diff --git a/backend/services/system-setting/src/main/java/io/metersphere/system/service/NormalUserService.java b/backend/services/system-setting/src/main/java/io/metersphere/system/service/NormalUserService.java index 7d4ea3a32e..03d46e9e0c 100644 --- a/backend/services/system-setting/src/main/java/io/metersphere/system/service/NormalUserService.java +++ b/backend/services/system-setting/src/main/java/io/metersphere/system/service/NormalUserService.java @@ -1,587 +1,10 @@ package io.metersphere.system.service; -import com.alibaba.excel.EasyExcelFactory; -import io.metersphere.sdk.constants.ParamConstants; -import io.metersphere.sdk.exception.MSException; -import io.metersphere.sdk.util.*; -import io.metersphere.system.controller.result.SystemResultCode; -import io.metersphere.system.domain.*; -import io.metersphere.system.dto.excel.UserExcel; -import io.metersphere.system.dto.excel.UserExcelRowDTO; -import io.metersphere.system.dto.request.UserInviteRequest; -import io.metersphere.system.dto.request.UserRegisterRequest; -import io.metersphere.system.dto.request.user.PersonalUpdatePasswordRequest; -import io.metersphere.system.dto.request.user.PersonalUpdateRequest; -import io.metersphere.system.dto.request.user.UserChangeEnableRequest; -import io.metersphere.system.dto.request.user.UserEditRequest; -import io.metersphere.system.dto.sdk.BasePageRequest; -import io.metersphere.system.dto.sdk.ExcelParseDTO; -import io.metersphere.system.dto.sdk.OptionDTO; -import io.metersphere.system.dto.sdk.SessionUser; -import io.metersphere.system.dto.table.TableBatchProcessDTO; -import io.metersphere.system.dto.table.TableBatchProcessResponse; -import io.metersphere.system.dto.user.PersonalDTO; -import io.metersphere.system.dto.user.UserCreateInfo; -import io.metersphere.system.dto.user.UserDTO; -import io.metersphere.system.dto.user.UserExtendDTO; -import io.metersphere.system.dto.user.request.UserBatchCreateRequest; -import io.metersphere.system.dto.user.response.UserBatchCreateResponse; -import io.metersphere.system.dto.user.response.UserImportResponse; -import io.metersphere.system.dto.user.response.UserInviteResponse; -import io.metersphere.system.dto.user.response.UserTableResponse; -import io.metersphere.system.log.service.OperationLogService; -import io.metersphere.system.mapper.*; -import io.metersphere.system.notice.sender.impl.MailNoticeSender; -import io.metersphere.system.utils.SessionUtils; -import io.metersphere.system.utils.UserImportEventListener; -import jakarta.annotation.Resource; -import jakarta.mail.internet.InternetAddress; -import jakarta.mail.internet.MimeMessage; -import jakarta.validation.Valid; -import jakarta.validation.constraints.NotBlank; -import jakarta.validation.constraints.NotEmpty; -import jakarta.validation.constraints.NotNull; -import org.apache.commons.collections4.CollectionUtils; -import org.apache.commons.collections4.MapUtils; -import org.apache.commons.lang3.BooleanUtils; -import org.apache.commons.lang3.StringUtils; -import org.apache.ibatis.session.ExecutorType; -import org.apache.ibatis.session.SqlSession; -import org.apache.ibatis.session.SqlSessionFactory; -import org.mybatis.spring.SqlSessionUtils; -import org.springframework.beans.factory.annotation.Value; -import org.springframework.mail.javamail.JavaMailSenderImpl; -import org.springframework.mail.javamail.MimeMessageHelper; import org.springframework.stereotype.Service; import org.springframework.transaction.annotation.Transactional; -import org.springframework.util.unit.DataSize; -import org.springframework.web.multipart.MultipartFile; - -import java.util.*; -import java.util.stream.Collectors; @Service @Transactional(rollbackFor = Exception.class) public class NormalUserService { - @Resource - private BaseUserMapper baseUserMapper; - @Resource - private UserMapper userMapper; - @Resource - private UserExtendMapper userExtendMapper; - @Resource - private ExtUserMapper extUserMapper; - @Resource - private UserInviteService userInviteService; - @Resource - private UserRoleRelationService userRoleRelationService; - @Resource - private OperationLogService operationLogService; - @Resource - private GlobalUserRoleService globalUserRoleService; - @Resource - private UserRoleService userRoleService; - @Resource - private SqlSessionFactory sqlSessionFactory; - @Resource - private UserLogService userLogService; - @Resource - private UserToolService userToolService; - @Value("50MB") - private DataSize maxImportFileSize; - - private Map validateUserInfo(Collection createEmails) { - Map errorMessage = new HashMap<>(); - String userEmailRepeatError = Translator.get("user.email.repeat"); - //判断参数内是否含有重复邮箱 - List emailList = new ArrayList<>(); - var userInDbMap = baseUserMapper.selectUserIdByEmailList(createEmails) - .stream().collect(Collectors.toMap(User::getEmail, User::getId)); - for (String createEmail : createEmails) { - if (emailList.contains(createEmail)) { - errorMessage.put(createEmail, userEmailRepeatError); - } else { - //判断邮箱是否已存在数据库中 - if (userInDbMap.containsKey(createEmail)) { - errorMessage.put(createEmail, userEmailRepeatError); - } else { - emailList.add(createEmail); - } - } - } - return errorMessage; - } - - public UserBatchCreateResponse addUser(UserBatchCreateRequest userCreateDTO, String source, String operator) { - - //检查用户权限的合法性 - globalUserRoleService.checkRoleIsGlobalAndHaveMember(userCreateDTO.getUserRoleIdList(), true); - - UserBatchCreateResponse response = new UserBatchCreateResponse(); - //检查用户邮箱的合法性 - Map errorEmails = this.validateUserInfo(userCreateDTO.getUserInfoList().stream().map(UserCreateInfo::getEmail).toList()); - if (MapUtils.isNotEmpty(errorEmails)) { - response.setErrorEmails(errorEmails); - } else { - response.setSuccessList(this.saveUserAndRole(userCreateDTO, source, operator, "/system/user/addUser")); - } - return