pear-admin-flask/applications/views/admin/user.py

from flask import Blueprint, render_template, request
from flask_login import login_required, current_user
from applications.models.admin_user import User
from applications.models.admin_role import Role
from applications.service.admin import user_curd
from applications.service.common.response import table_api, fail_api, success_api
from applications.service.common.validate import xss_escape
from applications.service.route_auth import authorize

admin_user = Blueprint('adminUser', __name__, url_prefix='/admin/user')


# 用户管理
@admin_user.route('/')
@authorize("admin:user:main", log=True)
def main():
    return render_template('admin/user/main.html')


#   用户分页查询
@admin_user.route('/data')
@authorize("admin:user:main", log=True)
def data():
    page = request.args.get('page', type=int)
    limit = request.args.get('limit', type=int)
    realName = xss_escape(request.args.get('realName', type=str))
    username = xss_escape(request.args.get('username', type=str))
    deptId = request.args.get('deptId', type=int)
    filters = {}
    if realName:
        filters["realname"] = ('%' + realName + '%')
    if username:
        filters["username"] = ('%' + username + '%')
    user_data, count = user_curd.get_user_data_dict(page=page, limit=limit, filters=filters,deptId=deptId)
    return table_api(data=user_data, count=count)


# 用户增加
@admin_user.route('/add')
@authorize("admin:user:add",log=True)
def add():
    roles = Role.query.all()
    return render_template('admin/user/add.html', roles=roles)


@admin_user.route('/save', methods=['POST'])
@authorize("admin:user:add", log=True)
def save():
    req_json = request.json
    a = req_json.get("roleIds")
    username = xss_escape(req_json.get('username'))
    realName = xss_escape(req_json.get('realName'))
    password = xss_escape(req_json.get('password'))
    role_ids = a.split(',')

    if not username or not realName or not password:
        return fail_api(msg="账号姓名密码不得为空")

    if user_curd.is_user_exists(username):
        return fail_api(msg="用户已经存在")

    id = user_curd.add_user(username, realName, password)
    user_curd.add_user_role(id, role_ids)

    return success_api(msg="增加成功")


# 删除用户
@admin_user.route('/remove/<int:id>', methods=['DELETE'])
@authorize("admin:user:remove", log=True)
def delete(id):
    res = user_curd.delete_by_id(id)
    if not res:
        return fail_api(msg="删除失败")
    return success_api(msg="删除成功")


#  编辑用户
@admin_user.route('/edit/<int:id>', methods=['GET', 'POST'])
@authorize("admin:user:edit", log=True)
def edit(id):
    user = User.query.filter_by(id=id).first()
    roles = Role.query.all()
    checked_roles = []
    for r in user.role:
        checked_roles.append(r.id)
    return render_template('admin/user/edit.html', user=user, roles=roles, checked_roles=checked_roles)


#  编辑用户
@admin_user.route('/update', methods=['PUT'])
@authorize("admin:user:edit", log=True)
def update():
    req_json = request.json
    a = xss_escape(req_json.get("roleIds"))
    id = xss_escape(req_json.get("userId"))
    username = xss_escape(req_json.get('username'))
    realName = xss_escape(req_json.get('realName'))
    deptId = xss_escape(req_json.get('deptId'))
    role_ids = a.split(',')
    user_curd.update_user(id, username, realName,deptId)
    user_curd.update_user_role(id, role_ids)
    return success_api(msg="更新成功")


# 个人中心
@admin_user.route('/center')
@login_required
def center():
    user_info = current_user
    user_logs = user_curd.get_current_user_logs()
    return render_template('admin/user/center.html', user_info=user_info, user_logs=user_logs)


# 修改头像
@admin_user.route('/profile')
@login_required
def profile():
    return render_template('admin/user/profile.html')


# 修改头像
@admin_user.route('/updateAvatar', methods=['PUT'])
@login_required
def updateAvatar():
    url = request.json.get("avatar").get("src")
    if not user_curd.update_avatar(url):
        return fail_api(msg="出错啦")
    return success_api(msg="修改成功")


# 修改当前用户信息
@admin_user.route('/updateInfo', methods=['PUT'])
@login_required
def updateInfo():
    res_json = request.json
    if not user_curd.update_current_user_info(req_json=res_json):
        return fail_api(msg="出错啦")
    return success_api(msg="更新成功")


# 修改当前用户密码
@admin_user.route('/editPassword', methods=['GET'])
@login_required
def editPassword():
    return render_template('admin/user/edit_password.html')


# 修改当前用户密码
@admin_user.route('/editPassword', methods=['PUT'])
@login_required
def edit_password_put():
    res_json = request.json
    return user_curd.edit_password(res_json=res_json)


# 启用用户
@admin_user.route('/enable', methods=['PUT'])
@authorize("admin:user:edit",log=True)
def enable():
    id = request.json.get('userId')
    if id:
        res = user_curd.enable_status(id)
        if not res:
            return fail_api(msg="出错啦")
        return success_api(msg="启动成功")
    return fail_api(msg="数据错误")


# 禁用用户
@admin_user.route('/disable', methods=['PUT'])
@authorize("admin:user:edit",log=True)
def disenable():
    id = request.json.get('userId')
    if id:
        res = user_curd.disable_status(id)
        if not res:
            return fail_api(msg="出错啦")
        return success_api(msg="禁用成功")
    return fail_api(msg="数据错误")


# 批量删除
@admin_user.route('/batchRemove', methods=['DELETE'])
@authorize("admin:user:remove", log=True)
def batchRemove():
    ids = request.form.getlist('ids[]')
    user_curd.batch_remove(ids)
    return success_api(msg="批量删除成功")