249 lines
7.8 KiB
Python
249 lines
7.8 KiB
Python
# 用户管理路由
|
||
from typing import Optional
|
||
from fastapi import APIRouter, Depends, HTTPException, status, Query, Body
|
||
from sqlalchemy.orm import Session
|
||
from app.core.database import get_db
|
||
from app.core.auth import get_current_user
|
||
from app.models.models import User, Collection
|
||
from app.schemas.schemas import UserResponse, UserUpdate
|
||
|
||
router = APIRouter(prefix="/api", tags=["用户"])
|
||
|
||
# ============ 当前用户接口 ============
|
||
|
||
@router.get("/users/me", response_model=UserResponse)
|
||
def get_current_user_info(
|
||
current_user: User = Depends(get_current_user)
|
||
):
|
||
"""获取当前登录用户信息"""
|
||
return {
|
||
"f99_90_id": current_user.f99_90_id,
|
||
"f01_01_name": current_user.f01_01_name,
|
||
"email": current_user.email,
|
||
"phone": current_user.phone,
|
||
"avatar": current_user.avatar,
|
||
"address": current_user.address,
|
||
"bio": current_user.bio,
|
||
"role": current_user.role,
|
||
"f99_92_created_at": current_user.f99_92_created_at.isoformat() if current_user.f99_92_created_at else None,
|
||
"f99_93_updated_at": current_user.f99_93_updated_at.isoformat() if current_user.f99_93_updated_at else None
|
||
}
|
||
|
||
@router.put("/users/me", response_model=UserResponse)
|
||
def update_current_user(
|
||
user_update: UserUpdate,
|
||
current_user: User = Depends(get_current_user),
|
||
db: Session = Depends(get_db)
|
||
):
|
||
"""更新当前用户信息"""
|
||
import logging
|
||
logger = logging.getLogger(__name__)
|
||
|
||
# 获取用户ID
|
||
user_id = current_user.f99_90_id
|
||
logger.info(f"Updating user {user_id}, data={user_update.model_dump()}")
|
||
|
||
# 在当前session中重新查询用户
|
||
user = db.query(User).filter(User.f99_90_id == user_id).first()
|
||
if not user:
|
||
raise HTTPException(status_code=404, detail="用户不存在")
|
||
|
||
# 处理手机号更换验证码
|
||
new_phone = user_update.phone
|
||
verify_code = user_update.verifyCode
|
||
|
||
if new_phone and new_phone != user.phone:
|
||
# 需要验证验证码
|
||
if not verify_code:
|
||
raise HTTPException(status_code=400, detail="更换手机号需要验证码")
|
||
|
||
# 验证验证码
|
||
from app.services.sms import verify_code as sms_verify
|
||
import os
|
||
if os.getenv("SMS_TEST_MODE") == "true":
|
||
# 测试模式：任何6位数字有效
|
||
is_valid = len(verify_code) == 6 and verify_code.isdigit()
|
||
else:
|
||
is_valid = sms_verify(new_phone, verify_code)
|
||
|
||
if not is_valid:
|
||
raise HTTPException(status_code=400, detail="验证码错误或已过期")
|
||
|
||
# 更新字段
|
||
update_data = user_update.model_dump(exclude_unset=True)
|
||
for field, value in update_data.items():
|
||
if field == 'f01_01_name':
|
||
user.f01_01_name = value
|
||
elif field == 'username':
|
||
pass # skip, already handled as f01_01_name
|
||
elif field == 'verifyCode':
|
||
pass # skip,验证码不存储
|
||
elif hasattr(user, field):
|
||
setattr(user, field, value)
|
||
|
||
# 强制刷新以确保更新被提交
|
||
db.flush()
|
||
db.commit()
|
||
db.refresh(user)
|
||
logger.info(f"After commit, user email={user.email}, phone={user.phone}")
|
||
|
||
return user
|
||
|
||
# ============ 管理员用户管理 ============
|
||
|
||
admin_router = APIRouter(prefix="/api/admin/users", tags=["用户管理"])
|
||
|
||
|
||
@admin_router.get("")
|
||
def get_users(
|
||
page: int = Query(1, ge=1),
|
||
limit: int = Query(20, ge=1, le=100),
|
||
current_user: User = Depends(get_current_user),
|
||
db: Session = Depends(get_db)
|
||
):
|
||
"""获取用户列表（仅管理员）"""
|
||
if current_user.role != "admin":
|
||
raise HTTPException(status_code=403, detail="无权访问")
|
||
|
||
total = db.query(User).count()
|
||
users = db.query(User).offset((page-1)*limit).limit(limit).all()
|
||
|
||
user_list = []
|
||
for u in users:
|
||
# 统计每个用户的藏品数量
|
||
count = db.query(Collection).filter(Collection.f99_91_user_id == u.f99_90_id).count()
