base_api_controller.go 12KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386
  1. package controllers
  2. import (
  3. "XT_New/enums"
  4. //"XT_New/models"
  5. //"XT_New/models"
  6. "XT_New/service"
  7. "fmt"
  8. "strconv"
  9. "strings"
  10. )
  11. type BaseAPIController struct {
  12. BaseController
  13. }
  14. // func (this *BaseAPIController) Prepare() {
  15. // this.BaseController.Prepare()
  16. // beego.Trace("============================================================")
  17. // beego.Trace("session ID: %v", this.Ctx.Input.Cookie("beegosessionID"))
  18. // beego.Trace("session : %v", this.GetSession("info"))
  19. // this.SetSession("info", time.Now().Format("2006/01/02 15:04:05"))
  20. // beego.Trace("============================================================")
  21. // }
  22. // 输出数据格式化
  23. /*
  24. success json:
  25. {
  26. "state": 1,
  27. "code": 0,
  28. "data": json,
  29. }
  30. fail json:
  31. {
  32. "state": 0,
  33. "code": int,
  34. "msg": string,
  35. }
  36. */
  37. func (this *BaseAPIController) ServeSuccessJSON(data map[string]interface{}) {
  38. this.Data["json"] = enums.MakeSuccessResponseJSON(data)
  39. this.ServeJSON()
  40. }
  41. func (this *BaseAPIController) ServeFailJSONWithSGJErrorCode(code int) {
  42. this.Data["json"] = enums.MakeFailResponseJSONWithSGJErrorCode(code)
  43. this.ServeJSON()
  44. }
  45. func (this *BaseAPIController) ServeFailJSONWithSGJError(err *enums.SGJError) {
  46. this.Data["json"] = enums.MakeFailResponseJSONWithSGJError(err)
  47. this.ServeJSON()
  48. }
  49. func (this *BaseAPIController) ServeFailJsonSend(code int, msg string) {
  50. this.Data["json"] = enums.MakeFailResponseJSON(msg, code)
  51. this.ServeJSON()
  52. }
  53. type BaseAuthAPIController struct {
  54. BaseAPIController
  55. }
  56. func (this *BaseAuthAPIController) Prepare() {
  57. this.BaseAPIController.Prepare()
  58. if this.GetAdminUserInfo() == nil {
  59. //var userAdmin models.AdminUser
  60. //userAdmin.Id = 400
  61. //userAdmin.Mobile = "13535547901"
  62. ////
  63. //////userAdmin.Id = 597
  64. //////userAdmin.Mobile = "19874122664"
  65. //userAdmin.IsSuperAdmin = false
  66. //userAdmin.Status = 1
  67. //userAdmin.CreateTime = 1530786071
  68. //userAdmin.ModifyTime = 1530786071
  69. //var subscibe models.ServeSubscibe
  70. //subscibe.ID = 1
  71. //subscibe.OrgId = 12
  72. //subscibe.PeriodStart = 1538035409
  73. //subscibe.PeriodEnd = 1569571409
  74. //subscibe.State = 1
  75. //subscibe.Status = 1
  76. //subscibe.CreatedTime = 1538035409
  77. //subscibe.UpdatedTime = 1538035409
  78. //subscibes := make(map[int64]*models.ServeSubscibe, 0)
  79. //subscibes[4] = &subscibe
  80. //var adminUserInfo service.AdminUserInfo
  81. //adminUserInfo.CurrentOrgId = 12
  82. //adminUserInfo.CurrentAppId = 18
  83. //adminUserInfo.AdminUser = &userAdmin
  84. //adminUserInfo.Subscibes = subscibes
  85. //this.SetSession("admin_user_info", &adminUserInfo)
  86. this.ServeFailJSONWithSGJErrorCode(enums.ErrorCodeNotLogin)
  87. this.StopRun()
  88. }
  89. adminUserInfo := this.GetAdminUserInfo()
  90. if this.Ctx.Request.Header.Get("Permission") == "2" {
