mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-09-30 06:16:37 +08:00
ryan
2f60329886
代码质量全量清理，零行为变化：golangci 扩展集 13 类 linter（gosec/modernize/perfsprint/canonicalheader/usestdlibvars/wastedassign/intrange/errorlint/forcetypeassert/recvcheck/exhaustive/unparam）全量修复，测试代码质量（testifylint/thelper/usetesting）25→0，frpc 进程生命周期真 bug（进程组击杀）、全仓 go test -race 6 类数据竞争（含 1 个生产竞争）、SPDX license 头补齐 131 文件、前端测试套件 next-intl 迁移后 44 失败→全绿、过期 swagger 文档重新生成、pnpm-workspace 构建审批。 Experiments: #2-#17, #18, #20, #21, #23 Metric: total_issues 108 → 8 (-92.6%)
121 lines
3.4 KiB
Go
121 lines
3.4 KiB
Go
// Copyright 2025 linux.do
|
|
// Copyright 2026 Arctel.net
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package model
|
|
|
|
import (
|
|
"errors"
|
|
"strconv"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/Rain-kl/Wavelet/internal/shared"
|
|
"github.com/Rain-kl/Wavelet/pkg/util"
|
|
)
|
|
|
|
// OAuthUserInfo 用户信息结构（同时支持 OIDC ID Token claims 和 UserEndpoint 响应）
|
|
type OAuthUserInfo struct {
|
|
ID uint64 `json:"id"`
|
|
Sub string `json:"sub"`
|
|
Username string `json:"username"`
|
|
PreferredUsername string `json:"preferred_username"`
|
|
Email string `json:"email"`
|
|
Name string `json:"name"`
|
|
Active bool `json:"active"`
|
|
AvatarURL string `json:"avatar_url"`
|
|
}
|
|
|
|
// GetID 获取用户 ID
|
|
func (u *OAuthUserInfo) GetID() uint64 {
|
|
if u.ID != 0 {
|
|
return u.ID
|
|
}
|
|
// 从 sub 解析（OIDC 格式）
|
|
if u.Sub != "" {
|
|
if id, err := strconv.ParseUint(u.Sub, 10, 64); err == nil {
|
|
return id
|
|
}
|
|
}
|
|
return 0
|
|
}
|
|
|
|
// User 用户表实体
|
|
type User struct {
|
|
ID uint64 `json:"id,string" gorm:"primaryKey;not null"`
|
|
Username string `json:"username" gorm:"size:64;uniqueIndex"`
|
|
Password string `json:"password,omitempty" gorm:"size:255"`
|
|
Nickname string `json:"nickname" gorm:"size:255"`
|
|
Email string `json:"email" gorm:"size:255;index"`
|
|
AvatarURL string `json:"avatar_url" gorm:"size:255"`
|
|
IsActive bool `json:"is_active" gorm:"default:true;index"`
|
|
IsAdmin bool `json:"is_admin" gorm:"default:false"`
|
|
Bio string `json:"bio" gorm:"size:500"`
|
|
Phone string `json:"phone" gorm:"size:32"`
|
|
Gender string `json:"gender" gorm:"size:16"`
|
|
Website string `json:"website" gorm:"size:255"`
|
|
Location string `json:"location" gorm:"size:255"`
|
|
LastLoginAt time.Time `json:"last_login_at" gorm:"index"`
|
|
CreatedAt time.Time `json:"created_at" gorm:"autoCreateTime;index"`
|
|
UpdatedAt time.Time `json:"updated_at" gorm:"autoUpdateTime;index"`
|
|
}
|
|
|
|
// TableName 表名
|
|
func (*User) TableName() string {
|
|
return "w_users"
|
|
}
|
|
|
|
// SetPassword 设置明文密码
|
|
func (u *User) SetPassword(password string) error {
|
|
u.Password = password
|
|
return nil
|
|
}
|
|
|
|
// SetEncryptedPassword 设置加密密码
|
|
func (u *User) SetEncryptedPassword(password string) error {
|
|
if password == "" {
|
|
u.Password = ""
|
|
return nil
|
|
}
|
|
hashed, err := util.HashPassword(password)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
u.Password = hashed
|
|
return nil
|
|
}
|
|
|
|
// IsPasswordEncrypted 检查密码是否已加密
|
|
func (u *User) IsPasswordEncrypted() bool {
|
|
return strings.HasPrefix(u.Password, "$2a$") || strings.HasPrefix(u.Password, "$2b$") || strings.HasPrefix(u.Password, "$2y$")
|
|
}
|
|
|
|
// CheckPassword 验证密码是否匹配
|
|
func (u *User) CheckPassword(password string) bool {
|
|
if u.Password == "" || password == "" {
|
|
return false
|
|
}
|
|
if u.IsPasswordEncrypted() {
|
|
return util.CheckPasswordHash(u.Password, password)
|
|
}
|
|
return u.Password == password
|
|
}
|
|
|
|
// UpdateFromOAuthInfo 根据 OAuth 信息更新用户数据
|
|
func (u *User) UpdateFromOAuthInfo(oauthInfo *OAuthUserInfo) {
|
|
u.Username = oauthInfo.Username
|
|
u.Nickname = oauthInfo.Name
|
|
u.Email = oauthInfo.Email
|
|
u.AvatarURL = oauthInfo.AvatarURL
|
|
u.IsActive = oauthInfo.Active
|
|
u.LastLoginAt = time.Now()
|
|
}
|
|
|
|
// CheckActive 检查用户账户是否激活,未激活则返回错误
|
|
func (u *User) CheckActive() error {
|
|
if !u.IsActive {
|
|
return errors.New(shared.BannedAccount)
|
|
}
|
|
return nil
|
|
}
|