feat: migrate ORM base to sqlmodel-ext, add file viewers and WOPI integration
- Migrate SQLModel base classes, mixins, and database management to external sqlmodel-ext package; remove sqlmodels/base/, sqlmodels/mixin/, and sqlmodels/database.py - Add file viewer/editor system with WOPI protocol support for collaborative editing (OnlyOffice, Collabora) - Add enterprise edition license verification module (ee/) - Add Dockerfile multi-stage build with Cython compilation support - Add new dependencies: sqlmodel-ext, cryptography, whatthepatch Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -9,7 +9,7 @@ from sqlmodels import (
|
||||
User, ResponseBase,
|
||||
Setting, Object, ObjectType, Share, AdminSummaryResponse, MetricsSummary, LicenseInfo, VersionInfo,
|
||||
)
|
||||
from sqlmodels.base import SQLModelBase
|
||||
from sqlmodel_ext import SQLModelBase
|
||||
from sqlmodels.setting import (
|
||||
SettingItem, SettingsListResponse, SettingsUpdateRequest, SettingsUpdateResponse,
|
||||
)
|
||||
@@ -17,6 +17,7 @@ from sqlmodels.setting import SettingsType
|
||||
from utils import http_exceptions
|
||||
from utils.conf import appmeta
|
||||
from .file import admin_file_router
|
||||
from .file_app import admin_file_app_router
|
||||
from .group import admin_group_router
|
||||
from .policy import admin_policy_router
|
||||
from .share import admin_share_router
|
||||
@@ -44,6 +45,7 @@ admin_router = APIRouter(
|
||||
admin_router.include_router(admin_group_router)
|
||||
admin_router.include_router(admin_user_router)
|
||||
admin_router.include_router(admin_file_router)
|
||||
admin_router.include_router(admin_file_app_router)
|
||||
admin_router.include_router(admin_policy_router)
|
||||
admin_router.include_router(admin_share_router)
|
||||
admin_router.include_router(admin_task_router)
|
||||
|
||||
348
routers/api/v1/admin/file_app/__init__.py
Normal file
348
routers/api/v1/admin/file_app/__init__.py
Normal file
@@ -0,0 +1,348 @@
|
||||
"""
|
||||
管理员文件应用管理端点
|
||||
|
||||
提供文件查看器应用的 CRUD、扩展名管理和用户组权限管理。
|
||||
"""
|
||||
from uuid import UUID
|
||||
|
||||
from fastapi import APIRouter, Depends, status
|
||||
from loguru import logger as l
|
||||
from sqlalchemy import select
|
||||
|
||||
from middleware.auth import admin_required
|
||||
from middleware.dependencies import SessionDep, TableViewRequestDep
|
||||
from sqlmodels import (
|
||||
FileApp,
|
||||
FileAppCreateRequest,
|
||||
FileAppExtension,
|
||||
FileAppGroupLink,
|
||||
FileAppListResponse,
|
||||
FileAppResponse,
|
||||
FileAppUpdateRequest,
|
||||
ExtensionUpdateRequest,
|
||||
GroupAccessUpdateRequest,
|
||||
)
|
||||
from utils import http_exceptions
|
||||
|
||||
admin_file_app_router = APIRouter(
|
||||
prefix="/file-app",
|
||||
tags=["admin", "file_app"],
|
||||
dependencies=[Depends(admin_required)],
|
||||
)
|
||||
|
||||
|
||||
@admin_file_app_router.get(
|
||||
path='/list',
|
||||
summary='列出所有文件应用',
|
||||
)
|
||||
async def list_file_apps(
|
||||
session: SessionDep,
|
||||
table_view: TableViewRequestDep,
|
||||
) -> FileAppListResponse:
|
||||
"""
|
||||
列出所有文件应用端点（分页）
|
||||
|
||||
认证：管理员权限
|
||||
"""
|
||||
result = await FileApp.get_with_count(
|
||||
session,
|
||||
table_view=table_view,
|
||||
)
|
||||
|
||||
