chenxing
@@ -0,0 +1,243 @@
|
||||
package com.yunhai.userhome.controller.api;
|
||||
|
||||
import com.yunhai.platform.apistd.BizException;
|
||||
import com.yunhai.platform.utils.exception.ErrorCode;
|
||||
import com.yunhai.platform.utils.model.BoaUser;
|
||||
import com.yunhai.userhome.config.Config;
|
||||
import com.yunhai.userhome.entity.AppCategory;
|
||||
import com.yunhai.userhome.entity.UserCurrentRole;
|
||||
import com.yunhai.userhome.service.IAppCategoryService;
|
||||
import com.yunhai.userhome.service.IUserCurrentRoleService;
|
||||
import com.yunhai.userhome.utils.FileUtil;
|
||||
import com.yunhai.userhome.utils.OtherUtil;
|
||||
import org.springframework.beans.factory.annotation.Autowired;
|
||||
import org.springframework.beans.factory.annotation.Value;
|
||||
import org.springframework.core.io.InputStreamResource;
|
||||
import org.springframework.data.domain.Page;
|
||||
import org.springframework.http.HttpHeaders;
|
||||
import org.springframework.http.MediaType;
|
||||
import org.springframework.http.ResponseEntity;
|
||||
import org.springframework.web.bind.annotation.GetMapping;
|
||||
import org.springframework.web.bind.annotation.PostMapping;
|
||||
import org.springframework.web.bind.annotation.RequestBody;
|
||||
import org.springframework.web.bind.annotation.RequestMapping;
|
||||
import org.springframework.web.bind.annotation.RequestParam;
|
||||
import org.springframework.web.bind.annotation.RestController;
|
||||
import org.springframework.web.multipart.MultipartFile;
|
||||
|
||||
import java.io.File;
|
||||
import java.io.FileInputStream;
|
||||
import java.io.FileOutputStream;
|
||||
import java.io.IOException;
|
||||
import java.io.InputStream;
|
||||
import java.util.ArrayList;
|
||||
import java.util.Arrays;
|
||||
import java.util.Date;
|
||||
import java.util.HashMap;
|
||||
import java.util.List;
|
||||
import java.util.Locale;
|
||||
import java.util.Map;
|
||||
import java.util.Optional;
|
||||
import java.util.UUID;
|
||||
|
||||
/**
|
||||
* 应用设置控制器（自 systemsetting AppSettingController + SysController 迁移，1:1 对齐）。
|
||||
*
|
||||
* <p>与原版差异点：写操作（应用 CRUD / UpdateResDate / 模板上传保存）校验调用者
|
||||
* 为超管(type==1)或校管理员(roleId∈{2,5,7})——原版任何登录用户可写，因新入口仅管理员可见，收紧。
|
||||
* 查询（分页列表 / FindAppCategory / GetTempList / downloadTemp）登录即可。
|
||||
*/
|
||||
@RestController
|
||||
@RequestMapping(Config.API_PATH)
|
||||
public class AppSettingController {
|
||||
|
||||
@Value("${FILE_PATH:./upload/}")
|
||||
private String FILE_PATH;
|
||||
|
||||
@Value("${FILE_WEB_PATH:}")
|
||||
private String FILE_WEB_PATH;
|
||||
|
||||
@Autowired
|
||||
private IAppCategoryService appCategoryService;
|
||||
|
||||
@Autowired
|
||||
private IUserCurrentRoleService userCurrentRoleService;
|
||||
|
||||
// ==================== 应用类别 CRUD ====================
|
||||
|
||||
/** 新增/编辑应用（JSON body，1:1 对齐原 SaveAppCategory） */
|
||||
@PostMapping(value = "SaveAppCategory", produces = "application/json")
|
||||
public void saveAppCategory(BoaUser authUserWithDept, @RequestBody AppCategory appCategory) {
|
||||
checkAdmin(authUserWithDept);
|
||||
if (appCategory.getCDate() == null) appCategory.setCDate(new Date());
|
||||
if (appCategory.getResDate() == null) appCategory.setResDate(new Date());
|
||||
appCategory.setCId(authUserWithDept.getId());
|
||||
appCategoryService.save(appCategory);
|
||||
}
|
||||
|
||||
@PostMapping(value = "DelAppCategory", produces = "application/json")
|
||||
public void delAppCategory(BoaUser authUserWithDept, Integer id) {
|
||||
checkAdmin(authUserWithDept);
|
||||
appCategoryService.deleteById(id);
|
