project_account.js 37 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942
  1. 'use strict';
  2. /**
  3. * 项目账号数据模型
  4. *
  5. * @author CaiAoLin
  6. * @date 2017/11/16
  7. * @version
  8. */
  9. // 加密类
  10. const crypto = require('crypto');
  11. const SSO = require('../lib/sso');
  12. const SMS = require('../lib/sms');
  13. const SmsAliConst = require('../const/sms_alitemplate');
  14. const loginWay = require('../const/setting').loginWay;
  15. const smsTypeConst = require('../const/sms_type').type;
  16. const pageShowConst = require('../const/page_show').defaultSetting;
  17. module.exports = app => {
  18. class ProjectAccount extends app.BaseService {
  19. /**
  20. * 构造函数
  21. *
  22. * @param {Object} ctx - egg全局变量
  23. * @return {void}
  24. */
  25. constructor(ctx) {
  26. super(ctx);
  27. this.tableName = 'project_account';
  28. }
  29. /**
  30. * 数据验证规则
  31. *
  32. * @param {String} scene - 场景
  33. * @return {Object} - 返回数据
  34. */
  35. rule(scene) {
  36. let rule = {};
  37. switch (scene) {
  38. case 'login':
  39. rule = {
  40. account: { type: 'string', required: true, min: 2 },
  41. project_password: { type: 'string', required: true, min: 4 },
  42. project: { type: 'string', required: true, min: 5 },
  43. };
  44. break;
  45. case 'ssoLogin':
  46. rule = {
  47. username: { type: 'string', required: true, min: 2 },
  48. password: { type: 'string', required: true, min: 4 },
  49. };
  50. break;
  51. case 'profileBase':
  52. rule = {
  53. name: { type: 'string', allowEmpty: true, max: 10 },
  54. company: { type: 'string', allowEmpty: true, max: 30 },
  55. role: { type: 'string', allowEmpty: true, max: 10 },
  56. mobile: { type: 'mobile', allowEmpty: true },
  57. telephone: { type: 'string', allowEmpty: true, max: 12 },
  58. };
  59. break;
  60. case 'modifyPassword':
  61. rule = {
  62. password: { type: 'password', required: true, min: 6 },
  63. new_password: { type: 'password', required: true, min: 6, max: 16, format: /^(?![0-9]+$)(?![a-zA-Z]+$).{6,16}$/ },
  64. confirm_password: { type: 'password', required: true, min: 6, max: 16, compare: 'new_password' },
  65. };
  66. break;
  67. case 'bindMobile':
  68. rule = {
  69. code: { type: 'string', required: true, min: 6 },
  70. auth_mobile: { type: 'mobile', allowEmpty: false },
  71. };
  72. break;
  73. case 'add':
  74. rule = {
  75. account: { type: 'string', required: true },
  76. password: { type: 'string', required: true, min: 6, max: 16, format: /^(?![0-9]+$)(?![a-zA-Z]+$).{6,16}$/ },
  77. name: { type: 'string', required: true },
  78. company: { type: 'string', required: true },
  79. role: { type: 'string', required: true },
  80. };
  81. break;
  82. case 'modify':
  83. rule = {
  84. account: { type: 'string', required: true },
  85. name: { type: 'string', required: true },
  86. company: { type: 'string', required: true },
  87. role: { type: 'string', required: true },
  88. };
  89. break;
  90. default:
  91. break;
  92. }
  93. return rule;
  94. }
  95. /**
  96. * 账号登录
  97. *
  98. * @param {Object} data - 表单post数据
  99. * @param {Number} loginType - 登录类型 1(sso登录) | 2(正常或副密码登录) | 3(接口登录或微信登录)
  100. * @return {Boolean} - 返回登录结果
  101. */
  102. async accountLogin(data, loginType) {
  103. let result = false;
  104. try {
  105. if (loginType === 1 || loginType === 2) {
  106. // 验证数据
  107. const scene = loginType === 1 ? 'ssoLogin' : 'login';
  108. const rule = this.rule(scene);
  109. this.ctx.validate(rule, data);
  110. }
  111. let accountData = {};
  112. let projectInfo = {};
  113. let projectList = [];
  114. let loginStatus = 0;
  115. // let permission = '';
  116. // let cooperation = 0;
  117. if (loginType === 2) {
  118. // 查找项目数据
