271 lines
11 KiB
Python
271 lines
11 KiB
Python
import re
|
||
from io import BytesIO
|
||
from ZeroCodeMain.settings import BASE_DIR
|
||
from django.http import JsonResponse
|
||
from rest_framework import status
|
||
from users.models import Permissions
|
||
from users.serializers import PermissionsSerializer
|
||
from django.db.models import Q
|
||
from rest_framework.response import Response
|
||
from rest_framework.views import APIView
|
||
import requests
|
||
import os
|
||
from ZeroCodeMain.settings import BASE_DIR
|
||
from depend_main.functions.abstractFactoryFunction import create_class, create_class_from_db
|
||
from BaseApi.models import *
|
||
from dependency.base.utils import *
|
||
from .permission import NormalPermissionCheck
|
||
|
||
config_file_path = os.path.join(BASE_DIR, 'dependency', 'api_config', 'project_info.json')
|
||
with open(config_file_path, "r") as config_file:
|
||
config = json.load(config_file)
|
||
|
||
# 运行前检查
|
||
# 检测并确认所有数据库中的model都已经注册并且创建
|
||
# TODO 队列检查初始化，若已经存在剔除队列
|
||
try:
|
||
instance = Model.objects.all()
|
||
for item in instance:
|
||
model_instance = item.get_django_model()
|
||
except Exception as e:
|
||
print(e)
|
||
|
||
|
||
# Create your views here.
|
||
class GetAllModelList(APIView):
|
||
|
||
def get(self, request):
|
||
instance_in = Model.objects.all()
|
||
get_serializers = build_serializers(Model.__name__, Model, {}, False)
|
||
datas = get_serializers(instance_in, many=True).data
|
||
return Response({
|
||
"datas": datas,
|
||
})
|
||
|
||
|
||
class GetModelDetail(APIView):
|
||
def get(self, request):
|
||
instance_in = ModelField.objects.filter(model_id=request.GET["id"])
|
||
get_serializers = build_serializers(ModelField.__name__, ModelField, {}, False)
|
||
datas = get_serializers(instance_in, many=True).data
|
||
return Response({
|
||
"datas": datas,
|
||
})
|
||
|
||
def post(self, request):
|
||
for add_item in request.data:
|
||
if "id" not in add_item:
|
||
add_item["model"] = Model.objects.get(pk=add_item["model"])
|
||
ModelField.objects.create(**add_item)
|
||
else:
|
||
add_item["model"] = add_item["model"]["id"]
|
||
ins = ModelField.objects.get(pk=add_item["id"])
|
||
get_serializers = build_serializers(ModelField.__name__, ModelField, {}, False)
|
||
serializers = get_serializers(ins, data=add_item, partial=True)
|
||
if serializers.is_valid():
|
||
serializers.save()
|
||
return Response({"msg": "success"})
|
||
|
||
|
||
class GetModelSettingList(APIView):
|
||
def get(self, request):
|
||
settings_list = []
|
||
instance_in = ModelField.objects.filter(model_id=request.GET["id"])
|
||
get_serializers = build_serializers(ModelField.__name__, ModelField, {}, False)
|
||
datas = get_serializers(instance_in, many=True).data
|
||
for items in datas:
|
||
settings_item = ModelSetting.objects.filter(field_id=items["id"])
|
||
settings_serializers = build_serializers(ModelSetting.__name__, ModelSetting, {}, False)
|
||
settings_datas = settings_serializers(settings_item, many=True).data
|
||
settings_list.extend(settings_datas)
|
||
return Response({"datas": settings_list})
|
||
|
||
def post(self, request):
|
||
model_id = None
|
||
for add_item in request.data:
|
||
if "id" not in add_item:
|
||
add_item["field"] = ModelField.objects.get(pk=add_item["field"]["id"])
|
||
created_instance = ModelSetting.objects.create(**add_item)
