92 lines
3.5 KiB
Python
92 lines
3.5 KiB
Python
|
import jwt
|
|||
|
|
from django.conf import settings
|
|||
|
|
from threading import local
|
|||
|
|
from django.db.models.signals import post_save, post_delete
|
|||
|
|
from django.dispatch import receiver
|
|||
|
|
from django.utils.functional import SimpleLazyObject
|
|||
|
|
from django.contrib.auth import get_user_model
|
|||
|
|
# 导入日志的模型
|
|||
|
|
from apps.user.models import TableOperationLog, Users
|
|||
|
|
# 导入其他模型用于排除
|
|||
|
|
from apps.project.models import CaseStep, TestDemandContent
|
|||
|
|
# 导入异常处理
|
|||
|
|
from jwt.exceptions import ExpiredSignatureError
|
|||
|
|
from utils.chen_response import ChenResponse
|
|||
|
|
# 导入中间件记录日志模型
|
|||
|
|
from apps.system.models import LoginLog
|
|||
|
|
from apps.system.models import OperationLog
|
|||
|
|
|
|||
|
|
log_manager = TableOperationLog.objects
|
|||
|
|
|
|||
|
|
_thread_local = local()
|
|||
|
|
|
|||
|
|
def get_current_user():
|
|||
|
|
"""
|
|||
|
|
获取当前用户对象，调用则从local对象里面获取user
|
|||
|
|
:return: Users实例
|
|||
|
|
"""
|
|||
|
|
return getattr(_thread_local, 'user', None)
|
|||
|
|
|
|||
|
|
def clear_request_locals(sender, **kwargs):
|
|||
|
|
"""
|
|||
|
|
被request_finished连接的信号处理函数，请求结束后清除local里面的user信息
|
|||
|
|
"""
|
|||
|
|
_thread_local.user = None
|
|||
|
|
|
|||
|
|
def set_request_locals(sender, **kwargs):
|
|||
|
|
"""
|
|||
|
|
被request_started连接的信号处理函数，_thread_local.user属性设置为当前登录用户
|
|||
|
|
"""
|
|||
|
|
bearer_token = kwargs['environ'].get('HTTP_AUTHORIZATION', None)
|
|||
|
|
if not bearer_token or bearer_token == 'Bearer null':
|
|||
|
|
return
|
|||
|
|
bearer_token = bearer_token.replace('Bearer ', '')
|
|||
|
|
# 逻辑：先获取NINJA_JWT配置中秘钥、和加密算法信息
|
|||
|
|
jwt_settings = settings.NINJA_JWT
|
|||
|
|
jwt_secret = jwt_settings.get('SIGNING_KEY', None)
|
|||
|
|
jwt_algo = jwt_settings.get('ALGORITHM', None)
|
|||
|
|
# 如果为None，则使用settings中的秘钥和['HS256']算法
|
|||
|
|
secret_key = jwt_secret or settings.SECRET_KEY
|
|||
|
|
algorithms_str = jwt_algo or 'HS256'
|
|||
|
|
# 解决bug:因为过期前面不跳转首页处理方式
|
|||
|
|
try:
|
|||
|
|
jwt_dict = jwt.decode(bearer_token, secret_key, algorithms=[algorithms_str])
|
|||
|
|
except ExpiredSignatureError as exc:
|
|||
|
|
return ChenResponse(status=403, code=500, message='您的token已过期，请重新登录')
|
|||
|
|
user_id = jwt_dict.get('user_id', None)
|
|||
|
|
if user_id:
|
|||
|
|
_thread_local.user = SimpleLazyObject(lambda: get_user_model().objects.get(id=user_id))
|
|||
|
|
|
|||
|
|
# 1.注意可以不传sender，为监听所有模型，这里来记录日志
|
|||
|
|
# 2.使用get_current_user()获取当前请求用户
|
|||
|
|
@receiver(post_save)
|
|||
|
|
def post_save_handler(sender, instance, created, **kwargs):
|
|||
|
|
"""模型新增-操作日志填写"""
|
|||
|
|
# 注意排除日志模块、用例步骤表、测试项步骤表
|
|||
|
|
if (sender == TableOperationLog or sender == CaseStep or sender == TestDemandContent or sender == LoginLog or sender == OperationLog or sender
|
|||
|
|
== Users):
|
|||
|
|
return
|
|||
|
|
user = get_current_user()
|
|||
|
|
ope_dict = {
|
|||
|
|
'operate_obj': str(instance),
|
|||
|
|
}
|
|||
|
|
if created:
|
|||
|
|
ope_dict['operate_des'] = '新增'
|
|||
|
|
else:
|
|||
|
|
ope_dict['operate_des'] = '修改'
|
|||
|
|
log_manager.create(user=user, **ope_dict)
|
|||
|
|
|
|||
|
|
@receiver(post_delete)
|
|||
|
|
def post_delete_handler(sender, instance, **kwargs):
|
|||
|
|
"""模型删除-操作日志填写"""
|
|||
|
|
# 注意排除日志模块、用例步骤表、测试项步骤表
|
|||
|
|
if (sender == TableOperationLog or sender == CaseStep or sender == TestDemandContent or sender == LoginLog or sender == OperationLog or sender
|
|||
|
|
== Users):
|
|||
|
|
return
|
|||
|
|
user = get_current_user()
|
|||
|
|
ope_dict = {
|
|||
|
|
'operate_obj': str(instance),
|
|||
|
|
'operate_des': '删除'
|
|||
|
|
}
|
|||
|
|
log_manager.create(user=user, **ope_dict)
|