feat: add tenant-aware IM management console
This commit is contained in:
richjohnrambo
@@ -0,0 +1,108 @@
|
||||
package sys
|
||||
|
||||
import (
|
||||
"context"
|
||||
"hotgo/internal/consts"
|
||||
"hotgo/internal/dao"
|
||||
"hotgo/internal/library/contexts"
|
||||
"hotgo/internal/library/imtenant"
|
||||
"hotgo/internal/model/entity"
|
||||
"hotgo/internal/service"
|
||||
"hotgo/utility/simple"
|
||||
|
||||
"github.com/gogf/gf/v2/encoding/gjson"
|
||||
"github.com/gogf/gf/v2/errors/gerror"
|
||||
"github.com/gogf/gf/v2/frame/g"
|
||||
"github.com/gogf/gf/v2/net/ghttp"
|
||||
"github.com/gogf/gf/v2/os/gctx"
|
||||
"github.com/gogf/gf/v2/os/gtime"
|
||||
)
|
||||
|
||||
type imAdminScope struct {
|
||||
TenantId int64
|
||||
OperatorId int64
|
||||
RoleKey string
|
||||
RequestId string
|
||||
}
|
||||
|
||||
const (
|
||||
imAdminOperationAuditTable = "im_admin_operation_audit"
|
||||
)
|
||||
|
||||
func resolveImAdminScope(ctx context.Context, selectedTenantId int64) (scope imAdminScope, err error) {
|
||||
return resolveImAdminScopeWithAll(ctx, selectedTenantId, false)
|
||||
}
|
||||
|
||||
func resolveImAdminScopeWithAll(ctx context.Context, selectedTenantId int64, allowAll bool) (scope imAdminScope, err error) {
|
||||
operatorId := contexts.GetUserId(ctx)
|
||||
scope.OperatorId = operatorId
|
||||
scope.RoleKey = contexts.GetRoleKey(ctx)
|
||||
scope.RequestId = gctx.CtxId(ctx)
|
||||
if service.AdminMember().VerifySuperId(ctx, operatorId) {
|
||||
if selectedTenantId <= 0 {
|
||||
if allowAll {
|
||||
return scope, nil
|
||||
}
|
||||
return scope, gerror.New("请选择IM租户")
|
||||
}
|
||||
if err = ensureImTenantActive(ctx, selectedTenantId); err != nil {
|
||||
return scope, err
|
||||
}
|
||||
scope.TenantId = selectedTenantId
|
||||
return scope, nil
|
||||
}
|
||||
|
||||
if contexts.GetDeptType(ctx) != consts.DeptTypeTenant {
|
||||
return scope, gerror.New("当前账号不是租户管理员，不能管理邀请码")
|
||||
}
|
||||
tenantId := contexts.GetTenantId(ctx)
|
||||
if tenantId <= 0 {
|
||||
return scope, gerror.New("当前管理员未关联租户")
|
||||
}
|
||||
if err = ensureImTenantActive(ctx, tenantId); err != nil {
|
||||
return scope, err
|
||||
}
|
||||
scope.TenantId = tenantId
|
||||
return scope, nil
|
||||
}
|
||||
|
||||
func ensureImTenantActive(ctx context.Context, tenantId int64) (err error) {
|
||||
var tenant *entity.ImTenant
|
||||
if err = imtenant.RegistryDB().Model(dao.ImTenant.Table()).Safe().Ctx(ctx).WherePri(tenantId).Scan(&tenant); err != nil {
|
||||
return gerror.Wrap(err, "获取IM租户失败")
|
||||
}
|
||||
if tenant == nil || tenant.Id <= 0 {
|
||||
return gerror.New("IM租户不存在")
|
||||
}
|
||||
if tenant.State != consts.ImTenantStateActive {
|
||||
return gerror.New("IM租户未启用")
|
||||
}
|
||||
return nil
|
||||
}
|
||||
|
||||
func writeImAdminAudit(ctx context.Context, tenantId int64, action string, targetType string, targetId int64, result string, detail g.Map) error {
|
||||
operatorId := contexts.GetUserId(ctx)
|
||||
request := ghttp.RequestFromCtx(ctx)
|
||||
ip := ""
|
||||
if request != nil {
|
||||
ip = request.GetClientIp()
|
||||
}
|
||||
detailJson := gjson.New(detail)
|
||||
_, err := g.DB().Exec(ctx,
|
||||
"INSERT INTO "+imAdminOperationAuditTable+" (request_id, tenant_id, operator_id, action, target_type, target_id, result, ip, detail_json, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, CAST(? AS JSON), ?)",
|
||||
gctx.CtxId(ctx),
|
||||
tenantId,
|
||||
operatorId,
|
||||
action,
|
||||
targetType,
|
||||
targetId,
|
||||
result,
|
||||
ip,
|
||||
detailJson.String(),
|
||||
gtime.Now(),
|
||||
)
|
||||
if err != nil && !simple.IsDemo(ctx) {
|
||||
g.Log().Warningf(ctx, "写入IM后台审计失败 action:%s err:%+v", action, err)
|
||||
}
|
||||
return err
|
||||
}
|
||||
@@ -0,0 +1,125 @@
|
||||
// Package sys
|
||||
// @Link https://github.com/bufanyun/hotgo
|
||||
// @Copyright Copyright (c) 2026 HotGo
|
||||
// @Author Ms <133814250@qq.com>
|
||||
// @License https://github.com/bufanyun/hotgo/blob/master/LICENSE
|
||||
package sys
|
||||
|
||||
import (
|
||||
"context"
|
||||
"hotgo/internal/library/imtenant"
|
||||
"hotgo/internal/model/input/sysin"
|
||||
"hotgo/internal/service"
|
||||
|
||||
"github.com/gogf/gf/v2/database/gdb"
|
||||
"github.com/gogf/gf/v2/errors/gerror"
|
||||
)
|
||||
|
||||
type sSysImAuditLog struct{}
|
||||
|
||||
func NewSysImAuditLog() *sSysImAuditLog {
|
||||
return &sSysImAuditLog{}
|
||||
}
|
||||
|
||||
func init() {
|
||||
service.RegisterSysImAuditLog(NewSysImAuditLog())
|
||||
}
|
||||
|
||||
// List 获取IM审计日志列表
|
||||
func (s *sSysImAuditLog) List(ctx context.Context, in *sysin.ImAuditLogListInp) (list []*sysin.ImAuditLogListModel, totalCount int, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
db, tenant, err := imtenant.DB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
mod := s.model(ctx, db)
|
||||
mod = s.applyWhere(mod, in)
|
||||
mod = mod.Page(in.Page, in.PerPage).OrderDesc("id")
|
||||
|
||||
if err = mod.ScanAndCount(&list, &totalCount, false); err != nil {
|
||||
err = gerror.Wrap(err, "获取IM审计日志列表失败，请稍后重试！")
|
||||
return
|
||||
}
|
||||
for _, item := range list {
|
||||
item.TenantId = tenant.Id
|
||||
item.TenantName = tenant.Name
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
func (s *sSysImAuditLog) model(ctx context.Context, db gdb.DB) *gdb.Model {
|
||||
return db.Model("im_audit_logs").Safe().Ctx(ctx).
|
||||
Fields(
|
||||
"id",
|
||||
"actor_uid",
|
||||
"actor_role",
|
||||
"action",
|
||||
"target_type",
|
||||
"target_id",
|
||||
"reason",
|
||||
"request_id",
|
||||
"ip",
|
||||
"user_agent",
|
||||
"CAST(before_snapshot AS CHAR) before_snapshot",
|
||||
"CAST(after_snapshot AS CHAR) after_snapshot",
|
||||
"CAST(metadata AS CHAR) metadata",
|
||||
"created_at",
|
||||
)
|
||||
}
|
||||
|
||||
func (s *sSysImAuditLog) applyWhere(mod *gdb.Model, in *sysin.ImAuditLogListInp) *gdb.Model {
|
||||
if in.ActorUid > 0 {
|
||||
mod = mod.Where("actor_uid", in.ActorUid)
|
||||
}
|
||||
if in.ActorRole != "" {
|
||||
mod = mod.WhereLike("actor_role", "%"+in.ActorRole+"%")
|
||||
}
|
||||
if in.Action != "" {
|
||||
mod = mod.WhereLike("action", "%"+in.Action+"%")
|
||||
}
|
||||
if in.TargetType != "" {
|
||||
mod = mod.Where("target_type", in.TargetType)
|
||||
}
|
||||
if in.TargetId != "" {
|
||||
mod = mod.WhereLike("target_id", "%"+in.TargetId+"%")
|
||||
}
|
||||
if in.RequestId != "" {
|
||||
mod = mod.WhereLike("request_id", "%"+in.RequestId+"%")
|
||||
}
|
||||
if in.Ip != "" {
|
||||
mod = mod.WhereLike("ip", "%"+in.Ip+"%")
|
||||
}
|
||||
if in.Keyword != "" {
|
||||
like := "%" + in.Keyword + "%"
|
||||
mod = mod.Where("(action LIKE ? OR target_type LIKE ? OR target_id LIKE ? OR reason LIKE ? OR request_id LIKE ?)", like, like, like, like, like)
|
||||
}
|
||||
if len(in.CreatedAt) == 2 {
|
||||
mod = mod.WhereBetween("created_at", in.CreatedAt[0], in.CreatedAt[1])
|
||||
}
|
||||
return mod
|
||||
}
|
||||
|
||||
// View 获取IM审计日志指定信息
|
||||
func (s *sSysImAuditLog) View(ctx context.Context, in *sysin.ImAuditLogViewInp) (res *sysin.ImAuditLogViewModel, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
db, tenant, err := imtenant.DB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
err = s.model(ctx, db).Where("id", in.Id).Scan(&res)
|
||||
if err != nil {
|
||||
return nil, gerror.Wrap(err, "获取IM审计日志信息失败，请稍后重试！")
|
||||
}
|
||||
if res == nil {
|
||||
return nil, nil
|
||||
}
|
||||
res.TenantId = tenant.Id
|
||||
res.TenantName = tenant.Name
|
||||
return
|
||||
}
|
||||
@@ -0,0 +1,456 @@
|
||||
// Package sys
|
||||
// @Link https://github.com/bufanyun/hotgo
|
||||
// @Copyright Copyright (c) 2026 HotGo
|
||||
// @Author Ms <133814250@qq.com>
|
||||
// @License https://github.com/bufanyun/hotgo/blob/master/LICENSE
|
||||
package sys
|
||||
|
||||
import (
|
||||
"context"
|
||||
"hotgo/internal/library/imtenant"
|
||||
"hotgo/internal/model/input/sysin"
|
||||
"hotgo/internal/service"
|
||||
|
||||
"github.com/gogf/gf/v2/database/gdb"
|
||||
"github.com/gogf/gf/v2/errors/gerror"
|
||||
)
|
||||
|
||||
type sSysImGroup struct{}
|
||||
|
||||
func NewSysImGroup() *sSysImGroup {
|
||||
return &sSysImGroup{}
|
||||
}
|
||||
|
||||
func init() {
|
||||
service.RegisterSysImGroup(NewSysImGroup())
|
||||
}
|
||||
|
||||
// List 获取IM群组列表
|
||||
func (s *sSysImGroup) List(ctx context.Context, in *sysin.ImGroupListInp) (list []*sysin.ImGroupListModel, totalCount int, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
db, tenant, err := imtenant.DB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
mod := s.groupModel(ctx, db)
|
||||
mod = s.applyGroupWhere(mod, in)
|
||||
mod = mod.Page(in.Page, in.PerPage).OrderDesc("t.touchedat").OrderDesc("t.id")
|
||||
|
||||
if err = mod.ScanAndCount(&list, &totalCount, false); err != nil {
|
||||
err = gerror.Wrap(err, "获取IM群组列表失败，请稍后重试！")
|
||||
return
|
||||
}
|
||||
for _, item := range list {
|
||||
item.TenantId = tenant.Id
|
||||
item.TenantName = tenant.Name
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
func (s *sSysImGroup) groupModel(ctx context.Context, db gdb.DB) *gdb.Model {
|
||||
return db.Model("im_topics t").Safe().Ctx(ctx).
|
||||
LeftJoin("im_group_settings gs", "gs.topic = t.name").
|
||||
Fields(
|
||||
"t.name topic",
|
||||
"t.state",
|
||||
"COALESCE(gs.owner_user_id, t.owner) owner_id",
|
||||
"t.seqid seq_id",
|
||||
"t.delid del_id",
|
||||
"t.subcnt sub_cnt",
|
||||
"t.touchedat touched_at",
|
||||
"t.createdat created_at",
|
||||
"t.updatedat updated_at",
|
||||
"t.public public_json",
|
||||
"t.trusted trusted_json",
|
||||
"t.tags tags_json",
|
||||
"t.aux aux_json",
|
||||
"COALESCE(gs.name, '') group_name",
|
||||
"COALESCE(gs.avatar_file_id, '') avatar_file_id",
|
||||
"COALESCE(gs.description, '') description",
|
||||
"COALESCE(gs.group_status, '') group_status",
|
||||
"COALESCE(gs.join_approval, 0) join_approval",
|
||||
"COALESCE(gs.mute_all, 0) mute_all",
|
||||
"COALESCE(gs.member_upload_files, 0) member_upload_files",
|
||||
"COALESCE(gs.member_private_chat, 0) member_private_chat",
|
||||
"COALESCE(gs.member_invite, 0) member_invite",
|
||||
"COALESCE(gs.max_member_count, 0) max_member_count",
|
||||
"COALESCE(gs.max_admin_count, 0) max_admin_count",
|
||||
"COALESCE(gs.member_count, 0) business_member_count",
|
||||
"COALESCE(gs.version, 0) settings_version",
|
||||
"gs.updated_at settings_updated_at",
|
||||
).
