manager_model.js 7.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275
  1. /**
  2. * 后台管理员数据模型
  3. *
  4. * @author CaiAoLin
  5. * @date 2017/6/1
  6. * @version
  7. */
  8. import BaseModel from "../../common/base/base_model";
  9. import ManagerSchema from "./schemas/manager";
  10. import crypto from "crypto";
  11. import Request from "request";
  12. class ManagerModel extends BaseModel {
  13. /**
  14. * 超级用户用户名
  15. *
  16. * @var {String}
  17. */
  18. adminUsername = 'admin';
  19. /**
  20. * 用户权限
  21. *
  22. * @var
  23. */
  24. permission = {
  25. 'manager': '用户管理',
  26. 'notify': '通知管理',
  27. 'stdBillsmain': '清单规则编辑器',
  28. 'rationRepository': '定额编辑器',
  29. 'report': '报表模板',
  30. };
  31. /**
  32. * 构造函数
  33. *
  34. * @return {void}
  35. */
  36. constructor() {
  37. let parent = super();
  38. parent.model = ManagerSchema;
  39. parent.init();
  40. }
  41. /**
  42. * 设置场景
  43. *
  44. * @param {string} scene
  45. * @return {void}
  46. */
  47. setScene(scene = '') {
  48. switch (scene) {
  49. // 更改密码验证规则
  50. case 'changePassword':
  51. this.model.schema.path('password').required(true);
  52. break;
  53. // CLD新增
  54. case 'cldInsert':
  55. this.model.schema.path('username').required(true);
  56. this.model.schema.path('create_time').required(true);
  57. this.model.schema.path('office').required(true);
  58. break;
  59. }
  60. }
  61. /**
  62. * 获取列表
  63. *
  64. * @param {object} condition
  65. * @param {number} page
  66. * @return {Promise}
  67. */
  68. getList(condition = null, page = 1) {
  69. page = parseInt(page);
  70. page = page <= 1 ? 1 : page;
  71. let option = {page: page};
  72. return this.db.find(condition, null, option);
  73. }
  74. /**
  75. * 用户密码加密
  76. *
  77. * @param {string} token
  78. * @param {string} password
  79. * @return {string}
  80. */
  81. encryptPassword(token, password) {
  82. let encryptPassword = crypto.createHmac('sha1', token).update(password)
  83. .digest().toString('base64');
  84. return encryptPassword;
  85. }
  86. /**
  87. * 更改密码
  88. *
  89. * @param {string} username
  90. * @param {string} password
  91. * @param {string} newPassword
  92. * @throws {string}
  93. * @return {Promise}
  94. */
  95. async changePassword(username, password, newPassword) {
  96. // 查找对应用户
  97. let managerData = await this.findDataByCondition({username: username});
  98. if (managerData.length <= 0) {
  99. return false;
  100. }
  101. // 验证旧密码
  102. let encryptPassword = this.encryptPassword(managerData.token, password);
  103. if (encryptPassword !== managerData.password) {
  104. throw '用户名或密码错误';
  105. }
  106. // 加密新密码
  107. let encryptNewPassword = this.encryptPassword(managerData.token, newPassword);
  108. let result = await this.db.update({username: username}, {password: encryptNewPassword});
  109. return result.ok === 1;
  110. }
  111. /**
  112. * 登录信息校验
  113. *
  114. * @param {String} username
  115. * @param {String} password
  116. * @return {Promise}
  117. */
  118. async validLogin(username, password) {
  119. let managerData = await this.findDataByCondition({username: username});
  120. // 没有找到对应数据
  121. if (managerData === null || managerData._id === undefined) {
  122. throw {code: 44001, err: '用户名或密码错误'};
  123. }
  124. // 是否禁止登录
  125. if (managerData.can_login !== 1) {
  126. throw {code: 44002, err: '用户名不存在'};
  127. }
  128. // 如果不是超级管理员登录则走CLD接口登录流程
  129. if (username !== this.adminUsername) {
  130. let CLDLoginInfo = await this.CLDLogin(username, password, managerData);
  131. managerData = CLDLoginInfo;
  132. } else {
  133. // 加密密码
  134. let encryptPassword = this.encryptPassword(managerData.token, password);
  135. if (encryptPassword !== managerData.password) {
  136. throw {code: 44001, err: '用户名或密码错误'};
  137. }
  138. }
  139. return managerData;
  140. }
  141. /**
  142. * CLD登录
  143. *
  144. * @param {String} username
  145. * @param {String} password
  146. * @param {Object} managerData
  147. * @return {Promise}
  148. */
  149. async CLDLogin(username, password, managerData) {
  150. let result = managerData;
  151. if (username === '' || password === '') {
  152. throw {code: 44001, err: '用户名或密码错误'};
  153. }
  154. let CLDUrl = 'http://cld.smartcost.com.cn/api/auth';
  155. // 生成加密token
  156. let [encryptToken, postTime] = this.generateCLDToken();
  157. let postData = {
  158. username: username,
  159. password: password,
  160. time: postTime,
  161. token: encryptToken,
  162. app: 'scConstruct'
  163. };
  164. let postOption = {
  165. url: CLDUrl,
  166. form: postData,
  167. encoding: 'utf8'
  168. };
  169. let responseData = await this.CLDRequest(postOption);
  170. // 登录成功后,存在此用户则直接返回
  171. if (managerData) {
  172. return result;
  173. }
  174. // 不存在则新增
  175. this.setScene('cldInsert');
  176. let current = new Date().getTime();
  177. let insertData = {
  178. username: username,
  179. password: '',
  180. token: '',
  181. create_time: current,
  182. last_login: current,
  183. office: responseData.office,
  184. can_login: 0
  185. };
  186. result = this.db.create(insertData);
  187. return result;
  188. }
  189. /**
  190. * CLD请求
  191. *
  192. * @param {Object} postOption
  193. * @return {Promise}
  194. */
  195. CLDRequest(postOption) {
  196. return new Promise(function(resolve, reject) {
  197. // 发起请求
  198. Request.post(postOption, function(error, response, body) {
  199. if (error || response.statusCode !== 200) {
  200. console.log(response.statusCode + ':' + error);
  201. reject({code: 44002, err: '接口请求出错'});
  202. return;
  203. }
  204. body = JSON.parse(body);
  205. // 如果接口返回错误
  206. if (body.err !== 0) {
  207. reject({code: body.err, err: '接口返回错误'});
  208. return;
  209. }
  210. resolve(body.data);
  211. });
  212. });
  213. }
  214. /**
  215. * 生成CLD Token
  216. *
  217. * @return {Array}
  218. */
  219. generateCLDToken() {
  220. // 加密内容
  221. let token = 'sc@ConS!tru@ct*88';
  222. let currentTime = new Date().getTime();
  223. currentTime = parseFloat(currentTime / 1000).toFixed(0);
  224. let encryptToken = this.encryptPassword(token, (token + currentTime));
  225. return [encryptToken, currentTime];
  226. }
  227. /**
  228. * 新增管理员
  229. *
  230. * @param {Object} data
  231. * @return {Promise}
  232. */
  233. async createManager(data) {
  234. if (Object.keys(data).length <= 0) {
  235. throw '数据格式错误';
  236. }
  237. let result = await this.db.create(data);
  238. return result;
  239. }
  240. }
  241. export default ManagerModel;