fork from bc4552c5a8
This commit is contained in:
731
server/controllers/user.js
Normal file
731
server/controllers/user.js
Normal file
@@ -0,0 +1,731 @@
|
||||
const userModel = require('../models/user.js');
|
||||
const yapi = require('../yapi.js');
|
||||
const baseController = require('./base.js');
|
||||
const common = require('../utils/commons.js');
|
||||
const ldap = require('../utils/ldap.js');
|
||||
|
||||
const interfaceModel = require('../models/interface.js');
|
||||
const groupModel = require('../models/group.js');
|
||||
const projectModel = require('../models/project.js');
|
||||
const avatarModel = require('../models/avatar.js');
|
||||
|
||||
const jwt = require('jsonwebtoken');
|
||||
|
||||
class userController extends baseController {
|
||||
constructor(ctx) {
|
||||
super(ctx);
|
||||
this.Model = yapi.getInst(userModel);
|
||||
}
|
||||
/**
|
||||
* 用户登录接口
|
||||
* @interface /user/login
|
||||
* @method POST
|
||||
* @category user
|
||||
* @foldnumber 10
|
||||
* @param {String} email email名称，不能为空
|
||||
* @param {String} password 密码，不能为空
|
||||
* @returns {Object}
|
||||
* @example ./api/user/login.json
|
||||
*/
|
||||
async login(ctx) {
|
||||
//登录
|
||||
let userInst = yapi.getInst(userModel); //创建user实体
|
||||
let email = ctx.request.body.email;
|
||||
email = (email || '').trim();
|
||||
let password = ctx.request.body.password;
|
||||
|
||||
if (!email) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 400, 'email不能为空'));
|
||||
}
|
||||
if (!password) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 400, '密码不能为空'));
|
||||
}
|
||||
|
||||
let result = await userInst.findByEmail(email);
|
||||
|
||||
if (!result) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 404, '该用户不存在'));
|
||||
} else if (yapi.commons.generatePassword(password, result.passsalt) === result.password) {
|
||||
this.setLoginCookie(result._id, result.passsalt);
|
||||
|
||||
return (ctx.body = yapi.commons.resReturn(
|
||||
{
|
||||
username: result.username,
|
||||
role: result.role,
|
||||
uid: result._id,
|
||||
email: result.email,
|
||||
add_time: result.add_time,
|
||||
up_time: result.up_time,
|
||||
type: 'site',
|
||||
study: result.study
|
||||
},
|
||||
0,
|
||||
'logout success...'
|
||||
));
|
||||
} else {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 405, '密码错误'));
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 退出登录接口
|
||||
* @interface /user/logout
|
||||
* @method GET
|
||||
* @category user
|
||||
* @foldnumber 10
|
||||
* @returns {Object}
|
||||
* @example ./api/user/logout.json
|
||||
*/
|
||||
|
||||
async logout(ctx) {
|
||||
ctx.cookies.set('_yapi_token', null);
|
||||
ctx.cookies.set('_yapi_uid', null);
|
||||
ctx.body = yapi.commons.resReturn('ok');
|
||||
}
|
||||
|
||||
/**
|
||||
* 更新
|
||||
* @interface /user/up_study
|
||||
* @method GET
|
||||
* @category user
|
||||
* @foldnumber 10
|
||||
* @returns {Object}
|
||||
* @example
|
||||
*/
|
||||
|
||||
async upStudy(ctx) {
|
||||
let userInst = yapi.getInst(userModel); //创建user实体
|
||||
let data = {
|
||||
up_time: yapi.commons.time(),
|
||||
study: true
|
||||
};
|
||||
try {
|
||||
let result = await userInst.update(this.getUid(), data);
|
||||
ctx.body = yapi.commons.resReturn(result);
|
||||
} catch (e) {
|
||||
ctx.body = yapi.commons.resReturn(null, 401, e.message);
|
||||
}
|
||||
}
|
||||
|
||||
async loginByToken(ctx) {
|
||||
try {
|
||||
let ret = await yapi.emitHook('third_login', ctx);
|
||||
let login = await this.handleThirdLogin(ret.email, ret.username);
|
||||
if (login === true) {
|
||||
yapi.commons.log('login success');
|
||||