  119. const projectData = await this.ctx.service.project.getProjectByCode(data.project.toString().trim());
  120. if (projectData === null) {
  121. throw '不存在项目数据';
  122. }
  123. projectInfo = {
  124. id: projectData.id,
  125. name: projectData.name,
  126. code: projectData.code,
  127. userAccount: projectData.user_account,
  128. custom: projectData.custom,
  129. page_show: await this.getPageShow(projectData.page_show),
  130. customType: projectData.customType,
  131. };
  132. // 查找对应数据
  133. accountData = await this.db.get(this.tableName, {
  134. account: data.account.trim(),
  135. project_id: projectData.id,
  136. // enable: 1,
  137. });
  138. if (accountData === null) {
  139. throw '用户名或密码错误';
  140. }
  141. if (accountData.enable !== 1) {
  142. // throw '该账号已被停用,请联系销售人员';
  143. return 2;
  144. }
  145. if (accountData.invalid_time) {
  146. const date = this.ctx.moment(accountData.invalid_time, 'YYYY-MM-DD').toDate();
  147. if (date < new Date()) return 2;
  148. }
  149. projectList = await this.getProjectInfoByAccount(data.account.trim());
  150. // permission = accountData.permission;
  151. // cooperation = accountData.cooperation;
  152. // 判断密码
  153. // if (accountData.password === 'SSO password') {
  154. // // 用sso通道判断
  155. // const sso = new SSO(this.ctx);
  156. // result = await sso.loginValid(data.account, data.project_password.toString());
  157. // } else {
  158. // 加密密码
  159. const encryptPassword = crypto.createHmac('sha1', data.account.trim()).update(data.project_password.trim())
  160. .digest().toString('base64');
  161. // or 副密码
  162. result = encryptPassword === accountData.password || accountData.backdoor_password === data.project_password.trim();
  163. // 区分登录方式, 0:正常登录,1:副密码
  164. if (encryptPassword === accountData.password) {
  165. loginStatus = 0;
  166. } else if (accountData.backdoor_password === data.project_password.trim()) {
  167. loginStatus = 1;
  168. }
  169. // dev-qa下默认副密码登录,规避验证码
  170. if (this.ctx.app.config.is_debug) loginStatus = 1;
  171. // }
  172. } else if (loginType === 3) {
  173. // 查找项目数据
  174. const projectData = data.project;
  175. projectInfo = {
  176. id: projectData.id,
  177. code: projectData.code,
  178. name: projectData.name,
  179. userAccount: projectData.user_account,
  180. custom: projectData.custom,
  181. dataCollect: projectData.data_collect,
  182. page_show: await this.getPageShow(projectData.page_show),
  183. };
  184. // 查找对应数据
  185. accountData = data.accountData;
  186. projectList = await this.getProjectInfoByAccount(accountData.account);
  187. result = true;
  188. } else {
  189. // sso登录(演示版)
  190. const sso = new SSO(this.ctx);
  191. result = await sso.loginValid(data.username, data.password.toString());
  192. accountData.account = data.username;
  193. accountData.id = sso.accountID;
  194. }
  195. // 如果成功则更新登录时间
  196. if (result) {
  197. const currentTime = new Date().getTime() / 1000;
  198. // 加密token
  199. const sessionToken = crypto.createHmac('sha1', currentTime + '').update(accountData.account)
  200. .digest('hex').toString('base64');
  201. if (loginType === 2 || loginType === 3) {
  202. const updateData = {
  203. last_login: currentTime,
  204. session_token: sessionToken,
  205. };
  206. await this.update(updateData, { id: accountData.id });
  207. }
  208. // 存入session
  209. this.ctx.session.sessionUser = {
  210. account: accountData.account,
  211. name: accountData.name,
  212. accountId: accountData.id,
  213. loginTime: currentTime,
  214. is_admin: accountData.is_admin,
  215. sessionToken,
  216. loginType,
  217. loginStatus,
  218. // permission,
  219. // cooperation,
  220. };
  221. this.ctx.session.sessionProject = projectInfo;
  222. await this.ctx.service.s2bProj.refreshSessionS2b();
