基本构建

applications/service/CaptchaTool.py

@@ -0,0 +1,26 @@
+from captcha.image import ImageCaptcha
+from PIL import Image
+import random
+
+
+# 定义随机方法
+def random_captcha():
+    # 定义一个容器
+    captcha_text = []
+    for i in range(4):
+        # 定义验证码字符
+        c = random.choice(['0', '1', '2', '4', '6', '8'])
+        captcha_text.append(c)
+    # 返回一个随机生成的字符串
+    return ''.join(captcha_text)
+
+
+# 生成验证码方法
+def gen_captcha():
+    # 定义图片对象
+    image = ImageCaptcha()
+    # 获取字符串
+    captcha_text = random_captcha()
+    # 生成图像
+    captcha_image = Image.open(image.generate(captcha_text))
+    return captcha_text, captcha_image

applications/service/OriginalDb.py

@@ -0,0 +1,106 @@
+import datetime
+import json
+
+import pymysql
+from applications.config.database import HOST, USERNAME, PASSWORD, DATABASE, PORT
+
+DB_CONFIG = {
+    "host": HOST,
+    "port": int(PORT),
+    "user": USERNAME,
+    "password": PASSWORD,
+    "db": DATABASE,
+    "charset": "utf8"
+}
+
+
+class SQLManager(object):
+
+    # 初始化实例方法
+    def __init__(self):
+        self.conn = None
+        self.cursor = None
+        self.connect()
+
+    # 连接数据库
+    def connect(self):
+        self.conn = pymysql.connect(
+            host=DB_CONFIG.get('host'),
+            port=DB_CONFIG.get('port'),
+            user=DB_CONFIG.get('user'),
+            passwd=DB_CONFIG.get('password'),
+            db=DB_CONFIG.get('db'),
+        )
+        self.cursor = self.conn.cursor(cursor=pymysql.cursors.DictCursor)
+
+    # 查询多条数据
+
+    def get_list(self, sql, args=None):
+        self.cursor.execute(sql, args)
+        result = self.cursor.fetchall()
+        return result
+
+    # 查询多条数据后关闭
+    def get_list_close(self, sql, args=None):
+        self.cursor.execute(sql, args)
+        result = self.cursor.fetchall()
+        self.close()
+        return result
+
+    # 查询单条数据
+    def get_one(self, sql, args=None):
+        self.cursor.execute(sql, args)
+        result = self.cursor.fetchone()
+        return result
+
+    # 查询单条数据后关闭
+    def get_one_close(self, sql, args=None):
+        self.cursor.execute(sql, args)
+        result = self.cursor.fetchone()
+        self.close()
+        return result
+
+    # 执行单条SQL语句
+    def moddify(self, sql, args=None):
+        self.cursor.execute(sql, args)
+        self.conn.commit()
+
+    # 执行多条SQL语句
+    def multi_modify(self, sql, args=None):
+        self.cursor.executemany(sql, args)
+        self.conn.commit()
+
+    # 创建单条记录的语句
+    def create(self, sql, args=None):
+        self.cursor.execute(sql, args)
+        self.conn.commit()
+        last_id = self.cursor.lastrowid
+        return last_id
+
+    # 关闭数据库cursor和连接
+    def close(self):
+        self.cursor.close()
+        self.conn.close()
+
+    # 进入with语句自动执行
+    def __enter__(self):
+        return self
+
+    # 退出with语句块自动执行
+    def __exit__(self, exc_type, exc_val, exc_tb):
+        self.close()
+
+
+"""
+原生查询dict的datetime解析器
+用法
+json.dumps(dictxxx, cls=DateEncoder)
+"""
+
+
+class DateEncoder(json.JSONEncoder):
+    def default(self, obj):
+        if isinstance(obj, datetime.datetime):
+            return obj.strftime("%Y-%m-%d %H:%M:%S")
+        else:
+            return json.JSONEncoder.default(self, obj)