ctx.redirect('/group');
|
||||
}
|
||||
} catch (e) {
|
||||
yapi.commons.log(e.message, 'error');
|
||||
ctx.redirect('/');
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* ldap登录
|
||||
* @interface /user/login_by_ldap
|
||||
* @method
|
||||
* @category user
|
||||
* @foldnumber 10
|
||||
* @param {String} email email名称，不能为空
|
||||
* @param {String} password 密码，不能为空
|
||||
* @returns {Object}
|
||||
*
|
||||
*/
|
||||
async getLdapAuth(ctx) {
|
||||
try {
|
||||
const { email, password } = ctx.request.body;
|
||||
// const username = email.split(/\@/g)[0];
|
||||
const { info: ldapInfo } = await ldap.ldapQuery(email, password);
|
||||
const emailPrefix = email.split(/\@/g)[0];
|
||||
const emailPostfix = yapi.WEBCONFIG.ldapLogin.emailPostfix;
|
||||
|
||||
const emailParams =
|
||||
ldapInfo[yapi.WEBCONFIG.ldapLogin.emailKey || 'mail'] ||
|
||||
(emailPostfix ? emailPrefix + emailPostfix : email);
|
||||
const username = ldapInfo[yapi.WEBCONFIG.ldapLogin.usernameKey] || emailPrefix;
|
||||
|
||||
let login = await this.handleThirdLogin(emailParams, username);
|
||||
|
||||
if (login === true) {
|
||||
let userInst = yapi.getInst(userModel); //创建user实体
|
||||
let result = await userInst.findByEmail(emailParams);
|
||||
return (ctx.body = yapi.commons.resReturn(
|
||||
{
|
||||
username: result.username,
|
||||
role: result.role,
|
||||
uid: result._id,
|
||||
email: result.email,
|
||||
add_time: result.add_time,
|
||||
up_time: result.up_time,
|
||||
type: result.type || 'third',
|
||||
study: result.study
|
||||
},
|
||||
0,
|
||||
'logout success...'
|
||||
));
|
||||
}
|
||||
} catch (e) {
|
||||
yapi.commons.log(e.message, 'error');
|
||||
return (ctx.body = yapi.commons.resReturn(null, 401, e.message));
|
||||
}
|
||||
}
|
||||
|
||||
// 处理第三方登录
|
||||
async handleThirdLogin(email, username) {
|
||||
let user, data, passsalt;
|
||||
let userInst = yapi.getInst(userModel);
|
||||
|
||||
try {
|
||||
user = await userInst.findByEmail(email);
|
||||
|
||||
// 新建用户信息
|
||||
if (!user || !user._id) {
|
||||
passsalt = yapi.commons.randStr();
|
||||
data = {
|
||||
username: username,
|
||||
password: yapi.commons.generatePassword(passsalt, passsalt),
|
||||
email: email,
|
||||
passsalt: passsalt,
|
||||
role: 'member',
|
||||
add_time: yapi.commons.time(),
|
||||
up_time: yapi.commons.time(),
|
||||
type: 'third'
|
||||
};
|
||||
user = await userInst.save(data);
|
||||
await this.handlePrivateGroup(user._id, username, email);
|
||||
yapi.commons.sendMail({
|
||||
to: email,
|
||||
contents: `<h3>亲爱的用户：</h3><p>您好，感谢使用YApi平台，你的邮箱账号是：${email}</p>`
|
||||
});
|
||||
}
|
||||
|
||||
this.setLoginCookie(user._id, user.passsalt);
|
||||
return true;
|
||||
} catch (e) {
|
||||
console.error('third_login:', e.message); // eslint-disable-line
|
||||
throw new Error(`third_login: ${e.message}`);
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 修改用户密码
|
||||
* @interface /user/change_password
|
||||
* @method POST
|
||||
* @category user
|
||||
* @param {Number} uid 用户ID
|
||||
* @param {Number} [old_password] 旧密码, 非admin用户必须传
|
||||
* @param {Number} password 新密码
|
||||
* @return {Object}
|
||||
* @example ./api/user/change_password.json
|
||||
*/
|
||||
async changePassword(ctx) {
|
||||
let params = ctx.request.body;
|
||||
let userInst = yapi.getInst(userModel);
|
||||
|
||||
if (!params.uid) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 400, 'uid不能为空'));
|
||||
}
|
||||
|
||||
if (!params.password) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 400, '密码不能为空'));
|
||||
}
|
||||
|
||||
let user = await userInst.findById(params.uid);
|
||||
