package tech.powerjob.server.web.controller;
|
|
import com.google.common.collect.Lists;
|
import com.google.common.collect.Maps;
|
import com.google.common.collect.Sets;
|
import lombok.RequiredArgsConstructor;
|
import lombok.extern.slf4j.Slf4j;
|
import org.apache.commons.collections4.CollectionUtils;
|
import org.apache.commons.lang3.BooleanUtils;
|
import org.apache.commons.lang3.StringUtils;
|
import org.springframework.beans.BeanUtils;
|
import org.springframework.data.domain.Page;
|
import org.springframework.data.domain.PageRequest;
|
import org.springframework.data.domain.Pageable;
|
import org.springframework.data.jpa.domain.Specification;
|
import org.springframework.web.bind.annotation.PostMapping;
|
import org.springframework.web.bind.annotation.RequestBody;
|
import org.springframework.web.bind.annotation.RequestMapping;
|
import org.springframework.web.bind.annotation.RestController;
|
import tech.powerjob.common.response.ResultDTO;
|
import tech.powerjob.common.serialize.JsonUtils;
|
import tech.powerjob.common.utils.CommonUtils;
|
import tech.powerjob.server.auth.LoginUserHolder;
|
import tech.powerjob.server.auth.Permission;
|
import tech.powerjob.server.auth.Role;
|
import tech.powerjob.server.auth.RoleScope;
|
import tech.powerjob.server.auth.common.AuthConstants;
|
import tech.powerjob.server.auth.interceptor.ApiPermission;
|
import tech.powerjob.server.auth.plugin.ModifyOrCreateDynamicPermission;
|
import tech.powerjob.server.auth.plugin.SaveAppGrantPermissionPlugin;
|
import tech.powerjob.server.auth.service.WebAuthService;
|
import tech.powerjob.server.common.module.WorkerInfo;
|
import tech.powerjob.server.core.service.AppInfoService;
|
import tech.powerjob.server.persistence.PageResult;
|
import tech.powerjob.server.persistence.QueryConvertUtils;
|
import tech.powerjob.server.persistence.remote.model.AppInfoDO;
|
import tech.powerjob.server.persistence.remote.model.NamespaceDO;
|
import tech.powerjob.server.persistence.remote.repository.AppInfoRepository;
|
import tech.powerjob.server.remote.worker.WorkerClusterQueryService;
|
import tech.powerjob.server.web.converter.NamespaceConverter;
|
import tech.powerjob.server.web.request.AppAssertRequest;
|
import tech.powerjob.server.web.request.ComponentUserRoleInfo;
|
import tech.powerjob.server.web.request.ModifyAppInfoRequest;
|
import tech.powerjob.server.web.request.QueryAppInfoRequest;
|
import tech.powerjob.server.web.response.AppInfoVO;
|
import tech.powerjob.server.web.response.NamespaceBaseVO;
|
import tech.powerjob.server.web.response.UserBaseVO;
|
import tech.powerjob.server.web.service.NamespaceWebService;
|
import tech.powerjob.server.web.service.UserWebService;
|
|
import javax.persistence.criteria.Predicate;
|
import java.util.*;
|
import java.util.stream.Collectors;
|
|
/**
|
* AppName Controller
|
* vue axios 的POST请求必须使用 @RequestBody 接收
|
*
|
* @author tjq
|
* @since 2020/4/1
|
*/
|
@Slf4j
|
@RestController
|
@RequestMapping("/appInfo")
|
@RequiredArgsConstructor
|
public class AppInfoController {
|
|
private final WebAuthService webAuthService;
|
|
private final UserWebService userWebService;
|
|
private final AppInfoService appInfoService;
|
private final AppInfoRepository appInfoRepository;
|
|
private final NamespaceWebService namespaceWebService;
|
|
private final WorkerClusterQueryService workerClusterQueryService;
