vv -m

$ tar xvf $(vv -o)/examples/multitenant_SaaS.tar.gz
$ cd multitenant_SaaS

$ sudo vf -i-u $(whoami) multitenant_SaaS

create database if not exists db_multitenant_SaaS;
create user if not exists vely identified by 'your_password';
grant create,alter,drop,select,insert,delete,update on db_multitenant_SaaS.* to vely;

use db_multitenant_SaaS;
source setup.sql;
exit

$ echo '[client]
user=vely
password=your_password
database=db_multitenant_SaaS
protocol=TCP
host=127.0.0.1
port=3306' > db_multitenant_SaaS

$ vv -q--db=mariadb:db_multitenant_SaaS

$ vf -w3 multitenant_SaaS

$ vf multitenant_SaaS

$ vf -m quit multitenant_SaaS

$ sudo a2enmod proxy
$ sudo a2enmod proxy_fcgi

LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_fcgi_module modules/mod_proxy_fcgi.so

ProxyPass "/multitenant_SaaS" unix:///var/lib/vv/multitenant_SaaS/sock/sock|fcgi://localhost/multitenant_SaaS

$ sudo systemctl restart httpd

$ sudo systemctl restart apache2

$ sudo dnf installsendmail
$ sudo systemctl start sendmail

$ sudo apt installsendmail
$ sudo systemctl start sendmail

create table if not exists notes (dateOf datetime, noteId bigint auto_increment primary key, userId bigint, note varchar(1000));
create table if not exists users (userId bigint auto_increment primary key, email varchar(100), hashed_pwd varchar(100), verified smallint, verify_token varchar(30), session varchar(100));
create unique index if not exists users1 on users (email);

#ifndef _VV_LOGIN
#define _VV_LOGIN
typedef struct s_reqdata {
    bool displayed_logout; // true 則顯示登出連接
    bool is_logged_in; // true 則會(huì)話已驗(yàn)證登錄
    char *sess_userId; // 目前會(huì)話的用戶 ID
    char *sess_id; // 會(huì)話 ID
} reqdata;
void login_or_signup ();
#endif

#include "vely.h"
#include "login.h"
// _before() 是一個(gè)請(qǐng)求前處理程序。
// 它總是在處理請(qǐng)求的其他代碼之前執(zhí)行。
// 對(duì)于任何類型的請(qǐng)求范圍設(shè)置或數(shù)據(jù)初始化，它都是一個(gè)很好的位置。
void _before() {
    // 輸出 HTTP 請(qǐng)求頭
    out-header default
    reqdata *rd; // 這是全局請(qǐng)求數(shù)據(jù)，見(jiàn) login.h
    // 為全局請(qǐng)求數(shù)據(jù)分配內(nèi)存，
    // 將在請(qǐng)求結(jié)束時(shí)自動(dòng)釋放
    new-mem rd size sizeof(reqdata)
    // 初始化標(biāo)志
    rd->displayed_logout = false;
    rd->is_logged_in = false;
    // 將我們創(chuàng)建的數(shù)據(jù)設(shè)置為全局請(qǐng)求數(shù)據(jù)，
    // 可以從任何處理請(qǐng)求的代碼中訪問(wèn)
    set-req data rd
    // 檢查會(huì)話是否存在（基于來(lái)自客戶端的 cookie）
    // 這在任何其他請(qǐng)求處理代碼之前執(zhí)行，
    // 使其更容易準(zhǔn)備好會(huì)話信息
    _check_session ();
}

#include "vely.h"
#include "login.h"
// 檢查會(huì)話是否有效
void _check_session () {
    // 獲取全局請(qǐng)求數(shù)據(jù)
    reqdata *rd;
    get-req data to rd
    // 自用戶瀏覽器獲取 cookies
    get-cookie rd->sess_userId="sess_userId"
    get-cookie rd->sess_id="sess_id"
    if (rd->sess_id[0] != 0) {
        // 檢查給定用戶 ID 下的會(huì)話 ID 是否正確
        char *email;
        run-query @db_multitenant_SaaS = "select email from users where userId='%s' and session='%s'" output email : rd->sess_userId, rd->sess_id row-count define rcount
            query-result email to email
        end-query
        if (rcount == 1) {
            // 如果正確，設(shè)置登錄標(biāo)志
            rd->is_logged_in = true;
            // 如果登出鏈接不顯示，則顯示它
            if (rd->displayed_logout == false) {
                @Hi <<p-out email>>! <a >Logout</a><br/>
                rd->displayed_logout = true;
            }
        } else rd->is_logged_in = false;
    }
}

