feat(数据可视化监测):权限控制,可视化仅gitlink管理员可见

This commit is contained in:
wanjia 2024-12-16 13:48:56 +08:00
parent 8a3777e0f2
commit 2fb09332c6
7 changed files with 108 additions and 13 deletions

View File

@ -0,0 +1,46 @@
package com.microservices.dss.Interceptor;
import com.microservices.common.core.utils.SpringUtils;
import com.microservices.dss.annotation.GitlinkAdminAccessRequired;
import com.microservices.dss.projects.mapper.UserMapper;
import org.springframework.stereotype.Component;
import org.springframework.web.method.HandlerMethod;
import org.springframework.web.servlet.HandlerInterceptor;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.lang.reflect.Method;
import static com.microservices.common.security.auth.AuthUtil.getGitLinkRequestToken;
@Component
public class GitlinkAdminAccessInterceptor implements HandlerInterceptor {
public UserMapper userMapper = SpringUtils.getBean(UserMapper.class);
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
if (handler instanceof HandlerMethod) {
HandlerMethod handlerMethod = (HandlerMethod) handler;
Method method = handlerMethod.getMethod();
if (method.isAnnotationPresent(GitlinkAdminAccessRequired.class)) {
String token = getGitLinkRequestToken(request);
Long userId = userMapper.getUserIdByToken(token); // 根据token获取用户ID
if (userId == null) {
response.setStatus(HttpServletResponse.SC_FORBIDDEN); // 403 Forbidden
return false;
}
Boolean isAdmin = userMapper.getAdminStatus(userId); // 根据用户ID获取admin字段值
if (isAdmin == null || !isAdmin) {
response.setStatus(HttpServletResponse.SC_FORBIDDEN); // 403 Forbidden
return false;
}
}
}
return true;
}
@Override
public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
// 可以在这里添加一些完成后的处理逻辑
}
}

View File

@ -0,0 +1,10 @@
package com.microservices.dss.annotation;
import java.lang.annotation.ElementType;
import java.lang.annotation.Retention;
import java.lang.annotation.RetentionPolicy;
import java.lang.annotation.Target;
@Target(ElementType.METHOD)
@Retention(RetentionPolicy.RUNTIME)
public @interface GitlinkAdminAccessRequired {
}

View File

@ -0,0 +1,21 @@
package com.microservices.dss.config;
import com.microservices.dss.Interceptor.GitlinkAdminAccessInterceptor;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
@Configuration
public class WebConfig implements WebMvcConfigurer {
@Override
public void addInterceptors(InterceptorRegistry registry) {
registry.addInterceptor(gitlinkAdminAccessInterceptor())
.addPathPatterns("/**");
}
public GitlinkAdminAccessInterceptor gitlinkAdminAccessInterceptor() {
return new GitlinkAdminAccessInterceptor();
}
}

View File

@ -2,6 +2,7 @@ package com.microservices.dss.makerspace.controller;
import com.microservices.common.core.web.controller.BaseController;
import com.microservices.common.core.web.domain.AjaxResult;
import com.microservices.dss.annotation.GitlinkAdminAccessRequired;
import com.microservices.dss.makerspace.service.ITasksService;
import io.swagger.annotations.Api;
import io.swagger.annotations.ApiOperation;
@ -13,7 +14,7 @@ import org.springframework.web.bind.annotation.RequestParam;
import org.springframework.web.bind.annotation.RestController;
@RestController
@RequestMapping("/makerSpace")
@RequestMapping("/open/makerSpace")
@Api(tags = "数据统计-创客空间相关接口")
public class MakerSpaceDataController extends BaseController {
@ -22,61 +23,63 @@ public class MakerSpaceDataController extends BaseController {
@ApiOperation("创客空间全局资源获取")
@GetMapping(value = "/total")
// @RequiresPermissions(value = {"dss:dssMakerSpace:show"}, logical = Logical.OR)
@GitlinkAdminAccessRequired
public AjaxResult getTotalData() {
return success(tasksService.getTotalStatisticalData());
}
@ApiOperation("创客任务新增趋势")
@GetMapping(value = "/task/trend")
// @RequiresPermissions(value = {"dss:dssMakerSpace:show"}, logical = Logical.OR)
@GitlinkAdminAccessRequired
public AjaxResult getTaskTrendData() {
return success(tasksService.getTaskAdditionTrendData());
}
@ApiOperation("创客成果新增趋势")
@GetMapping(value = "/paper/trend")
// @RequiresPermissions(value = {"dss:dssMakerSpace:show"}, logical = Logical.OR)
@GitlinkAdminAccessRequired
public AjaxResult getPaperTrendData() {
return success(tasksService.getPaperAdditionTrendData());
}
@ApiOperation("创客任务最新操作日志")
@GetMapping(value = "/task/operLog")
// @RequiresPermissions(value = {"dss:dssMakerSpace:show"}, logical = Logical.OR)
@GitlinkAdminAccessRequired
public AjaxResult getPaperTrendData(@ApiParam("获取最新操作日志的数量") @RequestParam Integer topNum) {
return success(tasksService.getTaskOperLogTopN(topNum));
}
@ApiOperation("创客任务奖金分布")
@GetMapping(value = "/task/bountyDistribution")
// @RequiresPermissions(value = {"dss:dssMakerSpace:show"}, logical = Logical.OR)
@GitlinkAdminAccessRequired
public AjaxResult getBountyDistribution() {
return success(tasksService.getBountyDistribution());
}
@ApiOperation("创客任务热度排行")
@GetMapping(value = "/task/heatRank")
// @RequiresPermissions(value = {"dss:dssMakerSpace:show"}, logical = Logical.OR)
@GitlinkAdminAccessRequired
public AjaxResult getHeatTopN(@ApiParam("获取热度排行的数量") @RequestParam Integer topNum) {
return success(tasksService.getTaskHeatTopN(topNum));
}
@ApiOperation("创客类型分布统计(统筹/自主)")
@GetMapping(value = "/task/mode")
// @RequiresPermissions(value = {"dss:dssMakerSpace:show"}, logical = Logical.OR)
@GitlinkAdminAccessRequired
public AjaxResult getTaskModeStatisticalData() {
return success(tasksService.getTaskModeStatisticalData());
}
@ApiOperation("创客任务-开启中状态任务数分布")
@GetMapping(value = "/task/statusDistribution/opening")
@GitlinkAdminAccessRequired
public AjaxResult getOpeningTaskStatusDistribution(@ApiParam("获取开启中状态任务分布的数量") @RequestParam Integer topNum) {
return success(tasksService.getOpeningTaskStatusDistribution(topNum));
}
@ApiOperation("创客任务-所有任务类型分布")
@GetMapping(value = "/task/categoryDistribution")
@GitlinkAdminAccessRequired
public AjaxResult getAllTaskCategoryDistribution() {
return success(tasksService.getAllTaskCategoryDistribution());
}

