12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208 |
- #!/usr/bin/env python3
- # -*- coding: utf-8 -*-
- """
- @Copyright (C) ansjer cop Video Technology Co.,Ltd.All rights reserved.
- @AUTHOR: ASJRD018
- @NAME: AnsjerFormal
- @software: PyCharm
- @DATE: 2018/9/11 15:08
- @Version: python3.6
- @MODIFY DECORD:ansjer dev
- @file: UserController.py
- @Contact: chanjunkai@163.com
- """
- import datetime
- import traceback
- import simplejson as json
- from django.contrib.auth.hashers import make_password, check_password # 对密码加密模块
- from django.db.models import Q
- from django.http import HttpResponseRedirect
- from django.utils.decorators import method_decorator
- from django.utils.timezone import utc
- from django.views.decorators.csrf import csrf_exempt
- from django.views.generic import TemplateView
- from ratelimit.decorators import ratelimit
- from Ansjer.config import AuthCode_Expire, SERVER_DOMAIN
- from Controller.CheckUserData import DataValid, date_handler, RandomStr
- from Model.models import Device_User, Role, SysMsgModel, UidPushModel
- from Object.AWS.SesClassObject import SesClassObject
- from Object.AliSmsObject import AliSmsObject
- from Object.RedisObject import RedisObject
- from Object.ResponseObject import ResponseObject
- from Object.TokenObject import TokenObject
- from Service.CommonService import CommonService
- from Service.ModelService import ModelService
- from Service.TemplateService import TemplateService
- from django.views.generic import View
- # 获取验证码
- class authCodeView(TemplateView):
- @method_decorator(csrf_exempt)
- def dispatch(self, *args, **kwargs):
- return super(authCodeView, self).dispatch(*args, **kwargs)
- @ratelimit(key='ip', rate='2/m')
- def post(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- lang = request.POST.get('language', None)
- response = ResponseObject(lang)
- was_limited = getattr(request, 'limited', False)
- if was_limited is True:
- return response.json(5)
- username = request.POST.get('userName', None)
- useremail = request.POST.get('userEmail', None)
- return self.ValidationError(username, useremail, response)
- # @ratelimit(key='ip', rate='2/m')
- def get(self, request, *args, **kwargs):
- # Device_User.objects.filter(userEmail='chanjunkai@163.com').delete()
- request.encoding = 'utf-8'
- lang = request.GET.get('language', None)
- response = ResponseObject(lang)
- was_limited = getattr(request, 'limited', False)
- if was_limited is True:
- return response.json(5)
- username = request.GET.get('userName', None)
- email = request.GET.get('userEmail', None)
- return self.ValidationError(username, email, response)
- def ValidationError(self, username, email, response):
- if username:
- username = username.strip()
- return self.phoneCode(username, response)
- elif email:
- email = email.strip()
- return self.emailCode(email, response)
- else:
- return response.json(800)
- def phoneCode(self, phone, response):
- dataValid = DataValid()
- if dataValid.mobile_validate(phone):
- reds = RedisObject()
- identifyingCode = reds.get_data(key=phone + '_identifyingCode')
- if identifyingCode is False:
- user_qs = Device_User.objects.filter(username=phone)
- if user_qs.exists():
- return response.json(101)
- else:
- identifyingCode = RandomStr(6, True)
- if reds.set_data(key=phone + '_identifyingCode', val=identifyingCode, expire=600):
- return response.json(0, {'identifyingCode': identifyingCode})
- else:
- return response.json(10, '生成缓存系统错误')
- else:
- return response.json(0, {'identifyingCode': identifyingCode})
- else:
- return response.json(107)
- def emailCode(self, email, response):
- dataValid = DataValid()
- if dataValid.email_validate(email):
- reds = RedisObject()
- identifyingCode = reds.get_data(key=email + '_identifyingCode')
- if identifyingCode is False:
- user_qs = Device_User.objects.filter(username=email)
- email_qs = Device_User.objects.filter(userEmail=email)
- if user_qs.exists():
- return response.json(103)
- elif email_qs.exists():
- return response.json(103)
- else:
- identifyingCode = RandomStr(6, True)
- if reds.set_data(key=email + '_identifyingCode', val=identifyingCode, expire=AuthCode_Expire):
- send_data = TemplateService.email_message(type='register_code', language=response.lang)
- ses = SesClassObject()
- send_res = ses.send_email(
- send_address_list=[email],
- subject=send_data['title'],
- body=send_data['body'].replace("{username}", email).replace("{captcha}",
- str(identifyingCode))
- )
- if send_res:
- return response.json(0, {'identifyingCode': identifyingCode})
- else:
- reds.del_data(key=email + '_identifyingCode')
- return response.json(44)
- else:
- return response.json(10, '生成缓存系统错误')
- else:
- return response.json(89, {'identifyingCode': identifyingCode})
- else:
- return response.json(107)
- # 验证码注册
- class registerView(TemplateView):
- @method_decorator(csrf_exempt)
- def dispatch(self, *args, **kwargs):
- return super(registerView, self).dispatch(*args, **kwargs)
- def post(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- request_dict = request.POST
