522 lines
20 KiB
Python
522 lines
20 KiB
Python
import logging
|
||
|
||
from django.conf import settings
|
||
from django.contrib.auth.hashers import check_password, make_password
|
||
from django.contrib.auth.models import UserManager
|
||
from django.core.cache import cache
|
||
from django.db.models import Count
|
||
from django.http import request
|
||
from django.http.response import JsonResponse
|
||
from django_filters.rest_framework import DjangoFilterBackend
|
||
from rest_framework import status
|
||
from rest_framework.decorators import (action, api_view, authentication_classes,
|
||
permission_classes)
|
||
from rest_framework.filters import OrderingFilter, SearchFilter
|
||
from rest_framework.mixins import (CreateModelMixin, DestroyModelMixin,
|
||
ListModelMixin, RetrieveModelMixin,
|
||
UpdateModelMixin)
|
||
from rest_framework.pagination import PageNumberPagination
|
||
from rest_framework.parsers import (FileUploadParser, JSONParser,
|
||
MultiPartParser)
|
||
from rest_framework.permissions import IsAuthenticated
|
||
from rest_framework.response import Response
|
||
from rest_framework.views import APIView
|
||
from rest_framework.viewsets import GenericViewSet, ModelViewSet
|
||
from rest_framework_simplejwt.tokens import RefreshToken
|
||
from utils.pagination import PageOrNot
|
||
from utils.queryset import get_child_queryset2
|
||
|
||
from .filters import UserFilter
|
||
from .models import (City, Dict, DictType, File, Message, Organization, Permission,
|
||
Position, Province, Role, User, UserThird)
|
||
from .permission import RbacPermission, get_permission_list
|
||
from .permission_data import RbacFilterSet
|
||
from .serializers import (CitySerializer, DictSerializer, DictTypeSerializer, FileSerializer,
|
||
OrganizationSerializer, PermissionSerializer,
|
||
PositionSerializer, ProvinceSerializer, RoleSerializer,
|
||
UserCreateSerializer, UserListSerializer,
|
||
UserModifySerializer)
|
||
from django.utils.decorators import method_decorator
|
||
from django.views.decorators.cache import cache_page
|
||
import requests
|
||
import json
|
||
from rest_framework.exceptions import AuthenticationFailed
|
||
from django.db import transaction
|
||
logger = logging.getLogger('log')
|
||
# logger.info('请求成功！ response_code:{}；response_headers:{}；response_body:{}'.format(response_code, response_headers, response_body[:251]))
|
||
# logger.error('请求出错：{}'.format(error))
|
||
|
||
|
||
class LogoutView(APIView):
|
||
permission_classes = []
|
||
|
||
def get(self, request, *args, **kwargs): # 可将token加入黑名单
|
||
return Response(status=status.HTTP_200_OK)
|
||
|
||
import random
|
||
import smtplib
|
||
import string
|
||
from email.header import Header
|
||
from email.mime.text import MIMEText
|
||
from email.utils import formataddr
|
||
|
||
from rest_framework_simplejwt.tokens import RefreshToken
|
||
|
||
|
||
def get_tokens_for_user(user):
|
||
refresh = RefreshToken.for_user(user)
|
||
return {
|
||
'refresh': str(refresh),
|
||
'access': str(refresh.access_token),
|
||
}
|
||
import datetime
|
||
|
||
|
||
class Login2View(APIView):
|
||
"""
|
||
邮箱验证码登录
|
||
"""
|
||
authentication_classes = []
|
||
permission_classes = []
|
||
def post(self, request):
|
||
mail = request.data['mail']
|
||
msg = request.data['msg']
|
||
if not User.objects.filter(username=mail).exists():
|
||
return Response('账户不存在', status=status.HTTP_400_BAD_REQUEST)
|
||
a_minute_ago=datetime.datetime.now()-datetime.timedelta(minutes=1)
|
||
if Message.objects.filter(mail=mail, create_time__gte=a_minute_ago).exists() and Message.objects.filter(mail=mail).last().msg == msg:
|
||
