chore: 初始开源发布
iotlcm-app：小程序端 + 用户端服务。 - app/：uni-app 小程序前端（基于 unibest，MIT） - 微信 AppID → YOUR_WX_APPID，uni-app AppID → __UNI__YOURAPPID - 内网后端地址 → admin.iotlcm.example.com - 应用标题与 unibest 模板 README 重写（保留上游致谢与 MIT 声明） - server/：GoFrame 用户端服务（基于 XiuAdmin，Apache-2.0） - module xiuadmin → git.5iot.com/iotlcm-public/iotlcm-app（360 文件） - 支付回调地址 → app.iotlcm.example.com，商户名与应用名泛化 - 真实手机号 → 合法 11 位编造号（保留号段前 3 位 + 后 4 位） - 依赖号码尾部的断言同步更新 - 补 server/LICENSE（Apache-2.0） - 移除内部资产：CI 触发器 - 补根 README，LF 行尾 + .gitattributes 已知：TestSysDept_RefreshDeptAncestors 在源仓同一提交上同样失败，属既有缺陷。
This commit is contained in:
MiFaZhan
@@ -0,0 +1,254 @@
|
||||
package app
|
||||
|
||||
import (
|
||||
"context"
|
||||
"crypto/rand"
|
||||
"fmt"
|
||||
"strings"
|
||||
|
||||
"git.5iot.com/iotlcm-public/iotlcm-app/internal/consts"
|
||||
"git.5iot.com/iotlcm-public/iotlcm-app/internal/dao"
|
||||
"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/appidentity"
|
||||
"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/batchimport"
|
||||
"git.5iot.com/iotlcm-public/iotlcm-app/internal/library/contexts"
|
||||
"git.5iot.com/iotlcm-public/iotlcm-app/internal/model"
|
||||
"git.5iot.com/iotlcm-public/iotlcm-app/internal/model/entity"
|
||||
"git.5iot.com/iotlcm-public/iotlcm-app/utility"
|
||||
|
||||
"github.com/gogf/gf/v2/errors/gerror"
|
||||
"github.com/gogf/gf/v2/os/gtime"
|
||||
)
|
||||
|
||||
const appCardBatchNoAlphabet = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789"
|
||||
|
||||
func (s *sAppCard) isTerminalUser(ctx context.Context, user *entity.SysUser) bool {
|
||||
return appIsTerminalUser(ctx, user)
|
||||
}
|
||||
|
||||
func (s *sAppCard) ownerType(ctx context.Context, user *entity.SysUser) string {
|
||||
if s.isTerminalUser(ctx, user) {
|
||||
return appCardOwnerTerminal
|
||||
}
|
||||
return appCardOwnerAgent
|
||||
}
|
||||
|
||||
func (s *sAppCard) canOperateCard(ctx context.Context, user *entity.SysUser, card *appCardQueryRow) bool {
|
||||
if user == nil || card == nil {
|
||||
return false
|
||||
}
|
||||
if s.isTerminalUser(ctx, user) {
|
||||
return card.TerminalUserId == user.UserId
|
||||
}
|
||||
return user.DeptId > 0
|
||||
}
|
||||
|
||||
func (s *sAppCard) ensureOperateCard(ctx context.Context, user *entity.SysUser, card *appCardQueryRow, actionName string) error {
|
||||
if s.canOperateCard(ctx, user, card) {
|
||||
return nil
|
||||
}
|
||||
cardLabel := ""
|
||||
if card != nil {
|
||||
cardLabel = appFirstNotEmpty(card.Iccid, card.Msisdn, card.Imsi, card.Imei)
|
||||
}
|
||||
actionName = strings.TrimSpace(actionName)
|
||||
if actionName == "" {
|
||||
actionName = "办理业务"
|
||||
}
|
||||
if s.isTerminalUser(ctx, user) {
|
||||
return gerror.Newf("卡%s不在当前终端用户可操作范围内", cardLabel)
|
||||
}
|
||||
return gerror.Newf("卡%s不在当前企业可操作范围内", cardLabel)
|
||||
}
|
||||
|
||||
func (s *sAppCard) canOperatePackageRow(ctx context.Context, user *entity.SysUser, row *appPackageQueryRow) bool {
|
||||
if user == nil || row == nil {
|
||||
return false
|
||||
}
|
||||
if s.isTerminalUser(ctx, user) {
|
||||
return true
|
||||
}
|
||||
