397 lines
11 KiB
Go
397 lines
11 KiB
Go
package user
|
||
|
||
import (
|
||
"crypto/md5"
|
||
"fmt"
|
||
"net/http"
|
||
"net/url"
|
||
"os"
|
||
"path/filepath"
|
||
"strings"
|
||
"time"
|
||
|
||
model "github.com/cloudreve/Cloudreve/v3/models"
|
||
"github.com/cloudreve/Cloudreve/v3/pkg/cluster"
|
||
"github.com/cloudreve/Cloudreve/v3/pkg/hashid"
|
||
"github.com/cloudreve/Cloudreve/v3/pkg/qq"
|
||
"github.com/cloudreve/Cloudreve/v3/pkg/serializer"
|
||
"github.com/cloudreve/Cloudreve/v3/pkg/util"
|
||
"github.com/gin-gonic/gin"
|
||
"github.com/pquerna/otp/totp"
|
||
"github.com/samber/lo"
|
||
)
|
||
|
||
// SettingService 通用设置服务
|
||
type SettingService struct {
|
||
}
|
||
|
||
// SettingListService 通用设置列表服务
|
||
type SettingListService struct {
|
||
Page int `form:"page" binding:"required,min=1"`
|
||
}
|
||
|
||
// AvatarService 头像服务
|
||
type AvatarService struct {
|
||
Size string `uri:"size" binding:"required,eq=l|eq=m|eq=s"`
|
||
}
|
||
|
||
// SettingUpdateService 设定更改服务
|
||
type SettingUpdateService struct {
|
||
Option string `uri:"option" binding:"required,eq=nick|eq=theme|eq=homepage|eq=vip|eq=qq|eq=policy|eq=password|eq=2fa|eq=authn"`
|
||
}
|
||
|
||
// OptionsChangeHandler 属性更改接口
|
||
type OptionsChangeHandler interface {
|
||
Update(*gin.Context, *model.User) serializer.Response
|
||
}
|
||
|
||
// ChangerNick 昵称更改服务
|
||
type ChangerNick struct {
|
||
Nick string `json:"nick" binding:"required,min=1,max=255"`
|
||
}
|
||
|
||
// VIPUnsubscribe 用户组解约服务
|
||
type VIPUnsubscribe struct {
|
||
}
|
||
|
||
// QQBind QQ互联服务
|
||
type QQBind struct {
|
||
}
|
||
|
||
// PolicyChange 更改存储策略
|
||
type PolicyChange struct {
|
||
ID string `json:"id" binding:"required"`
|
||
}
|
||
|
||
// HomePage 更改个人主页开关
|
||
type HomePage struct {
|
||
Enabled bool `json:"status"`
|
||
}
|
||
|
||
// PasswordChange 更改密码
|
||
type PasswordChange struct {
|
||
Old string `json:"old" binding:"required,min=4,max=64"`
|
||
New string `json:"new" binding:"required,min=4,max=64"`
|
||
}
|
||
|
||
// Enable2FA 开启二步验证
|
||
type Enable2FA struct {
|
||
Code string `json:"code" binding:"required"`
|
||
}
|
||
|
||
// DeleteWebAuthn 删除WebAuthn凭证
|
||
type DeleteWebAuthn struct {
|
||
ID string `json:"id" binding:"required"`
|
||
}
|
||
|
||
// ThemeChose 主题选择
|
||
type ThemeChose struct {
|
||
Theme string `json:"theme" binding:"required,hexcolor|rgb|rgba|hsl"`
|
||
}
|
||
|
||
// Update 更新主题设定
|
||
func (service *ThemeChose) Update(c *gin.Context, user *model.User) serializer.Response {
|
||
user.OptionsSerialized.PreferredTheme = service.Theme
|
||
if err := user.UpdateOptions(); err != nil {
|
||
return serializer.DBErr("Failed to update user preferences", err)
|
||
}
|
||
|
||
return serializer.Response{}
|
||
}
|
||
|
||
// Update 删除凭证
|
||
func (service *DeleteWebAuthn) Update(c *gin.Context, user *model.User) serializer.Response {
|
||
user.RemoveAuthn(service.ID)
|
||
return serializer.Response{}
|
||
}
|
||
|
||
// Update 更改二步验证设定
|
||
func (service *Enable2FA) Update(c *gin.Context, user *model.User) serializer.Response {
|
||
if user.TwoFactor == "" {