user = User.objects.get(username=mail)
|
||
return Response(get_tokens_for_user(user), status=status.HTTP_200_OK)
|
||
return Response('验证码错误', status=status.HTTP_400_BAD_REQUEST)
|
||
|
||
class sendMsg(APIView):
|
||
authentication_classes = []
|
||
permission_classes = []
|
||
|
||
def post(self, request):
|
||
code = random.randint(10000,99999)
|
||
my_sender = 'gxpt@ctc.ac.cn'
|
||
my_user = request.data['mail']
|
||
my_pass = 'Pintai123'
|
||
if not User.objects.filter(username=my_user).exists():
|
||
return Response('该账户不存在', status=status.HTTP_400_BAD_REQUEST)
|
||
try:
|
||
# 邮件内容
|
||
msg=MIMEText('您好,共享平台本次登陆验证码为' + str(code),'plain','utf-8')
|
||
# 括号里的对应发件人邮箱昵称、发件人邮箱账号
|
||
msg['From']=formataddr(["国检集团检验检测能力共享平台",my_sender])
|
||
# 括号里的对应收件人邮箱昵称、收件人邮箱账号
|
||
msg['To']=formataddr(["",my_user])
|
||
# 邮件的主题
|
||
msg['Subject'] = Header(str(code), 'utf-8').encode()
|
||
|
||
# SMTP服务器，腾讯企业邮箱端口是465，腾讯邮箱支持SSL(不强制)， 不支持TLS
|
||
# qq邮箱smtp服务器地址:smtp.qq.com,端口号：456
|
||
# 163邮箱smtp服务器地址：smtp.163.com，端口号：25
|
||
server=smtplib.SMTP_SSL("smtp.exmail.qq.com", 465)
|
||
# 登录服务器，括号中对应的是发件人邮箱账号、邮箱密码
|
||
server.login(my_sender, my_pass)
|
||
# 发送邮件，括号中对应的是发件人邮箱账号、收件人邮箱账号、发送邮件
|
||
server.sendmail(my_sender,[my_user,],msg.as_string())
|
||
# 关闭连接
|
||
server.quit()
|
||
Message.objects.filter(mail=my_user).delete()
|
||
Message.objects.create(mail=my_user, msg=code)
|
||
except:
|
||
return Response('验证码发送失败', status=status.HTTP_400_BAD_REQUEST)
|
||
return Response(status=status.HTTP_200_OK)
|
||
|
||
class DictTypeViewSet(ModelViewSet):
|
||
"""
|
||
数据字典类型：增删改查
|
||
"""
|
||
perms_map = {'get': '*', 'post': 'dicttype_create',
|
||
'put': 'dicttype_update', 'delete': 'dicttype_delete'}
|
||
queryset = DictType.objects.all()
|
||
serializer_class = DictTypeSerializer
|
||
pagination_class = None
|
||
search_fields = ['name']
|
||
ordering_fields = ['id']
|
||
ordering = 'id'
|
||
|
||
|
||
class DictViewSet(ModelViewSet):
|
||
"""
|
||
数据字典：增删改查
|
||
"""
|
||
perms_map = {'get': '*', 'post': 'dict_create',
|
||
'put': 'dict_update', 'delete': 'dict_delete'}
|
||
queryset = Dict.objects.all()
|
||
serializer_class = DictSerializer
|
||
search_fields = ['name', 'code']
|
||
filterset_fields = ['type__code', 'type', 'is_used']
|
||
ordering_fields = ['sort']
|
||
ordering = 'sort'
|
||
def paginate_queryset(self, queryset):
|
||
"""
|
||
如果查询参数里没有page但有type或type__code时则不分页,否则请求分页
|
||
也可用utils.pageornot方法
|
||
"""
|
||
if self.paginator is None:
|
||
return None
|
||
elif (not self.request.query_params.get('page', None)) and ((self.request.query_params.get('type__code', None)) or (self.request.query_params.get('type', None))):
|
||
return None
|
||
return self.paginator.paginate_queryset(queryset, self.request, view=self)
|
||
|
||
|
||
class PositionViewSet(ModelViewSet):
|
||
"""
|
||
岗位：增删改查
|
||
"""
|
||
perms_map = {'get': '*', 'post': 'position_create',
|
||
'put': 'position_update', 'delete': 'position_delete'}
|
||
queryset = Position.objects.all()
|
||
serializer_class = PositionSerializer
|
||
pagination_class = None
|
||
search_fields = ['name']
|
||
ordering_fields = ['id']
|
||
ordering = 'id'
|
||
|
||
|
||
class TestView(APIView):
|
||
perms_map = {'get': 'test_view'} # 单个API控权
|
||
pass
|
||
|
||
|
||
class PermissionViewSet(ModelViewSet):
|
||
"""
|
||
权限：增删改查
|
||
"""
|
||
perms_map = {'get': '*', 'post': 'perm_create',
|
||
'put': 'perm_update', 'delete': 'perm_delete'}
|
||
queryset = Position.objects.all()
|
||
queryset = Permission.objects.all()
|
||
serializer_class = PermissionSerializer
|
||
pagination_class = None
|
||
search_fields = ['name']
|
||
ordering_fields = ['sort']