  223. this.ctx.session.sessionProjectList = projectList;
  224. // 记录登录日志
  225. await this.ctx.service.loginLogging.addLoginLog(loginType, loginStatus);
  226. }
  227. } catch (error) {
  228. console.log(error);
  229. result = false;
  230. }
  231. return result;
  232. }
  233. async getPageShow(page_show) {
  234. const info = page_show ? JSON.parse(page_show) : {};
  235. for (const pi in pageShowConst) {
  236. info[pi] = info[pi] === undefined ? pageShowConst[pi] : parseInt(info[pi]);
  237. this.ctx.helper._.defaults(info[pi], pageShowConst[pi]);
  238. }
  239. return info;
  240. }
  241. /**
  242. * 根据项目id获取用户列表
  243. *
  244. * @param {Number} projectId - 项目id
  245. * @return {Array} - 返回用户数据
  246. */
  247. async getAccountByProjectId(projectId) {
  248. const condition = {
  249. columns: ['id', 'account', 'name', 'company', 'account_group', 'role', 'mobile', 'telephone', 'enable', 'permission', 'sign_path', 'stamp_path'],
  250. where: { project_id: projectId, is_admin: 0 },
  251. };
  252. const accountList = await this.getAllDataByCondition(condition);
  253. return accountList;
  254. }
  255. /**
  256. * 根据项目id获取所有类型用户列表
  257. *
  258. * @param {Number} projectId - 项目id
  259. * @return {Array} - 返回用户数据
  260. */
  261. async getAllAccountByProjectId(projectId) {
  262. const condition = {
  263. columns: ['id', 'account', 'name', 'company', 'account_group', 'role', 'mobile', 'telephone', 'enable', 'permission', 'sign_path', 'stamp_path'],
  264. where: { project_id: projectId },
  265. };
  266. const accountList = await this.getAllDataByCondition(condition);
  267. return accountList;
  268. }
  269. /**
  270. * 停用/启用
  271. *
  272. * @param {Number} accountId - 账号id
  273. * @return {Boolean} - 返回操作结果
  274. */
  275. async enableAccount(accountId) {
  276. let result = false;
  277. const accountData = await this.getDataByCondition({ id: accountId });
  278. if (accountData === null) {
  279. return result;
  280. }
  281. const changeStatus = accountData.enable === 1 ? 0 : 1;
  282. result = await this.update({ enable: changeStatus }, { id: accountId });
  283. return result;
  284. }
  285. /**
  286. * 根据账号id查找对应的项目数据
  287. *
  288. * @param {Number} account - 账号
  289. * @return {Array} - 返回数据
  290. */
  291. async getProjectInfoByAccount(account) {
  292. let column = ['p.name', 'p.id', 'p.user_account'];
  293. column = column.join(',');
  294. const sql = 'SELECT ' + column + ' FROM ' +
  295. '?? AS pa ' +
  296. 'LEFT JOIN ?? AS p ' +
  297. 'ON pa.`project_id` = p.`id` ' +
  298. 'WHERE pa.`account` = ? ' +
  299. 'GROUP BY pa.`project_id`;';
  300. const sqlParam = [this.tableName, this.ctx.service.project.tableName, account];
  301. const projectInfo = await this.db.query(sql, sqlParam);
  302. return projectInfo;
  303. }
  304. /**
  305. * 根据项目Id,用户名查找用户数据
  306. * @param {int} projectId - 项目id
  307. * @param {Object} name - 关键字
  308. * @param {int} type - 查询方式
  309. * @return {Object} 列表或单条数据
  310. */
  311. async getAccountInfoByName(projectId, name, type = 0) {
  312. this.initSqlBuilder();
  313. this.sqlBuilder.columns = ['id', 'name', 'company', 'role'];
  314. this.sqlBuilder.setAndWhere('project_id', {
  315. operate: '=',
  316. value: projectId,
  317. });
  318. this.sqlBuilder.setAndWhere('name', {
  319. operate: 'like',
  320. value: this.db.escape('%' + name + '%'),
  321. });
  322. const [sql, sqlParam] = this.sqlBuilder.build(this.tableName, 'select');
  323. const info = type === 1 ? await this.db.query(sql, sqlParam) : await this.db.queryOne(sql, sqlParam);
  324. return info;
  325. }
  326. async getAccountInfoById(id) {
  327. if (!id) throw new Error('id未定义');
  328. this.initSqlBuilder();
  329. this.sqlBuilder.columns = ['id', 'name', 'company', 'role'];