applications/service/admin/file.py

@@ -0,0 +1,47 @@
+import os
+from flask import current_app
+from flask_marshmallow import Marshmallow
+from marshmallow import fields
+from sqlalchemy import desc
+from applications.models import db
+from applications.models.admin import Photo
+from applications.service.upload import photos
+ma = Marshmallow()
+
+
+class PhotoSchema(ma.Schema):
+    id = fields.Integer()
+    name = fields.Str()
+    href = fields.Str()
+    mime = fields.Str()
+    size = fields.Str()
+    ext = fields.Str()
+    create_time = fields.DateTime()
+
+
+def get_photo(page, limit):
+    photo = Photo.query.order_by(desc(Photo.create_time)).paginate(page=page, per_page=limit, error_out=False)
+    count = Photo.query.count()
+    role_schema = PhotoSchema(many=True)
+    output = role_schema.dump(photo.items)
+    return output, count
+
+
+def upload_one(photo,mime):
+    filename = photos.save(photo)
+    file_url = photos.url(filename)
+
+    upload_url = current_app.config.get("UPLOADED_PHOTOS_DEST")
+    size = os.path.getsize(upload_url + '/' + filename)
+    photo = Photo(name=filename, href=file_url, mime=mime, size=size)
+    db.session.add(photo)
+    db.session.commit()
+    return upload_url
+
+def delete_photo_by_id(id):
+    photo_name = Photo.query.filter_by(id=id).first().name
+    photo = Photo.query.filter_by(id=id).delete()
+    db.session.commit()
+    upload_url = current_app.config.get("UPLOADED_PHOTOS_DEST")
+    os.remove(upload_url + '/' + photo_name)
+    return photo

applications/service/admin/index.py

@@ -0,0 +1,83 @@
+from io import BytesIO
+from flask import session, make_response
+from flask_login import current_user
+from flask_marshmallow import Marshmallow
+from marshmallow import fields
+from applications.models.admin import Power
+from applications.service.CaptchaTool import gen_captcha
+
+ma = Marshmallow()
+
+
+# 权限models序列化类
+class PowerSchema(ma.Schema):
+    id = fields.Integer()
+    title = fields.Str(attribute="name")
+    type = fields.Str()
+    code = fields.Str()
+    href = fields.Str(attribute="url")
+    open_type = fields.Str()
+    parent_id = fields.Integer()
+    icon = fields.Str()
+    sort = fields.Integer()
+    create_time = fields.DateTime()
+    update_time = fields.DateTime()
+    enable = fields.Integer()
+
+
+# 授权路由存入session
+def add_auth_session():
+    role = current_user.role
+    user_power = []
+    for i in role:
+        for y in i.power:
+            user_power.append(y.code)
+    session['permissions'] = user_power
+
+
+# 生成菜单树
+def make_menu_tree():
+    # power0 = Power.query.filter(
+    #     Power.type == 0,
+    # ).all()
+    # power1 = Power.query.filter(
+    #     Power.type == 1
+    # ).all()
+    role = current_user.role
+    power0 = []
+    power1 = []
+    for i in role:
+        for y in i.power:
+            if int(y.type) == 0:
+                power0.append(y)
+            else:
+                power1.append(y)
+
+    power_schema = PowerSchema(many=True)  # 用已继承ma.ModelSchema类的自定制类生成序列化类
+    power0_dict = power_schema.dump(power0)  # 生成可序列化对象
+    power1_dict = power_schema.dump(power1)  # 生成可序列化对象
+    # print(power0)
+    # print(power1)
+
+    menu = []
+
+    for p0 in power0_dict:
+        for p1 in power1_dict:
+            if p0.get('id') == p1.get('parent_id'):
+                if p0.get("children") is None:
+                    p0['children'] = []
+                p0['children'].append(p1)
+        menu.append(p0)
+    return menu
+
+
+# 生成验证码
+def get_captcha():
+    code, image = gen_captcha()
+    out = BytesIO()
+    session["code"] = code
+    image.save(out, 'png')
+    out.seek(0)
+    resp = make_response(out.read())
+    resp.content_type = 'image/png'
+    return resp, code

