mirror of
https://gh-proxy.org/https://github.com/klinsmaya/SQLBot.git
synced 2026-11-08 01:06:59 +08:00
ulleo
21961e2d03
Frontend: - Add frontend/src/i18n/th-TH.json (913 keys, full parity with zh-CN) - Register th-TH in i18n entry with native element-plus-secondary Thai locale - Add Thai option to language selectors, legacy th_TH alias mapping, and browser locale detection (th* -> th-TH) - Add common.thai label to all existing locale files Backend: - Add backend/locales/th-TH.json (177 keys) - Accept th-TH in language whitelist, schema regex, and MCP question - Map th* to Thai language name in LLM prompt language selection - Apply question language to guess-question prompt template
419 lines
20 KiB
Python
419 lines
20 KiB
Python
from collections import defaultdict
|
|
from typing import Optional
|
|
from fastapi import APIRouter, File, Path, Query, UploadFile
|
|
from sqlmodel import SQLModel, case, or_, select, delete as sqlmodel_delete
|
|
from apps.system.crud.user import check_account_exists, check_email_exists, check_email_format, check_pwd_format, get_db_user, single_delete, user_ws_options
|
|
from apps.system.crud.user_excel import batchUpload, downTemplate, download_error_file
|
|
from apps.system.models.system_model import UserWsModel, WorkspaceModel
|
|
from apps.system.models.user import UserModel
|
|
from apps.system.schemas.auth import CacheName, CacheNamespace
|
|
from apps.system.schemas.permission import SqlbotPermission, require_permissions
|
|
from apps.system.schemas.system_schema import PwdEditor, UserCreator, UserEditor, UserGrid, UserInfoDTO, UserLanguage, UserStatus, UserWs
|
|
from common.audit.models.log_model import OperationType, OperationModules
|
|
from common.audit.schemas.logger_decorator import LogConfig, system_log
|
|
from common.core.deps import CurrentUser, SessionDep, Trans
|
|
from common.core.pagination import Paginator
|
|
from common.core.schemas import PaginatedResponse, PaginationParams
|
|
from common.core.security import default_md5_pwd, md5pwd, verify_md5pwd
|
|
from common.core.sqlbot_cache import clear_cache
|
|
from common.core.config import settings
|
|
from apps.swagger.i18n import PLACEHOLDER_PREFIX
|
|
from sqlbot_xpack.config.arg_manage import get_group_args
|
|
|
|
router = APIRouter(tags=["system_user"], prefix="/user")
|
|
|
|
|
|
@router.get("/template", include_in_schema=False)
|
|
@require_permissions(permission=SqlbotPermission(role=['admin']))
|
|
async def templateExcel(trans: Trans):
|
|
return await downTemplate(trans)
|
|
|
|
@router.post("/batchImport", include_in_schema=False)
|
|
@require_permissions(permission=SqlbotPermission(role=['admin']))
|
|
async def upload_excel(session: SessionDep, trans: Trans, current_user: CurrentUser, file: UploadFile = File(...)):
|
|
return await batchUpload(session, trans, file)
|
|
|
|
|
|
@router.get("/errorRecord/{file_id}", include_in_schema=False)
|
|
@require_permissions(permission=SqlbotPermission(role=['admin']))
|
|
async def download_error(file_id: str):
|
|
return download_error_file(file_id)
|
|
|
|
@router.get("/info", summary=f"{PLACEHOLDER_PREFIX}system_user_current_user", description=f"{PLACEHOLDER_PREFIX}system_user_current_user_desc")
|
|
async def user_info(current_user: CurrentUser) -> UserInfoDTO:
|
|
return current_user
|
|
|
|
|
|
@router.get("/defaultPwd", include_in_schema=False)
|
|
@require_permissions(permission=SqlbotPermission(role=['admin']))
|
|
async def default_pwd(session: SessionDep) -> str:
|
|
login_args = await get_group_args(session=session, flag='login')
