551 lines
18 KiB
C#
551 lines
18 KiB
C#
using Blahblah.FlowerStory.Server.Data;
|
|
using Blahblah.FlowerStory.Server.Data.Model;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
using Microsoft.EntityFrameworkCore;
|
|
using System.ComponentModel.DataAnnotations;
|
|
|
|
namespace Blahblah.FlowerStory.Server.Controller;
|
|
|
|
/// <summary>
|
|
/// 事件相关 API 服务
|
|
/// </summary>
|
|
[ApiController]
|
|
[Produces("application/json")]
|
|
[Route("api/event")]
|
|
public class EventApiController : BaseController
|
|
{
|
|
/// <inheritdoc/>
|
|
public EventApiController(FlowerDatabase database, ILogger<BaseController>? logger = null) : base(database, logger)
|
|
{
|
|
}
|
|
|
|
/// <summary>
|
|
/// 获取用户相关所有符合条件的事件
|
|
/// </summary>
|
|
/// <remarks>
|
|
/// 请求示例：
|
|
///
|
|
/// GET /api/event/query
|
|
/// Authorization: authorization id
|
|
///
|
|
/// 参数：
|
|
///
|
|
/// eid: int?
|
|
/// key: string?
|
|
/// from: long?
|
|
/// to: long?
|
|
/// p: bool?
|
|
///
|
|
/// </remarks>
|
|
/// <param name="eventId">事件类型 id</param>
|
|
/// <param name="key">查询关键字</param>
|
|
/// <param name="from">起始日期</param>
|
|
/// <param name="to">结束日期</param>
|
|
/// <param name="includePhoto">是否包含图片</param>
|
|
/// <returns>会话有效则返回符合条件的花草集</returns>
|
|
/// <response code="200">返回符合条件的花草集</response>
|
|
/// <response code="401">未找到登录会话或已过期</response>
|
|
/// <response code="403">用户已禁用</response>
|
|
/// <response code="404">未找到关联用户</response>
|
|
[Route("query", Name = "queryEvents")]
|
|
[ProducesResponseType(StatusCodes.Status200OK)]
|
|
[ProducesResponseType(StatusCodes.Status401Unauthorized)]
|
|
[ProducesResponseType(StatusCodes.Status403Forbidden)]
|
|
[ProducesResponseType(StatusCodes.Status404NotFound)]
|
|
[HttpGet]
|
|
[ResponseCache(NoStore = true, Location = ResponseCacheLocation.None)]
|
|
public ActionResult<RecordItem[]> GetRecords(
|
|
[FromQuery(Name = "eid")] int? eventId,
|
|
[FromQuery] string? key,
|
|
[FromQuery] long? from,
|
|
[FromQuery] long? to,
|
|
[FromQuery(Name = "p")] bool? includePhoto)
|
|
{
|
|
var (result, user) = CheckPermission();
|
|
if (result != null)
|
|
{
|
|
return result;
|
|
}
|
|
if (user == null)
|
|
{
|
|
return NotFound();
|
|
}
|
|
|
|
SaveDatabase();
|
|
|
|
var records = database.Records.Where(r => r.OwnerId == user.Id);
|
|
if (eventId != null)
|
|
{
|
|
records = records.Where(r => r.EventId == eventId);
|
|
}
|
|
if (key != null)
|
|
{
|
|
records = records.Where(r =>
|
|
r.ByUserName != null && r.ByUserName.ToLower().Contains(key.ToLower()) ||
|
|
r.Memo != null && r.Memo.ToLower().Contains(key.ToLower()));
|
|
}
|
|
if (from != null)
|
|
{
|
|
records = records.Where(r => r.DateUnixTime >= from);
|
|
}
|
|
if (to != null)
|
|
{
|
|
records = records.Where(r => r.DateUnixTime <= to);