|
||
// 开启2FA
|
||
secret, ok := util.GetSession(c, "2fa_init").(string)
|
||
if !ok {
|
||
return serializer.Err(serializer.CodeInternalSetting, "You have not initiated 2FA session", nil)
|
||
}
|
||
|
||
if !totp.Validate(service.Code, secret) {
|
||
return serializer.ParamErr("Incorrect 2FA code", nil)
|
||
}
|
||
|
||
if err := user.Update(map[string]interface{}{"two_factor": secret}); err != nil {
|
||
return serializer.DBErr("Failed to update user preferences", err)
|
||
}
|
||
|
||
} else {
|
||
// 关闭2FA
|
||
if !totp.Validate(service.Code, user.TwoFactor) {
|
||
return serializer.ParamErr("Incorrect 2FA code", nil)
|
||
}
|
||
|
||
if err := user.Update(map[string]interface{}{"two_factor": ""}); err != nil {
|
||
return serializer.DBErr("Failed to update user preferences", err)
|
||
}
|
||
}
|
||
|
||
return serializer.Response{}
|
||
}
|
||
|
||
// Init2FA 初始化二步验证
|
||
func (service *SettingService) Init2FA(c *gin.Context, user *model.User) serializer.Response {
|
||
key, err := totp.Generate(totp.GenerateOpts{
|
||
Issuer: "Cloudreve",
|
||
AccountName: user.Email,
|
||
})
|
||
if err != nil {
|
||
return serializer.Err(serializer.CodeInternalSetting, "Failed to generate TOTP secret", err)
|
||
}
|
||
|
||
util.SetSession(c, map[string]interface{}{"2fa_init": key.Secret()})
|
||
return serializer.Response{Data: key.Secret()}
|
||
}
|
||
|
||
// Update 更改密码
|
||
func (service *PasswordChange) Update(c *gin.Context, user *model.User) serializer.Response {
|
||
// 验证老密码
|
||
if ok, _ := user.CheckPassword(service.Old); !ok {
|
||
return serializer.Err(serializer.CodeIncorrectPassword, "", nil)
|
||
}
|
||
|
||
// 更改为新密码
|
||
user.SetPassword(service.New)
|
||
if err := user.Update(map[string]interface{}{"password": user.Password}); err != nil {
|
||
return serializer.DBErr("Failed to update password", err)
|
||
}
|
||
|
||
return serializer.Response{}
|
||
}
|
||
|
||
// Update 切换个人主页开关
|
||
func (service *HomePage) Update(c *gin.Context, user *model.User) serializer.Response {
|
||
user.OptionsSerialized.ProfileOff = !service.Enabled
|
||
if err := user.UpdateOptions(); err != nil {
|
||
return serializer.DBErr("Failed to update user preferences", err)
|
||
}
|
||
|
||
return serializer.Response{}
|
||
}
|
||
|
||
// Update 更改用户偏好的存储策略
|
||
func (service *PolicyChange) Update(c *gin.Context, user *model.User) serializer.Response {
|
||
// 取得存储策略的ID
|
||
rawID, err := hashid.DecodeHashID(service.ID, hashid.PolicyID)
|
||
if err != nil {
|
||
return serializer.Err(serializer.CodePolicyNotExist, "", err)
|
||
}
|
||
|
||
// 用户是否可以切换到此存储策略
|
||
if !util.ContainsUint(user.Group.PolicyList, rawID) {
|
||
return serializer.Err(serializer.CodePolicyNotAllowed, "", nil)
|
||
}
|
||
|
||
// 查找存储策略
|
||
if _, err := model.GetPolicyByID(rawID); err != nil {
|
||
return serializer.Err(serializer.CodePolicyNotAllowed, "", nil)
|
||
}
|
||
|
||
// 切换存储策略
|
||
user.OptionsSerialized.PreferredPolicy = rawID
|
||
if err := user.UpdateOptions(); err != nil {
|
||
return serializer.DBErr("Failed to update user preferences", err)
|
||
}
|
||
|
||