- return self.validates(request_dict)
- def get(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- request_dict = request.GET
- return self.validates(request_dict)
- def validates(self, request_dict):
- username = request_dict.get('userName', None)
- userEmail = request_dict.get('userEmail', None)
- password = request_dict.get('userPwd', None)
- authCode = request_dict.get('identifyingCode', None)
- language = request_dict.get('language', None)
- response = ResponseObject(language)
- if username and password and authCode:
- # 过滤空格
- username = username.strip()
- if userEmail:
- userEmail = userEmail.strip()
- return self.register(username, userEmail, password, authCode, response)
- else:
- return response.json(800)
- def register(self, username, userEmail, password, authCode, response):
- dataValid = DataValid()
- reds = RedisObject()
- identifyingCode = reds.get_data(key=username + '_identifyingCode')
- if identifyingCode is False:
- if userEmail:
- identifyingCode = reds.get_data(key=userEmail + '_identifyingCode')
- if identifyingCode is False:
- return response.json(120)
- else:
- username = userEmail
- else:
- return response.json(120)
- if authCode != identifyingCode:
- return response.json(121)
- if dataValid.password_validate(password):
- if dataValid.email_validate(username):
- if userEmail:
- print(userEmail)
- emailValid = Device_User.objects.filter(userEmail=userEmail)
- if emailValid.exists():
- return response.json(103)
- else:
- userEmail = username
- if username:
- nameValid = Device_User.objects.filter(username=username)
- if nameValid.exists():
- return response.json(101)
- try:
- create_data = {
- "username": username,
- "NickName": username,
- "userEmail": userEmail,
- "password": make_password(password),
- "userID": CommonService.getUserID(μs=False, setOTAID=True),
- "is_active": True,
- "user_isValid": True,
- }
- users = Device_User.objects.create(**create_data)
- except Exception as e:
- errorInfo = traceback.format_exc()
- print(errorInfo)
- return response.json(424, repr(e))
- else:
- if reds.del_data(key=username + '_identifyingCode'):
- return response.json(0, {
- "user": {
- "userID": users.userID,
- "username": users.username,
- "userEmail": users.userEmail,
- "NickName": users.NickName,
- "userIconUrl": str(users.userIconUrl),
- "is_superuser": users.is_superuser,
- "is_active": users.is_active,
- "data_joined": date_handler(users.data_joined),
- "last_login": date_handler(users.last_login),
- }
- })
- else:
- return response.json(10, '删除缓存验证码错误')
- elif dataValid.mobile_validate(username):
- nameValid = Device_User.objects.filter(username=username)
- if nameValid:
- return response.json(101)
- try:
- create_data = {
- "username": username,
- "NickName": username,
- "userEmail": userEmail,
- "password": make_password(password),
- "userID": CommonService.getUserID(μs=False, setOTAID=True),
- "is_active": True,
- "user_isValid": True,
- }
- users = Device_User.objects.create(**create_data)
- except Exception as e:
- errorInfo = traceback.format_exc()
- print(errorInfo)
- return response.json(424, repr(e))
- else:
- if reds.del_data(key=username + '_identifyingCode'):
- return response.json(0, {
- "user": {
- "userID": users.userID,
- "username": users.username,
- "userEmail": users.userEmail,
- "NickName": users.NickName,
- "userIconUrl": str(users.userIconUrl),
- "is_superuser": users.is_superuser,
- "is_active": users.is_active,
- "data_joined": date_handler(users.data_joined),
- "last_login": date_handler(users.last_login),
- }
- })
- else:
- return response.json(10, '删除缓存验证码错误')
- else:
- return response.json(107)
- else:
- return response.json(109)
- # 登出
- class LogoutView(TemplateView):
- @method_decorator(csrf_exempt)
- def dispatch(self, *args, **kwargs):
- return super(LogoutView, self).dispatch(*args, **kwargs)
- def post(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- request_dict = request.POST
- return self.Logout(request_dict)
- def get(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- request_dict = request.GET
- return self.Logout(request_dict)
- def Logout(self, request_dict):
- response = ResponseObject()
- token = request_dict.get('token')
- tko = TokenObject(token)
- if tko.code == 0:
- Device_User.objects.filter(userID=tko.userID).update(online=False)
- redisObj = RedisObject(db=3)
- redisObj.del_data(key=tko.userID)
- m_code = request_dict.get('m_code', None)
- if m_code:
- userID = tko.userID
- try:
- UidPushModel.objects.filter(userID_id=userID).delete()
- except Exception as e:
- pass
- else:
- pass
- return response.json(0)
- else:
- return response.json(tko.code)
- # 修改密码
- class ChangePwdView(TemplateView):
- @method_decorator(csrf_exempt)
- def dispatch(self, *args, **kwargs):
- return super(ChangePwdView, self).dispatch(*args, **kwargs)
- def post(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- request_dict = request.POST
- return self.validates(request_dict)
- def get(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- request_dict = request.GET
