# coding=utf-8 import json from django.conf import settings from django.contrib.auth import get_user_model, authenticate from rest_framework import serializers from rest_framework_jwt.serializers import JSONWebTokenSerializer from rest_framework_jwt.settings import api_settings from django.contrib.auth.models import Group, Permission from apps.log.models import BizLog from utils import get_remote_addr from utils.booleancharfield import BooleanCharField from utils.exceptions import CustomError from apps.account.models import CustomerWechat from apps.option.models import Config User = get_user_model() jwt_payload_handler = api_settings.JWT_PAYLOAD_HANDLER jwt_encode_handler = api_settings.JWT_ENCODE_HANDLER class JWTSerializer(JSONWebTokenSerializer): def validate(self, attrs): credentials = { self.username_field: attrs.get(self.username_field), 'password': attrs.get('password') } if all(credentials.values()): user = authenticate(**credentials) if user: if not user.is_active: msg = u'禁用帐户，禁止登录！' BizLog.objects.addnew(user, BizLog.INSERT,u'禁用帐户[%s]尝试登录系统,IP[%s]' % (user.username, get_remote_addr(self.request))) raise serializers.ValidationError(msg) payload = jwt_payload_handler(user) BizLog.objects.addnew(user, BizLog.INSERT, u'[%s]登录系统,IP[%s]' % (user.username,get_remote_addr(self.request))) permissions = list(user.get_all_permissions()) return { 'token': jwt_encode_handler(payload), 'user_id': user.id, 'username': user.username, 'permissions': permissions, } else: msg = u'账号或者密码错误!' raise serializers.ValidationError(msg) else: msg = u'必须包含“{username field}”和“password.' msg = msg.format(username_field=self.username_field) raise serializers.ValidationError(msg) class EmployeeSerializer(serializers.ModelSerializer): enable_text = BooleanCharField(source='is_active', read_only=True) create_user_text = serializers.CharField(source='create_user.name', read_only=True) gender_text = serializers.CharField(source='get_gender_display', read_only=True) type_text = serializers.CharField(source='get_type_display', read_only=True) date_joined_f = serializers.DateTimeField(source='date_joined', format=settings.SHORT_DATETIME_FORMAT, read_only=True) class Meta: model = User # fields = '__all__' exclude = ('password',) def create(self, validated_data): username = self.initial_data['username'] user = User.objects.filter(username=username).first() if user: raise CustomError(u'账号[{0}]已存在。'.format(username)) # 代理商添加的账号，默认就是操作人所在的代理商 validated_data['is_active'] = self.initial_data['is_active'] == '1' user = self.context['request'].user validated_data['create_user'] = user validated_data['type'] = User.EMPLOYEE instance = super(EmployeeSerializer, self).create(validated_data) instance.set_password(self.initial_data['password']) instance.save() return instance def update(self, instance, validated_data): password = instance.password validated_data['is_superuser'] = instance.is_superuser validated_data['is_active'] = self.initial_data['is_active'] == '1' instance = super(EmployeeSerializer, self).update(instance, validated_data) if not 'password' in self.initial_data or not self.initial_data['password']: instance.password = password else: instance.set_password(self.initial_data['password']) instance.save() return instance class PermissionSerializer(serializers.ModelSerializer): class Meta: model = Permission fields = ('id', 'name',) class GroupSerializer(serializers.ModelSerializer): employees = serializers.SerializerMethodField() permissions = PermissionSerializer(many=True, read_only=True) def get_employees(self, obj): users = obj.user_set.all() data = [] for user in users: data.append(user.name) return data class Meta: model = Group fields = ('id', 'name', 'permissions', 'employees',) def create(self, validated_data): user = self.context['request'].user validated_data['create_user'] = user group = Group.objects.filter(name=validated_data['name']).first() if group: raise CustomError(u'名称为[%s]的权限组已存在' % validated_data['name']) permissions = self.context['request'].data.get('permissions', None) if permissions: permissions = json.loads(permissions) else: permissions = [] instance = super(GroupSerializer, self).create(validated_data) instance.permissions.set(permissions) return instance def update(self, instance, validated_data): group = Group.objects.filter(name=validated_data['name']).exclude(id=instance.id).first() if group: raise CustomError(u'名称为[%s]的权限组已存在' % validated_data['name']) permissions = self.context['request'].data.get('permissions', None) if permissions: permissions = json.loads(permissions) else: permissions = [] instance = super(GroupSerializer, self).update(instance, validated_data) instance.permissions.set(permissions) return instance class GroupDictSerializer(serializers.ModelSerializer): value = serializers.CharField(source='id', read_only=True) class Meta: model = Group fields = ('value', 'name',) class WechatLoginSerializer(serializers.Serializer): def validate(self, attrs): code = self.initial_data.get('code') # 用户code appid = self.initial_data.get('appid') # 小程序appid if code and appid: customer_wechat = CustomerWechat.login(code, appid) if not customer_wechat.customer: return { 'openid': customer_wechat.openid, } user = customer_wechat.customer if not user.is_active: msg = '用户帐户已禁用.' raise serializers.ValidationError(msg) payload = jwt_payload_handler(user) try: lead_hour = 24 - int(Config.get_value(Config.LEAVE_LEAD_TIME)) except: lead_hour = 20 return { 'user_id': user.id, 'token': jwt_encode_handler(payload), 'openid': customer_wechat.openid, 'name': customer_wechat.customer.name or '', 'tel': customer_wechat.customer.username or '', 'face': customer_wechat.customer.face, 'lead_hour': lead_hour, } else: msg = '参数无效' raise serializers.ValidationError(msg) class WechatBindSerializer(serializers.Serializer): def validate(self, attrs): appid = self.initial_data.get('appid') openid = self.initial_data.get('openid') phoneEncryptedData = self.initial_data.get('encryptedData') phoneIv = self.initial_data.get('iv') if openid and phoneEncryptedData and phoneIv: customer = CustomerWechat.bindWechat(appid, openid, phoneEncryptedData, phoneIv) payload = jwt_payload_handler(customer) return { 'token': jwt_encode_handler(payload), 'user_id': customer.id, 'name': customer.name or '', 'tel': customer.username or '', 'face': customer.face, } else: msg = '参数无效' raise serializers.ValidationError(msg)