93 lines
3.3 KiB
Python
93 lines
3.3 KiB
Python
#!/usr/bin/python
|
||
# -*- coding: utf-8 -*-
|
||
# @version : 1.0
|
||
# @Create Time : 2022/11/9 10:15
|
||
# @File : login.py
|
||
# @IDE : PyCharm
|
||
# @desc : 登录验证装饰器
|
||
|
||
from fastapi import Request
|
||
from pydantic import BaseModel, field_validator
|
||
from sqlalchemy.ext.asyncio import AsyncSession
|
||
from application.settings import DEFAULT_AUTH_ERROR_MAX_NUMBER, DEMO, REDIS_DB_ENABLE
|
||
from apps.vadmin.auth import crud, schemas
|
||
from core.database import redis_getter
|
||
from core.validator import vali_telephone
|
||
from utils.count import Count
|
||
|
||
|
||
class LoginForm(BaseModel):
|
||
telephone: str
|
||
password: str
|
||
method: str = '0' # 认证方式，0：密码登录，1：短信登录，2：微信一键登录
|
||
platform: str = '0' # 登录平台，0：PC端管理系统，1：移动端管理系统
|
||
|
||
# 重用验证器：https://docs.pydantic.dev/dev-v2/usage/validators/#reuse-validators
|
||
normalize_telephone = field_validator('telephone')(vali_telephone)
|
||
|
||
|
||
class WXLoginForm(BaseModel):
|
||
telephone: str | None = None
|
||
code: str
|
||
method: str = '2' # 认证方式，0：密码登录，1：短信登录，2：微信一键登录
|
||
platform: str = '1' # 登录平台，0：PC端管理系统，1：移动端管理系统
|
||
|
||
|
||
class LoginResult(BaseModel):
|
||
status: bool | None = False
|
||
user: schemas.UserPasswordOut | None = None
|
||
msg: str | None = None
|
||
|
||
class Config:
|
||
arbitrary_types_allowed = True
|
||
|
||
|
||
class LoginValidation:
|
||
|
||
"""
|
||
验证用户登录时提交的数据是否有效
|
||
"""
|
||
|
||
def __init__(self, func):
|
||
self.func = func
|
||
|
||
async def __call__(self, data: LoginForm, db: AsyncSession, request: Request) -> LoginResult:
|
||
self.result = LoginResult()
|
||
if data.platform not in ["0", "1"] or data.method not in ["0", "1"]:
|
||
self.result.msg = "无效参数"
|
||
return self.result
|
||
user = await crud.UserDal(db).get_data(telephone=data.telephone, v_return_none=True)
|
||
if not user:
|
||
self.result.msg = "该手机号不存在！"
|
||
return self.result
|
||
|
||
result = await self.func(self, data=data, user=user, request=request)
|
||
|
||
if REDIS_DB_ENABLE:
|
||
count_key = f"{data.telephone}_password_auth" if data.method == '0' else f"{data.telephone}_sms_auth"
|
||
count = Count(redis_getter(request), count_key)
|
||
else:
|
||
count = None
|
||
|
||
if not result.status:
|
||
self.result.msg = result.msg
|
||
if not DEMO and count:
|
||
number = await count.add(ex=86400)
|
||
if number >= DEFAULT_AUTH_ERROR_MAX_NUMBER:
|
||
await count.reset()
|
||
# 如果等于最大次数，那么就将用户 is_active=False
|
||
user.is_active = False
|
||
await db.flush()
|
||
elif not user.is_active:
|
||
self.result.msg = "此手机号已被冻结！"
|
||
elif data.platform in ["0", "1"] and not user.is_staff:
|
||
self.result.msg = "此手机号无权限！"
|
||
else:
|
||
if not DEMO and count:
|
||
await count.delete()
|
||
self.result.msg = "OK"
|
||
self.result.status = True
|
||
self.result.user = schemas.UserPasswordOut.model_validate(user)
|
||
await crud.UserDal(db).update_login_info(user, request.client.host)
|
||
return self.result
|