285 lines
7.4 KiB
Go
285 lines
7.4 KiB
Go
package controllers
|
||
|
||
import (
|
||
"encoding/json"
|
||
"fmt"
|
||
"io"
|
||
"strconv"
|
||
"strings"
|
||
"time"
|
||
|
||
"server/models"
|
||
"server/pkg/jwtutil"
|
||
|
||
"github.com/beego/beego/v2/client/orm"
|
||
beego "github.com/beego/beego/v2/server/web"
|
||
)
|
||
|
||
// BackendLoginLogController 登录日志（yz_system_login_log）
|
||
type BackendLoginLogController struct {
|
||
beego.Controller
|
||
}
|
||
|
||
func (c *BackendLoginLogController) jsonErr(httpStatus, bizCode int, msg string) {
|
||
c.Ctx.Output.SetStatus(httpStatus)
|
||
c.Data["json"] = map[string]interface{}{"code": bizCode, "msg": msg}
|
||
_ = c.ServeJSON()
|
||
}
|
||
|
||
func (c *BackendLoginLogController) backendClaims() (*jwtutil.Claims, error) {
|
||
auth := c.Ctx.Request.Header.Get("Authorization")
|
||
if auth == "" {
|
||
return nil, fmt.Errorf("未登录")
|
||
}
|
||
parts := strings.SplitN(auth, " ", 2)
|
||
if len(parts) != 2 || parts[0] != "Bearer" {
|
||
return nil, fmt.Errorf("认证信息格式错误")
|
||
}
|
||
claims, err := jwtutil.ParseToken(parts[1])
|
||
if err != nil {
|
||
return nil, fmt.Errorf("无效的token")
|
||
}
|
||
if claims.UserType != "backend" {
|
||
return nil, fmt.Errorf("无权访问")
|
||
}
|
||
return claims, nil
|
||
}
|
||
|
||
// RecordLoginLog 写入一条登录日志（登录成功/失败均记录，失败不影响登录流程）。
|
||
func RecordLoginLog(tid *uint64, userID uint64, account, userName, tenantName, loginType string, status int8, message string, ip, userAgent string) {
|
||
if len(userAgent) > 500 {
|
||
userAgent = userAgent[:500]
|
||
}
|
||
if len(message) > 255 {
|
||
message = message[:255]
|
||
}
|
||
row := &models.SystemLoginLog{
|
||
Tid: tid,
|
||
UserID: userID,
|
||
Account: account,
|
||
UserName: userName,
|
||
TenantName: tenantName,
|
||
LoginType: loginType,
|
||
Status: status,
|
||
Message: message,
|
||
IP: ip,
|
||
UserAgent: userAgent,
|
||
}
|
||
if _, err := models.Orm.Insert(row); err != nil {
|
||
fmt.Println("record login log error:", err)
|
||
}
|
||
}
|
||
|
||
// List GET /backend/loginLogs?page=1&pageSize=20&keyword=&status=&loginType=&startTime=&endTime=
|
||
func (c *BackendLoginLogController) List() {
|
||
if _, err := c.backendClaims(); err != nil {
|
||
c.jsonErr(401, 401, err.Error())
|
||
return
|
||
}
|
||
|
||
page, _ := c.GetInt("page", 1)
|
||
pageSize, _ := c.GetInt("pageSize", 20)
|
||
if page < 1 {
|
||
page = 1
|
||
}
|
||
if pageSize < 1 {
|
||
pageSize = 20
|
||
}
|
||
if pageSize > 200 {
|
||
pageSize = 200
|
||
}
|
||
|
||
keyword := strings.TrimSpace(c.GetString("keyword"))
|
||
statusStr := strings.TrimSpace(c.GetString("status"))
|
||
loginType := strings.TrimSpace(c.GetString("loginType"))
|
||
startTimeStr := strings.TrimSpace(c.GetString("startTime"))
|
||
endTimeStr := strings.TrimSpace(c.GetString("endTime"))
|
||
|
||
qs := models.Orm.QueryTable(new(models.SystemLoginLog)).Filter("delete_time__isnull", true)
|
||
|
||
cond := orm.NewCondition()
|
||
needCond := false
|
||
|
||
if statusStr != "" {
|
||
if st, err := strconv.Atoi(statusStr); err == nil {
|
||
cond = cond.And("status", st)
|
||
needCond = true
|
||
}
|
||
}
|
||
if loginType != "" {
|
||
cond = cond.And("login_type", loginType)
|
||
needCond = true
|
||
}
|
||
if keyword != "" {
|
||
kw := orm.NewCondition().
