forked from Gitlink/microservices
feat(数据可视化监测):权限控制,可视化仅gitlink管理员可见
This commit is contained in:
parent
8a3777e0f2
commit
2fb09332c6
|
|
@ -0,0 +1,46 @@
|
|||
package com.microservices.dss.Interceptor;
|
||||
|
||||
import com.microservices.common.core.utils.SpringUtils;
|
||||
import com.microservices.dss.annotation.GitlinkAdminAccessRequired;
|
||||
import com.microservices.dss.projects.mapper.UserMapper;
|
||||
import org.springframework.stereotype.Component;
|
||||
import org.springframework.web.method.HandlerMethod;
|
||||
import org.springframework.web.servlet.HandlerInterceptor;
|
||||
import javax.servlet.http.HttpServletRequest;
|
||||
import javax.servlet.http.HttpServletResponse;
|
||||
import java.lang.reflect.Method;
|
||||
|
||||
import static com.microservices.common.security.auth.AuthUtil.getGitLinkRequestToken;
|
||||
|
||||
@Component
|
||||
public class GitlinkAdminAccessInterceptor implements HandlerInterceptor {
|
||||
|
||||
public UserMapper userMapper = SpringUtils.getBean(UserMapper.class);
|
||||
|
||||
@Override
|
||||
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
|
||||
if (handler instanceof HandlerMethod) {
|
||||
HandlerMethod handlerMethod = (HandlerMethod) handler;
|
||||
Method method = handlerMethod.getMethod();
|
||||
if (method.isAnnotationPresent(GitlinkAdminAccessRequired.class)) {
|
||||
String token = getGitLinkRequestToken(request);
|
||||
Long userId = userMapper.getUserIdByToken(token); // 根据token获取用户ID
|
||||
if (userId == null) {
|
||||
response.setStatus(HttpServletResponse.SC_FORBIDDEN); // 403 Forbidden
|
||||
return false;
|
||||
}
|
||||
Boolean isAdmin = userMapper.getAdminStatus(userId); // 根据用户ID获取admin字段值
|
||||
if (isAdmin == null || !isAdmin) {
|
||||
response.setStatus(HttpServletResponse.SC_FORBIDDEN); // 403 Forbidden
|
||||
return false;
|
||||
}
|
||||
}
|
||||
}
|
||||
return true;
|
||||
}
|
||||
|
||||
@Override
|
||||
public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
|
||||
// 可以在这里添加一些完成后的处理逻辑
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,10 @@
|
|||
package com.microservices.dss.annotation;
|
||||
import java.lang.annotation.ElementType;
|
||||
import java.lang.annotation.Retention;
|
||||
import java.lang.annotation.RetentionPolicy;
|
||||
import java.lang.annotation.Target;
|
||||
|
||||
@Target(ElementType.METHOD)
|
||||
@Retention(RetentionPolicy.RUNTIME)
|
||||
public @interface GitlinkAdminAccessRequired {
|
||||
}
|
||||
|
|
@ -0,0 +1,21 @@
|
|||
package com.microservices.dss.config;
|
||||
|
||||
import com.microservices.dss.Interceptor.GitlinkAdminAccessInterceptor;
|
||||
import org.springframework.context.annotation.Configuration;
|
||||
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
|
||||
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
|
||||
|
||||
@Configuration
|
||||
public class WebConfig implements WebMvcConfigurer {
|
||||
|
||||
|
||||
@Override
|
||||
public void addInterceptors(InterceptorRegistry registry) {
|
||||
registry.addInterceptor(gitlinkAdminAccessInterceptor())
|
||||
.addPathPatterns("/**");
|
||||
}
|
||||
|
||||
public GitlinkAdminAccessInterceptor gitlinkAdminAccessInterceptor() {
|
||||
return new GitlinkAdminAccessInterceptor();
|
||||
}
|
||||
}
|
||||
|
|
@ -2,6 +2,7 @@ package com.microservices.dss.makerspace.controller;
|
|||
|
||||
import com.microservices.common.core.web.controller.BaseController;
|
||||
import com.microservices.common.core.web.domain.AjaxResult;
|
||||
import com.microservices.dss.annotation.GitlinkAdminAccessRequired;
|
||||
import com.microservices.dss.makerspace.service.ITasksService;
|
||||
import io.swagger.annotations.Api;
|
||||
import io.swagger.annotations.ApiOperation;
|
||||
|
|
@ -13,7 +14,7 @@ import org.springframework.web.bind.annotation.RequestParam;
|
|||