apps: list[FileAppResponse] = []
|
||||
for app in result.items:
|
||||
extensions = await FileAppExtension.get(
|
||||
session,
|
||||
FileAppExtension.app_id == app.id,
|
||||
fetch_mode="all",
|
||||
)
|
||||
group_links_result = await session.exec(
|
||||
select(FileAppGroupLink).where(FileAppGroupLink.app_id == app.id)
|
||||
)
|
||||
group_links: list[FileAppGroupLink] = list(group_links_result.all())
|
||||
apps.append(FileAppResponse.from_app(app, extensions, group_links))
|
||||
|
||||
return FileAppListResponse(apps=apps, total=result.count)
|
||||
|
||||
|
||||
@admin_file_app_router.post(
|
||||
path='/',
|
||||
summary='创建文件应用',
|
||||
status_code=status.HTTP_201_CREATED,
|
||||
)
|
||||
async def create_file_app(
|
||||
session: SessionDep,
|
||||
request: FileAppCreateRequest,
|
||||
) -> FileAppResponse:
|
||||
"""
|
||||
创建文件应用端点
|
||||
|
||||
认证：管理员权限
|
||||
|
||||
错误处理：
|
||||
- 409: app_key 已存在
|
||||
"""
|
||||
# 检查 app_key 唯一
|
||||
existing = await FileApp.get(session, FileApp.app_key == request.app_key)
|
||||
if existing:
|
||||
http_exceptions.raise_conflict(f"应用标识 '{request.app_key}' 已存在")
|
||||
|
||||
# 创建应用
|
||||
app = FileApp(
|
||||
name=request.name,
|
||||
app_key=request.app_key,
|
||||
type=request.type,
|
||||
icon=request.icon,
|
||||
description=request.description,
|
||||
is_enabled=request.is_enabled,
|
||||
is_restricted=request.is_restricted,
|
||||
iframe_url_template=request.iframe_url_template,
|
||||
wopi_discovery_url=request.wopi_discovery_url,
|
||||
wopi_editor_url_template=request.wopi_editor_url_template,
|
||||
)
|
||||
app = await app.save(session)
|
||||
app_id = app.id
|
||||
|
||||
# 创建扩展名关联
|
||||
extensions: list[FileAppExtension] = []
|
||||
for i, ext in enumerate(request.extensions):
|
||||
normalized = ext.lower().strip().lstrip('.')
|
||||
ext_record = FileAppExtension(
|
||||
app_id=app_id,
|
||||
extension=normalized,
|
||||
priority=i,
|
||||
)
|
||||
ext_record = await ext_record.save(session)
|
||||
extensions.append(ext_record)
|
||||
|
||||
# 创建用户组关联
|
||||
group_links: list[FileAppGroupLink] = []
|
||||
for group_id in request.allowed_group_ids:
|
||||
link = FileAppGroupLink(app_id=app_id, group_id=group_id)
|
||||
session.add(link)
|
||||
group_links.append(link)
|
||||
if group_links:
|
||||
await session.commit()
|
||||
|
||||
l.info(f"创建文件应用: {app.name} ({app.app_key})")
|
||||
|
||||
return FileAppResponse.from_app(app, extensions, group_links)
|
||||
|
||||
|
||||
@admin_file_app_router.get(
|
||||
path='/{app_id}',
|
||||
summary='获取文件应用详情',
|
||||
)
|
||||
async def get_file_app(
|
||||
session: SessionDep,
|
||||
app_id: UUID,
|
||||
) -> FileAppResponse:
|
||||
"""
|
||||
获取文件应用详情端点
|
||||
|
||||
认证：管理员权限
|
||||
|
||||
错误处理：
|
||||
- 404: 应用不存在
|
||||
"""
|
||||
app: FileApp | None = await FileApp.get(session, FileApp.id == app_id)
|
||||
if not app:
|
||||
http_exceptions.raise_not_found("应用不存在")
|
||||
|
||||
extensions = await FileAppExtension.get(
|
||||
session,
|
||||
FileAppExtension.app_id == app.id,
|
||||
fetch_mode="all",
|
||||
)
|
||||
group_links_result = await session.exec(
|
||||
select(FileAppGroupLink).where(FileAppGroupLink.app_id == app.id)
|
||||
)
|
||||
group_links: list[FileAppGroupLink] = list(group_links_result.all())