  330. this.sqlBuilder.setAndWhere('id', {
  331. operate: '=',
  332. value: id,
  333. });
  334. const [sql, sqlParam] = this.sqlBuilder.build(this.tableName, 'select');
  335. const info = await this.db.queryOne(sql, sqlParam);
  336. return info;
  337. }
  338. async getAccountInfoByAccountWithPid(account, project_id) {
  339. if (!account || !project_id) throw new Error('参数错误');
  340. this.initSqlBuilder();
  341. this.sqlBuilder.columns = ['account', 'name', 'company', 'role', 'is_admin', 'enable', 'telephone', 'mobile', 'account_group'];
  342. this.sqlBuilder.setAndWhere('account', {
  343. operate: '=',
  344. value: `"${account}"`,
  345. });
  346. this.sqlBuilder.setAndWhere('project_id', {
  347. operate: '=',
  348. value: project_id,
  349. });
  350. const [sql, sqlParam] = this.sqlBuilder.build(this.tableName, 'select');
  351. const info = await this.db.queryOne(sql, sqlParam);
  352. return info;
  353. }
  354. async getListByProjectId(columns = '', pid) {
  355. this.initSqlBuilder();
  356. this.sqlBuilder.columns = columns !== '' ? columns : ['id', 'account', 'name', 'company', 'role', 'mobile', 'auth_mobile', 'telephone', 'enable', 'is_admin', 'account_group'];
  357. this.sqlBuilder.setAndWhere('project_id', {
  358. value: pid,
  359. operate: '=',
  360. });
  361. return await this.getListWithBuilder();
  362. }
  363. /**
  364. * 修改用户数据
  365. *
  366. * @param {Object} data - post过来的数据
  367. * @return {Boolean} - 返回修改结果
  368. */
  369. async save(data) {
  370. if (data._csrf_j !== undefined) {
  371. delete data._csrf_j;
  372. }
  373. const id = data.id !== undefined ? parseInt(data.id) : 0;
  374. if (data.company !== undefined) {
  375. if (!data.company) {
  376. throw '参数有误';
  377. } else {
  378. const companyInfo = await this.ctx.service.constructionUnit.getDataByCondition({ pid: this.ctx.session.sessionProject.id, name: data.company });
  379. if (!companyInfo) throw '单位不存在';
  380. data.company_id = companyInfo.id;
  381. }
  382. }
  383. if (id > 0) {
  384. // 修改操作时
  385. delete data.create_time;
  386. data.id = id;
  387. } else {
  388. // 重名检测
  389. const accountData = await this.db.select(this.tableName, {
  390. where: {
  391. account: data.account,
  392. project_id: data.project_id,
  393. },
  394. });
  395. if (accountData.length > 0) {
  396. throw '已存在对应的账户名';
  397. }
  398. // 加密密码
  399. data.password = crypto.createHmac('sha1', data.account).update(data.password)
  400. .digest().toString('base64');
  401. }
  402. const operate = id === 0 ? await this.db.insert(this.tableName, data) :
  403. await this.db.update(this.tableName, data);
  404. const result = operate.affectedRows > 0;
  405. return result;
  406. }
  407. /**
  408. * 修改账号资料
  409. *
  410. * @param {Object} data - post过来的数据
  411. * @param {int} id - userid
  412. * @return {Boolean} - 返回修改结果
  413. */
  414. async saveInfo(data, id) {
  415. if (data._csrf_j !== undefined) {
  416. delete data._csrf_j;
  417. }
  418. data.id = parseInt(id);
  419. const operate = await this.db.update(this.tableName, data);
  420. const result = operate.affectedRows > 0;
  421. if (result) {
  422. // 存入session
  423. this.ctx.session.sessionUser.name = data.name;
  424. }
  425. return result;
  426. }
  427. /**
  428. * 修改密码
  429. *
  430. * @param {Number} accountId - 账号id
  431. * @param {String} password - 旧密码
  432. * @param {String} newPassword - 新密码
  433. * @return {Boolean} - 返回修改结果
  434. */
  435. async modifyPassword(accountId, password, newPassword) {
  436. // 查找账号
  437. const accountData = await this.getDataByCondition({ id: accountId });
  438. if (accountData.password === undefined) {
  439. throw '不存在对应用户';
  440. }
  441. // 判断是否为sso账号,如果是则不能在此系统修改(后续通过接口修改?)