- return self.validates(request_dict)
- def validates(self, request_dict):
- token = request_dict.get('token', None)
- oldPwd = request_dict.get('oldPwd', None)
- newPwd = request_dict.get('newPwd', None)
- response = ResponseObject()
- if oldPwd is None and newPwd is None:
- return response.json(800)
- tko = TokenObject(token)
- response.lang = tko.lang
- if tko.code != 0:
- return response.json(tko.code)
- return self.updatePwd(tko.userID, oldPwd, newPwd, response)
- def updatePwd(self, userID, oldPwd, newPwd, response):
- user_qs = Device_User.objects.filter(userID=userID)
- if not user_qs.exists():
- return response.json(104)
- c_p = check_password(oldPwd, user_qs[0].password)
- # 密码是否正确
- if not c_p:
- return response.json(111)
- update = user_qs.update(password=make_password(newPwd))
- if update:
- return response.json(0)
- else:
- return response.json(177)
- class ForgetPwdView(TemplateView):
- '''
- 忘记密码
- '''
- @method_decorator(csrf_exempt)
- def dispatch(self, *args, **kwargs):
- return super(ForgetPwdView, self).dispatch(*args, **kwargs)
- @ratelimit(key='ip', rate='1/m')
- def get(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- response = ResponseObject()
- was_limited = getattr(request, 'limited', False)
- if was_limited is True:
- return response.json(5)
- userName = request.GET.get('userName', None)
- return self.ValidationError(userName, response)
- @ratelimit(key='ip', rate='1/m')
- def post(self, request):
- request.encoding = 'utf-8'
- userName = request.POST.get('userName', None)
- response = ResponseObject()
- was_limited = getattr(request, 'limited', False)
- if was_limited is True:
- return response.json(5)
- return self.ValidationError(userName, response)
- def ValidationError(self, userName, response):
- # return response.json(475)
- if userName != None:
- userName = userName.strip()
- return self.ForgetPwd(userName, response)
- else:
- return response.json(800)
- def ForgetPwd(self, userName, response):
- dataValid = DataValid()
- if dataValid.mobile_validate(userName):
- User = Device_User.objects.filter(username=userName)
- elif dataValid.email_validate(userName):
- User = Device_User.objects.filter(username=userName)
- if not User.exists():
- User = Device_User.objects.filter(userEmail=userName)
- else:
- return response.json(104)
- if User:
- email = User[0].userEmail
- userID = User[0].userID
- if email:
- redisObj = RedisObject()
- reset_pwd = redisObj.get_data(key=userID + '_email_reset_pwd')
- if reset_pwd is False:
- tko = TokenObject()
- rest = tko.generate(data={'userID': userID, 'user': userName})
- token = rest['access_token']
- reset_pwd = CommonService.RandomStr(6)
- send_data = TemplateService.email_message(type='forget', language='en')
- reset_link = '{server_host}account/email-re-pwd?token={token}'.format(
- server_host=SERVER_DOMAIN, token=token)
- send_body = send_data['body'].format(username=email, reset_pwd=reset_pwd, reset_link=reset_link)
- ses = SesClassObject()
- send_res = ses.send_email(send_address_list=[email], subject=send_data['title'], body=send_body)
- if send_res is True:
- if redisObj.set_data(key=userID + '_email_reset_pwd', val=reset_pwd, expire=3600):
- return response.json(0)
- else:
- return response.json(10, '存储验证失败')
- else:
- return response.json(89)
- else:
- return response.json(103)
- else:
- return response.json(104)
- class EmailResetPwdView(TemplateView):
- @method_decorator(csrf_exempt)
- def dispatch(self, *args, **kwargs):
- return super(EmailResetPwdView, self).dispatch(*args, **kwargs)
- # 查询
- def get(self, request, *args, **kwargs):
- response = ResponseObject()
- request_dict = request.GET
- return self.validate(request_dict, response, *args, **kwargs)
- # 认证登录
- def post(self, request, *args, **kwargs):
- response = ResponseObject()
- try:
- print(request.body.decode("utf-8"))
- json_data = json.loads(request.body.decode("utf-8"))
- except Exception as e:
- return response.json(10, repr(e))
- else:
- request_dict = json_data
- return self.validate(request_dict, response, *args, **kwargs)
- def validate(self, request_dict, response, *args, **kwargs):
- token = request_dict.get('token', None)
- tko = TokenObject(token)
- if tko.code == 0:
- redisObj = RedisObject()
- userID = tko.userID
- reset_pwd = redisObj.get_data(key=userID + '_email_reset_pwd')
- if reset_pwd is not False:
- user_qs = Device_User.objects.filter(userID=userID)
- if user_qs.exists():
- redisObj.del_data(key=userID + '_email_reset_pwd')
- is_update = user_qs.update(password=make_password(reset_pwd))
- if is_update:
- return HttpResponseRedirect(
- "http://www.dvema.com/web/html/paw_update_success.html?code=" + reset_pwd)
- else:
- return response.json(10)
- else:
- return response.json(104)
- else:
- return HttpResponseRedirect('http://www.dvema.com/web/html/paw_update_unsuccessful.html?lang=en')
- else:
- return HttpResponseRedirect('http://www.dvema.com/web/html/paw_update_unsuccessful.html?lang=en')
- class refreshTokenView(TemplateView):
- @method_decorator(csrf_exempt)
- def dispatch(self, *args, **kwargs):