applications/service/admin/power.py

@@ -0,0 +1,73 @@
+from flask_marshmallow import Marshmallow
+from marshmallow import fields
+
+from applications.models import db
+from applications.models.admin import Power, Role
+
+ma = Marshmallow()
+
+
+class PowerSchema(ma.Schema):  # 序列化类
+    powerId = fields.Str(attribute="id")
+    powerName = fields.Str(attribute="name")
+    powerType = fields.Str(attribute="type")
+    powerUrl = fields.Str(attribute="url")
+    openType = fields.Str(attribute="pen_type")
+    parentId = fields.Str(attribute="parent_id")
+    icon = fields.Str()
+    sort = fields.Integer()
+    create_time = fields.DateTime()
+    update_time = fields.DateTime()
+    enable = fields.Integer()
+
+
+def get_power_dict():
+    power = Power.query.all()
+    power_schema = PowerSchema(many=True)
+    power_dict = power_schema.dump(power)
+    return power_dict
+
+
+def select_parent():
+    power = Power.query.all()
+    power_schema = PowerSchema(many=True)
+    power_dict = power_schema.dump(power)
+    power_dict.append({"powerId": 0, "powerName": "顶级权限", "parentId": -1})
+    return power_dict
+
+
+def save_power(req):
+    icon = req.get("icon")
+    openType = req.get("openType")
+    parentId = req.get("parentId")
+    powerCode = req.get("powerCode")
+    powerName = req.get("powerName")
+    powerType = req.get("powerType")
+    powerUrl = req.get("powerUrl")
+    power = Power(
+        icon=icon,
+        open_type=openType,
+        parent_id=parentId,
+        code=powerCode,
+        name=powerName,
+        type=powerType,
+        url=powerUrl
+    )
+    r = db.session.add(power)
+    db.session.commit()
+    return r
+
+
+# 删除权限（目前没有判断父节点自动删除子节点）
+def remove_power(id):
+    power = Power.query.filter_by(id=id).first()
+    role_id_list = []
+    roles = power.role
+    for role in roles:
+        role_id_list.append(role.id)
+    roles = Role.query.filter(Role.id.in_(role_id_list)).all()
+    for p in roles:
+        power.role.remove(p)
+    r = Power.query.filter_by(id=id).delete()
+    db.session.commit()
+    return r

applications/service/admin/role.py

@@ -0,0 +1,102 @@
+from flask_marshmallow import Marshmallow
+from marshmallow import fields
+
+from applications.models import db
+from applications.models.admin import Role, Power
+
+ma = Marshmallow()
+
+
+class RoleSchema(ma.Schema):
+    id = fields.Integer()
+    roleName = fields.Str(attribute="name")
+    roleCode = fields.Str(attribute="code")
+    enable = fields.Str()
+    remark = fields.Str()
+    details = fields.Str()
+    sort = fields.Integer()
+    create_at = fields.DateTime()
+    update_at = fields.DateTime()
+
+
+class PowerSchema(ma.Schema):  # 序列化类
+    powerId = fields.Str(attribute="id")
+    powerName = fields.Str(attribute="name")
+    powerType = fields.Str(attribute="type")
+    powerUrl = fields.Str(attribute="url")
+    openType = fields.Str(attribute="pen_type")
+    parentId = fields.Str(attribute="parent_id")
+    icon = fields.Str()
+    sort = fields.Integer()
+    create_time = fields.DateTime()
+    update_time = fields.DateTime()
+    enable = fields.Integer()
+
+
+'''
+获取用户的sqlalchemy对象
+分页器
+'''
+
+
+def get_role_data(page, limit):
+    role = Role.query.paginate(page=page, per_page=limit, error_out=False)
+    count = Role.query.count()
+    return role, count
+
+
+def get_role_data_dict(page, limit):
+    role, count = get_role_data(page, limit)
+    role_schema = RoleSchema(many=True)  # 用已继承ma.ModelSchema类的自定制类生成序列化类
+    output = role_schema.dump(role.items)  # 生成可序列化对象
+    return output, count
+
+
+def add_role(req):
+    details = req.get("details")
+    enable = req.get("enable")
+    roleCode = req.get("roleCode")
+    roleName = req.get("roleName")
+    sort = req.get("sort")
+    role = Role(
+        details=details,
+        enable=enable,
+        code=roleCode,
+        name=roleName,
+        sort=sort
+    )
+    db.session.add(role)
+    db.session.commit()
+
+
+def get_role_power(id):
+    role = Role.query.filter_by(id=id).first()
+    check_powers = role.power
+    check_powers_list = []
+    for cp in check_powers:
+        check_powers_list.append(cp.id)
+    powers = Power.query.all()
+    power_schema = PowerSchema(many=True)  # 用已继承ma.ModelSchema类的自定制类生成序列化类
+    output = power_schema.dump(powers)  # 生成可序列化对象
+    for i in output:
+        if int(i.get("powerId")) in check_powers_list:
+            i["checkArr"] = "1"
+        else:
+            i["checkArr"] = "0"
+    return output
+
+
+def update_role_power(id, power_list):
+    role = Role.query.filter_by(id=id).first()
+    power_id_list = []
+    for p in role.power:
+        power_id_list.append(p.id)
+        print(p.id)
+    print(power_id_list)
+    powers = Power.query.filter(Power.id.in_(power_id_list)).all()
+    for p in powers:
+        role.power.remove(p)
+    powers = Power.query.filter(Power.id.in_(power_list)).all()
+    for p in powers:
+        role.power.append(p)
+    db.session.commit()