#include "vely.h"
#include "login.h"
// 處理云端多租戶應(yīng)用程序的會(huì)話維護(hù)、登錄、注銷、會(huì)話驗(yàn)證
void login () {
    // 獲取 URL 的輸入?yún)?shù) `action`
    input-param action
    // 獲取全局請(qǐng)求數(shù)據(jù)，我們?cè)谄渲杏涗洉?huì)話信息，所以它很方便
    reqdata *rd;
    get-req data to rd
    // 如果會(huì)話已經(jīng)建立，我們不會(huì)
    // 繼續(xù)到應(yīng)用程序主頁(yè)的唯一原因是我們正在登出
    if (rd->is_logged_in) {
        if (strcmp(action, "logout")) {
            _show_home();
            exit-request
        }
    }
    // 應(yīng)用程序頁(yè)面啟動(dòng)。顯示登錄或注冊(cè)的鏈接，
    // 并顯示適當(dāng)?shù)闹髌聊?    if (!strcmp (action, "begin")) {
        _show_home();
        exit-request
    // 開(kāi)始創(chuàng)建新用戶。詢問(wèn)電子郵件和密碼，
    // 然后提交此表單時(shí)創(chuàng)建用戶。
    } else if (!strcmp (action, "newuser")) {
        @Create New User<hr/>
        @<form action="https://opensource.com/?req=login" method="POST">
        @<input name="action" type="hidden" value="createuser">
        @<input name="email" type="text" value="" size="50" maxlength="50" required autofocus placeholder="Email">
        @<input name="pwd" type="password" value="" size="50" maxlength="50" required placeholder="Password">
        @<input type="submit" value="Sign Up">
        @</form>
    // 驗(yàn)證用戶發(fā)送到電子郵件的代碼。代碼必須匹配，從而驗(yàn)證電子郵件地址   
    } else if (!strcmp (action, "verify")) {
        input-param code
        input-param email
        // 獲取基于電子郵件的驗(yàn)證令牌
        run-query @db_multitenant_SaaS = "select verify_token from users where email='%s'" output db_verify : email
            query-result db_verify to define db_verify
            // 將數(shù)據(jù)庫(kù)中記錄的令牌與用戶提供的令牌進(jìn)行比較
            if (!strcmp (code, db_verify)) {
                @Your email has been verifed. Please <a >Login</a>.
                // 如果匹配，更新用戶信息以表明已驗(yàn)證。
                run-query @db_multitenant_SaaS no-loop = "update users set verified=1 where email='%s'" : email
                exit-request
            }
        end-query
        @Could not verify the code. Please try <a >again</a>.
        exit-request
    // 創(chuàng)建用戶 —— 當(dāng)用戶使用電子郵件和密碼提交表單以創(chuàng)建用戶時(shí)運(yùn)行    
    } else if (!strcmp (action, "createuser")) {
        input-param email
        input-param pwd
        // 創(chuàng)建散列（單向）密碼
        hash-string pwd to define hashed_pwd
        // 生成隨機(jī)的 5 位數(shù)字字符串驗(yàn)證代碼
        random-string to define verify length 5 number
        // 創(chuàng)建用戶：插入電子郵件、哈希密碼、驗(yàn)證令牌。當(dāng)前驗(yàn)證狀態(tài)為 0，或未驗(yàn)證
        begin-transaction @db_multitenant_SaaS
        run-query @db_multitenant_SaaS no-loop = "insert into users (email, hashed_pwd, verified, verify_token, session) values ('%s', '%s', '0', '%s', '')" : email, hashed_pwd, verify affected-rows define arows error define err on-error-continue
        if (strcmp (err, "0") || arows != 1) {
            // 如果不能添加用戶，則可能該用戶不存在。不管怎樣，我們都無(wú)法繼續(xù)。
            login_or_signup();
            @User with this email already exists.
            rollback-transaction @db_multitenant_SaaS
        } else {
            // 創(chuàng)建帶有驗(yàn)證碼的電子郵件并將其發(fā)送給用戶
            write-string define msg
                @From: vely@vely.dev
                @To: <<p-out email>>
                @Subject: verify your account
                @
                @Your verification code is: <<p-out verify>>
            end-write-string