if (this.getRole() !== 'admin' && params.uid != this.getUid()) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 402, '没有权限'));
|
||||
}
|
||||
|
||||
if (this.getRole() !== 'admin' || user.role === 'admin') {
|
||||
if (!params.old_password) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 400, '旧密码不能为空'));
|
||||
}
|
||||
|
||||
if (yapi.commons.generatePassword(params.old_password, user.passsalt) !== user.password) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 402, '旧密码错误'));
|
||||
}
|
||||
}
|
||||
|
||||
let passsalt = yapi.commons.randStr();
|
||||
let data = {
|
||||
up_time: yapi.commons.time(),
|
||||
password: yapi.commons.generatePassword(params.password, passsalt),
|
||||
passsalt: passsalt
|
||||
};
|
||||
try {
|
||||
let result = await userInst.update(params.uid, data);
|
||||
ctx.body = yapi.commons.resReturn(result);
|
||||
} catch (e) {
|
||||
ctx.body = yapi.commons.resReturn(null, 401, e.message);
|
||||
}
|
||||
}
|
||||
|
||||
async handlePrivateGroup(uid) {
|
||||
var groupInst = yapi.getInst(groupModel);
|
||||
await groupInst.save({
|
||||
uid: uid,
|
||||
group_name: 'User-' + uid,
|
||||
add_time: yapi.commons.time(),
|
||||
up_time: yapi.commons.time(),
|
||||
type: 'private'
|
||||
});
|
||||
}
|
||||
|
||||
setLoginCookie(uid, passsalt) {
|
||||
let token = jwt.sign({ uid: uid }, passsalt, { expiresIn: '7 days' });
|
||||
|
||||
this.ctx.cookies.set('_yapi_token', token, {
|
||||
expires: yapi.commons.expireDate(7),
|
||||
httpOnly: true
|
||||
});
|
||||
this.ctx.cookies.set('_yapi_uid', uid, {
|
||||
expires: yapi.commons.expireDate(7),
|
||||
httpOnly: true
|
||||
});
|
||||
}
|
||||
|
||||
/**
|
||||
* 用户注册接口
|
||||
* @interface /user/reg
|
||||
* @method POST
|
||||
* @category user
|
||||
* @foldnumber 10
|
||||
* @param {String} email email名称，不能为空
|
||||
* @param {String} password 密码，不能为空
|
||||
* @param {String} [username] 用户名
|
||||
* @returns {Object}
|
||||
* @example ./api/user/login.json
|
||||
*/
|
||||
async reg(ctx) {
|
||||
//注册
|
||||
if (yapi.WEBCONFIG.closeRegister) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 400, '禁止注册，请联系管理员'));
|
||||
}
|
||||
let userInst = yapi.getInst(userModel);
|
||||
let params = ctx.request.body; //获取请求的参数,检查是否存在用户名和密码
|
||||
|
||||
params = yapi.commons.handleParams(params, {
|
||||
username: 'string',
|
||||
password: 'string',
|
||||
email: 'string'
|
||||
});
|
||||
|
||||
if (!params.email) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 400, '邮箱不能为空'));
|
||||
}
|
||||
|
||||
if (!params.password) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 400, '密码不能为空'));
|
||||
}
|
||||
|
||||
let checkRepeat = await userInst.checkRepeat(params.email); //然后检查是否已经存在该用户
|
||||
|
||||
if (checkRepeat > 0) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 401, '该email已经注册'));
|
||||
}
|
||||
|
||||
let passsalt = yapi.commons.randStr();
|
||||
let data = {
|
||||
username: params.username,
|
||||
password: yapi.commons.generatePassword(params.password, passsalt), //加密
|
||||
email: params.email,
|
||||
passsalt: passsalt,
|
||||
role: 'member',
|
||||
add_time: yapi.commons.time(),
|
||||
up_time: yapi.commons.time(),
|
||||
type: 'site'
|
||||
};
|
||||
|
||||
if (!data.username) {
|
||||
data.username = data.email.substr(0, data.email.indexOf('@'));
|
||||
}
|
||||
|
||||
try {
|
||||
let user = await userInst.save(data);
|
||||
|
||||
this.setLoginCookie(user._id, user.passsalt);
|
||||
await this.handlePrivateGroup(user._id, user.username, user.email);
|
||||
ctx.body = yapi.commons.resReturn({
|
||||
uid: user._id,
|
||||
email: user.email,
|
||||