response; - } - - private List saveUserAndRole(UserBatchCreateRequest userCreateDTO, String source, String operator, String requestPath) { - int responseCode = Objects.requireNonNull(CommonBeanFactory.getBean(UserXpackService.class)).guessWhatHowToAddUser(userCreateDTO, source, operator); - if (responseCode == 0) { - operationLogService.batchAdd(userLogService.getBatchAddLogs(userCreateDTO.getUserInfoList(), operator, requestPath)); - } else { - if (responseCode == -1) { - throw new MSException(SystemResultCode.USER_TOO_MANY, Translator.getWithArgs("user_open_source_max", 30)); - } else { - throw new MSException(SystemResultCode.DEPT_USER_TOO_MANY, Translator.getWithArgs("user_dept_max", responseCode)); - } - } - return userCreateDTO.getUserInfoList(); - } - - public UserDTO getUserDTOByKeyword(String email) { - UserDTO userDTO = baseUserMapper.selectDTOByKeyword(email); - if (userDTO != null) { - userDTO.setUserRoleRelations( - userRoleRelationService.selectByUserId(userDTO.getId()) - ); - userDTO.setUserRoles( - userRoleService.selectByUserRoleRelations(userDTO.getUserRoleRelations()) - ); - } - return userDTO; - } - - public PersonalDTO getPersonalById(String id) { - UserDTO userDTO = baseUserMapper.selectDTOByKeyword(id); - PersonalDTO personalDTO = new PersonalDTO(); - if (userDTO != null) { - BeanUtils.copyBean(personalDTO, userDTO); - personalDTO.setOrgProjectList(userRoleRelationService.selectOrganizationProjectByUserId(userDTO.getId())); - } - return personalDTO; - } - - public List list(BasePageRequest request) { - List returnList = new ArrayList<>(); - List userList = baseUserMapper.selectByKeyword(request.getKeyword(), false); - if (CollectionUtils.isNotEmpty(userList)) { - List userIdList = userList.stream().map(User::getId).collect(Collectors.toList()); - Map roleAndOrganizationMap = userRoleRelationService.selectGlobalUserRoleAndOrganization(userIdList); - for (User user : userList) { - UserTableResponse userInfo = new UserTableResponse(); - BeanUtils.copyBean(userInfo, user); - UserTableResponse roleOrgModel = roleAndOrganizationMap.get(user.getId()); - if (roleOrgModel != null) { - userInfo.setUserRoleList(roleOrgModel.getUserRoleList()); - userInfo.setOrganizationList(roleOrgModel.getOrganizationList()); - } - returnList.add(userInfo); - } - } - return returnList; - } - - public void checkUserEmail(String id, String email) { - UserExample userExample = new UserExample(); - userExample.createCriteria().andEmailEqualTo(email).andIdNotEqualTo(id); - if (userMapper.countByExample(userExample) > 0) { - throw new MSException(Translator.get("user_email_already_exists")); - } - } - - private void checkOldPassword(String id, String password) { - if (extUserMapper.countByIdAndPassword(id, password) != 1) { - throw new MSException(Translator.get("password_modification_failed")); - } - } - - public UserEditRequest updateUser(UserEditRequest userEditRequest, String operator) { - //检查用户组合法性 - globalUserRoleService.checkRoleIsGlobalAndHaveMember(userEditRequest.getUserRoleIdList(), true); - //检查用户邮箱的合法性 - this.checkUserEmail(userEditRequest.getId(), userEditRequest.getEmail()); - - User user = new User(); - BeanUtils.copyBean(user, userEditRequest); - user.setUpdateUser(operator); - user.setUpdateTime(System.currentTimeMillis()); - user.setCreateUser(null); - user.setCreateTime(null); - userMapper.updateByPrimaryKeySelective(user); - userRoleRelationService.updateUserSystemGlobalRole(user, user.getUpdateUser(), userEditRequest.getUserRoleIdList()); - return userEditRequest; - } - - public TableBatchProcessResponse updateUserEnable(UserChangeEnableRequest request, String operatorId, String operatorName) { - request.setSelectIds(userToolService.getBatchUserIds(request)); - this.checkUserInDb(request.getSelectIds()); - - if (!request.isEnable()) { - //不能禁用当前用户和admin - this.checkProcessUserAndThrowException(request.getSelectIds(), operatorId, operatorName, Translator.get("user.not.disable")); - } - - TableBatchProcessResponse response = new TableBatchProcessResponse(); - response.setTotalCount(request.getSelectIds().size()); - UserExample userExample = new UserExample(); - userExample.createCriteria().andIdIn( - request.getSelectIds() - ); - - User updateUser = new User(); - updateUser.setEnable(request.isEnable()); - updateUser.setUpdateUser(operatorId); - updateUser.setUpdateTime(System.currentTimeMillis()); - response.setSuccessCount(userMapper.updateByExampleSelective(updateUser, userExample)); - - if (BooleanUtils.isFalse(request.isEnable())) { - //如果是禁用，批量踢出用户 - request.getSelectIds().forEach(SessionUtils::kickOutUser); - } - - return response; - } - - private void checkUserInDb(List userIdList) { - if (CollectionUtils.isEmpty(userIdList)) { - throw new MSException(Translator.get("user.not.exist")); - } - List userInDb = baseUserMapper.selectUnDeletedUserIdByIdList(userIdList); - if (userIdList.size() != userInDb.size()) { - throw new MSException(Translator.get("user.not.exist")); - } - } - - public UserImportResponse importByExcel(MultipartFile excelFile, String source, String sessionId) { - - if (excelFile.getSize() > maxImportFileSize.toBytes()) { - throw new MSException(Translator.get("file.size.is.too.large")); - } - - UserImportResponse importResponse = new UserImportResponse(); - ExcelParseDTO excelParseDTO = new ExcelParseDTO<>(); - try { - excelParseDTO = this.getUserExcelParseDTO(excelFile); - } catch (Exception e) { - LogUtils.info("import user error", e); - } - if (CollectionUtils.isNotEmpty(excelParseDTO.getDataList())) { - this.saveUserByExcelData(excelParseDTO.getDataList(), source, sessionId); - } - importResponse.generateResponse(excelParseDTO); - return importResponse; - } - - public ExcelParseDTO getUserExcelParseDTO(MultipartFile