100 lines
3.8 KiB
Go
100 lines
3.8 KiB
Go
// 功能描述：报修现场照片关联与本人受保护读取；不公开照片文件目录。
|
||
// 版本：1.0.0。
|
||
package user
|
||
|
||
import (
|
||
"crypto/sha256"
|
||
"fmt"
|
||
"git.apinb.com/bsm-sdk/core/errcode"
|
||
"git.apinb.com/heqiapp/platforms/backend/api/internal/impl"
|
||
common "git.apinb.com/heqiapp/platforms/backend/api/internal/logic/common"
|
||
"git.apinb.com/heqiapp/platforms/backend/api/internal/logic/upload"
|
||
"git.apinb.com/heqiapp/platforms/backend/api/internal/models"
|
||
"github.com/gin-gonic/gin"
|
||
"gorm.io/gorm"
|
||
"time"
|
||
)
|
||
|
||
// ticketPhotoRequest 记录添加时间，导入照片不冒充已验证的原始拍摄时间。
|
||
type ticketPhotoRequest struct {
|
||
URI string `json:"uri" binding:"required"`
|
||
AddedAt time.Time `json:"added_at" binding:"required"`
|
||
Source string `json:"source" binding:"required,oneof=camera gallery"`
|
||
}
|
||
|
||
func UploadTicketPhoto(ctx *gin.Context) {
|
||
account, ok := common.UserAccount(ctx)
|
||
if !ok {
|
||
return
|
||
}
|
||
upload.UploadTicketPhoto(ctx, account.Identity)
|
||
}
|
||
|
||
// UploadedTicketPhoto 恢复本人草稿照片，不接受其他账户或任意路径。
|
||
func UploadedTicketPhoto(ctx *gin.Context) {
|
||
account, ok := common.UserAccount(ctx)
|
||
if !ok {
|
||
return
|
||
}
|
||
upload.ServeOwnedTicketPhoto(ctx, account.Identity, ctx.Param("name"))
|
||
}
|
||
|
||
// saveTicketPhotos 与工单创建共用事务，任一图片不属于本人时全部回滚。
|
||
func saveTicketPhotos(tx *gorm.DB, ticket models.CsTicket, owner string, photos []ticketPhotoRequest) error {
|
||
seen := map[string]bool{}
|
||
for index, photo := range photos {
|
||
if seen[photo.URI] || !upload.OwnsTicketPhoto(owner, photo.URI) || photo.AddedAt.IsZero() || photo.AddedAt.After(time.Now().Add(5*time.Minute)) {
|
||
return errcode.ErrInvalidArgument
|
||
}
|
||
seen[photo.URI] = true
|
||
evidence := models.CsTicketEvidence{
|
||
Entity: common.NewEntity(common.StatusEnable), CsTicketID: ticket.ID, EvidenceType: "reported", MediaType: "image", FileURI: photo.URI,
|
||
CapturedAt: photo.AddedAt, ReceivedAt: time.Now(), Source: "user_" + photo.Source, IntegrityStatus: "capture_time_unknown", OperatorIdentity: owner,
|
||
RequestNo: fmt.Sprintf("%x", sha256.Sum256([]byte(fmt.Sprintf("user-photo:%s:%d", ticket.Identity, index)))),
|
||
}
|
||
if err := tx.Create(&evidence).Error; err != nil {
|
||
return err
|
||
}
|
||
}
|
||
return nil
|
||
}
|
||
|
||
// ticketPhotosForList 一次查询本人列表涉及的证据，只发布元数据与公开证据UUID。
|
||
func ticketPhotosForList(tickets []models.CsTicket) (map[uint64][]gin.H, error) {
|
||
result := map[uint64][]gin.H{}
|
||
ids := make([]uint64, 0, len(tickets))
|
||
for _, ticket := range tickets {
|
||
ids = append(ids, ticket.ID)
|
||
}
|
||
if len(ids) == 0 {
|
||
return result, nil
|
||
}
|
||
var photos []models.CsTicketEvidence
|
||
if err := impl.DBService.Where("cs_ticket_id IN ? AND evidence_type = ? AND status <> ?", ids, "reported", common.StatusArchived).Order("created_at asc").Find(&photos).Error; err != nil {
|
||
return nil, err
|
||
}
|
||
for _, photo := range photos {
|
||
result[photo.CsTicketID] = append(result[photo.CsTicketID], gin.H{"identity": photo.Identity, "added_at": photo.CapturedAt, "source": photo.Source, "integrity_status": photo.IntegrityStatus})
|
||
}
|
||
return result, nil
|
||
}
|
||
|
||
// TicketPhoto 不允许借工单UUID读取其他工单照片，也不允许读取他人报修。
|
||
func TicketPhoto(ctx *gin.Context) {
|
||
account, ok := common.UserAccount(ctx)
|
||
if !ok {
|
||
return
|
||
}
|
||
var ticket models.CsTicket
|
||
if impl.DBService.Where("identity = ? AND user_account_id = ? AND status <> ?", ctx.Param("identity"), account.ID, common.StatusArchived).First(&ticket).Error != nil {
|
||
ctx.Status(404)
|
||
return
|
||
}
|
||
var photo models.CsTicketEvidence
|
||
if impl.DBService.Where("identity = ? AND cs_ticket_id = ? AND evidence_type = ? AND status <> ?", ctx.Param("photoIdentity"), ticket.ID, "reported", common.StatusArchived).First(&photo).Error != nil {
|
||
ctx.Status(404)
|
||
return
|
||
}
|
||
upload.ServeTicketPhoto(ctx, account.Identity, photo.FileURI)
|
||
}
|