            exec-program "/usr/sbin/sendmail" args "-i", "-t" input msg status define st
            if (st != 0) {
                @Could not send email to <<p-out email>>, code is <<p-out verify>>
                rollback-transaction @db_multitenant_SaaS
                exit-request
            }
            commit-transaction @db_multitenant_SaaS
            // 通知用戶查看郵件并輸入驗(yàn)證碼
            @Please check your email and enter verification code here:
            @<form action="https://opensource.com/?req=login" method="POST">
            @<input name="action" type="hidden" value="verify" size="50" maxlength="50">
            @<input name="email" type="hidden" value="<<p-out email>>">
            @<input name="code" type="text" value="" size="50" maxlength="50" required autofocus placeholder="Verification code">
            @<button type="submit">Verify</button>
            @</form>
        }
    // 這里在登錄用戶登出時(shí)運(yùn)行    
    } else if (!strcmp (action, "logout")) {
        // 更新用戶表以清除會(huì)話，即沒(méi)有該用戶登錄
        if (rd->is_logged_in) {
            run-query @db_multitenant_SaaS = "update users set session='' where userId='%s'" : rd->sess_userId no-loop affected-rows define arows
            if (arows == 1) {
                rd->is_logged_in = false; // 提示用戶未登錄
                @You have been logged out.<hr/>
            }
        }
        _show_home();
    // 登錄：當(dāng)用戶輸入用戶名和密碼時(shí)運(yùn)行
    } else if (!strcmp (action, "login")) {
        input-param pwd
        input-param email
        // 創(chuàng)建單向散列，目的是與用戶表進(jìn)行比較 —— 密碼**永遠(yuǎn)不會(huì)**被記錄
        hash-string pwd to define hashed_pwd
        // 為會(huì)話 ID 創(chuàng)建一個(gè)隨機(jī)的 30 位長(zhǎng)的字符串
        random-string to rd->sess_id length 30
        // 檢查用戶名和哈希密碼是否匹配
        run-query @db_multitenant_SaaS = "select userId from users where email='%s' and hashed_pwd='%s'" output sess_userId : email, hashed_pwd
            query-result sess_userId to rd->sess_userId
            // 如果匹配，使用會(huì)話 ID 更新用戶表
            run-query @db_multitenant_SaaS no-loop = "update users set session='%s' where userId='%s'" : rd->sess_id, rd->sess_userId affected-rows define arows
            if (arows != 1) {
                @Could not create a session. Please try again. <<.login_or_signup();>> <hr/>
                exit-request
            }
            // 設(shè)置“用戶 ID”和“會(huì)話 ID”為 cookie。用戶的瀏覽器將在每個(gè)請(qǐng)求中返回這些信息
            set-cookie "sess_userId" = rd->sess_userId
            set-cookie "sess_id" = rd->sess_id
            // 顯示主頁(yè)，確保會(huì)話是正確的，并設(shè)置標(biāo)志
            _check_session();
            _show_home();
            exit-request
        end-query
        @Email or password are not correct. <<.login_or_signup();>><hr/>
    // 登錄界面，要求用戶輸入用戶名和密碼  
    } else if (!strcmp (action, "")) {
        login_or_signup();
        @Please Login:<hr/>
        @<form action="https://opensource.com/?req=login" method="POST">
        @<input name="action" type="hidden" value="login" size="50" maxlength="50">
        @<input name="email" type="text" value="" size="50" maxlength="50" required autofocus placeholder="Email">
        @<input name="pwd" type="password" value="" size="50" maxlength="50" required placeholder="Password">
        @<button type="submit">Go</button>
        @</form>
    }
}
// 顯示登錄或注冊(cè)鏈接
void login_or_signup() {
        @<a >Login</a> & & <a >Sign Up</a><hr/>
}