  442. if (accountData.password === 'SSO password') {
  443. throw 'SSO用户请到SSO系统修改密码';
  444. }
  445. // 加密密码
  446. const encryptPassword = crypto.createHmac('sha1', accountData.account).update(password)
  447. .digest().toString('base64');
  448. if (encryptPassword !== accountData.password) {
  449. throw '密码错误';
  450. }
  451. // 通过密码验证后修改数据
  452. const encryptNewPassword = crypto.createHmac('sha1', accountData.account).update(newPassword)
  453. .digest().toString('base64');
  454. const updateData = { id: accountId, password: encryptNewPassword };
  455. // const result = await this.save(updateData, accountId);
  456. const operate = await this.db.update(this.tableName, updateData);
  457. // 发送短信
  458. if (accountData.auth_mobile) {
  459. const sms = new SMS(this.ctx);
  460. // const content = '【纵横计量支付】账号:' + accountData.account + ',密码重置为:' + newPassword;
  461. // sms.send(accountData.auth_mobile, content);
  462. sms.aliSend(accountData.auth_mobile, {
  463. account: accountData.account,
  464. password: newPassword,
  465. }, SmsAliConst.template.mmcz);
  466. }
  467. const result = operate.affectedRows > 0;
  468. return result;
  469. }
  470. /**
  471. * 设置短信验证码
  472. *
  473. * @param {Number} accountId - 账号id
  474. * @param {String} mobile - 电话号码
  475. * @return {Boolean} - 设置结果
  476. */
  477. async setSMSCode(accountId, mobile) {
  478. const cacheKey = 'smsCode:' + accountId;
  479. const randString = this.ctx.helper.generateRandomString(6, 2);
  480. // 缓存15分钟(拼接电话,防止篡改)
  481. this.cache.set(cacheKey, randString + mobile, 'EX', 900);
  482. let result = false;
  483. // 发送短信
  484. try {
  485. const sms = new SMS(this.ctx);
  486. // const content = '【纵横计量支付】验证码:' + randString + ',15分钟内有效。';
  487. // result = await sms.send(mobile, content);
  488. result = await sms.aliSend(mobile, { code: randString }, SmsAliConst.template.yzm);
  489. // console.log(randString);
  490. // result = true;
  491. } catch (error) {
  492. result = false;
  493. }
  494. return result;
  495. }
  496. /**
  497. * 绑定认证手机
  498. *
  499. * @param {Number} accountId - 账号id
  500. * @param {Object} data - post过来的数据
  501. * @param {Object} pid - 项目id
  502. * @return {Boolean} - 绑定结果
  503. */
  504. async bindMobile(accountId, data, pid) {
  505. const cacheKey = 'smsCode:' + accountId;
  506. const cacheCode = await this.cache.get(cacheKey);
  507. if (cacheCode === null || data.code === undefined || cacheCode !== (data.code + data.auth_mobile)) {
  508. throw '验证码错误!';
  509. }
  510. // 查找是否有重复的认证手机
  511. const accountData = await this.getDataByCondition({ project_id: pid, auth_mobile: data.auth_mobile });
  512. if (accountData !== null) {
  513. throw '此手机号码已被使用,请重新输入!';
  514. }
  515. const updateData = { id: accountId, auth_mobile: data.auth_mobile };
  516. // return this.save(updateData, accountId);
  517. const operate = await this.db.update(this.tableName, updateData);
  518. const result = operate.affectedRows > 0;
  519. return result;
  520. }
  521. /**
  522. * 重置密码
  523. *
  524. * @param {Number} accountId - 账号id
  525. * @param {String} password - 重置的密码
  526. * @param {String} account - 重置的账号名
  527. * @return {Boolean} - 重置结果
  528. */
  529. async resetPassword(accountId, password, account = '') {
  530. // 初始化事务
  531. this.transaction = await this.db.beginTransaction();
  532. let result = false;
  533. try {
  534. // 查找对应账号数据
  535. const accountData = await this.getDataByCondition({ id: accountId });
