mirror of
https://github.com/casdoor/casdoor.git
synced 2025-05-23 02:35:49 +08:00
462 lines
13 KiB
Go
462 lines
13 KiB
Go
// Copyright 2021 The Casdoor Authors. All Rights Reserved.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package object
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"reflect"
|
|
"regexp"
|
|
"strings"
|
|
|
|
"github.com/casdoor/casdoor/i18n"
|
|
|
|
jsoniter "github.com/json-iterator/go"
|
|
|
|
"github.com/casdoor/casdoor/idp"
|
|
"github.com/casdoor/casdoor/util"
|
|
"github.com/xorm-io/core"
|
|
)
|
|
|
|
func GetUserByField(organizationName string, field string, value string) (*User, error) {
|
|
if field == "" || value == "" {
|
|
return nil, nil
|
|
}
|
|
|
|
user := User{Owner: organizationName}
|
|
existed, err := ormer.Engine.Where(fmt.Sprintf("%s=?", strings.ToLower(field)), value).Get(&user)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
if existed {
|
|
return &user, nil
|
|
} else {
|
|
return nil, nil
|
|
}
|
|
}
|
|
|
|
func HasUserByField(organizationName string, field string, value string) bool {
|
|
user, err := GetUserByField(organizationName, field, value)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
return user != nil
|
|
}
|
|
|
|
func GetUserByFields(organization string, field string) (*User, error) {
|
|
// check username
|
|
user, err := GetUserByField(organization, "name", field)
|
|
if err != nil || user != nil {
|
|
return user, err
|
|
}
|
|
|
|
// check email
|
|
if strings.Contains(field, "@") {
|
|
user, err = GetUserByField(organization, "email", field)
|
|
if user != nil || err != nil {
|
|
return user, err
|
|
}
|
|
}
|
|
|
|
// check phone
|
|
user, err = GetUserByField(organization, "phone", field)
|
|
if user != nil || err != nil {
|
|
return user, err
|
|
}
|
|
|
|
// check user ID
|
|
user, err = GetUserByField(organization, "id", field)
|
|
if user != nil || err != nil {
|
|
return user, err
|
|
}
|
|
|
|
// check ID card
|
|
user, err = GetUserByField(organization, "id_card", field)
|
|
if user != nil || err != nil {
|
|
return user, err
|
|
}
|
|
|
|
return nil, nil
|
|
}
|
|
|
|
func SetUserField(user *User, field string, value string) (bool, error) {
|
|
bean := make(map[string]interface{})
|
|
if field == "password" {
|
|
organization, err := GetOrganizationByUser(user)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
|
|
user.UpdateUserPassword(organization)
|
|
bean[strings.ToLower(field)] = user.Password
|
|
bean["password_type"] = user.PasswordType
|
|
} else {
|
|
bean[strings.ToLower(field)] = value
|
|
}
|
|
|
|
affected, err := ormer.Engine.Table(user).ID(core.PK{user.Owner, user.Name}).Update(bean)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
|
|
user, err = getUser(user.Owner, user.Name)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
|
|
err = user.UpdateUserHash()
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
|
|
if user != nil {
|
|
user.UpdatedTime = util.GetCurrentTime()
|
|
}
|
|
|
|
_, err = ormer.Engine.ID(core.PK{user.Owner, user.Name}).Cols("hash").Update(user)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
|
|
return affected != 0, nil
|
|
}
|
|
|
|
func GetUserField(user *User, field string) string {
|
|
// https://socketloop.com/tutorials/golang-how-to-get-struct-field-and-value-by-name
|
|
u := reflect.ValueOf(user)
|
|
f := reflect.Indirect(u).FieldByName(field)
|
|
return f.String()
|
|
}
|
|
|
|
func setUserProperty(user *User, field string, value string) {
|
|
if value == "" {
|
|
delete(user.Properties, field)
|
|
} else {
|
|
if user.Properties == nil {
|
|
user.Properties = make(map[string]string)
|
|
}
|
|
|
|
user.Properties[field] = value
|
|
}
|
|
}
|
|
|
|
func getUserProperty(user *User, field string) string {
|
|
if user.Properties == nil {
|
|
return ""
|
|
}
|
|
return user.Properties[field]
|
|
}
|
|
|
|
func getUserExtraProperty(user *User, providerType, key string) (string, error) {
|
|
extraJson := getUserProperty(user, fmt.Sprintf("oauth_%s_extra", providerType))
|
|
if extraJson == "" {
|
|
return "", nil
|
|
}
|
|
extra := make(map[string]string)
|
|
if err := jsoniter.Unmarshal([]byte(extraJson), &extra); err != nil {
|
|
return "", err
|
|
}
|
|
return extra[key], nil
|
|
}
|
|
|
|
func SetUserOAuthProperties(organization *Organization, user *User, providerType string, userInfo *idp.UserInfo) (bool, error) {
|
|
if userInfo.Id != "" {
|
|
