允许非登录搜索用户

This commit is contained in:
xiaoxiaoqiong 2022-04-06 14:33:47 +08:00
parent c5dd099169
commit 1f6ac05bad
1 changed files with 324 additions and 324 deletions

View File

@ -1,324 +1,324 @@
class UsersController < ApplicationController class UsersController < ApplicationController
include ApplicationHelper include ApplicationHelper
include Ci::DbConnectable include Ci::DbConnectable
before_action :load_user, only: [:show, :homepage_info, :sync_token, :sync_gitea_pwd, :projects, :watch_users, :fan_users, :hovercard] before_action :load_user, only: [:show, :homepage_info, :sync_token, :sync_gitea_pwd, :projects, :watch_users, :fan_users, :hovercard]
before_action :check_user_exist, only: [:show, :homepage_info,:projects, :watch_users, :fan_users, :hovercard] before_action :check_user_exist, only: [:show, :homepage_info,:projects, :watch_users, :fan_users, :hovercard]
before_action :require_login, only: %i[me list sync_user_info] before_action :require_login, only: %i[me sync_user_info]
before_action :connect_to_ci_db, only: [:get_user_info] before_action :connect_to_ci_db, only: [:get_user_info]
before_action :convert_image!, only: [:update, :update_image] before_action :convert_image!, only: [:update, :update_image]
skip_before_action :check_sign, only: [:attachment_show] skip_before_action :check_sign, only: [:attachment_show]
def connect_to_ci_db(options={}) def connect_to_ci_db(options={})
if !(current_user && !current_user.is_a?(AnonymousUser) && current_user.devops_certification?) if !(current_user && !current_user.is_a?(AnonymousUser) && current_user.devops_certification?)
return return
end end
if current_user.ci_cloud_account.server_type == Ci::CloudAccount::SERVER_TYPE_TRUSTIE if current_user.ci_cloud_account.server_type == Ci::CloudAccount::SERVER_TYPE_TRUSTIE
connect_to_trustie_ci_database(options) connect_to_trustie_ci_database(options)
else else
connect_to_ci_database(options) connect_to_ci_database(options)
end end
end end
def list def list
scope = User.active.recent.like(params[:search]).includes(:user_extension) scope = User.active.recent.like(params[:search]).includes(:user_extension)
@total_count = scope.size @total_count = scope.size
@users = paginate(scope) @users = paginate(scope)
end end
def show def show
#待办事项,现在未做 #待办事项,现在未做
if User.current.admin? || User.current.login == @user.login if User.current.admin? || User.current.login == @user.login
@waiting_applied_messages = @user.applied_messages.waiting @waiting_applied_messages = @user.applied_messages.waiting
@common_applied_transfer_projects = AppliedTransferProject.where(owner_id: @user.id).common + AppliedTransferProject.where(owner_id: Organization.joins(team_users: :team).where(team_users: {user_id: @user.id}, teams: {authorize: %w(admin owner)} )).common @common_applied_transfer_projects = AppliedTransferProject.where(owner_id: @user.id).common + AppliedTransferProject.where(owner_id: Organization.joins(team_users: :team).where(team_users: {user_id: @user.id}, teams: {authorize: %w(admin owner)} )).common
@common_applied_projects = AppliedProject.where(project_id: @user.full_admin_projects).common @common_applied_projects = AppliedProject.where(project_id: @user.full_admin_projects).common
#@undo_events = @waiting_applied_messages.size + @common_applied_transfer_projects.size + @common_applied_projects.size #@undo_events = @waiting_applied_messages.size + @common_applied_transfer_projects.size + @common_applied_projects.size
@undo_events = @common_applied_transfer_projects.size + @common_applied_projects.size @undo_events = @common_applied_transfer_projects.size + @common_applied_projects.size
else else
@waiting_applied_messages = AppliedMessage.none @waiting_applied_messages = AppliedMessage.none
@common_applied_transfer_projects = AppliedTransferProject.none @common_applied_transfer_projects = AppliedTransferProject.none
@common_applied_projects = AppliedProject.none @common_applied_projects = AppliedProject.none
@undo_events = 0 @undo_events = 0
end end
#用户的组织数量 #用户的组织数量
# @user_composes_count = @user.composes.size # @user_composes_count = @user.composes.size
@user_composes_count = 0 @user_composes_count = 0
user_organizations = User.current.logged? ? @user.organizations.with_visibility(%w(common limited)) + @user.organizations.with_visibility("privacy").joins(:team_users).where(team_users: {user_id: current_user.id}) : @user.organizations.with_visibility("common") user_organizations = User.current.logged? ? @user.organizations.with_visibility(%w(common limited)) + @user.organizations.with_visibility("privacy").joins(:team_users).where(team_users: {user_id: current_user.id}) : @user.organizations.with_visibility("common")