import org.springframework.web.bind.annotation.RestController;
|
||||
|
||||
@RestController
|
||||
@RequestMapping("/makerSpace")
|
||||
@RequestMapping("/open/makerSpace")
|
||||
@Api(tags = "数据统计-创客空间相关接口")
|
||||
public class MakerSpaceDataController extends BaseController {
|
||||
|
||||
|
|
@ -22,61 +23,63 @@ public class MakerSpaceDataController extends BaseController {
|
|||
|
||||
@ApiOperation("创客空间全局资源获取")
|
||||
@GetMapping(value = "/total")
|
||||
// @RequiresPermissions(value = {"dss:dssMakerSpace:show"}, logical = Logical.OR)
|
||||
@GitlinkAdminAccessRequired
|
||||
public AjaxResult getTotalData() {
|
||||
return success(tasksService.getTotalStatisticalData());
|
||||
}
|
||||
|
||||
@ApiOperation("创客任务新增趋势")
|
||||
@GetMapping(value = "/task/trend")
|
||||
// @RequiresPermissions(value = {"dss:dssMakerSpace:show"}, logical = Logical.OR)
|
||||
@GitlinkAdminAccessRequired
|
||||
public AjaxResult getTaskTrendData() {
|
||||
return success(tasksService.getTaskAdditionTrendData());
|
||||
}
|
||||
|
||||
@ApiOperation("创客成果新增趋势")
|
||||
@GetMapping(value = "/paper/trend")
|
||||
// @RequiresPermissions(value = {"dss:dssMakerSpace:show"}, logical = Logical.OR)
|
||||
@GitlinkAdminAccessRequired
|
||||
public AjaxResult getPaperTrendData() {
|
||||
return success(tasksService.getPaperAdditionTrendData());
|
||||
}
|
||||
|
||||
@ApiOperation("创客任务最新操作日志")
|
||||
@GetMapping(value = "/task/operLog")
|
||||
// @RequiresPermissions(value = {"dss:dssMakerSpace:show"}, logical = Logical.OR)
|
||||
@GitlinkAdminAccessRequired
|
||||
public AjaxResult getPaperTrendData(@ApiParam("获取最新操作日志的数量") @RequestParam Integer topNum) {
|
||||
return success(tasksService.getTaskOperLogTopN(topNum));
|
||||
}
|
||||
|
||||
@ApiOperation("创客任务奖金分布")
|
||||
@GetMapping(value = "/task/bountyDistribution")
|
||||
// @RequiresPermissions(value = {"dss:dssMakerSpace:show"}, logical = Logical.OR)
|
||||
@GitlinkAdminAccessRequired
|
||||
public AjaxResult getBountyDistribution() {
|
||||
return success(tasksService.getBountyDistribution());
|
||||
}
|
||||
|
||||
@ApiOperation("创客任务热度排行")
|
||||
@GetMapping(value = "/task/heatRank")
|
||||
// @RequiresPermissions(value = {"dss:dssMakerSpace:show"}, logical = Logical.OR)
|
||||
@GitlinkAdminAccessRequired
|
||||
public AjaxResult getHeatTopN(@ApiParam("获取热度排行的数量") @RequestParam Integer topNum) {
|
||||
return success(tasksService.getTaskHeatTopN(topNum));
|
||||
}
|
||||
|
||||
@ApiOperation("创客类型分布统计(统筹/自主)")
|
||||
@GetMapping(value = "/task/mode")
|
||||
// @RequiresPermissions(value = {"dss:dssMakerSpace:show"}, logical = Logical.OR)
|
||||
@GitlinkAdminAccessRequired
|
||||
public AjaxResult getTaskModeStatisticalData() {
|
||||
return success(tasksService.getTaskModeStatisticalData());
|
||||
}
|
||||
|
||||
@ApiOperation("创客任务-开启中状态任务数分布")
|
||||
@GetMapping(value = "/task/statusDistribution/opening")
|
||||
@GitlinkAdminAccessRequired
|
||||
public AjaxResult getOpeningTaskStatusDistribution(@ApiParam("获取开启中状态任务分布的数量") @RequestParam Integer topNum) {
|
||||
return success(tasksService.getOpeningTaskStatusDistribution(topNum));
|
||||
}
|
||||
|
||||
@ApiOperation("创客任务-所有任务类型分布")
|
||||
@GetMapping(value = "/task/categoryDistribution")
|
||||
@GitlinkAdminAccessRequired
|
||||
public AjaxResult getAllTaskCategoryDistribution() {
|
||||
return success(tasksService.getAllTaskCategoryDistribution());
|
||||
}
|
||||
|
|
|
|||
|
|
@ -3,6 +3,7 @@ package com.microservices.dss.projects.controller;
|
|||
import com.fasterxml.jackson.core.JsonProcessingException;
|
||||
import com.microservices.common.core.web.controller.BaseController;
|
||||
import com.microservices.common.core.web.domain.AjaxResult;
|
||||
import com.microservices.dss.annotation.GitlinkAdminAccessRequired;
|
||||
import com.microservices.dss.projects.service.IProjectGlobalResourcesService;