propertyName := fmt.Sprintf("oauth_%s_id", providerType)
|
|
setUserProperty(user, propertyName, userInfo.Id)
|
|
}
|
|
if userInfo.Username != "" {
|
|
propertyName := fmt.Sprintf("oauth_%s_username", providerType)
|
|
setUserProperty(user, propertyName, userInfo.Username)
|
|
}
|
|
if userInfo.DisplayName != "" {
|
|
propertyName := fmt.Sprintf("oauth_%s_displayName", providerType)
|
|
setUserProperty(user, propertyName, userInfo.DisplayName)
|
|
if user.DisplayName == "" {
|
|
user.DisplayName = userInfo.DisplayName
|
|
}
|
|
} else if user.DisplayName == "" {
|
|
if userInfo.Username != "" {
|
|
user.DisplayName = userInfo.Username
|
|
} else {
|
|
user.DisplayName = userInfo.Id
|
|
}
|
|
}
|
|
if userInfo.Email != "" {
|
|
propertyName := fmt.Sprintf("oauth_%s_email", providerType)
|
|
setUserProperty(user, propertyName, userInfo.Email)
|
|
if user.Email == "" {
|
|
user.Email = userInfo.Email
|
|
}
|
|
}
|
|
|
|
if userInfo.UnionId != "" {
|
|
propertyName := fmt.Sprintf("oauth_%s_unionId", providerType)
|
|
setUserProperty(user, propertyName, userInfo.UnionId)
|
|
}
|
|
|
|
if userInfo.AvatarUrl != "" {
|
|
propertyName := fmt.Sprintf("oauth_%s_avatarUrl", providerType)
|
|
setUserProperty(user, propertyName, userInfo.AvatarUrl)
|
|
if user.Avatar == "" || user.Avatar == organization.DefaultAvatar {
|
|
user.Avatar = userInfo.AvatarUrl
|
|
}
|
|
}
|
|
|
|
if userInfo.Extra != nil {
|
|
// Save extra info as json string
|
|
propertyName := fmt.Sprintf("oauth_%s_extra", providerType)
|
|
oldExtraJson := getUserProperty(user, propertyName)
|
|
extra := make(map[string]string)
|
|
if oldExtraJson != "" {
|
|
if err := jsoniter.Unmarshal([]byte(oldExtraJson), &extra); err != nil {
|
|
return false, err
|
|
}
|
|
}
|
|
for k, v := range userInfo.Extra {
|
|
extra[k] = v
|
|
}
|
|
|
|
newExtraJson, err := jsoniter.Marshal(extra)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
setUserProperty(user, propertyName, string(newExtraJson))
|
|
}
|
|
|
|
return UpdateUserForAllFields(user.GetId(), user)
|
|
}
|
|
|
|
func ClearUserOAuthProperties(user *User, providerType string) (bool, error) {
|
|
for k := range user.Properties {
|
|
prefix := fmt.Sprintf("oauth_%s_", providerType)
|
|
if strings.HasPrefix(k, prefix) {
|
|
delete(user.Properties, k)
|
|
}
|
|
}
|
|
|
|
affected, err := ormer.Engine.ID(core.PK{user.Owner, user.Name}).Cols("properties").Update(user)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
|
|
return affected != 0, nil
|
|
}
|
|
|
|
func CheckPermissionForUpdateUser(oldUser, newUser *User, isAdmin bool, lang string) (bool, string) {
|
|
organization, err := GetOrganizationByUser(oldUser)
|
|
if err != nil {
|
|
return false, err.Error()
|
|
}
|
|
|
|
var itemsChanged []*AccountItem
|
|
|
|
if oldUser.Owner != newUser.Owner {
|
|
item := GetAccountItemByName("Organization", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
if oldUser.Name != newUser.Name {
|
|
item := GetAccountItemByName("Name", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
if oldUser.Id != newUser.Id {
|
|
item := GetAccountItemByName("ID", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
if oldUser.DisplayName != newUser.DisplayName {
|
|
item := GetAccountItemByName("Display name", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
if oldUser.Avatar != newUser.Avatar {
|
|
item := GetAccountItemByName("Avatar", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
if oldUser.Type != newUser.Type {
|
|
item := GetAccountItemByName("User type", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
// The password is *** when not modified
|
|
if oldUser.Password != newUser.Password && newUser.Password != "***" {
|
|
item := GetAccountItemByName("Password", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
if oldUser.Email != newUser.Email {
|
|
item := GetAccountItemByName("Email", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
if oldUser.Phone != newUser.Phone {
|
|
item := GetAccountItemByName("Phone", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
if oldUser.CountryCode != newUser.CountryCode {
|
|
item := GetAccountItemByName("Country code", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
if oldUser.Region != newUser.Region {
|
|
item := GetAccountItemByName("Country/Region", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
if oldUser.Location != newUser.Location {
|
|
item := GetAccountItemByName("Location", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
