144 lines
4.8 KiB
Python
144 lines
4.8 KiB
Python
from flask import Blueprint, current_app, redirect, request, jsonify
|
||
from sqlalchemy.exc import IntegrityError
|
||
from app.models import User, Role, UserRole # 导入模型类
|
||
from app.utils import verify_password # 导入密码加密工具
|
||
from app import db
|
||
from flask_jwt_extended import (
|
||
create_access_token,
|
||
jwt_required,
|
||
get_jwt_identity,
|
||
) # 导入JWT相关工具
|
||
|
||
login_bp = Blueprint("login", __name__)
|
||
|
||
|
||
@login_bp.route("/login1", methods=["POST"])
|
||
def login():
|
||
# 初始化响应结构（避免未定义变量问题）F
|
||
response = {"code": 200, "message": "success"}
|
||
|
||
# 1. 获取登录凭证
|
||
data = request.get_json()
|
||
username = data.get("username")
|
||
password = data.get("password")
|
||
|
||
# 2. 验证必填字段
|
||
if not username or not password:
|
||
response["code"] = 400
|
||
response["message"] = "用户名和密码不能为空"
|
||
return jsonify(response)
|
||
|
||
# 3. 查询用户（包含状态验证）
|
||
user = User.query.filter_by(
|
||
username=username, status=1
|
||
).first() # 直接过滤启用状态的用户
|
||
|
||
# 4. 验证用户存在性和密码
|
||
if not user or not verify_password(
|
||
user.password, password
|
||
): # 注意：verify_password(加密密码, 明文密码)
|
||
response["code"] = 401
|
||
response["message"] = "用户名或密码错误"
|
||
return jsonify(response)
|
||
|
||
# 5. 生成JWT令牌
|
||
access_token = create_access_token(identity=str(user.id))
|
||
|
||
# 6. 查询用户关联的角色（处理多角色情况）
|
||
# 方式：查询用户所有角色名称，返回数组
|
||
roles = (
|
||
db.session.query(Role.name)
|
||
.join(UserRole, Role.id == UserRole.role_id)
|
||
.filter(UserRole.user_id == user.id) # 关联当前登录用户
|
||
.all()
|
||
)
|
||
print("roles", roles)
|
||
# 提取角色名称到数组（如果没有角色，返回空数组）
|
||
role_list = [role.name for role in roles] if roles else []
|
||
|
||
# 7. 按指定格式包装结果
|
||
result = {
|
||
"accessToken": access_token,
|
||
"id": user.id,
|
||
"username": user.username,
|
||
"nickname": user.username, # 假设nickname用username替代（如果表中有nickname字段可直接替换）
|
||
"avatar": user.avatar
|
||
or "https://gw.alipayobjects.com/zos/rmsportal/BiazfanxmamNRoxxVxka.png", # 默认为空时用默认头像
|
||
"roles": role_list, # 角色数组（单角色时为['角色名']，多角色时为['角色1','角色2']）
|
||
}
|
||
|
||
result = {"code": 200, "data": {"token": access_token}, "msg": "登录成功"}
|
||
|
||
return jsonify(result)
|
||
|
||
|
||
@login_bp.route("/info", methods=["GET"])
|
||
@jwt_required() # 要求登录状态（使用JWT验证）
|
||
def get_user_info():
|
||
try:
|
||
# 获取当前登录用户的ID（假设使用JWT存储用户ID）
|
||
current_user_id = get_jwt_identity()
|
||
|
||
# 查询数据库获取用户信息
|
||
user = User.query.get(current_user_id)
|
||
if not user:
|
||
return jsonify({"code": 404, "msg": "用户不存在", "data": None}), 404
|
||
|
||
# 提取用户角色（假设Role模型有name字段存储角色名称）
|
||
roles = [role.name for role in user.roles] if user.roles else []
|
||
|
||
# 构造返回数据
|
||
res = {
|
||
"code": 200,
|
||
"msg": "获取成功",
|
||
"data": {
|
||
"id": user.id,
|
||
"username": user.username,
|
||
"nickname": user.username, # 模型中没有nickname字段，暂用username代替
|
||
"avatar": user.avatar
|
||
or "https://gw.alipayobjects.com/zos/rmsportal/BiazfanxmamNRoxxVxka.png", # 默认头像
|
||
"roles": roles,
|
||
},
|
||
}
|
||
return jsonify(res)
|
||
|
||
except Exception as e:
|
||
# 异常处理
|
||
return (
|
||
jsonify({"code": 500, "msg": f"获取用户信息失败：{str(e)}", "data": None}),
|
||
500,
|
||
)
|
||
|
||
|
||
@login_bp.route("/get_record", methods=["GET"])
|
||
def get_record_code():
|
||
return jsonify({
|
||
"code": 200, # 200表示成功
|
||
"msg": "查询成功",
|
||
"data": current_app.config['HEADERS_SECRET_KEY'] # 调用模型自带的转字典方法
|
||
}), 200
|
||
|
||
|
||
|
||
@login_bp.route("/login")
|
||
def authorization():
|
||
"""
|
||
授权入口。
|
||
将用户浏览器重定向到 SSO 服务器的授权页面。
|
||
"""
|
||
# print("login123")
|
||
CLIENT_ID = current_app.config["CLIENT_ID"]
|
||
HOST = current_app.config["SS0_HOST"]
|
||
REDIRECT_URL = current_app.config["REDIRECT_URL"]
|
||
|
||
# 1. 构造重定向到 SSO 授权页面的 URL
|
||
auth_url = (
|
||
f"{HOST}v1/auth"
|
||
f"?response_type=code"
|
||
f"&client_id={CLIENT_ID}"
|
||
f"&scope=groups+openid+email+profile"
|
||
f"&redirect_uri={REDIRECT_URL}"
|
||
)
|
||
# print(auth_url)
|
||
# 2. 执行重定向
|
||
return redirect(auth_url) |