@user_org_count = user_organizations.size @user_org_count = user_organizations.size
normal_projects = Project.members_projects(@user.id).to_sql normal_projects = Project.members_projects(@user.id).to_sql
org_projects = Project.joins(team_projects: [team: :team_users]).where(team_users: {user_id: @user.id}).to_sql org_projects = Project.joins(team_projects: [team: :team_users]).where(team_users: {user_id: @user.id}).to_sql
projects = Project.from("( #{ normal_projects} UNION #{ org_projects } ) AS projects").distinct projects = Project.from("( #{ normal_projects} UNION #{ org_projects } ) AS projects").distinct
user_projects = User.current.logged? && (User.current.admin? || User.current.login == @user.login) ? projects : projects.visible user_projects = User.current.logged? && (User.current.admin? || User.current.login == @user.login) ? projects : projects.visible
@projects_common_count = user_projects.common.size @projects_common_count = user_projects.common.size
@projects_mirrior_count = user_projects.mirror.size @projects_mirrior_count = user_projects.mirror.size
@projects_sync_mirrior_count = user_projects.sync_mirror.size @projects_sync_mirrior_count = user_projects.sync_mirror.size
# 为了缓存活跃用户的基本信息,后续删除 # 为了缓存活跃用户的基本信息,后续删除
Cache::V2::OwnerCommonService.new(@user.id).read Cache::V2::OwnerCommonService.new(@user.id).read
end end
def watch_users def watch_users
watchers = Watcher.watching_users(@user.id).includes(:user).order("watchers.created_at desc") watchers = Watcher.watching_users(@user.id).includes(:user).order("watchers.created_at desc")
if params[:search].present? if params[:search].present?
search_user_ids = User.where(id: watchers.pluck(:watchable_id)).like(params[:search]).pluck(:id) search_user_ids = User.where(id: watchers.pluck(:watchable_id)).like(params[:search]).pluck(:id)
watchers = watchers.where(watchable_id: search_user_ids) watchers = watchers.where(watchable_id: search_user_ids)
end end
@watchers_count = watchers.size @watchers_count = watchers.size
@watchers = paginate(watchers) @watchers = paginate(watchers)
end end
def fan_users def fan_users
watchers = @user.watchers.includes(:user).order("watchers.created_at desc") watchers = @user.watchers.includes(:user).order("watchers.created_at desc")
watchers = watchers.joins(:user).merge(User.like(params[:search])) watchers = watchers.joins(:user).merge(User.like(params[:search]))
@watchers_count = watchers.size @watchers_count = watchers.size
@watchers = paginate(watchers) @watchers = paginate(watchers)
end end
def hovercard def hovercard
end end
def update def update
return render_not_found unless @user = User.find_by(login: params[:id]) || User.find_by_id(params[:id]) return render_not_found unless @user = User.find_by(login: params[:id]) || User.find_by_id(params[:id])
return render_forbidden unless User.current.logged? && (current_user&.admin? || current_user.id == @user.id) return render_forbidden unless User.current.logged? && (current_user&.admin? || current_user.id == @user.id)
Util.write_file(@image, avatar_path(@user)) if user_params[:image].present? Util.write_file(@image, avatar_path(@user)) if user_params[:image].present?
@user.attributes = user_params.except(:image) @user.attributes = user_params.except(:image)
unless @user.save unless @user.save
render_error(-1, @user.errors.full_messages.join(", ")) render_error(-1, @user.errors.full_messages.join(", "))
end end
end end
def update_image def update_image
return render_not_found unless @user = User.find_by(login: params[:id]) || User.find_by_id(params[:id]) return render_not_found unless @user = User.find_by(login: params[:id]) || User.find_by_id(params[:id])
return render_forbidden unless User.current.logged? && (current_user&.admin? || current_user.id == @user.id) return render_forbidden unless User.current.logged? && (current_user&.admin? || current_user.id == @user.id)
Util.write_file(@image, avatar_path(@user)) Util.write_file(@image, avatar_path(@user))
return render_ok({message: '头像修改成功'}) return render_ok({message: '头像修改成功'})
rescue Exception => e rescue Exception => e
uid_logger_error(e.message) uid_logger_error(e.message)
render_error(-1, '头像修改失败!') render_error(-1, '头像修改失败!')