|
||||
WhereLike("t.name", "grp%")
|
||||
}
|
||||
|
||||
func (s *sSysImGroup) applyGroupWhere(mod *gdb.Model, in *sysin.ImGroupListInp) *gdb.Model {
|
||||
if in.Topic != "" {
|
||||
mod = mod.WhereLike("t.name", "%"+in.Topic+"%")
|
||||
}
|
||||
if in.OwnerId > 0 {
|
||||
mod = mod.Where("COALESCE(gs.owner_user_id, t.owner)", in.OwnerId)
|
||||
}
|
||||
if in.State != nil {
|
||||
mod = mod.Where("t.state", *in.State)
|
||||
}
|
||||
if in.GroupStatus != "" {
|
||||
mod = mod.Where("gs.group_status", in.GroupStatus)
|
||||
}
|
||||
if len(in.CreatedAt) == 2 {
|
||||
mod = mod.WhereBetween("t.createdat", in.CreatedAt[0], in.CreatedAt[1])
|
||||
}
|
||||
if len(in.TouchedAt) == 2 {
|
||||
mod = mod.WhereBetween("t.touchedat", in.TouchedAt[0], in.TouchedAt[1])
|
||||
}
|
||||
return mod
|
||||
}
|
||||
|
||||
// View 获取IM群组指定信息
|
||||
func (s *sSysImGroup) View(ctx context.Context, in *sysin.ImGroupViewInp) (res *sysin.ImGroupViewModel, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
db, tenant, err := imtenant.DB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
err = db.Model("im_topics t").Safe().Ctx(ctx).
|
||||
LeftJoin("im_group_settings gs", "gs.topic = t.name").
|
||||
Fields(
|
||||
"t.name topic",
|
||||
"t.state",
|
||||
"COALESCE(gs.owner_user_id, t.owner) owner_id",
|
||||
"t.seqid seq_id",
|
||||
"t.delid del_id",
|
||||
"t.subcnt sub_cnt",
|
||||
"t.touchedat touched_at",
|
||||
"t.createdat created_at",
|
||||
"t.updatedat updated_at",
|
||||
"t.public public_json",
|
||||
"t.trusted trusted_json",
|
||||
"t.tags tags_json",
|
||||
"t.aux aux_json",
|
||||
"t.access access_json",
|
||||
"t.usebt use_bt",
|
||||
"COALESCE(gs.name, '') group_name",
|
||||
"COALESCE(gs.avatar_file_id, '') avatar_file_id",
|
||||
"COALESCE(gs.description, '') description",
|
||||
"COALESCE(gs.group_status, '') group_status",
|
||||
"COALESCE(gs.join_approval, 0) join_approval",
|
||||
"COALESCE(gs.mute_all, 0) mute_all",
|
||||
"COALESCE(gs.member_upload_files, 0) member_upload_files",
|
||||
"COALESCE(gs.member_private_chat, 0) member_private_chat",
|
||||
"COALESCE(gs.member_invite, 0) member_invite",
|
||||
"COALESCE(gs.max_member_count, 0) max_member_count",
|
||||
"COALESCE(gs.max_admin_count, 0) max_admin_count",
|
||||
"COALESCE(gs.member_count, 0) business_member_count",
|
||||
"COALESCE(gs.version, 0) settings_version",
|
||||
"gs.updated_at settings_updated_at",
|
||||
).
|
||||
Where("t.name", in.Topic).
|
||||
WhereLike("t.name", "grp%").
|
||||
Scan(&res)
|
||||
if err != nil {
|
||||
return nil, gerror.Wrap(err, "获取IM群组信息失败，请稍后重试！")
|
||||
}
|
||||
if res == nil {
|
||||
return nil, nil
|
||||
}
|
||||
res.TenantId = tenant.Id
|
||||
res.TenantName = tenant.Name
|
||||
return
|
||||
}
|
||||
|
||||
// MemberList 获取IM群成员列表
|
||||
func (s *sSysImGroup) MemberList(ctx context.Context, in *sysin.ImGroupMemberListInp) (list []*sysin.ImGroupMemberListModel, totalCount int, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
db, _, err := imtenant.DB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
if s.hasGroupMemberTruth(ctx, db, in.Topic) {
|
||||
return s.memberListFromBusiness(ctx, db, in)
|
||||
}
|
||||
return s.memberListFromProjection(ctx, db, in)
|
||||
}
|
||||
|
||||
func (s *sSysImGroup) hasGroupMemberTruth(ctx context.Context, db gdb.DB, topic string) bool {
|
||||
count, err := db.Model("im_group_members").Safe().Ctx(ctx).Where("topic", topic).Count()
|
||||
return err == nil && count > 0
|
||||
}
|
||||
|
||||
func (s *sSysImGroup) memberListFromBusiness(ctx context.Context, db gdb.DB, in *sysin.ImGroupMemberListInp) (list []*sysin.ImGroupMemberListModel, totalCount int, err error) {
|
||||
mod := db.Model("im_group_members gm").Safe().Ctx(ctx).
|
||||
LeftJoin("im_users u", "u.id = gm.user_id").
|
||||
LeftJoin("im_user_profiles up", "up.user_id = gm.user_id").
|
||||
LeftJoin("im_subscriptions s", "s.topic = gm.topic AND s.userid = gm.user_id").
|
||||
Fields(
|
||||
"gm.user_id",
|
||||
"up.nickname",
|
||||
"u.state",
|
||||
"s.modewant mode_want",
|
||||
"s.modegiven mode_given",
|
||||
"s.recvseqid recv_seq_id",
|
||||
"s.readseqid read_seq_id",
|
||||
"s.delid del_id",
|
||||
"s.deletedat deleted_at",
|
||||
"s.createdat created_at",
|
||||
"s.updatedat updated_at",
|
||||
"s.private private_json",
|
||||
"gm.role",
|
||||
"gm.member_status",
|
||||
"gm.nickname group_nickname",
|
||||
"gm.pinned",
|
||||
"gm.mute_notifications",
|
||||
"gm.join_source",
|
||||
"gm.joined_by",
|
||||
"gm.joined_at",
|
||||
"gm.left_at",
|
||||
"gm.removed_by",
|
||||
"gm.version",
|
||||
).
|
||||
Where("gm.topic", in.Topic)
|
||||
if in.UserId > 0 {
|
||||
mod = mod.Where("gm.user_id", in.UserId)
|
||||
}
|
||||
if in.Role != "" {
|
||||
mod = mod.Where("gm.role", in.Role)
|
||||
}
|
||||
if in.MemberStatus != "" {
|
||||
mod = mod.Where("gm.member_status", in.MemberStatus)
|
||||
}
|
||||
mod = mod.Page(in.Page, in.PerPage).OrderAsc("gm.member_status").OrderAsc("gm.role").OrderAsc("gm.id")
|
||||
if err = mod.ScanAndCount(&list, &totalCount, false); err != nil {
|
||||
err = gerror.Wrap(err, "获取IM群成员列表失败，请稍后重试！")
|
||||
return
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
func (s *sSysImGroup) memberListFromProjection(ctx context.Context, db gdb.DB, in *sysin.ImGroupMemberListInp) (list []*sysin.ImGroupMemberListModel, totalCount int, err error) {
|
||||
mod := db.Model("im_subscriptions s").Safe().Ctx(ctx).
|
||||
LeftJoin("im_users u", "u.id = s.userid").
|
||||
LeftJoin("im_user_profiles up", "up.user_id = s.userid").
|
||||
Fields(
|
||||
"s.userid user_id",
|
||||
"up.nickname",
|
||||
"u.state",
|
||||
"s.modewant mode_want",
|
||||
"s.modegiven mode_given",
|
||||
"s.recvseqid recv_seq_id",
|
||||
"s.readseqid read_seq_id",
|
||||
"s.delid del_id",
|
||||
"s.deletedat deleted_at",
|
||||
"s.createdat created_at",
|
||||
"s.updatedat updated_at",
|
||||
"s.private private_json",
|
||||
"'member' role",
|
||||
"IF(s.deletedat IS NULL, 'active', 'left') member_status",
|
||||
"'' group_nickname",
|
||||
"0 pinned",
|
||||
"0 mute_notifications",
|
||||
"'projection' join_source",
|
||||
"0 joined_by",
|
||||
"s.createdat joined_at",
|
||||
"s.deletedat left_at",
|
||||
"0 removed_by",
|
||||
"0 version",
|
||||
).
|
||||
Where("s.topic", in.Topic)
|
||||
|
||||
if in.UserId > 0 {
|
||||
mod = mod.Where("s.userid", in.UserId)
|
||||
}
|
||||
|
||||
mod = mod.Page(in.Page, in.PerPage).OrderAsc("s.deletedat").OrderAsc("s.userid")
|
||||
if err = mod.ScanAndCount(&list, &totalCount, false); err != nil {
|
||||
err = gerror.Wrap(err, "获取IM群成员列表失败，请稍后重试！")
|
||||
return
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
// Governance 获取IM群治理配置
|
||||
func (s *sSysImGroup) Governance(ctx context.Context, in *sysin.ImGroupTopicInp) (res *sysin.ImGroupGovernanceModel, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
db, tenant, err := imtenant.DB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
err = db.Model("im_group_settings").Safe().Ctx(ctx).
|
||||
Fields(
|
||||
"topic",
|
||||
"owner_user_id",
|
||||
"name",
|
||||
"avatar_file_id",
|
||||
"description",
|
||||
"group_status",
|
||||
"join_approval",
|
||||
"mute_all",
|
||||
"member_upload_files",
|
||||
"member_private_chat",
|
||||
"member_invite",
|
||||
"max_member_count",
|
||||
"max_admin_count",
|
||||
"member_count",
|
||||
"version",
|
||||
"created_by",
|
||||
"dissolved_by",
|
||||
"dissolved_at",
|
||||
"created_at",
|
||||
"updated_at",
|
||||
).
|
||||
Where("topic", in.Topic).
|
||||
Scan(&res)
|
||||
if err != nil {
|
||||
return nil, gerror.Wrap(err, "获取IM群治理配置失败，请稍后重试！")
|
||||
}
|
||||
if res == nil {
|
||||
return nil, nil
|
||||
}
|
||||
res.TenantId = tenant.Id
|
||||
res.TenantName = tenant.Name
|
||||
return
|
||||
}
|
||||
|
||||
// JoinRequestList 获取IM入群申请列表
|
||||
func (s *sSysImGroup) JoinRequestList(ctx context.Context, in *sysin.ImGroupJoinRequestListInp) (list []*sysin.ImGroupJoinRequestListModel, totalCount int, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
db, _, err := imtenant.DB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
mod := db.Model("im_group_join_requests").Safe().Ctx(ctx).Where("topic", in.Topic)
|
||||
if in.Status != "" {
|
||||
mod = mod.Where("status", in.Status)
|
||||
}
|
||||
if in.ApplicantUserId > 0 {
|
||||
mod = mod.Where("applicant_user_id", in.ApplicantUserId)
|
||||
}
|
||||
mod = mod.Page(in.Page, in.PerPage).OrderDesc("id")
|
||||
if err = mod.ScanAndCount(&list, &totalCount, false); err != nil {
|
||||
err = gerror.Wrap(err, "获取IM入群申请列表失败，请稍后重试！")
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
// InvitationList 获取IM群邀请列表
|
||||
func (s *sSysImGroup) InvitationList(ctx context.Context, in *sysin.ImGroupInvitationListInp) (list []*sysin.ImGroupInvitationListModel, totalCount int, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
db, _, err := imtenant.DB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
mod := db.Model("im_group_invitations").Safe().Ctx(ctx).Where("topic", in.Topic)
|
||||
if in.Status != "" {
|
||||
mod = mod.Where("status", in.Status)
|
||||
}
|
||||
if in.TargetUserId > 0 {
|
||||
mod = mod.Where("target_user_id", in.TargetUserId)
|
||||
}
|
||||
if in.InviterUserId > 0 {
|
||||
mod = mod.Where("inviter_user_id", in.InviterUserId)
|
||||
}
|
||||
mod = mod.Page(in.Page, in.PerPage).OrderDesc("id")
|
||||
if err = mod.ScanAndCount(&list, &totalCount, false); err != nil {
|
||||
err = gerror.Wrap(err, "获取IM群邀请列表失败，请稍后重试！")
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
// AnnouncementList 获取IM群公告列表
|
||||
func (s *sSysImGroup) AnnouncementList(ctx context.Context, in *sysin.ImGroupAnnouncementListInp) (list []*sysin.ImGroupAnnouncementListModel, totalCount int, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
db, _, err := imtenant.DB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
mod := db.Model("im_group_announcements").Safe().Ctx(ctx).Where("topic", in.Topic)
|
||||
if in.Status != "" {
|
||||
mod = mod.Where("status", in.Status)
|
||||
}
|
||||
mod = mod.Page(in.Page, in.PerPage).OrderDesc("published_at").OrderDesc("id")
|
||||
if err = mod.ScanAndCount(&list, &totalCount, false); err != nil {
|
||||
err = gerror.Wrap(err, "获取IM群公告列表失败，请稍后重试！")
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
// MuteList 获取IM群禁言列表
|
||||
func (s *sSysImGroup) MuteList(ctx context.Context, in *sysin.ImGroupMuteListInp) (list []*sysin.ImGroupMuteListModel, totalCount int, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
db, _, err := imtenant.DB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
mod := db.Model("im_group_mutes").Safe().Ctx(ctx).Where("topic", in.Topic)
|
||||
if in.Status != "" {
|
||||
mod = mod.Where("status", in.Status)
|
||||
}
|
||||
if in.UserId > 0 {
|
||||
mod = mod.Where("user_id", in.UserId)
|
||||
}
|
||||
mod = mod.Page(in.Page, in.PerPage).OrderDesc("muted_at").OrderDesc("user_id")
|
||||
if err = mod.ScanAndCount(&list, &totalCount, false); err != nil {
|
||||
err = gerror.Wrap(err, "获取IM群禁言列表失败，请稍后重试！")
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
// AdminLogList 获取IM群管理日志列表
|
||||
func (s *sSysImGroup) AdminLogList(ctx context.Context, in *sysin.ImGroupAdminLogListInp) (list []*sysin.ImGroupAdminLogListModel, totalCount int, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
db, _, err := imtenant.DB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
mod := db.Model("im_group_admin_logs").Safe().Ctx(ctx).
|
||||
Fields(
|
||||
"id",
|
||||
"log_id",
|
||||
"topic",
|
||||
"operator_id",
|
||||
"target_user_id",
|
||||
"action",
|
||||
"object_type",
|
||||
"object_id",
|
||||
"CAST(before_data AS CHAR) before_data",
|
||||
"CAST(after_data AS CHAR) after_data",
|
||||
"request_id",
|
||||
"idempotency_key",
|
||||
"created_at",
|
||||
).