applications/service/admin/user.py

@@ -0,0 +1,117 @@
+from flask import jsonify
+from flask_login import current_user
+from flask_marshmallow import Marshmallow
+from marshmallow import fields
+from sqlalchemy.sql import exists
+
+from applications.models import db
+from applications.models.admin import User, Role
+from sqlalchemy.orm.dynamic import AppenderQuery
+
+ma = Marshmallow()
+
+
+# 用户models的序列化类
+class UserSchema(ma.Schema):
+    id = fields.Integer()
+    username = fields.Str()
+    realname = fields.Str()
+    enable = fields.Bool()
+    create_at = fields.DateTime()
+    update_at = fields.DateTime()
+
+
+'''
+获取用户的sqlalchemy对象
+分页器
+'''
+
+
+def get_user_data(page, limit):
+    user = User.query.paginate(page=page, per_page=limit, error_out=False)
+    count = User.query.count()
+    return user, count
+
+
+'''
+获取用户的dict数据
+分页器
+'''
+
+
+def get_user_data_dict(page, limit):
+    user, count = get_user_data(page, limit)
+    user_schema = UserSchema(many=True)  # 用已继承ma.ModelSchema类的自定制类生成序列化类
+    output = user_schema.dump(user.items)  # 生成可序列化对象
+    return output, count
+
+
+'''
+通过名称获取用户
+'''
+
+
+def get_user_by_name(username):
+    return User.query.filter_by(username=username).first()
+
+
+# 判断用户是否存在
+def is_user_exists(username):
+    res = User.query.filter_by(username=username).count()
+    return bool(res)
+
+
+# 增加用户
+def add_user(username, realName, password):
+    user = User(username=username, realname=realName)
+    user.set_password(password)
+    db.session.add(user)
+    db.session.commit()
+
+
+# 更新用户信息
+def update_user(id, username, realname):
+    user = User.query.filter_by(id=id).update({'username': username, 'realname': realname})
+    db.session.commit()
+    return user
+
+
+def delete_by_id(id):
+    user = User.query.filter_by(id=id).delete()
+    return user
+
+
+def update_status(status):
+    user = User.query.filter_by(id=id).update({'status': status})
+    if user:
+        db.session.commit()
+        return jsonify(msg="更新成功", code=200)
+    return jsonify(msg="出错啦", code=999)
+
+
+def batch_remove(ids):
+    user = User.query.filter(User.id.in_(ids)).delete(synchronize_session=False)
+    db.session.commit()
+    if user:
+        res = jsonify(msg="批量删除成功", code=200)
+        return jsonify(res)
+    else:
+        res = jsonify(msg="批量删除失败", code=999)
+        return jsonify(res)
+
+
+def update_user_role(id, roles_list):
+    user = User.query.filter_by(id=id).first()
+    roles_id = []
+    for role in user.role:
+        print(role)
+        roles_id.append(role.id)
+    print('---------------------')
+    print(roles_id)
+    roles = Role.query.filter(Role.id.in_(roles_id)).all()
+    for r in roles:
+        user.role.remove(r)
+    roles = Role.query.filter(Role.id.in_(roles_list)).all()
+    for r in roles:
+        user.role.append(r)
+    db.session.commit()