excelFile) throws Exception { - UserImportEventListener userImportEventListener = new UserImportEventListener(); - EasyExcelFactory.read(excelFile.getInputStream(), UserExcel.class, userImportEventListener).sheet().doRead(); - return this.validateExcelUserInfo(userImportEventListener.getExcelParseDTO()); - } - - /** - * 校验excel导入的数据是否与数据库中的数据冲突 - */ - private ExcelParseDTO validateExcelUserInfo(@Valid @NotNull ExcelParseDTO excelParseDTO) { - List prepareSaveList = excelParseDTO.getDataList(); - if (CollectionUtils.isNotEmpty(prepareSaveList)) { - var userInDbMap = baseUserMapper.selectUserIdByEmailList( - prepareSaveList.stream().map(UserExcelRowDTO::getEmail).collect(Collectors.toList())) - .stream().collect(Collectors.toMap(User::getEmail, User::getId)); - for (UserExcelRowDTO userExcelRow : prepareSaveList) { - //判断邮箱是否已存在数据库中 - if (userInDbMap.containsKey(userExcelRow.getEmail())) { - userExcelRow.setErrorMessage(Translator.get("user.email.import.in_system") + ": " + userExcelRow.getEmail()); - excelParseDTO.addErrorRowData(userExcelRow.getDataIndex(), userExcelRow); - } - } - excelParseDTO.getDataList().removeAll(excelParseDTO.getErrRowData().values()); - } - return excelParseDTO; - } - - private void saveUserByExcelData(@Valid @NotEmpty List dataList, @Valid @NotEmpty String source, @Valid @NotBlank String sessionId) { - UserBatchCreateRequest userBatchCreateDTO = new UserBatchCreateRequest(); - userBatchCreateDTO.setUserRoleIdList(new ArrayList<>() {{ - add("member"); - }}); - List userCreateInfoList = new ArrayList<>(); - dataList.forEach(userExcelRowDTO -> { - UserCreateInfo userCreateInfo = new UserCreateInfo(); - BeanUtils.copyBean(userCreateInfo, userExcelRowDTO); - userCreateInfoList.add(userCreateInfo); - }); - userBatchCreateDTO.setUserInfoList(userCreateInfoList); - this.saveUserAndRole(userBatchCreateDTO, source, sessionId, "/system/user/import"); - } - - - public TableBatchProcessResponse deleteUser(@Valid TableBatchProcessDTO request, String operatorId, String operatorName) { - List userIdList = userToolService.getBatchUserIds(request); - this.checkUserInDb(userIdList); - //检查是否含有Admin - this.checkProcessUserAndThrowException(userIdList, operatorId, operatorName, Translator.get("user.not.delete")); - UserExample userExample = new UserExample(); - userExample.createCriteria().andIdIn(userIdList); - //更新删除标志位 - TableBatchProcessResponse response = new TableBatchProcessResponse(); - response.setTotalCount(userIdList.size()); - response.setSuccessCount(this.deleteUserByList(userIdList, operatorId)); - //删除用户角色关系 - userRoleRelationService.deleteByUserIdList(userIdList); - //批量踢出用户 - userIdList.forEach(SessionUtils::kickOutUser); - return response; - } - - /** - * 检查要处理的用户并抛出异常 - * - * @param userIdList - * @param operatorId - * @param operatorName - */ - private void checkProcessUserAndThrowException(List userIdList, String operatorId, String operatorName, String exceptionMessage) { - for (String userId : userIdList) { - //当前用户或admin不能被操作 - if (StringUtils.equals(userId, operatorId)) { - throw new MSException(exceptionMessage + ":" + operatorName); - } else if (StringUtils.equals(userId, "admin")) { - throw new MSException(exceptionMessage + ": admin"); - } - } - } - - private int deleteUserByList(List updateUserList, String operator) { - SqlSession sqlSession = sqlSessionFactory.openSession(ExecutorType.BATCH); - BaseUserMapper batchDeleteMapper = sqlSession.getMapper(BaseUserMapper.class); - int insertIndex = 0; - long deleteTime = System.currentTimeMillis(); - for (String userId : updateUserList) { - batchDeleteMapper.deleteUser(userId, operator, deleteTime); - insertIndex++; - if (insertIndex % 50 == 0) { - sqlSession.flushStatements(); - } - } - sqlSession.flushStatements(); - SqlSessionUtils.closeSqlSession(sqlSession, sqlSessionFactory); - return insertIndex; - } - - public List getUserList(String keyword) { - return extUserMapper.selectUserList(keyword); - } - - /** - * 获取组织, 项目系统成员选项 - * - * @param sourceId 组织ID, 项目ID - * @return 系统用户选项 - */ - public List getMemberOption(String sourceId, String keyword) { - return extUserMapper.getMemberOption(sourceId, keyword); - } - - public TableBatchProcessResponse resetPassword(TableBatchProcessDTO request, String operator) { - request.setSelectIds(userToolService.getBatchUserIds(request)); - this.checkUserInDb(request.getSelectIds()); - - SqlSession sqlSession = sqlSessionFactory.openSession(ExecutorType.BATCH); - UserMapper batchUpdateMapper = sqlSession.getMapper(UserMapper.class); - int insertIndex = 0; - long updateTime = System.currentTimeMillis(); - List userList = userToolService.selectByIdList(request.getSelectIds()); - for (User user : userList) { - User updateModel = new User(); - updateModel.setId(user.getId()); - if (StringUtils.equalsIgnoreCase("admin", user.getId())) { - updateModel.setPassword(CodingUtils.md5("metersphere")); - } else { - updateModel.setPassword(CodingUtils.md5(user.getEmail())); - } - updateModel.setUpdateTime(updateTime); - updateModel.setUpdateUser(operator); - batchUpdateMapper.updateByPrimaryKeySelective(updateModel); - insertIndex++; - if (insertIndex % 50 == 0) { - sqlSession.flushStatements(); - } - } - sqlSession.flushStatements(); - SqlSessionUtils.closeSqlSession(sqlSession, sqlSessionFactory); - - TableBatchProcessResponse response = new TableBatchProcessResponse(); - response.setTotalCount(request.getSelectIds().size()); - response.setSuccessCount(request.getSelectIds().size()); - return response; - } - - public void checkUserLegality(List userIds) { - if (CollectionUtils.isEmpty(userIds)) { - throw new MSException(Translator.get("user.not.exist")); - } - UserExample example = new UserExample(); - example.createCriteria().andIdIn(userIds); - if (userMapper.countByExample(example) != userIds.size()) { - throw new MSException(Translator.get("user.id.not.exist")); - } - } - - - public List getUserListByOrgId(String organizationId, String keyword) { - return extUserMapper.getUserListByOrgId(organizationId, keyword); - } - - /** - * 临时发送Email的方法。 - * - * @param hashMap - */ - @Resource - MailNoticeSender mailNoticeSender; - @Resource - private SystemParameterMapper systemParameterMapper; - - public UserInviteResponse saveInviteRecord(UserInviteRequest request, SessionUser inviteUser) { - globalUserRoleService.checkRoleIsGlobalAndHaveMember(request.getUserRoleIds(), true); - //校验邮箱和角色的合法性 - Map errorMap = this.validateUserInfo(request.getInviteEmails()); - if (MapUtils.isNotEmpty(errorMap)) { - throw new MSException(Translator.get("user.email.repeat")); - } - List inviteList = userInviteService.batchInsert(request.getInviteEmails(), inviteUser.getId(), request.getUserRoleIds()); - //记录日志 - userLogService.addEmailInviteLog(inviteList, inviteUser.getId()); - this.sendInviteEmail(inviteList, inviteUser.getName()); - return new UserInviteResponse(inviteList); - } - - private void sendInviteEmail(List inviteList, String inviteUser) { - HashMap emailMap = new HashMap<>(); - List systemParameters = systemParameterMapper.selectByExample(new SystemParameterExample()); - systemParameters.forEach(systemParameter -> { - if (systemParameter.getParamKey().equals(ParamConstants.MAIL.PASSWORD.getValue())) { - if (!StringUtils.isBlank(systemParameter.getParamValue())) { - String string = EncryptUtils.aesDecrypt(systemParameter.getParamValue()).toString(); - emailMap.put(systemParameter.getParamKey(), string); - } - } else { - emailMap.put(systemParameter.getParamKey(), systemParameter.getParamValue()); - } - }); - - inviteList.forEach(userInvite -> { - String emailContent = userInviteService.genInviteMessage(inviteUser, userInvite.getId(), emailMap.get("base.url")); - emailMap.put("emailContent", emailContent); - emailMap.put("smtp.recipient", userInvite.getEmail()); - try { - this.sendInviteEmailTemporary(emailMap); - } catch (Exception e) { - throw new MSException("邮箱邀请失败!", e); - } - }); - } - - public void sendInviteEmailTemporary(HashMap hashMap) throws Exception { - JavaMailSenderImpl javaMailSender = null; - try { - javaMailSender = mailNoticeSender.getMailSender(hashMap); - javaMailSender.testConnection(); - } catch (Exception e) { - LogUtils.error(e.getMessage(), e); - throw new MSException(Translator.get("connection_failed")); - } - - String recipients = hashMap.get(ParamConstants.MAIL.RECIPIENTS.getValue()); - MimeMessage mimeMessage = javaMailSender.createMimeMessage(); - MimeMessageHelper helper = new MimeMessageHelper(mimeMessage, true); - String username = javaMailSender.getUsername(); - String email = username; - InternetAddress from = new InternetAddress(); - from.setAddress(email); - from.setPersonal(username); - helper.setFrom(from); - helper.setSubject("MeterSphere邀请注册"); - helper.setText(hashMap.get("emailContent"), true); - helper.setTo(recipients); - javaMailSender.send(mimeMessage); - } - - public UserInvite getUserInviteAndCheckEfficient(String inviteId) { - UserInvite userInvite = userInviteService.selectEfficientInviteById(inviteId); - if (userInvite == null) { - throw new MSException(Translator.get("user.not.invite.or.expired")); - } - return userInvite; - } - - public String registerByInvite(UserRegisterRequest request) throws Exception { - UserInvite userInvite = this.getUserInviteAndCheckEfficient(request.getInviteId()); - //检查邮箱是否已经注册 - this.validateUserInfo(new ArrayList<>() {{ - this.add(userInvite.getEmail()); - }}); - - int responseCode = Objects.requireNonNull(CommonBeanFactory.getBean(UserXpackService.class)).guessWhatHowToAddUser(request, userInvite); - if (responseCode == 0) { - //删除本次邀请记录 - userInviteService.deleteInviteById(userInvite.getId()); - //写入操作日志 - UserExample userExample = new UserExample(); - userExample.createCriteria().andEmailEqualTo(userInvite.getEmail()); - userLogService.addRegisterLog(userMapper.selectByExample(userExample).getFirst(), userInvite); - return userInvite.getEmail(); - } else { - if (responseCode > 30) { - throw new MSException(SystemResultCode.DEPT_USER_TOO_MANY, Translator.getWithArgs("user_dept_max", responseCode)); - } else { - throw new MSException(SystemResultCode.USER_TOO_MANY, Translator.getWithArgs("user_open_source_max", responseCode)); - - } - } - } - - public boolean updateAccount(PersonalUpdateRequest request, String operator) { - this.checkUserEmail(request.getId(), request.getEmail()); - User editUser = new User(); - editUser.setId(request.getId()); - editUser.setName(request.getUsername()); - editUser.setPhone(request.getPhone()); - editUser.setEmail(request.getEmail()); - editUser.setUpdateUser(operator); - editUser.setUpdateTime(System.currentTimeMillis()); - - if (StringUtils.isNotEmpty(request.getAvatar())) { - UserExtend userExtend = userExtendMapper.selectByPrimaryKey(request.getId()); - if (userExtend == null) { - userExtend = new UserExtend(); - userExtend.setId(request.getId()); - userExtend.setAvatar(request.getAvatar()); - userExtendMapper.insert(userExtend); - } else { - userExtend.setAvatar(request.getAvatar()); - userExtendMapper.updateByPrimaryKey(userExtend); - } - } - - return userMapper.updateByPrimaryKeySelective(editUser) > 0; - } - - public boolean updatePassword(PersonalUpdatePasswordRequest request) { - this.checkOldPassword(request.getId(), request.getOldPassword()); - return extUserMapper.updatePasswordByUserId(request.getId(), request.getNewPassword()) > 0; - } - - /** - * 根据ID获取用户ID, 名称集合 - */ - public Map getUserMapByIds(List userIds) { - List userOptions = baseUserMapper.selectUserOptionByIds(userIds); - return userOptions.stream().collect(Collectors.toMap(OptionDTO::getId, OptionDTO::getName)); - } } diff --git a/backend/services/system-setting/src/main/java/io/metersphere/system/service/SimpleUserService.java b/backend/services/system-setting/src/main/java/io/metersphere/system/service/SimpleUserService.java new file mode 100644 index 0000000000..6587a6213a --- /dev/null +++ b/backend/services/system-setting/src/main/java/io/metersphere/system/service/SimpleUserService.java @@ -0,0 +1,587 @@ +package io.metersphere.system.service; + +import com.alibaba.excel.EasyExcelFactory; +import io.metersphere.sdk.constants.ParamConstants; +import io.metersphere.sdk.exception.MSException; +import io.metersphere.sdk.util.