|
||||
Where("topic", in.Topic)
|
||||
if in.Action != "" {
|
||||
mod = mod.WhereLike("action", "%"+in.Action+"%")
|
||||
}
|
||||
if in.OperatorId > 0 {
|
||||
mod = mod.Where("operator_id", in.OperatorId)
|
||||
}
|
||||
mod = mod.Page(in.Page, in.PerPage).OrderDesc("id")
|
||||
if err = mod.ScanAndCount(&list, &totalCount, false); err != nil {
|
||||
err = gerror.Wrap(err, "获取IM群管理日志列表失败，请稍后重试！")
|
||||
}
|
||||
return
|
||||
}
|
||||
@@ -0,0 +1,572 @@
|
||||
package sys
|
||||
|
||||
import (
|
||||
"context"
|
||||
cryptorand "crypto/rand"
|
||||
"encoding/csv"
|
||||
"errors"
|
||||
"fmt"
|
||||
"hotgo/internal/library/imtenant"
|
||||
"hotgo/internal/model/input/sysin"
|
||||
"hotgo/internal/service"
|
||||
"strconv"
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
mysqldriver "github.com/go-sql-driver/mysql"
|
||||
"github.com/gogf/gf/v2/database/gdb"
|
||||
"github.com/gogf/gf/v2/errors/gerror"
|
||||
"github.com/gogf/gf/v2/frame/g"
|
||||
"github.com/gogf/gf/v2/net/ghttp"
|
||||
"github.com/gogf/gf/v2/os/gtime"
|
||||
)
|
||||
|
||||
const inviteGenerateRetries = 10
|
||||
|
||||
var errInviteBatchNotFound = errors.New("invite batch not found")
|
||||
|
||||
type sSysImInvite struct{}
|
||||
|
||||
func NewSysImInvite() *sSysImInvite { return &sSysImInvite{} }
|
||||
|
||||
func init() { service.RegisterSysImInvite(NewSysImInvite()) }
|
||||
|
||||
type imInviteListRequest struct {
|
||||
TenantID int64
|
||||
InviteCode string
|
||||
Status string
|
||||
BatchID int64
|
||||
CreatedBy int64
|
||||
CreatedAtStart *time.Time
|
||||
CreatedAtEnd *time.Time
|
||||
ExpiresAtStart *time.Time
|
||||
ExpiresAtEnd *time.Time
|
||||
}
|
||||
|
||||
type imInviteCodeResponse struct {
|
||||
ID int64 `json:"id"`
|
||||
TenantID int64 `json:"tenant_id"`
|
||||
TenantName string `json:"tenant_name"`
|
||||
BatchID *int64 `json:"batch_id"`
|
||||
Code string `json:"code"`
|
||||
Status string `json:"status"`
|
||||
ExpiresAt time.Time `json:"expires_at"`
|
||||
UsageCount int `json:"usage_count"`
|
||||
LastUsedAt *time.Time `json:"last_used_at"`
|
||||
CreatedBy int64 `json:"created_by"`
|
||||
Remark string `json:"remark"`
|
||||
CreatedAt time.Time `json:"created_at"`
|
||||
}
|
||||
|
||||
type imInviteBatchResponse struct {
|
||||
BatchID int64 `json:"batch_id"`
|
||||
TenantID int64 `json:"tenant_id"`
|
||||
Quantity int `json:"quantity"`
|
||||
IdempotencyKey string `json:"idempotency_key"`
|
||||
Remark string `json:"remark"`
|
||||
ActiveCount int `json:"active_count"`
|
||||
UsageCount int `json:"usage_count"`
|
||||
RevokedCount int `json:"revoked_count"`
|
||||
ExpiredCount int `json:"expired_count"`
|
||||
ExpiresAt time.Time `json:"expires_at"`
|
||||
CreatedAt time.Time `json:"created_at"`
|
||||
}
|
||||
|
||||
func (s *sSysImInvite) List(ctx context.Context, in *sysin.ImInviteListInp) (list []*sysin.ImInviteCodeModel, totalCount int, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
scope, db, err := inviteQueryDB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return nil, 0, err
|
||||
}
|
||||
req, err := buildInviteListRequest(in)
|
||||
if err != nil {
|
||||
return nil, 0, err
|
||||
}
|
||||
if !validInviteStatus(req.Status) {
|
||||
return nil, 0, gerror.New("邀请码状态不正确")
|
||||
}
|
||||
req.TenantID = scope.TenantId
|
||||
items, total, err := queryInviteCodes(ctx, db, req, in.PerPage, (in.Page-1)*in.PerPage)
|
||||
result := "success"
|
||||
if err != nil {
|
||||
result = "failed"
|
||||
} else {
|
||||
list = convertInviteCodes(items)
|
||||
totalCount = total
|
||||
}
|
||||
_ = writeImAdminAudit(ctx, scope.TenantId, "invite_list", "invite_code", 0, result, g.Map{"hasInviteCode": in.InviteCode != ""})
|
||||
return list, totalCount, err
|
||||
}
|
||||
|
||||
func (s *sSysImInvite) Create(ctx context.Context, in *sysin.ImInviteCreateInp) (res *sysin.ImInviteCodeModel, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
scope, db, err := inviteDB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
expiresAt := in.ExpiresAt.Time.UTC().Round(time.Millisecond)
|
||||
var item imInviteCodeResponse
|
||||
if key := strings.TrimSpace(in.IdempotencyKey); key != "" {
|
||||
batch, codes, createErr := createInviteBatch(ctx, db, scope.TenantId, scope.OperatorId, 1, expiresAt, in.Remark, key)
|
||||
if createErr != nil {
|
||||
err = createErr
|
||||
} else if len(codes) > 0 {
|
||||
item = codes[0]
|
||||
} else {
|
||||
codes, _, err = queryInviteCodes(ctx, db, imInviteListRequest{TenantID: scope.TenantId, BatchID: batch.BatchID}, 1, 0)
|
||||
if err == nil && len(codes) > 0 {
|
||||
item = codes[0]
|
||||
} else if err == nil {
|
||||
err = gerror.New("邀请码生成结果不存在")
|
||||
}
|
||||
}
|
||||
} else {
|
||||
item, err = createSingleInvite(ctx, db, scope.TenantId, scope.OperatorId, expiresAt, in.Remark)
|
||||
}
|
||||
result := "success"
|
||||
if err != nil {
|
||||
result = "failed"
|
||||
} else {
|
||||
res = convertInviteCode(item)
|
||||
}
|
||||
_ = writeImAdminAudit(ctx, scope.TenantId, "invite_create", "invite_code", item.ID, result, g.Map{"expiresAt": in.ExpiresAt, "remark": in.Remark})
|
||||
return res, err
|
||||
}
|
||||
|
||||
func (s *sSysImInvite) BatchCreate(ctx context.Context, in *sysin.ImInviteBatchCreateInp) (res *sysin.ImInviteBatchModel, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
scope, db, err := inviteDB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
key := strings.TrimSpace(in.IdempotencyKey)
|
||||
batch, _, err := createInviteBatch(ctx, db, scope.TenantId, scope.OperatorId, in.Quantity, in.ExpiresAt.Time.UTC().Round(time.Millisecond), in.Remark, key)
|
||||
result := "success"
|
||||
if err != nil {
|
||||
result = "failed"
|
||||
} else {
|
||||
res = convertInviteBatch(batch)
|
||||
}
|
||||
_ = writeImAdminAudit(ctx, scope.TenantId, "invite_batch_create", "invite_batch", batchID(batch), result, g.Map{"quantity": in.Quantity, "expiresAt": in.ExpiresAt, "remark": in.Remark})
|
||||
return res, err
|
||||
}
|
||||
|
||||
func (s *sSysImInvite) BatchView(ctx context.Context, in *sysin.ImInviteBatchViewInp) (res *sysin.ImInviteBatchDetailModel, err error) {
|
||||
scope, db, err := inviteDB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
id, err := sysin.ParseOptionalInt64(in.BatchId)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
batch, err := getInviteBatch(ctx, db, scope.TenantId, "b.id=?", id)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
codes, _, err := queryInviteCodes(ctx, db, imInviteListRequest{TenantID: scope.TenantId, BatchID: id}, batch.Quantity, 0)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return &sysin.ImInviteBatchDetailModel{ImInviteBatchModel: *convertInviteBatch(batch), List: convertInviteCodes(codes)}, nil
|
||||
}
|
||||
|
||||
func (s *sSysImInvite) Revoke(ctx context.Context, in *sysin.ImInviteRevokeInp) (err error) {
|
||||
scope, db, err := inviteDB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
id, err := sysin.ParseOptionalInt64(in.Id)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
now := time.Now().UTC().Round(time.Millisecond)
|
||||
result, err := db.Exec(ctx, `UPDATE im_registration_invite_codes SET status='revoked',updated_at=?
|
||||
WHERE tenant_id=? AND id=? AND status='active' AND expires_at>?`, now, scope.TenantId, id, now)
|
||||
if err == nil {
|
||||
if affected, _ := result.RowsAffected(); affected == 0 {
|
||||
err = gerror.New("有效邀请码不存在")
|
||||
}
|
||||
}
|
||||
auditResult := "success"
|
||||
if err != nil {
|
||||
auditResult = "failed"
|
||||
}
|
||||
_ = writeImAdminAudit(ctx, scope.TenantId, "invite_revoke", "invite_code", id, auditResult, nil)
|
||||
return err
|
||||
}
|
||||
|
||||
func (s *sSysImInvite) BatchRevoke(ctx context.Context, in *sysin.ImInviteBatchRevokeInp) (res *sysin.ImInviteBatchModel, err error) {
|
||||
scope, db, err := inviteDB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
id, err := sysin.ParseOptionalInt64(in.BatchId)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
if _, err = getInviteBatch(ctx, db, scope.TenantId, "b.id=?", id); err == nil {
|
||||
now := time.Now().UTC().Round(time.Millisecond)
|
||||
_, err = db.Exec(ctx, `UPDATE im_registration_invite_codes SET status='revoked',updated_at=?
|
||||
WHERE tenant_id=? AND batch_id=? AND status='active' AND expires_at>?`, now, scope.TenantId, id, now)
|
||||
}
|
||||
var batch *imInviteBatchResponse
|
||||
if err == nil {
|
||||
batch, err = getInviteBatch(ctx, db, scope.TenantId, "b.id=?", id)
|
||||
}
|
||||
auditResult := "success"
|
||||
if err != nil {
|
||||
auditResult = "failed"
|
||||
} else {
|
||||
res = convertInviteBatch(batch)
|
||||
}
|
||||
_ = writeImAdminAudit(ctx, scope.TenantId, "invite_batch_revoke", "invite_batch", id, auditResult, nil)
|
||||
return res, err
|
||||
}
|
||||
|
||||
func (s *sSysImInvite) Export(ctx context.Context, in *sysin.ImInviteListInp) (err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return err
|
||||
}
|
||||
scope, db, err := inviteQueryDB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
req, err := buildInviteListRequest(in)
|
||||
if err != nil || !validInviteStatus(req.Status) {
|
||||
return gerror.New("导出条件不正确")
|
||||
}
|
||||
req.TenantID = scope.TenantId
|
||||
request := ghttp.RequestFromCtx(ctx)
|
||||
if request == nil {
|
||||
return gerror.New("请求上下文不存在")
|
||||
}
|
||||
request.Response.Header().Set("Content-Type", "text/csv; charset=utf-8")
|
||||
request.Response.Header().Set("Content-Disposition", fmt.Sprintf("attachment; filename=registration-invite-codes-%s.csv", time.Now().Format("20060102-150405")))
|
||||
_, _ = request.Response.Writer.Write([]byte{0xef, 0xbb, 0xbf})
|
||||
writer := csv.NewWriter(request.Response.Writer)
|
||||
_ = writer.Write([]string{"tenant_id", "tenant_name", "code", "status", "batch_id", "expires_at", "usage_count", "last_used_at", "created_by", "created_at", "remark"})
|
||||
for offset := 0; ; offset += 100 {
|
||||
items, total, queryErr := queryInviteCodes(ctx, db, req, 100, offset)
|
||||
if queryErr != nil {
|
||||
return gerror.Wrap(queryErr, "导出邀请码失败")
|
||||
}
|
||||
for _, item := range items {
|
||||
_ = writer.Write([]string{strconv.FormatInt(item.TenantID, 10), item.TenantName, item.Code, item.Status, formatOptionalInt64(item.BatchID), item.ExpiresAt.Format(time.RFC3339), strconv.Itoa(item.UsageCount), formatTime(item.LastUsedAt), strconv.FormatInt(item.CreatedBy, 10), item.CreatedAt.Format(time.RFC3339), item.Remark})
|
||||
}
|
||||
writer.Flush()
|
||||
if writer.Error() != nil {
|
||||
return writer.Error()
|
||||
}
|
||||
if offset+len(items) >= total || len(items) == 0 {
|
||||
break
|
||||
}
|
||||
}
|
||||
_ = writeImAdminAudit(ctx, scope.TenantId, "invite_export", "invite_code", 0, "success", g.Map{"hasInviteCode": in.InviteCode != ""})
|
||||
return nil
|
||||
}
|
||||
|
||||
func inviteDB(ctx context.Context, selectedTenantID int64) (imAdminScope, gdb.DB, error) {
|
||||
scope, err := resolveImAdminScope(ctx, selectedTenantID)
|
||||
if err != nil {
|
||||
return scope, nil, err
|
||||
}
|
||||
return scope, imtenant.RegistryDB(), nil
|
||||
}
|
||||
|
||||
func inviteQueryDB(ctx context.Context, selectedTenantID int64) (imAdminScope, gdb.DB, error) {
|
||||
scope, err := resolveImAdminScopeWithAll(ctx, selectedTenantID, true)
|
||||
if err != nil {
|
||||
return scope, nil, err
|
||||
}
|
||||
return scope, imtenant.RegistryDB(), nil
|
||||
}
|
||||
|
||||
func createSingleInvite(ctx context.Context, db gdb.DB, tenantID, operatorID int64, expiresAt time.Time, remark string) (imInviteCodeResponse, error) {
|
||||
for attempt := 0; attempt < inviteGenerateRetries; attempt++ {