end end
def me def me
@user = current_user @user = current_user
end end
# 贴吧获取用户信接口 # 贴吧获取用户信接口
def get_user_info def get_user_info
begin begin
@user = current_user @user = current_user
begin begin
result = Notice::Read::CountService.call(current_user.id) result = Notice::Read::CountService.call(current_user.id)
@message_unread_total = result.nil? ? 0 : result[2]["unread_notification"] @message_unread_total = result.nil? ? 0 : result[2]["unread_notification"]
rescue rescue
@message_unread_total = 0 @message_unread_total = 0
end end
# TODO 等消息上线再打开注释 # TODO 等消息上线再打开注释
#@tidding_count = unviewed_tiddings(current_user) if current_user.present? #@tidding_count = unviewed_tiddings(current_user) if current_user.present?
rescue Exception => e rescue Exception => e
uid_logger_error(e.message) uid_logger_error(e.message)
missing_template missing_template
end end
end end
def attachment_show def attachment_show
file_name = params[:file_name] file_name = params[:file_name]
path = params[:path] || file_storage_directory path = params[:path] || file_storage_directory
send_file "#{path}/#{file_name}", :filename => "#{file_name}", send_file "#{path}/#{file_name}", :filename => "#{file_name}",
:type => 'game', :type => 'game',
:disposition => 'attachment' #inline can open in browser :disposition => 'attachment' #inline can open in browser
end end
def html_show def html_show
@contents = File.read("#{params[:path]}") @contents = File.read("#{params[:path]}")
respond_to do |format| respond_to do |format|
format.html {render :layout => false} format.html {render :layout => false}
end end
end end
# Redo: 消息总数缓存 # Redo: 消息总数缓存
def get_navigation_info def get_navigation_info
# @old_domain = edu_setting('old_edu_host') # @old_domain = edu_setting('old_edu_host')
# @user = current_user # @user = current_user
# # 新消息数 # # 新消息数
# @new_message = @user.tidings.where("created_at > '#{@user.click_time}'").count > 0 || @user.private_messages.where("created_at > '#{@user.click_time}'").count > 0 # @new_message = @user.tidings.where("created_at > '#{@user.click_time}'").count > 0 || @user.private_messages.where("created_at > '#{@user.click_time}'").count > 0
# #
# @user_url = "/users/#{@user.login}" # @user_url = "/users/#{@user.login}"
# @career = Career.where(status: true).order("created_at asc").pluck(:id, :name) # @career = Career.where(status: true).order("created_at asc").pluck(:id, :name)
# @auth = User.current.ec_school.present? ? "#{@old_domain}/ecs/department?school_id=#{User.current.ec_school}" : nil # @auth = User.current.ec_school.present? ? "#{@old_domain}/ecs/department?school_id=#{User.current.ec_school}" : nil
end end
# 用户回复功能 # 用户回复功能
def reply_message def reply_message
message = JournalsForMessage.new(reply_message_params) message = JournalsForMessage.new(reply_message_params)
message.user_id = current_user.id message.user_id = current_user.id
message.save! message.save!
render_ok(id: message.id) render_ok(id: message.id)
end end
# 搜索用户具有管理员角色的项目 # 搜索用户具有管理员角色的项目
def search_user_projects def search_user_projects
projects = Project.where.not(status: 9) projects = Project.where.not(status: 9)
projects = projects.joins(members: :member_roles).where(member_roles: { role_id: 3 }) projects = projects.joins(members: :member_roles).where(member_roles: { role_id: 3 })
projects = projects.where(members: { user_id: current_user.id }) projects = projects.where(members: { user_id: current_user.id })
search = params[:search].to_s.strip search = params[:search].to_s.strip
projects = projects.where('projects.name LIKE ?', "%#{search}%") if search.present? projects = projects.where('projects.name LIKE ?', "%#{search}%") if search.present?