*; +import io.metersphere.system.controller.result.SystemResultCode; +import io.metersphere.system.domain.*; +import io.metersphere.system.dto.excel.UserExcel; +import io.metersphere.system.dto.excel.UserExcelRowDTO; +import io.metersphere.system.dto.request.UserInviteRequest; +import io.metersphere.system.dto.request.UserRegisterRequest; +import io.metersphere.system.dto.request.user.PersonalUpdatePasswordRequest; +import io.metersphere.system.dto.request.user.PersonalUpdateRequest; +import io.metersphere.system.dto.request.user.UserChangeEnableRequest; +import io.metersphere.system.dto.request.user.UserEditRequest; +import io.metersphere.system.dto.sdk.BasePageRequest; +import io.metersphere.system.dto.sdk.ExcelParseDTO; +import io.metersphere.system.dto.sdk.OptionDTO; +import io.metersphere.system.dto.sdk.SessionUser; +import io.metersphere.system.dto.table.TableBatchProcessDTO; +import io.metersphere.system.dto.table.TableBatchProcessResponse; +import io.metersphere.system.dto.user.PersonalDTO; +import io.metersphere.system.dto.user.UserCreateInfo; +import io.metersphere.system.dto.user.UserDTO; +import io.metersphere.system.dto.user.UserExtendDTO; +import io.metersphere.system.dto.user.request.UserBatchCreateRequest; +import io.metersphere.system.dto.user.response.UserBatchCreateResponse; +import io.metersphere.system.dto.user.response.UserImportResponse; +import io.metersphere.system.dto.user.response.UserInviteResponse; +import io.metersphere.system.dto.user.response.UserTableResponse; +import io.metersphere.system.log.service.OperationLogService; +import io.metersphere.system.mapper.*; +import io.metersphere.system.notice.sender.impl.MailNoticeSender; +import io.metersphere.system.utils.SessionUtils; +import io.metersphere.system.utils.UserImportEventListener; +import jakarta.annotation.Resource; +import jakarta.mail.internet.InternetAddress; +import jakarta.mail.internet.MimeMessage; +import jakarta.validation.Valid; +import jakarta.validation.constraints.NotBlank; +import jakarta.validation.constraints.NotEmpty; +import jakarta.validation.constraints.NotNull; +import org.apache.commons.collections4.CollectionUtils; +import org.apache.commons.collections4.MapUtils; +import org.apache.commons.lang3.BooleanUtils; +import org.apache.commons.lang3.StringUtils; +import org.apache.ibatis.session.ExecutorType; +import org.apache.ibatis.session.SqlSession; +import org.apache.ibatis.session.SqlSessionFactory; +import org.mybatis.spring.SqlSessionUtils; +import org.springframework.beans.factory.annotation.Value; +import org.springframework.mail.javamail.JavaMailSenderImpl; +import org.springframework.mail.javamail.MimeMessageHelper; +import org.springframework.stereotype.Service; +import org.springframework.transaction.annotation.Transactional; +import org.springframework.util.unit.DataSize; +import org.springframework.web.multipart.MultipartFile; + +import java.util.*; +import java.util.stream.Collectors; + +@Service +@Transactional(rollbackFor = Exception.class) +public class SimpleUserService { + @Resource + private BaseUserMapper baseUserMapper; + @Resource + private UserMapper userMapper; + @Resource + private UserExtendMapper userExtendMapper; + @Resource + private ExtUserMapper extUserMapper; + @Resource + private UserInviteService userInviteService; + @Resource + private UserRoleRelationService userRoleRelationService; + @Resource + private OperationLogService operationLogService; + @Resource + private GlobalUserRoleService globalUserRoleService; + @Resource + private UserRoleService userRoleService; + @Resource + private SqlSessionFactory sqlSessionFactory; + @Resource + private UserLogService userLogService; + @Resource + private UserToolService userToolService; + + @Value("50MB") + private DataSize maxImportFileSize; + + private Map validateUserInfo(Collection createEmails) { + Map errorMessage = new HashMap<>(); + String userEmailRepeatError = Translator.get("user.email.repeat"); + //判断参数内是否含有重复邮箱 + List emailList = new ArrayList<>(); + var userInDbMap = baseUserMapper.selectUserIdByEmailList(createEmails) + .stream().collect(Collectors.toMap(User::getEmail, User::getId)); + for (String createEmail : createEmails) { + if (emailList.contains(createEmail)) { + errorMessage.put(createEmail, userEmailRepeatError); + } else { + //判断邮箱是否已存在数据库中 + if (userInDbMap.containsKey(createEmail)) { + errorMessage.put(createEmail, userEmailRepeatError); + } else { + emailList.add(createEmail); + } + } + } + return errorMessage; + } + + public UserBatchCreateResponse addUser(UserBatchCreateRequest userCreateDTO, String source, String operator) { + + //检查用户权限的合法性 + globalUserRoleService.checkRoleIsGlobalAndHaveMember(userCreateDTO.getUserRoleIdList(), true); + + UserBatchCreateResponse response = new UserBatchCreateResponse(); + //检查用户邮箱的合法性 + Map errorEmails = this.validateUserInfo(userCreateDTO.getUserInfoList().stream().map(UserCreateInfo::getEmail).toList()); + if (MapUtils.isNotEmpty(errorEmails)) { + response.setErrorEmails(errorEmails); + } else { + response.setSuccessList(this.saveUserAndRole(userCreateDTO, source, operator, "/system/user/addUser")); + } + return