UserManger.py 19 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450
  1. import os
  2. import traceback
  3. import boto3
  4. import botocore
  5. from botocore import client
  6. import simplejson as json
  7. from django.http import HttpResponse
  8. from django.utils.decorators import method_decorator
  9. from django.views.decorators.csrf import csrf_exempt
  10. from django.views.generic import TemplateView, View
  11. from Ansjer.config import BASE_DIR, ACCESS_KEY_ID, SECRET_ACCESS_KEY, REGION_NAME, AVATAR_BUCKET
  12. from Ansjer.config import SERVER_DOMAIN
  13. from Model.models import Role, Device_User, UserOauth2Model, UserExModel, CountryLanguageModel, LanguageModel, App_Info
  14. from Object.RedisObject import RedisObject
  15. from Object.ResponseObject import ResponseObject
  16. from Object.TokenObject import TokenObject
  17. from Service.CommonService import CommonService
  18. from Service.ModelService import ModelService
  19. class showUserMoreView(TemplateView):
  20. @method_decorator(csrf_exempt)
  21. def dispatch(self, *args, **kwargs):
  22. return super(showUserMoreView, self).dispatch(*args, **kwargs)
  23. def post(self, request, *args, **kwargs):
  24. request.encoding = 'utf-8'
  25. return self.validation(request.POST)
  26. def get(self, request, *args, **kwargs):
  27. request.encoding = 'gb2312'
  28. return self.validation(request.GET)
  29. def validation(self, request_dict):
  30. response = ResponseObject()
  31. token = request_dict.get('token', None)
  32. lang = request_dict.get('lang', 'en')
  33. app_bundle_id = request_dict.get('app_bundle_id', None)
  34. tko = TokenObject(token)
  35. response.lang = tko.lang
  36. if tko.code != 0:
  37. return response.json(tko.code)
  38. user_id = tko.userID
  39. if not user_id:
  40. return response.json(104)
  41. return self.show_user_more(user_id, lang, app_bundle_id, response)
  42. @staticmethod
  43. def show_user_more(user_id, lang, app_bundle_id, response):
  44. """
  45. 获取用户完整信息
  46. @param user_id: 用户id
  47. @param lang: 语言
  48. @param app_bundle_id: app包id
  49. @param response: 响应
  50. @return: response
  51. """
  52. device_user_qs = Device_User.objects.filter(userID=user_id)
  53. if not device_user_qs.exists():
  54. return response.json(104)
  55. try:
  56. sqlDict = CommonService.qs_to_dict(device_user_qs)
  57. for k, v in enumerate(sqlDict["datas"]):
  58. sqlDict['datas'][k]['fields'].pop('password')
  59. userIconPath = sqlDict['datas'][k]['fields']['userIconPath']
  60. region_status = sqlDict['datas'][k]['fields']['region_status']
  61. if userIconPath:
  62. if userIconPath.find('static/') != -1:
  63. userIconPath = userIconPath.replace('static/', '').replace('\\', '/')
  64. userIconUrl = SERVER_DOMAIN + 'account/getAvatar/' + userIconPath
  65. sqlDict['datas'][k]['fields']['userIconUrl'] = userIconUrl
  66. # 确认地区字段
  67. sqlDict['datas'][k]['fields']['region_status'] = 1 if region_status else 0
  68. if len(v['fields']['role']):
  69. roleName = ModelService.getRole(rid=v['fields']['role'][0])
  70. sqlDict["datas"][k]['fields']['rolename'] = roleName
  71. # 根据region_country的值返回api和region数据
  72. sqlDict["datas"][k]['fields']['api'] = ''
  73. sqlDict['datas'][k]['fields']['region'] = ''
  74. region_country = sqlDict["datas"][k]['fields']['region_country']
  75. if region_country != 0:
  76. # api数据
  77. country_qs = CountryLanguageModel.objects.filter(country_id=region_country).values(
