用户AccessKey:增加最近访问时间、修复AccessKey没有区分用户的Bug

This commit is contained in:
GoEdgeLab
2021-06-16 10:48:08 +08:00
parent 076e807024
commit 3a25fea374
4 changed files with 36 additions and 16 deletions

View File

@@ -6,6 +6,7 @@ import (
"github.com/iwind/TeaGo/Tea" "github.com/iwind/TeaGo/Tea"
"github.com/iwind/TeaGo/dbs" "github.com/iwind/TeaGo/dbs"
"github.com/iwind/TeaGo/rands" "github.com/iwind/TeaGo/rands"
"time"
) )
const ( const (
@@ -34,7 +35,7 @@ func init() {
}) })
} }
// 启用条目 // EnableUserAccessKey 启用条目
func (this *UserAccessKeyDAO) EnableUserAccessKey(tx *dbs.Tx, id int64) error { func (this *UserAccessKeyDAO) EnableUserAccessKey(tx *dbs.Tx, id int64) error {
_, err := this.Query(tx). _, err := this.Query(tx).
Pk(id). Pk(id).
@@ -43,7 +44,7 @@ func (this *UserAccessKeyDAO) EnableUserAccessKey(tx *dbs.Tx, id int64) error {
return err return err
} }
// 禁用条目 // DisableUserAccessKey 禁用条目
func (this *UserAccessKeyDAO) DisableUserAccessKey(tx *dbs.Tx, id int64) error { func (this *UserAccessKeyDAO) DisableUserAccessKey(tx *dbs.Tx, id int64) error {
_, err := this.Query(tx). _, err := this.Query(tx).
Pk(id). Pk(id).
@@ -52,7 +53,7 @@ func (this *UserAccessKeyDAO) DisableUserAccessKey(tx *dbs.Tx, id int64) error {
return err return err
} }
// 查找启用中的条目 // FindEnabledUserAccessKey 查找启用中的条目
func (this *UserAccessKeyDAO) FindEnabledUserAccessKey(tx *dbs.Tx, id int64) (*UserAccessKey, error) { func (this *UserAccessKeyDAO) FindEnabledUserAccessKey(tx *dbs.Tx, id int64) (*UserAccessKey, error) {
result, err := this.Query(tx). result, err := this.Query(tx).
Pk(id). Pk(id).
@@ -64,7 +65,7 @@ func (this *UserAccessKeyDAO) FindEnabledUserAccessKey(tx *dbs.Tx, id int64) (*U
return result.(*UserAccessKey), err return result.(*UserAccessKey), err
} }
// 创建Key // CreateAccessKey 创建Key
func (this *UserAccessKeyDAO) CreateAccessKey(tx *dbs.Tx, userId int64, description string) (int64, error) { func (this *UserAccessKeyDAO) CreateAccessKey(tx *dbs.Tx, userId int64, description string) (int64, error) {
if userId <= 0 { if userId <= 0 {
return 0, errors.New("invalid userId") return 0, errors.New("invalid userId")
@@ -79,9 +80,10 @@ func (this *UserAccessKeyDAO) CreateAccessKey(tx *dbs.Tx, userId int64, descript
return this.SaveInt64(tx, op) return this.SaveInt64(tx, op)
} }
// 查找用户所有的Key // FindAllEnabledAccessKeys 查找用户所有的Key
func (this *UserAccessKeyDAO) FindAllEnabledAccessKeys(tx *dbs.Tx, userId int64) (result []*UserAccessKey, err error) { func (this *UserAccessKeyDAO) FindAllEnabledAccessKeys(tx *dbs.Tx, userId int64) (result []*UserAccessKey, err error) {
_, err = this.Query(tx). _, err = this.Query(tx).
Attr("userId", userId).
State(UserAccessKeyStateEnabled). State(UserAccessKeyStateEnabled).
DescPk(). DescPk().
Slice(&result). Slice(&result).
@@ -89,7 +91,7 @@ func (this *UserAccessKeyDAO) FindAllEnabledAccessKeys(tx *dbs.Tx, userId int64)
return return
} }
// 检查用户的AccessKey // CheckUserAccessKey 检查用户的AccessKey
func (this *UserAccessKeyDAO) CheckUserAccessKey(tx *dbs.Tx, userId int64, accessKeyId int64) (bool, error) { func (this *UserAccessKeyDAO) CheckUserAccessKey(tx *dbs.Tx, userId int64, accessKeyId int64) (bool, error) {
return this.Query(tx). return this.Query(tx).
Pk(accessKeyId). Pk(accessKeyId).
@@ -98,7 +100,7 @@ func (this *UserAccessKeyDAO) CheckUserAccessKey(tx *dbs.Tx, userId int64, acces
Exist() Exist()
} }
// 设置是否启用 // UpdateAccessKeyIsOn 设置是否启用
func (this *UserAccessKeyDAO) UpdateAccessKeyIsOn(tx *dbs.Tx, accessKeyId int64, isOn bool) error { func (this *UserAccessKeyDAO) UpdateAccessKeyIsOn(tx *dbs.Tx, accessKeyId int64, isOn bool) error {
if accessKeyId <= 0 { if accessKeyId <= 0 {
return errors.New("invalid accessKeyId") return errors.New("invalid accessKeyId")
@@ -110,7 +112,7 @@ func (this *UserAccessKeyDAO) UpdateAccessKeyIsOn(tx *dbs.Tx, accessKeyId int64,
return err return err
} }
// 根据UniqueId查找AccessKey // FindAccessKeyWithUniqueId 根据UniqueId查找AccessKey
func (this *UserAccessKeyDAO) FindAccessKeyWithUniqueId(tx *dbs.Tx, uniqueId string) (*UserAccessKey, error) { func (this *UserAccessKeyDAO) FindAccessKeyWithUniqueId(tx *dbs.Tx, uniqueId string) (*UserAccessKey, error) {
one, err := this.Query(tx). one, err := this.Query(tx).
Attr("uniqueId", uniqueId). Attr("uniqueId", uniqueId).
@@ -123,3 +125,11 @@ func (this *UserAccessKeyDAO) FindAccessKeyWithUniqueId(tx *dbs.Tx, uniqueId str
return one.(*UserAccessKey), nil return one.(*UserAccessKey), nil
} }
// UpdateAccessKeyAccessedAt 更新AccessKey访问时间
func (this *UserAccessKeyDAO) UpdateAccessKeyAccessedAt(tx *dbs.Tx, accessKeyId int64) error {
return this.Query(tx).
Pk(accessKeyId).
Set("accessedAt", time.Now().Unix()).
UpdateQuickly()
}