|
||||
import io.swagger.annotations.Api;
|
||||
import io.swagger.annotations.ApiOperation;
|
||||
|
|
@ -16,7 +17,7 @@ import org.springframework.web.bind.annotation.RestController;
|
|||
import java.text.ParseException;
|
||||
|
||||
@RestController
|
||||
@RequestMapping("/projects")
|
||||
@RequestMapping("/open/projects")
|
||||
@Api(tags = "数据统计-开源项目相关接口")
|
||||
public class ProjectDataController extends BaseController {
|
||||
|
||||
|
|
@ -25,14 +26,14 @@ public class ProjectDataController extends BaseController {
|
|||
|
||||
@ApiOperation("开源项目全局资源获取")
|
||||
@GetMapping(value = "/global-resources")
|
||||
// @RequiresPermissions(value = {"dss:dssProjects:show"}, logical = Logical.OR)
|
||||
@GitlinkAdminAccessRequired
|
||||
public AjaxResult getGlobalResourcesData() throws ParseException, JsonProcessingException {
|
||||
return success(projectGlobalResourcesService.getProjectGlobalResourcesData());
|
||||
}
|
||||
|
||||
@ApiOperation("开源项目最新动态获取")
|
||||
@GetMapping(value = "/latestActivities")
|
||||
// @RequiresPermissions(value = {"dss:dssProjects:show"}, logical = Logical.OR)
|
||||
@GitlinkAdminAccessRequired
|
||||
public AjaxResult getLatestActivitiesData(@ApiParam("分页数") @RequestParam(value = "page", defaultValue = "1") int page,
|
||||
@ApiParam("分页大小") @RequestParam(value = "limit", defaultValue = "4") int limit){
|
||||
return success(projectGlobalResourcesService.getLatestActivitiesData(page, limit));
|
||||
|
|
@ -40,7 +41,7 @@ public class ProjectDataController extends BaseController {
|
|||
|
||||
@ApiOperation("开源项目-项目排行获取")
|
||||
@GetMapping(value = "/projectRank")
|
||||
// @RequiresPermissions(value = {"dss:dssProjects:show"}, logical = Logical.OR)
|
||||
@GitlinkAdminAccessRequired
|
||||
public AjaxResult getProjectRankData(@ApiParam("统计时间范围(天)") @RequestParam(value = "time", defaultValue = "365") int time,
|
||||
@ApiParam("top数") @RequestParam(value = "limit", defaultValue = "5") int limit){
|
||||
return success(projectGlobalResourcesService.getProjectRankData(time, limit));
|
||||
|
|
@ -48,7 +49,7 @@ public class ProjectDataController extends BaseController {
|
|||
|
||||
@ApiOperation("开源项目-用户排行获取")
|
||||
@GetMapping(value = "/userRank")
|
||||
// @RequiresPermissions(value = {"dss:dssProjects:show"}, logical = Logical.OR)
|
||||
@GitlinkAdminAccessRequired
|
||||
public AjaxResult getUserRankData(@ApiParam("统计时间范围(天)") @RequestParam(value = "time", defaultValue = "365") int time,
|
||||
@ApiParam("top数") @RequestParam(value = "limit", defaultValue = "5") int limit){
|
||||
return success(projectGlobalResourcesService.getUserRankData(time, limit));
|
||||
|
|
|
|||
|
|
@ -13,4 +13,8 @@ public interface UserMapper {
|
|||
List<Object> getNewAddedMembersByMonth(@Param("startTime") String startTime, @Param("endTime") String endTime);
|
||||
|
||||
List<Object> getActiveMembersByMonth(@Param("startTime") String startTime, @Param("endTime") String endTime);
|
||||
|
||||
Long getUserIdByToken(@Param("token") String token);
|
||||
|
||||
Boolean getAdminStatus(@Param("userId") Long userId);
|
||||
}
|
||||
|
|
|
|||
|
|
@ -82,4 +82,14 @@ PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"
|
|||
SELECT DISTINCT user_id, DATE_FORMAT(updated_at, '%Y-%m-%d' ) as updated_on FROM commit_logs WHERE updated_at >= #{startTime,jdbcType=VARCHAR} AND updated_at <= #{endTime,jdbcType=VARCHAR}
|
||||
) as t GROUP BY createTime
|
||||
</select>
|
||||
<select id="getUserIdByToken" resultType="java.lang.Long">
|
||||
select user_id
|
||||
from tokens
|
||||
where `value` = #{token}
|
||||
</select>
|
||||
<select id="getAdminStatus" resultType="java.lang.Boolean">
|
||||
select admin
|
||||
from users
|
||||
where id = #{userId}
|
||||
</select>
|
||||
</mapper>
|
||||
Loading…
Reference in New Issue