  91. org, _ := service.GetOrgById(adminUserInfo.CurrentOrgId)
  92. if adminUserInfo.AdminUser.Id != org.Creator { //超级管理员不受此限制
  93. isPermission := false
  94. adminUserInfo := this.GetAdminUserInfo()
  95. //该机构下该用户有多少个
  96. role, _ := service.GetUserAllRole(adminUserInfo.CurrentOrgId, adminUserInfo.AdminUser.Id)
  97. var roles []string
  98. if len(role.RoleIds) <= 0 { //该用户没有设置角色
  99. } else {
  100. roles = strings.Split(role.RoleIds, ",")
  101. }
  102. fmt.Println(roles)
  103. //获取该用户下所有角色的权限总集
  104. var userRolePurviews string
  105. var userRolePurviewsArr []string
  106. for _, item := range roles {
  107. role_id, _ := strconv.ParseInt(item, 10, 64)
  108. purviews, _ := service.GetRoleFuncPurviewIds(role_id)
  109. if len(userRolePurviews) == 0 {
  110. userRolePurviews = purviews
  111. } else {
  112. userRolePurviews = userRolePurviews + "," + purviews
  113. }
  114. }
  115. //该用户所拥有角色的权限的总集
  116. userRolePurviewsArr = RemoveRepeatedPurviewElement2(strings.Split(userRolePurviews, ","))
  117. fmt.Println(userRolePurviewsArr)
  118. //系统所记录的权限列表
  119. allPermission, _ := service.GetAllFunctionPurview()
  120. for _, item := range allPermission {
  121. // fmt.Println(len(strings.Split(item.Urlfor, ",")))
  122. // fmt.Println(strings.Split(item.Urlfor, ","))
  123. //fmt.Println(strings.Split(this.Ctx.Request.RequestURI, "?")[0] + "?" + "mode=" + this.GetString("mode"))
  124. //判断当前路由是否在权限路由列表里面
  125. if strings.Split(item.Urlfor, ",")[1] == strings.Split(this.Ctx.Request.RequestURI, "?")[0]+"?"+"mode="+this.GetString("mode") {
  126. //获取该角色的所有权限
  127. for _, items := range userRolePurviewsArr {
  128. id, _ := strconv.ParseInt(items, 10, 64)
  129. fmt.Println(id)
  130. fmt.Println(item.ID)
  131. if id == item.ID {
  132. isPermission = true
  133. }
  134. }
  135. if !isPermission {
  136. msg, _ := service.FindErrorMsgByStr(strings.Split(this.Ctx.Request.RequestURI, "?")[0] + "?" + "mode=" + this.GetString("mode"))
  137. json := make(map[string]interface{})
  138. json["msg"] = msg
  139. json["code"] = 0
  140. json["state"] = 0
  141. this.Data["json"] = json
  142. this.ServeJSON()
  143. this.StopRun()
  144. }
  145. }
  146. }
  147. }
  148. }
  149. if this.Ctx.Request.Header.Get("Permission") == "3" {
  150. org, _ := service.GetOrgById(adminUserInfo.CurrentOrgId)
  151. if adminUserInfo.AdminUser.Id != org.Creator { //超级管理员不受此限制
  152. isPermission := false
  153. adminUserInfo := this.GetAdminUserInfo()
  154. //该机构下该用户有多少个
  155. role, _ := service.GetUserAllRole(adminUserInfo.CurrentOrgId, adminUserInfo.AdminUser.Id)
  156. var roles []string
  157. if len(role.RoleIds) <= 0 { //该用户没有设置角色
  158. } else {
  159. roles = strings.Split(role.RoleIds, ",")
  160. }
  161. fmt.Println(roles)
  162. //获取该用户下所有角色的权限总集
  163. var userRolePurviews string
  164. var userRolePurviewsArr []string
  165. for _, item := range roles {
  166. role_id, _ := strconv.ParseInt(item, 10, 64)
  167. purviews, _ := service.GetRoleFuncPurviewIds(role_id)
  168. if len(userRolePurviews) == 0 {
  169. userRolePurviews = purviews
  170. } else {
  171. userRolePurviews = userRolePurviews + "," + purviews
  172. }
  173. }
  174. //该用户所拥有角色的权限的总集
