节点在线、应用在线、配置在线使用令牌查询
大石头 authored at 2021-12-16 19:49:30
6.84 KiB
Stardust
using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.IO;
using System.Linq;
using System.Reflection;
using System.Runtime.Serialization;
using System.Text;
using System.Threading.Tasks;
using System.Web;
using System.Web.Script.Serialization;
using System.Xml.Serialization;
using NewLife;
using NewLife.Data;
using NewLife.Log;
using NewLife.Model;
using NewLife.Reflection;
using NewLife.Threading;
using NewLife.Web;
using XCode;
using XCode.Cache;
using XCode.Configuration;
using XCode.DataAccessLayer;
using XCode.Membership;
using XCode.Shards;

namespace Stardust.Data.Platform;

public partial class McpTokenResource : Entity<McpTokenResource>
{
    #region 对象操作
    // 控制最大缓存数量,Find/FindAll查询方法在表行数小于该值时走实体缓存
    private static Int32 MaxCacheCount = 1000;

    static McpTokenResource()
    {
        // 累加字段,生成 Update xx Set Count=Count+1234 Where xxx
        //var df = Meta.Factory.AdditionalFields;
        //df.Add(nameof(TokenId));

        // 拦截器 UserInterceptor、TimeInterceptor、IPInterceptor
        Meta.Interceptors.Add<TimeInterceptor>();
        Meta.Interceptors.Add(new IPInterceptor { AllowEmpty = false });

        // 实体缓存
        // var ec = Meta.Cache;
        // ec.Expire = 60;
    }

    /// <summary>验证并修补数据,返回验证结果,或者通过抛出异常的方式提示验证失败。</summary>
    /// <param name="method">添删改方法</param>
    public override Boolean Valid(DataMethod method)
    {
        //if (method == DataMethod.Delete) return true;
        // 如果没有脏数据,则不需要进行任何处理
        if (!HasDirty) return true;

        // 这里验证参数范围,建议抛出参数异常,指定参数名,前端用户界面可以捕获参数异常并聚焦到对应的参数输入框
        if (ResourceType.IsNullOrEmpty()) throw new ArgumentNullException(nameof(ResourceType), L.T("Resource type cannot be empty."));

        // 建议先调用基类方法,基类方法会做一些统一处理
        if (!base.Valid(method)) return false;

        // 在新插入数据或者修改了指定字段时进行修正
        //if (method == DataMethod.Insert && !Dirtys[nameof(CreateTime)]) CreateTime = DateTime.Now;
        //if (method == DataMethod.Insert && !Dirtys[nameof(CreateIP)]) CreateIP = ManageProvider.UserHost;

        // 检查唯一索引
        // CheckExist(method == DataMethod.Insert, nameof(TokenId), nameof(ResourceType), nameof(ResourceId));

        return true;
    }

    ///// <summary>首次连接数据库时初始化数据,仅用于实体类重载,用户不应该调用该方法</summary>
    //[EditorBrowsable(EditorBrowsableState.Never)]
    //protected override void InitData()
    //{
    //    // InitData一般用于当数据表没有数据时添加一些默认数据,该实体类的任何第一次数据库操作都会触发该方法,默认异步调用
    //    if (Meta.Session.Count > 0) return;

    //    if (XTrace.Debug) XTrace.WriteLine("开始初始化McpTokenResource[MCP令牌资源授权]数据……");

    //    var entity = new McpTokenResource();
    //    entity.TokenId = 0;
    //    entity.ResourceType = "abc";
    //    entity.ResourceId = 0;
    //    entity.IsAll = true;
    //    entity.Enable = true;
    //    entity.Insert();

    //    if (XTrace.Debug) XTrace.WriteLine("完成初始化McpTokenResource[MCP令牌资源授权]数据!");
    //}

    ///// <summary>已重载。基类先调用Valid(true)验证数据,然后在事务保护内调用OnInsert</summary>
    ///// <returns></returns>
    //public override Int32 Insert()
    //{
    //    return base.Insert();
    //}

    ///// <summary>已重载。在事务保护范围内处理业务,位于Valid之后</summary>
    ///// <returns></returns>
    //protected override Int32 OnDelete()
    //{
    //    return base.OnDelete();
    //}
    #endregion

    #region 扩展属性
    #endregion

    #region 高级查询

    // Select Count(Id) as Id,ResourceType From McpTokenResource Where CreateTime>'2020-01-24 00:00:00' Group By ResourceType Order By Id Desc limit 20
    static readonly FieldCache<McpTokenResource> _ResourceTypeCache = new(nameof(ResourceType))
    {
        //Where = _.CreateTime > DateTime.Today.AddDays(-30) & Expression.Empty
    };

    /// <summary>获取资源类型列表,字段缓存10分钟,分组统计数据最多的前20种,用于魔方前台下拉选择</summary>
    /// <returns>资源类型字典,键为字段值,值为显示名</returns>
    public static IDictionary<String, String> GetResourceTypeList() => _ResourceTypeCache.FindAllName();
    #endregion

    #region 业务操作

    /// <summary>按TokenId查所有授权</summary>
    public static IList<McpTokenResource> FindAllByToken(Int32 tokenId) => FindAll(_.TokenId == tokenId);

    /// <summary>判断Token是否授权某资源(启用且类型匹配且IsAll或ResourceId匹配)</summary>
    public static Boolean IsAuthorized(Int32 tokenId, String resourceType, Int32 resourceId)
    {
        var list = FindAllByToken(tokenId);
        foreach (var r in list)
        {
            if (!r.Enable) continue;
            // 大小写不敏感匹配,兼容历史可能的小写存储数据
            if (!r.ResourceType.EqualIgnoreCase(resourceType)) continue;
            if (r.IsAll) return true;
            if (r.ResourceId == resourceId) return true;
        }
        return false;
    }

    /// <summary>判断Token是否授权某类型全部资源</summary>
    public static Boolean IsAllAuthorized(Int32 tokenId, String resourceType)
    {
        var list = FindAllByToken(tokenId);
        return list.Any(r => r.Enable && r.ResourceType.EqualIgnoreCase(resourceType) && r.IsAll);
    }

    /// <summary>获取Token授权的所有项目ID。返回null表示全部项目(IsAll=true)</summary>
    public static Int32[] GetAuthorizedProjectIds(Int32 tokenId)
    {
        var list = FindAllByToken(tokenId);
        var ids = new List<Int32>();
        foreach (var r in list.Where(r => r.Enable && r.ResourceType.EqualIgnoreCase(McpResourceType.Project.ToString())))
        {
            if (r.IsAll) return null;
            ids.Add(r.ResourceId);
        }
        return ids.Count > 0 ? ids.Distinct().ToArray() : Array.Empty<Int32>();
    }

    /// <summary>同步Token资源授权(删除旧的,插入新的)</summary>
    public static void SyncByToken(Int32 tokenId, IList<McpTokenResource> resources, String ip)
    {
        // 删除旧授权
        Delete(_.TokenId == tokenId);
        // 插入新授权
        foreach (var r in resources)
        {
            r.Id = 0;
            r.TokenId = tokenId;
            r.Enable = true;
            r.CreateTime = DateTime.Now;
            r.CreateIP = ip;
            r.Insert();
        }
    }
    #endregion
}