if oldUser.Affiliation != newUser.Affiliation {
|
|
item := GetAccountItemByName("Affiliation", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
if oldUser.Title != newUser.Title {
|
|
item := GetAccountItemByName("Title", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
if oldUser.Homepage != newUser.Homepage {
|
|
item := GetAccountItemByName("Homepage", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
if oldUser.Bio != newUser.Bio {
|
|
item := GetAccountItemByName("Bio", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
if oldUser.Tag != newUser.Tag {
|
|
item := GetAccountItemByName("Tag", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
if oldUser.SignupApplication != newUser.SignupApplication {
|
|
item := GetAccountItemByName("Signup application", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
|
|
if oldUser.Gender != newUser.Gender {
|
|
item := GetAccountItemByName("Gender", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
|
|
if oldUser.Birthday != newUser.Birthday {
|
|
item := GetAccountItemByName("Birthday", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
|
|
if oldUser.Education != newUser.Education {
|
|
item := GetAccountItemByName("Education", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
|
|
if oldUser.IdCard != newUser.IdCard {
|
|
item := GetAccountItemByName("ID card", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
|
|
if oldUser.IdCardType != newUser.IdCardType {
|
|
item := GetAccountItemByName("ID card type", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
|
|
oldUserPropertiesJson, _ := json.Marshal(oldUser.Properties)
|
|
newUserPropertiesJson, _ := json.Marshal(newUser.Properties)
|
|
if string(oldUserPropertiesJson) != string(newUserPropertiesJson) {
|
|
item := GetAccountItemByName("Properties", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
|
|
if oldUser.PreferredMfaType != newUser.PreferredMfaType {
|
|
item := GetAccountItemByName("Multi-factor authentication", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
|
|
if oldUser.Groups == nil {
|
|
oldUser.Groups = []string{}
|
|
}
|
|
oldUserGroupsJson, _ := json.Marshal(oldUser.Groups)
|
|
if newUser.Groups == nil {
|
|
newUser.Groups = []string{}
|
|
}
|
|
newUserGroupsJson, _ := json.Marshal(newUser.Groups)
|
|
if string(oldUserGroupsJson) != string(newUserGroupsJson) {
|
|
item := GetAccountItemByName("Groups", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
|
|
if oldUser.IsAdmin != newUser.IsAdmin {
|
|
item := GetAccountItemByName("Is admin", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
|
|
if oldUser.IsForbidden != newUser.IsForbidden {
|
|
item := GetAccountItemByName("Is forbidden", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
if oldUser.IsDeleted != newUser.IsDeleted {
|
|
item := GetAccountItemByName("Is deleted", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
|
|
if oldUser.Score != newUser.Score {
|
|
item := GetAccountItemByName("Score", organization)
|
|
itemsChanged = append(itemsChanged, item)
|
|
}
|
|
|
|
for _, accountItem := range itemsChanged {
|
|
|
|
if pass, err := CheckAccountItemModifyRule(accountItem, isAdmin, lang); !pass {
|
|
return pass, err
|
|
}
|
|
|
|
exist, userValue, err := GetUserFieldStringValue(newUser, util.SpaceToCamel(accountItem.Name))
|
|
if err != nil {
|
|
return false, err.Error()
|
|
}
|
|
|
|
if !exist {
|
|
continue
|
|
}
|
|
|
|
if accountItem.Regex == "" {
|
|
continue
|
|
}
|
|
regexSignupItem, err := regexp.Compile(accountItem.Regex)
|
|
if err != nil {
|
|
return false, err.Error()
|
|
}
|
|
|
|
matched := regexSignupItem.MatchString(userValue)
|
|
if !matched {
|
|
return false, fmt.Sprintf(i18n.Translate(lang, "check:The value \"%s\" for account field \"%s\" doesn't match the account item regex"), userValue, accountItem.Name)
|
|
}
|
|
}
|
|
return true, ""
|
|
}
|
|
|
|
func (user *User) GetCountryCode(countryCode string) string {
|
|
if countryCode != "" {
|
|
return countryCode
|
|
}
|
|
|
|
if user != nil && user.CountryCode != "" {
|
|
return user.CountryCode
|
|
}
|
|
|
|
if org, _ := GetOrganizationByUser(user); org != nil && len(org.CountryCodes) > 0 {
|
|
return org.CountryCodes[0]
|
|
}
|
|
return ""
|
|
}
|
|
|
|
func (user *User) IsAdminUser() bool {
|
|
if user == nil {
|
|
return false
|
|
}
|
|
|
|
return user.IsAdmin || user.IsGlobalAdmin()
|
|
}
|