wip(semantic):数据æapi接口改为集中式

applications/api/system/__init__.py

@@ -0,0 +1,12 @@
+from flask_restful import Api
+
+from .file import FilePhotos, FileTable
+from .passport import Login
+
+
+def register_system_api(api_bp):
+    sys_api = Api(api_bp)
+
+    sys_api.add_resource(FilePhotos, '/file/photos')
+    sys_api.add_resource(FileTable, '/file/photo/<int:photo_id>')
+    sys_api.add_resource(Login, '/passport/login')

applications/api/system/file.py

@@ -0,0 +1,69 @@
+import os
+
+from flask import request, jsonify, current_app
+from flask_restful import Resource, marshal
+from sqlalchemy import desc
+
+from applications.common.serialization import photo_fields
+from applications.common.utils.http import fail_api, success_api, table_api
+from applications.common.utils.rights import authorize
+from applications.common.utils.upload import upload_one, delete_photo_by_id
+from applications.extensions import db
+from applications.models import FilePhoto
+
+
+class FilePhotos(Resource):
+
+    @authorize("admin:file:main", log=True)
+    def get(self):
+        page = request.args.get('page', type=int)
+        limit = request.args.get('limit', type=int)
+        photo_paginate = FilePhoto.query.order_by(desc(FilePhoto.create_at)).paginate(page=page, per_page=limit,
+                                                                                      error_out=False)
+        data = marshal(photo_paginate.items, photo_fields)
+        return table_api(data=data, count=photo_paginate.total, code=0)
+
+    @authorize("admin:file:add", log=True)
+    def post(self):
+        if 'file' in request.files:
+            photo = request.files['file']
+            mime = request.files['file'].content_type
+            file_url = upload_one(photo=photo, mime=mime)
+
+            res = {
+                "msg": "上传成功",
+                "code": 0,
+                "success": True,
+                "data":
+                    {"src": file_url}
+            }
+            return jsonify(res)
+        return fail_api()
+
+    @authorize("admin:file:delete", log=True)
+    def delete(self):
+        """图片批量删除"""
+        # TODO bugs 图片删除失败
+        ids = request.form.getlist('ids[]')
+        photo_name = FilePhoto.query.filter(FilePhoto.id.in_(ids)).all()
+        upload_url = current_app.config.get("UPLOADED_PHOTOS_DEST")
+        for p in photo_name:
+            os.remove(upload_url + '/' + p.name)
+        photo = FilePhoto.query.filter(FilePhoto.id.in_(ids)).delete(synchronize_session=False)
+        db.session.commit()
+        if photo:
+            return success_api(msg="删除成功")
+        else:
+            return fail_api(msg="删除失败")
+
+
+class FileTable(Resource):
+    """图片数据"""
+
+    @authorize("admin:file:delete", log=True)
+    def delete(self, photo_id):
+        res = delete_photo_by_id(photo_id)
+        if res:
+            return success_api(msg="删除成功")
+        else:
+            return fail_api(msg="删除失败")

applications/api/system/passport.py

@@ -0,0 +1,49 @@
+from flask import render_template, make_response
+from flask import session, redirect, url_for, request
+from flask_login import current_user, login_user
+from flask_restful import Resource, reqparse
+
+from applications.common.admin_log import login_log
+from applications.common.gen_captcha import add_auth_session
+from applications.common.utils.http import fail_api, success_api
+from applications.models import CompanyUser
+
+
+class Login(Resource):
+    login_req = reqparse.RequestParser(bundle_errors=True)
+    login_req.add_argument('username', type=str, help='请输入用户名', required=True)
+    login_req.add_argument('password', type=str, help='请输入密码', required=True)
+    login_req.add_argument('captcha', type=str, help='请输入验证码', required=True)
+
+    def get(self):
+        if current_user.is_authenticated:
+            return redirect(url_for('admin.index'))
+        # TODO 分离视图操作 最终实现接口登录与视图登录两套逻辑
+        return make_response(render_template('index/login.html'))
+
+    def post(self):
+
+        req = self.login_req.parse_args()
+
+        s_code = session.get("code", None)
+
+        if req.captcha != s_code:
+            return fail_api(msg="验证码错误")
+        user = CompanyUser.query.filter_by(username=req.username).first()
+
+        if user is None:
+            return fail_api(msg="不存在的用户")
+
+        if user.enable == 0:
+            return fail_api(msg="用户被暂停使用")
+
+        if user.validate_password(req.password):
+            # 登录
+            login_user(user)
+            # 记录登录日志
+            login_log(request, uid=user.id, is_access=True)
+            # 存入权限
+            add_auth_session()
+            return success_api(msg="登录成功")
+        login_log(request, uid=user.id, is_access=False)
+        return fail_api(msg="用户名或密码错误")