response; + } + + private List saveUserAndRole(UserBatchCreateRequest userCreateDTO, String source, String operator, String requestPath) { + int responseCode = Objects.requireNonNull(CommonBeanFactory.getBean(UserXpackService.class)).guessWhatHowToAddUser(userCreateDTO, source, operator); + if (responseCode == 0) { + operationLogService.batchAdd(userLogService.getBatchAddLogs(userCreateDTO.getUserInfoList(), operator, requestPath)); + } else { + if (responseCode == -1) { + throw new MSException(SystemResultCode.USER_TOO_MANY, Translator.getWithArgs("user_open_source_max", 30)); + } else { + throw new MSException(SystemResultCode.DEPT_USER_TOO_MANY, Translator.getWithArgs("user_dept_max", responseCode)); + } + } + return userCreateDTO.getUserInfoList(); + } + + public UserDTO getUserDTOByKeyword(String email) { + UserDTO userDTO = baseUserMapper.selectDTOByKeyword(email); + if (userDTO != null) { + userDTO.setUserRoleRelations( + userRoleRelationService.selectByUserId(userDTO.getId()) + ); + userDTO.setUserRoles( + userRoleService.selectByUserRoleRelations(userDTO.getUserRoleRelations()) + ); + } + return userDTO; + } + + public PersonalDTO getPersonalById(String id) { + UserDTO userDTO = baseUserMapper.selectDTOByKeyword(id); + PersonalDTO personalDTO = new PersonalDTO(); + if (userDTO != null) { + BeanUtils.copyBean(personalDTO, userDTO); + personalDTO.setOrgProjectList(userRoleRelationService.selectOrganizationProjectByUserId(userDTO.getId())); + } + return personalDTO; + } + + public List list(BasePageRequest request) { + List returnList = new ArrayList<>(); + List userList = baseUserMapper.selectByKeyword(request.getKeyword(), false); + if (CollectionUtils.isNotEmpty(userList)) { + List userIdList = userList.stream().map(User::getId).collect(Collectors.toList()); + Map roleAndOrganizationMap = userRoleRelationService.selectGlobalUserRoleAndOrganization(userIdList); + for (User user : userList) { + UserTableResponse userInfo = new UserTableResponse(); + BeanUtils.copyBean(userInfo, user); + UserTableResponse roleOrgModel = roleAndOrganizationMap.get(user.getId()); + if (roleOrgModel != null) { + userInfo.setUserRoleList(roleOrgModel.getUserRoleList()); + userInfo.setOrganizationList(roleOrgModel.getOrganizationList()); + } + returnList.add(userInfo); + } + } + return returnList; + } + + public void checkUserEmail(String id, String email) { + UserExample userExample = new UserExample(); + userExample.createCriteria().andEmailEqualTo(email).andIdNotEqualTo(id); + if (userMapper.countByExample(userExample) > 0) { + throw new MSException(Translator.get("user_email_already_exists")); + } + } + + private void checkOldPassword(String id, String password) { + if (extUserMapper.countByIdAndPassword(id, password) != 1) { + throw new MSException(Translator.get("password_modification_failed")); + } + } + + public UserEditRequest updateUser(UserEditRequest userEditRequest, String operator) { + //检查用户组合法性 + globalUserRoleService.checkRoleIsGlobalAndHaveMember(userEditRequest.getUserRoleIdList(), true); + //检查用户邮箱的合法性 + this.checkUserEmail(userEditRequest.getId(), userEditRequest.getEmail()); + + User user = new User(); + BeanUtils.copyBean(user, userEditRequest); + user.setUpdateUser(operator); + user.setUpdateTime(System.currentTimeMillis()); + user.setCreateUser(null); + user.setCreateTime(null); + userMapper.updateByPrimaryKeySelective(user); + userRoleRelationService.updateUserSystemGlobalRole(user, user.getUpdateUser(), userEditRequest.getUserRoleIdList()); + return userEditRequest; + } + + public TableBatchProcessResponse updateUserEnable(UserChangeEnableRequest request, String operatorId, String operatorName) { + request.setSelectIds(userToolService.getBatchUserIds(request)); + this.checkUserInDb(request.getSelectIds()); + + if (!request.isEnable()) { + //不能禁用当前用户和admin + this.checkProcessUserAndThrowException(request.getSelectIds(), operatorId, operatorName, Translator.get("user.not.disable")); + } + + TableBatchProcessResponse response = new TableBatchProcessResponse(); + response.setTotalCount(request.getSelectIds().size()); + UserExample userExample = new UserExample(); + userExample.createCriteria().andIdIn( + request.getSelectIds() + ); + + User updateUser = new User(); + updateUser.setEnable(request.isEnable()); + updateUser.setUpdateUser(operatorId); + updateUser.setUpdateTime(System.currentTimeMillis()); + response.setSuccessCount(userMapper.updateByExampleSelective(updateUser, userExample)); + + if (BooleanUtils.isFalse(request.isEnable())) { + //如果是禁用，批量踢出用户 + request.getSelectIds().forEach(SessionUtils::kickOutUser); + } + + return response; + } + + private void checkUserInDb(List userIdList) { + if (CollectionUtils.isEmpty(userIdList)) { + throw new MSException(Translator.get("user.not.exist")); + } + List userInDb = baseUserMapper.selectUnDeletedUserIdByIdList(userIdList); + if (userIdList.size() != userInDb.size()) { + throw new MSException(Translator.get("user.not.exist")); + } + } + + public UserImportResponse importByExcel(MultipartFile excelFile, String source, String sessionId) { + + if (excelFile.getSize() > maxImportFileSize.toBytes()) { + throw new MSException(Translator.get("file.size.is.too.large")); + } + + UserImportResponse importResponse = new UserImportResponse(); + ExcelParseDTO excelParseDTO = new ExcelParseDTO<>(); + try { + excelParseDTO = this.getUserExcelParseDTO(excelFile); + } catch (Exception e) { + LogUtils.info("import user error", e); + } + if (CollectionUtils.isNotEmpty(excelParseDTO.getDataList())) { + this.saveUserByExcelData(excelParseDTO.getDataList(), source, sessionId); + } + importResponse.generateResponse(excelParseDTO); + return importResponse; + } + + public ExcelParseDTO getUserExcelParseDTO(MultipartFile excelFile) throws Exception { + UserImportEventListener userImportEventListener = new UserImportEventListener(); + EasyExcelFactory.read(excelFile.getInputStream(), UserExcel.class, userImportEventListener).sheet().doRead(); + return this.validateExcelUserInfo(userImportEventListener.getExcelParseDTO()); + } + + /** + * 校验excel导入的数据是否与数据库中的数据冲突 + */ + private ExcelParseDTO validateExcelUserInfo(@Valid @NotNull ExcelParseDTO excelParseDTO) { + List prepareSaveList = excelParseDTO.getDataList(); + if (CollectionUtils.isNotEmpty(prepareSaveList)) { + var userInDbMap = baseUserMapper.selectUserIdByEmailList( + prepareSaveList.stream().map(UserExcelRowDTO::getEmail).collect(Collectors.toList())) + .stream().collect(Collectors.toMap(User::getEmail, User::getId)); + for (UserExcelRowDTO userExcelRow : prepareSaveList) { + //判断邮箱是否已存在数据库中 + if (userInDbMap.containsKey(userExcelRow.getEmail())) { + userExcelRow.setErrorMessage(Translator.get("user.email.import.in_system") + ": " + userExcelRow.getEmail()); + excelParseDTO.addErrorRowData(userExcelRow.getDataIndex(), userExcelRow); + } + } + excelParseDTO.getDataList().removeAll(excelParseDTO.getErrRowData().values()); + } + return excelParseDTO; + } + + private void saveUserByExcelData(@Valid @NotEmpty List dataList, @Valid @NotEmpty String source, @Valid @NotBlank String sessionId) { + UserBatchCreateRequest userBatchCreateDTO = new UserBatchCreateRequest(); + userBatchCreateDTO.setUserRoleIdList(new ArrayList<>() {{ + add("member"); + }}); + List userCreateInfoList = new ArrayList<>(); + dataList.forEach(userExcelRowDTO -> { + UserCreateInfo userCreateInfo = new UserCreateInfo(); + BeanUtils.copyBean(userCreateInfo, userExcelRowDTO); + userCreateInfoList.add(userCreateInfo); + }); + userBatchCreateDTO.setUserInfoList(userCreateInfoList); + this.saveUserAndRole(userBatchCreateDTO, source, sessionId, "/system/user/import"); + } + + + public TableBatchProcessResponse deleteUser(@Valid TableBatchProcessDTO request, String operatorId, String operatorName) { + List userIdList = userToolService.getBatchUserIds(request); + this.checkUserInDb(userIdList); + //检查是否含有Admin + this.checkProcessUserAndThrowException(userIdList, operatorId, operatorName, Translator.get("user.not.delete")); + UserExample userExample = new UserExample(); + userExample.createCriteria().andIdIn(userIdList); + //更新删除标志位 + TableBatchProcessResponse response = new TableBatchProcessResponse(); + response.setTotalCount(userIdList.size()); + response.setSuccessCount(this.deleteUserByList(userIdList, operatorId)); + //删除用户角色关系 + userRoleRelationService.deleteByUserIdList(userIdList); + //批量踢出用户 + userIdList.forEach(SessionUtils::kickOutUser); + return response; + } + + /** + * 检查要处理的用户并抛出异常 + * + * @param userIdList + * @param operatorId + * @param operatorName + */ + private void checkProcessUserAndThrowException(List userIdList, String operatorId, String operatorName, String exceptionMessage) { + for (String userId : userIdList) { + //当前用户或admin不能被操作 + if (StringUtils.equals(userId, operatorId)) { + throw new MSException(exceptionMessage + ":" + operatorName); + } else if (StringUtils.equals(userId, "admin")) { + throw new MSException(exceptionMessage + ": admin"); + } + } + } + + private int deleteUserByList(List updateUserList, String operator) { + SqlSession sqlSession = sqlSessionFactory.openSession(ExecutorType.BATCH); + BaseUserMapper batchDeleteMapper = sqlSession.getMapper(BaseUserMapper.class); + int insertIndex = 0; + long deleteTime = System.currentTimeMillis(); + for (String userId : updateUserList) { + batchDeleteMapper.deleteUser(userId, operator, deleteTime); + insertIndex++; + if (insertIndex % 50 == 0) { + sqlSession.flushStatements(); + } + } + sqlSession.flushStatements(); + SqlSessionUtils.closeSqlSession(sqlSession, sqlSessionFactory); + return insertIndex; + } + + public List getUserList(String keyword) { + return extUserMapper.selectUserList(keyword); + } + + /** + * 获取组织, 项目系统成员选项 + * + * @param sourceId 组织ID, 项目ID + * @return 系统用户选项 + */ + public List getMemberOption(String sourceId, String keyword) { + return extUserMapper.getMemberOption(sourceId, keyword); + } + + public TableBatchProcessResponse resetPassword(TableBatchProcessDTO request, String operator) { + request.setSelectIds(userToolService.getBatchUserIds(request)); + this.checkUserInDb(request.getSelectIds()); + + SqlSession sqlSession = sqlSessionFactory.openSession(ExecutorType.BATCH); + UserMapper batchUpdateMapper = sqlSession.getMapper(UserMapper.class); + int insertIndex = 0; + long updateTime = System.currentTimeMillis(); + List userList = userToolService.selectByIdList(request.getSelectIds()); + for (User user : userList) { + User updateModel = new User(); + updateModel.setId(user.getId()); + if (StringUtils.equalsIgnoreCase("admin", user.getId())) { + updateModel.setPassword(CodingUtils.md5("metersphere")); + } else { + updateModel.setPassword(CodingUtils.md5(user.getEmail())); + } + updateModel.setUpdateTime(updateTime); + updateModel.setUpdateUser(operator); + batchUpdateMapper.updateByPrimaryKeySelective(updateModel); + insertIndex++; + if (insertIndex % 50 == 0) { + sqlSession.flushStatements(); + } + } + sqlSession.flushStatements(); + SqlSessionUtils.closeSqlSession(sqlSession, sqlSessionFactory); + + TableBatchProcessResponse response = new TableBatchProcessResponse(); + response.setTotalCount(request.getSelectIds().size()); + response.setSuccessCount(request.getSelectIds().size()); + return response; + } + + public void checkUserLegality(List userIds) { + if (CollectionUtils.isEmpty(userIds)) { + throw new MSException(Translator.get("user.not.exist")); + } + UserExample example = new UserExample(); + example.createCriteria().andIdIn(userIds); + if (userMapper.countByExample(example) != userIds.size()) { + throw new MSException(Translator.get("user.id.not.exist")); + } + } + + + public List getUserListByOrgId(String organizationId, String keyword) { + return extUserMapper.getUserListByOrgId(organizationId, keyword); + } + + /** + * 临时发送Email的方法。 + * + * @param hashMap + */ + @Resource + MailNoticeSender mailNoticeSender; + @Resource + private SystemParameterMapper systemParameterMapper; + + public UserInviteResponse saveInviteRecord(UserInviteRequest request, SessionUser inviteUser) { + globalUserRoleService.checkRoleIsGlobalAndHaveMember(request.getUserRoleIds(), true); + //校验邮箱和角色的合法性 + Map errorMap = this.validateUserInfo(request.getInviteEmails()); + if (MapUtils.isNotEmpty(errorMap)) { + throw new MSException(Translator.get("user.email.repeat")); + } + List inviteList = userInviteService.batchInsert(request.getInviteEmails(), inviteUser.getId(), request.getUserRoleIds()); + //记录日志 + userLogService.addEmailInviteLog(inviteList, inviteUser.getId()); + this.sendInviteEmail(inviteList, inviteUser.getName()); + return new UserInviteResponse(inviteList); + } + + private void sendInviteEmail(List inviteList, String inviteUser) { + HashMap emailMap = new HashMap<>(); + List systemParameters = systemParameterMapper.selectByExample(new SystemParameterExample()); + systemParameters.forEach(systemParameter -> { + if (systemParameter.getParamKey().equals(ParamConstants.MAIL.PASSWORD.getValue())) { + if (!StringUtils.isBlank(systemParameter.getParamValue())) { + String string = EncryptUtils.aesDecrypt(systemParameter.getParamValue()).toString(); + emailMap.put(systemParameter.getParamKey(), string); + } + } else { + emailMap.put(systemParameter.getParamKey(), systemParameter.getParamValue()); + } + }); + + inviteList.forEach(userInvite -> { + String emailContent = userInviteService.genInviteMessage(inviteUser, userInvite.getId(), emailMap.get("base.url")); + emailMap.put("emailContent", emailContent); + emailMap.put("smtp.recipient", userInvite.getEmail()); + try { + this.sendInviteEmailTemporary(emailMap); + } catch (Exception e) { + throw new MSException("邮箱邀请失败!", e); + } + }); + } + + public void sendInviteEmailTemporary(HashMap hashMap) throws Exception { + JavaMailSenderImpl javaMailSender = null; + try { + javaMailSender = mailNoticeSender.getMailSender(hashMap); + javaMailSender.testConnection(); + } catch (Exception e) { + LogUtils.error(e.getMessage(), e); + throw new MSException(Translator.get("connection_failed")); + } + + String recipients = hashMap.get(ParamConstants.MAIL.RECIPIENTS.getValue()); + MimeMessage mimeMessage = javaMailSender.createMimeMessage(); + MimeMessageHelper helper = new MimeMessageHelper(mimeMessage, true); + String username = javaMailSender.getUsername(); + String email = username; + InternetAddress from = new InternetAddress(); + from.setAddress(email); + from.setPersonal(username); + helper.setFrom(from); + helper.setSubject("MeterSphere邀请注册"); + helper.setText(hashMap.get("emailContent"), true); + helper.setTo(recipients); + javaMailSender.send(mimeMessage); + } + + public UserInvite getUserInviteAndCheckEfficient(String inviteId) { + UserInvite userInvite = userInviteService.selectEfficientInviteById(inviteId); + if (userInvite == null) { + throw new MSException(Translator.get("user.not.invite.or.expired")); + } + return userInvite; + } + + public String registerByInvite(UserRegisterRequest request) throws Exception { + UserInvite userInvite = this.getUserInviteAndCheckEfficient(request.getInviteId()); + //检查邮箱是否已经注册 + this.validateUserInfo(new ArrayList<>() {{ + this.add(userInvite.getEmail()); + }}); + + int responseCode = Objects.requireNonNull(CommonBeanFactory.getBean(UserXpackService.class)).guessWhatHowToAddUser(request, userInvite); + if (responseCode == 0) { + //删除本次邀请记录 + userInviteService.deleteInviteById(userInvite.getId()); + //写入操作日志 + UserExample userExample = new UserExample(); + userExample.createCriteria().andEmailEqualTo(userInvite.getEmail()); + userLogService.addRegisterLog(userMapper.selectByExample(userExample).getFirst(), userInvite); + return userInvite.getEmail(); + } else { + if (responseCode > 30) { + throw new MSException(SystemResultCode.DEPT_USER_TOO_MANY, Translator.getWithArgs("user_dept_max", responseCode)); + } else { + throw new MSException(SystemResultCode.USER_TOO_MANY, Translator.getWithArgs("user_open_source_max", responseCode)); + + } + } + } + + public boolean updateAccount(PersonalUpdateRequest request, String operator) { + this.checkUserEmail(request.getId(), request.getEmail()); + User editUser = new User(); + editUser.setId(request.getId()); + editUser.setName(request.getUsername()); + editUser.setPhone(request.getPhone()); + editUser.setEmail(request.getEmail()); + editUser.setUpdateUser(operator); + editUser.setUpdateTime(System.currentTimeMillis()); + + if (StringUtils.isNotEmpty(request.getAvatar())) { + UserExtend userExtend = userExtendMapper.selectByPrimaryKey(request.getId()); + if (userExtend == null) { + userExtend = new UserExtend(); + userExtend.setId(request.getId()); + userExtend.setAvatar(request.getAvatar()); + userExtendMapper.insert(userExtend); + } else { + userExtend.setAvatar(request.getAvatar()); + userExtendMapper.updateByPrimaryKey(userExtend); + } + } + + return userMapper.updateByPrimaryKeySelective(editUser) > 0; + } + + public boolean updatePassword(PersonalUpdatePasswordRequest request) { + this.checkOldPassword(request.getId(), request.getOldPassword()); + return extUserMapper.updatePasswordByUserId(request.getId(), request.getNewPassword()) > 0; + } + + /** + * 根据ID获取用户ID, 名称集合 + */ + public Map getUserMapByIds(List userIds) { + List userOptions = baseUserMapper.selectUserOptionByIds(userIds); + return userOptions.stream().collect(Collectors.toMap(OptionDTO::getId, OptionDTO::getName)); + } +}