ebcdac7796
1. 新增（kinit-api）：防止密码破解，新增输入5次错误密码，账号锁定，使用过期时间为1天 2. 新增（kinit-api）：新增 OpenAuth 开放认证方式 3. 新增（kinit-api，kinit-uni）：创建用户时，如果没有头像，则添加默认头像链接 4. 优化（kinit-api）：登录接口优化 5. 新增（kinit-api）：新增Count计数类 6. 更新（kinit-admin）：前端升级到vue-element-plus-admin最新版本1.9.4
113 lines
4.6 KiB
Python
113 lines
4.6 KiB
Python
# -*- coding: utf-8 -*-
|
||
# @version : 1.0
|
||
# @Creaet Time : 2021/10/24 16:44
|
||
# @File : views.py
|
||
# @IDE : PyCharm
|
||
# @desc : 安全认证视图
|
||
|
||
"""
|
||
JWT 表示 「JSON Web Tokens」。https://jwt.io/
|
||
|
||
它是一个将 JSON 对象编码为密集且没有空格的长字符串的标准。
|
||
|
||
通过这种方式，你可以创建一个有效期为 1 周的令牌。然后当用户第二天使用令牌重新访问时，你知道该用户仍然处于登入状态。
|
||
一周后令牌将会过期，用户将不会通过认证，必须再次登录才能获得一个新令牌。
|
||
|
||
我们需要安装 python-jose 以在 Python 中生成和校验 JWT 令牌：pip install python-jose[cryptography]
|
||
|
||
PassLib 是一个用于处理哈希密码的很棒的 Python 包。它支持许多安全哈希算法以及配合算法使用的实用程序。
|
||
推荐的算法是 「Bcrypt」：pip install passlib[bcrypt]
|
||
"""
|
||
|
||
from datetime import timedelta
|
||
from fastapi import APIRouter, Depends, Request
|
||
from sqlalchemy.ext.asyncio import AsyncSession
|
||
from core.database import db_getter
|
||
from utils.response import SuccessResponse, ErrorResponse
|
||
from application import settings
|
||
from utils.tools import generate_string
|
||
from .login_manage import LoginManage
|
||
from .validation import LoginForm, WXLoginForm
|
||
from apps.vadmin.record.models import VadminLoginRecord
|
||
from apps.vadmin.auth.crud import MenuDal, UserDal
|
||
from apps.vadmin.auth.schemas import UserIn
|
||
from .current import FullAdminAuth
|
||
from .validation.auth import Auth
|
||
from utils.wx.oauth import WXOAuth
|
||
from core.data_types import Telephone
|
||
|
||
app = APIRouter()
|
||
|
||
|
||
@app.post("/login/", summary="手机号密码登录", description="员工登录通道，限制最多输错次数，达到最大值后将is_active=False")
|
||
async def login_for_access_token(
|
||
request: Request,
|
||
data: LoginForm,
|
||
manage: LoginManage = Depends(),
|
||
db: AsyncSession = Depends(db_getter)
|
||
):
|
||
try:
|
||
if data.method == "0":
|
||
result = await manage.password_login(data, db, request)
|
||
elif data.method == "1":
|
||
result = await manage.sms_login(data, db, request)
|
||
else:
|
||
raise ValueError("无效参数")
|
||
|
||
if not result.status:
|
||
raise ValueError(result.msg)
|
||
|
||
token_expires = timedelta(minutes=settings.ACCESS_TOKEN_EXPIRE_MINUTES)
|
||
token = LoginManage.create_access_token(data={"sub": result.user.telephone}, expires_delta=token_expires)
|
||
resp = {
|
||
"access_token": token,
|
||
"token_type": "bearer",
|
||
"is_reset_password": result.user.is_reset_password,
|
||
"is_wx_server_openid": result.user.is_wx_server_openid
|
||
}
|
||
await VadminLoginRecord.create_login_record(db, data, True, request, resp)
|
||
return SuccessResponse(resp)
|
||
except ValueError as e:
|
||
await VadminLoginRecord.create_login_record(db, data, False, request, {"message": str(e)})
|
||
return ErrorResponse(msg=str(e))
|
||
|
||
|
||
@app.post("/wx/login/", summary="微信服务端一键登录", description="员工登录通道")
|
||
async def wx_login_for_access_token(request: Request, data: WXLoginForm, db: AsyncSession = Depends(db_getter)):
|
||
try:
|
||
if data.platform != "1" or data.method != "2":
|
||
raise ValueError("无效参数")
|
||
wx = WXOAuth(request.app.state.redis, 0)
|
||
telephone = await wx.parsing_phone_number(data.code)
|
||
if not telephone:
|
||
raise ValueError("无效Code")
|
||
data.telephone = telephone
|
||
user = await UserDal(db).get_data(telephone=telephone, v_return_none=True)
|
||
if not user:
|
||
raise ValueError("此手机号不存在")
|
||
elif not user.is_active:
|
||
raise ValueError("此手机号已被冻结")
|
||
except ValueError as e:
|
||
await VadminLoginRecord.create_login_record(db, data, False, request, {"message": str(e)})
|
||
return ErrorResponse(msg=str(e))
|
||
|
||
# 更新登录时间
|
||
await user.update_login_info(db, request.client.host)
|
||
|
||
# 登录成功创建 token
|
||
token_expires = timedelta(minutes=settings.ACCESS_TOKEN_EXPIRE_MINUTES)
|
||
token = LoginManage.create_access_token(data={"sub": user.telephone}, expires_delta=token_expires)
|
||
resp = {
|
||
"access_token": token,
|
||
"token_type": "bearer",
|
||
"is_reset_password": user.is_reset_password,
|
||
"is_wx_server_openid": user.is_wx_server_openid
|
||
}
|
||
await VadminLoginRecord.create_login_record(db, data, True, request, resp)
|
||
return SuccessResponse(resp)
|
||
|
||
|
||
@app.get("/getMenuList/", summary="获取当前用户菜单树")
|
||
async def get_menu_list(auth: Auth = Depends(FullAdminAuth())):
|
||
return SuccessResponse(await MenuDal(auth.db).get_routers(auth.user))
|