|
||||
id, err := imtenant.NextSnowflakeID(ctx)
|
||||
if err != nil {
|
||||
return imInviteCodeResponse{}, err
|
||||
}
|
||||
code, err := randomInviteCode()
|
||||
if err != nil {
|
||||
return imInviteCodeResponse{}, err
|
||||
}
|
||||
now := time.Now().UTC().Round(time.Millisecond)
|
||||
_, err = db.Exec(ctx, `INSERT INTO im_registration_invite_codes
|
||||
(id,tenant_id,batch_id,code,status,expires_at,usage_count,last_used_at,created_by,remark,created_at,updated_at)
|
||||
VALUES(?,?,NULL,?,'active',?,0,NULL,?,?,?,?)`, id, tenantID, code, expiresAt, operatorID, remark, now, now)
|
||||
if err == nil {
|
||||
return imInviteCodeResponse{ID: id, TenantID: tenantID, Code: code, Status: "active", ExpiresAt: expiresAt, CreatedBy: operatorID, Remark: remark, CreatedAt: now}, nil
|
||||
}
|
||||
if !isDuplicateError(err) {
|
||||
return imInviteCodeResponse{}, err
|
||||
}
|
||||
}
|
||||
return imInviteCodeResponse{}, gerror.New("无法生成不重复的邀请码，请重试")
|
||||
}
|
||||
|
||||
func createInviteBatch(ctx context.Context, db gdb.DB, tenantID, operatorID int64, quantity int, expiresAt time.Time, remark, key string) (*imInviteBatchResponse, []imInviteCodeResponse, error) {
|
||||
if existing, err := getInviteBatch(ctx, db, tenantID, "b.idempotency_key=?", key); err == nil {
|
||||
if !sameInviteBatch(existing, quantity, expiresAt, remark) {
|
||||
return nil, nil, gerror.New("幂等键已被其他批量生成请求使用")
|
||||
}
|
||||
return existing, nil, nil
|
||||
} else if !errors.Is(err, errInviteBatchNotFound) {
|
||||
return nil, nil, err
|
||||
}
|
||||
for attempt := 0; attempt < inviteGenerateRetries; attempt++ {
|
||||
batchID, err := imtenant.NextSnowflakeID(ctx)
|
||||
if err != nil {
|
||||
return nil, nil, err
|
||||
}
|
||||
codes := make([]imInviteCodeResponse, quantity)
|
||||
seen := make(map[string]struct{}, quantity)
|
||||
for i := range codes {
|
||||
for {
|
||||
code, randomErr := randomInviteCode()
|
||||
if randomErr != nil {
|
||||
return nil, nil, randomErr
|
||||
}
|
||||
if _, ok := seen[code]; ok {
|
||||
continue
|
||||
}
|
||||
seen[code] = struct{}{}
|
||||
codes[i].Code = code
|
||||
break
|
||||
}
|
||||
codes[i].ID, err = imtenant.NextSnowflakeID(ctx)
|
||||
if err != nil {
|
||||
return nil, nil, err
|
||||
}
|
||||
codes[i].BatchID = &batchID
|
||||
}
|
||||
now := time.Now().UTC().Round(time.Millisecond)
|
||||
err = db.Transaction(ctx, func(ctx context.Context, tx gdb.TX) error {
|
||||
if _, txErr := tx.Exec(`INSERT INTO im_registration_invite_batches
|
||||
(id,tenant_id,quantity,idempotency_key,expires_at,created_by,remark,created_at,updated_at)
|
||||
VALUES(?,?,?,?,?,?,?,?,?)`, batchID, tenantID, quantity, key, expiresAt, operatorID, remark, now, now); txErr != nil {
|
||||
return txErr
|
||||
}
|
||||
for i := range codes {
|
||||
if _, txErr := tx.Exec(`INSERT INTO im_registration_invite_codes
|
||||
(id,tenant_id,batch_id,code,status,expires_at,usage_count,last_used_at,created_by,remark,created_at,updated_at)
|
||||
VALUES(?,?,?,?,'active',?,0,NULL,?,?,?,?)`, codes[i].ID, tenantID, batchID, codes[i].Code, expiresAt, operatorID, remark, now, now); txErr != nil {
|
||||
return txErr
|
||||
}
|
||||
codes[i].TenantID, codes[i].Status, codes[i].ExpiresAt, codes[i].CreatedBy, codes[i].Remark, codes[i].CreatedAt = tenantID, "active", expiresAt, operatorID, remark, now
|
||||
}
|
||||
return nil
|
||||
})
|
||||
if err == nil {
|
||||
return &imInviteBatchResponse{BatchID: batchID, TenantID: tenantID, Quantity: quantity, IdempotencyKey: key, Remark: remark, ActiveCount: quantity, ExpiresAt: expiresAt, CreatedAt: now}, codes, nil
|
||||
}
|
||||
if !isDuplicateError(err) {
|
||||
return nil, nil, err
|
||||
}
|
||||
if existing, lookupErr := getInviteBatch(ctx, db, tenantID, "b.idempotency_key=?", key); lookupErr == nil {
|
||||
if !sameInviteBatch(existing, quantity, expiresAt, remark) {
|
||||
return nil, nil, gerror.New("幂等键已被其他批量生成请求使用")
|
||||
}
|
||||
return existing, nil, nil
|
||||
} else if !errors.Is(lookupErr, errInviteBatchNotFound) {
|
||||
return nil, nil, lookupErr
|
||||
}
|
||||
}
|
||||
return nil, nil, gerror.New("无法生成不重复的邀请码，请重试")
|
||||
}
|
||||
|
||||
func queryInviteCodes(ctx context.Context, db gdb.DB, req imInviteListRequest, limit, offset int) ([]imInviteCodeResponse, int, error) {
|
||||
now := time.Now().UTC().Round(time.Millisecond)
|
||||
expireWhere := "status='active' AND expires_at<=?"
|
||||
expireArgs := []any{now, now}
|
||||
if req.TenantID > 0 {
|
||||
expireWhere = "tenant_id=? AND " + expireWhere
|
||||
expireArgs = []any{now, req.TenantID, now}
|
||||
}
|
||||
if _, err := db.Exec(ctx, `UPDATE im_registration_invite_codes SET status='expired',updated_at=? WHERE `+expireWhere, expireArgs...); err != nil {
|
||||
return nil, 0, err
|
||||
}
|
||||
where, args := inviteWhere(req)
|
||||
totalValue, err := db.GetValue(ctx, "SELECT COUNT(*) FROM im_registration_invite_codes c WHERE "+where, args...)
|
||||
if err != nil {
|
||||
return nil, 0, err
|
||||
}
|
||||
queryArgs := append(append([]any{}, args...), limit, offset)
|
||||
items := make([]imInviteCodeResponse, 0)
|
||||
err = db.Raw(`SELECT c.id,c.tenant_id,t.name tenant_name,c.batch_id,c.code,c.status,c.expires_at,c.created_by,c.remark,c.created_at,
|
||||
c.usage_count,c.last_used_at
|
||||
FROM im_registration_invite_codes c
|
||||
LEFT JOIN im_tenant t ON t.id=c.tenant_id
|
||||
WHERE `+where+` ORDER BY c.created_at DESC,c.id DESC LIMIT ? OFFSET ?`, queryArgs...).Ctx(ctx).Scan(&items)
|
||||
return items, totalValue.Int(), err
|
||||
}
|
||||
|
||||
func inviteWhere(req imInviteListRequest) (string, []any) {
|
||||
where := []string{"1=1"}
|
||||
args := make([]any, 0, 8)
|
||||
if req.TenantID > 0 {
|
||||
where, args = append(where, "c.tenant_id=?"), append(args, req.TenantID)
|
||||
}
|
||||
if req.InviteCode != "" {
|
||||
where, args = append(where, "c.code=?"), append(args, req.InviteCode)
|
||||
}
|
||||
if req.Status != "" {
|
||||
where, args = append(where, "c.status=?"), append(args, req.Status)
|
||||
}
|
||||
if req.BatchID > 0 {
|
||||
where, args = append(where, "c.batch_id=?"), append(args, req.BatchID)
|
||||
}
|
||||
if req.CreatedBy > 0 {
|
||||
where, args = append(where, "c.created_by=?"), append(args, req.CreatedBy)
|
||||
}
|
||||
if req.CreatedAtStart != nil {
|
||||
where, args = append(where, "c.created_at>=?"), append(args, *req.CreatedAtStart)
|
||||
}
|
||||
if req.CreatedAtEnd != nil {
|
||||
where, args = append(where, "c.created_at<=?"), append(args, *req.CreatedAtEnd)
|
||||
}
|
||||
if req.ExpiresAtStart != nil {
|
||||
where, args = append(where, "c.expires_at>=?"), append(args, *req.ExpiresAtStart)
|
||||
}
|
||||
if req.ExpiresAtEnd != nil {
|
||||
where, args = append(where, "c.expires_at<=?"), append(args, *req.ExpiresAtEnd)
|
||||
}
|
||||
return strings.Join(where, " AND "), args
|
||||
}
|
||||
|
||||
func getInviteBatch(ctx context.Context, db gdb.DB, tenantID int64, where string, arg any) (*imInviteBatchResponse, error) {
|
||||
items := make([]imInviteBatchResponse, 0, 1)
|
||||
now := time.Now().UTC().Round(time.Millisecond)
|
||||
err := db.Raw(`SELECT b.id batch_id,b.tenant_id,b.quantity,b.idempotency_key,b.expires_at,b.remark,b.created_at,
|
||||
COALESCE(SUM(CASE WHEN c.status='active' AND c.expires_at>? THEN 1 ELSE 0 END),0) active_count,
|
||||
COALESCE(SUM(c.usage_count),0) usage_count,
|
||||
COALESCE(SUM(CASE WHEN (c.status='active' AND c.expires_at<=?) OR c.status='expired' THEN 1 ELSE 0 END),0) expired_count,
|
||||
COALESCE(SUM(CASE WHEN c.status='revoked' THEN 1 ELSE 0 END),0) revoked_count
|
||||
FROM im_registration_invite_batches b LEFT JOIN im_registration_invite_codes c ON c.tenant_id=b.tenant_id AND c.batch_id=b.id
|
||||
WHERE b.tenant_id=? AND `+where+` GROUP BY b.id LIMIT 1`, now, now, tenantID, arg).Ctx(ctx).Scan(&items)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
if len(items) == 0 {
|
||||
return nil, gerror.Wrap(errInviteBatchNotFound, "邀请码批次不存在")
|
||||
}
|
||||
return &items[0], nil
|
||||
}
|
||||
|
||||
func buildInviteListRequest(in *sysin.ImInviteListInp) (imInviteListRequest, error) {
|
||||
batchID, err := sysin.ParseOptionalInt64(in.BatchId)
|
||||
if err != nil {
|
||||
return imInviteListRequest{}, err
|
||||
}
|
||||
createdBy, err := sysin.ParseOptionalInt64(in.CreatedBy)
|
||||
if err != nil {
|
||||
return imInviteListRequest{}, err
|
||||
}
|
||||
return imInviteListRequest{InviteCode: in.InviteCode, Status: in.Status, BatchID: batchID, CreatedBy: createdBy,
|
||||
CreatedAtStart: nativeTime(in.CreatedAtStart), CreatedAtEnd: nativeTime(in.CreatedAtEnd),
|
||||
ExpiresAtStart: nativeTime(in.ExpiresAtStart), ExpiresAtEnd: nativeTime(in.ExpiresAtEnd)}, nil
|
||||
}
|
||||
|
||||
func randomInviteCode() (string, error) {
|
||||
const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"
|
||||
result := make([]byte, 5)
|
||||
buffer := make([]byte, 10)
|
||||
for index := 0; index < len(result); {
|
||||
if _, err := cryptorand.Read(buffer); err != nil {
|
||||
return "", err
|
||||
}
|
||||
for _, value := range buffer {
|
||||
if value >= 208 {
|
||||
continue
|
||||
}
|
||||
result[index] = alphabet[int(value)%len(alphabet)]
|
||||
index++
|
||||
if index == len(result) {
|
||||
break
|
||||
}
|
||||
}
|
||||
}
|
||||
return string(result), nil
|
||||
}
|
||||
|
||||
func isDuplicateError(err error) bool {
|
||||
var mysqlErr *mysqldriver.MySQLError
|
||||
return errors.As(err, &mysqlErr) && mysqlErr.Number == 1062
|
||||
}
|
||||
|
||||
func validInviteStatus(status string) bool {
|
||||
return status == "" || status == "active" || status == "expired" || status == "revoked"
|
||||
}
|
||||
|
||||
func sameInviteBatch(batch *imInviteBatchResponse, quantity int, expiresAt time.Time, remark string) bool {
|
||||
return batch != nil && batch.Quantity == quantity &&
|
||||
batch.ExpiresAt.UTC().Round(time.Millisecond).Equal(expiresAt.UTC().Round(time.Millisecond)) && batch.Remark == remark
|
||||
}
|
||||
|
||||
func convertInviteCodes(items []imInviteCodeResponse) []*sysin.ImInviteCodeModel {
|
||||
list := make([]*sysin.ImInviteCodeModel, 0, len(items))
|
||||
for _, item := range items {
|
||||
list = append(list, convertInviteCode(item))
|
||||
}
|
||||
return list
|
||||
}
|
||||
|
||||
func convertInviteCode(item imInviteCodeResponse) *sysin.ImInviteCodeModel {
|
||||
return &sysin.ImInviteCodeModel{Id: strconv.FormatInt(item.ID, 10), BatchId: formatOptionalInt64(item.BatchID), Code: item.Code,
|
||||
TenantId: strconv.FormatInt(item.TenantID, 10), TenantName: item.TenantName,
|
||||
Status: item.Status, ExpiresAt: gtime.New(item.ExpiresAt), UsageCount: item.UsageCount, LastUsedAt: convertTime(item.LastUsedAt),
|
||||
CreatedBy: strconv.FormatInt(item.CreatedBy, 10), Remark: item.Remark, CreatedAt: gtime.New(item.CreatedAt)}
|
||||
}
|
||||
|
||||
func convertInviteBatch(item *imInviteBatchResponse) *sysin.ImInviteBatchModel {
|
||||
if item == nil {
|
||||
return nil
|
||||
}
|
||||
return &sysin.ImInviteBatchModel{BatchId: strconv.FormatInt(item.BatchID, 10), Quantity: item.Quantity, ActiveCount: item.ActiveCount,
|
||||
TenantId: strconv.FormatInt(item.TenantID, 10),
|
||||
UsageCount: item.UsageCount, RevokedCount: item.RevokedCount, ExpiredCount: item.ExpiredCount,
|
||||
ExpiresAt: gtime.New(item.ExpiresAt), CreatedAt: gtime.New(item.CreatedAt)}
|
||||
}
|
||||
|
||||
func nativeTime(value *gtime.Time) *time.Time {
|
||||
if value == nil {
|
||||
return nil
|
||||
}
|
||||
t := value.Time.UTC()
|
||||
return &t
|
||||
}
|
||||
|
||||
func convertTime(value *time.Time) *gtime.Time {
|
||||
if value == nil {
|
||||
return nil
|
||||
}
|
