wechatWeb/api/controller_admin/biz_user.js

const Sequelize = require("sequelize");
const { find_for_export, normalize_for_write, build_search_where } = require("../service/biz_query_helpers");
const baseModel = require("../../middleware/baseModel");
const tokenLogic = require("../service/biz_token_logic");
const audit = require("../service/biz_audit_service");

module.exports = {
  "POST /biz_user/page": async (ctx) => {
    const body = ctx.getBody();
    const param = body.param || body;
    const pageOption = param.pageOption || {};
    const seachOption = param.seachOption || {};
    const pageNum = parseInt(pageOption.page, 10) || 1;
    const pageSize = parseInt(pageOption.pageSize, 10) || 20;
    const offset = (pageNum - 1) * pageSize;
    const model = baseModel.biz_user;
    const where = build_search_where(model, seachOption);
    const { count, rows } = await model.findAndCountAll({
      where,
      offset,
      limit: pageSize,
      order: [["id", "DESC"]],
      attributes: {
        include: [
          [
            Sequelize.literal(
              `(SELECT COUNT(*) FROM biz_api_tokens WHERE biz_api_tokens.user_id = biz_user.id)`
            ),
            "token_count",
          ],
        ],
      },
    });
    ctx.success({ rows, count });
  },
  "POST /biz_user/add": async (ctx) => {
    const body = ctx.getBody();
    const payload = normalize_for_write(baseModel.biz_user, body, { for_create: true });
    const row = await baseModel.biz_user.create(payload);
    await audit.logAudit({
      admin_user_id: audit.pickAdminId(ctx),
      biz_user_id: row.id,
      action: "biz_user.add",
      resource_type: "biz_user",
      resource_id: row.id,
      detail: { name: row.name },
    });
    ctx.success(row);
  },
  "POST /biz_user/edit": async (ctx) => {
    const body = ctx.getBody();
    const id = body.id;
    if (id === undefined || id === null || id === "") throw new Error("缺少 id");
    const payload = normalize_for_write(baseModel.biz_user, body, { for_create: false });
    delete payload.id;
    await baseModel.biz_user.update(payload, { where: { id } });
    await audit.logAudit({
      admin_user_id: audit.pickAdminId(ctx),
      biz_user_id: body.id,
      action: "biz_user.edit",
      resource_type: "biz_user",
      resource_id: body.id,
    });
    ctx.success({});
  },
  "POST /biz_user/del": async (ctx) => {
    const body = ctx.getBody();
    const id = body.id !== undefined ? body.id : body;
    if (id === undefined || id === null || id === "") throw new Error("缺少 id");
    await baseModel.biz_user.destroy({ where: { id } });
    await audit.logAudit({
      admin_user_id: audit.pickAdminId(ctx),
      biz_user_id: body.id,
      action: "biz_user.del",
      resource_type: "biz_user",
      resource_id: body.id,
    });
    ctx.success({});
  },
  "GET /biz_user/detail": async (ctx) => {
    const q = ctx.query || {};
    const id = q.id || q.ID;
    if (id === undefined || id === null || id === "") throw new Error("缺少 id");
    const user = await baseModel.biz_user.findByPk(id);
    if (!user) {
      return ctx.fail("用户不存在");
    }
    const subscriptions = await baseModel.biz_subscription.findAll({
      where: { user_id: id },
      order: [["id", "DESC"]],
      limit: 10,
    });
    const tokenCount = await baseModel.biz_api_token.count({
      where: { user_id: id },
    });
    const tokens = await baseModel.biz_api_token.findAll({
      where: { user_id: id },
      order: [["id", "DESC"]],
      limit: 200,
      attributes: ["id", "user_id", "plan_id", "token_name", "status", "expire_at", "last_used_at"],
    });
    ctx.success({
      user,
      subscriptions,
      tokenCount,
      tokens,
    });
  },
  "GET /biz_user/all": async (ctx) => {
    const rows = await baseModel.biz_user.findAll({
      limit: 2000,
      order: [["id", "DESC"]],
    });
    ctx.success(rows);
  },
  "POST /biz_user/disable": async (ctx) => {
    const body = ctx.getBody();
    const id = body.id;
    if (id == null) return ctx.fail("缺少 id");
    await baseModel.biz_user.update({ status: "disabled" }, { where: { id } });
    await audit.logAudit({
      admin_user_id: audit.pickAdminId(ctx),
      biz_user_id: id,
      action: "biz_user.disable",
      resource_type: "biz_user",
      resource_id: id,
    });
    ctx.success({});
  },
  "POST /biz_user/enable": async (ctx) => {
    const body = ctx.getBody();
    const id = body.id;
    if (id == null) return ctx.fail("缺少 id");
    await baseModel.biz_user.update({ status: "active" }, { where: { id } });
    await audit.logAudit({
      admin_user_id: audit.pickAdminId(ctx),
      biz_user_id: id,
      action: "biz_user.enable",
      resource_type: "biz_user",
      resource_id: id,
    });
    ctx.success({});
  },
  "POST /biz_user/export": async (ctx) => {
    const body = ctx.getBody();
    const res = await find_for_export(baseModel.biz_user, "biz_user", body);
    ctx.success(res);
  },
  "POST /biz_user/revoke_all_tokens": async (ctx) => {
    const body = ctx.getBody();
    const userId = body.user_id != null ? body.user_id : body.id;
    if (userId == null) return ctx.fail("缺少 user_id");
    const n = await tokenLogic.revokeAllForUser(userId);
    await audit.logAudit({
      admin_user_id: audit.pickAdminId(ctx),
      biz_user_id: userId,
      action: "biz_token.revoke_all",
      resource_type: "biz_user",
      resource_id: userId,
      detail: { affected: n },
    });
    ctx.success({ revoked: n });
  },
};