- return super(refreshTokenView, self).dispatch(*args, **kwargs)
- def post(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- content_type = request.META.get('CONTENT_TYPE', None)
- if content_type == 'application/json':
- request_dict = json.loads(request.body.decode('utf-8'))
- else:
- request_dict = request.POST
- return self.validation(request_dict)
- def get(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- request_dict = request.GET
- return self.validation(request_dict)
- def validation(self, request_dict):
- token = request_dict.get('token', None)
- lang = request_dict.get('lang', None)
- language = request_dict.get('language', None)
- if lang is None:
- lang = language
- response = ResponseObject(lang)
- if token is not None:
- tko = TokenObject(token)
- tko.lang = lang
- res = tko.refresh()
- code = tko.code
- if code == 0:
- return response.json(0, res)
- else:
- return response.json(code)
- else:
- return response.json(444, 'token')
- # 获取验证码
- class v2authCodeView(TemplateView):
- @method_decorator(csrf_exempt)
- def dispatch(self, *args, **kwargs):
- return super(v2authCodeView, self).dispatch(*args, **kwargs)
- @ratelimit(key='ip', rate='2/m')
- def post(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- lang = request.POST.get('lang', None)
- if not lang:
- lang = request.POST.get('language', None)
- response = ResponseObject(lang)
- request_dict = request.POST
- phone = request_dict.get('phone', None)
- if phone is not None:
- was_limited = getattr(request, 'limited', False)
- if was_limited is True:
- return response.json(5)
- return self.ValidationError(request_dict, response)
- @ratelimit(key='ip', rate='2/m')
- def get(self, request, *args, **kwargs):
- # Device_User.objects.filter(userEmail='chanjunkai@163.com').delete()
- request.encoding = 'utf-8'
- lang = request.GET.get('lang', None)
- if not lang:
- lang = request.GET.get('language', None)
- response = ResponseObject(lang)
- was_limited = getattr(request, 'limited', False)
- if was_limited is True:
- return response.json(5)
- request_dict = request.GET
- return self.ValidationError(request_dict, response)
- def ValidationError(self, request_dict, response):
- email = request_dict.get('email', None)
- phone = request_dict.get('phone', None)
- if email is not None:
- email = email.strip()
- # 阿里云的发送邮箱的调用方法
- return self.aliyun_emailCode(email, response)
- # return self.emailCode(email, response)
- elif phone is not None:
- phone = phone.strip()
- return self.phoneCode(phone, response)
- else:
- return response.json(444)
- def emailCode(self, email, response):
- dataValid = DataValid()
- # 邮箱匹配
- if dataValid.email_validate(email) is False:
- return response.json(107)
- reds = RedisObject()
- identifyingCode = reds.get_data(key=email + '_identifyingCode')
- # 是否以获取邮箱验证码
- if identifyingCode:
- return response.json(89)
- user_qs = Device_User.objects.filter(username=email)
- email_qs = Device_User.objects.filter(userEmail=email)
- # 邮箱用户是否已存在
- if user_qs.exists():
- return response.json(103)
- elif email_qs.exists():
- return response.json(103)
- # 生成随机6位数
- identifyingCode = RandomStr(6, True)
- # 设置随机数缓存生命周期
- send_data = TemplateService.email_message(type='register_code', language=response.lang)
- ses = SesClassObject()
- # 发送邮件
- send_res = ses.send_email(
- send_address_list=[email],
- subject=send_data['title'],
- body=send_data['body'].replace("{username}", email).replace("{captcha}",
- str(identifyingCode))
- )
- if send_res is not True:
- return response.json(44)
- if reds.set_data(key=email + '_identifyingCode', val=identifyingCode, expire=600) is not True:
- return response.json(10, 'error')
- return response.json(0)
- # return response.json(0, {'identifyingCode': identifyingCode})
- # 阿里云获取邮箱验证码
- def aliyun_emailCode(self, email, response):
- print('阿里云开始')
- dataValid = DataValid()
- # 邮箱匹配
- if dataValid.email_validate(email) is False:
- return response.json(107)
- reds = RedisObject()
- identifyingCode = reds.get_data(key=email + '_identifyingCode')
- # 是否以获取邮箱验证码
- if identifyingCode:
- return response.json(89)
- user_qs = Device_User.objects.filter(username=email)
- email_qs = Device_User.objects.filter(userEmail=email)
- # 邮箱用户是否已存在
- if user_qs.exists():
- return response.json(103)
- elif email_qs.exists():
- return response.json(103)
- # 生成随机6位数
- identifyingCode = RandomStr(6, True)
- # 设置随机数缓存生命周期
- send_data = TemplateService.email_message(type='register_code', language=response.lang)
- ses = SesClassObject()
- # 发送邮件
- send_res = ses.alyEmailCode(
- send_address_list=[email],
- subject=send_data['title'],
- body=send_data['body'].replace("{username}", email).replace("{captcha}", str(identifyingCode))
- )
- if send_res is not True:
- return response.json(44)
- if reds.set_data(key=email + '_identifyingCode', val=identifyingCode, expire=600) is not True:
- return response.json(10, 'error')
- return response.json(0)
- def phoneCode(self, phone, response):
- dataValid = DataValid()
- if dataValid.mobile_validate(phone) is not True:
- return response.json(107)