||||
return gtime.New(value)
|
||||
}
|
||||
|
||||
func formatOptionalInt64(value *int64) string {
|
||||
if value == nil || *value == 0 {
|
||||
return ""
|
||||
}
|
||||
return strconv.FormatInt(*value, 10)
|
||||
}
|
||||
|
||||
func formatTime(value *time.Time) string {
|
||||
if value == nil {
|
||||
return ""
|
||||
}
|
||||
return value.Format(time.RFC3339)
|
||||
}
|
||||
|
||||
func batchID(batch *imInviteBatchResponse) int64 {
|
||||
if batch == nil {
|
||||
return 0
|
||||
}
|
||||
return batch.BatchID
|
||||
}
|
||||
@@ -0,0 +1,124 @@
|
||||
package sys
|
||||
|
||||
import (
|
||||
"context"
|
||||
"os"
|
||||
"regexp"
|
||||
"testing"
|
||||
"time"
|
||||
|
||||
"hotgo/internal/library/imtenant"
|
||||
|
||||
_ "github.com/gogf/gf/contrib/drivers/mysql/v2"
|
||||
"github.com/gogf/gf/v2/database/gdb"
|
||||
"golang.org/x/crypto/bcrypt"
|
||||
)
|
||||
|
||||
func TestRandomInviteCode(t *testing.T) {
|
||||
pattern := regexp.MustCompile(`^[A-Za-z]{5}$`)
|
||||
for i := 0; i < 100; i++ {
|
||||
code, err := randomInviteCode()
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
if !pattern.MatchString(code) {
|
||||
t.Fatalf("invalid invite code %q", code)
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
func TestInviteDirectDatabase(t *testing.T) {
|
||||
link := os.Getenv("IM_MANAGER_INTEGRATION_DSN")
|
||||
if link == "" {
|
||||
t.Skip("IM_MANAGER_INTEGRATION_DSN is not set")
|
||||
}
|
||||
const group = "im_invite_integration"
|
||||
if err := gdb.SetConfigGroup(group, gdb.ConfigGroup{{Link: link}}); err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
db, err := gdb.Instance(group)
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
ctx := context.Background()
|
||||
key := "integration-" + time.Now().UTC().Format("20060102150405.000000000")
|
||||
expiresAt := time.Now().UTC().Add(time.Hour).Round(time.Millisecond)
|
||||
batch, codes, err := createInviteBatch(ctx, db, 1, 1, 3, expiresAt, "integration", key)
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
t.Cleanup(func() {
|
||||
_, _ = db.Exec(ctx, "DELETE FROM im_registration_invite_codes WHERE tenant_id=? AND batch_id=?", 1, batch.BatchID)
|
||||
_, _ = db.Exec(ctx, "DELETE FROM im_registration_invite_batches WHERE tenant_id=? AND id=?", 1, batch.BatchID)
|
||||
})
|
||||
if batch.ActiveCount != 3 || len(codes) != 3 {
|
||||
t.Fatalf("unexpected batch result: %#v codes=%d", batch, len(codes))
|
||||
}
|
||||
replayed, replayCodes, err := createInviteBatch(ctx, db, 1, 1, 3, expiresAt, "integration", key)
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
if replayed.BatchID != batch.BatchID || len(replayCodes) != 0 {
|
||||
t.Fatalf("idempotent replay created a new batch: %#v", replayed)
|
||||
}
|
||||
items, total, err := queryInviteCodes(ctx, db, imInviteListRequest{TenantID: 1, BatchID: batch.BatchID}, 10, 0)
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
if total != 3 || len(items) != 3 {
|
||||
t.Fatalf("unexpected query result total=%d items=%d", total, len(items))
|
||||
}
|
||||
}
|
||||
|
||||
func TestResetPasswordDirectDatabase(t *testing.T) {
|
||||
link := os.Getenv("IM_MANAGER_INTEGRATION_DSN")
|
||||
if link == "" {
|
||||
t.Skip("IM_MANAGER_INTEGRATION_DSN is not set")
|
||||
}
|
||||
const group = "im_password_reset_integration"
|
||||
if err := gdb.SetConfigGroup(group, gdb.ConfigGroup{{Link: link}}); err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
db, err := gdb.Instance(group)
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
ctx := context.Background()
|
||||
userID, err := imtenant.NextSnowflakeID(ctx)
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
now := time.Now().UTC().Round(time.Millisecond)
|
||||
username := "integration" + time.Now().UTC().Format("150405000000")
|
||||
if _, err = db.Exec(ctx, `INSERT INTO im_users(id,username,createdat,updatedat,state,useragent)
|
||||
VALUES(?,?,?,?,0,'integration-test')`, userID, username, now, now); err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
if _, err = db.Exec(ctx, "INSERT INTO im_auth(userid,authlvl,secret) VALUES(?,20,'old')", userID); err != nil {
|
||||
_, _ = db.Exec(ctx, "DELETE FROM im_users WHERE id=?", userID)
|
||||
t.Fatal(err)
|
||||
}
|
||||
t.Cleanup(func() {
|
||||
_, _ = db.Exec(ctx, "DELETE FROM im_business_events_outbox WHERE target=? AND event_type='security.password_reset'", userID)
|
||||
_, _ = db.Exec(ctx, "DELETE FROM im_user_security WHERE user_id=?", userID)
|
||||
_, _ = db.Exec(ctx, "DELETE FROM im_auth WHERE userid=?", userID)
|
||||
_, _ = db.Exec(ctx, "DELETE FROM im_users WHERE id=?", userID)
|
||||
})
|
||||
scope := imAdminScope{TenantId: 1, OperatorId: 99, RequestId: "integration-password-reset"}
|
||||
if err = resetIMUserPassword(ctx, db, scope, userID, "new-password"); err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
secret, err := db.GetValue(ctx, "SELECT secret FROM im_auth WHERE userid=?", userID)
|
||||
if err != nil || bcrypt.CompareHashAndPassword(secret.Bytes(), []byte("new-password")) != nil {
|
||||
t.Fatalf("password hash was not updated: %v", err)
|
||||
}
|
||||
version, err := db.GetValue(ctx, "SELECT auth_version FROM im_user_security WHERE user_id=?", userID)
|
||||
if err != nil || version.Int() != 2 {
|
||||
t.Fatalf("unexpected auth version %d: %v", version.Int(), err)
|
||||
}
|
||||
events, err := db.GetValue(ctx, `SELECT COUNT(*) FROM im_business_events_outbox
|
||||
WHERE target=? AND event_type='security.password_reset' AND status='pending'`, userID)
|
||||
if err != nil || events.Int() != 1 {
|
||||
t.Fatalf("password reset event not written: count=%d err=%v", events.Int(), err)
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,164 @@
|
||||
// Package sys
|
||||
// @Link https://github.com/bufanyun/hotgo
|
||||
// @Copyright Copyright (c) 2026 HotGo
|
||||
// @Author Ms <133814250@qq.com>
|
||||
// @License https://github.com/bufanyun/hotgo/blob/master/LICENSE
|
||||
package sys
|
||||
|
||||
import (
|
||||
"context"
|
||||
"hotgo/internal/consts"
|
||||
"hotgo/internal/library/imtenant"
|
||||
"hotgo/internal/model/input/sysin"
|
||||
"hotgo/internal/service"
|
||||
|
||||
"github.com/gogf/gf/v2/database/gdb"
|
||||
"github.com/gogf/gf/v2/errors/gerror"
|
||||
"github.com/gogf/gf/v2/frame/g"
|
||||
"github.com/gogf/gf/v2/os/gtime"
|
||||
)
|
||||
|
||||
type sSysImRealname struct{}
|
||||
|
||||
func NewSysImRealname() *sSysImRealname {
|
||||
return &sSysImRealname{}
|
||||
}
|
||||
|
||||
func init() {
|
||||
service.RegisterSysImRealname(NewSysImRealname())
|
||||
}
|
||||
|
||||
// List 获取IM实名审核列表
|
||||
func (s *sSysImRealname) List(ctx context.Context, in *sysin.ImRealnameListInp) (list []*sysin.ImRealnameListModel, totalCount int, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
db, tenant, err := imtenant.DB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
mod := s.model(ctx, db)
|
||||
mod = s.applyWhere(mod, in)
|
||||
mod = mod.Page(in.Page, in.PerPage).OrderDesc("id")
|
||||
|
||||
if err = mod.ScanAndCount(&list, &totalCount, false); err != nil {
|
||||
err = gerror.Wrap(err, "获取IM实名审核列表失败，请稍后重试！")
|
||||
return
|
||||
}
|
||||
for _, item := range list {
|
||||
item.TenantId = tenant.Id
|
||||
item.TenantName = tenant.Name
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
func (s *sSysImRealname) model(ctx context.Context, db gdb.DB) *gdb.Model {
|
||||
return db.Model("im_realname_verifications").Safe().Ctx(ctx).
|
||||
Fields(
|
||||
"id",
|
||||
"user_id",
|
||||
"submission_id",
|
||||
"status",
|
||||
"id_type",
|
||||
"masked_name",
|
||||
"masked_id_number",
|
||||
"review_reason",
|
||||
"verified_at",
|
||||
"created_at",
|
||||
"updated_at",
|
||||
)
|
||||
}
|
||||
|
||||
func (s *sSysImRealname) applyWhere(mod *gdb.Model, in *sysin.ImRealnameListInp) *gdb.Model {
|
||||
if in.UserId > 0 {
|
||||
mod = mod.Where("user_id", in.UserId)
|
||||
}
|
||||
if in.SubmissionId != "" {
|
||||
mod = mod.WhereLike("submission_id", "%"+in.SubmissionId+"%")
|
||||
}
|
||||
if in.Status != "" {
|
||||
mod = mod.Where("status", in.Status)
|
||||
}
|
||||
if len(in.CreatedAt) == 2 {
|
||||
mod = mod.WhereBetween("created_at", in.CreatedAt[0], in.CreatedAt[1])
|
||||
}
|
||||
return mod
|
||||
}
|
||||
|
||||
// View 获取IM实名审核指定信息
|
||||
func (s *sSysImRealname) View(ctx context.Context, in *sysin.ImRealnameViewInp) (res *sysin.ImRealnameViewModel, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
db, tenant, err := imtenant.DB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
err = db.Model("im_realname_verifications").Safe().Ctx(ctx).
|
||||
Fields(
|
||||
"id",
|
||||
"user_id",
|
||||
"submission_id",
|
||||
"status",
|
||||
"id_type",
|
||||
"masked_name",
|
||||
"masked_id_number",
|
||||
"id_number_hash",
|
||||
"review_reason",
|
||||
"verified_at",
|
||||
"created_at",
|
||||
"updated_at",
|
||||
).
|
||||
Where("id", in.Id).
|
||||
Scan(&res)
|
||||
if err != nil {
|
||||
return nil, gerror.Wrap(err, "获取IM实名审核信息失败，请稍后重试！")
|
||||
}
|
||||
if res == nil {
|
||||
return nil, nil
|
||||
}
|
||||
res.TenantId = tenant.Id
|
||||
res.TenantName = tenant.Name
|
||||
return
|
||||
}
|
||||
|
||||
// Review 审核IM实名
|
||||
func (s *sSysImRealname) Review(ctx context.Context, in *sysin.ImRealnameReviewInp) (err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
db, _, err := imtenant.DB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
data := g.Map{
|
||||
"status": in.Status,
|
||||
"review_reason": in.ReviewReason,
|
||||
"updated_at": gtime.Now(),
|
||||
}
|
||||
if in.Status == consts.ImRealnameStatusVerified {
|
||||
data["verified_at"] = gtime.Now()
|
||||
} else {
|
||||
data["verified_at"] = nil
|
||||
}
|
||||
|
||||
result, err := db.Model("im_realname_verifications").Safe().Ctx(ctx).
|
||||
Where("id", in.Id).
|
||||
Where("status", consts.ImRealnameStatusPending).
|
||||
Data(data).
|
||||
Update()
|
||||
if err != nil {
|
||||
return gerror.Wrap(err, "审核IM实名失败，请稍后重试！")
|
||||
}
|
||||
affected, err := result.RowsAffected()
|
||||
if err != nil {
|
||||
return gerror.Wrap(err, "读取审核结果失败，请稍后重试！")
|
||||
}
|
||||
if affected == 0 {
|
||||
return gerror.New("当前记录不是待审核状态，不能重复审核")
|
||||
}
|
||||
return
|
||||
}
|
||||
@@ -0,0 +1,116 @@
|
||||
package sys
|
||||
|
||||
import (
|
||||
"context"
|
||||
"hotgo/internal/dao"
|
||||
"hotgo/internal/library/contexts"
|
||||
"hotgo/internal/model/input/sysin"
|
||||
"hotgo/internal/service"
|
||||
|
||||
"github.com/gogf/gf/v2/database/gdb"
|
||||
"github.com/gogf/gf/v2/errors/gerror"
|
||||
"github.com/gogf/gf/v2/frame/g"
|
||||
"github.com/gogf/gf/v2/os/gtime"
|
||||
)
|
||||
|
||||
const (
|
||||
imRegistrationConfigGroup = "im"
|
||||
imRegistrationSmsKey = "register_sms_enabled"
|
||||
)
|
||||
|
||||
type sSysImRegistration struct{}
|
||||
|
||||
func NewSysImRegistration() *sSysImRegistration {
|
||||
return &sSysImRegistration{}
|
||||
}
|
||||
|
||||
func init() {
|
||||
service.RegisterSysImRegistration(NewSysImRegistration())
|
||||
}
|
||||
|
||||
func (s *sSysImRegistration) GetConfig(ctx context.Context) (res *sysin.ImRegistrationConfigModel, err error) {
|
||||
if err = s.verifySuper(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
return s.getConfig(ctx)
|
||||
}
|
||||
|
||||
func (s *sSysImRegistration) UpdateConfig(ctx context.Context, in *sysin.ImRegistrationConfigUpdateInp) (err error) {
|
||||
if err = s.verifySuper(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
old, err := s.getConfig(ctx)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
value := "0"
|
||||
if in.RegisterSmsEnabled {
|
||||
value = "1"
|
||||
}
|
||||
_, err = dao.SysConfig.Ctx(ctx).
