from django.shortcuts import render from django.http.response import JsonResponse,HttpResponse from django.views.decorators.csrf import csrf_exempt # CSRF装饰器 from django.views.decorators.http import require_http_methods,require_safe,require_GET from django.contrib.auth.decorators import login_required # 登录需求装饰器 from django.core.exceptions import PermissionDenied,ObjectDoesNotExist from app_api.models import UserToken from app_doc.models import Project,Doc,Image import time,hashlib import traceback,json from django.conf import settings from app_doc.util_upload_img import upload_generation_dir,base_img_upload from loguru import logger from django.contrib.auth import authenticate,login,logout # 认证相关方法 from django.contrib.auth.models import User # Django默认用户模型 from django.shortcuts import render,redirect # MrDoc 基于用户的Token访问API模块 # 用户通过该url获取服务器时间戳，便于接口访问 def get_timestamp(request): now_time = str(int(time.time())) return JsonResponse({'status':True,'data':now_time}) def oauth0(request): if request.method == 'GET': try: username = request.GET.get("username","") timestamp = request.GET.get("timestamp","") randstr = request.GET.get("randstr","") hashstr = request.GET.get("hashstr","") redirecturl = request.GET.get("redirecturl","") if ("" in [username,timestamp,randstr,hashstr]) == False : # 都不为空，才验证哦 # 1 、验证timestamp的时效性 nowtime = int (time.time()) # 时间戳失效时间，默认为3600，可以改短，如30，严格点5秒，如果使用5秒，请求前，需要通过get_timestamp获取服务器时间戳，否则因为和服务器时间差导致无法验证通过 if (nowtime - int(timestamp)) > 3600 : return JsonResponse({'status':False,'data':nowtime,'errormsg':"out of time"}) # 2、获取userid的Token user = User.objects.get(username=username) print(type(user)) print(user.first_name) ID = user.id State = user.is_active if ID is not None: if State == 1: usertoken = UserToken.objects.get(user_id=ID) token = usertoken.token else: return JsonResponse({'status':False,'data':nowtime,'errormsg':'user deny！'}) # 3、 验证hash的正确性 final_str = str(randstr) + str(timestamp) + str(username) + token md5 = hashlib.md5(final_str.encode("utf-8")).hexdigest() # 不支持中文 if md5 == hashstr: # 用户验证成功 login(request,user) #return JsonResponse({'status':True,'data':nowtime,'errmsg':''}) #return redirect(redirecturl) from urllib.parse import unquote newurl = unquote(redirecturl) return redirect(newurl) else: return JsonResponse({'status':False,'data':nowtime,'errmsg':'hash error!'}) else: return JsonResponse({'status':False,'data':'some key words is empty!'}) except : return JsonResponse({'status':False,'data':'Something wrong here!!'}) else: return JsonResponse({'status':False,'data':'Nothing Here'}) # Token管理页面 @require_http_methods(['POST','GET']) @login_required() def manage_token(request): if request.method == 'GET': try: token = UserToken.objects.get(user=request.user).token # 查询用户Token except ObjectDoesNotExist: token = '你还没有生成过Token！' except: if settings.DEBUG: print(traceback.print_exc()) logger.exception("Token管理页面异常") return render(request,'app_api/manage_token.html',locals()) elif request.method == 'POST': try: user = request.user now_time =str(time.time()) string = 'user_{}_time_{}'.format(user,now_time).encode('utf-8') token_str = hashlib.sha224(string).hexdigest() user_token = UserToken.objects.filter(user=user) if user_token.exists(): UserToken.objects.get(user=user).delete() UserToken.objects.create( user=user, token=token_str ) return JsonResponse({'status':True,'data':token_str}) except: logger.exception("用户Token生成异常") return JsonResponse({'status':False,'data':'生成出错，请重试！'