username: user.username,
|
||||
add_time: user.add_time,
|
||||
up_time: user.up_time,
|
||||
role: 'member',
|
||||
type: user.type,
|
||||
study: false
|
||||
});
|
||||
yapi.commons.sendMail({
|
||||
to: user.email,
|
||||
contents: `<h3>亲爱的用户：</h3><p>您好，感谢使用YApi可视化接口平台,您的账号 ${
|
||||
params.email
|
||||
} 已经注册成功</p>`
|
||||
});
|
||||
} catch (e) {
|
||||
ctx.body = yapi.commons.resReturn(null, 401, e.message);
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 获取用户列表
|
||||
* @interface /user/list
|
||||
* @method GET
|
||||
* @category user
|
||||
* @foldnumber 10
|
||||
* @param {Number} [page] 分页页码
|
||||
* @param {Number} [limit] 分页大小,默认为10条
|
||||
* @returns {Object}
|
||||
* @example
|
||||
*/
|
||||
async list(ctx) {
|
||||
let page = ctx.request.query.page || 1,
|
||||
limit = ctx.request.query.limit || 10;
|
||||
|
||||
const userInst = yapi.getInst(userModel);
|
||||
try {
|
||||
let user = await userInst.listWithPaging(page, limit);
|
||||
let count = await userInst.listCount();
|
||||
return (ctx.body = yapi.commons.resReturn({
|
||||
count: count,
|
||||
total: Math.ceil(count / limit),
|
||||
list: user
|
||||
}));
|
||||
} catch (e) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 402, e.message));
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 获取用户个人信息
|
||||
* @interface /user/find
|
||||
* @method GET
|
||||
* @param id 用户uid
|
||||
* @category user
|
||||
* @foldnumber 10
|
||||
* @returns {Object}
|
||||
* @example
|
||||
*/
|
||||
async findById(ctx) {
|
||||
//根据id获取用户信息
|
||||
try {
|
||||
let userInst = yapi.getInst(userModel);
|
||||
let id = ctx.request.query.id;
|
||||
|
||||
if (this.getRole() !== 'admin' && id != this.getUid()) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 401, '没有权限'));
|
||||
}
|
||||
|
||||
if (!id) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 400, 'uid不能为空'));
|
||||
}
|
||||
|
||||
let result = await userInst.findById(id);
|
||||
|
||||
if (!result) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 402, '不存在的用户'));
|
||||
}
|
||||
|
||||
return (ctx.body = yapi.commons.resReturn({
|
||||
uid: result._id,
|
||||
username: result.username,
|
||||
email: result.email,
|
||||
role: result.role,
|
||||
type: result.type,
|
||||
add_time: result.add_time,
|
||||
up_time: result.up_time
|
||||
}));
|
||||
} catch (e) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 402, e.message));
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 删除用户,只有admin用户才有此权限
|
||||
* @interface /user/del
|
||||
* @method POST
|
||||
* @param id 用户uid
|
||||
* @category user
|
||||
* @foldnumber 10
|
||||
* @returns {Object}
|
||||
* @example
|
||||
*/
|
||||
async del(ctx) {
|
||||
//根据id删除一个用户
|
||||
try {
|
||||
if (this.getRole() !== 'admin') {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 402, 'Without permission.'));
|
||||
}
|
||||
|
||||
let userInst = yapi.getInst(userModel);
|
||||
let id = ctx.request.body.id;
|
||||
if (id == this.getUid()) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 403, '禁止删除管理员'));
|
||||
}
|
||||
if (!id) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 400, 'uid不能为空'));
|
||||
}
|
||||
|
||||
let result = await userInst.del(id);
|
||||
|
||||
ctx.body = yapi.commons.resReturn(result);
|
||||
} catch (e) {
|
||||
ctx.body = yapi.commons.resReturn(null, 402, e.message);
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 更新用户个人信息
|
||||
* @interface /user/update
|
||||
* @method POST
|
||||
* @param uid 用户uid
|
||||
* @param [role] 用户角色,只有管理员有权限修改
|
||||
* @param [username] String
|
||||
* @param [email] String
|
||||
* @category user
|
||||