return serializer.Response{}
|
||
}
|
||
|
||
// Update 绑定或解绑QQ
|
||
func (service *QQBind) Update(c *gin.Context, user *model.User) serializer.Response {
|
||
// 解除绑定
|
||
if user.OpenID != "" {
|
||
// 只通过QQ登录的用户无法解除绑定
|
||
if strings.HasSuffix(user.Email, "@login.qq.com") {
|
||
return serializer.Err(serializer.CodeNoPermissionErr, "This user cannot be unlinked", nil)
|
||
}
|
||
|
||
if err := user.Update(map[string]interface{}{"open_id": ""}); err != nil {
|
||
return serializer.DBErr("Failed to update user open id", err)
|
||
}
|
||
return serializer.Response{
|
||
Data: "",
|
||
}
|
||
}
|
||
|
||
// 新建绑定
|
||
res, err := qq.NewLoginRequest()
|
||
if err != nil {
|
||
return serializer.Err(serializer.CodeNotSet, "Failed to start QQ login request", err)
|
||
}
|
||
|
||
// 设定QQ登录会话Secret
|
||
util.SetSession(c, map[string]interface{}{"qq_login_secret": res.SecretKey})
|
||
|
||
return serializer.Response{
|
||
Data: res.URL,
|
||
}
|
||
}
|
||
|
||
// Update 用户组解约
|
||
func (service *VIPUnsubscribe) Update(c *gin.Context, user *model.User) serializer.Response {
|
||
if user.GroupExpires != nil {
|
||
timeNow := time.Now()
|
||
if time.Now().Before(*user.GroupExpires) {
|
||
if err := user.Update(map[string]interface{}{"group_expires": &timeNow}); err != nil {
|
||
return serializer.DBErr("Failed to update user", err)
|
||
}
|
||
}
|
||
}
|
||
return serializer.Response{}
|
||
}
|
||
|
||
// Update 更改昵称
|
||
func (service *ChangerNick) Update(c *gin.Context, user *model.User) serializer.Response {
|
||
if err := user.Update(map[string]interface{}{"nick": service.Nick}); err != nil {
|
||
return serializer.DBErr("Failed to update user", err)
|
||
}
|
||
|
||
return serializer.Response{}
|
||
}
|
||
|
||
// Get 获取用户头像
|
||
func (service *AvatarService) Get(c *gin.Context) serializer.Response {
|
||
// 查找目标用户
|
||
uid, _ := c.Get("object_id")
|
||
user, err := model.GetActiveUserByID(uid.(uint))
|
||
if err != nil {
|
||
return serializer.Err(serializer.CodeUserNotFound, "", err)
|
||
}
|
||
|
||
// 未设定头像时，返回404错误
|
||
if user.Avatar == "" {
|
||
c.Status(404)
|
||
return serializer.Response{}
|
||
}
|
||
|
||
// 获取头像设置
|
||
sizes := map[string]string{
|
||
"s": model.GetSettingByName("avatar_size_s"),
|
||
"m": model.GetSettingByName("avatar_size_m"),
|
||
"l": model.GetSettingByName("avatar_size_l"),
|
||
}
|
||
|
||
// Gravatar 头像重定向
|
||
if user.Avatar == "gravatar" {
|
||
server := model.GetSettingByName("gravatar_server")
|
||
gravatarRoot, err := url.Parse(server)
|
||
if err != nil {
|
||
return serializer.Err(serializer.CodeInternalSetting, "Failed to parse Gravatar server", err)
|
||
}
|
||
email_lowered := strings.ToLower(user.Email)
|
||
has := md5.Sum([]byte(email_lowered))
|
||
avatar, _ := url.Parse(fmt.Sprintf("/avatar/%x?d=mm&s=%s", has, sizes[service.Size]))
|
||
|
||
return serializer.Response{
|
||
Code: -301,
|
||
Data: gravatarRoot.ResolveReference(avatar).String(),
|
||
}
|
||
}
|
||
|
||
// 本地文件头像
|
||
if user.Avatar == "file" {
|
||
avatarRoot := util.RelativePath(model.GetSettingByName("avatar_path"))
|
||