return user.DeptId > 0
|
||||
}
|
||||
|
||||
func appIsTerminalUser(ctx context.Context, user *entity.SysUser) bool {
|
||||
isTerminal, err := appidentity.IsTerminalUser(ctx, user)
|
||||
return err == nil && isTerminal
|
||||
}
|
||||
|
||||
// appEnterpriseDeptAndSubIds 返回企业账号可查看的机构范围：当前机构及所有下级机构。
|
||||
// 这里按 sys_dept.parent_id 逐层递归，不依赖 ancestors 字符串，避免祖级字段不规范导致漏数据。
|
||||
func appEnterpriseDeptAndSubIds(ctx context.Context, tenantId string, rootDeptId int64) ([]int64, error) {
|
||||
if rootDeptId <= 0 {
|
||||
return []int64{}, nil
|
||||
}
|
||||
tenantId = strings.TrimSpace(tenantId)
|
||||
if tenantId == "" {
|
||||
tenantId = consts.DefaultSystemTenantCode
|
||||
}
|
||||
|
||||
seen := map[int64]struct{}{
|
||||
rootDeptId: {},
|
||||
}
|
||||
result := []int64{rootDeptId}
|
||||
level := []int64{rootDeptId}
|
||||
columns := dao.SysDept.Columns()
|
||||
|
||||
for len(level) > 0 {
|
||||
var rows []*entity.SysDept
|
||||
err := dao.SysDept.Ctx(ctx).
|
||||
Fields(columns.DeptId).
|
||||
Where(columns.TenantId, tenantId).
|
||||
WhereIn(columns.ParentId, level).
|
||||
WhereNull(columns.DeletedAt).
|
||||
Scan(&rows)
|
||||
if err != nil {
|
||||
return nil, gerror.Wrap(err, "查询企业下级机构失败")
|
||||
}
|
||||
|
||||
nextLevel := make([]int64, 0, len(rows))
|
||||
for _, row := range rows {
|
||||
if row == nil || row.DeptId <= 0 {
|
||||
continue
|
||||
}
|
||||
if _, ok := seen[row.DeptId]; ok {
|
||||
continue
|
||||
}
|
||||
seen[row.DeptId] = struct{}{}
|
||||
result = append(result, row.DeptId)
|
||||
nextLevel = append(nextLevel, row.DeptId)
|
||||
}
|
||||
level = nextLevel
|
||||
}
|
||||
return result, nil
|
||||
}
|
||||
|
||||
// appEnterpriseDisplayDept 按当前企业视角返回卡片归属展示机构。
|
||||
// 真实卡归属可能在下下级，前端只允许看到本级或直属下级，避免泄露更深层级组织信息。
|
||||
func appEnterpriseDisplayDept(ctx context.Context, tenantId string, rootDeptId int64, actualDeptId int64) (*entity.SysDept, error) {
|
||||
if rootDeptId <= 0 || actualDeptId <= 0 {
|
||||
return nil, nil
|
||||
}
|
||||
if actualDeptId == rootDeptId {
|
||||
return appLoadDeptForDisplay(ctx, tenantId, rootDeptId)
|
||||
}
|
||||
|
||||
currentDeptId := actualDeptId
|
||||
seen := make(map[int64]struct{})
|
||||
for currentDeptId > 0 {
|
||||
if _, ok := seen[currentDeptId]; ok {
|
||||
return nil, nil
|
||||
}
|
||||
seen[currentDeptId] = struct{}{}
|
||||
dept, err := appLoadDeptForDisplay(ctx, tenantId, currentDeptId)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
if dept == nil || dept.DeptId == 0 {
|
||||
return nil, nil
|
||||
}
|
||||
if dept.ParentId == rootDeptId {
|
||||
return dept, nil
|
||||
}
|
||||
if dept.ParentId <= 0 || dept.ParentId == dept.DeptId {
|
||||
return nil, nil
|
||||
}
|
||||
currentDeptId = dept.ParentId
|
||||
}
|
||||
return nil, nil
|
||||
}
|
||||
|
||||
func appLoadDeptForDisplay(ctx context.Context, tenantId string, deptId int64) (*entity.SysDept, error) {
|
||||
tenantId = strings.TrimSpace(tenantId)
|
||||
if tenantId == "" {
|
||||
tenantId = consts.DefaultSystemTenantCode
|
||||
}
|
||||
var dept *entity.SysDept
|
||||
if err := dao.SysDept.Ctx(ctx).
