UserManger.py 17 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428
  1. import os
  2. import traceback
  3. import boto3
  4. import botocore
  5. from botocore import client
  6. import simplejson as json
  7. from django.http import HttpResponse
  8. from django.utils.decorators import method_decorator
  9. from django.views.decorators.csrf import csrf_exempt
  10. from django.views.generic import TemplateView, View
  11. from Ansjer.config import BASE_DIR, ACCESS_KEY_ID, SECRET_ACCESS_KEY, REGION_NAME, AVATAR_BUCKET
  12. from Ansjer.config import SERVER_DOMAIN
  13. from Model.models import Role, Device_User, UserOauth2Model, UserExModel, CountryLanguageModel, LanguageModel
  14. from Object.RedisObject import RedisObject
  15. from Object.ResponseObject import ResponseObject
  16. from Object.TokenObject import TokenObject
  17. from Service.CommonService import CommonService
  18. from Service.ModelService import ModelService
  19. class showUserMoreView(TemplateView):
  20. @method_decorator(csrf_exempt)
  21. def dispatch(self, *args, **kwargs):
  22. return super(showUserMoreView, self).dispatch(*args, **kwargs)
  23. def post(self, request, *args, **kwargs):
  24. request.encoding = 'utf-8'
  25. return self.validation(request.POST)
  26. def get(self, request, *args, **kwargs):
  27. request.encoding = 'gb2312'
  28. return self.validation(request.GET)
  29. def validation(self, request_dict):
  30. response = ResponseObject()
  31. token = request_dict.get('token', None)
  32. lang = request_dict.get('lang', 'en')
  33. tko = TokenObject(token)
  34. response.lang = tko.lang
  35. if tko.code != 0:
  36. return response.json(tko.code)
  37. user_id = tko.userID
  38. if not user_id:
  39. return response.json(104)
  40. return self.show_user_more(user_id, lang, response)
  41. @staticmethod
  42. def show_user_more(user_id, lang, response):
  43. """
  44. 获取用户完整信息
  45. @param user_id: 用户id
  46. @param lang: 语言
  47. @param response: 响应
  48. @return: response
  49. """
  50. device_user_qs = Device_User.objects.filter(userID=user_id)
  51. if not device_user_qs.exists():
  52. return response.json(104)
  53. try:
  54. sqlDict = CommonService.qs_to_dict(device_user_qs)
  55. for k, v in enumerate(sqlDict["datas"]):
  56. sqlDict['datas'][k]['fields'].pop('password')
  57. userIconPath = sqlDict['datas'][k]['fields']['userIconPath']
  58. region_status = sqlDict['datas'][k]['fields']['region_status']
  59. if userIconPath:
  60. if userIconPath.find('static/') != -1:
  61. userIconPath = userIconPath.replace('static/', '').replace('\\', '/')
  62. userIconUrl = SERVER_DOMAIN + 'account/getAvatar/' + userIconPath
  63. sqlDict['datas'][k]['fields']['userIconUrl'] = userIconUrl
  64. # 确认地区字段和当前地区
  65. sqlDict['datas'][k]['fields']['region_status'] = 1 if region_status else 0
  66. sqlDict['datas'][k]['fields']['region'] = ''
  67. if region_status:
  68. region_country = sqlDict['datas'][k]['fields']['region_country']
  69. language_qs = LanguageModel.objects.filter(lang=lang).values('id')
  70. region_qs = CountryLanguageModel.objects.filter(country_id=region_country,
  71. language_id=language_qs[0]['id']).values('country_name')
  72. sqlDict['datas'][k]['fields']['region'] = region_qs[0]['country_name'] if region_qs.exists() else ''
  73. if len(v['fields']['role']):
  74. roleName = ModelService.getRole(rid=v['fields']['role'][0])
  75. sqlDict["datas"][k]['fields']['rolename'] = roleName
  76. region_country = sqlDict["datas"][k]['fields']['region_country']
  77. if not region_country == 0:
  78. country_qs = CountryLanguageModel.objects.filter(country_id=region_country).values(
  79. 'country__region__api')
  80. sqlDict["datas"][k]['fields']['api'] = country_qs[0]['country__region__api']
  81. else:
  82. sqlDict["datas"][k]['fields']['api'] = ''
  83. # 增加oauth2关联数据
  84. ua_qs = UserOauth2Model.objects.filter(userID_id=user_id).values_list('authType', flat=True)
  85. sqlDict['oauth2'] = list(ua_qs)
  86. return response.json(0, sqlDict)
  87. except Exception as e:
  88. return response.json(500, repr(e))
  89. class perfectUserInfoView(TemplateView):