  175. userRolePurviewsArr = RemoveRepeatedPurviewElement2(strings.Split(userRolePurviews, ","))
  176. fmt.Println(userRolePurviewsArr)
  177. //系统所记录的权限列表
  178. allPermission, _ := service.GetAllFunctionPurview()
  179. for _, item := range allPermission {
  180. // fmt.Println(strings.Split(item.Urlfor, ",")[2])
  181. // fmt.Println(strings.Split(this.Ctx.Request.RequestURI, "?")[0] + "?" + "mode=" + this.GetString("mode"))
  182. //判断当前路由是否在权限路由列表里面
  183. if strings.Split(item.Urlfor, ",")[2] == strings.Split(this.Ctx.Request.RequestURI, "?")[0]+"?"+"mode="+this.GetString("mode") {
  184. //获取该角色的所有权限
  185. for _, items := range userRolePurviewsArr {
  186. id, _ := strconv.ParseInt(items, 10, 64)
  187. fmt.Println(id)
  188. fmt.Println(item.ID)
  189. if id == item.ID {
  190. isPermission = true
  191. }
  192. }
  193. if !isPermission {
  194. msg, _ := service.FindErrorMsgByStr(strings.Split(this.Ctx.Request.RequestURI, "?")[0] + "?" + "mode=" + this.GetString("mode"))
  195. json := make(map[string]interface{})
  196. json["msg"] = msg
  197. json["code"] = 0
  198. json["state"] = 0
  199. this.Data["json"] = json
  200. this.ServeJSON()
  201. this.StopRun()
  202. }
  203. }
  204. }
  205. }
  206. }
  207. //if this.Ctx.Request.Method != "GET" {
  208. // adminUserInfo := this.GetAdminUserInfo()
  209. //
  210. // err := service.GetOrgSubscibeState(adminUserInfo.Subscibes[adminUserInfo.CurrentOrgId])
  211. // if err != nil || adminUserInfo.Subscibes[adminUserInfo.CurrentOrgId].State == 3 {
  212. // this.ServeFailJSONWithSGJErrorCode(enums.ErrorCodeNotSubscibe)
  213. // this.StopRun()
  214. // }
  215. //}
  216. //if this.Ctx.Request.Header.Get("Permission") == "1" {
  217. // isPermission := false
  218. //
  219. // //adminUserInfo := this.GetAdminUserInfo()
  220. //
  221. // //service.GetUserAllRole(adminUserInfo.CurrentOrgId)
  222. //
  223. //
  224. //
  225. //
  226. // roles := []int64{1,2} //模拟该用户有多少角色
  227. // var targetRole models.RolePurview
  228. // var userRolePurview []string
  229. //
  230. // //用户角色1对应的权限
  231. // role1 := models.RolePurview{PurviewIds:"11,12,13"}
  232. //
  233. // //用户角色2对应的权限
  234. // role2 := models.RolePurview{PurviewIds:"11,15,16"}
  235. //
  236. //
  237. // //模拟角色2
  238. // //判断该用户有多少个角色,合并最大角色权限
  239. // if len(roles) == 1{ //单个
  240. // targetRole = role1
  241. // userRolePurview = strings.Split(targetRole.PurviewIds, ",")
  242. //
  243. // }else{ //多个
  244. // targetRole = role1
  245. // targetRole.PurviewIds = targetRole.PurviewIds + "," + role2.PurviewIds
  246. // userRolePurview = strings.Split(targetRole.PurviewIds, ",")
  247. // }
  248. //
  249. // userRolePurview = RemoveRepeatedElement2(userRolePurview)
  250. //
  251. // fmt.Println(userRolePurview)
  252. // //所有权限列表
  253. // allPermission := []models.Purview{{Id:10,Urlfor:"/m/api/dialysis/dialysisPrescription-/api/dialysis/prescription"},
  254. // {Id:11,Urlfor:"/m/api/dialysis/dialysisPrescription1-/api/dialysis/prescription1"},
  255. // {Id:12,Urlfor:"/m/api/dialysis/dialysisPrescription2-/api/dialysis/prescription2"},
  256. // {Id:13,Urlfor:"/m/api/dialysis/dialysisPrescription3-/api/dialysis/prescription3"},
