mirror of
https://github.com/fastapiadmin/FastapiAdmin.git
synced 2026-09-21 04:46:26 +00:00
zhangtao
a8d29d4ab4
- 修正 AI 会话表初始化及异步数据库 URI 处理 - 新增全局 API 与 WS 聊天限流，健康检查豁免 - 修复忘记密码接口防用户枚举与参数校验 - 修复 SSE 推送数据重复编码问题 - 修复 Cron 表达式 Quartz 问号兼容 - 修复存储模块权限标识前缀 - 新增过期日志清理与任务错误中文提示
273 lines
11 KiB
Python
273 lines
11 KiB
Python
import re
|
||
from urllib.parse import urlparse
|
||
|
||
from pydantic import (
|
||
BaseModel,
|
||
ConfigDict,
|
||
EmailStr,
|
||
Field,
|
||
field_validator,
|
||
model_validator,
|
||
)
|
||
|
||
from app.config.setting import settings
|
||
from app.core.base_schema import BaseQueryParam, BaseSchema, CommonSchema, CoreUserSchema, UserByQueryParam, UserBySchema
|
||
from app.core.validator import DateTimeStr, email_validator, mobile_validator, password_validator
|
||
from app.modules.system.menu.schema import MenuTreeOutSchema
|
||
from app.modules.system.role.schema import RoleOutSchema
|
||
|
||
PASSWORD_FIELD_DESC = (
|
||
f"密码（{settings.PASSWORD_MIN_LENGTH}-{settings.PASSWORD_MAX_LENGTH} 位，"
|
||
"需包含字母、数字、符号中的至少两类）"
|
||
)
|
||
|
||
|
||
class CurrentUserUpdateSchema(BaseModel):
|
||
"""基础用户信息"""
|
||
|
||
name: str | None = Field(default=None, max_length=32, description="名称")
|
||
mobile: str | None = Field(default=None, max_length=11, description="手机号")
|
||
email: EmailStr | None = Field(default=None, description="邮箱")
|
||
gender: str | None = Field(default=None, max_length=1, description="性别(0:男 1:女 2:未知)")
|
||
avatar: str | None = Field(default=None, max_length=255, description="头像")
|
||
description: str | None = Field(default=None, max_length=500, description="描述")
|
||
|
||
@field_validator("mobile")
|
||
@classmethod
|
||
def validate_mobile(cls, value: str | None):
|
||
"""校验手机号格式"""
|
||
return mobile_validator(value)
|
||
|
||
@field_validator("email")
|
||
@classmethod
|
||
def validate_email(cls, value: str | None):
|
||
"""校验邮箱格式"""
|
||
if not value:
|
||
return value
|
||
return email_validator(value)
|
||
|
||
@field_validator("gender")
|
||
@classmethod
|
||
def validate_gender(cls, value: str | None):
|
||
"""校验性别：仅支持 0(男)、1(女)、2(未知)"""
|
||
if value and value not in {"0", "1", "2"}:
|
||
raise ValueError("性别仅支持 0(男)、1(女)、2(未知)")
|
||
return value
|
||
|
||
@field_validator("avatar")
|
||
@classmethod
|
||
def validate_avatar(cls, value: str | None):
|
||
"""校验头像地址为合法的 HTTP/HTTPS URL"""
|
||
if not value:
|
||
return value
|
||
parsed = urlparse(str(value))
|
||
if parsed.scheme in ("http", "https") and parsed.netloc:
|
||
return value
|
||
raise ValueError("头像地址需为有效的 HTTP/HTTPS URL")
|
||
|
||
@model_validator(mode="after")
|
||
def check_model(self):
|
||
"""校验基础用户信息长度约束"""
|
||
if self.name and len(self.name) > 32:
|
||
raise ValueError("名称长度不能超过 32 个字符")
|
||
return self
|
||
|
||
|
||
class UserForgetPasswordSchema(BaseModel):
|
||
"""忘记密码申请。仅接受用户名，不得携带新密码（改密走管理员 reset_password）。"""
|
||
|
||
model_config = ConfigDict(extra="ignore")
|
||
|
||
username: str = Field(..., min_length=3, max_length=32, description="用户名")
|
||
|
||
@field_validator("username")
|
||
@classmethod
|
||
def validate_username(cls, value: str):
|
||
"""校验账号：字母开头，3-32 位"""
|
||
v = value.strip()
|
||
if not v:
|
||
raise ValueError("账号不能为空")
|
||
|
||
if not re.match(r"^[A-Za-z][A-Za-z0-9_.-]{2,31}$", v):
|
||
raise ValueError("账号需以字母开头，3-32 位，仅允许字母、数字、_ . -")
|
||
return v
|
||
|
||
|
||
class UserChangePasswordSchema(BaseModel):
|
||
"""修改密码"""
|
||
|
||
old_password: str = Field(..., description="旧密码")
|
||
new_password: str = Field(..., description=PASSWORD_FIELD_DESC)