  90. # 完善个人信息
  91. @method_decorator(csrf_exempt)
  92. def dispatch(self, *args, **kwargs):
  93. return super(perfectUserInfoView, self).dispatch(*args, **kwargs)
  94. def post(self, request, *args, **kwargs):
  95. request.encoding = 'utf-8'
  96. userContent = request.POST.get('content', None)
  97. userIcon = request.FILES.get('userIcon', None)
  98. token = request.POST.get('token', None)
  99. return self.ValidationError(token, userContent, userIcon)
  100. def get(self, request, *args, **kwargs):
  101. request.encoding = 'gb2312'
  102. userContent = request.GET.get('content', None)
  103. userIcon = request.FILES.get('userIcon', None)
  104. token = request.GET.get('token', None)
  105. return self.ValidationError(token, userContent, userIcon)
  106. def ValidationError(self, token, userContent, userIcon):
  107. response = ResponseObject()
  108. tko = TokenObject(token)
  109. response.lang = tko.lang
  110. if tko.code != 0:
  111. return response.json(tko.code)
  112. userID = tko.userID
  113. if not userID:
  114. return response.json(309)
  115. userIconPath = ''
  116. if userIcon:
  117. # 上传头像到aws s3
  118. aws_s3_client = boto3.client(
  119. 's3',
  120. region_name=REGION_NAME,
  121. aws_access_key_id=ACCESS_KEY_ID,
  122. aws_secret_access_key=SECRET_ACCESS_KEY,
  123. config=botocore.client.Config(signature_version='s3v4'),
  124. )
  125. Key = userID + '/' + userIcon.name
  126. aws_s3_client.put_object(Bucket=AVATAR_BUCKET, Key=Key, Body=userIcon)
  127. userIconPath = userID + '/' + userIcon.name
  128. if userContent:
  129. dataValid = json.loads(userContent)
  130. if 'userID' and 'password' and 'is_superuser' in dataValid.keys():
  131. return response.json(444)
  132. if not userIconPath and not userContent:
  133. return response.json(444)
  134. elif not userIconPath and userContent:
  135. return self.perfectUserInfoUpdate(userID, response, userContent=userContent)
  136. elif userIconPath and not userContent:
  137. return self.perfectUserInfoUpdate(userID, response, userIconPath=userIconPath)
  138. else:
  139. return self.perfectUserInfoUpdate(userID, response, userIconPath=userIconPath, userContent=userContent)
  140. def perfectUserInfoUpdate(slef, userID, response, **kwargs):
  141. """
  142. :param username:
  143. :param userContent:
  144. :param args:
  145. :param kwargs:
  146. :return:
  147. """
  148. User = Device_User.objects.filter(userID=userID)
  149. if not User.exists():
  150. return response.json(104)
  151. userIconPath = kwargs.get('userIconPath', None)
  152. userContent = kwargs.get('userContent', None)
  153. userIconUrl = ""
  154. if userIconPath:
  155. userIconUrl = SERVER_DOMAIN + 'account/getAvatar/' + userIconPath
  156. if userContent:
  157. try:
  158. UserData = json.loads(userContent)
  159. except Exception as e:
  160. return response.json(444, repr(e))
  161. try:
  162. if userIconPath and userContent:
  163. User.update(userIconPath=userIconPath, userIconUrl=userIconUrl, **UserData)
  164. elif not userIconPath and userContent:
  165. User.update(**UserData)
  166. elif userIconPath and not userContent:
  167. User.update(userIconPath=userIconPath, userIconUrl=userIconUrl)
  168. except Exception as e:
  169. return response.json(117, repr(e))
  170. else:
  171. res = CommonService.qs_to_dict(User)
  172. for k, v in enumerate(res["datas"]):
  173. res['datas'][k]['fields'].pop('password')
  174. userIconPath = res['datas'][k]['fields']['userIconPath']
  175. if userIconPath and userIconUrl != '':
  176. res['datas'][k]['fields']['userIconUrl'] = userIconUrl
  177. return response.json(0, res)
  178. class getAvatarView(TemplateView):
  179. @method_decorator(csrf_exempt)
  180. def dispatch(self, *args, **kwargs):
  181. return super(getAvatarView, self).dispatch(*args, **kwargs)
  182. def post(self, request, *args, **kwargs):
  183. request.encoding = 'utf-8'
  184. filePath = kwargs.get('filePath', '')
  185. filePath.encode(encoding='utf-8', errors='strict')
  186. return self.getAvatar(filePath)
  187. def get(self, request, *args, **kwargs):