|
|
hidden_arg = next((a for a in login_args if a.pkey == 'login.initial_pwd_hidden'), None)
|
|
if hidden_arg and str(hidden_arg.pval).strip().lower() == 'true':
|
|
return ''
|
|
return settings.DEFAULT_PWD
|
|
|
|
@router.get("/pager/{pageNum}/{pageSize}", response_model=PaginatedResponse[UserGrid], summary=f"{PLACEHOLDER_PREFIX}system_user_grid", description=f"{PLACEHOLDER_PREFIX}system_user_grid")
|
|
@require_permissions(permission=SqlbotPermission(role=['admin']))
|
|
async def pager(
|
|
session: SessionDep,
|
|
pageNum: int = Path(..., title=f"{PLACEHOLDER_PREFIX}page_num", description=f"{PLACEHOLDER_PREFIX}page_num"),
|
|
pageSize: int = Path(..., title=f"{PLACEHOLDER_PREFIX}page_size", description=f"{PLACEHOLDER_PREFIX}page_size"),
|
|
keyword: Optional[str] = Query(None, description=f"{PLACEHOLDER_PREFIX}keyword"),
|
|
status: Optional[int] = Query(None, description=f"{PLACEHOLDER_PREFIX}status"),
|
|
origins: Optional[list[int]] = Query(None, description=f"{PLACEHOLDER_PREFIX}origin"),
|
|
oidlist: Optional[list[int]] = Query(None, description=f"{PLACEHOLDER_PREFIX}oid"),
|
|
order_by: Optional[str] = Query(None, description="排序字段"),
|
|
desc: Optional[bool] = Query(False, description="是否降序"),
|
|
):
|
|
pagination = PaginationParams(page=pageNum, size=pageSize)
|
|
paginator = Paginator(session)
|
|
|
|
# 允许排序的字段白名单（防止 SQL 注入）
|
|
SORT_COLUMNS = {
|
|
'account': UserModel.account,
|
|
'create_time': UserModel.create_time,
|
|
'name': UserModel.name,
|
|
'email': UserModel.email,
|
|
'status': UserModel.status,
|
|
}
|
|
sort_field = SORT_COLUMNS.get(order_by, UserModel.account)
|
|
sort_clause = sort_field.desc() if desc else sort_field.asc()
|
|
|
|
# SELECT 列必须包含 ORDER BY 列（PostgreSQL DISTINCT 约束）
|
|
select_columns = [UserModel.id, UserModel.account]
|
|
if order_by and order_by != 'account':
|
|
select_columns.append(sort_field)
|
|
|
|
# 相似度排序：综合考虑匹配字段数量和相似度分数
|
|
# 当有 keyword 时，将 match_count 和 total_score 加入 SELECT 列以满足 DISTINCT 约束
|
|
# 匹配字段越多越靠前；相同匹配字段数时，总分越低（相似度越高）越靠前
|
|
match_count = None
|
|
total_score = None
|
|
if keyword:
|
|
from sqlalchemy import func
|
|
# 每个字段的相似度分数 (0=精确匹配, 1=前缀匹配, 2=包含匹配, 3=无匹配)
|
|
account_score = case(
|
|
(UserModel.account == keyword, 0),
|
|
(UserModel.account.startswith(keyword), 1),
|
|
(UserModel.account.contains(keyword), 2),
|
|
else_=3
|
|
)
|
|
name_score = case(
|
|
(UserModel.name == keyword, 0),
|
|
(UserModel.name.startswith(keyword), 1),
|
|
(UserModel.name.contains(keyword), 2),
|
|
else_=3
|
|
)
|
|
email_score = case(
|
|
(UserModel.email == keyword, 0),
|
|
(UserModel.email.startswith(keyword), 1),
|
|
(UserModel.email.contains(keyword), 2),
|
|
else_=3
|
|
)
|
|
# 计算匹配字段数量（score < 3 表示有匹配）：匹配字段越多越靠前
|
|
match_count = (
|
|
case((account_score < 3, 1), else_=0) +
|
|
case((name_score < 3, 1), else_=0) +
|
|
case((email_score < 3, 1), else_=0)
|
|
)
|
|
# 总相似度分数：三个字段分数之和，越低越好
|
|
total_score = account_score + name_score + email_score
|
|
select_columns.append(match_count.label('match_count'))
|
|
select_columns.append(total_score.label('total_score'))
|
|
|
|
origin_stmt = (
|
|
select(*select_columns)
|
|
.join(UserWsModel, UserModel.id == UserWsModel.uid, isouter=True)
|
|
.where(UserModel.id != 1)
|
|
.distinct()
|
|
)
|
|
# 根据是否有 keyword 决定排序方式
|
|
if keyword:
|
|
# 按匹配字段数降序、总分升序、再按用户选择的排序字段
|
|
origin_stmt = origin_stmt.order_by(match_count.desc(), total_score.asc(), sort_clause)
|
|
else:
|
|
origin_stmt = origin_stmt.order_by(sort_clause)
|
|
|
|
if oidlist:
|
|