|
||||
Where(dao.SysConfig.Columns().Group, imRegistrationConfigGroup).
|
||||
Where(dao.SysConfig.Columns().Key, imRegistrationSmsKey).
|
||||
Data(g.Map{
|
||||
dao.SysConfig.Columns().Value: value,
|
||||
dao.SysConfig.Columns().UpdatedAt: gtime.Now(),
|
||||
}).
|
||||
Update()
|
||||
if err != nil {
|
||||
return gerror.Wrap(err, "更新IM注册短信开关失败")
|
||||
}
|
||||
_ = writeImAdminAudit(ctx, 0, "registration_sms_config_update", "config", 0, "success", g.Map{
|
||||
"old": old.RegisterSmsEnabled,
|
||||
"new": in.RegisterSmsEnabled,
|
||||
})
|
||||
return
|
||||
}
|
||||
|
||||
func (s *sSysImRegistration) getConfig(ctx context.Context) (res *sysin.ImRegistrationConfigModel, err error) {
|
||||
var record gdb.Record
|
||||
record, err = dao.SysConfig.Ctx(ctx).
|
||||
Where(dao.SysConfig.Columns().Group, imRegistrationConfigGroup).
|
||||
Where(dao.SysConfig.Columns().Key, imRegistrationSmsKey).
|
||||
Where(dao.SysConfig.Columns().Status, 1).
|
||||
One()
|
||||
if err != nil {
|
||||
return nil, gerror.Wrap(err, "获取IM注册短信开关失败")
|
||||
}
|
||||
if record.IsEmpty() {
|
||||
if err = s.seedConfig(ctx); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return s.getConfig(ctx)
|
||||
}
|
||||
return &sysin.ImRegistrationConfigModel{
|
||||
RegisterSmsEnabled: record[dao.SysConfig.Columns().Value].String() == "1",
|
||||
UpdatedAt: record[dao.SysConfig.Columns().UpdatedAt].GTime(),
|
||||
}, nil
|
||||
}
|
||||
|
||||
func (s *sSysImRegistration) seedConfig(ctx context.Context) (err error) {
|
||||
_, err = dao.SysConfig.Ctx(ctx).Data(g.Map{
|
||||
dao.SysConfig.Columns().Group: imRegistrationConfigGroup,
|
||||
dao.SysConfig.Columns().Name: "注册短信发送",
|
||||
dao.SysConfig.Columns().Type: "bool",
|
||||
dao.SysConfig.Columns().Key: imRegistrationSmsKey,
|
||||
dao.SysConfig.Columns().Value: "1",
|
||||
dao.SysConfig.Columns().DefaultValue: "1",
|
||||
dao.SysConfig.Columns().Sort: 10,
|
||||
dao.SysConfig.Columns().Tip: "控制 IM 注册验证码是否真实发送",
|
||||
dao.SysConfig.Columns().IsDefault: 1,
|
||||
dao.SysConfig.Columns().Status: 1,
|
||||
dao.SysConfig.Columns().CreatedAt: gtime.Now(),
|
||||
dao.SysConfig.Columns().UpdatedAt: gtime.Now(),
|
||||
}).Insert()
|
||||
if err != nil {
|
||||
return gerror.Wrap(err, "初始化IM注册短信开关失败")
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
func (s *sSysImRegistration) verifySuper(ctx context.Context) error {
|
||||
if !service.AdminMember().VerifySuperId(ctx, contexts.GetUserId(ctx)) {
|
||||
return gerror.New("仅平台超级管理员可操作IM注册配置")
|
||||
}
|
||||
return nil
|
||||
}
|
||||
@@ -0,0 +1,274 @@
|
||||
// Package sys
|
||||
// @Link https://github.com/bufanyun/hotgo
|
||||
// @Copyright Copyright (c) 2026 HotGo
|
||||
// @Author Ms <133814250@qq.com>
|
||||
// @License https://github.com/bufanyun/hotgo/blob/master/LICENSE
|
||||
package sys
|
||||
|
||||
import (
|
||||
"context"
|
||||
"hotgo/internal/dao"
|
||||
"hotgo/internal/library/contexts"
|
||||
"hotgo/internal/library/hgorm/handler"
|
||||
"hotgo/internal/library/hgorm/hook"
|
||||
"hotgo/internal/model/entity"
|
||||
"hotgo/internal/model/input/sysin"
|
||||
"hotgo/internal/service"
|
||||
|
||||
"github.com/gogf/gf/v2/database/gdb"
|
||||
"github.com/gogf/gf/v2/errors/gerror"
|
||||
"github.com/gogf/gf/v2/frame/g"
|
||||
)
|
||||
|
||||
type sSysImTenant struct{}
|
||||
|
||||
const imRegistryDbGroup = "imRegistry"
|
||||
|
||||
func NewSysImTenant() *sSysImTenant {
|
||||
return &sSysImTenant{}
|
||||
}
|
||||
|
||||
func init() {
|
||||
service.RegisterSysImTenant(NewSysImTenant())
|
||||
}
|
||||
|
||||
// Model IM租户ORM模型
|
||||
func (s *sSysImTenant) Model(ctx context.Context, option ...*handler.Option) *gdb.Model {
|
||||
return handler.Model(g.DB(imRegistryDbGroup).Model(dao.ImTenant.Table()).Safe().Ctx(ctx), option...)
|
||||
}
|
||||
|
||||
func (s *sSysImTenant) configModel(ctx context.Context) *gdb.Model {
|
||||
return g.DB(imRegistryDbGroup).Model(dao.ImTenantConfig.Table()).Safe().Ctx(ctx)
|
||||
}
|
||||
|
||||
// List 获取IM租户列表
|
||||
func (s *sSysImTenant) List(ctx context.Context, in *sysin.ImTenantListInp) (list []*sysin.ImTenantListModel, totalCount int, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
mod := s.Model(ctx).Fields(
|
||||
dao.ImTenant.Columns().Id,
|
||||
dao.ImTenant.Columns().Code,
|
||||
dao.ImTenant.Columns().Name,
|
||||
dao.ImTenant.Columns().TenantDesc,
|
||||
dao.ImTenant.Columns().DbName,
|
||||
dao.ImTenant.Columns().State,
|
||||
dao.ImTenant.Columns().CreatedBy,
|
||||
dao.ImTenant.Columns().UpdatedBy,
|
||||
dao.ImTenant.Columns().CreatedAt,
|
||||
dao.ImTenant.Columns().UpdatedAt,
|
||||
)
|
||||
|
||||
if in.Id > 0 {
|
||||
mod = mod.Where(dao.ImTenant.Columns().Id, in.Id)
|
||||
}
|
||||
if in.Code != "" {
|
||||
mod = mod.WhereLike(dao.ImTenant.Columns().Code, "%"+in.Code+"%")
|
||||
}
|
||||
if in.Name != "" {
|
||||
mod = mod.WhereLike(dao.ImTenant.Columns().Name, "%"+in.Name+"%")
|
||||
}
|
||||
if in.DbName != "" {
|
||||
mod = mod.WhereLike(dao.ImTenant.Columns().DbName, "%"+in.DbName+"%")
|
||||
}
|
||||
if in.State != nil {
|
||||
mod = mod.Where(dao.ImTenant.Columns().State, *in.State)
|
||||
}
|
||||
if len(in.CreatedAt) == 2 {
|
||||
mod = mod.WhereBetween(dao.ImTenant.Columns().CreatedAt, in.CreatedAt[0], in.CreatedAt[1])
|
||||
}
|
||||
|
||||
mod = mod.Page(in.Page, in.PerPage).
|
||||
OrderDesc(dao.ImTenant.Columns().Id).
|
||||
Hook(hook.MemberSummary)
|
||||
|
||||
if err = mod.ScanAndCount(&list, &totalCount, false); err != nil {
|
||||
err = gerror.Wrap(err, "获取IM租户列表失败，请稍后重试！")
|
||||
return
|
||||
}
|
||||
if len(list) == 0 {
|
||||
return
|
||||
}
|
||||
|
||||
if err = s.fillListConfig(ctx, list); err != nil {
|
||||
return
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
func (s *sSysImTenant) fillListConfig(ctx context.Context, list []*sysin.ImTenantListModel) (err error) {
|
||||
ids := make([]int64, 0, len(list))
|
||||
for _, item := range list {
|
||||
ids = append(ids, item.Id)
|
||||
}
|
||||
|
||||
var configs []*entity.ImTenantConfig
|
||||
if err = s.configModel(ctx).
|
||||
WhereIn(dao.ImTenantConfig.Columns().TenantId, ids).
|
||||
Scan(&configs); err != nil {
|
||||
return gerror.Wrap(err, "获取IM租户配置失败，请稍后重试！")
|
||||
}
|
||||
configMap := make(map[int64]*entity.ImTenantConfig, len(configs))
|
||||
for _, item := range configs {
|
||||
configMap[item.TenantId] = item
|
||||
}
|
||||
|
||||
var tenants []*entity.ImTenant
|
||||
if err = s.Model(ctx).
|
||||
Fields(dao.ImTenant.Columns().Id, dao.ImTenant.Columns().DbDsn).
|
||||
WhereIn(dao.ImTenant.Columns().Id, ids).
|
||||
Scan(&tenants); err != nil {
|
||||
return gerror.Wrap(err, "获取IM租户连接配置失败，请稍后重试！")
|
||||
}
|
||||
dsnMap := make(map[int64]string, len(tenants))
|
||||
for _, item := range tenants {
|
||||
dsnMap[item.Id] = item.DbDsn
|
||||
}
|
||||
|
||||
for _, item := range list {
|
||||
if conf, ok := configMap[item.Id]; ok {
|
||||
item.MaxUsers = conf.MaxUsers
|
||||
item.MaxGroups = conf.MaxGroups
|
||||
item.MaxGroupMembers = conf.MaxGroupMembers
|
||||
}
|
||||
item.DbDsnConfigured = dsnMap[item.Id] != ""
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
// Edit 修改/新增IM租户
|
||||
func (s *sSysImTenant) Edit(ctx context.Context, in *sysin.ImTenantEditInp) (err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
return g.DB(imRegistryDbGroup).Transaction(ctx, func(ctx context.Context, tx gdb.TX) (err error) {
|
||||
if err = s.checkCodeUnique(ctx, in.Id, in.Code); err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
userId := contexts.GetUserId(ctx)
|
||||
if in.Id > 0 {
|
||||
in.UpdatedBy = userId
|
||||
if _, err = s.Model(ctx).
|
||||
Fields(sysin.ImTenantUpdateFields{}).
|
||||
WherePri(in.Id).Data(in).Update(); err != nil {
|
||||
return gerror.Wrap(err, "修改IM租户失败，请稍后重试！")
|
||||
}
|
||||
return s.saveConfig(ctx, in.Id, in.MaxUsers, in.MaxGroups, in.MaxGroupMembers, userId)
|
||||
}
|
||||
|
||||
in.CreatedBy = userId
|
||||
id, err := s.Model(ctx, &handler.Option{FilterAuth: false}).
|
||||
Fields(sysin.ImTenantInsertFields{}).
|
||||
Data(in).InsertAndGetId()
|
||||
if err != nil {
|
||||
return gerror.Wrap(err, "新增IM租户失败，请稍后重试！")
|
||||
}
|
||||
return s.saveConfig(ctx, id, in.MaxUsers, in.MaxGroups, in.MaxGroupMembers, userId)
|
||||
})
|
||||
}
|
||||
|
||||
func (s *sSysImTenant) checkCodeUnique(ctx context.Context, id int64, code string) (err error) {
|
||||
mod := s.Model(ctx).Where(dao.ImTenant.Columns().Code, code)
|
||||
if id > 0 {
|
||||
mod = mod.Where(dao.ImTenant.Columns().Id+"<>?", id)
|
||||
}
|
||||
count, err := mod.Count()
|
||||
if err != nil {
|
||||
return gerror.Wrap(err, "检查IM租户编码失败，请稍后重试！")
|
||||
}
|
||||
if count > 0 {
|
||||
return gerror.New("租户编码已存在")
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
func (s *sSysImTenant) saveConfig(ctx context.Context, tenantId int64, maxUsers uint64, maxGroups uint64, maxGroupMembers uint, userId int64) (err error) {
|
||||
var conf *entity.ImTenantConfig
|
||||
if err = s.configModel(ctx).
|
||||
Where(dao.ImTenantConfig.Columns().TenantId, tenantId).
|
||||
Scan(&conf); err != nil {
|
||||
return gerror.Wrap(err, "获取IM租户配置失败，请稍后重试！")
|
||||
}
|
||||
|
||||
data := g.Map{
|
||||
dao.ImTenantConfig.Columns().MaxUsers: maxUsers,
|
||||
dao.ImTenantConfig.Columns().MaxGroups: maxGroups,
|
||||
dao.ImTenantConfig.Columns().MaxGroupMembers: maxGroupMembers,
|
||||
}
|
||||
if conf != nil && conf.Id > 0 {
|
||||
data[dao.ImTenantConfig.Columns().UpdatedBy] = userId
|
||||
if _, err = s.configModel(ctx).
|
||||
Fields(
|
||||
dao.ImTenantConfig.Columns().MaxUsers,
|
||||
dao.ImTenantConfig.Columns().MaxGroups,
|
||||
dao.ImTenantConfig.Columns().MaxGroupMembers,
|
||||
dao.ImTenantConfig.Columns().UpdatedBy,
|
||||
).
|
||||
WherePri(conf.Id).Data(data).Update(); err != nil {
|
||||
return gerror.Wrap(err, "修改IM租户配置失败，请稍后重试！")
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
data[dao.ImTenantConfig.Columns().TenantId] = tenantId
|
||||
data[dao.ImTenantConfig.Columns().CreatedBy] = userId
|
||||
if _, err = s.configModel(ctx).
|
||||
Fields(
|
||||
dao.ImTenantConfig.Columns().TenantId,
|
||||
dao.ImTenantConfig.Columns().MaxUsers,
|
||||
dao.ImTenantConfig.Columns().MaxGroups,
|
||||
dao.ImTenantConfig.Columns().MaxGroupMembers,
|
||||
dao.ImTenantConfig.Columns().CreatedBy,
|
||||
).
