mirror of
https://github.com/kuaifan/dootask.git
synced 2026-09-11 22:49:11 +00:00
301 lines
11 KiB
PHP
301 lines
11 KiB
PHP
<?php
|
||
|
||
namespace App\Http\Controllers\Api;
|
||
|
||
use App\Exceptions\ApiException;
|
||
use App\Models\User;
|
||
use App\Models\WebDavCredential;
|
||
use App\Models\WebDavLock;
|
||
use App\Module\Base;
|
||
use App\Services\WebDav\WebDavConfig;
|
||
use App\Services\WebDav\WebDavConflictService;
|
||
use App\Services\WebDav\WebDavCredentialService;
|
||
use Request;
|
||
|
||
/**
|
||
* @apiDefine fileDav
|
||
*
|
||
* WebDAV 管理
|
||
*/
|
||
class FileDavController extends AbstractController
|
||
{
|
||
/**
|
||
* Laravel passes the dynamic action before the route default for this fixed-method route.
|
||
*/
|
||
public function __invoke($action, $method = 'dav')
|
||
{
|
||
return parent::__invoke($method, $action);
|
||
}
|
||
|
||
/**
|
||
* @api {get} api/file/dav/status 获取 WebDAV 状态
|
||
* @apiDescription 需要token身份
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup fileDav
|
||
* @apiName dav__status
|
||
*/
|
||
public function dav__status()
|
||
{
|
||
$user = User::auth();
|
||
$config = WebDavConfig::get();
|
||
return Base::retSuccess('success', [
|
||
'enabled' => $config['enabled'],
|
||
'allowed' => WebDavConfig::isAllowed($user, $config),
|
||
'https' => Request::secure(),
|
||
'url' => WebDavConfig::url(),
|
||
'max_credentials' => $config['max_credentials'],
|
||
'active_credentials' => WebDavCredential::whereUserid($user->userid)
|
||
->whereNull('revoked_at')
|
||
->where(function ($query) {
|
||
$query->whereNull('expires_at')->orWhere('expires_at', '>', now());
|
||
})->count(),
|
||
'default_expire_days' => $config['default_expire_days'],
|
||
'max_expire_days' => $config['max_expire_days'],
|
||
'max_file_bytes' => $config['max_file_bytes'],
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* @api {get} api/file/dav/credentials 获取 WebDAV 凭据
|
||
* @apiDescription 需要token身份
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup fileDav
|
||
* @apiName dav__credentials
|
||
*/
|
||
public function dav__credentials()
|
||
{
|
||
$user = User::auth();
|
||
$list = WebDavCredential::whereUserid($user->userid)->orderByDesc('id')->get();
|
||
$data = $list->map(function (WebDavCredential $credential) {
|
||
return [
|
||
'id' => $credential->id,
|
||
'public_id' => $credential->public_id,
|
||
'name' => $credential->name,
|
||
'password_suffix' => $credential->password_suffix,
|
||
'expires_at' => $credential->expires_at?->toDateTimeString(),
|
||
'last_used_at' => $credential->last_used_at?->toDateTimeString(),
|
||
'last_used_ip' => $credential->last_used_ip,
|
||
'last_user_agent' => $credential->last_user_agent,
|
||
'created_at' => $credential->created_at?->toDateTimeString(),
|
||
'revoked_at' => $credential->revoked_at?->toDateTimeString(),
|
||
'status' => $credential->status(),
|
||
];
|
||
})->values();
|
||
return Base::retSuccess('success', $data);
|
||
}
|
||
|
||
/**
|
||
* @api {post} api/file/dav/create 创建 WebDAV 应用密码
|
||
* @apiDescription 需要token身份，密码只返回一次
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup fileDav
|
||
* @apiName dav__create
|
||
*/
|
||
public function dav__create()
|
||
{
|
||
$user = User::auth();
|
||
$config = WebDavConfig::get();
|
||
if (!WebDavConfig::isAllowed($user, $config)) {
|
||