|
||
|
||
@field_validator("old_password")
|
||
@classmethod
|
||
def validate_old_password(cls, value: str):
|
||
"""校验旧密码：只校验长度，避免历史弱口令用户无法主动换掉弱口令"""
|
||
return password_validator(value, check_strength=False)
|
||
|
||
@field_validator("new_password")
|
||
@classmethod
|
||
def validate_new_password(cls, value: str):
|
||
"""校验新密码：长度与复杂度"""
|
||
return password_validator(value, label="新密码")
|
||
|
||
|
||
class ResetPasswordSchema(BaseModel):
|
||
"""重置密码"""
|
||
|
||
id: int = Field(default=0, description="主键ID（已弃用，由路径参数传入）")
|
||
password: str = Field(..., description=PASSWORD_FIELD_DESC)
|
||
|
||
@field_validator("password")
|
||
@classmethod
|
||
def validate_password(cls, value: str):
|
||
"""校验新密码：长度与复杂度"""
|
||
return password_validator(value, label="新密码")
|
||
|
||
|
||
class UserCreateSchema(CurrentUserUpdateSchema):
|
||
"""新增用户
|
||
"""
|
||
|
||
username: str | None = Field(default=None, max_length=32, description="用户名")
|
||
password: str | None = Field(default=None, description=PASSWORD_FIELD_DESC)
|
||
status: int = Field(default=0, ge=0, le=1, description="状态(0:启动 1:停用)")
|
||
description: str | None = Field(default=None, max_length=255, description="备注")
|
||
is_superuser: bool | None = Field(default=False, description="是否超管")
|
||
dept_id: int | None = Field(default=None, description="部门ID")
|
||
role_ids: list[int] | None = Field(default=[], description="角色ID列表")
|
||
position_ids: list[int] | None = Field(default=[], description="岗位ID列表")
|
||
@field_validator("username")
|
||
@classmethod
|
||
def validate_username(cls, value: str | None):
|
||
"""校验账号：字母开头，2-32 位"""
|
||
if not value:
|
||
return value
|
||
v = value.strip()
|
||
|
||
if not re.match(r"^[A-Za-z][A-Za-z0-9_.-]{1,31}$", v):
|
||
raise ValueError("账号需以字母开头，2-32 位，仅允许字母、数字、_ . -")
|
||
return v
|
||
|
||
@field_validator("password")
|
||
@classmethod
|
||
def validate_password(cls, value: str | None):
|
||
"""校验密码：长度与复杂度（未填写则跳过）"""
|
||
return password_validator(value)
|
||
|
||
|
||
class UserRegisterSchema(BaseModel):
|
||
"""用户注册"""
|
||
|
||
username: str = Field(..., min_length=3, max_length=32, description="用户名")
|
||
password: str = Field(..., description=PASSWORD_FIELD_DESC)
|
||
email: EmailStr | None = Field(default=None, description="邮箱")
|
||
name: str | None = Field(default=None, max_length=32, description="名称")
|
||
|
||
@field_validator("username")
|
||
@classmethod
|
||
def validate_username(cls, value: str):
|
||
"""校验账号：字母开头，3-32 位"""
|
||
v = value.strip()
|
||
if not v:
|
||
raise ValueError("账号不能为空")
|
||
|
||
if not re.match(r"^[A-Za-z][A-Za-z0-9_.-]{2,31}$", v):
|
||
raise ValueError("账号需以字母开头，3-32 位，仅允许字母、数字、_ . -")
|
||
return v
|
||
|
||
@field_validator("password")
|
||
@classmethod
|
||
def validate_password(cls, value: str):
|
||
"""校验密码：长度与复杂度"""
|
||
return password_validator(value)
|
||
|
||
|
||
class UserUpdateSchema(CurrentUserUpdateSchema):
|
||
"""更新"""
|
||
|
||
model_config = ConfigDict(from_attributes=True)
|
||
|
||
username: str | None = Field(default=None, max_length=32, description="用户名")
|
||
password: str | None = Field(default=None, description=PASSWORD_FIELD_DESC)
|
||
status: int | None = Field(default=None, ge=0, le=1, description="状态(0:启动 1:停用)")
|
||
description: str | None = Field(default=None, max_length=255, description="备注")
|
||
dept_id: int | None = Field(default=None, description="部门ID")
|
||
role_ids: list[int] | None = Field(default=[], description="角色ID列表")
|
||