@projects = projects.select(:id, :name) @projects = projects.select(:id, :name)
end end
#TODO 个人主页信息forge上弃用-hs, 0602 #TODO 个人主页信息forge上弃用-hs, 0602
def homepage_info def homepage_info
#待办事项,现在未做 #待办事项,现在未做
@undo_events = 10 @undo_events = 10
#用户的组织数量 #用户的组织数量
# @user_composes_count = @user.composes.size # @user_composes_count = @user.composes.size
@user_composes_count = 10 @user_composes_count = 10
end end
def brief_introduction def brief_introduction
content = params[:content].to_s.strip content = params[:content].to_s.strip
current_user.user_extension.update!(brief_introduction: content) current_user.user_extension.update!(brief_introduction: content)
render_ok render_ok
end end
def attendance def attendance
attendance = Users::AttendanceService.call(current_user) attendance = Users::AttendanceService.call(current_user)
render_ok(grade: current_user.grade, next_gold: attendance.next_gold) render_ok(grade: current_user.grade, next_gold: attendance.next_gold)
rescue Users::AttendanceService::Error => ex rescue Users::AttendanceService::Error => ex
render_error(ex.message) render_error(ex.message)
end end
# 其他平台登录后必须将token同步到forge平台实现sso登录功能 # 其他平台登录后必须将token同步到forge平台实现sso登录功能
def sync_token def sync_token
return render_error('未找相关用户!') unless @user return render_error('未找相关用户!') unless @user
token = Token.get_or_create_permanent_login_token(@user, 'autologin') token = Token.get_or_create_permanent_login_token(@user, 'autologin')
token.update_column(:value, params[:token]) token.update_column(:value, params[:token])
render_ok render_ok
end end
def trustie_related_projects def trustie_related_projects
projects = Project.includes(:owner, :members, :project_score).where(id: params[:ids]).order("updated_on desc") projects = Project.includes(:owner, :members, :project_score).where(id: params[:ids]).order("updated_on desc")
projects_json = [] projects_json = []
domain_url = EduSetting.get('host_name') domain_url = EduSetting.get('host_name')
if projects.present? if projects.present?
projects.each do |p| projects.each do |p|
project_url = "/#{p.owner.login}/#{p.identifier}" project_url = "/#{p.owner.login}/#{p.identifier}"
pj = { pj = {
id: p.id, id: p.id,
name: p.name, name: p.name,
is_public: p.is_public, is_public: p.is_public,
updated_on: p.updated_on.strftime("%Y-%m-%d"), updated_on: p.updated_on.strftime("%Y-%m-%d"),
status: p.status, status: p.status,
is_member: p.member?(current_user.try(:id)), is_member: p.member?(current_user.try(:id)),
owner: { owner: {
name: p.owner.try(:show_real_name), name: p.owner.try(:show_real_name),
login: p.owner.login login: p.owner.login
}, },
members_count: p&.members.size, members_count: p&.members.size,
issues_count: p.issues_count - p.pull_requests_count, issues_count: p.issues_count - p.pull_requests_count,
commits_count: p&.project_score&.changeset_num.to_i, commits_count: p&.project_score&.changeset_num.to_i,
http_url: domain_url + project_url, http_url: domain_url + project_url,
http_collaborator_url: domain_url + project_url + "/setting/collaborator", http_collaborator_url: domain_url + project_url + "/setting/collaborator",
http_issues_url: domain_url + project_url + "/issues", http_issues_url: domain_url + project_url + "/issues",
http_commits_url: domain_url + project_url + "/commits", http_commits_url: domain_url + project_url + "/commits",
project_score: p&.project_score.present? ? p&.project_score&.as_json(:except=>[:created_at, :updated_at]).merge!(commit_time: format_time(p&.project_score&.commit_time)) : {} project_score: p&.project_score.present? ? p&.project_score&.as_json(:except=>[:created_at, :updated_at]).merge!(commit_time: format_time(p&.project_score&.commit_time)) : {}
} }
projects_json.push(pj) projects_json.push(pj)
end end
end end
Rails.logger.info("==========projects_json========+########{projects_json}") Rails.logger.info("==========projects_json========+########{projects_json}")
render json: { projects: projects_json.present? ? projects_json : {} } render json: { projects: projects_json.present? ? projects_json : {} }
end end
def trustie_projects def trustie_projects
user_id = User.select(:id, :login).where(login: params[:login])&.first&.id user_id = User.select(:id, :login).where(login: params[:login])&.first&.id
projects = Project.visible projects = Project.visible
projects = projects.joins(:members).where(members: { user_id: user_id }) projects = projects.joins(:members).where(members: { user_id: user_id })
search = params[:search].to_s.strip search = params[:search].to_s.strip
projects = projects.where('projects.name LIKE ?', "%#{search}%") if search.present? projects = projects.where('projects.name LIKE ?', "%#{search}%") if search.present?