  188. request.encoding = 'utf-8'
  189. filePath = kwargs.get('filePath', '')
  190. filePath.encode(encoding='utf-8', errors='strict')
  191. return self.getAvatar(filePath)
  192. def getAvatar(self, filePath):
  193. response = ResponseObject()
  194. if not filePath:
  195. return response.json(800)
  196. if filePath == 'User/default.png' or filePath == 'User/defaultUser.png':
  197. # 使用默认头像
  198. try:
  199. aws_s3_client = boto3.client(
  200. 's3',
  201. region_name=REGION_NAME,
  202. aws_access_key_id=ACCESS_KEY_ID,
  203. aws_secret_access_key=SECRET_ACCESS_KEY,
  204. config=botocore.client.Config(signature_version='s3v4'),
  205. )
  206. get_object_response = aws_s3_client.get_object(Bucket=AVATAR_BUCKET, Key='default/default.png')
  207. return HttpResponse(get_object_response['Body'], content_type="image/jpeg")
  208. except Exception as e:
  209. print(e)
  210. return response.json(500, repr(e))
  211. fullPath = os.path.join(BASE_DIR, "static", filePath).replace('\\', '/')
  212. if os.path.isfile(fullPath):
  213. try:
  214. imageData = open(fullPath, 'rb').read()
  215. return HttpResponse(imageData, content_type="image/jpeg")
  216. except Exception as e:
  217. return response.json(906, repr(e))
  218. else:
  219. try:
  220. aws_s3_client = boto3.client(
  221. 's3',
  222. region_name=REGION_NAME,
  223. aws_access_key_id=ACCESS_KEY_ID,
  224. aws_secret_access_key=SECRET_ACCESS_KEY,
  225. config=botocore.client.Config(signature_version='s3v4'),
  226. )
  227. get_object_response = aws_s3_client.get_object(Bucket=AVATAR_BUCKET, Key=filePath)
  228. return HttpResponse(get_object_response['Body'], content_type="image/jpeg")
  229. except Exception as e:
  230. return response.json(906, repr(e))
  231. @csrf_exempt
  232. def delUserInterface(request):
  233. response = ResponseObject()
  234. if request.method == 'POST':
  235. request_dict = request.POST
  236. elif request.method == 'GET':
  237. request_dict = request.GET
  238. else:
  239. return response.json(404)
  240. token = request_dict.get('token', None)
  241. delUserID = request_dict.get('delUserID', None)
  242. if not token or not delUserID:
  243. return response.json(444, 'token,delUserID')
  244. tko = TokenObject(token)
  245. response.lang = tko.lang
  246. if tko.code != 0:
  247. return response.json(tko.code)
  248. userID = tko.userID
  249. if not userID:
  250. return response.json(309)
  251. userValid = Device_User.objects.filter(userID=userID)
  252. if not userValid.exists():
  253. return response.json(104)
  254. own_perm = ModelService.check_perm(userID=userID, permID=10)
  255. if own_perm is not True:
  256. return response.json(404)
  257. delUser = Device_User.objects.filter(userID=delUserID)
  258. if not delUser.exists():
  259. return response.json(104)
  260. delUser.delete()
  261. return response.json(0)
  262. @csrf_exempt
  263. def showAllUserInterface(request):
  264. response = ResponseObject()
  265. if request.method == 'POST':
  266. request_dict = request.POST
  267. elif request.method == 'GET':
  268. request_dict = request.GET
  269. else:
  270. return response.json(404)
  271. token = request_dict.get('token', None)
  272. type = request_dict.get('type', None)
  273. tko = TokenObject(token)
  274. response.lang = tko.lang
  275. if tko.code != 0:
  276. return response.json(tko.code)
  277. userID = tko.userID
  278. if not userID:
  279. return response.json(104)
  280. if type == 'PC':
  281. line = int(request.POST.get('line', None))
  282. page = int(request.POST.get('page', None))
  283. userValid = Device_User.objects.filter(userID=userID).order_by('-data_joined')
  284. if not userValid:
  285. return response.json(104)
  286. # 管理员查询
  287. own_permission = ModelService.check_perm(userID=userID, permID=30)
  288. if own_permission is not True:
  289. return response.json(404)
  290. device_user_queryset = Device_User.objects.all()
  291. device_user_count = device_user_queryset.count()
  292. device_user_res = device_user_queryset.order_by('-data_joined')[(page - 1) * line:page * line]
  293. sqlDict = CommonService.qs_to_dict(device_user_res)