- reds = RedisObject()
- identifyingCode = reds.get_data(key=phone + '_identifyingCode')
- if identifyingCode:
- return response.json(90)
- user_qs = Device_User.objects.filter(username=phone)
- phone_qs = Device_User.objects.filter(phone=phone)
- if user_qs.exists() or phone_qs.exists():
- return response.json(101)
- identifyingCode = RandomStr(6, True)
- # 发送手机验证码
- aliSms = AliSmsObject()
- res = aliSms.send_code_sms(phone=phone, code=identifyingCode, sign_name='Ansjer',
- temp_msg='SMS_151600991')
- print(res)
- if res["Code"] == "OK":
- if reds.set_data(key=phone + '_identifyingCode', val=identifyingCode, expire=60) is not True:
- return response.json(10, '生成缓存系统错误')
- return response.json(0)
- else:
- return response.json(10, res["Message"])
- # 验证码注册
- class v2registerView(TemplateView):
- @method_decorator(csrf_exempt)
- def dispatch(self, *args, **kwargs):
- return super(v2registerView, self).dispatch(*args, **kwargs)
- def post(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- request_dict = request.POST
- return self.validates(request_dict)
- def get(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- request_dict = request.GET
- return self.validates(request_dict)
- def validates(self, request_dict):
- phone = request_dict.get('phone', None)
- email = request_dict.get('email', None)
- password = request_dict.get('password', None)
- authcode = request_dict.get('authcode', None)
- lang = request_dict.get('lang', None)
- if not lang:
- lang = request_dict.get('language', None)
- response = ResponseObject(lang)
- if password is None:
- return response.json(444, 'password')
- if authcode is None:
- return response.json(444, 'identifyingCode')
- if phone is not None:
- return self.do_phone_register(phone, password, authcode, response)
- elif email is not None:
- return self.do_email_register(email, password, authcode, response)
- else:
- return response.json(444, 'phone or email')
- def do_phone_register(self, phone, password, authcode, response):
- data_valid = DataValid()
- if data_valid.mobile_validate(phone) is not True:
- return response.json(100)
- if data_valid.password_validate(password) is not True:
- return response.json(109)
- reds = RedisObject()
- identifyingCode = reds.get_data(key=phone + '_identifyingCode')
- # 判断验证码是否过期
- if identifyingCode is False:
- return response.json(120)
- # 验证码是否正确
- if authcode != identifyingCode:
- return response.json(121)
- phone_qs = Device_User.objects.filter(Q(phone=phone) | Q(username=phone))
- # 是否已存在
- if phone_qs.exists():
- return response.json(101)
- try:
- users = Device_User.objects.create(
- username=phone,
- NickName=phone,
- phone=phone,
- password=make_password(password),
- userID=CommonService.getUserID(μs=False, setOTAID=True),
- is_active=True,
- user_isValid=True,
- )
- except Exception as e:
- errorInfo = traceback.format_exc()
- print(errorInfo)
- return response.json(424, repr(e))
- else:
- if not reds.del_data(key=phone + '_identifyingCode'):
- return response.json(10, '删除缓存验证码错误')
- return self.do_login(phone_qs, response)
- def do_login(self, user_qs, response):
- now_time = datetime.datetime.utcnow().replace(tzinfo=utc).astimezone(utc)
- user_qs.update(last_login=now_time, online=True)
- userID = user_qs[0].userID
- print('userID' + userID)
- tko = TokenObject()
- user_list = user_qs.values("NickName", "userIconUrl", "userIconPath", "username", "userEmail", "phone")
- res = tko.generate(data={'userID': userID, 'lang': response.lang, 'user': user_list[0]["username"]})
- # 增加角色
- user_qs[0].role.add(Role.objects.get(rid=1))
- role_dict = ModelService.own_role(userID=userID)
- res['rid'] = role_dict['rid']
- res['roleName'] = role_dict['roleName']
- res['permList'] = ModelService.own_permission(userID)
- res['userID'] = userID
- # 昵称,邮箱,电话,刷新,头像
- userIconPath = str(user_list[0]["userIconPath"])
- if userIconPath and userIconPath.find('static/') != -1:
- userIconPath = userIconPath.replace('static/', '').replace('\\', '/')
- res['userIconUrl'] = SERVER_DOMAIN + 'account/getAvatar/' + userIconPath
- else:
- res['userIconUrl'] = ''
- res['NickName'] = user_list[0]["NickName"] if user_list[0]["NickName"] is not None else ''
- res['username'] = user_list[0]["username"] if user_list[0]["username"] is not None else ''
- res['userEmail'] = user_list[0]["userEmail"] if user_list[0]["userEmail"] is not None else ''
- res['phone'] = user_list[0]["phone"] if user_list[0]["phone"] is not None else ''
- print(res)
- return response.json(0, res)
- def do_email_register(self, email, password, authcode, response):
- data_valid = DataValid()
- if data_valid.email_validate(email) is not True:
- return response.json(105)
- if data_valid.password_validate(password) is not True:
- return response.json(109)
- reds = RedisObject()
- identifyingCode = reds.get_data(key=email + '_identifyingCode')
- # 判断验证码是否过期
- if identifyingCode is False:
- return response.json(120)
- # 验证码是否正确
- if authcode != identifyingCode:
- return response.json(121)
- email_qs = Device_User.objects.filter(Q(userEmail=email) | Q(username=email))