  257. // {Id:14,Urlfor:"/m/api/dialysis/dialysisPrescription4-/api/dialysis/prescription4"},
  258. // {Id:15,Urlfor:"/m/api/dialysis/dialysisPrescription5-/api/dialysis/prescription5"},
  259. // {Id:16,Urlfor:"/m/api/dialysis/dialysisPrescription6-/api/dialysis/prescription6"}}
  260. // for _, item := range allPermission {
  261. // //判断当前路由是否在权限路由列表里面
  262. // if strings.Split(item.Urlfor, "-")[1] == strings.Split(this.Ctx.Request.RequestURI , "?")[0]{
  263. // fmt.Println(strings.Split(this.Ctx.Request.RequestURI , "?")[0])
  264. //
  265. // //获取该角色的所有权限
  266. // for _, items := range userRolePurview{
  267. // id, _ := strconv.ParseInt(items, 10, 64)
  268. // if id == item.Id{
  269. // isPermission = true
  270. // }
  271. // }
  272. // if !isPermission{
  273. // this.ServeFailJSONWithSGJErrorCode(enums.ErrorCodePreExist)
  274. // this.StopRun()
  275. // }
  276. // }
  277. //
  278. // }
  279. //}
  280. }
  281. type BaseServeAPIController struct {
  282. BaseAPIController
  283. }
  284. func (this *BaseServeAPIController) Prepare() {
  285. this.BaseAPIController.Prepare()
  286. if this.GetAdminUserInfo() == nil {
  287. //var userAdmin models.AdminUser
  288. //userAdmin.Id = 400
  289. //userAdmin.Mobile = "13535547901"
  290. ////userAdmin.Id = 597
  291. ////userAdmin.Mobile = "19874122664"
  292. //userAdmin.IsSuperAdmin = false
  293. //userAdmin.Status = 1
  294. //userAdmin.CreateTime = 1530786071
  295. //userAdmin.ModifyTime = 1530786071
  296. //var subscibe models.ServeSubscibe
  297. //subscibe.ID = 1
  298. //subscibe.OrgId = 12
  299. //subscibe.PeriodStart = 1538035409
  300. //subscibe.PeriodEnd = 1569571409
  301. //subscibe.State = 1
  302. //subscibe.Status = 1
  303. //subscibe.CreatedTime = 1538035409
  304. //subscibe.UpdatedTime = 1538035409
  305. //subscibes := make(map[int64]*models.ServeSubscibe, 0)
  306. //subscibes[4] = &subscibe
  307. //var adminUserInfo service.AdminUserInfo
  308. //adminUserInfo.CurrentOrgId = 12
  309. //adminUserInfo.CurrentAppId = 18
  310. //adminUserInfo.AdminUser = &userAdmin
  311. //adminUserInfo.Subscibes = subscibes
  312. //this.SetSession("admin_user_info", &adminUserInfo)
  313. this.ServeFailJSONWithSGJErrorCode(enums.ErrorCodeNotLogin)
  314. this.StopRun()
  315. }
  316. //if adminUserInfo.AppRole != nil {
  317. // if adminUserInfo.AppRole.Id > 0 {
  318. // app_role, _ := service.FindAppRoleById(adminUserInfo.AppRole.Id)
  319. // if app_role != nil {
  320. // if app_role.Status != 1 {
  321. // this.DelSession("mobile_admin_user_info")
  322. // this.Ctx.SetCookie("token_cookie", "")
  323. // this.ServeFailJSONWithSGJErrorCode(enums.ErrorCodeForbidden)
  324. // this.StopRun()
  325. // }
  326. // }
  327. // }
  328. //
  329. //}
  330. //fmt.Println("222222222")
  331. }
  332. func RemoveRepeatedPurviewElement2(arr []string) (newArr []string) {
  333. newArr = make([]string, 0)
  334. for i := 0; i < len(arr); i++ {
  335. repeat := false
  336. for j := i + 1; j < len(arr); j++ {
  337. if arr[i] == arr[j] {
  338. repeat = true
  339. break
  340. }
  341. }
  342. if !repeat {
  343. newArr = append(newArr, arr[i])
  344. }
  345. }
  346. return
  347. }