|
||
Or("account__icontains", keyword).
|
||
Or("user_name__icontains", keyword).
|
||
Or("tenant_name__icontains", keyword).
|
||
Or("ip__icontains", keyword)
|
||
if uid, err := strconv.ParseUint(keyword, 10, 64); err == nil && uid > 0 {
|
||
kw = kw.Or("user_id", uid)
|
||
}
|
||
cond = cond.AndCond(kw)
|
||
needCond = true
|
||
}
|
||
if t, err := parseTimeFlexible(startTimeStr); err == nil && !t.IsZero() {
|
||
cond = cond.And("create_time__gte", t)
|
||
needCond = true
|
||
}
|
||
if t, err := parseTimeFlexible(endTimeStr); err == nil && !t.IsZero() {
|
||
cond = cond.And("create_time__lte", t)
|
||
needCond = true
|
||
}
|
||
|
||
if needCond {
|
||
qs = qs.SetCond(cond)
|
||
}
|
||
|
||
total, err := qs.Count()
|
||
if err != nil {
|
||
c.jsonErr(500, 500, "获取登录日志失败: "+err.Error())
|
||
return
|
||
}
|
||
|
||
var rows []models.SystemLoginLog
|
||
_, err = qs.OrderBy("-id").Limit(pageSize, (page-1)*pageSize).All(&rows)
|
||
if err != nil {
|
||
c.jsonErr(500, 500, "获取登录日志失败: "+err.Error())
|
||
return
|
||
}
|
||
|
||
list := make([]map[string]interface{}, 0, len(rows))
|
||
for i := range rows {
|
||
item := map[string]interface{}{
|
||
"id": rows[i].ID,
|
||
"tid": rows[i].Tid,
|
||
"user_id": rows[i].UserID,
|
||
"account": rows[i].Account,
|
||
"user_name": rows[i].UserName,
|
||
"tenant_name": rows[i].TenantName,
|
||
"login_type": rows[i].LoginType,
|
||
"status": rows[i].Status,
|
||
"message": rows[i].Message,
|
||
"ip": rows[i].IP,
|
||
"user_agent": rows[i].UserAgent,
|
||
"create_time": rows[i].CreateTime.Format("2006-01-02 15:04:05"),
|
||
}
|
||
list = append(list, item)
|
||
}
|
||
|
||
c.Data["json"] = map[string]interface{}{
|
||
"code": 200,
|
||
"msg": "success",
|
||
"data": map[string]interface{}{
|
||
"list": list,
|
||
"total": total,
|
||
},
|
||
}
|
||
_ = c.ServeJSON()
|
||
}
|
||
|
||
// Detail GET /backend/loginLogs/:id
|
||
func (c *BackendLoginLogController) Detail() {
|
||
if _, err := c.backendClaims(); err != nil {
|
||
c.jsonErr(401, 401, err.Error())
|
||
return
|
||
}
|
||
idStr := c.Ctx.Input.Param(":id")
|
||
id, err := strconv.ParseUint(idStr, 10, 64)
|
||
if err != nil || id == 0 {
|
||
c.jsonErr(400, 400, "无效ID")
|
||
return
|
||
}
|
||
var row models.SystemLoginLog
|
||
err = models.Orm.QueryTable(new(models.SystemLoginLog)).