|
|
}
|
|
|
|
if (includePhoto == true)
|
|
{
|
|
records = records.Include(r => r.Photos);
|
|
}
|
|
|
|
return Ok(records.ToArray());
|
|
}
|
|
|
|
/// <summary>
|
|
/// 移除用户的事件
|
|
/// </summary>
|
|
/// <remarks>
|
|
/// 请求示例：
|
|
///
|
|
/// DELETE /api/event/remove
|
|
/// Authorization: authorization id
|
|
///
|
|
/// 参数：
|
|
///
|
|
/// id: int
|
|
///
|
|
/// </remarks>
|
|
/// <param name="id">事件唯一 id</param>
|
|
/// <returns>会话有效则返回操作影响的数据库行数</returns>
|
|
/// <response code="200">返回操作影响的数据库行数</response>
|
|
/// <response code="401">未找到登录会话或已过期</response>
|
|
/// <response code="403">用户已禁用</response>
|
|
/// <response code="404">未找到关联用户</response>
|
|
[Route("remove", Name = "removeEvent")]
|
|
[ProducesResponseType(StatusCodes.Status200OK)]
|
|
[ProducesResponseType(StatusCodes.Status401Unauthorized)]
|
|
[ProducesResponseType(StatusCodes.Status403Forbidden)]
|
|
[ProducesResponseType(StatusCodes.Status404NotFound)]
|
|
[HttpDelete]
|
|
public ActionResult<int> RemoveEvent([FromQuery][Required] int id)
|
|
{
|
|
var (result, user) = CheckPermission();
|
|
if (result != null)
|
|
{
|
|
return result;
|
|
}
|
|
if (user == null)
|
|
{
|
|
return NotFound();
|
|
}
|
|
|
|
var count = database.Records.Where(r => r.OwnerId == user.Id && r.Id == id).ExecuteDelete();
|
|
|
|
SaveDatabase();
|
|
|
|
return Ok(count);
|
|
}
|
|
|
|
/// <summary>
|
|
/// 批量移除用户的事件
|
|
/// </summary>
|
|
/// <remarks>
|
|
/// 请求示例：
|
|
///
|
|
/// POST /api/event/remove
|
|
/// Authorization: authorization id
|
|
/// [
|
|
/// 2, 4, 5, 11
|
|
/// ]
|
|
///
|
|
/// </remarks>
|
|
/// <param name="ids">要移除的事件唯一 id 的数组</param>
|
|
/// <returns>会话有效则返回操作影响的数据库行数</returns>
|
|
/// <response code="200">返回操作影响的数据库行数</response>
|
|
/// <response code="401">未找到登录会话或已过期</response>
|
|
/// <response code="403">用户已禁用</response>
|
|
/// <response code="404">未找到关联用户</response>
|
|
[Route("removeany", Name = "removeEvents")]
|
|
[ProducesResponseType(StatusCodes.Status200OK)]
|
|
[ProducesResponseType(StatusCodes.Status401Unauthorized)]
|
|
[ProducesResponseType(StatusCodes.Status403Forbidden)]
|
|
[ProducesResponseType(StatusCodes.Status404NotFound)]
|
|
[HttpPost]
|
|
[Consumes("application/json")]
|
|
public ActionResult<int> RemoveEvents([FromBody] int[] ids)
|
|
{
|
|
var (result, user) = CheckPermission();
|
|
if (result != null)
|
|
{
|
|
return result;
|
|
}
|
|
if (user == null)
|
|
{
|
|
return NotFound();
|
|
}
|
|
|
|
var count = database.Records.Where(r => r.OwnerId == user.Id && ids.Contains(r.Id)).ExecuteDelete();
|
|
|
|
SaveDatabase();
|
|
|
|
return Ok(count);
|
|
}
|
|
|
|
/// <summary>
|
|
/// 用户添加事件
|
|
/// </summary>
|
|
/// <remarks>
|
|
/// 请求示例：
|
|
///
|
|
/// POST /api/event/add
|
|