origin_stmt = origin_stmt.where(UserWsModel.oid.in_(oidlist))
|
|
if origins:
|
|
origin_stmt = origin_stmt.where(UserModel.origin.in_(origins))
|
|
if status is not None:
|
|
origin_stmt = origin_stmt.where(UserModel.status == status)
|
|
if keyword:
|
|
# 转义 SQL LIKE 特殊字符（_ 匹配单个字符，% 匹配任意字符串）
|
|
escaped_keyword = keyword.replace('\\', '\\\\').replace('_', '\\_').replace('%', '\\%')
|
|
keyword_pattern = f"%{escaped_keyword}%"
|
|
origin_stmt = origin_stmt.where(
|
|
or_(
|
|
UserModel.account.ilike(keyword_pattern, escape='\\'),
|
|
UserModel.name.ilike(keyword_pattern, escape='\\'),
|
|
UserModel.email.ilike(keyword_pattern, escape='\\')
|
|
)
|
|
)
|
|
|
|
user_page = await paginator.get_paginated_response(
|
|
stmt=origin_stmt,
|
|
pagination=pagination)
|
|
uid_list = [item.get('id') for item in user_page.items]
|
|
if not uid_list:
|
|
return user_page
|
|
stmt = (
|
|
select(UserModel, UserWsModel.oid.label('ws_oid'))
|
|
.join(UserWsModel, UserModel.id == UserWsModel.uid, isouter=True)
|
|
.where(UserModel.id.in_(uid_list))
|
|
)
|
|
# 第二次查询也需要应用相同的相似度排序
|
|
if keyword:
|
|
from sqlalchemy import func
|
|
account_score = case(
|
|
(UserModel.account == keyword, 0),
|
|
(UserModel.account.startswith(keyword), 1),
|
|
(UserModel.account.contains(keyword), 2),
|
|
else_=3
|
|
)
|
|
name_score = case(
|
|
(UserModel.name == keyword, 0),
|
|
(UserModel.name.startswith(keyword), 1),
|
|
(UserModel.name.contains(keyword), 2),
|
|
else_=3
|
|
)
|
|
email_score = case(
|
|
(UserModel.email == keyword, 0),
|
|
(UserModel.email.startswith(keyword), 1),
|
|
(UserModel.email.contains(keyword), 2),
|
|
else_=3
|
|
)
|
|
# 计算匹配字段数量（score < 3 表示有匹配）：匹配字段越多越靠前
|
|
match_count = (
|
|
case((account_score < 3, 1), else_=0) +
|
|
case((name_score < 3, 1), else_=0) +
|
|
case((email_score < 3, 1), else_=0)
|
|
)
|
|
# 总相似度分数：三个字段分数之和，越低越好
|
|
total_score = account_score + name_score + email_score
|
|
# 排序：匹配字段数降序、总分升序、再按用户选择的排序字段
|
|
stmt = stmt.order_by(match_count.desc(), total_score.asc(), sort_clause)
|
|
else:
|
|
stmt = stmt.order_by(sort_clause)
|
|
user_workspaces = session.exec(stmt).all()
|
|
merged = defaultdict(list)
|
|
extra_attrs = {}
|
|
|
|
for (user, ws_oid) in user_workspaces:
|
|
item = {}
|
|
item.update(user.model_dump())
|
|
user_id = item['id']
|
|
merged[user_id].append(ws_oid)
|
|
if user_id not in extra_attrs:
|
|
extra_attrs[user_id] = {k: v for k, v in item.items() if k != "ws_oid"}
|
|
|
|
# 组合结果
|
|
result = [
|
|
{**extra_attrs[user_id], "oid_list": list(filter(None, oid_list))}
|
|
for user_id, oid_list in merged.items()
|
|
]
|
|
user_page.items = result
|
|
return user_page
|
|
|
|
def format_user_dict(row) -> dict:
|
|
result_dict = {}
|
|
for item, key in zip(row, row._fields):
|
|
if isinstance(item, SQLModel):
|
|
result_dict.update(item.model_dump())
|
|
else:
|
|
result_dict[key] = item
|
|
|
|
return result_dict
|
|
|
|
@router.get("/ws", include_in_schema=False)
|
|
async def ws_options(session: SessionDep, current_user: CurrentUser, trans: Trans) -> list[UserWs]:
|
|
return await user_ws_options(session, current_user.id, trans)
|
|
|
|
@router.put("/ws/{oid}", summary=f"{PLACEHOLDER_PREFIX}switch_oid_api", description=f"{PLACEHOLDER_PREFIX}switch_oid_api")
|
|
@clear_cache(namespace=CacheNamespace.AUTH_INFO, cacheName=CacheName.USER_INFO, keyExpression="current_user.id")
|
|
@system_log(LogConfig(
|
|
operation_type=OperationType.UPDATE,
|
|
module=OperationModules.USER,
|
|
resource_id_expr="editor.id"
|
|
))
|
|
