import time from app.views.ViewsBase import * from app.utils.Utils import buildPageLabels from django.shortcuts import render, redirect from django.contrib.auth import authenticate, login as auth_login, logout as auth_logout from django.contrib.auth.models import Group, User from app.utils.Credentials import redact_mapping from app.utils.OSSystem import OSSystem from io import BytesIO from app.utils.LogUtils import LogUtils from django.http import HttpResponse import json # 生成验证码start import random from PIL import Image, ImageDraw, ImageFont def random_color(min_val=50, max_val=200): """生成随机RGB颜色""" return ( random.randint(min_val, max_val), random.randint(min_val, max_val), random.randint(min_val, max_val) ) def load_captcha_font(height): """跨平台字体加载（优先Linux兼容字体）""" osSystem = OSSystem() if osSystem.getSystemName() == "Windows": font_paths = [ g_config.fontPath, # 项目内嵌字体 "C:\\Windows\\Fonts\\arial.ttf" # Windows ] else: font_paths = [ g_config.fontPath, # 项目内嵌字体 "/usr/share/fonts/truetype/dejavu/DejaVuSans.ttf" # Linux ] for font_path in font_paths: try: if os.path.exists(font_path): font_size = int(height * 0.7) font = ImageFont.truetype(font_path, font_size) return font,font_size else: raise Exception("file not exist") except Exception as e: g_logger.error("load_captcha_font() error,font_path=%s,e=%s"%(font_path,str(e))) font_size = int(height * 2) return ImageFont.load_default(),font_size # 保底方案 def generate_secure_captcha(length=4): """生成带干扰线的验证码图片""" width = 120 height = 40 font,font_size = load_captcha_font(height) image = Image.new('RGB', (width, height), (255, 255, 255)) draw = ImageDraw.Draw(image) # 生成随机文本（排除易混淆字符） chars = 'ABCDEFGHJKMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz23456789' captcha_text = ''.join(random.choices(chars, k=length)) # 绘制扭曲字符 x_offset = 10 for char in captcha_text: angle = random.randint(-10, 10) # 随机旋转角度 char_img = Image.new('RGBA', (font_size, font_size), (0, 0, 0, 0)) char_draw = ImageDraw.Draw(char_img) char_draw.text((0, 0), char, font=font, fill=random_color(0, 100)) rotated_char = char_img.rotate(angle, expand=True, resample=Image.BILINEAR) image.paste(rotated_char, (x_offset, 5), rotated_char) x_offset += rotated_char.width - random.randint(0, 8) # 随机间距 # 添加干扰线（核心防御） for _ in range(4): # 干扰线数量 x1, y1 = random.randint(0, width), random.randint(0, height) x2, y2 = random.randint(0, width), random.randint(0, height) draw.line([x1, y1, x2, y2], fill=random_color(150, 220), width=random.choice([1, 2])) # 添加噪点（30个点） for _ in range(30): x, y = random.randint(0, width), random.randint(0, height) draw.point((x, y), fill=random_color(100, 200)) return captcha_text, image # 生成验证码end def index(request): context = {} return render(request, 'app/user/index.html', context) def api_openIndex(request): ret = False msg = LANG_VIEWS_T(request, "msg_unknown_error") data = [] pageData = {} if request.method == 'GET': __check_ret, __check_msg = f_checkRequestSafe(request) if __check_ret: params = f_parseGetParams(request) page = params.get('p', 1) page_size = params.get('ps', 10) try: page = int(page) except: page = 1 try: page_size = int(page_size) if page_size < 1: page_size = 1 except: page_size = 10 skip = (page - 1) * page_size sql_data = ("select id,username,email,is_active,is_superuser,is_staff,date_joined,last_login " "from auth_user order by id desc limit %s,%s") sql_data_num = "select count(id) as count from auth_user " count = g_database.select(sql_data_num) if len(count) > 0: count = int(count[0]["count"]) data = g_database.select(sql_data, [skip, page_size]) else: count = 0 # 格式化日期字段 for d in data: user_roles = Group.objects.filter(user__id=d["id"]).values_list("name", flat=True) d["role"] = next(iter(user_roles), "viewer") if d.get("date_joined"): try: d["date_joined"] = d["date_joined"].strftime("%Y-%m-%d %H:%M:%S") except: pass else: d["date_joined"] = "" if d.get("last_login"): try: d["last_login"] = d["last_login"].strftime("%Y-%m-%d %H:%M:%S") except: pass else: d["last_login"] = "" page_num = int(count / page_size) if count % page_size > 0: page_num += 1 pageLabels = buildPageLabels(page=page, page_num=page_num, lang=f_parseRequestLang(request)) pageData = { "page": page, "page_size": page_size, "page_num": page_num, "count": count, "pageLabels": pageLabels } ret = True msg = LANG_VIEWS_T(request, "msg_success") else: msg = __check_msg else: msg = LANG_VIEWS_T(request, "msg_method_not_supported") res = { "code": 1000 if ret else 0, "msg": msg, "data": data, "pageData": pageData } return f_responseJson(res) def api_openAdd(request): __ret = False __msg = LANG_VIEWS_T(request, "msg_unknown_error") if request.method == 'POST': __check_ret, __check_msg = f_checkRequestSafe(request) if __check_ret: params = f_parsePostParams(request) g_logger.info("UserView.openAdd() params:%s" % str(redact_mapping(params))) try: login_user = f_sessionReadUser(request) if not login_user: raise Exception(LANG_VIEWS_T(request, "msg_not_logged_in")) username = params.get("username", "").strip() email = params.get("email", "").strip() password = params.get("password", "").strip() is_active = params.get("is_active") is_active = int(is_active) role = (params.get("role") or "viewer").strip() if role not in ("system_admin", "algorithm_admin", "operator", "viewer"): role = "viewer" if username == "": raise Exception(LANG_VIEWS_T(request, "user_username_required")) if email == "": raise Exception(LANG_VIEWS_T(request, "user_email_required")) if len(password) < 6 or len(password) > 16: raise Exception(LANG_VIEWS_T(request, "user_password_length")) if User.objects.filter(username=username).exists(): raise Exception(LANG_VIEWS_T(request, "user_username_exists")) else: now = datetime.now() user = User() user.username = username user.set_password(password) user.email = email user.date_joined = now user.is_superuser = 0 # 表单创建均为非超级管理员 user.is_staff = 1 user.is_active = is_active user.save() user.groups.set([Group.objects.get(name=role)]) if user.id > 0: # 添加日志 lang = f_parseRequestLang(request) LogUtils.add_user_log(login_user.get("id"), username, LogUtils.LOG_TYPE_ADD, lang=lang) __ret = True __msg = LANG_VIEWS_T(request, "msg_add_success") else: __msg = LANG_VIEWS_T(request, "msg_add_failed") except Exception as e: __msg = str(e) else: __msg = __check_msg else: __msg = LANG_VIEWS_T(request, "msg_method_not_supported") res = { "code": 1000 if __ret else 0, "msg": __msg } g_logger.info("UserView.openAdd() res=%s" % str(res)) return f_responseJson(res) def api_openEdit(request): __ret = False __msg = LANG_VIEWS_T(request, "msg_unknown_error") if request.method == 'POST': __check_ret, __check_msg = f_checkRequestSafe(request) if __check_ret: params = f_parsePostParams(request) g_logger.info("UserView.openEdit() params:%s" % str(redact_mapping(params))) try: login_user = f_sessionReadUser(request) if not login_user: raise Exception(LANG_VIEWS_T(request, "msg_not_logged_in")) user_id = params.get("id") # 被操作用户id is_active = params.get("is_active") username = params.get("username", "").strip() email = params.get("email", "").strip() new_password = params.get("new_password", "") re_password = params.get("re_password", "") user_id = int(user_id) is_active = int(is_active) role = (params.get("role") or "").strip() if username == "": raise Exception(LANG_VIEWS_T(request, "user_username_required")) if email == "": raise Exception(LANG_VIEWS_T(request, "user_email_required")) if re_password == "" and new_password == "": pass # 未修改密码 else: # 修改了密码 if new_password == "": raise Exception(LANG_VIEWS_T(request, "user_new_password_required")) if re_password == "": raise Exception(LANG_VIEWS_T(request, "user_confirm_password_required")) if new_password != re_password: raise Exception(LANG_VIEWS_T(request, "user_password_mismatch")) if len(new_password) < 6 or len(new_password) > 16: raise Exception(LANG_VIEWS_T(request, "user_new_password_length")) user = User.objects.filter(id=user_id).first() if user: # 验证要修改的用户名是否已经存在start if user.username == username: pass # 用户名未做修改 else: filter_username = g_database.select( "select count(1) as count from auth_user where id!