View File

@@ -1,6 +1,6 @@
package models package models
// AccessKey // UserAccessKey AccessKey
type UserAccessKey struct { type UserAccessKey struct {
Id uint32 `field:"id"` // ID Id uint32 `field:"id"` // ID
UserId uint32 `field:"userId"` // 用户ID UserId uint32 `field:"userId"` // 用户ID
@@ -9,6 +9,7 @@ type UserAccessKey struct {
UniqueId string `field:"uniqueId"` // 唯一的Key UniqueId string `field:"uniqueId"` // 唯一的Key
Secret string `field:"secret"` // 密钥 Secret string `field:"secret"` // 密钥
Description string `field:"description"` // 备注 Description string `field:"description"` // 备注
AccessedAt uint64 `field:"accessedAt"` // 最近一次访问时间
State uint8 `field:"state"` // 状态 State uint8 `field:"state"` // 状态
} }
@@ -20,6 +21,7 @@ type UserAccessKeyOperator struct {
UniqueId interface{} // 唯一的Key UniqueId interface{} // 唯一的Key
Secret interface{} // 密钥 Secret interface{} // 密钥
Description interface{} // 备注 Description interface{} // 备注
AccessedAt interface{} // 最近一次访问时间
State interface{} // 状态 State interface{} // 状态
} }

View File

@@ -7,12 +7,12 @@ import (
"github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb" "github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb"
) )
// AccessToken相关服务 // APIAccessTokenService AccessToken相关服务
type APIAccessTokenService struct { type APIAccessTokenService struct {
BaseService BaseService
} }
// 获取AccessToken // GetAPIAccessToken 获取AccessToken
func (this *APIAccessTokenService) GetAPIAccessToken(ctx context.Context, req *pb.GetAPIAccessTokenRequest) (*pb.GetAPIAccessTokenResponse, error) { func (this *APIAccessTokenService) GetAPIAccessToken(ctx context.Context, req *pb.GetAPIAccessTokenRequest) (*pb.GetAPIAccessTokenResponse, error) {
if req.Type == "user" { // 用户 if req.Type == "user" { // 用户
tx := this.NullTx() tx := this.NullTx()
@@ -28,11 +28,18 @@ func (this *APIAccessTokenService) GetAPIAccessToken(ctx context.Context, req *p
return nil, errors.New("access key not found") return nil, errors.New("access key not found")
} }
// 更新AccessKey访问时间
err = models.SharedUserAccessKeyDAO.UpdateAccessKeyAccessedAt(tx, int64(accessKey.Id))
if err != nil {
return nil, err
}
// 创建AccessToken // 创建AccessToken
token, expiresAt, err := models.SharedAPIAccessTokenDAO.GenerateAccessToken(tx, int64(accessKey.UserId)) token, expiresAt, err := models.SharedAPIAccessTokenDAO.GenerateAccessToken(tx, int64(accessKey.UserId))
if err != nil { if err != nil {
return nil, err return nil, err
} }
return &pb.GetAPIAccessTokenResponse{ return &pb.GetAPIAccessTokenResponse{
Token: token, Token: token,
ExpiresAt: expiresAt, ExpiresAt: expiresAt,