  78. 'country__region__api', 'country__region__zosi_api', 'country__region__loocam_api')
  79. sqlDict["datas"][k]['fields']['api'] = country_qs[0]['country__region__api']
  80. if region_country == 1: # 中国返回美洲域名
  81. sqlDict["datas"][k]['fields']['api'] = 'https://www.dvema.com/'
  82. # 根据app_bundle_id返回对应域名
  83. if app_bundle_id:
  84. # 查询app名
  85. app_inf_qs = App_Info.objects.filter(appBundleId=app_bundle_id).values('appName')
  86. if app_inf_qs.exists():
  87. app_name = app_inf_qs[0]['appName']
  88. if 'Zosi' in app_name:
  89. sqlDict['datas'][k]['fields']['api'] = country_qs[0]['country__region__zosi_api']
  90. if region_country == 1:
  91. sqlDict['datas'][k]['fields']['api'] = 'https://api.zositech2.com/'
  92. elif 'Loocam' in app_name:
  93. sqlDict['datas'][k]['fields']['api'] = country_qs[0]['country__region__loocam_api']
  94. if region_country == 1:
  95. sqlDict['datas'][k]['fields']['api'] = 'https://api.loocam2.com/'
  96. # region数据
  97. region_country = sqlDict['datas'][k]['fields']['region_country']
  98. language_qs = LanguageModel.objects.filter(lang=lang).values('id')
  99. region_qs = CountryLanguageModel.objects.filter(country_id=region_country,
  100. language_id=language_qs[0]['id']).\
  101. values('country_name')
  102. sqlDict['datas'][k]['fields']['region'] = region_qs[0]['country_name'] if region_qs.exists() else ''
  103. # 增加oauth2关联数据
  104. ua_qs = UserOauth2Model.objects.filter(userID_id=user_id).values_list('authType', flat=True)
  105. sqlDict['oauth2'] = list(ua_qs)
  106. return response.json(0, sqlDict)
  107. except Exception as e:
  108. return response.json(500, repr(e))
  109. class perfectUserInfoView(TemplateView):
  110. # 完善个人信息
  111. @method_decorator(csrf_exempt)
  112. def dispatch(self, *args, **kwargs):
  113. return super(perfectUserInfoView, self).dispatch(*args, **kwargs)
  114. def post(self, request, *args, **kwargs):
  115. request.encoding = 'utf-8'
  116. userContent = request.POST.get('content', None)
  117. userIcon = request.FILES.get('userIcon', None)
  118. token = request.POST.get('token', None)
  119. return self.ValidationError(token, userContent, userIcon)
  120. def get(self, request, *args, **kwargs):
  121. request.encoding = 'gb2312'
  122. userContent = request.GET.get('content', None)
  123. userIcon = request.FILES.get('userIcon', None)
  124. token = request.GET.get('token', None)
  125. return self.ValidationError(token, userContent, userIcon)
  126. def ValidationError(self, token, userContent, userIcon):
  127. response = ResponseObject()
  128. tko = TokenObject(token)
  129. response.lang = tko.lang
  130. if tko.code != 0:
  131. return response.json(tko.code)
  132. userID = tko.userID
  133. if not userID:
  134. return response.json(309)
  135. userIconPath = ''
  136. if userIcon:
  137. # 上传头像到aws s3
  138. aws_s3_client = boto3.client(
  139. 's3',
  140. region_name=REGION_NAME,
  141. aws_access_key_id=ACCESS_KEY_ID,
  142. aws_secret_access_key=SECRET_ACCESS_KEY,
  143. config=botocore.client.Config(signature_version='s3v4'),
  144. )
  145. Key = userID + '/' + userIcon.name
  146. aws_s3_client.put_object(Bucket=AVATAR_BUCKET, Key=Key, Body=userIcon)
  147. userIconPath = userID + '/' + userIcon.name
  148. if userContent:
  149. dataValid = json.loads(userContent)
  150. if 'userID' and 'password' and 'is_superuser' in dataValid.keys():
  151. return response.json(444)
  152. if not userIconPath and not userContent:
  153. return response.json(444)
  154. elif not userIconPath and userContent:
  155. return self.perfectUserInfoUpdate(userID, response, userContent=userContent)
  156. elif userIconPath and not userContent:
  157. return self.perfectUserInfoUpdate(userID, response, userIconPath=userIconPath)
  158. else:
  159. return self.perfectUserInfoUpdate(userID, response, userIconPath=userIconPath, userContent=userContent)
  160. def perfectUserInfoUpdate(slef, userID, response, **kwargs):
  161. """
  162. :param username:
  163. :param userContent:
  164. :param args:
  165. :param kwargs:
  166. :return:
  167. """
  168. User = Device_User.objects.filter(userID=userID)
  169. if not User.exists():
  170. return response.json(104)
  171. userIconPath = kwargs.get('userIconPath', None)
  172. userContent = kwargs.get('userContent', None)
  173. userIconUrl = ""
  174. if userIconPath:
  175. userIconUrl = SERVER_DOMAIN + 'account/getAvatar/' + userIconPath
  176. if userContent:
  177. try:
  178. UserData = json.loads(userContent)
  179. except Exception as e:
  180. return response.json(444, repr(e))
  181. try:
  182. if userIconPath and userContent:
  183. User.update(userIconPath=userIconPath, userIconUrl=userIconUrl, **UserData)
  184. elif not userIconPath and userContent:
  185. User.update(**UserData)
  186. elif userIconPath and not userContent:
  187. User.update(userIconPath=userIconPath, userIconUrl=userIconUrl)
  188. except Exception as e:
  189. return response.json(117, repr(e))
  190. else:
  191. res = CommonService.qs_to_dict(User)
  192. for k, v in enumerate(res["datas"]):
  193. res['datas'][k]['fields'].pop('password')
  194. userIconPath = res['datas'][k]['fields']['userIconPath']
  195. if userIconPath and userIconUrl != '':
  196. res['datas'][k]['fields']['userIconUrl'] = userIconUrl
  197. return response.json(0, res)
  198. class getAvatarView(TemplateView):
  199. @method_decorator(csrf_exempt)
  200. def dispatch(self, *args, **kwargs):
  201. return super(getAvatarView, self).dispatch(*args, **kwargs)
  202. def post(self, request, *args, **kwargs):
  203. request.encoding = 'utf-8'
  204. filePath = kwargs.get('filePath', '')
  205. filePath.encode(encoding='utf-8', errors='strict')
  206. return self.getAvatar(filePath)
  207. def get(self, request, *args, **kwargs):
  208. request.encoding = 'utf-8'
  209. filePath = kwargs.get('filePath', '')
  210. filePath.encode(encoding='utf-8', errors='strict')
  211. return self.getAvatar(filePath)
  212. def getAvatar(self, filePath):
  213. response = ResponseObject()
  214. if not filePath:
  215. return response.json(800)
  216. if filePath == 'User/default.png' or filePath == 'User/defaultUser.png':
  217. # 使用默认头像
  218. try:
  219. aws_s3_client = boto3.client(
  220. 's3',
  221. region_name=REGION_NAME,
  222. aws_access_key_id=ACCESS_KEY_ID,
  223. aws_secret_access_key=SECRET_ACCESS_KEY,
  224. config=botocore.client.Config(signature_version='s3v4'),
  225. )
  226. get_object_response = aws_s3_client.get_object(Bucket=AVATAR_BUCKET, Key='default/default.png')
  227. return HttpResponse(get_object_response['Body'], content_type="image/jpeg")
  228. except Exception as e:
  229. print(e)
  230. return response.json(500, repr(e))
  231. fullPath = os.path.join(BASE_DIR, "static", filePath).replace('\\', '/')
  232. if os.path.isfile(fullPath):
  233. try:
  234. imageData = open(fullPath, 'rb').read()
  235. return HttpResponse(imageData, content_type="image/jpeg")
  236. except Exception as e:
  237. return response.json(906, repr(e))
  238. else:
  239. try:
  240. aws_s3_client = boto3.client(
  241. 's3',
  242. region_name=REGION_NAME,
  243. aws_access_key_id=ACCESS_KEY_ID,
  244. aws_secret_access_key=SECRET_ACCESS_KEY,
  245. config=botocore.client.Config(signature_version='s3v4'),
  246. )
  247. get_object_response = aws_s3_client.get_object(Bucket=AVATAR_BUCKET, Key=filePath)
  248. return HttpResponse(get_object_response['Body'], content_type="image/jpeg")
  249. except Exception as e:
  250. return response.json(906, repr(e))
  251. @csrf_exempt
  252. def delUserInterface(request):
  253. response = ResponseObject()
  254. if request.method == 'POST':
  255. request_dict = request.POST
  256. elif request.method == 'GET':
  257. request_dict = request.GET
  258. else:
  259. return response.json(404)
  260. token = request_dict.get('token', None)
  261. delUserID = request_dict.get('delUserID', None)
  262. if not token or not delUserID:
  263. return response.json(444, 'token,delUserID')
  264. tko = TokenObject(token)
  265. response.lang = tko.lang
  266. if tko.code != 0:
  267. return response.json(tko.code)
  268. userID = tko.userID
  269. if not userID:
  270. return response.json(309)
  271. userValid = Device_User.objects.filter(userID=userID)
  272. if not userValid.exists():
  273. return response.json(104)
  274. own_perm = ModelService.check_perm(userID=userID, permID=10)
  275. if own_perm is not True:
  276. return response.json(404)
  277. delUser = Device_User.objects.filter(userID=delUserID)
  278. if not delUser.exists():
  279. return response.json(104)
  280. delUser.delete()
  281. return response.json(0)
  282. @csrf_exempt
  283. def showAllUserInterface(request):
  284. response = ResponseObject()
  285. if request.method == 'POST':
  286. request_dict = request.POST
  287. elif request.method == 'GET':
  288. request_dict = request.GET
  289. else:
  290. return response.json(404)
  291. token = request_dict.get('token', None)
  292. type = request_dict.get('type', None)
  293. tko = TokenObject(token)
  294. response.lang = tko.lang
  295. if tko.code != 0:
  296. return response.json(tko.code)
  297. userID = tko.userID
  298. if not userID:
  299. return response.json(104)
  300. if type == 'PC':
  301. line = int(request.POST.get('line', None))
  302. page = int(request.POST.get('page', None))
  303. userValid = Device_User.objects.filter(userID=userID).order_by('-data_joined')
  304. if not userValid:
  305. return response.json(104)
  306. # 管理员查询
  307. own_permission = ModelService.check_perm(userID=userID, permID=30)
  308. if own_permission is not True:
  309. return response.json(404)
  310. device_user_queryset = Device_User.objects.all()
  311. device_user_count = device_user_queryset.count()
  312. device_user_res = device_user_queryset.order_by('-data_joined')[(page - 1) * line:page * line]
  313. sqlDict = CommonService.qs_to_dict(device_user_res)
  314. redisObj = RedisObject(db=3)
  315. for k, v in enumerate(sqlDict["datas"]):
  316. if len(v['fields']['role']) > 0:
  317. role_query_set = Role.objects.get(rid=v['fields']['role'][0])
  318. sqlDict["datas"][k]['fields']['role'].append(role_query_set.roleName)
  319. if redisObj.get_data(key=v['pk']):
  320. sqlDict["datas"][k]['fields']['online'] = True
  321. else:
  322. sqlDict["datas"][k]['fields']['online'] = False
  323. ue = UserExModel.objects.filter(userID=sqlDict["datas"][k]['pk'])
  324. if ue.exists():
  325. sqlDict["datas"][k]['fields']['appBundleId'] = ue[0].appBundleId