/// Authorization: authorization id
|
|
/// {
|
|
/// "flowerId": 1,
|
|
/// "eventId": 4, // 浇水
|
|
/// "byUser": "朋友",
|
|
/// "memo": "快干死了"
|
|
/// }
|
|
///
|
|
/// </remarks>
|
|
/// <param name="event">事件参数</param>
|
|
/// <returns>添加成功则返回已添加的事件对象</returns>
|
|
/// <response code="200">返回已添加的事件对象</response>
|
|
/// <response code="401">未找到登录会话或已过期</response>
|
|
/// <response code="403">用户已禁用</response>
|
|
/// <response code="404">未找到关联用户</response>
|
|
[Route("add", Name = "addEvent")]
|
|
[ProducesResponseType(StatusCodes.Status200OK)]
|
|
[ProducesResponseType(StatusCodes.Status401Unauthorized)]
|
|
[ProducesResponseType(StatusCodes.Status403Forbidden)]
|
|
[ProducesResponseType(StatusCodes.Status404NotFound)]
|
|
[HttpPost]
|
|
[Consumes("application/json")]
|
|
public ActionResult<RecordItem> AddEvent([FromBody] EventParameter @event)
|
|
{
|
|
var (result, user) = CheckPermission();
|
|
if (result != null)
|
|
{
|
|
return result;
|
|
}
|
|
if (user == null)
|
|
{
|
|
return NotFound();
|
|
}
|
|
|
|
var item = new RecordItem
|
|
{
|
|
OwnerId = user.Id,
|
|
FlowerId = @event.FlowerId,
|
|
EventId = @event.EventId,
|
|
DateUnixTime = user.ActiveDateUnixTime ?? DateTimeOffset.UtcNow.ToUnixTimeMilliseconds(),
|
|
ByUserId = @event.ByUser == null ? user.Id : null,
|
|
ByUserName = @event.ByUser,
|
|
Memo = @event.Memo
|
|
};
|
|
database.Records.Add(item);
|
|
SaveDatabase();
|
|
|
|
return Ok(item);
|
|
}
|
|
|
|
/// <summary>
|
|
/// 修改事件
|
|
/// </summary>
|
|
/// <remarks>
|
|
/// 请求示例：
|
|
///
|
|
/// PUT /api/event/update
|
|
/// Authorization: authorization id
|
|
/// {
|
|
/// "id": 1,
|
|
/// "flowerId": 1,
|
|
/// "eventId": 5, // 施肥
|
|
/// "byUser": null,
|
|
/// "memo": "花多多1号"
|
|
/// }
|
|
///
|
|
/// </remarks>
|
|
/// <param name="update">修改参数</param>
|
|
/// <returns>修改成功则返回已修改的事件对象</returns>
|
|
/// <response code="200">返回已修改的事件对象</response>
|
|
/// <response code="401">未找到登录会话或已过期</response>
|
|
/// <response code="403">用户已禁用</response>
|
|
/// <response code="404">未找到关联用户或者未找到将修改的事件对象</response>
|
|
[Route("update", Name = "updateEvent")]
|
|
[ProducesResponseType(StatusCodes.Status200OK)]
|
|
[ProducesResponseType(StatusCodes.Status401Unauthorized)]
|
|
[ProducesResponseType(StatusCodes.Status403Forbidden)]
|
|
[ProducesResponseType(StatusCodes.Status404NotFound)]
|
|
[HttpPut]
|
|
[Consumes("application/json")]
|
|
public ActionResult<RecordItem> Update([FromBody] EventUpdateParameter update)
|
|
{
|
|
var (result, user) = CheckPermission();
|
|
if (result != null)
|
|
{
|
|
return result;
|
|
}
|
|
if (user == null)
|
|
{
|
|
return NotFound();
|
|
}
|
|
|
|
var record = database.Records.SingleOrDefault(r => r.Id == update.Id && r.OwnerId == user.Id);
|
|
if (record == null)
