582 lines
23 KiB
Python
582 lines
23 KiB
Python
import time
|
||
from app.views.ViewsBase import *
|
||
from app.utils.Utils import buildPageLabels
|
||
from django.shortcuts import render, redirect
|
||
from django.contrib.auth import authenticate, login as auth_login, logout as auth_logout
|
||
from django.contrib.auth.models import Group, User
|
||
from app.utils.Credentials import redact_mapping
|
||
from app.utils.OSSystem import OSSystem
|
||
from io import BytesIO
|
||
from app.utils.LogUtils import LogUtils
|
||
from django.http import HttpResponse
|
||
import json
|
||
# 生成验证码start
|
||
import random
|
||
from PIL import Image, ImageDraw, ImageFont
|
||
|
||
def random_color(min_val=50, max_val=200):
|
||
"""生成随机RGB颜色"""
|
||
return (
|
||
random.randint(min_val, max_val),
|
||
random.randint(min_val, max_val),
|
||
random.randint(min_val, max_val)
|
||
)
|
||
def load_captcha_font(height):
|
||
"""跨平台字体加载（优先Linux兼容字体）"""
|
||
osSystem = OSSystem()
|
||
if osSystem.getSystemName() == "Windows":
|
||
font_paths = [
|
||
g_config.fontPath, # 项目内嵌字体
|
||
"C:\\Windows\\Fonts\\arial.ttf" # Windows
|
||
]
|
||
else:
|
||
font_paths = [
|
||
g_config.fontPath, # 项目内嵌字体
|
||
"/usr/share/fonts/truetype/dejavu/DejaVuSans.ttf" # Linux
|
||
]
|
||
for font_path in font_paths:
|
||
try:
|
||
if os.path.exists(font_path):
|
||
font_size = int(height * 0.7)
|
||
font = ImageFont.truetype(font_path, font_size)
|
||
return font,font_size
|
||
else:
|
||
raise Exception("file not exist")
|
||
except Exception as e:
|
||
g_logger.error("load_captcha_font() error,font_path=%s,e=%s"%(font_path,str(e)))
|
||
|
||
font_size = int(height * 2)
|
||
return ImageFont.load_default(),font_size # 保底方案
|
||
def generate_secure_captcha(length=4):
|
||
"""生成带干扰线的验证码图片"""
|
||
|
||
width = 120
|
||
height = 40
|
||
font,font_size = load_captcha_font(height)
|
||
|
||
image = Image.new('RGB', (width, height), (255, 255, 255))
|
||
draw = ImageDraw.Draw(image)
|
||
|
||
# 生成随机文本（排除易混淆字符）
|
||
chars = 'ABCDEFGHJKMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz23456789'
|
||
captcha_text = ''.join(random.choices(chars, k=length))
|
||
|
||
# 绘制扭曲字符
|
||
x_offset = 10
|
||
for char in captcha_text:
|
||
angle = random.randint(-10, 10) # 随机旋转角度
|
||
char_img = Image.new('RGBA', (font_size, font_size), (0, 0, 0, 0))
|
||
char_draw = ImageDraw.Draw(char_img)
|
||
char_draw.text((0, 0), char, font=font, fill=random_color(0, 100))
|
||
rotated_char = char_img.rotate(angle, expand=True, resample=Image.BILINEAR)
|
||
image.paste(rotated_char, (x_offset, 5), rotated_char)
|
||
x_offset += rotated_char.width - random.randint(0, 8) # 随机间距
|
||
|
||
# 添加干扰线（核心防御）
|
||
for _ in range(4): # 干扰线数量
|
||
x1, y1 = random.randint(0, width), random.randint(0, height)
|
||
x2, y2 = random.randint(0, width), random.randint(0, height)
|
||
draw.line([x1, y1, x2, y2], fill=random_color(150, 220), width=random.choice([1, 2]))
|
||
|
||
# 添加噪点（30个点）
|
||
for _ in range(30):
|
||
x, y = random.randint(0, width), random.randint(0, height)
|
||