projects = projects.select(:id, :name).limit(10).as_json projects = projects.select(:id, :name).limit(10).as_json
render json: { projects: projects } render json: { projects: projects }
end end
def projects def projects
is_current_admin_user = User.current.logged? && (current_user&.admin? || current_user.id == @user.id) is_current_admin_user = User.current.logged? && (current_user&.admin? || current_user.id == @user.id)
scope = Projects::ListMyQuery.call(params, @user,is_current_admin_user) scope = Projects::ListMyQuery.call(params, @user,is_current_admin_user)
@total_count = scope.size @total_count = scope.size
@projects = paginate(scope) @projects = paginate(scope)
end end
# TODO 其他平台登录时同步修改gitea平台对应用户的密码 # TODO 其他平台登录时同步修改gitea平台对应用户的密码
# 该方法主要用于别的平台初次部署对接forge平台同步用户后gitea平台对应的用户密码与forge平台用户密码不一致是问题 # 该方法主要用于别的平台初次部署对接forge平台同步用户后gitea平台对应的用户密码与forge平台用户密码不一致是问题
def sync_gitea_pwd def sync_gitea_pwd
return render_error("未找到相关的用户") if @user.blank? return render_error("未找到相关的用户") if @user.blank?
flag = sync_pwd_to_gitea!(@user, {password: params[:password].to_s}) flag = sync_pwd_to_gitea!(@user, {password: params[:password].to_s})
flag ? render_ok : render_error('同步失败!') flag ? render_ok : render_error('同步失败!')
end end
# TODO # TODO
# 同步trusite平台用户的salt信息只需同步一次同步完成后该方法可以删除 # 同步trusite平台用户的salt信息只需同步一次同步完成后该方法可以删除
def sync_salt def sync_salt
user = User.find_by_login params[:login] user = User.find_by_login params[:login]
return if user.blank? return if user.blank?
user.update_column(:salt, params[:salt]) user.update_column(:salt, params[:salt])
render_ok render_ok
end end
def sync_user_info def sync_user_info
user = User.find_by_login params[:login] user = User.find_by_login params[:login]
return render_forbidden unless user === current_user return render_forbidden unless user === current_user
sync_params = { sync_params = {
email: params[:email], email: params[:email],
password: params[:password] password: params[:password]
} }
Users::UpdateInfoForm.new(sync_params.merge(login: params[:login])).validate! Users::UpdateInfoForm.new(sync_params.merge(login: params[:login])).validate!
interactor = Gitea::User::UpdateInteractor.call(user.login, sync_params) interactor = Gitea::User::UpdateInteractor.call(user.login, sync_params)
if interactor.success? if interactor.success?
user.update!(password: params[:password], mail: params[:email], status: User::STATUS_ACTIVE) user.update!(password: params[:password], mail: params[:email], status: User::STATUS_ACTIVE)
render_ok render_ok
else else
render_error(interactor.error) render_error(interactor.error)
end end
end end
private private
def load_user def load_user
@user = User.find_by_login(params[:id]) || User.find_by(id: params[:id]) @user = User.find_by_login(params[:id]) || User.find_by(id: params[:id])
end end
def user_params def user_params
params.require(:user).permit(:nickname, :image, params.require(:user).permit(:nickname, :image,
user_extension_attributes: [ user_extension_attributes: [
:gender, :location, :location_city, :gender, :location, :location_city,
:occupation, :technical_title, :occupation, :technical_title,
:school_id, :department_id, :province, :city, :school_id, :department_id, :province, :city,
:custom_department, :identity, :student_id, :description, :custom_department, :identity, :student_id, :description,
:show_email, :show_location, :show_department] :show_email, :show_location, :show_department]
) )
end end
def reply_message_params def reply_message_params
normal_status(-1, "参数不对") if params[:journals_for_message][:jour_type].nil? || params[:journals_for_message][:jour_id].nil? || normal_status(-1, "参数不对") if params[:journals_for_message][:jour_type].nil? || params[:journals_for_message][:jour_id].nil? ||
params[:journals_for_message][:notes].nil? || params[:journals_for_message][:reply_id].nil? params[:journals_for_message][:notes].nil? || params[:journals_for_message][:reply_id].nil?
params.require(:journals_for_message).permit(:jour_type, :jour_id, :notes, :m_parent_id, :reply_id) params.require(:journals_for_message).permit(:jour_type, :jour_id, :notes, :m_parent_id, :reply_id)
end end
def check_user_exist def check_user_exist
return if @user.present? return if @user.present?
render_not_found render_not_found
end end
end end