ebcdac7796
1. 新增（kinit-api）：防止密码破解，新增输入5次错误密码，账号锁定，使用过期时间为1天 2. 新增（kinit-api）：新增 OpenAuth 开放认证方式 3. 新增（kinit-api，kinit-uni）：创建用户时，如果没有头像，则添加默认头像链接 4. 优化（kinit-api）：登录接口优化 5. 新增（kinit-api）：新增Count计数类 6. 更新（kinit-admin）：前端升级到vue-element-plus-admin最新版本1.9.4
90 lines
3.1 KiB
Python
90 lines
3.1 KiB
Python
#!/usr/bin/python
|
||
# -*- coding: utf-8 -*-
|
||
# @version : 1.0
|
||
# @Creaet Time : 2022/11/9 10:15
|
||
# @File : login.py
|
||
# @IDE : PyCharm
|
||
# @desc : 登录验证装饰器
|
||
|
||
from fastapi import Request, Depends
|
||
from pydantic import BaseModel, validator
|
||
from sqlalchemy.ext.asyncio import AsyncSession
|
||
|
||
from application.settings import DEFAULT_AUTH_ERROR_MAX_NUMBER
|
||
from apps.vadmin.auth import models, crud, schemas
|
||
from core.database import db_getter
|
||
from core.validator import vali_telephone
|
||
from typing import Optional
|
||
from utils.count import Count
|
||
|
||
|
||
class LoginForm(BaseModel):
|
||
telephone: str
|
||
password: str
|
||
method: str = '0' # 认证方式，0：密码登录，1：短信登录，2：微信一键登录
|
||
platform: str = '0' # 登录平台，0：PC端管理系统，1：移动端管理系统
|
||
|
||
# validators
|
||
_normalize_telephone = validator('telephone', allow_reuse=True)(vali_telephone)
|
||
|
||
|
||
class WXLoginForm(BaseModel):
|
||
telephone: Optional[str] = None
|
||
code: str
|
||
method: str = '2' # 认证方式，0：密码登录，1：短信登录，2：微信一键登录
|
||
platform: str = '1' # 登录平台，0：PC端管理系统，1：移动端管理系统
|
||
|
||
|
||
class LoginResult(BaseModel):
|
||
status: Optional[bool] = False
|
||
user: Optional[schemas.UserOut] = None
|
||
msg: Optional[str] = None
|
||
|
||
class Config:
|
||
arbitrary_types_allowed = True
|
||
|
||
|
||
class LoginValidation:
|
||
|
||
"""
|
||
验证用户登录时提交的数据是否有效
|
||
"""
|
||
|
||
def __init__(self, func):
|
||
self.func = func
|
||
|
||
async def __call__(self, data: LoginForm, db: AsyncSession, request: Request) -> LoginResult:
|
||
self.result = LoginResult()
|
||
if data.platform not in ["0", "1"] or data.method not in ["0", "1"]:
|
||
self.result.msg = "无效参数"
|
||
return self.result
|
||
user = await crud.UserDal(db).get_data(telephone=data.telephone, v_return_none=True)
|
||
if not user:
|
||
self.result.msg = "该手机号不存在！"
|
||
return self.result
|
||
|
||
result = await self.func(self, data=data, user=user, request=request)
|
||
|
||
count_key = f"{data.telephone}_password_auth" if data.method == '0' else f"{data.telephone}_sms_auth"
|
||
count = Count(request.app.state.redis, count_key)
|
||
|
||
if not result.status:
|
||
self.result.msg = result.msg
|
||
number = await count.add(ex=86400)
|
||
if number >= DEFAULT_AUTH_ERROR_MAX_NUMBER:
|
||
await count.reset()
|
||
# 如果等于最大次数，那么就将用户 is_active=False
|
||
user.is_active = False
|
||
await db.flush()
|
||
elif not user.is_active:
|
||
self.result.msg = "此手机号已被冻结！"
|
||
elif data.platform in ["0", "1"] and not user.is_staff:
|
||
self.result.msg = "此手机号无权限！"
|
||
else:
|
||
await count.delete()
|
||
self.result.msg = "OK"
|
||
self.result.status = True
|
||
self.result.user = schemas.UserSimpleOut.from_orm(user)
|
||
await user.update_login_info(db, request.client.host)
|
||
return self.result
|