View File

@ -3,6 +3,7 @@ package com.microservices.dss.projects.controller;
import com.fasterxml.jackson.core.JsonProcessingException;
import com.microservices.common.core.web.controller.BaseController;
import com.microservices.common.core.web.domain.AjaxResult;
import com.microservices.dss.annotation.GitlinkAdminAccessRequired;
import com.microservices.dss.projects.service.IProjectGlobalResourcesService;
import io.swagger.annotations.Api;
import io.swagger.annotations.ApiOperation;
@ -16,7 +17,7 @@ import org.springframework.web.bind.annotation.RestController;
import java.text.ParseException;
@RestController
@RequestMapping("/projects")
@RequestMapping("/open/projects")
@Api(tags = "数据统计-开源项目相关接口")
public class ProjectDataController extends BaseController {
@ -25,14 +26,14 @@ public class ProjectDataController extends BaseController {
@ApiOperation("开源项目全局资源获取")
@GetMapping(value = "/global-resources")
// @RequiresPermissions(value = {"dss:dssProjects:show"}, logical = Logical.OR)
@GitlinkAdminAccessRequired
public AjaxResult getGlobalResourcesData() throws ParseException, JsonProcessingException {
return success(projectGlobalResourcesService.getProjectGlobalResourcesData());
}
@ApiOperation("开源项目最新动态获取")
@GetMapping(value = "/latestActivities")
// @RequiresPermissions(value = {"dss:dssProjects:show"}, logical = Logical.OR)
@GitlinkAdminAccessRequired
public AjaxResult getLatestActivitiesData(@ApiParam("分页数") @RequestParam(value = "page", defaultValue = "1") int page,
@ApiParam("分页大小") @RequestParam(value = "limit", defaultValue = "4") int limit){
return success(projectGlobalResourcesService.getLatestActivitiesData(page, limit));
@ -40,7 +41,7 @@ public class ProjectDataController extends BaseController {
@ApiOperation("开源项目-项目排行获取")
@GetMapping(value = "/projectRank")
// @RequiresPermissions(value = {"dss:dssProjects:show"}, logical = Logical.OR)
@GitlinkAdminAccessRequired
public AjaxResult getProjectRankData(@ApiParam("统计时间范围(天)") @RequestParam(value = "time", defaultValue = "365") int time,
@ApiParam("top数") @RequestParam(value = "limit", defaultValue = "5") int limit){
return success(projectGlobalResourcesService.getProjectRankData(time, limit));
@ -48,7 +49,7 @@ public class ProjectDataController extends BaseController {
@ApiOperation("开源项目-用户排行获取")
@GetMapping(value = "/userRank")
// @RequiresPermissions(value = {"dss:dssProjects:show"}, logical = Logical.OR)
@GitlinkAdminAccessRequired
public AjaxResult getUserRankData(@ApiParam("统计时间范围(天)") @RequestParam(value = "time", defaultValue = "365") int time,
@ApiParam("top数") @RequestParam(value = "limit", defaultValue = "5") int limit){
return success(projectGlobalResourcesService.getUserRankData(time, limit));

View File

@ -13,4 +13,8 @@ public interface UserMapper {
List<Object> getNewAddedMembersByMonth(@Param("startTime") String startTime, @Param("endTime") String endTime);
List<Object> getActiveMembersByMonth(@Param("startTime") String startTime, @Param("endTime") String endTime);
Long getUserIdByToken(@Param("token") String token);
Boolean getAdminStatus(@Param("userId") Long userId);
}

View File

@ -82,4 +82,14 @@ PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"
SELECT DISTINCT user_id, DATE_FORMAT(updated_at, '%Y-%m-%d' ) as updated_on FROM commit_logs WHERE updated_at &gt;= #{startTime,jdbcType=VARCHAR} AND updated_at &lt;= #{endTime,jdbcType=VARCHAR}
) as t GROUP BY createTime
</select>
<select id="getUserIdByToken" resultType="java.lang.Long">
select user_id
from tokens
where `value` = #{token}
</select>
<select id="getAdminStatus" resultType="java.lang.Boolean">
select admin
from users
where id = #{userId}
</select>
</mapper>