|
|
@PostMapping("/save")
|
@ApiPermission(name = "App-Save", roleScope = RoleScope.APP, dynamicPermissionPlugin = ModifyOrCreateDynamicPermission.class, grandPermissionPlugin = SaveAppGrantPermissionPlugin.class)
|
public ResultDTO<AppInfoVO> saveAppInfo(@RequestBody ModifyAppInfoRequest req) {
|
|
req.valid();
|
AppInfoDO appInfoDO;
|
|
Long id = req.getId();
|
if (id == null) {
|
appInfoDO = new AppInfoDO();
|
appInfoDO.setGmtCreate(new Date());
|
appInfoDO.setCreator(LoginUserHolder.getUserId());
|
} else {
|
appInfoDO = appInfoService.findById(id, false).orElseThrow(() -> new IllegalArgumentException("can't find appInfo by id:" + id));
|
|
// 不允许修改 appName
|
if (!appInfoDO.getAppName().equalsIgnoreCase(req.getAppName())) {
|
throw new IllegalArgumentException("NOT_ALLOW_CHANGE_THE_APP_NAME");
|
}
|
}
|
|
appInfoDO.setAppName(req.getAppName());
|
appInfoDO.setTitle(req.getTitle());
|
appInfoDO.setPassword(req.getPassword());
|
appInfoDO.setNamespaceId(req.getNamespaceId());
|
appInfoDO.setTags(req.getTags());
|
appInfoDO.setExtra(req.getExtra());
|
|
appInfoDO.setGmtModified(new Date());
|
appInfoDO.setModifier(LoginUserHolder.getUserId());
|
|
AppInfoDO savedAppInfo = appInfoService.save(appInfoDO);
|
|
// 重现授权
|
webAuthService.processPermissionOnSave(RoleScope.APP, savedAppInfo.getId(), req.getComponentUserRoleInfo());
|
|
return ResultDTO.success(convert(Lists.newArrayList(savedAppInfo), false).get(0));
|
}
|
|
@PostMapping("/delete")
|
@ApiPermission(name = "App-Delete", roleScope = RoleScope.APP, requiredPermission = Permission.SU)
|
public ResultDTO<Void> deleteApp(Long appId) {
|
|
log.warn("[AppInfoController] try to delete app: {}", appId);
|
|
List<WorkerInfo> allAliveWorkers = workerClusterQueryService.getAllAliveWorkers(appId);
|
if (CollectionUtils.isNotEmpty(allAliveWorkers)) {
|
return ResultDTO.failed("Unable to delete apps with live workers, Please remove the worker dependency first!");
|
}
|
|
appInfoService.deleteById(appId);
|
log.warn("[AppInfoController] delete app[id={}] successfully!", appId);
|
return ResultDTO.success(null);
|
}
|
|
@PostMapping("/list")
|
@ApiPermission(name = "App-List", roleScope = RoleScope.APP, requiredPermission = Permission.NONE)
|
public ResultDTO<PageResult<AppInfoVO>> listAppInfoByQuery(@RequestBody QueryAppInfoRequest queryAppInfoRequest) {
|
|
Pageable pageable = PageRequest.of(queryAppInfoRequest.getIndex(), queryAppInfoRequest.getPageSize());
|
|
// 相关权限（先查处关联 ids）
|
Set<Long> queryAppIds;
|
Boolean showMyRelated = queryAppInfoRequest.getShowMyRelated();
|
if (BooleanUtils.isTrue(showMyRelated)) {
|
Set<Long> targetIds = Sets.newHashSet();
|
webAuthService.fetchMyPermissionTargets(RoleScope.APP).values().forEach(targetIds::addAll);
|
queryAppIds = targetIds;
|
|
if (CollectionUtils.isEmpty(queryAppIds)) {
|
return ResultDTO.success(new PageResult<>());
|
}
|
|
} else {
|
queryAppIds = Collections.emptySet();
|
}
|
|
Specification<AppInfoDO> specification = (root, query, criteriaBuilder) -> {
|
List<Predicate> predicates = Lists.newArrayList();
|
|
Long appId = queryAppInfoRequest.getAppId();
|
Long namespaceId = queryAppInfoRequest.getNamespaceId();
|
|
if (appId != null) {
|
predicates.add(criteriaBuilder.equal(root.get("id"), appId));
|
}
|
|
if (namespaceId != null) {
|
predicates.add(criteriaBuilder.equal(root.get("namespaceId"), namespaceId));