throw new ApiException('WebDAV 未启用或你没有使用权限');
|
||
}
|
||
if (!Request::secure() && !app()->environment(['local', 'testing'])) {
|
||
throw new ApiException('WebDAV 必须通过 HTTPS 使用');
|
||
}
|
||
$name = mb_substr(trim((string) Request::input('name')), 0, 100);
|
||
if ($name === '') {
|
||
throw new ApiException('请输入设备名称');
|
||
}
|
||
$expireDays = intval(Request::input('expire_days', $config['default_expire_days']));
|
||
if ($expireDays < 1 || $expireDays > $config['max_expire_days']) {
|
||
throw new ApiException('有效期超出允许范围');
|
||
}
|
||
$activeCount = WebDavCredential::whereUserid($user->userid)
|
||
->whereNull('revoked_at')
|
||
->where(function ($query) {
|
||
$query->whereNull('expires_at')->orWhere('expires_at', '>', now());
|
||
})->count();
|
||
if ($activeCount >= $config['max_credentials']) {
|
||
throw new ApiException('WebDAV 应用密码数量已达上限');
|
||
}
|
||
|
||
[$credential, $secret] = WebDavCredential::issue($user, $name, $expireDays);
|
||
return Base::retSuccess('创建成功', [
|
||
'id' => $credential->id,
|
||
'public_id' => $credential->public_id,
|
||
'password' => $secret,
|
||
'password_suffix' => $credential->password_suffix,
|
||
'url' => WebDavConfig::url(),
|
||
'expires_at' => $credential->expires_at?->toDateTimeString(),
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* @api {post} api/file/dav/revoke 撤销 WebDAV 应用密码
|
||
* @apiDescription 需要token身份
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup fileDav
|
||
* @apiName dav__revoke
|
||
*/
|
||
public function dav__revoke()
|
||
{
|
||
$user = User::auth();
|
||
$credential = WebDavCredential::whereUserid($user->userid)
|
||
->whereId(intval(Request::input('id')))
|
||
->first();
|
||
if (!$credential) {
|
||
throw new ApiException('WebDAV 应用密码不存在');
|
||
}
|
||
$credential->revoke();
|
||
return Base::retSuccess('撤销成功', [
|
||
'id' => $credential->id,
|
||
'revoked_at' => $credential->revoked_at?->toDateTimeString(),
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* @api {post} api/file/dav/delete 永久删除已失效的 WebDAV 应用密码
|
||
* @apiDescription 需要token身份，仅允许删除本人已撤销或已过期的凭据，操作日志保留
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup fileDav
|
||
* @apiName dav__delete
|
||
*
|
||
* @apiParam {Number} id 应用密码 ID
|
||
*/
|
||
public function dav__delete()
|
||
{
|
||
$user = User::auth();
|
||
$id = intval(Request::input('id'));
|
||
(new WebDavCredentialService())->deleteInactive(
|
||
$user,
|
||
$id,
|
||
Request::header('X-Request-Id'),
|
||
Request::ip(),
|
||
Request::userAgent()
|
||
);
|
||
return Base::retSuccess('删除成功', ['id' => $id]);
|
||
}
|
||
|
||
/**
|
||
* @api {get} api/file/dav/adminsetting 获取或保存 WebDAV 设置
|
||
* @apiDescription 需要管理员身份
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup fileDav
|
||
* @apiName dav__adminsetting
|
||
*/
|
||
public function dav__adminsetting()
|
||
{
|
||
User::auth('admin');
|
||
if (Request::input('type') === 'save') {
|
||
if (config('dootask.system_setting') === 'disabled') {
|
||
throw new ApiException('当前环境禁止修改');
|
||
}
|
||
$normalized = WebDavConfig::normalizeAdminInput(Request::input());
|
||
if ($normalized['webdav_enabled'] === 'open' && WebDavConfig::pathConflictCount() > 0) {
|
||
throw new ApiException('存在文件路径冲突，请先处理后再启用 WebDAV');
|
||
}
|
||
$current = Base::setting('fileSetting');
|
||
$setting = array_merge($current, $normalized);
|
||