|
||||
Data(data).Insert(); err != nil {
|
||||
return gerror.Wrap(err, "新增IM租户配置失败，请稍后重试！")
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
// View 获取IM租户指定信息
|
||||
func (s *sSysImTenant) View(ctx context.Context, in *sysin.ImTenantViewInp) (res *sysin.ImTenantViewModel, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
if err = s.Model(ctx).WherePri(in.Id).Hook(hook.MemberSummary).Scan(&res); err != nil {
|
||||
err = gerror.Wrap(err, "获取IM租户信息失败，请稍后重试！")
|
||||
return
|
||||
}
|
||||
if res == nil {
|
||||
return
|
||||
}
|
||||
|
||||
var conf *entity.ImTenantConfig
|
||||
if err = s.configModel(ctx).
|
||||
Where(dao.ImTenantConfig.Columns().TenantId, in.Id).
|
||||
Scan(&conf); err != nil {
|
||||
err = gerror.Wrap(err, "获取IM租户配置失败，请稍后重试！")
|
||||
return
|
||||
}
|
||||
if conf != nil {
|
||||
res.MaxUsers = conf.MaxUsers
|
||||
res.MaxGroups = conf.MaxGroups
|
||||
res.MaxGroupMembers = conf.MaxGroupMembers
|
||||
}
|
||||
res.DbDsnConfigured = res.DbDsn != ""
|
||||
return
|
||||
}
|
||||
|
||||
// Status 更新IM租户状态
|
||||
func (s *sSysImTenant) Status(ctx context.Context, in *sysin.ImTenantStatusInp) (err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
if _, err = s.Model(ctx).WherePri(in.Id).Data(g.Map{
|
||||
dao.ImTenant.Columns().State: in.State,
|
||||
dao.ImTenant.Columns().UpdatedBy: contexts.GetUserId(ctx),
|
||||
}).Update(); err != nil {
|
||||
err = gerror.Wrap(err, "更新IM租户状态失败，请稍后重试！")
|
||||
return
|
||||
}
|
||||
return
|
||||
}
|
||||
@@ -0,0 +1,315 @@
|
||||
// Package sys
|
||||
// @Link https://github.com/bufanyun/hotgo
|
||||
// @Copyright Copyright (c) 2026 HotGo
|
||||
// @Author Ms <133814250@qq.com>
|
||||
// @License https://github.com/bufanyun/hotgo/blob/master/LICENSE
|
||||
package sys
|
||||
|
||||
import (
|
||||
"context"
|
||||
"crypto/sha256"
|
||||
"encoding/hex"
|
||||
"encoding/json"
|
||||
"fmt"
|
||||
"hotgo/internal/library/imtenant"
|
||||
"hotgo/internal/model/input/sysin"
|
||||
"hotgo/internal/service"
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
"github.com/gogf/gf/v2/database/gdb"
|
||||
"github.com/gogf/gf/v2/errors/gerror"
|
||||
"github.com/gogf/gf/v2/os/gctx"
|
||||
"github.com/gogf/gf/v2/util/guid"
|
||||
"golang.org/x/crypto/bcrypt"
|
||||
)
|
||||
|
||||
type sSysImUser struct{}
|
||||
|
||||
func NewSysImUser() *sSysImUser {
|
||||
return &sSysImUser{}
|
||||
}
|
||||
|
||||
func init() {
|
||||
service.RegisterSysImUser(NewSysImUser())
|
||||
}
|
||||
|
||||
// List 获取IM用户列表
|
||||
func (s *sSysImUser) List(ctx context.Context, in *sysin.ImUserListInp) (list []*sysin.ImUserListModel, totalCount int, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
scope, err := resolveImAdminScope(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
db, tenant, err := imtenant.DB(ctx, scope.TenantId)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
mod := s.listModel(ctx, db)
|
||||
mod = s.applyListWhere(mod, in)
|
||||
mod = mod.Page(in.Page, in.PerPage).OrderDesc("u.id")
|
||||
|
||||
if err = mod.ScanAndCount(&list, &totalCount, false); err != nil {
|
||||
err = gerror.Wrap(err, "获取IM用户列表失败，请稍后重试！")
|
||||
return
|
||||
}
|
||||
if len(list) == 0 {
|
||||
return
|
||||
}
|
||||
|
||||
for _, item := range list {
|
||||
item.TenantId = tenant.Id
|
||||
item.TenantName = tenant.Name
|
||||
}
|
||||
if err = s.fillAuthAndCredentials(ctx, db, list); err != nil {
|
||||
return
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
func (s *sSysImUser) listModel(ctx context.Context, db gdb.DB) *gdb.Model {
|
||||
return db.Model("im_users u").Safe().Ctx(ctx).
|
||||
LeftJoin("im_user_profiles up", "up.user_id = u.id").
|
||||
LeftJoin("im_user_security us", "us.user_id = u.id").
|
||||
Fields(
|
||||
"CAST(u.id AS CHAR) user_id",
|
||||
"u.username",
|
||||
"COALESCE(u.phone, '') phone",
|
||||
"u.state",
|
||||
"u.lastseen last_seen",
|
||||
"u.useragent user_agent",
|
||||
"u.createdat created_at",
|
||||
"u.updatedat updated_at",
|
||||
"up.nickname",
|
||||
"up.public_account",
|
||||
"up.gender",
|
||||
"up.region",
|
||||
"us.auth_version",
|
||||
"us.password_updated_at",
|
||||
)
|
||||
}
|
||||
|
||||
func (s *sSysImUser) applyListWhere(mod *gdb.Model, in *sysin.ImUserListInp) *gdb.Model {
|
||||
if userId, _ := sysin.ParseOptionalInt64(in.UserId); userId > 0 {
|
||||
mod = mod.Where("u.id", userId)
|
||||
}
|
||||
if in.Nickname != "" {
|
||||
mod = mod.WhereLike("up.nickname", "%"+in.Nickname+"%")
|
||||
}
|
||||
if in.AuthName != "" {
|
||||
mod = mod.Where("u.username = ? OR u.phone = ? OR up.email = ?", in.AuthName, in.AuthName, in.AuthName)
|
||||
}
|
||||
if in.State != nil {
|
||||
mod = mod.Where("u.state", *in.State)
|
||||
}
|
||||
if len(in.CreatedAt) == 2 {
|
||||
mod = mod.WhereBetween("u.createdat", in.CreatedAt[0], in.CreatedAt[1])
|
||||
}
|
||||
if len(in.LastSeen) == 2 {
|
||||
mod = mod.WhereBetween("u.lastseen", in.LastSeen[0], in.LastSeen[1])
|
||||
}
|
||||
return mod
|
||||
}
|
||||
|
||||
func (s *sSysImUser) fillAuthAndCredentials(ctx context.Context, db gdb.DB, list []*sysin.ImUserListModel) (err error) {
|
||||
ids := make([]int64, 0, len(list))
|
||||
userMap := make(map[int64]*sysin.ImUserListModel, len(list))
|
||||
for _, item := range list {
|
||||
userId, parseErr := sysin.ParseOptionalInt64(item.UserId)
|
||||
if parseErr != nil {
|
||||
return parseErr
|
||||
}
|
||||
ids = append(ids, userId)
|
||||
userMap[userId] = item
|
||||
}
|
||||
|
||||
credentialRows, err := db.Model("im_credentials").Safe().Ctx(ctx).
|
||||
Fields("userid", "method", "value", "done").
|
||||
WhereIn("userid", ids).
|
||||
WhereNull("deletedat").
|
||||
OrderAsc("method").OrderAsc("value").
|
||||
All()
|
||||
if err != nil {
|
||||
return gerror.Wrap(err, "获取IM用户凭证失败，请稍后重试！")
|
||||
}
|
||||
credentialMap := make(map[int64][]string)
|
||||
for _, row := range credentialRows {
|
||||
userId := row["userid"].Int64()
|
||||
method := row["method"].String()
|
||||
value := row["value"].String()
|
||||
done := row["done"].Bool()
|
||||
if !done {
|
||||
value += "(未验证)"
|
||||
}
|
||||
credentialMap[userId] = append(credentialMap[userId], method+":"+value)
|
||||
}
|
||||
|
||||
for userId, item := range userMap {
|
||||
item.AuthNames = item.Username
|
||||
if item.Phone != "" && item.Phone != item.Username {
|
||||
item.AuthNames += ", " + item.Phone
|
||||
}
|
||||
item.Credentials = strings.Join(credentialMap[userId], ", ")
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
// View 获取IM用户指定信息
|
||||
func (s *sSysImUser) View(ctx context.Context, in *sysin.ImUserViewInp) (res *sysin.ImUserViewModel, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
scope, err := resolveImAdminScope(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
db, tenant, err := imtenant.DB(ctx, scope.TenantId)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
userId, err := sysin.ParseOptionalInt64(in.UserId)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
fields := append(s.viewFields(), "u.access access_json", "u.public profile_json", "u.trusted trusted_json")
|
||||
err = db.Model("im_users u").Safe().Ctx(ctx).
|
||||
LeftJoin("im_user_profiles up", "up.user_id = u.id").
|
||||
LeftJoin("im_user_security us", "us.user_id = u.id").
|
||||
Fields(fields...).
|
||||
Where("u.id", userId).
|
||||
Scan(&res)
|
||||
if err != nil {
|
||||
return nil, gerror.Wrap(err, "获取IM用户信息失败，请稍后重试！")
|
||||
}
|
||||
if res == nil {
|
||||
return nil, nil
|
||||
}
|
||||
|
||||
res.TenantId = tenant.Id
|
||||
res.TenantName = tenant.Name
|
||||
list := []*sysin.ImUserListModel{&res.ImUserListModel}
|
||||
if err = s.fillAuthAndCredentials(ctx, db, list); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
func (s *sSysImUser) viewFields() []interface{} {
|
||||
return []interface{}{
|
||||
"CAST(u.id AS CHAR) user_id",
|
||||
"u.username",
|
||||
"COALESCE(u.phone, '') phone",
|
||||
"u.state",
|
||||
"u.lastseen last_seen",
|
||||
"u.useragent user_agent",
|
||||
"u.createdat created_at",
|
||||
"u.updatedat updated_at",
|
||||
"up.nickname",
|
||||
"up.public_account",
|
||||
"up.gender",
|
||||
"up.region",
|
||||
"up.signature",
|
||||
"up.avatar_file_id",
|
||||
"CAST(up.birth_date AS CHAR) birth_date",
|
||||
"up.version profile_version",
|
||||
"us.auth_version",
|
||||
"us.password_updated_at",
|
||||
}
|
||||
}
|
||||
|
||||
func (s *sSysImUser) ResetPassword(ctx context.Context, in *sysin.ImUserPasswordResetInp) (err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
scope, err := resolveImAdminScope(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
userId, err := sysin.ParseOptionalInt64(in.UserId)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
db, _, err := imtenant.DB(ctx, scope.TenantId)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
err = resetIMUserPassword(ctx, db, scope, userId, in.NewPassword)
|
||||
result := "success"
|
||||
if err != nil {
|
||||
result = "failed"
|
||||
}
|
||||
_ = writeImAdminAudit(ctx, scope.TenantId, "user_password_reset", "user", userId, result, nil)
|
||||
return err
|
||||
}
|
||||
|
||||
func resetIMUserPassword(ctx context.Context, db gdb.DB, scope imAdminScope, userId int64, newPassword string) error {
|
||||
passwordHash, err := bcrypt.GenerateFromPassword([]byte(newPassword), bcrypt.DefaultCost)
|
||||
if err != nil {
|
||||
return gerror.Wrap(err, "生成密码摘要失败")
|
||||
}
|
||||
securityId, err := imtenant.NextSnowflakeID(ctx)
|
||||
if err != nil {
|
||||
return gerror.Wrap(err, "生成安全记录ID失败")
|
||||
}
|
||||
eventId, err := imtenant.NextSnowflakeID(ctx)
|
||||
if err != nil {
|
||||
return gerror.Wrap(err, "生成安全事件ID失败")
|
||||
}
|
||||
now := time.Now().UTC().Round(time.Millisecond)
|
||||
requestId := scope.RequestId
|
||||
if requestId == "" {
|
||||
requestId = gctx.CtxId(ctx)
|
||||
}
|
||||
if requestId == "" {
|
||||
requestId = guid.S()
|
||||
}
|
||||
eventKeyBytes := sha256.Sum256([]byte(fmt.Sprintf("password-reset:%d:%d:%s", scope.TenantId, userId, requestId)))
|
||||
eventKey := hex.EncodeToString(eventKeyBytes[:])
|
||||
payload, _ := json.Marshal(map[string]any{
|
||||
"user_id": userId, "operator_id": scope.OperatorId, "request_id": requestId,
|
||||
})
|
||||
return db.Transaction(ctx, func(ctx context.Context, tx gdb.TX) error {
|
||||
exists, txErr := tx.GetValue("SELECT EXISTS(SELECT 1 FROM im_users WHERE id=? LIMIT 1)", userId)
|
||||
if txErr != nil {
|
||||
return txErr
|
||||
}
|
||||
if !exists.Bool() {
|
||||
return gerror.New("IM用户不存在")
|
||||
}
|
||||
result, txErr := tx.Exec("UPDATE im_auth SET secret=? WHERE userid=?", passwordHash, userId)
|
||||
if txErr != nil {
|
||||
return txErr
|
||||
}
|
||||
if affected, _ := result.RowsAffected(); affected == 0 {
|
||||
return gerror.New("用户认证记录不存在")
|
||||
}
|
||||
if _, txErr = tx.Exec(`INSERT INTO im_user_security
|
||||
(id,user_id,auth_version,password_updated_at,created_at,updated_at)
|
||||
VALUES(?,?,?,?,?,?)
|
||||
ON DUPLICATE KEY UPDATE auth_version=auth_version+1,
|
||||
password_updated_at=VALUES(password_updated_at),updated_at=VALUES(updated_at)`,
|
||||
securityId, userId, 2, now, now, now); txErr != nil {
|
||||
return txErr
|
||||
}
|
||||
version, txErr := tx.GetValue("SELECT auth_version FROM im_user_security WHERE user_id=?", userId)
|
||||
if txErr != nil {
|
||||
return txErr
|
||||
}
|
||||
var eventPayload map[string]any
|
||||
_ = json.Unmarshal(payload, &eventPayload)
|
||||
eventPayload["auth_version"] = version.Int()
|
||||
payload, _ = json.Marshal(eventPayload)
|
||||
_, txErr = tx.Exec(`INSERT INTO im_business_events_outbox
|
||||
(id,event_id,target_type,target,actor_user_id,event_type,payload,status,created_at,updated_at)
|
||||
VALUES(?,?,?,?,?,?,CAST(? AS JSON),'pending',?,?)