draw.point((x, y), fill=random_color(100, 200))
|
||
|
||
return captcha_text, image
|
||
# 生成验证码end
|
||
|
||
|
||
def index(request):
|
||
context = {}
|
||
return render(request, 'app/user/index.html', context)
|
||
|
||
|
||
def api_openIndex(request):
|
||
ret = False
|
||
msg = LANG_VIEWS_T(request, "msg_unknown_error")
|
||
data = []
|
||
pageData = {}
|
||
|
||
if request.method == 'GET':
|
||
__check_ret, __check_msg = f_checkRequestSafe(request)
|
||
if __check_ret:
|
||
params = f_parseGetParams(request)
|
||
|
||
page = params.get('p', 1)
|
||
page_size = params.get('ps', 10)
|
||
try:
|
||
page = int(page)
|
||
except:
|
||
page = 1
|
||
|
||
try:
|
||
page_size = int(page_size)
|
||
if page_size < 1:
|
||
page_size = 1
|
||
except:
|
||
page_size = 10
|
||
|
||
skip = (page - 1) * page_size
|
||
sql_data = ("select id,username,email,is_active,is_superuser,is_staff,date_joined,last_login "
|
||
"from auth_user order by id desc limit %s,%s")
|
||
sql_data_num = "select count(id) as count from auth_user "
|
||
|
||
count = g_database.select(sql_data_num)
|
||
|
||
if len(count) > 0:
|
||
count = int(count[0]["count"])
|
||
data = g_database.select(sql_data, [skip, page_size])
|
||
else:
|
||
count = 0
|
||
|
||
# 格式化日期字段
|
||
for d in data:
|
||
user_roles = Group.objects.filter(user__id=d["id"]).values_list("name", flat=True)
|
||
d["role"] = next(iter(user_roles), "viewer")
|
||
if d.get("date_joined"):
|
||
try:
|
||
d["date_joined"] = d["date_joined"].strftime("%Y-%m-%d %H:%M:%S")
|
||
except:
|
||
pass
|
||
else:
|
||
d["date_joined"] = ""
|
||
if d.get("last_login"):
|
||
try:
|
||
d["last_login"] = d["last_login"].strftime("%Y-%m-%d %H:%M:%S")
|
||
except:
|
||
pass
|
||
else:
|
||
d["last_login"] = ""
|
||
|
||
page_num = int(count / page_size)
|
||
if count % page_size > 0:
|
||
page_num += 1
|
||
pageLabels = buildPageLabels(page=page, page_num=page_num, lang=f_parseRequestLang(request))
|
||
pageData = {
|
||
"page": page,
|
||
"page_size": page_size,
|
||
"page_num": page_num,
|
||
"count": count,
|
||
"pageLabels": pageLabels
|
||
}
|
||
|
||
ret = True
|
||
msg = LANG_VIEWS_T(request, "msg_success")
|
||
else:
|
||
msg = __check_msg
|
||
else:
|
||
msg = LANG_VIEWS_T(request, "msg_method_not_supported")
|
||
|
||
res = {
|
||
"code": 1000 if ret else 0,
|
||
"msg": msg,
|
||
"data": data,
|
||
"pageData": pageData
|
||
}
|
||
return f_responseJson(res)
|
||
def api_openAdd(request):
|
||
__ret = False
|
||
__msg = LANG_VIEWS_T(request, "msg_unknown_error")
|
||
|
||
if request.method == 'POST':
|
||
__check_ret, __check_msg = f_checkRequestSafe(request)
|
||
if __check_ret:
|
||
params = f_parsePostParams(request)
|
||
g_logger.info("UserView.openAdd() params:%s" % str(redact_mapping(params)))
|
||
try:
|
||
login_user = f_sessionReadUser(request)
|
||
if not login_user:
|
||
raise Exception(LANG_VIEWS_T(request, "msg_not_logged_in"))
|
||
|
||
username = params.get("username", "").strip()
|
||
email = params.get("email", "").strip()
|
||
password = params.get("password", "").strip()
|
||