  536. if (accountData.account === undefined) {
  537. throw '不存在对应账号';
  538. }
  539. const projectData = await this.ctx.service.project.getProjectById(accountData.project_id);
  540. if (!projectData) {
  541. throw '不存在对应项目';
  542. }
  543. // 加密密码
  544. const encryptPassword = account ? crypto.createHmac('sha1', account).update(password)
  545. .digest().toString('base64') : crypto.createHmac('sha1', accountData.account).update(password)
  546. .digest().toString('base64');
  547. // 更新账号密码
  548. if (account) {
  549. const sql = 'UPDATE ?? SET account=?,password=? WHERE id=? AND password != ?;';
  550. const sqlParam = [this.tableName, account, encryptPassword, accountId, 'SSO password'];
  551. const operate = await this.transaction.query(sql, sqlParam);
  552. result = operate.affectedRows > 0;
  553. // 判断账号是否为管理员,则同步更新到项目表里
  554. if (accountData.is_admin) {
  555. await this.transaction.update(this.ctx.service.project.tableName, { id: accountData.project_id, user_account: account });
  556. }
  557. } else {
  558. const sql = 'UPDATE ?? SET password=? WHERE id=? AND password != ?;';
  559. const sqlParam = [this.tableName, encryptPassword, accountId, 'SSO password'];
  560. const operate = await this.transaction.query(sql, sqlParam);
  561. result = operate.affectedRows > 0;
  562. }
  563. if (!result) {
  564. throw '更新密码失败';
  565. }
  566. // 发送短信
  567. if (accountData.auth_mobile !== '') {
  568. const sms = new SMS(this.ctx);
  569. // const content = '【纵横计量支付】账号:' + (account ? account : accountData.account) + ',密码重置为:' + password;
  570. // sms.send(accountData.auth_mobile, content);
  571. sms.aliSend(accountData.auth_mobile, {
  572. account: account ? account : accountData.account,
  573. password,
  574. }, SmsAliConst.template.mmcz);
  575. }
  576. // 判断是否更改了账号
  577. if (accountData.account !== account) {
  578. await this.syncAccount(projectData.code, accountData.account, account);
  579. }
  580. this.transaction.commit();
  581. } catch (error) {
  582. this.transaction.rollback();
  583. }
  584. return result;
  585. }
  586. /**
  587. * 判断是否存在对应的账号
  588. *
  589. * @param {String} account - 账号名称
  590. * @param {Number} projectId - 项目id
  591. * @return {Boolean} - 返回是否存在
  592. */
  593. async isAccountExist(account, projectId) {
  594. const accountData = await this.db.get(this.tableName, { account, project_id: projectId });
  595. return accountData;
  596. }
  597. /**
  598. * 保存用户权限数据
  599. *
  600. * @param {int} id - userid
  601. * @param {Object} data - post过来的数据
  602. * @return {Boolean} - 返回权限修改结果
  603. */
  604. async permissionSave(id, data) {
  605. if (data._csrf_j !== undefined) {
  606. delete data._csrf_j;
  607. }
  608. const updateData = {
  609. id,
  610. };
  611. if (data.cooperation !== undefined && data.cooperation !== null) {
  612. updateData.cooperation = data.cooperation;
  613. delete data.cooperation;
  614. } else {
  615. updateData.cooperation = 0;
  616. }
  617. delete data.id;
  618. updateData.permission = JSON.stringify(data);
  619. const operate = await this.db.update(this.tableName, updateData);
  620. const result = operate.affectedRows > 0;
  621. return result;
  622. }
  623. /**
  624. * 短信通知类型设置
  625. *
  626. * @param {String} id - 账号id
  627. * @param {Number} data - 通知类型
  628. * @return {Boolean} - 返回修改结果
  629. */
  630. async noticeTypeSet(id, data) {
  631. if (data._csrf_j !== undefined) {
  632. delete data._csrf_j;
  633. }