=%s and username=%s", [user_id, username]) filter_username_count = int(filter_username[0]["count"]) if filter_username_count > 0: raise Exception(LANG_VIEWS_T(request, "user_new_username_exists")) user.username = username # 修改了用户名 # 验证要修改的用户名是否已经存在end if re_password == "" and new_password == "": pass else: user.set_password(new_password) # 修改了密码 user.email = email user.is_active = is_active user.save() if role in ("system_admin", "algorithm_admin", "operator", "viewer"): user.groups.set([Group.objects.get(name=role)]) # 添加日志 lang = f_parseRequestLang(request) LogUtils.add_user_log(login_user.get("id"), username, LogUtils.LOG_TYPE_EDIT, lang=lang) __ret = True __msg = LANG_VIEWS_T(request, "msg_edit_success") else: raise Exception(LANG_VIEWS_T(request, "msg_data_not_exist")) except Exception as e: __msg = str(e) else: __msg = __check_msg else: __msg = LANG_VIEWS_T(request, "msg_method_not_supported") res = { "code": 1000 if __ret else 0, "msg": __msg } g_logger.info("UserView.openEdit() res=%s" % str(res)) return f_responseJson(res) def api_openDel(request): ret = False msg = LANG_VIEWS_T(request, "msg_unknown_error") if request.method == 'POST': __check_ret, __check_msg = f_checkRequestSafe(request) if __check_ret: params = f_parsePostParams(request) try: login_user = f_sessionReadUser(request) if not login_user: raise Exception(LANG_VIEWS_T(request, "msg_not_logged_in")) user_id = int(params.get("id")) if not user_id: raise Exception(LANG_VIEWS_T(request, "user_request_params_invalid")) login_user_id = int(login_user.get("id")) if login_user_id == user_id: raise Exception(LANG_VIEWS_T(request, "user_super_admin_no_delete_self")) user = User.objects.filter(id=user_id) if len(user) > 0: user = user[0] if user.is_superuser == 1: raise Exception(LANG_VIEWS_T(request, "user_super_admin_no_delete")) else: if user.delete(): ret = True msg = LANG_VIEWS_T(request, "msg_success") else: msg = LANG_VIEWS_T(request, "msg_failed_to_delete") else: raise Exception(LANG_VIEWS_T(request, "msg_data_not_exist")) except Exception as e: msg = str(e) else: msg = __check_msg else: msg = LANG_VIEWS_T(request, "msg_method_not_supported") res = { "code": 1000 if ret else 0, "msg": msg } g_logger.info("UserView.openDel() res=%s" % str(res)) return f_responseJson(res) def api_openInfo(request): """获取单条用户详情""" ret = False msg = LANG_VIEWS_T(request, "msg_unknown_error") info = {} if request.method == "GET": __check_ret, __check_msg = f_checkRequestSafe(request) if __check_ret: params = f_parseGetParams(request) user_id = params.get("id", "") if not user_id: msg = LANG_VIEWS_T(request, "user_id_required") else: try: user_id = int(user_id) user = User.objects.filter(id=user_id).first() if user: info = { "id": user.id, "username": user.username, "email": user.email, "is_active": user.is_active, "is_superuser": user.is_superuser, "is_staff": user.is_staff, "date_joined": user.date_joined.strftime("%Y-%m-%d %H:%M:%S") if user.date_joined else "", "last_login": user.last_login.strftime("%Y-%m-%d %H:%M:%S") if user.last_login else "" } ret = True msg = LANG_VIEWS_T(request, "msg_success") else: msg = LANG_VIEWS_T(request, "user_not_exist") except Exception as e: msg = str(e) else: msg = __check_msg else: msg = LANG_VIEWS_T(request, "msg_method_not_supported") res = { "code": 1000 if ret else 0, "msg": msg, "info": info } g_logger.info("UserView.openInfo() res=%s" % str(res)) return f_responseJson(res) def