wehub-resource-sync
183 lines
4.5 KiB
Python
183 lines
4.5 KiB
Python
# -*- coding: utf-8 -*-
|
|
"""
|
|
auth_service.py
|
|
"""
|
|
from __future__ import print_function, unicode_literals, absolute_import, division
|
|
|
|
from functools import wraps
|
|
|
|
from flask import g
|
|
|
|
from domain_admin.enums.role_enum import RoleEnum, ROLE_PERMISSION
|
|
from domain_admin.enums.status_enum import StatusEnum
|
|
from domain_admin.model.user_model import UserModel
|
|
from domain_admin.service import token_service, notify_service, async_task_service
|
|
from domain_admin.utils import bcrypt_util, cache_util, validate_util, secret_util
|
|
from domain_admin.utils.flask_ext.app_exception import AppException
|
|
|
|
|
|
def login(username, password):
|
|
"""
|
|
用户登录
|
|
:param username: 用户名
|
|
:param password: 明文密码
|
|
:return: string token
|
|
"""
|
|
if not username:
|
|
raise AppException('用户名不能为空')
|
|
|
|
if not password:
|
|
raise AppException('密码不能为空')
|
|
|
|
user_row = UserModel.select().where(
|
|
UserModel.username == username
|
|
).get_or_none()
|
|
|
|
if not user_row:
|
|
raise AppException('用户名或密码错误')
|
|
|
|
if not bcrypt_util.check_password(password, user_row.password):
|
|
raise AppException('用户名或密码错误')
|
|
|
|
if not user_row.status:
|
|
raise AppException('账号不可用')
|
|
|
|
return token_service.encode_token({
|
|
'user_id': user_row.id
|
|
})
|
|
|
|
|
|
def register(username, password, password_repeat):
|
|
"""
|
|
用户注册
|
|
:param username: 用户名
|
|
:param password: 明文密码
|
|
:param password_repeat: 重复密码
|
|
:return:
|
|
"""
|
|
user_row = UserModel.select().where(
|
|
UserModel.username == username
|
|
).get_or_none()
|
|
|
|
if user_row:
|
|
raise AppException('用户已存在')
|
|
|
|
if password != password_repeat:
|
|
raise AppException('密码不一致')
|
|
|
|
return UserModel.create(
|
|
username=username,
|
|
password=bcrypt_util.encode_password(password)
|
|
)
|
|
|
|
|
|
def permission(role=RoleEnum.ADMIN):
|
|
"""
|
|
权限控制
|
|
:param role:
|
|
:return:
|
|
"""
|
|
|
|
def outer_wrapper(func):
|
|
@wraps(func)
|
|
def wrapper(*args, **kwargs):
|
|
if role is None:
|
|
# 跳过权限校验
|
|
pass
|
|
else:
|
|
current_user_id = g.user_id
|
|
|
|
if not current_user_id:
|
|
raise AppException('用户未登录')
|
|
|
|
user_row = UserModel.get_by_id(current_user_id)
|
|
if not user_row:
|
|
raise AppException('用户不存在')
|
|
|
|
if user_row.status != StatusEnum.Enabled:
|
|
raise AppException('用户已禁用')
|
|
|
|
if not has_role_permission(current_role=user_row.role, need_permission=role):
|
|
raise AppException('暂无权限')
|
|
|
|
# 当前用户数据全局可用
|
|
g.current_user_row = user_row
|
|
|
|
# execute
|
|
ret = func(*args, **kwargs)
|
|
|
|
return ret
|
|
|
|
return wrapper
|
|
|
|
return outer_wrapper
|
|
|
|
|
|
def has_role_permission(current_role, need_permission):
|
|
"""
|
|
角色权限判断
|
|
:param current_role:
|
|
:param need_permission:
|
|
:return:
|
|
"""
|
|
if not need_permission:
|
|
return True
|
|
|
|
current_permission = []
|
|
|
|
for item in ROLE_PERMISSION:
|
|
if item['role'] == current_role:
|
|
current_permission = item['permission']
|
|
|
|
return need_permission in current_permission
|
|
|
|
|
|
@async_task_service.async_task_decorator("发送邮箱验证码")
|
|
def send_verify_code_async(email):
|
|
send_verify_code(email)
|
|
|
|
|
|
def send_verify_code(email):
|
|
if not validate_util.is_email(email):
|
|
raise AppException('邮箱格式不正确')
|
|
|
|
code = secret_util.get_random_password()
|
|
|
|
cache_util.set_value(key=email, value=code, expire=5 * 60)
|
|
|
|
notify_service.send_email_to_user(
|
|
template='code-email.html',
|
|
subject='验证码',
|
|
data={'code': code},
|
|
email_list=[email]
|
|
)
|
|
|
|
|
|
def login_by_email(email, code):
|
|
if not validate_util.is_email(email):
|
|
raise AppException('邮箱格式不正确')
|
|
|
|
if not code:
|
|
raise AppException('验证码不能为空')
|
|
|
|
cache_code = cache_util.get_value(email)
|
|
|
|
if cache_code and code == cache_code:
|
|
pass
|
|
else:
|
|
raise AppException('验证码不正确')
|
|
|
|
user_row = UserModel.select().where(
|
|
UserModel.username == email
|
|
).get_or_none()
|
|
|
|
if not user_row:
|
|
user_row = UserModel.create(
|
|
username=email,
|
|
password=''
|
|
)
|
|
|
|
return token_service.encode_token({
|
|
'user_id': user_row.id
|
|
})
|