#include "vely.h"

void _show_home() {
    notes();
    exit-request
}

#include "vely.h"
#include "login.h"
// 多租戶云中的筆記應(yīng)用程序
void notes () {
    // 獲取全局請(qǐng)求數(shù)據(jù)
    reqdata *rd;
    get-req data to rd
    // 如果會(huì)話有效，顯示登錄或注冊(cè)
    if (!rd->is_logged_in) {
        login_or_signup();
    }
    // 問(wèn)候用戶
    @<h1>Welcome to Notes!</h1><hr/>
    // 如果沒(méi)有登出，退出 —— 這里確保對(duì)用戶身份的安全驗(yàn)證
    if (!rd->is_logged_in) {
        exit-request
    }
    // 獲取 URL 參數(shù)，告訴筆記要做什么
    input-param subreq
    // 顯示筆記能夠做什么操作（添加或列舉筆記）
    @<a >Add Note</a> <a >List Notes</a><hr/>
    // 列舉該用戶的所有筆記
    if (!strcmp (subreq, "list")) {
        // **只**選取該用戶的筆記
        run-query @db_multitenant_SaaS = "select dateOf, note, noteId from notes where userId='%s' order by dateOf desc" : rd->sess_userId output dateOf, note, noteId
            query-result dateOf to define dateOf
            query-result note to define note
            query-result noteId to define noteId
            // 使用快速緩存正則表達(dá)式將新行更改為<br/>
            match-regex "\n" in note replace-with "<br/>\n" result define with_breaks status define st cache
            if (st == 0) with_breaks = note; // 什么都沒(méi)有發(fā)現(xiàn)/替換，只用原來(lái)的
            // 顯示筆記
            @Date: <<p-out dateOf>> (<a >delete note</a>)<br/>
            @Note: <<p-out with_breaks>><br/>
            @<hr/>
        end-query
    }
    // 要求刪除筆記
    else if (!strcmp (subreq, "delete_note_ask")) {
        input-param note_id
        @Are you sure you want to delete a note? Use Back button to go back, or <a >delete note now</a>.
    }
    // 刪除筆記
    else if (!strcmp (subreq, "delete_note")) {
        input-param note_id
        // 刪除筆記
        run-query @db_multitenant_SaaS = "delete from notes where noteId='%s' and userId='%s'" : note_id, rd->sess_userId affected-rows define arows no-loop error define errnote
        // 告知用戶狀態(tài)
        if (arows == 1) {
            @Note deleted
        } else {
            @Could not delete note (<<p-out errnote>>)
        }
    }
    // 添加筆記
    else if (!strcmp (subreq, "add_note")) {
        // 從 note 表單中獲取 URL POST 數(shù)據(jù)
        input-param note
        // 在該用戶的 ID 下插入筆記
        run-query @db_multitenant_SaaS = "insert into notes (dateOf, userId, note) values (now(), '%s', '%s')" : rd->sess_userId, note affected-rows define arows no-loop error define errnote
        // 告知用戶狀態(tài)
        if (arows == 1) {
            @Note added
        } else {
            @Could not add note (<<p-out errnote>>)
        }
    }
    // 顯示一個(gè) HTML 表單來(lái)收集筆記，并將其發(fā)送回這里（使用 subreq="add_note" URL 參數(shù)）
    else if (!strcmp (subreq, "add")) {
        @Add New Note
        @<form action="https://opensource.com/?req=notes" method="POST">
        @<input name="subreq" type="hidden" value="add_note">
        @<textarea name="note" rows="5" cols="50" required autofocus placeholder="Enter Note"></textarea>
        @<button type="submit">Create</button>
        @</form>
    }
}