app.js

var express = require('express');
var path = require('path');
var favicon = require('serve-favicon');
var log4js = require('log4js');
var cookieParser = require('cookie-parser');
var bodyParser = require('body-parser');
var commonUtil = require('./core/util/commonUtil');
var systemConfig = require(commonUtil.getConfigPath() + "/system_config");
var session = require('express-session');
var RedisStore = require('connect-redis')(session);
var redisClient = require("./core/util/RedisUtils");
var menu_auth = require("./core/menu_auth");

var routes = require('./routes/index');
var users = require('./routes/users');
var login = require('./routes/login');
var menus = require('./routes/menus');
var verify = require('./routes/verify');
var roles = require('./routes/roles');
var user_role = require('./routes/user_role');
var menu_role = require('./routes/menu_role');
var login_log = require('./routes/login_log');
var operation_log = require('./routes/operation_log');
var log = require('./core/logger').getLogger("system");
var moment = require('moment');

var app = express();

app.locals.moment = moment;
// view engine setup
app.set('views', path.join(__dirname, 'views'));
app.set('view engine', 'ejs');

// uncomment after placing your favicon in /public
//app.use(favicon(path.join(__dirname, 'public', 'favicon.ico')));
app.use(log4js.connectLogger(log4js.getLogger("express")));
app.use(bodyParser.json());
app.use(bodyParser.urlencoded({extended: false}));
app.use(cookieParser());
app.use(express.static(path.join(__dirname, 'public')));

// session超时时间，单位：分钟
var timeout_minute = systemConfig.session_time_out_minute || 120;
app.use(session({
    secret: 'express',
    store: new RedisStore({
        client: redisClient.Redis,
        prefix: "admin_session_",
        ttl: timeout_minute * 60 // 过期时间
    }),
    resave: true,
    saveUninitialized: true
}));

app.use(function (req, res, next) {
    if (req.session == undefined) {
        var str = "无法获取session（cookie），确保redis是否连接正常。";
        log.error(str);
        res.render("notice", {msg: str});
        return;
    } else if (is_login(req)) {
        res.render("login", {msg: '您未登录或登录已超时！'});
        return;
    } else if (menu_auth.check(req) == false) {
        //授权
        res.status(401);
        res.render('401', {
            message: "没有权限访问该页面",
            error: {}
        });
        return;
    }
    next();
});

app.use('/', routes);
app.use('/verify', verify);
app.use('/users', users);
app.use('/login', login);
app.use('/menus', menus);
app.use('/roles', roles);
app.use('/user_role', user_role);
app.use('/menu_role', menu_role);
app.use('/login_log', login_log);
app.use('/operation_log', operation_log);

// catch 404 and forward to error handler
app.use(function (req, res, next) {
    var err = new Error('Not Found');
    err.status = 404;
    next(err);
});

// error handlers

// development error handler
// will print stacktrace
if (app.get('env') === 'development') {
    app.use(function (err, req, res, next) {
        console.log(err);
        res.status(err.status || 500);
        res.render('error', {
            message: err.message,
            error: err
        });
    });
}

// production error handler
// no stacktraces leaked to user
app.use(function (err, req, res, next) {
    console.log(err);
    res.status(err.status || 500);
    res.render('error', {
        message: err.message,
        error: {}
    });
});

function is_login(req) {
    if (req.url.indexOf("login") == -1 && req.url.indexOf("verify") == -1
        && !req.session.user) {
        return true;
    }
    return false;
}

module.exports = app;