}) # 获取文集 @require_GET def get_projects(request): token = request.GET.get('token','') try: token = UserToken.objects.get(token=token) projects = Project.objects.filter(create_user=token.user) # 查询文集 project_list = [] for project in projects: item = { 'id':project.id, # 文集ID 'name':project.name, # 文集名称 'type':project.role # 文集状态 } project_list.append(item) return JsonResponse({'status':True,'data':project_list}) except ObjectDoesNotExist: return JsonResponse({'status':False,'data':'token无效'}) except: logger.exception("token获取文集异常") return JsonResponse({'status':False,'data':'系统异常'}) # 获取文集下的文档列表 def get_docs(request): token = request.GET.get('token', '') try: token = UserToken.objects.get(token=token) pid = request.GET.get('pid','') docs = Doc.objects.filter(create_user=token.user,top_doc=pid) # 查询文集下的文档 doc_list = [] for doc in docs: item = { 'id': doc.id, # 文档ID 'name': doc.name, # 文档名称 'parent_doc':doc.parent_doc, # 上级文档 'top_doc':doc.top_doc, # 所属文集 'status':doc.status, # 文档状态 'create_time': doc.create_time, # 文档创建时间 'modify_time': doc.modify_time, # 文档的修改时间 'create_user': doc.create_user.username # 文档的创建者 } doc_list.append(item) return JsonResponse({'status': True, 'data': doc_list}) except ObjectDoesNotExist: return JsonResponse({'status': False, 'data': 'token无效'}) except: logger.exception("token获取文集异常") return JsonResponse({'status': False, 'data': '系统异常'}) # 获取单篇文档 def get_doc(request): token = request.GET.get('token', '') try: token = UserToken.objects.get(token=token) did = request.GET.get('did', '') doc = Doc.objects.get(create_user=token.user, id=did) # 查询文集下的文档 item = { 'id': doc.id, # 文档ID 'name': doc.name, # 文档名称 'md_content':doc.pre_content, # 文档内容 'parent_doc':doc.parent_doc, # 上级文档 'top_doc':doc.top_doc, # 所属文集 'status':doc.status, # 文档状态 'create_time': doc.create_time, # 文档创建时间 'modify_time': doc.modify_time, # 文档的修改时间 'create_user': doc.create_user.username # 文档的创建者 } return JsonResponse({'status': True, 'data': item}) except ObjectDoesNotExist: return JsonResponse({'status': False, 'data': 'token无效'}) except: logger.exception("token获取文集异常") return JsonResponse({'status': False, 'data': '系统异常'}) # 新建文档 @require_http_methods(['GET','POST']) @csrf_exempt def create_doc(request): token = request.GET.get('token', '') project_id = request.POST.get('pid','') doc_title = request.POST.get('title','') doc_content = request.POST.get('doc','') try: # 验证Token token = UserToken.objects.get(token=token) # 文集是否属于用户 is_project = Project.objects.filter(create_user=token.user,id=project_id) # 新建文档 if is_project.exists(): Doc.objects.create( name = doc_title, # 文档内容 pre_content = doc_content, # 文档的编辑内容，意即编辑框输入的内容 top_doc = project_id, # 所属文集 create_user = token.user # 创建的用户 ) return JsonResponse({'status': True, 'data': 'ok'}) else: return JsonResponse({'status':False,'data':'非法请求'}) except ObjectDoesNotExist: return JsonResponse({'status': False, 'data': 'token无效'}) except: logger.exception("token创建文档异常") return JsonResponse({'status':False,'data':'系统异常'}) # 上传图片 @csrf_exempt @require_http_methods(['GET','POST']) def upload_img(request): ################## # {"success": 0, "message": "出错信息"} # {"success": 1, "url": "图片地址"} ################## token = request.GET.get('token', '') base64_img = request.POST.get('data','') try: # 验证Token token = UserToken.objects.get(token=token) # 上传图片 result = base_img_upload(base64_img, '', token.user) return JsonResponse(result) # return HttpResponse(json.dumps(result), content_type="application/json") except ObjectDoesNotExist: return JsonResponse({'success': 0, 'data': 'token无效'}) except: logger.exception("token上传图片异常") return JsonResponse({'success':0,'data':'上传出错'})