144 lines
3.9 KiB
Go
144 lines
3.9 KiB
Go
package share
|
|
|
|
import (
|
|
"context"
|
|
"strings"
|
|
"time"
|
|
|
|
"bsm/full/module/base/cloud/internal/impl"
|
|
"bsm/full/module/base/cloud/internal/models"
|
|
pb "bsm/full/module/base/cloud/pb"
|
|
"git.apinb.com/bsm-sdk/core/errcode"
|
|
"git.apinb.com/bsm-sdk/core/printer"
|
|
"git.apinb.com/bsm-sdk/core/service"
|
|
"git.apinb.com/bsm-sdk/core/types"
|
|
"git.apinb.com/bsm-sdk/core/utils"
|
|
)
|
|
|
|
// 创建分享
|
|
func CreateShare(ctx context.Context, in *pb.CreateShareRequest) (reply *pb.StatusReply, err error) {
|
|
// parse authorization meta.
|
|
auth, err := service.ParseMetaCtx(ctx, nil)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
// valid code
|
|
if strings.TrimSpace(in.ShareType) == "" {
|
|
return nil, errcode.ErrInvalidArgument
|
|
}
|
|
if in.ResourceId == 0 {
|
|
return nil, errcode.ErrInvalidArgument
|
|
}
|
|
if strings.TrimSpace(in.CloudIdentity) == "" {
|
|
return nil, errcode.ErrInvalidArgument
|
|
}
|
|
|
|
// logic code
|
|
// 校验目标资源确实属于当前用户，禁止对他人资源创建分享
|
|
owned, err := checkResourceOwner(auth.ID, in.ShareType, uint(in.ResourceId))
|
|
if err != nil {
|
|
printer.Error("Check share resource owner error: %v", err)
|
|
return nil, errcode.ErrDB
|
|
}
|
|
if !owned {
|
|
return nil, errcode.ErrPermissionDenied
|
|
}
|
|
|
|
// 生成分享令牌（如果未提供）
|
|
shareToken := in.ShareToken
|
|
if shareToken == "" {
|
|
shareToken = utils.UUID()
|
|
}
|
|
|
|
// 解析过期时间
|
|
var expiresAt time.Time
|
|
if in.ExpiresAt != "" {
|
|
if t, err := time.Parse(time.RFC3339, in.ExpiresAt); err == nil {
|
|
expiresAt = t
|
|
} else {
|
|
expiresAt = time.Now().Add(7 * 24 * time.Hour) // 默认7天过期
|
|
}
|
|
} else {
|
|
expiresAt = time.Now().Add(7 * 24 * time.Hour) // 默认7天过期
|
|
}
|
|
|
|
record := models.CloudShare{
|
|
Std_IICUDS: types.Std_IICUDS{
|
|
Identity: utils.UUID(),
|
|
},
|
|
Std_Passport: types.Std_Passport{
|
|
PassportID: auth.ID,
|
|
PassportIdentity: auth.Identity,
|
|
},
|
|
CloudBase: models.CloudBase{
|
|
CloudID: uint(in.CloudId),
|
|
CloudIdentity: in.CloudIdentity,
|
|
},
|
|
ShareType: in.ShareType,
|
|
ResourceID: uint(in.ResourceId),
|
|
ShareToken: shareToken,
|
|
Password: in.Password,
|
|
ExpiresAt: expiresAt,
|
|
ViewCount: 0,
|
|
DownloadCount: 0,
|
|
IsPublic: in.IsPublic,
|
|
}
|
|
|
|
if err := impl.DBService.Create(&record).Error; err != nil {
|
|
printer.Error("Create share error: %v", err)
|
|
return nil, errcode.ErrDB
|
|
}
|
|
|
|
return &pb.StatusReply{
|
|
Details: record.Identity,
|
|
Timeseq: time.Now().UnixMilli(),
|
|
}, nil
|
|
}
|
|
|
|
// checkResourceOwner 校验分享目标资源属于当前用户
|
|
func checkResourceOwner(passportID uint, shareType string, resourceID uint) (bool, error) {
|
|
var (
|
|
count int64
|
|
err error
|
|
)
|
|
|
|
switch strings.ToLower(strings.TrimSpace(shareType)) {
|
|
case "file":
|
|
err = impl.DBService.Model(&models.CloudDiskFile{}).
|
|
Joins("JOIN cloud_disk_dirs ON cloud_disk_files.directory_id = cloud_disk_dirs.id").
|
|
Where("cloud_disk_files.id = ? AND cloud_disk_dirs.passport_id = ?", resourceID, passportID).
|
|
Count(&count).Error
|
|
case "photo":
|
|
err = impl.DBService.Model(&models.CloudPhoto{}).
|
|
Joins("JOIN cloud_albums ON cloud_photos.album_id = cloud_albums.id").
|
|
Where("cloud_photos.id = ? AND cloud_albums.passport_id = ?", resourceID, passportID).
|
|
Count(&count).Error
|
|
case "album":
|
|
err = impl.DBService.Model(&models.CloudAlbum{}).
|
|
Where("id = ? AND passport_id = ?", resourceID, passportID).
|
|
Count(&count).Error
|
|
case "note":
|
|
err = impl.DBService.Model(&models.CloudNote{}).
|
|
Where("id = ? AND passport_id = ?", resourceID, passportID).
|
|
Count(&count).Error
|
|
case "bookmark":
|
|
err = impl.DBService.Model(&models.CloudBookmark{}).
|
|
Where("id = ? AND passport_id = ?", resourceID, passportID).
|
|
Count(&count).Error
|
|
case "private":
|
|
err = impl.DBService.Model(&models.CloudPrivate{}).
|
|
Where("id = ? AND passport_id = ?", resourceID, passportID).
|
|
Count(&count).Error
|
|
default:
|
|
// 未知的分享类型无法确认资源归属，直接拒绝
|
|
return false, nil
|
|
}
|
|
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
|
|
return count > 0, nil
|
|
}
|