Base::setting('fileSetting', $setting);
|
||
}
|
||
return Base::retSuccess(Request::input('type') === 'save' ? '保存成功' : 'success', WebDavConfig::adminForm());
|
||
}
|
||
|
||
/**
|
||
* @api {get} api/file/dav/adminstatus 获取 WebDAV 运行状态
|
||
* @apiDescription 需要管理员身份
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup fileDav
|
||
* @apiName dav__adminstatus
|
||
*/
|
||
public function dav__adminstatus()
|
||
{
|
||
User::auth('admin');
|
||
return Base::retSuccess('success', [
|
||
'config' => WebDavConfig::get(),
|
||
'active_credentials' => WebDavCredential::whereNull('revoked_at')
|
||
->where(function ($query) {
|
||
$query->whereNull('expires_at')->orWhere('expires_at', '>', now());
|
||
})->count(),
|
||
'active_locks' => WebDavLock::where('timeout_at', '>', now())->count(),
|
||
'path_conflicts' => WebDavConfig::pathConflictCount(),
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* @api {get} api/file/dav/conflicts 获取 WebDAV 路径冲突明细
|
||
* @apiDescription 需要管理员身份
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup fileDav
|
||
* @apiName dav__conflicts
|
||
*
|
||
* @apiParam {Number} [page=1] 页码
|
||
* @apiParam {Number} [pagesize=20] 每页数量，最大 100
|
||
* @apiSuccess {Boolean} data.data.files.can_open_location 当前管理员能否按现有文件权限打开所在位置
|
||
* @apiSuccess {String} data.data.files.location_board 定位板块：mine 或 shared
|
||
* @apiSuccess {Number} data.data.files.location_parent_id 定位目录 ID，共享根文件为 0
|
||
*/
|
||
public function dav__conflicts()
|
||
{
|
||
$user = User::auth('admin');
|
||
return Base::retSuccess('success', WebDavConfig::pathConflicts(
|
||
intval(Request::input('page', 1)),
|
||
intval(Request::input('pagesize', 20)),
|
||
$user
|
||
));
|
||
}
|
||
|
||
/**
|
||
* @api {post} api/file/dav/conflictrename 管理员重命名 WebDAV 冲突文件
|
||
* @apiDescription 需要管理员身份，目标必须仍属于路径冲突组
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup fileDav
|
||
* @apiName dav__conflictrename
|
||
*
|
||
* @apiParam {Number} id 文件 ID
|
||
* @apiParam {String} name 新的完整名称
|
||
*/
|
||
public function dav__conflictrename()
|
||
{
|
||
$user = User::auth('admin');
|
||
$name = trim((string) Request::input('name'));
|
||
$file = (new WebDavConflictService())->renameAsAdmin(
|
||
$user,
|
||
intval(Request::input('id')),
|
||
$name,
|
||
Request::header('X-Request-Id'),
|
||
Request::ip(),
|
||
Request::userAgent()
|
||
);
|
||
return Base::retSuccess('重命名成功', [
|
||
'id' => intval($file->id),
|
||
'name' => $file->getNameAndExt(),
|
||
'path_conflicts' => WebDavConfig::pathConflictCount(),
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* @api {post} api/file/dav/userrevoke 撤销用户全部 WebDAV 应用密码
|
||
* @apiDescription 需要管理员身份
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup fileDav
|
||
* @apiName dav__userrevoke
|
||
*/
|
||
public function dav__userrevoke()
|
||
{
|
||
User::auth('admin');
|
||
$userid = intval(Request::input('userid'));
|
||
if ($userid <= 0 || !User::whereUserid($userid)->exists()) {
|
||
throw new ApiException('用户不存在');
|
||
}
|
||
$credentials = WebDavCredential::whereUserid($userid)->whereNull('revoked_at')->get();
|
||
foreach ($credentials as $credential) {
|
||
$credential->revoke();
|
||
}
|
||
return Base::retSuccess('撤销成功', [
|
||
'userid' => $userid,
|
||
'revoked_count' => $credentials->count(),
|
||
'revoked_at' => now()->toDateTimeString(),
|
||
]);
|
||
}
|
||
}
|