* @foldnumber 10
|
||||
* @returns {Object}
|
||||
* @example
|
||||
*/
|
||||
async update(ctx) {
|
||||
//更新用户信息
|
||||
try {
|
||||
let params = ctx.request.body;
|
||||
|
||||
params = yapi.commons.handleParams(params, {
|
||||
username: 'string',
|
||||
email: 'string'
|
||||
});
|
||||
|
||||
if (this.getRole() !== 'admin' && params.uid != this.getUid()) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 401, '没有权限'));
|
||||
}
|
||||
|
||||
let userInst = yapi.getInst(userModel);
|
||||
let id = params.uid;
|
||||
|
||||
if (!id) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 400, 'uid不能为空'));
|
||||
}
|
||||
|
||||
let userData = await userInst.findById(id);
|
||||
if (!userData) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 400, 'uid不存在'));
|
||||
}
|
||||
|
||||
let data = {
|
||||
up_time: yapi.commons.time()
|
||||
};
|
||||
|
||||
params.username && (data.username = params.username);
|
||||
params.email && (data.email = params.email);
|
||||
|
||||
if (data.email) {
|
||||
var checkRepeat = await userInst.checkRepeat(data.email); //然后检查是否已经存在该用户
|
||||
if (checkRepeat > 0) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 401, '该email已经注册'));
|
||||
}
|
||||
}
|
||||
|
||||
let member = {
|
||||
uid: id,
|
||||
username: data.username || userData.username,
|
||||
email: data.email || userData.email
|
||||
};
|
||||
let groupInst = yapi.getInst(groupModel);
|
||||
await groupInst.updateMember(member);
|
||||
let projectInst = yapi.getInst(projectModel);
|
||||
await projectInst.updateMember(member);
|
||||
|
||||
let result = await userInst.update(id, data);
|
||||
ctx.body = yapi.commons.resReturn(result);
|
||||
} catch (e) {
|
||||
ctx.body = yapi.commons.resReturn(null, 402, e.message);
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 上传用户头像
|
||||
* @interface /user/upload_avatar
|
||||
* @method POST
|
||||
* @param {*} basecode base64编码，通过h5 api传给后端
|
||||
* @category user
|
||||
* @returns {Object}
|
||||
* @example
|
||||
*/
|
||||
|
||||
async uploadAvatar(ctx) {
|
||||
try {
|
||||
let basecode = ctx.request.body.basecode;
|
||||
if (!basecode) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 400, 'basecode不能为空'));
|
||||
}
|
||||
let pngPrefix = 'data:image/png;base64,';
|
||||
let jpegPrefix = 'data:image/jpeg;base64,';
|
||||
let type;
|
||||
if (basecode.substr(0, pngPrefix.length) === pngPrefix) {
|
||||
basecode = basecode.substr(pngPrefix.length);
|
||||
type = 'image/png';
|
||||
} else if (basecode.substr(0, jpegPrefix.length) === jpegPrefix) {
|
||||
basecode = basecode.substr(jpegPrefix.length);
|
||||
type = 'image/jpeg';
|
||||
} else {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 400, '仅支持jpeg和png格式的图片'));
|
||||
}
|
||||
let strLength = basecode.length;
|
||||
if (parseInt(strLength - (strLength / 8) * 2) > 200000) {
|
||||
return (ctx.body = yapi.commons.resReturn(null, 400, '图片大小不能超过200kb'));
|
||||
}
|
||||
|
||||
let avatarInst = yapi.getInst(avatarModel);
|
||||
let result = await avatarInst.up(this.getUid(), basecode, type);
|
||||
ctx.body = yapi.commons.resReturn(result);
|
||||
} catch (e) {
|
||||
ctx.body = yapi.commons.resReturn(null, 401, e.message);
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 根据用户uid头像
|
||||
* @interface /user/avatar
|
||||
* @method GET
|
||||
* @param {*} uid
|
||||
* @category user
|
||||
* @returns {Object}
|
||||
* @example
|
||||
*/
|
||||
|
||||
async avatar(ctx) {
|
||||
try {
|
||||
let uid = ctx.query.uid ? ctx.query.uid : this.getUid();
|
||||
let avatarInst = yapi.getInst(avatarModel);
|
||||
let data = await avatarInst.get(uid);
|
||||