|
||||
Where(dao.SysDept.Columns().TenantId, tenantId).
|
||||
Where(dao.SysDept.Columns().DeptId, deptId).
|
||||
WhereNull(dao.SysDept.Columns().DeletedAt).
|
||||
Limit(1).
|
||||
Scan(&dept); err != nil {
|
||||
return nil, gerror.Wrap(err, "查询机构展示信息失败")
|
||||
}
|
||||
return dept, nil
|
||||
}
|
||||
|
||||
func appCurrentUser(ctx context.Context) (*entity.SysUser, error) {
|
||||
userId := contexts.GetUserId(ctx)
|
||||
if userId == 0 {
|
||||
return nil, gerror.New("登录已过期")
|
||||
}
|
||||
var user *entity.SysUser
|
||||
err := dao.SysUser.Ctx(ctx).
|
||||
Where(dao.SysUser.Columns().UserId, userId).
|
||||
Scan(&user)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
if user == nil {
|
||||
return nil, gerror.New("用户不存在")
|
||||
}
|
||||
return user, nil
|
||||
}
|
||||
|
||||
func appContextWithUser(ctx context.Context, user *entity.SysUser) context.Context {
|
||||
if user == nil || user.UserId <= 0 {
|
||||
return ctx
|
||||
}
|
||||
if current := contexts.GetUser(ctx); current != nil && current.ID > 0 && strings.TrimSpace(current.TenantId) != "" {
|
||||
return ctx
|
||||
}
|
||||
return contexts.Set(ctx, &model.Context{
|
||||
User: &model.Identity{
|
||||
BaseClaims: model.BaseClaims{
|
||||
ID: user.UserId,
|
||||
Username: user.UserName,
|
||||
NickName: user.NickName,
|
||||
TenantId: user.TenantId,
|
||||
DeptId: user.DeptId,
|
||||
},
|
||||
},
|
||||
})
|
||||
}
|
||||
|
||||
func appCardValueCondition() string {
|
||||
cardTable := dao.TSimCardInfo.Table()
|
||||
return "(" + cardTable + "." + dao.TSimCardInfo.Columns().Iccid + " = ? OR " +
|
||||
cardTable + "." + dao.TSimCardInfo.Columns().Msisdn + " = ? OR " +
|
||||
cardTable + "." + dao.TSimCardInfo.Columns().Imsi + " = ? OR " +
|
||||
cardTable + "." + dao.TSimCardInfo.Columns().Imei + " = ?)"
|
||||
}
|
||||
|
||||
func appCardValueArgs(cardValue string) []interface{} {
|
||||
value := strings.TrimSpace(cardValue)
|
||||
return []interface{}{value, value, value, value}
|
||||
}
|
||||
|
||||
func appNextBatchNo(ctx context.Context, prefix string) (string, error) {
|
||||
return batchimport.NextBatchNoContext(ctx, prefix)
|
||||
}
|
||||
|
||||
func appCardBatchNo(prefix string, userId int64, now *gtime.Time) string {
|
||||
if now == nil {
|
||||
now = gtime.Now()
|
||||
}
|
||||
prefix = strings.TrimSpace(strings.ToUpper(prefix))
|
||||
random := make([]byte, 8)
|
||||
randomBytes := make([]byte, len(random))
|
||||
if _, err := rand.Read(randomBytes); err != nil {
|
||||
fallback := strings.ToUpper(utility.RandomString(len(random)))
|
||||
for i := range random {
|
||||
random[i] = appCardBatchNoAlphabet[int(fallback[i])%len(appCardBatchNoAlphabet)]
|
||||
}
|
||||
return fmt.Sprintf("%s%s%s", prefix, now.Format("YmdHis"), string(random))
|
||||
}
|
||||
for i, b := range randomBytes {
|
||||
random[i] = appCardBatchNoAlphabet[int(b)%len(appCardBatchNoAlphabet)]
|
||||
}
|
||||
return fmt.Sprintf("%s%s%s", prefix, now.Format("YmdHis"), string(random))
|
||||
}
|
||||
|
||||
func appOrderNo(prefix string, userId int64, now *gtime.Time) string {
|
||||
return appCardBatchNo(prefix, userId, now)
|
||||
}
|
||||
Reference in New Issue
Block a user