position_ids: list[int] | None = Field(default=[], description="岗位ID列表")
|
||
|
||
@field_validator("password")
|
||
@classmethod
|
||
def validate_password(cls, value: str | None):
|
||
"""校验密码：长度与复杂度（未填写表示不改密码）"""
|
||
return password_validator(value)
|
||
|
||
@field_validator("username")
|
||
@classmethod
|
||
def validate_username(cls, value: str | None):
|
||
"""校验账号：字母开头，2-32 位"""
|
||
if not value:
|
||
return value
|
||
v = value.strip()
|
||
|
||
if not re.match(r"^[A-Za-z][A-Za-z0-9_.-]{1,31}$", v):
|
||
raise ValueError("账号需以字母开头，2-32 位，仅允许字母、数字、_ . -")
|
||
return v
|
||
|
||
|
||
class UserOutSchema(CoreUserSchema, BaseSchema, UserBySchema):
|
||
"""用户管理列表/详情响应（精简版，不含大字段嵌套）"""
|
||
|
||
model_config = ConfigDict(arbitrary_types_allowed=True, from_attributes=True)
|
||
|
||
id: int = Field(default=0, description="主键ID")
|
||
username: str | None = Field(default=None, max_length=32, description="用户名")
|
||
name: str | None = Field(default=None, max_length=32, description="名称")
|
||
mobile: str | None = Field(default=None, max_length=11, description="手机号")
|
||
email: EmailStr | None = Field(default=None, description="邮箱")
|
||
gender: str | None = Field(default=None, max_length=1, description="性别(0:男 1:女 2:未知)")
|
||
avatar: str | None = Field(default=None, max_length=255, description="头像")
|
||
status: int | None = Field(default=0, ge=0, le=1, description="状态(0:启动 1:停用)")
|
||
description: str | None = Field(default=None, max_length=255, description="备注")
|
||
dept_id: int | None = Field(default=None, description="部门ID")
|
||
role_ids: list[int] | None = Field(default=[], description="角色ID列表")
|
||
position_ids: list[int] | None = Field(default=[], description="岗位ID列表")
|
||
dept_name: str | None = Field(default=None, description="部门名称")
|
||
is_superuser: bool = Field(default=False, description="是否超管")
|
||
last_login: DateTimeStr | None = Field(default=None, description="最后登录时间")
|
||
|
||
|
||
class CurrentUserOutSchema(UserOutSchema):
|
||
"""当前用户信息响应（含完整菜单/角色/岗位等嵌套数据）"""
|
||
|
||
dept: CommonSchema | None = Field(default=None, description="部门")
|
||
positions: list[CommonSchema] | None = Field(default=[], description="岗位")
|
||
roles: list[RoleOutSchema] | None = Field(default=[], description="角色")
|
||
menus: list[MenuTreeOutSchema] | None = Field(default=[], description="菜单")
|
||
gitee_login: str | None = Field(default=None, max_length=32, description="Gitee登录")
|
||
github_login: str | None = Field(default=None, max_length=32, description="Github登录")
|
||
wx_login: str | None = Field(default=None, max_length=32, description="微信登录")
|
||
qq_login: str | None = Field(default=None, max_length=32, description="QQ登录")
|
||
|
||
|
||
class UserQueryParam(BaseQueryParam, UserByQueryParam):
|
||
"""用户管理查询参数（继承标准 Mixin）
|
||
|
||
支持：
|
||
- 时间范围（BaseQueryParam）
|
||
- 创建人/更新人筛选（UserByQueryParam）
|
||
- 业务字段：用户名、名称、手机号、邮箱、部门、状态
|
||
"""
|
||
|
||
username: str | None = Field(None, description="用户名", json_schema_extra={"q": "like"})
|
||
name: str | None = Field(None, description="名称", json_schema_extra={"q": "like"})
|
||
mobile: str | None = Field(None, description="手机号", pattern=r"^1[3-9]\d{9}$", json_schema_extra={"q": "eq"})
|
||
email: str | None = Field(
|
||
None,
|
||
description="邮箱",
|
||
pattern=r"^[a-zA-Z0-9_.+-]+@[a-zA-Z0-9-]+\.[a-zA-Z0-9-.]+$",
|
||
json_schema_extra={"q": "eq"},
|
||
)
|
||
dept_id: int | None = Field(None, description="部门ID", json_schema_extra={"q": "eq"})
|
||
status: int | None = Field(None, description="是否可用", json_schema_extra={"q": "eq"})
|