||||
}
|
||||
|
||||
@GetMapping(value = "GetAppCategoryList")
|
||||
public Map getAppCategoryList(BoaUser authUserWithDept, Integer page, Integer count,
|
||||
@RequestParam(value = "roleType") Integer roleType,
|
||||
@RequestParam(value = "name", required = false) String name) {
|
||||
Page<AppCategory> data = appCategoryService.findPageList(page, count, roleType, name);
|
||||
Map map = new HashMap();
|
||||
map.put("total", data.getTotalElements());
|
||||
map.put("list", data.getContent());
|
||||
return map;
|
||||
}
|
||||
|
||||
@GetMapping(value = "FindAppCategory")
|
||||
public Optional<AppCategory> findAppCategory(BoaUser authUserWithDept, Integer id) {
|
||||
return appCategoryService.findById(id);
|
||||
}
|
||||
|
||||
@PostMapping(value = "UpdateResDate", produces = "application/json")
|
||||
public void updateResDate(BoaUser authUserWithDept, Integer id) {
|
||||
checkAdmin(authUserWithDept);
|
||||
appCategoryService.updateResDate(id);
|
||||
}
|
||||
|
||||
// ==================== 模板管理（对齐原 SysController） ====================
|
||||
|
||||
/** 上传模板压缩包（zip/rar），解压覆盖到 tempUpload/<appModId>/，删除压缩包 */
|
||||
@PostMapping(value = "tempUpload", produces = "application/json")
|
||||
public void tempUpload(BoaUser authUserWithDept, @RequestParam("file") MultipartFile file, Integer appModId) {
|
||||
checkAdmin(authUserWithDept);
|
||||
if (file == null || file.isEmpty()) {
|
||||
throw new BizException(ErrorCode.CUSTOM, "请选择上传文件");
|
||||
}
|
||||
String originalName = file.getOriginalFilename();
|
||||
String ext = originalName == null ? "" : originalName.substring(originalName.lastIndexOf(".")).toLowerCase(Locale.ROOT);
|
||||
if (!".zip".equals(ext) && !".rar".equals(ext)) {
|
||||
throw new BizException(ErrorCode.CUSTOM, "仅支持 zip/rar 格式");
|
||||
}
|
||||
// 不走图片 5MB 校验（模板包允许更大，依赖 multipart 配置），存到 tempUpload 子目录
|
||||
String uploadPath = FILE_PATH + "/tempUpload/";
|
||||
File fl = new File(uploadPath);
|
||||
if (!fl.exists()) fl.mkdirs();
|
||||
String fileName = FileUtil.uploadFile(file, uploadPath);
|
||||
String filePath = "/upload/tempUpload/" + fileName;
|
||||
|
||||
File unzipFiles = new File(FILE_PATH + "/tempUpload/" + appModId);
|
||||
if (!unzipFiles.exists()) unzipFiles.mkdirs();
|
||||
else FileUtil.delAllFile(unzipFiles.getPath());
|
||||
File zipFile = new File(filePath.replace("/upload", FILE_PATH));
|
||||
try {
|
||||
FileUtil.zipDecompress(zipFile, unzipFiles);
|
||||
} catch (Exception e) {
|
||||
throw new BizException(ErrorCode.CUSTOM, e.getMessage());
|
||||
} finally {
|
||||
zipFile.delete();
|
||||
}
|
||||
}
|
||||
|
||||
/** 模板文件列表（name + 访问 path） */
|
||||
@GetMapping(value = "GetTempList")
|
||||
public List<Map> getTempList(BoaUser authUserWithDept, Integer appModId) {
|
||||
File sourceFile = new File(FILE_PATH + "/tempUpload/" + appModId);
|
||||
List<Map> result = new ArrayList<>();
|
||||
if (sourceFile.exists() && sourceFile.isDirectory() && sourceFile.listFiles() != null) {
|
||||
Arrays.stream(sourceFile.listFiles()).forEach(file -> {
|
||||
Map map = new HashMap();
|
||||
map.put("name", file.getName());
|
||||
map.put("path", FILE_WEB_PATH + "/tempUpload/" + appModId + "/" + file.getName());
|
||||
result.add(map);
|
||||
});
|
||||
}
|
||||
return result;
|
||||
}
|
||||
|
||||
/** 保存模板文件内容（新增 fileName 路径穿越校验，原版没有；content 走 JSON body 避免 URL 长度限制） */
|
||||
@PostMapping(value = "SaveTempFile", produces = "application/json")
|
||||
public void saveTempFile(BoaUser authUserWithDept, @RequestBody Map<String, Object> body) {
|
||||
checkAdmin(authUserWithDept);
|
||||
