const acl = require('sp-auth/middleware')
const config = require('./config')
app.use(acl(config.acl, instance.authService))

// file: User.js

import User from 'sp-auth/models/User'
export default class extends User {   
}

// file: instance.js

import spMysql from 'sp-mysql'
import User from './models/User'
import AuthService from 'sp-auth/service'
import UserAccessToken from 'sp-auth/models/UserAccessToken'

const config = require('./config')
const mysql = new spMysql(config.mysql)


const userModel = new User(mysql)
const userAccessTokenModel = new UserAccessToken(mysql)

const authService = new AuthService()
authService.inject({ userModel, userAccessTokenModel })

export {
    mysql,
    userModel,
    authService
}

/**
 * 注册
 * 
 * 此方法主要是返回了新增用户的id
 * dt_user表的数据都是通过这里创建的
 * 
 * @param {Object} {role, status} 
 * @returns {User} 包含了用户id的user对象
 */
async register({ role, status, from }) {
    // ...
    return {
        id
        role,
        status,
        from
    }
}

/**
 * 获取登录后的access_token
 * 
 * 来自各种方式的登录之后，再走这个方法
 * 登录验证逻辑，由sp-auth-phone/sp-auth-wx/...自行管理
 * 此方法接收登录成功后得到userId
 * 
 * @param {Int} userId 
 * @returns {Object} {code, accessToken}
 */

login(userId) {
    // ...
    return {
        code,
        accessToken
    }
}

// acl 配置样例
// 黑名单和白名单结构一样

module.exports = {
    ANYONE: [
        '/login|*',
        '/register|get',
        '/register|post',
        '/forget|get'
    ],
    ADMIN: [
        '/dashboard|*',
        '/report|*',
        '/account/*|get'
    ]
}