async def ws_change(session: SessionDep, current_user: CurrentUser, trans:Trans, oid: int = Path(description=f"{PLACEHOLDER_PREFIX}oid")):
|
|
ws_list: list[UserWs] = await user_ws_options(session, current_user.id)
|
|
if not any(x.id == oid for x in ws_list):
|
|
db_ws = session.get(WorkspaceModel, oid)
|
|
if db_ws:
|
|
raise Exception(trans('i18n_user.ws_miss', ws = db_ws.name))
|
|
raise Exception(trans('i18n_not_exist', msg = f"{trans('i18n_ws.title')}[{oid}]"))
|
|
user_model: UserModel = get_db_user(session = session, user_id = current_user.id)
|
|
user_model.oid = oid
|
|
session.add(user_model)
|
|
|
|
@router.get("/{id}", response_model=UserEditor, summary=f"{PLACEHOLDER_PREFIX}user_detail_api", description=f"{PLACEHOLDER_PREFIX}user_detail_api")
|
|
@require_permissions(permission=SqlbotPermission(role=['admin']))
|
|
async def query(session: SessionDep, trans: Trans, id: int = Path(description=f"{PLACEHOLDER_PREFIX}uid")) -> UserEditor:
|
|
db_user: UserModel = get_db_user(session = session, user_id = id)
|
|
u_ws_options = await user_ws_options(session, id, trans)
|
|
result = UserEditor.model_validate(db_user.model_dump())
|
|
if u_ws_options:
|
|
result.oid_list = [item.id for item in u_ws_options]
|
|
return result
|
|
|
|
|
|
@router.post("", summary=f"{PLACEHOLDER_PREFIX}user_create_api", description=f"{PLACEHOLDER_PREFIX}user_create_api")
|
|
@require_permissions(permission=SqlbotPermission(role=['admin']))
|
|
@system_log(LogConfig(
|
|
operation_type=OperationType.CREATE,
|
|
module=OperationModules.USER,
|
|
result_id_expr="id"
|
|
))
|
|
async def user_create(session: SessionDep, creator: UserCreator, trans: Trans):
|
|
return await create(session=session, creator=creator, trans=trans)
|
|
|
|
async def create(session: SessionDep, creator: UserCreator, trans: Trans):
|
|
if check_account_exists(session=session, account=creator.account):
|
|
raise Exception(trans('i18n_exist', msg = f"{trans('i18n_user.account')} [{creator.account}]"))
|
|
""" if check_email_exists(session=session, email=creator.email):
|
|
raise Exception(trans('i18n_exist', msg = f"{trans('i18n_user.email')} [{creator.email}]")) """
|
|
if not check_email_format(creator.email):
|
|
raise Exception(trans('i18n_format_invalid', key = f"{trans('i18n_user.email')} [{creator.email}]"))
|
|
#data = creator.model_dump(exclude_unset=True)
|
|
data = creator.model_dump()
|
|
user_model = UserModel.model_validate(data)
|
|
#user_model.create_time = get_timestamp()
|
|
user_model.language = "zh-CN"
|
|
user_model.oid = 0
|
|
if creator.oid_list:
|
|
# need to validate oid_list
|
|
db_model_list = [
|
|
UserWsModel.model_validate({
|
|
"oid": oid,
|
|
"uid": user_model.id,
|
|
"weight": 0
|
|
})
|
|
for oid in creator.oid_list
|
|
]
|
|
session.add_all(db_model_list)
|
|
user_model.oid = creator.oid_list[0]
|
|
session.add(user_model)
|
|
return user_model
|
|
|
|
|
|
@router.put("", summary=f"{PLACEHOLDER_PREFIX}user_update_api", description=f"{PLACEHOLDER_PREFIX}user_update_api")
|
|
@require_permissions(permission=SqlbotPermission(role=['admin']))
|
|
@clear_cache(namespace=CacheNamespace.AUTH_INFO, cacheName=CacheName.USER_INFO, keyExpression="editor.id")
|
|
@system_log(LogConfig(
|
|
operation_type=OperationType.UPDATE,
|
|
module=OperationModules.USER,
|
|
resource_id_expr="editor.id"
|
|
))
|
|
async def update(session: SessionDep, editor: UserEditor, trans: Trans):
|
|
user_model: UserModel = get_db_user(session = session, user_id = editor.id)
|
|
if not user_model:
|
|
raise Exception(f"User with id [{editor.id}] not found!")