|
||||
|
||||
return FileAppResponse.from_app(app, extensions, group_links)
|
||||
|
||||
|
||||
@admin_file_app_router.patch(
|
||||
path='/{app_id}',
|
||||
summary='更新文件应用',
|
||||
)
|
||||
async def update_file_app(
|
||||
session: SessionDep,
|
||||
app_id: UUID,
|
||||
request: FileAppUpdateRequest,
|
||||
) -> FileAppResponse:
|
||||
"""
|
||||
更新文件应用端点
|
||||
|
||||
认证：管理员权限
|
||||
|
||||
错误处理：
|
||||
- 404: 应用不存在
|
||||
- 409: 新 app_key 已被其他应用使用
|
||||
"""
|
||||
app: FileApp | None = await FileApp.get(session, FileApp.id == app_id)
|
||||
if not app:
|
||||
http_exceptions.raise_not_found("应用不存在")
|
||||
|
||||
# 检查 app_key 唯一性
|
||||
if request.app_key is not None and request.app_key != app.app_key:
|
||||
existing = await FileApp.get(session, FileApp.app_key == request.app_key)
|
||||
if existing:
|
||||
http_exceptions.raise_conflict(f"应用标识 '{request.app_key}' 已存在")
|
||||
|
||||
# 更新非 None 字段
|
||||
update_data = request.model_dump(exclude_unset=True)
|
||||
for key, value in update_data.items():
|
||||
setattr(app, key, value)
|
||||
|
||||
app = await app.save(session)
|
||||
|
||||
extensions = await FileAppExtension.get(
|
||||
session,
|
||||
FileAppExtension.app_id == app.id,
|
||||
fetch_mode="all",
|
||||
)
|
||||
group_links_result = await session.exec(
|
||||
select(FileAppGroupLink).where(FileAppGroupLink.app_id == app.id)
|
||||
)
|
||||
group_links: list[FileAppGroupLink] = list(group_links_result.all())
|
||||
|
||||
l.info(f"更新文件应用: {app.name} ({app.app_key})")
|
||||
|
||||
return FileAppResponse.from_app(app, extensions, group_links)
|
||||
|
||||
|
||||
@admin_file_app_router.delete(
|
||||
path='/{app_id}',
|
||||
summary='删除文件应用',
|
||||
status_code=status.HTTP_204_NO_CONTENT,
|
||||
)
|
||||
async def delete_file_app(
|
||||
session: SessionDep,
|
||||
app_id: UUID,
|
||||
) -> None:
|
||||
"""
|
||||
删除文件应用端点（级联删除扩展名、用户偏好和用户组关联）
|
||||
|
||||
认证：管理员权限
|
||||
|
||||
错误处理：
|
||||
- 404: 应用不存在
|
||||
"""
|
||||
app: FileApp | None = await FileApp.get(session, FileApp.id == app_id)
|
||||
if not app:
|
||||
http_exceptions.raise_not_found("应用不存在")
|
||||
|
||||
app_name = app.app_key
|
||||
await FileApp.delete(session, app)
|
||||
l.info(f"删除文件应用: {app_name}")
|
||||
|
||||
|
||||
@admin_file_app_router.put(
|
||||
path='/{app_id}/extensions',
|
||||
summary='全量替换扩展名列表',
|
||||
)
|
||||
async def update_extensions(
|
||||
session: SessionDep,
|
||||
app_id: UUID,
|
||||
request: ExtensionUpdateRequest,
|
||||
) -> FileAppResponse:
|
||||
"""
|
||||
全量替换扩展名列表端点
|
||||
|
||||
先删除旧的扩展名关联，再创建新的。
|
||||
|
||||
认证：管理员权限
|
||||
|
||||
错误处理：
|
||||
- 404: 应用不存在
|
||||
"""
|
||||
app: FileApp | None = await FileApp.get(session, FileApp.id == app_id)
|
||||
if not app:
|
||||
http_exceptions.raise_not_found("应用不存在")
|
||||
|
||||
# 删除旧的扩展名
|
||||
old_extensions: list[FileAppExtension] = await FileAppExtension.get(
|
||||
session,
|
||||
FileAppExtension.app_id == app_id,
|
||||
fetch_mode="all",
|
||||
)
|
||||
for old_ext in old_extensions:
|
||||
await FileAppExtension.delete(session, old_ext, commit=False)
|
||||
|
||||
# 创建新的扩展名
|
||||
new_extensions: list[FileAppExtension] = []
|
||||
for i, ext in enumerate(request.extensions):
|
||||
normalized = ext.lower().strip().lstrip('.')