|
||
user_list.append({
|
||
"id": u.f99_90_id,
|
||
"username": u.f01_01_name,
|
||
"email": u.email,
|
||
"phone": u.phone,
|
||
"role": u.role,
|
||
"created_at": u.f99_92_created_at.isoformat() if u.f99_92_created_at else None,
|
||
"collection_count": count
|
||
})
|
||
|
||
return user_list
|
||
|
||
|
||
@admin_router.get("/{user_id}")
|
||
def get_user(
|
||
user_id: str,
|
||
current_user: User = Depends(get_current_user),
|
||
db: Session = Depends(get_db)
|
||
):
|
||
"""获取单个用户信息"""
|
||
if current_user.role != "admin":
|
||
raise HTTPException(status_code=403, detail="无权访问")
|
||
|
||
user = db.query(User).filter(User.id == user_id).first()
|
||
if not user:
|
||
raise HTTPException(status_code=404, detail="用户不存在")
|
||
|
||
return {
|
||
"id": user.id,
|
||
"username": user.username,
|
||
"email": user.email,
|
||
"phone": user.phone,
|
||
"role": user.role,
|
||
"created_at": user.created_at.isoformat() if user.created_at else None
|
||
}
|
||
|
||
|
||
@admin_router.get("/{user_id}/collections")
|
||
def get_user_collections(
|
||
user_id: str,
|
||
limit: int = Query(100, ge=1, le=100),
|
||
current_user: User = Depends(get_current_user),
|
||
db: Session = Depends(get_db)
|
||
):
|
||
"""获取指定用户的藏品列表"""
|
||
if current_user.role != "admin":
|
||
raise HTTPException(status_code=403, detail="无权访问")
|
||
|
||
collections = db.query(Collection).filter(
|
||
Collection.user_id == user_id
|
||
).limit(limit).all()
|
||
|
||
return [c.code for c in collections]
|
||
|
||
|
||
@admin_router.get("/{user_id}/count")
|
||
def get_user_collection_count(
|
||
user_id: str,
|
||
current_user: User = Depends(get_current_user),
|
||
db: Session = Depends(get_db)
|
||
):
|
||
"""获取指定用户的藏品数量"""
|
||
if current_user.role != "admin":
|
||
raise HTTPException(status_code=403, detail="E00050: 仅管理员可访问")
|
||
|
||
count = db.query(Collection).filter(Collection.user_id == user_id).count()
|
||
return {"count": count}
|
||
|
||
|
||
@admin_router.put("/{user_id}")
|
||
def update_user(
|
||
user_id: str,
|
||
username: Optional[str] = Body(None),
|
||
email: Optional[str] = Body(None),
|
||
role: Optional[str] = Body(None),
|
||
password: Optional[str] = Body(None),
|
||
current_user: User = Depends(get_current_user),
|
||
db: Session = Depends(get_db)
|
||
):
|
||
"""更新用户信息（仅管理员）"""
|
||
if current_user.role != "admin":
|
||
raise HTTPException(status_code=403, detail="E00050: 仅管理员可访问")
|
||
|
||
user = db.query(User).filter(User.f99_90_id == user_id).first()
|
||
if not user:
|
||
raise HTTPException(status_code=404, detail="E00051: 用户不存在")
|
||
|
||
# 更新基本信息
|
||
if username:
|
||
user.f01_01_name = username
|
||
if email:
|
||
user.email = email
|
||
if role is not None:
|
||
user.role = role
|
||
|
||
# 更新密码
|
||
if password and password.strip():
|
||
from app.core.auth import get_password_hash
|
||
user.password = get_password_hash(password)
|
||
|
||
db.commit()
|
||
db.refresh(user)
|
||
|
||
return {
|
||
"id": user.f99_90_id,
|
||
"username": user.f01_01_name,
|
||
"email": user.email,
|
||
"role": user.role,
|
||
"message": "更新成功"
|
||
}
|
||
|
||
|
||
@admin_router.delete("/{user_id}")
|
||
def delete_user(
|
||
user_id: str,
|
||
current_user: User = Depends(get_current_user),
|
||
db: Session = Depends(get_db)
|
||
):
|
||
"""删除用户（仅管理员）"""
|
||
if current_user.role != "admin":
|
||
raise HTTPException(status_code=403, detail="E00050: 仅管理员可访问")
|
||
|
||
# 不能删除自己
|
||
if user_id == str(current_user.f99_90_id):
|
||
raise HTTPException(status_code=400, detail="E00052: 不能删除自己")
|
||
|
||
user = db.query(User).filter(User.f99_90_id == user_id).first()
|
||
if not user:
|
||
raise HTTPException(status_code=404, detail="E00051: 用户不存在")
|
||
|
||
db.delete(user)
|
||
db.commit()
|
||
|
||
return {"message": "删除成功"}
|