|
||
ordering = 'sort'
|
||
|
||
|
||
class OrganizationViewSet(PageOrNot,ModelViewSet):
|
||
"""
|
||
组织机构：增删改查
|
||
"""
|
||
perms_map = {'get': '*', 'post': 'org_create',
|
||
'put': 'org_update', 'delete': 'org_delete'}
|
||
queryset = Organization.objects.all()
|
||
serializer_class = OrganizationSerializer
|
||
pagination_class = None
|
||
search_fields = ['name']
|
||
filterset_fields = ['pid','name', 'type','can_supervision']
|
||
ordering_fields = ['sort']
|
||
ordering = ['sort', 'pk']
|
||
|
||
def filter_queryset(self, queryset):
|
||
queryset = super().filter_queryset(queryset)
|
||
if self.request.query_params.get('service_ok', 0):
|
||
queryset = queryset.exclude(service__isnull=True)
|
||
return queryset
|
||
|
||
@action(methods=['get'], detail=False, permission_classes=[IsAuthenticated])
|
||
def sub(self, request, pk=None):
|
||
"""
|
||
获取本人所在部门的下级部门
|
||
"""
|
||
subdept = get_child_queryset2(request.user.dept).order_by('sort')
|
||
serializer = OrganizationSerializer(subdept, many=True)
|
||
return Response(serializer.data)
|
||
|
||
class RoleViewSet(ModelViewSet):
|
||
"""
|
||
角色：增删改查
|
||
"""
|
||
perms_map = {'get': '*', 'post': 'role_create',
|
||
'put': 'role_update', 'delete': 'role_delete'}
|
||
queryset = Role.objects.all()
|
||
serializer_class = RoleSerializer
|
||
pagination_class = None
|
||
search_fields = ['name']
|
||
ordering_fields = ['id']
|
||
ordering = 'id'
|
||
|
||
|
||
class UserViewSet(PageOrNot, ModelViewSet):
|
||
"""
|
||
用户管理：增删改查
|
||
"""
|
||
perms_map = {'get': '*', 'post': 'user_create',
|
||
'put': 'user_update', 'delete': 'user_delete'}
|
||
queryset = User.objects.all().order_by('-id')
|
||
serializer_class = UserListSerializer
|
||
filterset_class = UserFilter
|
||
search_fields = ['username', 'name', 'phone', 'email']
|
||
ordering_fields = ['-id']
|
||
|
||
def get_queryset(self):
|
||
queryset = self.queryset
|
||
if hasattr(self.get_serializer_class(), 'setup_eager_loading'):
|
||
queryset = self.get_serializer_class().setup_eager_loading(queryset) # 性能优化
|
||
dept = self.request.query_params.get('dept', None) # 该部门及其子部门所有员工
|
||
if dept is not None:
|
||
deptqueryset = get_child_queryset2(Organization.objects.get(pk=dept))
|
||
queryset = queryset.filter(dept__in=deptqueryset)
|
||
return queryset
|
||
|
||
def get_serializer_class(self):
|
||
# 根据请求类型动态变更serializer
|
||
if self.action == 'create':
|
||
return UserCreateSerializer
|
||
elif self.action == 'list':
|
||
return UserListSerializer
|
||
return UserModifySerializer
|
||
|
||
|
||
def create(self, request, *args, **kwargs):
|
||
# 创建用户默认添加密码
|
||
password = request.data['password'] if 'password' in request.data else None
|
||
if password:
|
||
password = make_password(password)
|
||
else:
|
||
password = make_password(''.join(random.sample(string.ascii_letters + string.digits, 8)))
|
||
serializer = self.get_serializer(data=request.data)
|
||
serializer.is_valid(raise_exception=True)
|
||
serializer.save(password=password)
|
||
return Response(serializer.data)
|
||
|
||
@action(methods=['put'], detail=False, permission_classes=[IsAuthenticated],
|
||
url_name='change_password')
|
||
def password(self, request, pk=None):
|
||
"""
|
||
用户修改密码
|
||
"""
|
||
user = request.user
|
||
old_password = request.data['old_password']
|
||
if check_password(old_password, user.password):
|
||
new_password1 = request.data['new_password1']
|
||
new_password2 = request.data['new_password2']
|
||
if new_password1 == new_password2:
|
||
user.set_password(new_password2)
|
||
user.save()
|
||
return Response('密码修改成功!', status=status.HTTP_200_OK)
|
||
else:
|
||