- # 是否已存在
- if email_qs.exists():
- return response.json(103)
- try:
- users = Device_User.objects.create(
- username=email,
- NickName=email,
- userEmail=email,
- password=make_password(password),
- userID=CommonService.getUserID(μs=False, setOTAID=True),
- is_active=True,
- user_isValid=True,
- )
- except Exception as e:
- errorInfo = traceback.format_exc()
- print(errorInfo)
- return response.json(424, repr(e))
- else:
- if not reds.del_data(key=email + '_identifyingCode'):
- return response.json(10, '删除缓存验证码错误')
- return self.do_login(email_qs, response)
- # 重置密码
- # 忘记密码获取验证码v2
- class v2forgetPwdCodeView(TemplateView):
- @method_decorator(csrf_exempt)
- def dispatch(self, *args, **kwargs):
- return super(v2forgetPwdCodeView, self).dispatch(*args, **kwargs)
- @ratelimit(key='ip', rate='1/m')
- def get(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- request_dict = request.GET
- lang = request_dict.get('lang')
- response = ResponseObject(lang)
- was_limited = getattr(request, 'limited', False)
- if was_limited is True:
- return response.json(5)
- return self.ValidationError(request_dict, response)
- @ratelimit(key='ip', rate='1/m')
- def post(self, request):
- request.encoding = 'utf-8'
- request_dict = request.POST
- lang = request_dict.get('lang')
- response = ResponseObject(lang)
- was_limited = getattr(request, 'limited', False)
- if was_limited is True:
- return response.json(5)
- return self.ValidationError(request_dict, response)
- def ValidationError(self, request_dict, response):
- phone = request_dict.get('phone', None)
- email = request_dict.get('email', None)
- if phone is not None:
- phone = phone.strip()
- return self.do_send_phone_code(phone, response)
- elif email is not None:
- return self.do_send_email_code(email, response)
- else:
- return response.json(444, 'phone')
- def do_send_phone_code(self, phone, response):
- data_valid = DataValid()
- if data_valid.mobile_validate(phone) is not True:
- return response.json(100)
- user_qs = Device_User.objects.filter(Q(phone=phone) | Q(username=phone))
- if not user_qs.exists():
- return response.json(102)
- reds = RedisObject()
- resetCode = reds.get_data(key=phone + '_forgetPwdResetCode')
- if resetCode is True:
- return response.json(90)
- resetCode = RandomStr(6, True)
- if not reds.set_data(key=phone + '_forgetPwdResetCode', val=resetCode, expire=300):
- return response.json(10, '生成缓存错误')
- aliSms = AliSmsObject()
- res = aliSms.send_code_sms(phone=phone, code=resetCode, sign_name='Ansjer',
- temp_msg='SMS_151675019')
- if res["Code"] == "OK":
- return response.json(0, {'forgetPwdResetCode': resetCode})
- else:
- return response.json(10, res["Message"])
- def do_send_email_code(self, email, response):
- data_valid = DataValid()
- if data_valid.email_validate(email) is not True:
- return response.json(105)
- user_qs = Device_User.objects.filter(Q(userEmail=email) | Q(username=email))
- if not user_qs.exists():
- return response.json(104)
- reds = RedisObject()
- resetCode = reds.get_data(key=email + '_forgetPwdResetCode')
- if resetCode is True:
- return response.json(90)
- resetCode = RandomStr(6, True)
- if not reds.set_data(key=email + '_forgetPwdResetCode', val=resetCode, expire=600):
- return response.json(10, '生成缓存错误')
- send_data = TemplateService.email_message(type='forgetCode', language=response.lang)
- send_body = send_data['body'].format(userEmail=email, email_valid_code=resetCode)
- ses = SesClassObject()
- # send_res = ses.send_email(send_address_list=[email], subject=send_data['title'], body=send_body)
- # 阿里云发送邮箱
- send_res = ses.alyEmailCode(send_address_list=[email], subject=send_data['title'], body=send_body)
- if send_res is not True:
- reds.del_data(key=email + '_forgetPwdResetCode')
- return response.json(44)
- return response.json(0)
- # 忘记密码v2
- class v2resetPwdByCodeView(TemplateView):
- @method_decorator(csrf_exempt)
- def dispatch(self, *args, **kwargs):
- return super(v2resetPwdByCodeView, self).dispatch(*args, **kwargs)
- def get(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- request_dict = request.GET
- lang = request_dict.get('lang')
- if not lang:
- lang = request_dict.get('language', None)
- response = ResponseObject(lang)
- was_limited = getattr(request, 'limited', False)
- if was_limited is True:
- return response.json(5)
- return self.ValidationError(request_dict, response)
- def post(self, request):
- request.encoding = 'utf-8'
- request_dict = request.POST
- lang = request_dict.get('lang')
- if not lang:
- lang = request_dict.get('language', None)
- response = ResponseObject(lang)
- was_limited = getattr(request, 'limited', False)
- if was_limited is True:
- return response.json(5)
- return self.ValidationError(request_dict, response)
- def ValidationError(self, request_dict, response):
- phone = request_dict.get('phone', None)
- email = request_dict.get('email', None)
- password = request_dict.get('password', None)
- authcode = request_dict.get('authcode', None)
- if password is None or authcode is None:
- return response.json(444, 'password,authcode')
- authcode = authcode.strip()
- password = password.strip()
- if phone is not None:
- phone = phone.strip()
- return self.do_phone_pwd_reset(phone, authcode, password, response)
- elif email is not None:
- email = email.strip()
- return self.do_email_pwd_reset(email, authcode, password, response)
- else:
- return response.json(444, 'phone')
- def do_email_pwd_reset(self, email, authcode, password, response):
- data_valid = DataValid()
- if data_valid.email_validate(email) is not True:
- return response.json(105)
- if data_valid.password_validate(password) is not True:
- return response.json(109)
- user_qs = Device_User.objects.filter(Q(userEmail=email) | Q(username=email))
- if not user_qs.exists():
- return response.json(104)
- reds = RedisObject()
- resetCode = reds.get_data(key=email + '_forgetPwdResetCode')
- if resetCode is False:
- return response.json(90)
- if authcode != resetCode:
- return response.json(121)
- # if not reds.set_data(key=email + '_forgetPwdResetCode', val=resetCode, expire=300):
- # return response.json(10, '生成缓存错误')
- user_qs.update(password=make_password(password))
- if not reds.del_data(email + '_forgetPwdResetCode'):
- return response.json(10, '删除缓存失败')
- return response.json(0)
- def do_phone_pwd_reset(self, phone, authcode, password, response):
- data_valid = DataValid()
- if data_valid.mobile_validate(phone) is not True:
- return response.json(100)
- if data_valid.password_validate(password) is not True:
- return response.json(109)
- user_qs = Device_User.objects.filter(Q(phone=phone) | Q(username=phone))
- if not user_qs.exists():
- return response.json(102)
- reds = RedisObject()
- resetCode = reds.get_data(key=phone + '_forgetPwdResetCode')
- if resetCode is False:
- return response.json(90)
- if authcode != resetCode:
- return response.json(121)
- # if not reds.set_data(key=phone + '_forgetPwdResetCode', val=resetCode, expire=300):
- # return response.json(10, '生成缓存错误')
- user_qs.update(password=make_password(password))
- if not reds.del_data(phone + '_forgetPwdResetCode'):
- return response.json(10, '删除缓存失败')
- return response.json(0)
- def do_login(self, user_qs, response):
- now_time = datetime.datetime.utcnow().replace(tzinfo=utc).astimezone(utc)
- user_qs.update(last_login=now_time, online=True)
- userID = user_qs[0].userID
- print('userID' + userID)
- tko = TokenObject()
- user_list = user_qs.values("NickName", "userIconUrl", "userIconPath", "username", "userEmail", "phone")
- res = tko.generate(data={'userID': userID, 'lang': response.lang, 'user': user_list[0]["username"]})
- # 增加角色
- user_qs[0].role.add(Role.objects.get(rid=1))
- role_dict = ModelService.own_role(userID=userID)
- res['rid'] = role_dict['rid']
- res['roleName'] = role_dict['roleName']
- res['permList'] = ModelService.own_permission(userID)
- res['userID'] = userID
- # 昵称,邮箱,电话,刷新,头像
- userIconPath = str(user_list[0]["userIconPath"])
- if userIconPath and userIconPath.find('static/') != -1:
- userIconPath = userIconPath.replace('static/', '').replace('\\', '/')
- res['userIconUrl'] = SERVER_DOMAIN + 'account/getAvatar/' + userIconPath
- else:
- res['userIconUrl'] = ''
- res['NickName'] = user_list[0]["NickName"] if user_list[0]["NickName"] is not None else ''
- res['username'] = user_list[0]["username"] if user_list[0]["username"] is not None else ''
- res['userEmail'] = user_list[0]["userEmail"] if user_list[0]["userEmail"] is not None else ''
- res['phone'] = user_list[0]["phone"] if user_list[0]["phone"] is not None else ''
- print(res)
- return response.json(0, res)
- # 登录
- class v2LoginView(TemplateView):
- @method_decorator(csrf_exempt) # @csrf_exempt
- def dispatch(self, *args, **kwargs):
- return super(v2LoginView, self).dispatch(*args, **kwargs)
- @ratelimit(key='ip', rate='5/m')
- def post(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- request_dict = request.POST
- language = request_dict.get('language', 'en')
- response = ResponseObject(language)
- was_limited = getattr(request, 'limited', False)
- if was_limited is True:
- return response.json(5)
- return self.validates(request_dict, response)
- # @ratelimit(key='ip', rate='5/m')
- def get(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- request_dict = request.GET
- language = request_dict.get('language', 'en')
- response = ResponseObject(language)
- was_limited = getattr(request, 'limited', False)
- if was_limited is True:
- return response.json(5)
- return self.validates(request_dict, response)
- def validates(self, request_dict, response):
- username = request_dict.get('userName', None)
- password = request_dict.get('userPwd', None)
- if not username or not password:
- return response.json(111)
- username = username.strip()
- password = password.strip()
- data_valid = DataValid()
- if data_valid.email_validate(username):
- return self.do_email_login(username, password, response)
- elif data_valid.mobile_validate(username):
- return self.do_phone_login(username, password, response)
- elif data_valid.name_validate(username):
