler(req: NextApiRequest, res: NextApiResponse) {
@@ -13,12 +13,9 @@ export default async function handler(req: NextApiRequest, res: NextApiResponse)
       id: string;
     };
 
-    const { userId } = await authUser({ req, authToken: true });
+    await authOutLinkCrud({ req, outLinkId: id, authToken: true, per: 'owner' });
 
-    await MongoOutLink.findOneAndRemove({
-      _id: id,
-      userId
-    });
+    await MongoOutLink.findByIdAndRemove(id);
 
     jsonRes(res);
   } catch (err) {

projects/app/src/pages/api/support/outLink/init.ts

@@ -1,14 +1,13 @@
 import type { NextApiRequest, NextApiResponse } from 'next';
-import { jsonRes } from '@/service/response';
+import { jsonRes } from '@fastgpt/service/common/response';
 import { connectToDatabase } from '@/service/mongo';
-import { MongoOutLink } from '@fastgpt/service/support/outLink/schema';
 import { MongoUser } from '@fastgpt/service/support/user/schema';
-import type { InitShareChatResponse } from '@/global/support/api/outLinkRes.d';
-import { authApp } from '@/service/utils/auth';
-import { HUMAN_ICON } from '@/constants/chat';
+import type { InitShareChatResponse } from '@fastgpt/global/support/outLink/api.d';
+import { HUMAN_ICON } from '@fastgpt/global/core/chat/constants';
 import { getGuideModule } from '@/global/core/app/modules/utils';
-import { authShareChatInit } from '@fastgpt/service/support/outLink/auth';
+import { authShareChatInit } from '@/service/support/outLink/auth';
 import { getChatModelNameListByModules } from '@/service/core/app/module';
+import { authOutLinkValid } from '@fastgpt/service/support/permission/auth/outLink';
 
 /* init share chat window */
 export default async function handler(req: NextApiRequest, res: NextApiResponse) {
@@ -19,27 +18,11 @@ export default async function handler(req: NextApiRequest, res: NextApiResponse)
       authToken?: string;
     };
 
-    if (!shareId) {
-      throw new Error('params is error');
-    }
-
     // get shareChat
-    const shareChat = await MongoOutLink.findOne({ shareId });
-
-    if (!shareChat) {
-      return jsonRes(res, {
-        code: 501,
-        error: '分享链接已失效'
-      });
-    }
+    const { app, shareChat } = await authOutLinkValid({ shareId });
 
     // 校验使用权限
-    const [{ app }, user] = await Promise.all([
-      authApp({
-        appId: shareChat.appId,
-        userId: String(shareChat.userId),
-        authOwner: false
-      }),
+    const [user] = await Promise.all([
       MongoUser.findById(shareChat.userId, 'avatar'),
       authShareChatInit({
         authToken,

projects/app/src/pages/api/support/outLink/list.ts

@@ -1,8 +1,8 @@
 import type { NextApiRequest, NextApiResponse } from 'next';
-import { jsonRes } from '@/service/response';
+import { jsonRes } from '@fastgpt/service/common/response';
 import { connectToDatabase } from '@/service/mongo';
 import { MongoOutLink } from '@fastgpt/service/support/outLink/schema';
-import { authUser } from '@fastgpt/service/support/user/auth';
+import { authApp } from '@fastgpt/service/support/permission/auth/app';
 
 /* get shareChat list by appId */
 export default async function handler(req: NextApiRequest, res: NextApiResponse) {
@@ -13,11 +13,11 @@ export default async function handler(req: NextApiRequest, res: NextApiResponse)
       appId: string;
     };
 
-    const { userId } = await authUser({ req, authToken: true });
+    const { teamId, tmbId, isOwner } = await authApp({ req, authToken: true, appId, per: 'w' });
 
     const data = await MongoOutLink.find({
       appId,
-      userId
+      ...(isOwner ? { teamId } : { tmbId })
     }).sort({
       _id: -1
     });

projects/app/src/pages/api/support/outLink/update.ts

@@ -1,8 +1,9 @@
 import type { NextApiRequest, NextApiResponse } from 'next';
-import { jsonRes } from '@/service/response';
+import { jsonRes } from '@fastgpt/service/common/response';
 import { connectToDatabase } from '@/service/mongo';
 import { MongoOutLink } from '@fastgpt/service/support/outLink/schema';
 import type { OutLinkEditType } from '@fastgpt/global/support/outLink/type.d';
+import { authOutLinkCrud } from '@fastgpt/service/support/permission/auth/outLink';
 
 export default async function handler(req: NextApiRequest, res: NextApiResponse) {
   try {
@@ -10,6 +11,12 @@ export default async function handler(req: NextApiRequest, res: NextApiResponse)
 
     const { _id, name, responseDetail, limit } = req.body as OutLinkEditType & {};
 
+    if (!_id) {
+      throw new Error('_id is required');
+    }
+
+    await authOutLinkCrud({ req, outLinkId: _id, authToken: true, per: 'owner' });
+
     await MongoOutLink.findByIdAndUpdate(_id, {
       name,
       responseDetail,