return Response('新密码两次输入不一致!', status=status.HTTP_400_BAD_REQUEST)
|
||
else:
|
||
return Response('旧密码错误!', status=status.HTTP_400_BAD_REQUEST)
|
||
|
||
# perms_map={'get':'*'}, 自定义action控权
|
||
@action(methods=['get'], detail=False, url_name='my_info', permission_classes=[IsAuthenticated])
|
||
def info(self, request, pk=None):
|
||
"""
|
||
初始化用户信息
|
||
"""
|
||
user = request.user
|
||
perms = get_permission_list(user)
|
||
data = {
|
||
'id': user.id,
|
||
'username': user.username,
|
||
'name': user.name,
|
||
'dept': user.dept.pk if user.dept else '',
|
||
'dept_name':user.dept.name if user.dept else '',
|
||
'roles': user.roles.all().values_list('name', flat=True),
|
||
# 'avatar': request._request._current_scheme_host + '/media/' + str(user.image),
|
||
'avatar': request._request._current_scheme_host + user.avatar,
|
||
'perms': perms,
|
||
}
|
||
try:
|
||
usert = UserThird.objects.get(user=user,type='wx_mp')
|
||
data['wxmp_openid'] = usert.openid
|
||
except:
|
||
pass
|
||
return Response(data)
|
||
|
||
@action(methods=['put'], detail=True, url_name='userpw_reset', permission_classes=[IsAuthenticated])
|
||
def resetpw(self, request, pk=None):
|
||
"""
|
||
重置密码
|
||
"""
|
||
if request.user.is_superuser:
|
||
user = self.get_object()
|
||
user.set_password('0000')
|
||
user.save()
|
||
return Response('密码已重置为0000', status=status.HTTP_200_OK)
|
||
return Response('权限不足', status=status.HTTP_400_BAD_REQUEST)
|
||
|
||
@action(methods=['post'], detail=False, permission_classes=[IsAuthenticated])
|
||
def bindwxmp(self, request, pk=None):
|
||
"""
|
||
绑定微信
|
||
"""
|
||
code = request.data['code']
|
||
info = requests.get('https://api.weixin.qq.com/sns/jscode2session?appid='+settings.WX_APPID+'&secret='+settings.WX_APPSECRET+'&js_code=' +
|
||
code+'&grant_type=authorization_code').content.decode('utf-8')
|
||
info = json.loads(info)
|
||
openid = info['openid']
|
||
instances = UserThird.objects.filter(openid=openid)
|
||
if instances.exists():
|
||
instance = instances[0]
|
||
instance.user = request.user
|
||
instance.save()
|
||
else:
|
||
UserThird.objects.get_or_create(openid=openid, type='wx_mp', user=request.user, defaults={'openid':openid, 'user':request.user, 'type':'wx_mp'})
|
||
return Response({'wxmp_openid':openid},status=status.HTTP_200_OK)
|
||
|
||
@action(methods=['post'], detail=False, permission_classes=[IsAuthenticated])
|
||
def unbindwxmp(self, request, pk=None):
|
||
"""
|
||
解除微信绑定
|
||
"""
|
||
UserThird.objects.filter(user=request.user, type='wx_mp').delete()
|
||
return Response()
|
||
|
||
@action(methods=['post'], detail=False, perms_map={'post':'user_daoru'})
|
||
@transaction.atomic
|
||
def daoru(self, request, pk=None):
|
||
from openpyxl import load_workbook
|
||
wb = load_workbook('./media/default/users.xlsx')
|
||
sheet = wb.get_sheet_by_name('Sheet2')
|
||
i = 3
|
||
role1 = Role.objects.get(name='能力查询')
|
||
role2 = Role.objects.get(name='资质能力报送')
|
||
role3 = Role.objects.get(name='资料分享')
|
||
role4 = Role.objects.get(name='视频培训')
|
||
while sheet['b'+str(i)].value:
|
||
name = sheet['b'+str(i)].value
|
||
email = sheet['e'+str(i)].value
|
||
if not User.objects.filter(username=email).exists():
|
||
user = User.objects.create(name=name,
|
||
username=email,
|
||
password=make_password(''.join(random.sample(string.ascii_letters + string.digits, 8))),
|
||
dept=dept)
|
||
else:
|
||
user = User.objects.get(username=email)
|
||
dept = Organization.objects.get(name=sheet['j'+str(i)].value)
|
||
if sheet['f'+str(i)].value:
|
||
user.roles.add(role1)
|
||
if sheet['g'+str(i)].value:
|
||
user.roles.add(role2)
|
||
if sheet['h'+str(i)].value:
|
||
user.roles.add(role3)