|
||
Filter("id", id).
|
||
Filter("delete_time__isnull", true).
|
||
One(&row)
|
||
if err != nil {
|
||
c.jsonErr(404, 404, "记录不存在")
|
||
return
|
||
}
|
||
out := map[string]interface{}{
|
||
"id": row.ID,
|
||
"tid": row.Tid,
|
||
"user_id": row.UserID,
|
||
"account": row.Account,
|
||
"user_name": row.UserName,
|
||
"tenant_name": row.TenantName,
|
||
"login_type": row.LoginType,
|
||
"status": row.Status,
|
||
"message": row.Message,
|
||
"ip": row.IP,
|
||
"user_agent": row.UserAgent,
|
||
"create_time": row.CreateTime.Format("2006-01-02 15:04:05"),
|
||
}
|
||
c.Data["json"] = map[string]interface{}{"code": 200, "msg": "success", "data": out}
|
||
_ = c.ServeJSON()
|
||
}
|
||
|
||
// Delete DELETE /backend/loginLogs/:id
|
||
func (c *BackendLoginLogController) Delete() {
|
||
if _, err := c.backendClaims(); err != nil {
|
||
c.jsonErr(401, 401, err.Error())
|
||
return
|
||
}
|
||
idStr := c.Ctx.Input.Param(":id")
|
||
id, err := strconv.ParseUint(idStr, 10, 64)
|
||
if err != nil || id == 0 {
|
||
c.jsonErr(400, 400, "无效ID")
|
||
return
|
||
}
|
||
now := time.Now()
|
||
n, err := models.Orm.QueryTable(new(models.SystemLoginLog)).
|
||
Filter("id", id).
|
||
Filter("delete_time__isnull", true).
|
||
Update(map[string]interface{}{"delete_time": now})
|
||
if err != nil {
|
||
c.jsonErr(500, 500, "删除失败: "+err.Error())
|
||
return
|
||
}
|
||
if n == 0 {
|
||
c.jsonErr(404, 404, "记录不存在")
|
||
return
|
||
}
|
||
c.Data["json"] = map[string]interface{}{"code": 200, "msg": "删除成功"}
|
||
_ = c.ServeJSON()
|
||
}
|
||
|
||
type backendLoginLogBatchDeletePayload struct {
|
||
IDs []uint64 `json:"ids"`
|
||
}
|
||
|
||
// BatchDelete POST /backend/loginLogs/batchDelete
|
||
func (c *BackendLoginLogController) BatchDelete() {
|
||
if _, err := c.backendClaims(); err != nil {
|
||
c.jsonErr(401, 401, err.Error())
|
||
return
|
||
}
|
||
raw, err := io.ReadAll(c.Ctx.Request.Body)
|
||
if err != nil {
|
||
c.jsonErr(400, 400, "参数错误")
|
||
return
|
||
}
|
||
var p backendLoginLogBatchDeletePayload
|
||
if err := json.Unmarshal(raw, &p); err != nil {
|
||
c.jsonErr(400, 400, "参数错误")
|
||
return
|
||
}
|
||
if len(p.IDs) == 0 {
|
||
c.jsonErr(400, 400, "请选择要删除的日志")
|
||
return
|
||
}
|
||
now := time.Now()
|
||
_, err = models.Orm.QueryTable(new(models.SystemLoginLog)).
|
||
Filter("id__in", p.IDs).
|
||
Filter("delete_time__isnull", true).
|
||
Update(map[string]interface{}{"delete_time": now})
|
||
if err != nil {
|
||
c.jsonErr(500, 500, "批量删除失败: "+err.Error())
|
||
return
|
||
}
|
||
c.Data["json"] = map[string]interface{}{"code": 200, "msg": "批量删除成功"}
|
||
_ = c.ServeJSON()
|
||
}
|