  326. else:
  327. sqlDict["datas"][k]['fields']['appBundleId'] = ''
  328. sqlDict['count'] = device_user_count
  329. return response.json(0, sqlDict)
  330. else:
  331. own_permission = ModelService.check_perm(userID=userID, permID=30)
  332. if own_permission is not True:
  333. return response.json(404)
  334. qs = Device_User.objects.all().order_by('-data_joined')
  335. res = CommonService.qs_to_dict(qs)
  336. return response.json(0, res)
  337. class setUserValidView(View):
  338. @method_decorator(csrf_exempt)
  339. def dispatch(self, *args, **kwargs):
  340. return super(setUserValidView, self).dispatch(*args, **kwargs)
  341. def post(self, request, *args, **kwargs):
  342. request.encoding = 'utf-8'
  343. request_dict = request.POST
  344. return self.setUserValid(request_dict)
  345. def get(self, request, *args, **kwargs):
  346. request.encoding = 'utf-8'
  347. request_dict = request.GET
  348. return self.setUserValid(request_dict)
  349. def setUserValid(self, request_dict):
  350. token = request_dict.get('token', None)
  351. eUserID = request_dict.get('userID', None)
  352. isValid = request_dict.get('isValid', None)
  353. rid = request_dict.get('rid', None)
  354. response = ResponseObject()
  355. tko = TokenObject(token)
  356. response.lang = tko.lang
  357. if tko.code != 0:
  358. return response.json(tko.code)
  359. superID = tko.userID
  360. own_perm = ModelService.check_perm(userID=superID, permID=50)
  361. if own_perm is True or superID != None and superID != eUserID:
  362. if rid == None:
  363. return self.UserValidUpdate(superID, eUserID, isValid, response)
  364. else:
  365. return self.UserValidUpdatePC(superID, eUserID, isValid, rid, response)
  366. else:
  367. return response.json(444, 'superID or userID')
  368. def UserValidUpdatePC(self, superID, eUserID, isValid, rid, response):
  369. super = Device_User.objects.filter(userID=superID)
  370. eUser = Device_User.objects.filter(userID=eUserID)
  371. if not super.exists() or not eUser.exists():
  372. return response.json(104)
  373. own_permission = ModelService.check_perm(userID=superID, permID=50)
  374. if own_permission is True:
  375. try:
  376. eUser.update(user_isValid=isValid)
  377. device_user_query_set = Device_User.objects.get(userID=eUserID)
  378. if device_user_query_set.role.all():
  379. device_user_query_set.role.set([rid])
  380. else:
  381. role_user_query_set = Role.objects.get(rid=rid)
  382. device_user_query_set.role.add(role_user_query_set)
  383. except Exception as e:
  384. errorInfo = traceback.format_exc()
  385. print('更新数据库错误:%s' % errorInfo)
  386. return response.json(177, repr(e))
  387. else:
  388. return response.json(0)
  389. else:
  390. return response.json(404)
  391. def UserValidUpdate(self, superID, eUserID, isValid, response):
  392. super = Device_User.objects.filter(userID=superID)
  393. eUser = Device_User.objects.filter(userID=eUserID)
  394. if not super.exists():
  395. return response.json(104)
  396. if not eUser.exists():
  397. return response.json(104)
  398. if super[0].is_superuser != 100 or super[0].is_superuser == eUser[0].is_superuser:
  399. return response.json(404)
  400. try:
  401. eUser.update(user_isValid=isValid)
  402. except Exception as e:
  403. errorInfo = traceback.format_exc()
  404. print('更新数据库错误: %s' % errorInfo)
  405. return response.json(177, repr(e))
  406. return response.json(0)
  407. @csrf_exempt
  408. def success(request):
  409. return HttpResponse(status=200)