|
||||
ext_record = FileAppExtension(
|
||||
app_id=app_id,
|
||||
extension=normalized,
|
||||
priority=i,
|
||||
)
|
||||
session.add(ext_record)
|
||||
new_extensions.append(ext_record)
|
||||
|
||||
await session.commit()
|
||||
# refresh 新创建的记录
|
||||
for ext_record in new_extensions:
|
||||
await session.refresh(ext_record)
|
||||
|
||||
group_links_result = await session.exec(
|
||||
select(FileAppGroupLink).where(FileAppGroupLink.app_id == app_id)
|
||||
)
|
||||
group_links: list[FileAppGroupLink] = list(group_links_result.all())
|
||||
|
||||
l.info(f"更新文件应用 {app.app_key} 的扩展名: {request.extensions}")
|
||||
|
||||
return FileAppResponse.from_app(app, new_extensions, group_links)
|
||||
|
||||
|
||||
@admin_file_app_router.put(
|
||||
path='/{app_id}/groups',
|
||||
summary='全量替换允许的用户组',
|
||||
)
|
||||
async def update_group_access(
|
||||
session: SessionDep,
|
||||
app_id: UUID,
|
||||
request: GroupAccessUpdateRequest,
|
||||
) -> FileAppResponse:
|
||||
"""
|
||||
全量替换允许的用户组端点
|
||||
|
||||
先删除旧的关联，再创建新的。
|
||||
|
||||
认证：管理员权限
|
||||
|
||||
错误处理：
|
||||
- 404: 应用不存在
|
||||
"""
|
||||
app: FileApp | None = await FileApp.get(session, FileApp.id == app_id)
|
||||
if not app:
|
||||
http_exceptions.raise_not_found("应用不存在")
|
||||
|
||||
# 删除旧的用户组关联
|
||||
old_links_result = await session.exec(
|
||||
select(FileAppGroupLink).where(FileAppGroupLink.app_id == app_id)
|
||||
)
|
||||
old_links: list[FileAppGroupLink] = list(old_links_result.all())
|
||||
for old_link in old_links:
|
||||
await session.delete(old_link)
|
||||
|
||||
# 创建新的用户组关联
|
||||
new_links: list[FileAppGroupLink] = []
|
||||
for group_id in request.group_ids:
|
||||
link = FileAppGroupLink(app_id=app_id, group_id=group_id)
|
||||
session.add(link)
|
||||
new_links.append(link)
|
||||
|
||||
await session.commit()
|
||||
|
||||
extensions = await FileAppExtension.get(
|
||||
session,
|
||||
FileAppExtension.app_id == app_id,
|
||||
fetch_mode="all",
|
||||
)
|
||||
|
||||
l.info(f"更新文件应用 {app.app_key} 的用户组权限: {request.group_ids}")
|
||||
|
||||
return FileAppResponse.from_app(app, extensions, new_links)
|
||||
@@ -9,7 +9,7 @@ from middleware.dependencies import SessionDep, TableViewRequestDep
|
||||
from sqlmodels import (
|
||||
Policy, PolicyBase, PolicyType, PolicySummary, ResponseBase,
|
||||
ListResponse, Object, )
|
||||
from sqlmodels.base import SQLModelBase
|
||||
from sqlmodel_ext import SQLModelBase
|
||||
from service.storage import DirectoryCreationError, LocalStorageService
|
||||
|
||||
admin_policy_router = APIRouter(
|
||||
|
||||
Reference in New Issue
Block a user