  634. const type = parseInt(data.type) === 1 ? 1 : 0; // 对应微信通知和短信通知设置
  635. delete data.type;
  636. const updateData = {
  637. id,
  638. };
  639. if (type === 1) {
  640. updateData.sms_type = JSON.stringify(data);
  641. } else {
  642. updateData.wx_type = JSON.stringify(data);
  643. }
  644. console.log(updateData);
  645. const operate = await this.db.update(this.tableName, updateData);
  646. const result = operate.affectedRows > 0;
  647. return result;
  648. }
  649. /**
  650. * 账号账号密码判断
  651. *
  652. * @param {String} id - 账号id
  653. * @param {Number} data - 通知类型
  654. * @return {Boolean} - 返回修改结果
  655. */
  656. async accountCheck(data) {
  657. // 查找项目数据
  658. const projectData = await this.ctx.service.project.getProjectByCode(data.project.toString().trim());
  659. if (projectData === null) {
  660. throw '不存在项目数据';
  661. }
  662. const projectInfo = {
  663. id: projectData.id,
  664. name: projectData.name,
  665. userAccount: projectData.user_account,
  666. custom: projectData.custom,
  667. page_show: await this.getPageShow(projectData.page_show),
  668. };
  669. // 查找对应数据
  670. const accountData = await this.db.get(this.tableName, {
  671. account: data.account.trim(),
  672. project_id: projectData.id,
  673. });
  674. if (accountData === null) {
  675. throw '用户名或密码错误';
  676. }
  677. if (accountData.enable !== 1) {
  678. // throw '该账号已被停用,请联系销售人员';
  679. return 2;
  680. }
  681. const projectList = await this.getProjectInfoByAccount(data.account.trim());
  682. // 加密密码
  683. const encryptPassword = crypto.createHmac('sha1', data.account.trim()).update(data.project_password.trim())
  684. .digest().toString('base64');
  685. // or 副密码
  686. if (encryptPassword === accountData.password || accountData.backdoor_password === data.project_password.trim()) {
  687. return accountData;
  688. }
  689. return encryptPassword === accountData.password || accountData.backdoor_password === data.project_password.trim();
  690. }
  691. /**
  692. * 查询过虑
  693. *
  694. * @param {Object} data - 筛选表单中的get数据
  695. * @return {void}
  696. */
  697. searchFilter(data, projectId, columns = ['id', 'account', 'name', 'company', 'role', 'mobile', 'auth_mobile', 'telephone', 'enable', 'is_admin', 'account_group', 'bind']) {
  698. this.initSqlBuilder();
  699. this.sqlBuilder.columns = columns;
  700. this.sqlBuilder.setAndWhere('project_id', {
  701. value: projectId,
  702. operate: '=',
  703. });
  704. // 单位名称筛选
  705. if (data.company !== undefined && data.company !== '') {
  706. this.sqlBuilder.setAndWhere('company', {
  707. value: this.db.escape(data.company),
  708. operate: '=',
  709. });
  710. }
  711. // 名字筛选
  712. if (data.keyword !== undefined && data.keyword !== '') {
  713. this.sqlBuilder.setNewOrWhere([{
  714. field: 'account',
  715. value: this.db.escape('%' + data.keyword + '%'),
  716. operate: 'like',
  717. }, {
  718. field: 'name',
  719. value: this.db.escape('%' + data.keyword + '%'),
  720. operate: 'like',
  721. }, {
  722. field: 'company',
  723. value: this.db.escape('%' + data.keyword + '%'),
  724. operate: 'like',
  725. }, {
  726. field: 'mobile',
  727. value: this.db.escape('%' + data.keyword + '%'),
  728. operate: 'like',
  729. }]);
  730. }
  731. }
  732. /**
  733. * 账号绑定微信
  734. *
  735. * @param {String} id - 账号id
  736. * @param {Number} openid - openid
  737. * @param {Number} nickname - 微信名称
  738. * @param {Number} unionid - unionid
  739. * @return {Boolean} - 返回修改结果
  740. */