applications/service/admin_log.py

@@ -0,0 +1,48 @@
+from flask_login import current_user
+
+from applications.models import db
+from applications.models.admin import AdminLog
+
+
+def login_log(request):
+    info = {
+        'method': request.method,
+        'url': request.path,
+        'ip': request.remote_addr,
+        'user_agent': request.headers.get('User-Agent'),
+        'desc': request.form.get('username'),
+        'uid': current_user.id
+
+    }
+    log = AdminLog(url=info.get('url'), ip=info.get('ip'), user_agent=info.get('user_agent'), desc=info.get('desc'),
+                   uid=info.get('uid'), method=info.get('method'))
+    db.session.add(log)
+    db.session.flush()
+    db.session.commit()
+    return log.id
+
+
+def admin_log(request, is_access):
+    info = {
+        'method': request.method,
+        'url': request.path,
+        'ip': request.remote_addr,
+        'user_agent': request.headers.get('User-Agent'),
+        'desc': str(dict(request.values)),
+        'uid': current_user.id,
+        'success':int(is_access)
+
+    }
+    log = AdminLog(
+        url=info.get('url'),
+        ip=info.get('ip'),
+        user_agent=info.get('user_agent'),
+        desc=info.get('desc'),
+        uid=info.get('uid'),
+        method=info.get('method'),
+        success=info.get('success')
+    )
+    db.session.add(log)
+    db.session.commit()
+
+    return log.id

applications/service/deBug.py

@@ -0,0 +1,6 @@
+from flask_debugtoolbar import DebugToolbarExtension
+
+
+def OpenDug(app):
+    toolbar = DebugToolbarExtension()
+    toolbar.init_app(app)

applications/service/login.py

@@ -0,0 +1,15 @@
+from flask_login import LoginManager
+
+
+def init_flask_login(app):
+    login_manager = LoginManager()
+    login_manager.init_app(app)
+
+    login_manager.login_view = 'adminIndex.login'
+    login_manager.login_message = u'请登录以访问此页面'
+
+    @login_manager.user_loader
+    def load_user(user_id):
+        from applications.models.admin import User
+        user = User.query.get(int(user_id))
+        return user

applications/service/menuTreeYaml.py

@@ -0,0 +1,33 @@
+import yaml
+import glob
+
+
+def read_yaml(yaml_file_path):
+    try:
+        with open(yaml_file_path, 'rb') as f:
+            cf = f.read()
+    except FileNotFoundError:
+        print('未找到配置文件')
+    c = yaml.safe_load(cf)
+    return c
+
+
+def read_all_yaml(menu_yaml_path):
+    lista = []
+    lst = glob.glob(menu_yaml_path)
+    for l in lst:
+        a = read_yaml(l)
+        lista.append(a)
+    return lista
+
+
+def make_tree(menu_yaml_path, role):
+    a = read_all_yaml(menu_yaml_path)
+    auth_tree = []
+
+    for i in a:
+        if role in i.get('auth'):
+            i_date = i.get('data')
+            auth_tree.append(i_date)
+    auth_tree.sort(key=lambda y:y['id'])
+    return auth_tree

applications/service/route_auth.py

@@ -0,0 +1,40 @@
+from functools import wraps
+from flask import abort, request, jsonify, session
+from flask_login import login_required
+from applications.service.admin_log import admin_log
+
+
+def PreAuthorize(power: str):
+    def decorator(func):
+        @login_required
+        @wraps(func)
+        def wrapper(*args, **kwargs):
+            if not power in session.get('permissions'):
+                if request.method == 'GET':
+                    abort(403)
+                else:
+                    return jsonify(code=403, msg="权限不足!")
+            return func(*args, **kwargs)
+
+        return wrapper
+
+    return decorator
+
+
+def PreAuthorizeAndLog(power: str):
+    def decorator(func):
+        @login_required
+        @wraps(func)
+        def wrapper(*args, **kwargs):
+            if not power in session['permissions']:
+                admin_log(request=request, is_access=False)
+                if request.method == 'GET':
+                    abort(403)
+                else:
+                    return jsonify(code=403, msg="权限不足!")
+            admin_log(request=request, is_access=True)
+            return func(*args, **kwargs)
+
+        return wrapper
+
+    return decorator

applications/service/upload.py

@@ -0,0 +1,4 @@
+from flask_uploads import UploadSet, IMAGES
+
+
+photos = UploadSet('photos', IMAGES)