|
|
{
|
|
SaveDatabase();
|
|
return NotFound(update.Id);
|
|
}
|
|
record.FlowerId = update.FlowerId;
|
|
record.EventId = update.EventId;
|
|
if (update.ByUser == null)
|
|
{
|
|
record.ByUserId = user.Id;
|
|
record.ByUserName = null;
|
|
}
|
|
else
|
|
{
|
|
record.ByUserId = null;
|
|
record.ByUserName = update.ByUser;
|
|
}
|
|
record.Memo = update.Memo;
|
|
SaveDatabase();
|
|
|
|
return Ok(user);
|
|
}
|
|
|
|
/// <summary>
|
|
/// 添加事件关联照片
|
|
/// </summary>
|
|
/// <remarks>
|
|
/// 请求示例：
|
|
///
|
|
/// POST /api/event/add_photo
|
|
/// Authorization: authorization id
|
|
///
|
|
/// 参数：
|
|
///
|
|
/// id: int
|
|
/// photo: IFormFile
|
|
///
|
|
/// </remarks>
|
|
/// <param name="id">事件唯一 id</param>
|
|
/// <param name="photo">图片</param>
|
|
/// <returns>添加成功则返回 HTTP 204</returns>
|
|
/// <response code="204">添加成功</response>
|
|
/// <response code="400">图片格式非法</response>
|
|
/// <response code="401">未找到登录会话或已过期</response>
|
|
/// <response code="403">用户已禁用</response>
|
|
/// <response code="404">未找到关联用户或者关联的事件</response>
|
|
/// <response code="413">提交正文过大</response>
|
|
[Route("add_photo", Name = "addEventPhoto")]
|
|
[ProducesResponseType(StatusCodes.Status204NoContent)]
|
|
[ProducesResponseType(StatusCodes.Status400BadRequest)]
|
|
[ProducesResponseType(StatusCodes.Status401Unauthorized)]
|
|
[ProducesResponseType(StatusCodes.Status403Forbidden)]
|
|
[ProducesResponseType(StatusCodes.Status404NotFound)]
|
|
[ProducesResponseType(StatusCodes.Status413PayloadTooLarge)]
|
|
[HttpPost]
|
|
[Consumes("multipart/form-data")]
|
|
[RequestSizeLimit(15 * 1024 * 1024)]
|
|
public async Task<ActionResult> UploadPhoto([Required][FromQuery] int id, [Required] IFormFile photo)
|
|
{
|
|
var (result, user) = CheckPermission();
|
|
if (result != null)
|
|
{
|
|
return result;
|
|
}
|
|
if (user == null)
|
|
{
|
|
return NotFound();
|
|
}
|
|
|
|
var record = database.Records.SingleOrDefault(r => r.Id == id && r.OwnerId == user.Id);
|
|
if (record == null)
|
|
{
|
|
SaveDatabase();
|
|
return NotFound(id);
|
|
}
|
|
if (photo.Length > 0)
|
|
{
|
|
var file = WrapFormFile(photo);
|
|
if (file == null)
|
|
{
|
|
SaveDatabase();
|
|
return BadRequest();
|
|
}
|
|
|
|
var p = new PhotoItem
|
|
{
|
|
FlowerId = record.FlowerId,
|
|
RecordId = id,
|
|
FileType = file.FileType,
|
|
FileName = file.Filename,
|
|
Path = file.Path,
|
|
DateUploadUnixTime = user.ActiveDateUnixTime ?? DateTimeOffset.UtcNow.ToUnixTimeMilliseconds()
|
|
};
|
|
database.Photos.Add(p);
|
|
|
|
try
|
|
{
|
|
await WriteToFile(user.Id, record.FlowerId, file);
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
SaveDatabase();
|
|
return Problem(ex.ToString(), "api/event/add_photo");
|
|
// TODO: Logger
|
|
}
|
|
}
|
|
SaveDatabase();
|
|
|
