update

api/role/auth.go

@@ -0,0 +1,22 @@
+package role
+
+import (
+	"OneAuth/cfg"
+	"OneAuth/libs/base"
+	"OneAuth/models"
+	"github.com/veypi/OneBD"
+	"github.com/veypi/OneBD/core"
+)
+
+var authP = OneBD.NewHandlerPool(func() core.Handler {
+	return &authHandler{}
+})
+
+type authHandler struct {
+	base.ApiHandler
+}
+
+func (h *authHandler) Get() (interface{}, error) {
+	l := make([]*models.Auth, 0, 10)
+	return &l, cfg.DB().Find(&l).Error
+}

api/role/role.go

@@ -0,0 +1,138 @@
+package role
+
+import (
+	"OneAuth/cfg"
+	"OneAuth/libs/base"
+	"OneAuth/libs/oerr"
+	"OneAuth/models"
+	"errors"
+	"github.com/veypi/OneBD"
+	"gorm.io/gorm"
+)
+
+var roleP = OneBD.NewHandlerPool(func() OneBD.Handler {
+	return &roleHandler{}
+})
+
+type roleHandler struct {
+	base.ApiHandler
+}
+
+func (h *roleHandler) Get() (interface{}, error) {
+	id := h.Meta().ParamsInt("id")
+	aid := h.Meta().ParamsInt("aid")
+	act := h.Meta().Params("action")
+	if id > 0 {
+		role := &models.Role{}
+		role.ID = uint(id)
+		err := cfg.DB().Preload("Auths").Preload("Users").First(role).Error
+		if err != nil {
+			return nil, err
+		}
+		if aid <= 0 {
+			return role, nil
+		}
+		if !h.CheckAuth("admin", "").CanDoAny() {
+			return nil, oerr.NoAuth
+		}
+		at := &models.RoleAuth{}
+		at.RoleID = role.ID
+		at.AuthID = uint(aid)
+		defer models.SyncGlobalRoles()
+		if act == "bind" {
+			err = cfg.DB().Where(at).FirstOrCreate(at).Error
+		} else if act == "unbind" {
+			err = cfg.DB().Where(at).Delete(at).Error
+		}
+		return role, nil
+	}
+	roles := make([]*models.Role, 0, 10)
+	err := cfg.DB().Preload("Auths").Preload("Users").Find(&roles).Error
+	return roles, err
+}
+
+func (h *roleHandler) Post() (interface{}, error) {
+	if !h.CheckAuth("role", "").CanCreate() {
+		return nil, oerr.NoAuth
+	}
+	role := &models.Role{}
+	err := h.Meta().ReadJson(role)
+	if err != nil {
+		return nil, err
+	}
+	role.ID = 0
+	if role.Category == 0 || role.Name == "" {
+		return nil, oerr.ApiArgsMissing
+	}
+	defer models.SyncGlobalRoles()
+	return role, cfg.DB().Where(role).FirstOrCreate(role).Error
+}
+
+func (h *roleHandler) Patch() (interface{}, error) {
+	if !h.CheckAuth("role", "").CanUpdate() {
+		return nil, oerr.NoAuth
+	}
+	query := &struct {
+		Name *string `json:"name"`
+		// 角色标签
+		Tag      *string `json:"tag" gorm:"default:''"`
+		IsUnique *bool   `json:"is_unique" gorm:"default:false"`
+	}{}
+	err := h.Meta().ReadJson(query)
+	if err != nil {
+		return nil, err
+	}
+	rid := h.Meta().ParamsInt("id")
+	if rid <= 0 {
+		return nil, oerr.ApiArgsError
+	}
+	role := &models.Role{}
+	role.ID = uint(rid)
+	err = cfg.DB().Preload("Users").Where(role).First(role).Error
+	if err != nil {
+		return nil, err
+	}
+	return nil, cfg.DB().Transaction(func(tx *gorm.DB) error {
+		var err error
+		if query.Tag != nil && *query.Tag != role.Tag {
+			err = tx.Model(role).Update("tag", *query.Tag).Error
+			if err != nil {
+				return err
+			}
+		}
+		if query.Name != nil && *query.Name != role.Name {
+			err = tx.Model(role).Update("name", *query.Name).Error
+			if err != nil {
+				return err
+			}
+		}
+		if query.IsUnique != nil && *query.IsUnique != role.IsUnique {
+			if *query.IsUnique && len(role.Users) > 1 {
+				return errors.New("该角色绑定用户已超过1个，请解绑后在修改")
+			}
+			err = tx.Table("roles").Where("id = ?", role.ID).Update("is_unique", *query.IsUnique).Error
+			if err != nil {
+				return err
+			}
+		}
+		return err
+	})
+}
+
+func (h *roleHandler) Delete() (interface{}, error) {
+	if !h.CheckAuth("role").CanDelete() {
+		return nil, oerr.NoAuth
+	}
+	rid := h.Meta().ParamsInt("id")
+	if rid <= 2 {
+		return nil, oerr.NoAuth
+	}
+	role := &models.Role{}
+	role.ID = uint(rid)
+	err := cfg.DB().Where(role).First(role).Error
+	if err != nil {
+		return nil, err
+	}
+	defer models.SyncGlobalRoles()
+	return nil, cfg.DB().Delete(role).Error
+}

api/role/router.go

@@ -0,0 +1,13 @@
+package role
+
+import (
+	"github.com/veypi/OneBD"
+	"github.com/veypi/OneBD/rfc"
+)
+
+func Router(r OneBD.Router) {
+	r.Set("/role/", roleP, rfc.MethodGet, rfc.MethodPost)
+	r.Set("/role/:id", roleP, rfc.MethodGet, rfc.MethodDelete, rfc.MethodPatch)
+	r.Set("/role/:id/:action/:aid", roleP, rfc.MethodGet)
+	r.Set("/auth/", authP, rfc.MethodGet)
+}