is_active = params.get("is_active")
|
||
is_active = int(is_active)
|
||
role = (params.get("role") or "viewer").strip()
|
||
if role not in ("system_admin", "algorithm_admin", "operator", "viewer"):
|
||
role = "viewer"
|
||
|
||
if username == "":
|
||
raise Exception(LANG_VIEWS_T(request, "user_username_required"))
|
||
if email == "":
|
||
raise Exception(LANG_VIEWS_T(request, "user_email_required"))
|
||
if len(password) < 6 or len(password) > 16:
|
||
raise Exception(LANG_VIEWS_T(request, "user_password_length"))
|
||
|
||
if User.objects.filter(username=username).exists():
|
||
raise Exception(LANG_VIEWS_T(request, "user_username_exists"))
|
||
else:
|
||
now = datetime.now()
|
||
user = User()
|
||
user.username = username
|
||
user.set_password(password)
|
||
user.email = email
|
||
user.date_joined = now
|
||
user.is_superuser = 0 # 表单创建均为非超级管理员
|
||
user.is_staff = 1
|
||
user.is_active = is_active
|
||
user.save()
|
||
user.groups.set([Group.objects.get(name=role)])
|
||
|
||
if user.id > 0:
|
||
# 添加日志
|
||
lang = f_parseRequestLang(request)
|
||
LogUtils.add_user_log(login_user.get("id"), username, LogUtils.LOG_TYPE_ADD, lang=lang)
|
||
__ret = True
|
||
__msg = LANG_VIEWS_T(request, "msg_add_success")
|
||
else:
|
||
__msg = LANG_VIEWS_T(request, "msg_add_failed")
|
||
except Exception as e:
|
||
__msg = str(e)
|
||
else:
|
||
__msg = __check_msg
|
||
else:
|
||
__msg = LANG_VIEWS_T(request, "msg_method_not_supported")
|
||
|
||
res = {
|
||
"code": 1000 if __ret else 0,
|
||
"msg": __msg
|
||
}
|
||
g_logger.info("UserView.openAdd() res=%s" % str(res))
|
||
return f_responseJson(res)
|
||
def api_openEdit(request):
|
||
__ret = False
|
||
__msg = LANG_VIEWS_T(request, "msg_unknown_error")
|
||
|
||
if request.method == 'POST':
|
||
__check_ret, __check_msg = f_checkRequestSafe(request)
|
||
if __check_ret:
|
||
params = f_parsePostParams(request)
|
||
g_logger.info("UserView.openEdit() params:%s" % str(redact_mapping(params)))
|
||
try:
|
||
login_user = f_sessionReadUser(request)
|
||
if not login_user:
|
||
raise Exception(LANG_VIEWS_T(request, "msg_not_logged_in"))
|
||
|
||
user_id = params.get("id") # 被操作用户id
|
||
is_active = params.get("is_active")
|
||
username = params.get("username", "").strip()
|
||
email = params.get("email", "").strip()
|
||
new_password = params.get("new_password", "")
|
||
re_password = params.get("re_password", "")
|
||
user_id = int(user_id)
|
||
is_active = int(is_active)
|
||
role = (params.get("role") or "").strip()
|
||
|
||
if username == "":
|
||
raise Exception(LANG_VIEWS_T(request, "user_username_required"))
|
||
if email == "":
|
||
raise Exception(LANG_VIEWS_T(request, "user_email_required"))
|
||
if re_password == "" and new_password == "":
|
||
pass
|
||
# 未修改密码
|
||
else:
|
||
# 修改了密码
|
||
|
||
if new_password == "":
|
||
raise Exception(LANG_VIEWS_T(request, "user_new_password_required"))
|
||
if re_password == "":
|
||
raise Exception(LANG_VIEWS_T(request, "user_confirm_password_required"))
|
||
if new_password != re_password:
|
||