Object appModIdObj = body.get("appModId");
|
||||
String fileName = body.get("fileName") == null ? null : body.get("fileName").toString();
|
||||
String content = body.get("content") == null ? "" : body.get("content").toString();
|
||||
if (appModIdObj == null) {
|
||||
throw new BizException(ErrorCode.CUSTOM, "缺少appModId");
|
||||
}
|
||||
Integer appModId;
|
||||
try {
|
||||
appModId = Integer.parseInt(appModIdObj.toString());
|
||||
} catch (NumberFormatException e) {
|
||||
throw new BizException(ErrorCode.CUSTOM, "非法appModId");
|
||||
}
|
||||
if (fileName == null || fileName.contains("/") || fileName.contains("\\") || fileName.contains("..")) {
|
||||
throw new BizException(ErrorCode.CUSTOM, "非法文件名");
|
||||
}
|
||||
File dir = new File(FILE_PATH + "/tempUpload/" + appModId);
|
||||
if (!dir.exists()) dir.mkdirs();
|
||||
File file = new File(FILE_PATH + "/tempUpload/" + appModId + "/" + fileName);
|
||||
try {
|
||||
if (!file.exists()) {
|
||||
file.createNewFile();
|
||||
}
|
||||
FileOutputStream fos = new FileOutputStream(file);
|
||||
fos.write(content.getBytes());
|
||||
fos.flush();
|
||||
fos.close();
|
||||
} catch (IOException e) {
|
||||
throw new BizException(ErrorCode.INTERNAL_SERVER_ERROR, "保存失败");
|
||||
}
|
||||
}
|
||||
|
||||
/** 打包下载模板目录（zip 流式下载，临时 zip 关闭即删） */
|
||||
@GetMapping(value = "downloadTemp", produces = "application/json;charset=UTF-8")
|
||||
public ResponseEntity<InputStreamResource> downloadTemp(BoaUser authUserWithDept, Integer appModId, String name) {
|
||||
File zipFilePath = new File(FILE_PATH + "/tempUpload/" + appModId);
|
||||
if (!zipFilePath.exists() || !zipFilePath.isDirectory()) {
|
||||
throw new BizException(ErrorCode.CUSTOM, "模板不存在");
|
||||
}
|
||||
String zipName = UUID.randomUUID().toString().substring(0, 8) + ".zip";
|
||||
File zipFile = new File(FILE_PATH + "/tempUpload/" + zipName);
|
||||
try {
|
||||
FileUtil.zipCompress(zipFilePath, zipFile);
|
||||
} catch (Exception e) {
|
||||
throw new BizException(ErrorCode.CUSTOM, e.getMessage());
|
||||
}
|
||||
String downloadName = (name == null || name.trim().isEmpty()) ? "template" : name;
|
||||
try {
|
||||
InputStream inputStream = new FileInputStream(zipFile) {
|
||||
@Override
|
||||
public void close() throws IOException {
|
||||
super.close();
|
||||
zipFile.delete();
|
||||
}
|
||||
};
|
||||
HttpHeaders headers = new HttpHeaders();
|
||||
headers.add("Cache-Control", "no-cache, no-store, must-revalidate");
|
||||
headers.add("Content-Disposition",
|
||||
"attachment; filename=" + new String((downloadName + ".zip").getBytes("gbk"), "iso8859-1"));
|
||||
headers.add("Pragma", "no-cache");
|
||||
headers.add("Expires", "0");
|
||||
return ResponseEntity.ok().headers(headers)
|
||||
.contentType(MediaType.parseMediaType("application/octet-stream"))
|
||||
.body(new InputStreamResource(inputStream));
|
||||
} catch (IOException e) {
|
||||
zipFile.delete();
|
||||
throw new BizException(ErrorCode.INTERNAL_SERVER_ERROR, "下载失败");
|
||||
}
|
||||
}
|
||||
|
||||
// ==================== 私有方法 ====================
|
||||
|
||||
/**
|
||||
* 写操作权限校验：超管(type==1) 或 校管理员(roleId∈{2,5,7})，其余 403。
|
||||
*/
|
||||
private void checkAdmin(BoaUser authUserWithDept) {
|
||||
if (authUserWithDept.getType() == 1) {
|
||||
return;
|
||||
}
|
||||
Optional<UserCurrentRole> currentRoleOpt = userCurrentRoleService.findById(authUserWithDept.getId());
|
||||
if (!currentRoleOpt.isPresent() || !OtherUtil.isAdminById(currentRoleOpt.get().getRoleId())) {
|
||||
throw new BizException(ErrorCode.FORBIDDEN);
|
||||
}
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user