  294. redisObj = RedisObject(db=3)
  295. for k, v in enumerate(sqlDict["datas"]):
  296. if len(v['fields']['role']) > 0:
  297. role_query_set = Role.objects.get(rid=v['fields']['role'][0])
  298. sqlDict["datas"][k]['fields']['role'].append(role_query_set.roleName)
  299. if redisObj.get_data(key=v['pk']):
  300. sqlDict["datas"][k]['fields']['online'] = True
  301. else:
  302. sqlDict["datas"][k]['fields']['online'] = False
  303. ue = UserExModel.objects.filter(userID=sqlDict["datas"][k]['pk'])
  304. if ue.exists():
  305. sqlDict["datas"][k]['fields']['appBundleId'] = ue[0].appBundleId
  306. else:
  307. sqlDict["datas"][k]['fields']['appBundleId'] = ''
  308. sqlDict['count'] = device_user_count
  309. return response.json(0, sqlDict)
  310. else:
  311. own_permission = ModelService.check_perm(userID=userID, permID=30)
  312. if own_permission is not True:
  313. return response.json(404)
  314. qs = Device_User.objects.all().order_by('-data_joined')
  315. res = CommonService.qs_to_dict(qs)
  316. return response.json(0, res)
  317. class setUserValidView(View):
  318. @method_decorator(csrf_exempt)
  319. def dispatch(self, *args, **kwargs):
  320. return super(setUserValidView, self).dispatch(*args, **kwargs)
  321. def post(self, request, *args, **kwargs):
  322. request.encoding = 'utf-8'
  323. request_dict = request.POST
  324. return self.setUserValid(request_dict)
  325. def get(self, request, *args, **kwargs):
  326. request.encoding = 'utf-8'
  327. request_dict = request.GET
  328. return self.setUserValid(request_dict)
  329. def setUserValid(self, request_dict):
  330. token = request_dict.get('token', None)
  331. eUserID = request_dict.get('userID', None)
  332. isValid = request_dict.get('isValid', None)
  333. rid = request_dict.get('rid', None)
  334. response = ResponseObject()
  335. tko = TokenObject(token)
  336. response.lang = tko.lang
  337. if tko.code != 0:
  338. return response.json(tko.code)
  339. superID = tko.userID
  340. own_perm = ModelService.check_perm(userID=superID, permID=50)
  341. if own_perm is True or superID != None and superID != eUserID:
  342. if rid == None:
  343. return self.UserValidUpdate(superID, eUserID, isValid, response)
  344. else:
  345. return self.UserValidUpdatePC(superID, eUserID, isValid, rid, response)
  346. else:
  347. return response.json(444, 'superID or userID')
  348. def UserValidUpdatePC(self, superID, eUserID, isValid, rid, response):
  349. super = Device_User.objects.filter(userID=superID)
  350. eUser = Device_User.objects.filter(userID=eUserID)
  351. if not super.exists() or not eUser.exists():
  352. return response.json(104)
  353. own_permission = ModelService.check_perm(userID=superID, permID=50)
  354. if own_permission is True:
  355. try:
  356. eUser.update(user_isValid=isValid)
  357. device_user_query_set = Device_User.objects.get(userID=eUserID)
  358. if device_user_query_set.role.all():
  359. device_user_query_set.role.set([rid])
  360. else:
  361. role_user_query_set = Role.objects.get(rid=rid)
  362. device_user_query_set.role.add(role_user_query_set)
  363. except Exception as e:
  364. errorInfo = traceback.format_exc()
  365. print('更新数据库错误:%s' % errorInfo)
  366. return response.json(177, repr(e))
  367. else:
  368. return response.json(0)
  369. else:
  370. return response.json(404)
  371. def UserValidUpdate(self, superID, eUserID, isValid, response):
  372. super = Device_User.objects.filter(userID=superID)
  373. eUser = Device_User.objects.filter(userID=eUserID)
  374. if not super.exists():
  375. return response.json(104)
  376. if not eUser.exists():
  377. return response.json(104)
  378. if super[0].is_superuser != 100 or super[0].is_superuser == eUser[0].is_superuser:
  379. return response.json(404)
  380. try:
  381. eUser.update(user_isValid=isValid)
  382. except Exception as e:
  383. errorInfo = traceback.format_exc()
  384. print('更新数据库错误: %s' % errorInfo)
  385. return response.json(177, repr(e))
  386. return response.json(0)
  387. @csrf_exempt
  388. def success(request):
  389. return HttpResponse(status=200)