View File

@@ -6,12 +6,12 @@ import (
"github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb" "github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb"
) )
// 用户AccessKey相关服务 // UserAccessKeyService 用户AccessKey相关服务
type UserAccessKeyService struct { type UserAccessKeyService struct {
BaseService BaseService
} }
// 创建AccessKey // CreateUserAccessKey 创建AccessKey
func (this *UserAccessKeyService) CreateUserAccessKey(ctx context.Context, req *pb.CreateUserAccessKeyRequest) (*pb.CreateUserAccessKeyResponse, error) { func (this *UserAccessKeyService) CreateUserAccessKey(ctx context.Context, req *pb.CreateUserAccessKeyRequest) (*pb.CreateUserAccessKeyResponse, error) {
_, _, err := this.ValidateAdminAndUser(ctx, 0, req.UserId) _, _, err := this.ValidateAdminAndUser(ctx, 0, req.UserId)
if err != nil { if err != nil {
@@ -27,7 +27,7 @@ func (this *UserAccessKeyService) CreateUserAccessKey(ctx context.Context, req *
return &pb.CreateUserAccessKeyResponse{UserAccessKeyId: userAccessKeyId}, nil return &pb.CreateUserAccessKeyResponse{UserAccessKeyId: userAccessKeyId}, nil
} }
// 查找所有的AccessKey // FindAllEnabledUserAccessKeys 查找所有的AccessKey
func (this *UserAccessKeyService) FindAllEnabledUserAccessKeys(ctx context.Context, req *pb.FindAllEnabledUserAccessKeysRequest) (*pb.FindAllEnabledUserAccessKeysResponse, error) { func (this *UserAccessKeyService) FindAllEnabledUserAccessKeys(ctx context.Context, req *pb.FindAllEnabledUserAccessKeysRequest) (*pb.FindAllEnabledUserAccessKeysResponse, error) {
_, _, err := this.ValidateAdminAndUser(ctx, 0, req.UserId) _, _, err := this.ValidateAdminAndUser(ctx, 0, req.UserId)
if err != nil { if err != nil {
@@ -51,13 +51,14 @@ func (this *UserAccessKeyService) FindAllEnabledUserAccessKeys(ctx context.Conte
UniqueId: accessKey.UniqueId, UniqueId: accessKey.UniqueId,
Secret: accessKey.Secret, Secret: accessKey.Secret,
Description: accessKey.Description, Description: accessKey.Description,
AccessedAt: int64(accessKey.AccessedAt),
}) })
} }
return &pb.FindAllEnabledUserAccessKeysResponse{UserAccessKeys: result}, nil return &pb.FindAllEnabledUserAccessKeysResponse{UserAccessKeys: result}, nil
} }
// 删除AccessKey // DeleteUserAccessKey 删除AccessKey
func (this *UserAccessKeyService) DeleteUserAccessKey(ctx context.Context, req *pb.DeleteUserAccessKeyRequest) (*pb.RPCSuccess, error) { func (this *UserAccessKeyService) DeleteUserAccessKey(ctx context.Context, req *pb.DeleteUserAccessKeyRequest) (*pb.RPCSuccess, error) {
_, userId, err := this.ValidateAdminAndUser(ctx, 0, 0) _, userId, err := this.ValidateAdminAndUser(ctx, 0, 0)
if err != nil { if err != nil {
@@ -83,7 +84,7 @@ func (this *UserAccessKeyService) DeleteUserAccessKey(ctx context.Context, req *
return this.Success() return this.Success()
} }
// 设置是否启用AccessKey // UpdateUserAccessKeyIsOn 设置是否启用AccessKey
func (this *UserAccessKeyService) UpdateUserAccessKeyIsOn(ctx context.Context, req *pb.UpdateUserAccessKeyIsOnRequest) (*pb.RPCSuccess, error) { func (this *UserAccessKeyService) UpdateUserAccessKeyIsOn(ctx context.Context, req *pb.UpdateUserAccessKeyIsOnRequest) (*pb.RPCSuccess, error) {
_, userId, err := this.ValidateAdminAndUser(ctx, 0, 0) _, userId, err := this.ValidateAdminAndUser(ctx, 0, 0)
if err != nil { if err != nil {