|
|
if editor.account != user_model.account:
|
|
raise Exception(f"account cannot be changed!")
|
|
""" if editor.email != user_model.email and check_email_exists(session=session, email=editor.email):
|
|
raise Exception(trans('i18n_exist', msg = f"{trans('i18n_user.email')} [{editor.email}]")) """
|
|
if not check_email_format(editor.email):
|
|
raise Exception(trans('i18n_format_invalid', key = f"{trans('i18n_user.email')} [{editor.email}]"))
|
|
origin_oid: int = user_model.oid
|
|
|
|
uws_list_stmt = select(UserWsModel).where(UserWsModel.uid == editor.id)
|
|
uws_list = session.exec(uws_list_stmt).all()
|
|
|
|
existing_oids = {uws.oid for uws in uws_list}
|
|
new_oid_set = set(editor.oid_list) if editor.oid_list else set()
|
|
oids_to_remove = existing_oids - new_oid_set
|
|
oids_to_add = new_oid_set - existing_oids
|
|
|
|
if oids_to_remove:
|
|
del_stmt = sqlmodel_delete(UserWsModel).where(UserWsModel.uid == editor.id, UserWsModel.oid.in_(oids_to_remove))
|
|
session.exec(del_stmt)
|
|
|
|
data = editor.model_dump(exclude_unset=True)
|
|
user_model.sqlmodel_update(data)
|
|
|
|
user_model.oid = 0
|
|
if editor.oid_list:
|
|
user_model.oid = origin_oid if origin_oid in editor.oid_list else editor.oid_list[0]
|
|
if oids_to_add:
|
|
db_uws_model_list = [
|
|
UserWsModel.model_validate({
|
|
"oid": oid,
|
|
"uid": user_model.id,
|
|
"weight": 0
|
|
})
|
|
for oid in oids_to_add
|
|
]
|
|
session.add_all(db_uws_model_list)
|
|
session.add(user_model)
|
|
|
|
@router.delete("/{id}", summary=f"{PLACEHOLDER_PREFIX}user_del_api", description=f"{PLACEHOLDER_PREFIX}user_del_api")
|
|
@require_permissions(permission=SqlbotPermission(role=['admin']))
|
|
@system_log(LogConfig(
|
|
operation_type=OperationType.DELETE,
|
|
module=OperationModules.USER,
|
|
resource_id_expr="id"
|
|
))
|
|
async def delete(session: SessionDep, id: int = Path(description=f"{PLACEHOLDER_PREFIX}uid")):
|
|
await single_delete(session, id)
|
|
|
|
@router.delete("", summary=f"{PLACEHOLDER_PREFIX}user_batchdel_api", description=f"{PLACEHOLDER_PREFIX}user_batchdel_api")
|
|
@require_permissions(permission=SqlbotPermission(role=['admin']))
|
|
@system_log(LogConfig(operation_type=OperationType.DELETE,module=OperationModules.USER,resource_id_expr="id_list"))
|
|
async def batch_del(session: SessionDep, id_list: list[int]):
|
|
for id in id_list:
|
|
await single_delete(session, id)
|
|
|
|
@router.put("/language", summary=f"{PLACEHOLDER_PREFIX}language_change", description=f"{PLACEHOLDER_PREFIX}language_change")
|
|
@clear_cache(namespace=CacheNamespace.AUTH_INFO, cacheName=CacheName.USER_INFO, keyExpression="current_user.id")
|
|
async def langChange(session: SessionDep, current_user: CurrentUser, trans: Trans, language: UserLanguage):
|
|
lang = language.language
|
|
if lang not in ["zh-CN", "zh-TW", "en", "ko-KR", "th-TH"]:
|
|