|
}
|
|
if (StringUtils.isNotEmpty(queryAppInfoRequest.getAppNameLike())) {
|
predicates.add(criteriaBuilder.like(root.get("appName"), QueryConvertUtils.convertLikeParams(queryAppInfoRequest.getAppNameLike())));
|
}
|
|
if (StringUtils.isNotEmpty(queryAppInfoRequest.getTagLike())) {
|
predicates.add(criteriaBuilder.like(root.get("tags"), QueryConvertUtils.convertLikeParams(queryAppInfoRequest.getTagLike())));
|
}
|
|
if (!queryAppIds.isEmpty()) {
|
predicates.add(criteriaBuilder.in(root.get("id")).value(queryAppIds));
|
}
|
|
return query.where(predicates.toArray(new Predicate[0])).getRestriction();
|
};
|
|
Page<AppInfoDO> pageAppInfoResult = appInfoRepository.findAll(specification, pageable);
|
|
PageResult<AppInfoVO> pageRet = new PageResult<>(pageAppInfoResult);
|
|
List<AppInfoDO> appInfoDos = pageAppInfoResult.get().collect(Collectors.toList());
|
pageRet.setData(convert(appInfoDos, true));
|
|
return ResultDTO.success(pageRet);
|
}
|
|
@PostMapping("/becomeAdmin")
|
@ApiPermission(name = "App-BecomeAdmin", roleScope = RoleScope.GLOBAL, requiredPermission = Permission.NONE)
|
public ResultDTO<Void> becomeAdminByAppNameAndPassword(@RequestBody AppAssertRequest appAssertRequest) {
|
String appName = appAssertRequest.getAppName();
|
|
Long appId = appInfoService.assertApp(appName, appAssertRequest.getPassword(), appAssertRequest.getEncryptType());
|
|
Map<String, Object> extra = Maps.newHashMap();
|
extra.put("source", "becomeAdminByAppNameAndPassword");
|
|
webAuthService.grantRole2LoginUser(RoleScope.APP, appId, Role.ADMIN, JsonUtils.toJSONString(extra));
|
|
return ResultDTO.success(null);
|
}
|
|
private List<AppInfoVO> convert(List<AppInfoDO> data, boolean fillDetail) {
|
if (CollectionUtils.isEmpty(data)) {
|
return Lists.newLinkedList();
|
}
|
|
// app 界面使用频率不高，数据库操作 rt 也不会太长，展示不考虑性能问题，简单期间串行补全
|
return data.stream().map(appInfoDO -> {
|
AppInfoVO appInfoVO = new AppInfoVO();
|
BeanUtils.copyProperties(appInfoDO, appInfoVO);
|
|
appInfoVO.setGmtCreateStr(CommonUtils.formatTime(appInfoDO.getGmtCreate()));
|
appInfoVO.setGmtModifiedStr(CommonUtils.formatTime(appInfoDO.getGmtModified()));
|
|
if (fillDetail) {
|
// 人员面板
|
ComponentUserRoleInfo componentUserRoleInfo = webAuthService.fetchComponentUserRoleInfo(RoleScope.APP, appInfoDO.getId());
|
appInfoVO.setComponentUserRoleInfo(componentUserRoleInfo);
|
|
// 密码
|
boolean hasPermission = webAuthService.hasPermission(RoleScope.APP, appInfoDO.getId(), Permission.READ);
|
String originPassword = appInfoService.fetchOriginAppPassword(appInfoDO);
|
appInfoVO.setPassword(hasPermission ? originPassword : AuthConstants.TIPS_NO_PERMISSION_TO_SEE);
|
|
// namespace
|
Optional<NamespaceDO> namespaceOpt = namespaceWebService.findById(appInfoDO.getNamespaceId());
|
if (namespaceOpt.isPresent()) {
|
NamespaceBaseVO baseNamespace = NamespaceConverter.do2BaseVo(namespaceOpt.get());
|
appInfoVO.setNamespace(baseNamespace);
|
appInfoVO.setNamespaceName(baseNamespace.getName());
|
}
|
|
// user 信息
|
appInfoVO.setCreatorShowName(userWebService.fetchBaseUserInfo(appInfoDO.getCreator()).map(UserBaseVO::getShowName).orElse(null));
|
appInfoVO.setModifierShowName(userWebService.fetchBaseUserInfo(appInfoDO.getModifier()).map(UserBaseVO::getShowName).orElse(null));
|
|
}
|
|
return appInfoVO;
|
}).collect(Collectors.toList());
|
}
|
|
}
|