sizeToInt := map[string]string{
|
||
"s": "0",
|
||
"m": "1",
|
||
"l": "2",
|
||
}
|
||
|
||
avatar, err := os.Open(filepath.Join(avatarRoot, fmt.Sprintf("avatar_%d_%s.png", user.ID, sizeToInt[service.Size])))
|
||
if err != nil {
|
||
c.Status(404)
|
||
return serializer.Response{}
|
||
}
|
||
defer avatar.Close()
|
||
|
||
http.ServeContent(c.Writer, c.Request, "avatar.png", user.UpdatedAt, avatar)
|
||
return serializer.Response{}
|
||
}
|
||
|
||
c.Status(404)
|
||
return serializer.Response{}
|
||
}
|
||
|
||
// ListTasks 列出任务
|
||
func (service *SettingListService) ListTasks(c *gin.Context, user *model.User) serializer.Response {
|
||
tasks, total := model.ListTasks(user.ID, service.Page, 10, "updated_at desc")
|
||
return serializer.BuildTaskList(tasks, total)
|
||
}
|
||
|
||
// Policy 获取用户存储策略设置
|
||
func (service *SettingService) Policy(c *gin.Context, user *model.User) serializer.Response {
|
||
// 取得用户可用存储策略
|
||
available := make([]model.Policy, 0, len(user.Group.PolicyList))
|
||
for _, id := range user.Group.PolicyList {
|
||
if policy, err := model.GetPolicyByID(id); err == nil {
|
||
available = append(available, policy)
|
||
}
|
||
}
|
||
|
||
return serializer.BuildPolicySettingRes(available)
|
||
}
|
||
|
||
// Nodes 获取用户可选节点
|
||
func (service *SettingService) Nodes(c *gin.Context, user *model.User) serializer.Response {
|
||
if !user.Group.OptionsSerialized.SelectNode {
|
||
return serializer.Err(serializer.CodeGroupNotAllowed, "", nil)
|
||
}
|
||
|
||
availableNodesID := user.Group.OptionsSerialized.AvailableNodes
|
||
|
||
// All nodes available
|
||
if len(availableNodesID) == 0 {
|
||
nodes, err := model.GetNodesByStatus(model.NodeActive)
|
||
if err != nil {
|
||
return serializer.DBErr("Failed to list nodes", err)
|
||
}
|
||
|
||
availableNodesID = lo.Map[model.Node, uint](nodes, func(node model.Node, index int) uint {
|
||
return node.ID
|
||
})
|
||
}
|
||
|
||
// 取得用户可用存储策略
|
||
available := lo.FilterMap[uint, *model.Node](availableNodesID,
|
||
func(id uint, index int) (*model.Node, bool) {
|
||
if node := cluster.Default.GetNodeByID(id); node != nil {
|
||
return node.DBModel(), node.IsActive() && node.IsFeatureEnabled("aria2")
|
||
}
|
||
|
||
return nil, false
|
||
})
|
||
|
||
return serializer.BuildNodeOptionRes(available)
|
||
}
|
||
|
||
// Settings 获取用户设定
|
||
func (service *SettingService) Settings(c *gin.Context, user *model.User) serializer.Response {
|
||
// 用户组有效期
|
||
var groupExpires *time.Time
|
||
if user.GroupExpires != nil {
|
||
if expires := user.GroupExpires.Unix() - time.Now().Unix(); expires > 0 {
|
||
groupExpires = user.GroupExpires
|
||
}
|
||
}
|
||
|
||
return serializer.Response{
|
||
Data: map[string]interface{}{
|
||
"uid": user.ID,
|
||
"qq": user.OpenID != "",
|
||
"homepage": !user.OptionsSerialized.ProfileOff,
|
||
"two_factor": user.TwoFactor != "",
|
||
"prefer_theme": user.OptionsSerialized.PreferredTheme,
|
||
"themes": model.GetSettingByName("themes"),
|
||
"group_expires": groupExpires,
|
||
"authn": serializer.BuildWebAuthnList(user.WebAuthnCredentials()),
|
||
},
|
||
}
|
||
}
|