|
||
if sheet['i'+str(i)].value:
|
||
user.roles.add(role4)
|
||
print(str(i)+name+'已导入')
|
||
i = i + 1
|
||
return Response()
|
||
|
||
|
||
|
||
|
||
|
||
class WXMPlogin(APIView):
|
||
authentication_classes=[]
|
||
permission_classes=[]
|
||
|
||
def post(self,request):
|
||
"""
|
||
微信登录
|
||
"""
|
||
code = request.data['code']
|
||
info = requests.get('https://api.weixin.qq.com/sns/jscode2session?appid='+settings.WX_APPID+'&secret='+settings.WX_APPSECRET+'&js_code=' +
|
||
code+'&grant_type=authorization_code').content.decode('utf-8')
|
||
info = json.loads(info)
|
||
openid = info.get('openid', None)
|
||
if not openid:
|
||
Response('微信id获取失败', status=status.HTTP_400_BAD_REQUEST)
|
||
session_key = info['session_key']
|
||
try:
|
||
user = UserThird.objects.get(openid=openid,type='wx_mp').user
|
||
return Response(get_tokens_for_user(user), status=status.HTTP_200_OK)
|
||
except:
|
||
raise AuthenticationFailed
|
||
|
||
|
||
|
||
class ProviceViewSet(PageOrNot, ListModelMixin, GenericViewSet):
|
||
queryset = Province.objects.all()
|
||
serializer_class = ProvinceSerializer
|
||
search_fields = ['name']
|
||
ordering = 'id'
|
||
|
||
@method_decorator(cache_page(60*60*2))
|
||
def list(self, request, *args, **kwargs):
|
||
return super().list(request, *args, **kwargs)
|
||
|
||
|
||
class CityViewSet(PageOrNot, ListModelMixin, GenericViewSet):
|
||
queryset = City.objects.all()
|
||
serializer_class = CitySerializer
|
||
filterset_fields = ['parent']
|
||
search_fields = ['name']
|
||
ordeing = 'id'
|
||
|
||
@method_decorator(cache_page(60*60*2))
|
||
def list(self, request, *args, **kwargs):
|
||
return super().list(request, *args, **kwargs)
|
||
|
||
class FileViewSet(ModelViewSet):
|
||
"""
|
||
文件：增删改查
|
||
"""
|
||
perms_map = None
|
||
permission_classes=[IsAuthenticated]
|
||
parser_classes = [MultiPartParser, JSONParser]
|
||
queryset = File.objects.all()
|
||
serializer_class = FileSerializer
|
||
filterset_fields = ['type']
|
||
search_fields = ['name']
|
||
ordering = '-create_time'
|
||
|
||
def perform_create(self, serializer):
|
||
fileobj = self.request.data.get('file')
|
||
name = fileobj._name
|
||
size = fileobj.size
|
||
mime = fileobj.content_type
|
||
type = '其它'
|
||
if 'image' in mime:
|
||
type = '图片'
|
||
elif 'video' in mime:
|
||
type = '视频'
|
||
elif 'audio' in mime:
|
||
type = '音频'
|
||
elif 'application' or 'text' in mime:
|
||
type = '文档'
|
||
instance = serializer.save(create_by = self.request.user, name=name, size=size, type=type, mime=mime)
|
||
instance.path = settings.MEDIA_URL + instance.file.name
|
||
instance.save()
|
||
|
||
|
||
from rest_framework_simplejwt.state import token_backend
|
||
from django.http import HttpResponseForbidden, HttpResponse
|
||
import urllib.parse as urlparse
|
||
|
||
def mediaauth(request):
|
||
token = ""
|
||
token = request.COOKIES.get('token', None)
|
||
if not token:
|
||
try:
|
||
token = request.META.get("HTTP_OURL", None).split('=')[-1]
|
||
except:
|
||
pass
|
||
if token:
|
||
try:
|
||
payload = token_backend.decode(token)
|
||
if payload.get('user_id', None):
|
||
return HttpResponse()
|
||
except:
|
||
return HttpResponseForbidden()
|
||
return HttpResponseForbidden()
|
||
|
||
|
||
class InitAreaView(APIView):
|
||
def get(self, request):
|
||
from django.db import transaction
|
||
with transaction.atomic():
|
||
from apps.system.pcity import ps, cs
|
||
for i in ps:
|
||
Province.objects.create(id=i['code'], name=i['name'])
|
||
for i in cs:
|
||
City.objects.create(id=i['code'], name=i['name'], parent=Province.objects.get(id=i['provinceCode']))
|
||
return Response()
|
||
|
||
|