- return self.do_name_login(username, password, response)
- else:
- return response.json(107)
- def do_email_login(self, email, password, response):
- user_qs = Device_User.objects.filter(Q(username=email) | Q(userEmail=email))
- return self.valid_login(user_qs, password, response)
- def do_phone_login(self, phone, password, response):
- user_qs = Device_User.objects.filter(Q(phone=phone) | Q(username=phone), is_active=True, user_isValid=True)
- return self.valid_login(user_qs, password, response)
- def do_name_login(self, username, password, response):
- user_qs = Device_User.objects.filter(Q(username=username) | Q(phone=username) | Q(userEmail=username),
- is_active=True, user_isValid=True)
- return self.valid_login(user_qs, password, response)
- def valid_login(self, user_qs, password, response):
- if not user_qs.exists():
- return response.json(104)
- users = user_qs.values('role__rid', 'role__roleName', 'userID', 'role', 'NickName', 'username', 'userEmail',
- 'phone', 'password', 'userIconPath', 'user_isValid', 'is_active')[0]
- if not check_password(password, users['password']):
- return response.json(111)
- userID = users['userID']
- tko = TokenObject()
- res = tko.generate(
- data={'userID': userID, 'lang': response.lang, 'user': users['username'], 'm_code': '123413243214'})
- if tko.code == 0:
- now_time = datetime.datetime.utcnow().replace(tzinfo=utc).astimezone(utc)
- user_qs.update(last_login=now_time, language=response.lang)
- res['rid'] = users['role__rid']
- res['roleName'] = users['role__roleName']
- res['permList'] = ModelService.own_permission(userID)
- res['userID'] = userID
- # 昵称,邮箱,电话,刷新,头像
- userIconPath = str(users['userIconPath'])
- if userIconPath and userIconPath.find('static/') != -1:
- userIconPath = userIconPath.replace('static/', '').replace('\\', '/')
- res['userIconUrl'] = SERVER_DOMAIN + 'account/getAvatar/' + userIconPath
- else:
- res['userIconUrl'] = ''
- res['NickName'] = users['NickName'] if users['NickName'] is not None else ''
- res['username'] = users['username'] if users['username'] is not None else ''
- res['userEmail'] = users['userEmail'] if users['userEmail'] is not None else ''
- res['phone'] = users['phone'] if users['phone'] is not None else ''
- return response.json(0, res)
- else:
- return response.json(tko.code)
- # 用户登录后初始化接口
- class InitInfoView(View):
- def get(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- return self.validation(request.GET)
- def post(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- return self.validation(request.POST)
- def validation(self, request_dict):
- response = ResponseObject()
- token = request_dict.get('token', None)
- tko = TokenObject(token)
- if tko.code == 0:
- userID = tko.userID
- return self.init_uid(request_dict, userID, response)
- else:
- return response.json(tko.code)
- # 初始化设备token
- def init_uid(self, request_dict, userID, response):
- token_val = request_dict.get('token_val', None)
- m_code = request_dict.get('m_code', None)
- sm_count = SysMsgModel.objects.filter(userID_id=userID, status=0).count()
- res = {
- 'usmsg': sm_count
- }
- return response.json(0, res)
- # 获取验证码
- class verifyAuthcode(TemplateView):
- def post(self, request, *args, **kwargs):
- request.encoding = 'utf-8'
- lang = request.POST.get('lang', None)
- if not lang:
- lang = request.POST.get('language', None)
- response = ResponseObject(lang)
- request_dict = request.POST
- return self.ValidationError(request_dict, response)
- def get(self, request, *args, **kwargs):
- # Device_User.objects.filter(userEmail='chanjunkai@163.com').delete()
- request.encoding = 'utf-8'
- lang = request.GET.get('lang', None)
- if not lang:
- lang = request.GET.get('language', None)
- response = ResponseObject(lang)
- request_dict = request.GET
- return self.ValidationError(request_dict, response)
- def ValidationError(self, request_dict, response):
- email = request_dict.get('email', None)
- phone = request_dict.get('phone', None)
- authcode = request_dict.get('authcode', None)
- if email is not None:
- email = email.strip()
- return self.email_validate(email, authcode, response)
- elif phone is not None:
- phone = phone.strip()
- return self.phone_validate(phone, authcode, response)
- else:
- return response.json(444)
- def email_validate(self, email, authcode, response):
- data_valid = DataValid()
- if data_valid.email_validate(email) is not True:
- return response.json(105)
- reds = RedisObject()
- resetCode = reds.get_data(key=email + '_forgetPwdResetCode')
- if resetCode is False:
- return response.json(90)
- if authcode != resetCode:
- return response.json(121)
- return response.json(0)
- def phone_validate(self, phone, authcode, response):
- data_valid = DataValid()
- if data_valid.mobile_validate(phone) is not True:
- return response.json(100)
- reds = RedisObject()
- resetCode = reds.get_data(key=phone + '_forgetPwdResetCode')
- if resetCode is False:
- return response.json(90)
- print(resetCode)
- if authcode != resetCode:
- return response.json(121)
- return response.json(0)
|