raise Exception(LANG_VIEWS_T(request, "user_password_mismatch"))
|
||
if len(new_password) < 6 or len(new_password) > 16:
|
||
raise Exception(LANG_VIEWS_T(request, "user_new_password_length"))
|
||
|
||
user = User.objects.filter(id=user_id).first()
|
||
if user:
|
||
# 验证要修改的用户名是否已经存在start
|
||
if user.username == username:
|
||
pass
|
||
# 用户名未做修改
|
||
else:
|
||
filter_username = g_database.select(
|
||
"select count(1) as count from auth_user where id!=%s and username=%s",
|
||
[user_id, username])
|
||
filter_username_count = int(filter_username[0]["count"])
|
||
if filter_username_count > 0:
|
||
raise Exception(LANG_VIEWS_T(request, "user_new_username_exists"))
|
||
user.username = username # 修改了用户名
|
||
# 验证要修改的用户名是否已经存在end
|
||
|
||
if re_password == "" and new_password == "":
|
||
pass
|
||
else:
|
||
user.set_password(new_password) # 修改了密码
|
||
|
||
user.email = email
|
||
user.is_active = is_active
|
||
user.save()
|
||
if role in ("system_admin", "algorithm_admin", "operator", "viewer"):
|
||
user.groups.set([Group.objects.get(name=role)])
|
||
|
||
# 添加日志
|
||
lang = f_parseRequestLang(request)
|
||
LogUtils.add_user_log(login_user.get("id"), username, LogUtils.LOG_TYPE_EDIT, lang=lang)
|
||
__ret = True
|
||
__msg = LANG_VIEWS_T(request, "msg_edit_success")
|
||
else:
|
||
raise Exception(LANG_VIEWS_T(request, "msg_data_not_exist"))
|
||
except Exception as e:
|
||
__msg = str(e)
|
||
else:
|
||
__msg = __check_msg
|
||
else:
|
||
__msg = LANG_VIEWS_T(request, "msg_method_not_supported")
|
||
|
||
res = {
|
||
"code": 1000 if __ret else 0,
|
||
"msg": __msg
|
||
}
|
||
g_logger.info("UserView.openEdit() res=%s" % str(res))
|
||
return f_responseJson(res)
|
||
def api_openDel(request):
|
||
ret = False
|
||
msg = LANG_VIEWS_T(request, "msg_unknown_error")
|
||
if request.method == 'POST':
|
||
__check_ret, __check_msg = f_checkRequestSafe(request)
|
||
if __check_ret:
|
||
params = f_parsePostParams(request)
|
||
try:
|
||
login_user = f_sessionReadUser(request)
|
||
if not login_user:
|
||
raise Exception(LANG_VIEWS_T(request, "msg_not_logged_in"))
|
||
|
||
user_id = int(params.get("id"))
|
||
if not user_id:
|
||
raise Exception(LANG_VIEWS_T(request, "user_request_params_invalid"))
|
||
|
||
login_user_id = int(login_user.get("id"))
|
||
if login_user_id == user_id:
|
||
raise Exception(LANG_VIEWS_T(request, "user_super_admin_no_delete_self"))
|
||
|
||
user = User.objects.filter(id=user_id)
|
||
if len(user) > 0:
|
||
user = user[0]
|
||
if user.is_superuser == 1:
|
||
raise Exception(LANG_VIEWS_T(request, "user_super_admin_no_delete"))
|
||
else:
|
||
if user.delete():
|
||
ret = True
|
||
msg = LANG_VIEWS_T(request, "msg_success")
|
||
else:
|
||
msg = LANG_VIEWS_T(request, "msg_failed_to_delete")
|
||
else:
|
||
raise Exception(LANG_VIEWS_T(request, "msg_data_not_exist"))
|
||
except Exception as e:
|
||
msg = str(e)
|
||
else:
|
||
msg = __check_msg
|
||
else:
|
||
msg = LANG_VIEWS_T(request, "msg_method_not_supported")
|
||
|
||
res = {
|
||
"code": 1000 if ret else 0,
|
||
"msg": msg
|
||
}
|