|
||
model_id = ModelField.objects.filter(pk=created_instance.field_id).first().model_id
|
||
else:
|
||
model_id = ModelField.objects.filter(pk=add_item["field"]["id"]).first().model_id
|
||
add_item["field"] = add_item["field"]["id"]
|
||
ins = ModelSetting.objects.get(pk=add_item["id"])
|
||
get_serializers = build_serializers(ModelSetting.__name__, ModelSetting, {}, False)
|
||
serializers = get_serializers(ins, data=add_item, partial=True)
|
||
if serializers.is_valid():
|
||
serializers.save()
|
||
if model_id is None:
|
||
return Response({"msg": "没有获取到model_id"})
|
||
else:
|
||
Model.objects.get(pk=model_id).get_django_model()
|
||
return Response({"msg": "success"})
|
||
|
||
|
||
class CreateModel(APIView):
|
||
def post(self, request):
|
||
model_ins = Model.objects.create(**request.data)
|
||
model_ins.get_django_model()
|
||
return Response({
|
||
"msg": "success",
|
||
"model": request.data
|
||
})
|
||
|
||
|
||
class GetAppList(APIView):
|
||
def get(self, request):
|
||
data_ins = App.objects.all()
|
||
get_serializers = build_serializers(App.__name__, App, {}, False)
|
||
serializers = get_serializers(data_ins, many=True).data
|
||
return Response({
|
||
"msg": "success",
|
||
"data": serializers
|
||
})
|
||
|
||
|
||
class UseAPI(APIView):
|
||
# permission_classes = [NormalPermissionCheck]
|
||
|
||
def post(self, request):
|
||
# TODO 提取数据库部分进入依赖类、加入元数据元对象，元数据元对象逻辑优化
|
||
instance_in = Model.objects.all()
|
||
get_serializers = build_serializers(Model.__name__, Model, {}, False)
|
||
datas = get_serializers(instance_in, many=True).data
|
||
# get api信息
|
||
model_instance = get_model(request.data['model'])
|
||
model_instance_info = get_model_status(request.data['model'])
|
||
get_serializers = build_serializers(model_instance._meta.model_name, model_instance, {}, False)
|
||
self.check_object_permissions(self.request, model_instance_info)
|
||
data = get_serializers(model_instance.objects.get(api_name_en=request.data['api_name'])).data
|
||
with open(os.path.join(BASE_DIR, "api_django.json")) as f:
|
||
port = json.load(f)["port"]
|
||
# 请求api
|
||
if request.content_type.startswith('multipart/form-data'):
|
||
zip_file = request.FILES['zip']
|
||
files = {
|
||
'zip': (zip_file.name, zip_file, 'application/zip') # 关键修正！
|
||
}
|
||
post_data = {
|
||
"api_info": json.dumps(data),
|
||
}
|
||
del request.data["model"]
|
||
del request.data["zip"]
|
||
for k, v in request.data.items():
|
||
post_data[k] = v
|
||
res = requests.post(f'http://127.0.0.1:{port}/ApiClass/base_api_control/api_url/', files=files,
|
||
data=post_data)
|
||
else:
|
||
headers = {'Content-Type': 'application/json'}
|
||
post_data = {
|
||
"api_info": data,
|
||
"process_data": request.data["process_data"],
|
||
}
|
||
post_data = json.dumps(post_data)
|
||
res = requests.post(f'http://127.0.0.1:{port}/ApiClass/base_api_control/api_url/', data=post_data,
|
||
headers=headers)
|
||
"""
|
||
对于api返回的信息做出以下规定：
|
||
1、键 data -- 直接显示返回
|
||
2、键 add_data -- 传入对应的model内中进行添加或者修改
|
||
3、键 search_data -- 查询对应的表
|
||
"""
|
||
|
||
return_data = copy.deepcopy(res.json())
|
||
if 'add_data' in return_data:
|
||
# 添加结束后删除
|
||
for add_item in return_data['add_data']:
|
||
if add_item['model'] == "permission":
|
||
for add_p in add_item['data']:
|
||
serializer = PermissionsSerializer(data=add_p)