api_openCaptcha(request): """生成验证码图片视图""" # 生成验证码 text,image = generate_secure_captcha() # 存储到session cur_timestamp = int(time.time()) request.session[g_session_key_captcha] = { "captcha_text": text, "captcha_create_timestamp": cur_timestamp, # 创建秒级时间戳 } # 创建内存流输出 stream = BytesIO() image.save(stream, 'PNG') return HttpResponse(stream.getvalue(), content_type='image/png') def login(request): context = { "projectVersion": PROJECT_VERSION, "projectFlag": PROJECT_FLAG } if request.method == 'POST': ret = False msg = LANG_VIEWS_T(request, "msg_unknown_error") params = f_parsePostParams(request) username = (params.get("username") or params.get("username_s") or "").strip() password = (params.get("password") or params.get("password_s") or "").strip() captcha = params.get("captcha", None) try: if g_config.isEnableLoginCaptcha: if not captcha: raise Exception(LANG_VIEWS_T(request, "user_captcha_missing")) # 开启了登录验证码功能 session_captcha = request.session.get(g_session_key_captcha, None) if not session_captcha: raise Exception(LANG_VIEWS_T(request, "user_captcha_not_found")) if session_captcha: captcha_text = session_captcha.get("captcha_text", "") captcha_create_timestamp = session_captcha.get("captcha_create_timestamp", 0) cur_timestamp = int(time.time()) # 验证码过期判断 if (cur_timestamp - captcha_create_timestamp) > 300: raise Exception(LANG_VIEWS_T(request, "user_captcha_expired")) # 验证码相同判断 if captcha_text != captcha: raise Exception(LANG_VIEWS_T(request, "user_captcha_incorrect")) if username and password: user = User.objects.filter(username=username).first() if user: if user.is_active: authenticated_user = authenticate(request, username=username, password=password) if authenticated_user is not None: auth_login(request, authenticated_user) user.first_name = "cec=0" user.last_login = datetime.now() user.save() # 保留兼容旧模板的数据；鉴权和授权以 request.user 为准。 request.session[g_session_key_user] = { "id": user.id, "username": username, "email": user.email, "is_superuser": user.is_superuser, "is_active": user.is_active, "is_staff": user.is_staff, "log_debug": 1 if g_config.logDebug else 0, } request.session.pop(g_session_key_captcha, None) # 记录登录日志 LogUtils.add_log( user_id=user.id, log_type=LogUtils.LOG_TYPE_LOGIN, content=f"用户登录[{username}]", state=LogUtils.STATE_SUCCESS ) ret = True msg = LANG_VIEWS_T(request, "user_login_success") else: continuous_error_count = 0 try: vals = user.first_name.split(",") for val in vals: array = val.split("=") if len(array) == 2: if array[0] == "cec": continuous_error_count = int(array[1]) except: pass continuous_error_count += 1 if continuous_error_count > 6: is_active = False msg = LANG_VIEWS_T(request, "user_password_error_lock") % continuous_error_count else: is_active = True msg = LANG_VIEWS_T(request, "user_password_error_count") % continuous_error_count user.is_active = is_active user.first_name = "cec=%d"%continuous_error_count user.save() else: msg = LANG_VIEWS_T(request, "user_account_locked") else: msg = LANG_VIEWS_T(request, "user_not_registered") else: msg = LANG_VIEWS_T(request, "msg_invalid_parameter") except Exception as e: msg = str(e) res = { "code": 1000 if ret else 0, "msg": msg } return f_responseJson(res) else: context["isEnableLoginCaptcha"] = 1 if g_config.isEnableLoginCaptcha else 0 return render(request, 'app/user/login.html', context) def logout(request): # 记录退出登录日志 if request.session.has_key(g_session_key_user): user_info = request.session.get(g_session_key_user) user_id = user_info.get('id', 0) username = user_info.get('username', '未知用户') # 记录日志 if user_id: LogUtils.add_log( user_id=user_id, log_type=LogUtils.LOG_TYPE_LOGOUT, content=f"用户退出[{username}]", state=LogUtils.STATE_SUCCESS ) del request.session[g_session_key_user] if request.session.has_key(g_session_key_captcha): del request.session[g_session_key_captcha] auth_logout(request) return redirect("/login")