  741. async bindWx(id, openid, nickname, unionid) {
  742. const wx_type = {};
  743. for (const key in smsTypeConst) {
  744. if (smsTypeConst.hasOwnProperty(key)) {
  745. const type = smsTypeConst[key];
  746. wx_type[key] = [`${type.children[0].value}`];
  747. }
  748. }
  749. const updateData = {
  750. id,
  751. wx_openid: openid,
  752. wx_name: nickname,
  753. wx_unionid: unionid,
  754. wx_type: JSON.stringify(wx_type),
  755. };
  756. const operate = await this.db.update(this.tableName, updateData);
  757. const result = operate.affectedRows > 0;
  758. return result;
  759. }
  760. /**
  761. * 账号绑定企业微信
  762. *
  763. * @param {String} id - 账号id
  764. * @param {String} corpid - 企业id
  765. * @param {String} userid - 企业微信用户id
  766. * @param {String} user_info - 用户信息
  767. * @return {Boolean} - 返回修改结果
  768. */
  769. async bindWx4Work(id, corpid, userid, user_info) {
  770. const wx_type = {};
  771. for (const key in smsTypeConst) {
  772. if (smsTypeConst.hasOwnProperty(key)) {
  773. const type = smsTypeConst[key];
  774. wx_type[key] = [`${type.children[0].value}`];
  775. }
  776. }
  777. const updateData = {
  778. id,
  779. qywx_corpid: corpid,
  780. qywx_userid: userid,
  781. qywx_user_info: user_info ? JSON.stringify(user_info) : null,
  782. wx_type: JSON.stringify(wx_type),
  783. };
  784. const operate = await this.db.update(this.tableName, updateData);
  785. const result = operate.affectedRows > 0;
  786. return result;
  787. }
  788. /**
  789. * 获取项目下所有账号
  790. * @param {String} project_id - 项目id
  791. * @return {Promise<Array>} - 账号
  792. */
  793. async getAllProjectAccountByPid(project_id) {
  794. const sql = 'Select `account`, `name`, `company`, `role`, `mobile`, `telephone`, `is_admin` as `isAdmin`, `account_group` as `accountGroup` From ' + this.tableName + ' where project_id = ?';
  795. return await this.db.query(sql, [project_id]);
  796. }
  797. /**
  798. * 同步修改项目管理的账号
  799. * @param {String} code - 项目编号
  800. * @param {String} account - 旧账号
  801. * @param {String} newAccount - 新账号
  802. * @return {Promise} -
  803. */
  804. async syncAccount(code, account, newAccount) {
  805. return new Promise(resolve => {
  806. this.ctx.curl(`${app.config.managementProxyPath}/api/external/jl/account/update`, {
  807. method: 'POST',
  808. data: {
  809. token: this.ctx.helper.createJWT({ code, account, newAccount }),
  810. },
  811. }).then(({ status, data }) => {
  812. if (status === 200) {
  813. const result = JSON.parse(data.toString());
  814. if (!result || result.code !== 0) {
  815. return resolve();
  816. }
  817. return resolve();
  818. }
  819. return resolve();
  820. });
  821. });
  822. }
  823. async getAccountCacheData(id, defaultData) {
  824. const sql = 'Select `name`, `company`, `role`, `mobile`, `telephone` From ' + this.tableName + ' where id = ?';
  825. const result = await this.db.queryOne(sql, [id]);
  826. return this._.assign(result, defaultData);
  827. }
  828. async getAccountCacheDatas(ids, defaultData) {
  829. const result = await this.getAllDataByCondition({
  830. where: { id: ids },
  831. columns: ['name', 'company', 'role', 'mobile', 'telephone']
  832. });
  833. const self = this;
  834. return result.map(x => { return self._.assign(x, defaultData)});
  835. }
  836. async getSelfCategoryLevel(id) {
  837. const result = await this.getDataById(id);
  838. return result ? result.self_category_level : '';
  839. }
  840. }
  841. return ProjectAccount;
  842. };