80 lines
2.5 KiB
Go
80 lines
2.5 KiB
Go
package service
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"time"
|
|
|
|
"kra/internal/biz"
|
|
"kra/pkg/adminauth"
|
|
)
|
|
|
|
func tokenDTO(v *biz.APIToken) map[string]any {
|
|
var user any = nil
|
|
if v.User != nil {
|
|
user = convertUser(v.User)
|
|
}
|
|
return map[string]any{"ID": v.ID, "CreatedAt": v.CreatedAt, "UpdatedAt": v.UpdatedAt, "DeletedAt": nil, "userId": v.UserID, "authorityId": v.AuthorityID, "token": v.Token, "status": v.Status, "expiresAt": v.ExpiresAt, "remark": v.Remark, "user": user}
|
|
}
|
|
|
|
func (s *SettingsService) CreateAPIToken(ctx context.Context, userID, authorityID uint, days int, remark string) (string, error) {
|
|
user, allowed, err := s.Repo().UserHasAuthority(ctx, userID, authorityID)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
if !allowed {
|
|
return "", errors.New("用户不具备该角色权限")
|
|
}
|
|
duration := time.Duration(days) * 24 * time.Hour
|
|
if days == -1 {
|
|
duration = 100 * 365 * 24 * time.Hour
|
|
}
|
|
if duration <= 0 {
|
|
return "", errors.New("有效天数必须大于0或为-1")
|
|
}
|
|
secret, issuer := "", "kra"
|
|
buffer := 24 * time.Hour
|
|
if s.config != nil && s.config.Jwt != nil {
|
|
secret = s.config.Jwt.SigningKey
|
|
if s.config.Jwt.Issuer != "" {
|
|
issuer = s.config.Jwt.Issuer
|
|
}
|
|
if s.config.Jwt.BufferTime != nil {
|
|
buffer = s.config.Jwt.BufferTime.AsDuration()
|
|
}
|
|
}
|
|
token, _, err := adminauth.Generate(secret, issuer, duration, buffer, user.ID, authorityID, user.UUID, user.Username, user.NickName, false)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
record := &biz.APIToken{UserID: userID, AuthorityID: authorityID, Token: token, Status: true, ExpiresAt: time.Now().Add(duration), Remark: remark}
|
|
if err = s.Repo().CreateAPIToken(ctx, record); err != nil {
|
|
return "", err
|
|
}
|
|
return token, nil
|
|
}
|
|
func (s *SettingsService) APITokens(ctx context.Context, page, size int, userID uint, status *bool) ([]map[string]any, int64, error) {
|
|
items, total, err := s.Repo().ListAPITokens(ctx, page, size, userID, status)
|
|
if err != nil {
|
|
return nil, 0, err
|
|
}
|
|
out := make([]map[string]any, 0, len(items))
|
|
for _, v := range items {
|
|
out = append(out, tokenDTO(v))
|
|
}
|
|
return out, total, nil
|
|
}
|
|
func (s *SettingsService) DisableAPIToken(ctx context.Context, id uint) error {
|
|
token, err := s.Repo().DisableAPIToken(ctx, id)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return s.Repo().BlacklistToken(ctx, token)
|
|
}
|
|
func (s *SettingsService) BlacklistToken(ctx context.Context, token string) error {
|
|
return s.Repo().BlacklistToken(ctx, token)
|
|
}
|
|
func (s *SettingsService) IsTokenDisabled(ctx context.Context, token string) (bool, error) {
|
|
return s.Repo().IsTokenDisabled(ctx, token)
|
|
}
|