||
g_logger.info("UserView.openDel() res=%s" % str(res))
|
||
return f_responseJson(res)
|
||
|
||
def api_openInfo(request):
|
||
"""获取单条用户详情"""
|
||
ret = False
|
||
msg = LANG_VIEWS_T(request, "msg_unknown_error")
|
||
info = {}
|
||
|
||
if request.method == "GET":
|
||
__check_ret, __check_msg = f_checkRequestSafe(request)
|
||
if __check_ret:
|
||
params = f_parseGetParams(request)
|
||
user_id = params.get("id", "")
|
||
|
||
if not user_id:
|
||
msg = LANG_VIEWS_T(request, "user_id_required")
|
||
else:
|
||
try:
|
||
user_id = int(user_id)
|
||
user = User.objects.filter(id=user_id).first()
|
||
if user:
|
||
info = {
|
||
"id": user.id,
|
||
"username": user.username,
|
||
"email": user.email,
|
||
"is_active": user.is_active,
|
||
"is_superuser": user.is_superuser,
|
||
"is_staff": user.is_staff,
|
||
"date_joined": user.date_joined.strftime("%Y-%m-%d %H:%M:%S") if user.date_joined else "",
|
||
"last_login": user.last_login.strftime("%Y-%m-%d %H:%M:%S") if user.last_login else ""
|
||
}
|
||
ret = True
|
||
msg = LANG_VIEWS_T(request, "msg_success")
|
||
else:
|
||
msg = LANG_VIEWS_T(request, "user_not_exist")
|
||
except Exception as e:
|
||
msg = str(e)
|
||
else:
|
||
msg = __check_msg
|
||
else:
|
||
msg = LANG_VIEWS_T(request, "msg_method_not_supported")
|
||
|
||
res = {
|
||
"code": 1000 if ret else 0,
|
||
"msg": msg,
|
||
"info": info
|
||
}
|
||
g_logger.info("UserView.openInfo() res=%s" % str(res))
|
||
return f_responseJson(res)
|
||
|
||
def api_openCaptcha(request):
|
||
"""生成验证码图片视图"""
|
||
# 生成验证码
|
||
text,image = generate_secure_captcha()
|
||
|
||
# 存储到session
|
||
cur_timestamp = int(time.time())
|
||
request.session[g_session_key_captcha] = {
|
||
"captcha_text": text,
|
||
"captcha_create_timestamp": cur_timestamp, # 创建秒级时间戳
|
||
}
|
||
|
||
# 创建内存流输出
|
||
stream = BytesIO()
|
||
image.save(stream, 'PNG')
|
||
return HttpResponse(stream.getvalue(), content_type='image/png')
|
||
|
||
def login(request):
|
||
|
||
context = {
|
||
"projectVersion": PROJECT_VERSION,
|
||
"projectFlag": PROJECT_FLAG
|
||
}
|
||
|
||
|
||
if request.method == 'POST':
|
||
ret = False
|
||
msg = LANG_VIEWS_T(request, "msg_unknown_error")
|
||
|
||
params = f_parsePostParams(request)
|
||
username = (params.get("username") or params.get("username_s") or "").strip()
|
||
password = (params.get("password") or params.get("password_s") or "").strip()
|
||
captcha = params.get("captcha", None)
|
||
|
||
try:
|
||
if g_config.isEnableLoginCaptcha:
|
||
if not captcha:
|
||
raise Exception(LANG_VIEWS_T(request, "user_captcha_missing"))
|
||
# 开启了登录验证码功能
|
||
session_captcha = request.session.get(g_session_key_captcha, None)
|
||
if not session_captcha:
|
||
raise Exception(LANG_VIEWS_T(request, "user_captcha_not_found"))
|
||
|
||
if session_captcha:
|
||
captcha_text = session_captcha.get("captcha_text", "")
|
||
captcha_create_timestamp = session_captcha.get("captcha_create_timestamp", 0)
|
||
cur_timestamp = int(time.time())
|
||
|
||
# 验证码过期判断
|
||
if (cur_timestamp - captcha_create_timestamp) > 300:
|
||
raise Exception(LANG_VIEWS_T(request, "user_captcha_expired"))
|
||
|
||
# 验证码相同判断
|
||
if captcha_text != captcha:
|
||
raise Exception(LANG_VIEWS_T(request, "user_captcha_incorrect"))
|
||
if username and password:
|
||
user = User.objects.filter(username=username).first()
|
||
if user:
|
||
if user.is_active:
|
||
authenticated_user = authenticate(request, username=username, password=password)
|
||
if authenticated_user is not None:
|
||
auth_login(request, authenticated_user)
|
||
user.first_name = "cec=0"
|
||
user.last_login = datetime.now()
|
||
user.save()
|
||
|
||
# 保留兼容旧模板的数据；鉴权和授权以 request.user 为准。
|
||
request.session[g_session_key_user] = {
|
||
"id": user.id,
|
||
"username": username,
|
||
"email": user.email,
|
||
"is_superuser": user.is_superuser,
|
||
"is_active": user.is_active,
|
||
"is_staff": user.is_staff,
|
||
"log_debug": 1 if g_config.logDebug else 0,
|
||
}
|
||
request.session.pop(g_session_key_captcha, None)
|
||
|
||
# 记录登录日志
|
||
LogUtils.add_log(
|
||
user_id=user.id,
|
||
log_type=LogUtils.LOG_TYPE_LOGIN,
|
||
content=f"用户登录[{username}]",
|
||
state=LogUtils.STATE_SUCCESS
|
||
)
|
||
|
||
ret = True
|
||
msg = LANG_VIEWS_T(request, "user_login_success")
|
||
else:
|
||
continuous_error_count = 0
|
||
try:
|
||
vals = user.first_name.split(",")
|
||
for val in vals:
|
||
array = val.split("=")
|
||
if len(array) == 2:
|
||
if array[0] == "cec":
|
||
continuous_error_count = int(array[1])
|
||
except:
|
||
pass
|
||
|
||
continuous_error_count += 1
|
||
if continuous_error_count > 6:
|
||
is_active = False
|
||
msg = LANG_VIEWS_T(request, "user_password_error_lock") % continuous_error_count
|
||
else:
|
||
is_active = True
|
||
msg = LANG_VIEWS_T(request, "user_password_error_count") % continuous_error_count
|
||
user.is_active = is_active
|
||
user.first_name = "cec=%d"%continuous_error_count
|
||
user.save()
|
||
else:
|
||
msg = LANG_VIEWS_T(request, "user_account_locked")
|
||
else:
|
||
msg = LANG_VIEWS_T(request, "user_not_registered")
|
||
else:
|
||
msg = LANG_VIEWS_T(request, "msg_invalid_parameter")
|
||
except Exception as e:
|
||
msg = str(e)
|
||
|
||
res = {
|
||
"code": 1000 if ret else 0,
|
||
"msg": msg
|
||
}
|
||
return f_responseJson(res)
|
||
else:
|
||
context["isEnableLoginCaptcha"] = 1 if g_config.isEnableLoginCaptcha else 0
|
||
return render(request, 'app/user/login.html', context)
|
||
|
||
def logout(request):
|
||
|
||
# 记录退出登录日志
|
||
if request.session.has_key(g_session_key_user):
|
||
user_info = request.session.get(g_session_key_user)
|
||
user_id = user_info.get('id', 0)
|
||
username = user_info.get('username', '未知用户')
|
||
|
||
# 记录日志
|
||
if user_id:
|
||
LogUtils.add_log(
|
||
user_id=user_id,
|
||
log_type=LogUtils.LOG_TYPE_LOGOUT,
|
||
content=f"用户退出[{username}]",
|
||
state=LogUtils.STATE_SUCCESS
|
||
)
|
||
|
||
del request.session[g_session_key_user]
|
||
|
||
if request.session.has_key(g_session_key_captcha):
|
||
del request.session[g_session_key_captcha]
|
||
|
||
auth_logout(request)
|
||
|
||
return redirect("/login")
|