raise Exception(trans('i18n_user.language_not_support', key = lang))
|
|
db_user: UserModel = get_db_user(session=session, user_id=current_user.id)
|
|
db_user.language = lang
|
|
session.add(db_user)
|
|
|
|
|
|
@router.patch("/pwd/{id}", summary=f"{PLACEHOLDER_PREFIX}reset_pwd", description=f"{PLACEHOLDER_PREFIX}reset_pwd")
|
|
@require_permissions(permission=SqlbotPermission(role=['admin']))
|
|
@clear_cache(namespace=CacheNamespace.AUTH_INFO, cacheName=CacheName.USER_INFO, keyExpression="id")
|
|
@system_log(LogConfig(operation_type=OperationType.RESET_PWD,module=OperationModules.USER,resource_id_expr="id"))
|
|
async def pwdReset(session: SessionDep, current_user: CurrentUser, trans: Trans, id: int = Path(description=f"{PLACEHOLDER_PREFIX}uid")):
|
|
if not current_user.isAdmin:
|
|
raise Exception(trans('i18n_permission.no_permission', url = " patch[/user/pwd/id],", msg = trans('i18n_permission.only_admin')))
|
|
db_user: UserModel = get_db_user(session=session, user_id=id)
|
|
db_user.password = default_md5_pwd()
|
|
session.add(db_user)
|
|
|
|
@router.put("/pwd", summary=f"{PLACEHOLDER_PREFIX}update_pwd", description=f"{PLACEHOLDER_PREFIX}update_pwd")
|
|
@clear_cache(namespace=CacheNamespace.AUTH_INFO, cacheName=CacheName.USER_INFO, keyExpression="current_user.id")
|
|
@system_log(LogConfig(operation_type=OperationType.UPDATE_PWD,module=OperationModules.USER,result_id_expr="id"))
|
|
async def pwdUpdate(session: SessionDep, current_user: CurrentUser, trans: Trans, editor: PwdEditor):
|
|
new_pwd = editor.new_pwd
|
|
if not check_pwd_format(new_pwd):
|
|
raise Exception(trans('i18n_format_invalid', key = trans('i18n_user.password')))
|
|
db_user: UserModel = get_db_user(session=session, user_id=current_user.id)
|
|
if not verify_md5pwd(editor.pwd, db_user.password):
|
|
raise Exception(trans('i18n_error', key = trans('i18n_user.password')))
|
|
db_user.password = md5pwd(new_pwd)
|
|
session.add(db_user)
|
|
return db_user
|
|
|
|
|
|
@router.patch("/status", summary=f"{PLACEHOLDER_PREFIX}update_status", description=f"{PLACEHOLDER_PREFIX}update_status")
|
|
@require_permissions(permission=SqlbotPermission(role=['admin']))
|
|
@clear_cache(namespace=CacheNamespace.AUTH_INFO, cacheName=CacheName.USER_INFO, keyExpression="statusDto.id")
|
|
@system_log(LogConfig(operation_type=OperationType.UPDATE_STATUS,module=OperationModules.USER, resource_id_expr="statusDto.id"))
|
|
async def statusChange(session: SessionDep, current_user: CurrentUser, trans: Trans, statusDto: UserStatus):
|
|
if not current_user.isAdmin:
|
|
raise Exception(trans('i18n_permission.no_permission', url = ", ", msg = trans('i18n_permission.only_admin')))
|
|
status = statusDto.status
|
|
if status not in [0, 1]:
|
|
return {"message": "status not supported"}
|
|
db_user: UserModel = get_db_user(session=session, user_id=statusDto.id)
|
|
db_user.status = status
|
|
session.add(db_user)
|