|
||||
ON DUPLICATE KEY UPDATE event_id=VALUES(event_id)`, eventId, eventKey, "user",
|
||||
fmt.Sprintf("%d", userId), 0, "security.password_reset", string(payload), now, now)
|
||||
return txErr
|
||||
})
|
||||
}
|
||||
@@ -0,0 +1,212 @@
|
||||
// Package sys
|
||||
// @Link https://github.com/bufanyun/hotgo
|
||||
// @Copyright Copyright (c) 2026 HotGo
|
||||
// @Author Ms <133814250@qq.com>
|
||||
// @License https://github.com/bufanyun/hotgo/blob/master/LICENSE
|
||||
package sys
|
||||
|
||||
import (
|
||||
"context"
|
||||
"hotgo/internal/library/imtenant"
|
||||
"hotgo/internal/model/input/sysin"
|
||||
"hotgo/internal/service"
|
||||
|
||||
"github.com/gogf/gf/v2/database/gdb"
|
||||
"github.com/gogf/gf/v2/errors/gerror"
|
||||
"github.com/gogf/gf/v2/frame/g"
|
||||
"github.com/gogf/gf/v2/os/gtime"
|
||||
)
|
||||
|
||||
type sSysImWorkOrder struct{}
|
||||
|
||||
func NewSysImWorkOrder() *sSysImWorkOrder {
|
||||
return &sSysImWorkOrder{}
|
||||
}
|
||||
|
||||
func init() {
|
||||
service.RegisterSysImWorkOrder(NewSysImWorkOrder())
|
||||
}
|
||||
|
||||
// List 获取IM举报反馈工单列表
|
||||
func (s *sSysImWorkOrder) List(ctx context.Context, in *sysin.ImWorkOrderListInp) (list []*sysin.ImWorkOrderListModel, totalCount int, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
db, tenant, err := imtenant.DB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
mod := s.listModel(ctx, db, in.Type)
|
||||
mod = s.applyWhere(mod, in)
|
||||
mod = mod.Page(in.Page, in.PerPage).OrderDesc("created_at").OrderDesc("id")
|
||||
|
||||
if err = mod.ScanAndCount(&list, &totalCount, false); err != nil {
|
||||
err = gerror.Wrap(err, "获取IM举报反馈工单列表失败，请稍后重试！")
|
||||
return
|
||||
}
|
||||
for _, item := range list {
|
||||
item.TenantId = tenant.Id
|
||||
item.TenantName = tenant.Name
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
func (s *sSysImWorkOrder) listModel(ctx context.Context, db gdb.DB, typ string) *gdb.Model {
|
||||
if typ == sysin.ImWorkOrderTypeAbuse {
|
||||
return db.Model("im_abuse_reports").Safe().Ctx(ctx).Fields(s.abuseListFields()...)
|
||||
}
|
||||
return db.Model("im_feedback_submissions").Safe().Ctx(ctx).Fields(s.feedbackListFields()...)
|
||||
}
|
||||
|
||||
func (s *sSysImWorkOrder) abuseListFields() []interface{} {
|
||||
return []interface{}{
|
||||
"'abuse' type",
|
||||
"id",
|
||||
"report_id order_id",
|
||||
"reporter_id user_id",
|
||||
"target_type",
|
||||
"CONCAT(target_topic, IF(target_seq>0, CONCAT('#', target_seq), ''), IF(target_user_id>0, CONCAT(' user:', target_user_id), '')) target_summary",
|
||||
"reason_code category",
|
||||
"description content",
|
||||
"status",
|
||||
"created_at",
|
||||
"updated_at",
|
||||
}
|
||||
}
|
||||
|
||||
func (s *sSysImWorkOrder) feedbackListFields() []interface{} {
|
||||
return []interface{}{
|
||||
"'feedback' type",
|
||||
"id",
|
||||
"feedback_id order_id",
|
||||
"user_id",
|
||||
"'' target_type",
|
||||
"'' target_summary",
|
||||
"category",
|
||||
"content",
|
||||
"status",
|
||||
"created_at",
|
||||
"updated_at",
|
||||
}
|
||||
}
|
||||
|
||||
func (s *sSysImWorkOrder) applyWhere(mod *gdb.Model, in *sysin.ImWorkOrderListInp) *gdb.Model {
|
||||
if in.UserId > 0 {
|
||||
mod = mod.Where("user_id", in.UserId)
|
||||
}
|
||||
if in.Status != "" {
|
||||
mod = mod.Where("status", in.Status)
|
||||
}
|
||||
if in.Keyword != "" {
|
||||
mod = mod.WhereLike("content", "%"+in.Keyword+"%")
|
||||
}
|
||||
if len(in.CreatedAt) == 2 {
|
||||
mod = mod.WhereBetween("created_at", in.CreatedAt[0], in.CreatedAt[1])
|
||||
}
|
||||
return mod
|
||||
}
|
||||
|
||||
// View 获取IM举报反馈工单指定信息
|
||||
func (s *sSysImWorkOrder) View(ctx context.Context, in *sysin.ImWorkOrderViewInp) (res *sysin.ImWorkOrderViewModel, err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
db, tenant, err := imtenant.DB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
if in.Type == sysin.ImWorkOrderTypeAbuse {
|
||||
res, err = s.viewAbuse(ctx, db, in.Id)
|
||||
} else {
|
||||
res, err = s.viewFeedback(ctx, db, in.Id)
|
||||
}
|
||||
if err != nil || res == nil {
|
||||
return
|
||||
}
|
||||
res.TenantId = tenant.Id
|
||||
res.TenantName = tenant.Name
|
||||
return
|
||||
}
|
||||
|
||||
func (s *sSysImWorkOrder) viewAbuse(ctx context.Context, db gdb.DB, id int64) (res *sysin.ImWorkOrderViewModel, err error) {
|
||||
err = db.Model("im_abuse_reports").Safe().Ctx(ctx).
|
||||
Fields(
|
||||
"'abuse' type",
|
||||
"id",
|
||||
"report_id order_id",
|
||||
"reporter_id user_id",
|
||||
"target_type",
|
||||
"CONCAT(target_topic, IF(target_seq>0, CONCAT('#', target_seq), ''), IF(target_user_id>0, CONCAT(' user:', target_user_id), '')) target_summary",
|
||||
"reason_code category",
|
||||
"description content",
|
||||
"description",
|
||||
"evidence_file_ids evidence_json",
|
||||
"snapshot snapshot_json",
|
||||
"idempotency_key",
|
||||
"status",
|
||||
"created_at",
|
||||
"updated_at",
|
||||
).
|
||||
Where("id", id).
|
||||
Scan(&res)
|
||||
if err != nil {
|
||||
return nil, gerror.Wrap(err, "获取IM举报工单信息失败，请稍后重试！")
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
func (s *sSysImWorkOrder) viewFeedback(ctx context.Context, db gdb.DB, id int64) (res *sysin.ImWorkOrderViewModel, err error) {
|
||||
err = db.Model("im_feedback_submissions").Safe().Ctx(ctx).
|
||||
Fields(
|
||||
"'feedback' type",
|
||||
"id",
|
||||
"feedback_id order_id",
|
||||
"user_id",
|
||||
"'' target_type",
|
||||
"'' target_summary",
|
||||
"category",
|
||||
"content",
|
||||
"contact",
|
||||
"attachment_file_ids evidence_json",
|
||||
"client_context client_context_json",
|
||||
"include_diagnostics",
|
||||
"idempotency_key",
|
||||
"status",
|
||||
"created_at",
|
||||
"updated_at",
|
||||
).
|
||||
Where("id", id).
|
||||
Scan(&res)
|
||||
if err != nil {
|
||||
return nil, gerror.Wrap(err, "获取IM反馈工单信息失败，请稍后重试！")
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
// Status 更新IM举报反馈工单状态
|
||||
func (s *sSysImWorkOrder) Status(ctx context.Context, in *sysin.ImWorkOrderStatusInp) (err error) {
|
||||
if err = in.Filter(ctx); err != nil {
|
||||
return
|
||||
}
|
||||
db, _, err := imtenant.DB(ctx, in.TenantId)
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
table := "im_abuse_reports"
|
||||
if in.Type == sysin.ImWorkOrderTypeFeedback {
|
||||
table = "im_feedback_submissions"
|
||||
}
|
||||
if _, err = db.Model(table).Safe().Ctx(ctx).
|
||||
Where("id", in.Id).
|
||||
Data(g.Map{
|
||||
"status": in.Status,
|
||||
"updated_at": gtime.Now(),
|
||||
}).
|
||||
Update(); err != nil {
|
||||
return gerror.Wrap(err, "更新IM举报反馈工单状态失败，请稍后重试！")
|
||||
}
|
||||
return
|
||||
}
|
||||
@@ -159,7 +159,7 @@ func (s *sSysLog) AnalysisLog(ctx context.Context) entity.SysLog {
|
||||
module = mctx.Module
|
||||
clientIp = location.GetClientIp(request)
|
||||
postData = gjson.New(consts.NilJsonToString)
|
||||
getData = gjson.New(request.URL.Query())
|
||||
getData = s.MaskSensitiveJson(gjson.New(request.URL.Query()))
|
||||
headerData = gjson.New(consts.NilJsonToString)
|
||||
errorData = gjson.New(consts.NilJsonToString)
|
||||
data entity.SysLog
|
||||
@@ -194,7 +194,7 @@ func (s *sSysLog) AnalysisLog(ctx context.Context) entity.SysLog {
|
||||
|
||||
// post参数
|
||||
if body, ok := mctx.Data["request.body"].(*gjson.Json); ok {
|
||||
postData = body
|
||||
postData = s.MaskSensitiveJson(body)
|
||||
}
|
||||
|
||||
// post表单
|
||||
@@ -208,12 +208,7 @@ func (s *sSysLog) AnalysisLog(ctx context.Context) entity.SysLog {
|
||||
if postData.IsNil() || len(postData.Map()) == 0 {
|
||||
postData = gjson.New(consts.NilJsonToString)
|
||||
} else {
|
||||
// 隐藏明文显示的密码
|
||||
for k := range postData.Map() {
|
||||
if gstr.ContainsI(k, "password") {
|
||||
postData.MustSet(k, "******")
|
||||
}
|
||||
}
|
||||
postData = s.MaskSensitiveJson(postData)
|
||||
}
|
||||
|
||||
// 当前登录用户
|
||||
@@ -247,7 +242,7 @@ func (s *sSysLog) AnalysisLog(ctx context.Context) entity.SysLog {
|
||||
Url: request.URL.Path,
|
||||
GetData: getData,
|
||||
PostData: postData,
|
||||
HeaderData: s.SimplifyHeaderParams(headerData),
|
||||
HeaderData: s.SimplifyHeaderParams(s.MaskSensitiveJson(headerData)),
|
||||
Ip: clientIp,
|
||||
ProvinceId: ipData.ProvinceCode,
|
||||
CityId: ipData.CityCode,
|
||||
@@ -273,6 +268,10 @@ func (s *sSysLog) SimplifyHeaderParams(data *gjson.Json) *gjson.Json {
|
||||
var filters = []string{"Accept", "Authorization", "Cookie"}
|
||||
for _, filter := range filters {
|
||||
v := data.Get(filter)
|
||||
if isSensitiveLogField(filter) {
|
||||
data.MustSet(filter, "******")
|
||||
continue
|
||||
}
|
||||
if len(v.String()) > 128 {
|
||||
data.MustRemove(filter)
|
||||
}
|
||||
@@ -280,6 +279,58 @@ func (s *sSysLog) SimplifyHeaderParams(data *gjson.Json) *gjson.Json {
|
||||
return data
|
||||
}
|
||||
|
||||
// MaskSensitiveJson masks sensitive request fields before access logs are stored.
|
||||
func (s *sSysLog) MaskSensitiveJson(data *gjson.Json) *gjson.Json {
|
||||
if data == nil || data.IsNil() {
|
||||
return data
|
||||
}
|
||||
return gjson.New(maskSensitiveValue(data.Map()))
|
||||
}
|
||||
|
||||
func maskSensitiveValue(v interface{}) interface{} {
|
||||
switch value := v.(type) {
|
||||
case map[string]interface{}:
|
||||
res := make(map[string]interface{}, len(value))
|
||||
for k, item := range value {
|
||||
if isSensitiveLogField(k) {
|
||||
res[k] = "******"
|
||||
continue
|
||||
}
|
||||
res[k] = maskSensitiveValue(item)
|
||||
}
|
||||
return res
|
||||
case map[string][]string:
|
||||
res := make(map[string]interface{}, len(value))
|
||||
for k, item := range value {
|
||||
if isSensitiveLogField(k) {
|
||||
res[k] = "******"
|
||||
continue
|
||||
}
|
||||
res[k] = item
|
||||
}
|
||||
return res
|
||||
case []interface{}:
|
||||
for i, item := range value {
|
||||
value[i] = maskSensitiveValue(item)
|
||||
}
|
||||
return value
|
||||
default:
|
||||
return v
|
||||
}
|
||||
}
|
||||
|
||||
func isSensitiveLogField(field string) bool {
|
||||
sensitive := []string{"password", "invitecode", "invite_code", "servicesecret", "service_secret", "authorization", "x-service-secret"}
|
||||
normalized := gstr.Replace(gstr.Replace(gstr.ToLower(field), "-", ""), "_", "")
|
||||
for _, item := range sensitive {
|
||||
item = gstr.Replace(gstr.Replace(item, "-", ""), "_", "")
|
||||
if normalized == item || gstr.Contains(normalized, item) {
|
||||
return true
|
||||
}
|
||||
}
|
||||
return false
|
||||
}
|
||||
|
||||
// View 获取指定请求日志信息
|
||||
func (s *sSysLog) View(ctx context.Context, in *sysin.LogViewInp) (res *sysin.LogViewModel, err error) {
|
||||
mod := s.Model(ctx)
|
||||
|
||||
Reference in New Issue
Block a user