|
||
if serializer.is_valid(raise_exception=True):
|
||
serializer.save()
|
||
else:
|
||
reverse_add_sub_data(add_item["data"], sub_model_instance=get_model(add_item['model']))
|
||
del return_data['add_data']
|
||
return Response(return_data)
|
||
|
||
|
||
class RelatedRecord(APIView):
|
||
def post(self, request):
|
||
model_name = request.data["model"]["name"]
|
||
ser = []
|
||
for items in get_model(model_name)._meta.get_fields():
|
||
if items.name == request.data["name"]:
|
||
model_ins = items.remote_field.model
|
||
target_data = model_ins.objects.all()
|
||
serializers_re = build_serializers(model_ins._meta.model_name,
|
||
model_ins, {},
|
||
False)
|
||
ser = serializers_re(target_data, many=True).data
|
||
return Response({"msg": "success", "data": ser})
|
||
|
||
|
||
class RecordOperate(APIView):
|
||
def get(self, request):
|
||
return_data = {}
|
||
active_related = False
|
||
return_data_columns = []
|
||
for search_item in request.GET.getlist('search_data[]'):
|
||
if "related" in json.loads(search_item)["Q"]:
|
||
active_related = True
|
||
search_item_model_instance = get_model(json.loads(search_item)['model'])
|
||
search_item_get_serializers = build_serializers(search_item_model_instance._meta.model_name,
|
||
search_item_model_instance, {},
|
||
active_related)
|
||
return_data_columns = get_model_fields(json.loads(search_item)['model'])
|
||
if json.loads(search_item)["Q"] == {}:
|
||
target_data = search_item_model_instance.objects.all()
|
||
datas = search_item_get_serializers(target_data, many=True).data
|
||
return_data = datas
|
||
else:
|
||
filter_data = copy.deepcopy(json.loads(search_item)["Q"])
|
||
if filter_data["Q_obj"] != "":
|
||
filter_data["Q_obj"] = eval(filter_data["Q_obj"])
|
||
else:
|
||
del filter_data["Q_obj"]
|
||
if 'id' in filter_data:
|
||
target_data = search_item_model_instance.objects.get(id=filter_data["id"])
|
||
datas = search_item_get_serializers(target_data).data
|
||
elif 'uuid' in filter_data:
|
||
target_data = search_item_model_instance.objects.get(uuid=filter_data["uuid"])
|
||
datas = search_item_get_serializers(target_data).data
|
||
else:
|
||
target_data = search_item_model_instance.objects.filter(**filter_data)
|
||
datas = search_item_get_serializers(target_data, many=True).data
|
||
return_data = datas
|
||
return Response({"msg": "success", "data": {
|
||
"return_data": return_data,
|
||
"return_data_columns": return_data_columns
|
||
}})
|
||
|
||
def post(self, request):
|
||
reverse_add_sub_data(request.data['add_data'])
|
||
return Response({"msg": "success", "data": {}})
|
||
|
||
def put(self, request):
|
||
pass
|
||
|
||
def delete(self, request):
|
||
search_item_model_instance = get_model(request.data['model'])
|
||
filter_data = copy.deepcopy(request.data['Q'])
|
||
if 'id' in filter_data:
|
||
search_item_model_instance.objects.get(id=filter_data["id"]).delete()
|
||
elif 'uuid' in filter_data:
|
||
search_item_model_instance.objects.get(uuid=filter_data["uuid"]).delete()
|
||
return Response({"msg": "success", "data": "删除成功"})
|
||
|
||
|
||
blacklist_ips = {
|
||
|
||
}
|
||
|
||
|
||
class Blacklist(APIView):
|
||
def get(self, request):
|
||
# SQL 注入检测规则
|
||
|
||
# 放行请求
|
||
response = JsonResponse({"status": "allowed"})
|
||
response['apache-status'] = 'allowed'
|
||
return response
|