let dataBuffer, type;
|
||||
if (!data || !data.basecode) {
|
||||
dataBuffer = yapi.fs.readFileSync(yapi.path.join(yapi.WEBROOT, 'static/image/avatar.png'));
|
||||
type = 'image/png';
|
||||
} else {
|
||||
type = data.type;
|
||||
dataBuffer = new Buffer(data.basecode, 'base64');
|
||||
}
|
||||
|
||||
ctx.set('Content-type', type);
|
||||
ctx.body = dataBuffer;
|
||||
} catch (err) {
|
||||
ctx.body = 'error:' + err.message;
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 模糊搜索用户名或者email
|
||||
* @interface /user/search
|
||||
* @method GET
|
||||
* @category user
|
||||
* @foldnumber 10
|
||||
* @param {String} q
|
||||
* @return {Object}
|
||||
* @example ./api/user/search.json
|
||||
*/
|
||||
async search(ctx) {
|
||||
const { q } = ctx.request.query;
|
||||
|
||||
if (!q) {
|
||||
return (ctx.body = yapi.commons.resReturn(void 0, 400, 'No keyword.'));
|
||||
}
|
||||
|
||||
if (!yapi.commons.validateSearchKeyword(q)) {
|
||||
return (ctx.body = yapi.commons.resReturn(void 0, 400, 'Bad query.'));
|
||||
}
|
||||
|
||||
let queryList = await this.Model.search(q);
|
||||
let rules = [
|
||||
{
|
||||
key: '_id',
|
||||
alias: 'uid'
|
||||
},
|
||||
'username',
|
||||
'email',
|
||||
'role',
|
||||
{
|
||||
key: 'add_time',
|
||||
alias: 'addTime'
|
||||
},
|
||||
{
|
||||
key: 'up_time',
|
||||
alias: 'upTime'
|
||||
}
|
||||
];
|
||||
|
||||
let filteredRes = common.filterRes(queryList, rules);
|
||||
|
||||
return (ctx.body = yapi.commons.resReturn(filteredRes, 0, 'ok'));
|
||||
}
|
||||
|
||||
/**
|
||||
* 根据路由id初始化项目数据
|
||||
* @interface /user/project
|
||||
* @method GET
|
||||
* @category user
|
||||
* @foldnumber 10
|
||||
* @param {String} type 可选group|interface|project
|
||||
* @param {Number} id
|
||||
* @return {Object}
|
||||
* @example
|
||||
*/
|
||||
async project(ctx) {
|
||||
let { id, type } = ctx.request.query;
|
||||
let result = {};
|
||||
try {
|
||||
if (type === 'interface') {
|
||||
let interfaceInst = yapi.getInst(interfaceModel);
|
||||
let interfaceData = await interfaceInst.get(id);
|
||||
result.interface = interfaceData;
|
||||
type = 'project';
|
||||
id = interfaceData.project_id;
|
||||
}
|
||||
|
||||
if (type === 'project') {
|
||||
let projectInst = yapi.getInst(projectModel);
|
||||
let projectData = await projectInst.get(id);
|
||||
result.project = projectData.toObject();
|
||||
let ownerAuth = await this.checkAuth(id, 'project', 'danger'),
|
||||
devAuth;
|
||||
if (ownerAuth) {
|
||||
result.project.role = 'owner';
|
||||
} else {
|
||||
devAuth = await this.checkAuth(id, 'project', 'site');
|
||||
if (devAuth) {
|
||||
result.project.role = 'dev';
|
||||
} else {
|
||||
result.project.role = 'member';
|
||||
}
|
||||
}
|
||||
type = 'group';
|
||||
id = projectData.group_id;
|
||||
}
|
||||
|
||||
if (type === 'group') {
|
||||
let groupInst = yapi.getInst(groupModel);
|
||||
let groupData = await groupInst.get(id);
|
||||
result.group = groupData.toObject();
|
||||
let ownerAuth = await this.checkAuth(id, 'group', 'danger'),
|
||||
devAuth;
|
||||
if (ownerAuth) {
|
||||
result.group.role = 'owner';
|
||||
} else {
|
||||
devAuth = await this.checkAuth(id, 'group', 'site');
|
||||
if (devAuth) {
|
||||
result.group.role = 'dev';
|
||||
} else {
|
||||
result.group.role = 'member';
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return (ctx.body = yapi.commons.resReturn(result));
|
||||
} catch (e) {
|
||||
return (ctx.body = yapi.commons.resReturn(result, 422, e.message));
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
module.exports = userController;
|
||||
Reference in New Issue
Block a user