|
return NoContent();
|
|
}
|
|
|
|
/// <summary>
|
|
/// 批量添加事件关联照片，总大小限制 75MB
|
|
/// </summary>
|
|
/// <remarks>
|
|
/// 请求示例：
|
|
///
|
|
/// POST /api/event/add_photos
|
|
/// Authorization: authorization id
|
|
///
|
|
/// 参数：
|
|
///
|
|
/// id: int
|
|
/// photos: IFormFile[]
|
|
///
|
|
/// </remarks>
|
|
/// <param name="id">事件唯一 id</param>
|
|
/// <param name="photos">图片集</param>
|
|
/// <returns>添加成功则返回 HTTP 204</returns>
|
|
/// <response code="204">添加成功</response>
|
|
/// <response code="400">图片参数非法或图片格式非法</response>
|
|
/// <response code="401">未找到登录会话或已过期</response>
|
|
/// <response code="403">用户已禁用</response>
|
|
/// <response code="404">未找到关联用户或者关联的事件</response>
|
|
/// <response code="413">提交正文过大</response>
|
|
[Route("add_photos", Name = "addEventPhotos")]
|
|
[ProducesResponseType(StatusCodes.Status204NoContent)]
|
|
[ProducesResponseType(StatusCodes.Status400BadRequest)]
|
|
[ProducesResponseType(StatusCodes.Status401Unauthorized)]
|
|
[ProducesResponseType(StatusCodes.Status403Forbidden)]
|
|
[ProducesResponseType(StatusCodes.Status404NotFound)]
|
|
[ProducesResponseType(StatusCodes.Status413PayloadTooLarge)]
|
|
[HttpPost]
|
|
[Consumes("multipart/form-data")]
|
|
// 5 photos
|
|
[RequestSizeLimit(75 * 1024 * 1024)]
|
|
public async Task<ActionResult> UploadPhotos([Required][FromQuery] int id, [Required] IFormFile[] photos)
|
|
{
|
|
var (result, user) = CheckPermission();
|
|
if (result != null)
|
|
{
|
|
return result;
|
|
}
|
|
if (user == null)
|
|
{
|
|
return NotFound();
|
|
}
|
|
|
|
if (photos == null || photos.Length == 0)
|
|
{
|
|
SaveDatabase();
|
|
return BadRequest();
|
|
}
|
|
|
|
var record = database.Records.SingleOrDefault(r => r.Id == id && r.OwnerId == user.Id);
|
|
if (record == null)
|
|
{
|
|
SaveDatabase();
|
|
return NotFound(id);
|
|
}
|
|
|
|
SaveDatabase();
|
|
|
|
try
|
|
{
|
|
await ExecuteTransaction(async token =>
|
|
{
|
|
foreach (var photo in photos)
|
|
{
|
|
if (photo.Length > 0)
|
|
{
|
|
var file = WrapFormFile(photo) ?? throw new BadHttpRequestException(photo?.FileName ?? string.Empty);
|
|
|
|
var p = new PhotoItem
|
|
{
|
|
FlowerId = record.FlowerId,
|
|
RecordId = id,
|
|
FileType = file.FileType,
|
|
FileName = file.Filename,
|
|
Path = file.Path,
|
|
DateUploadUnixTime = user.ActiveDateUnixTime ?? DateTimeOffset.UtcNow.ToUnixTimeMilliseconds()
|
|
};
|
|
AddPhotoItem(p);
|
|
|
|
await WriteToFile(user.Id, record.FlowerId, file, token);
|
|
}
|
|
}
|
|
});
|
|
}
|
|
catch (BadHttpRequestException bex)
|
|
{
|
|
return BadRequest(bex.Message);
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
return Problem(ex.ToString(), "api/event/add_photos");
|
|
// TODO: Logger
|
|
}
|
|
|
|
return NoContent();
|
|
}
|
|
|
|
/// <summary>
|
|
/// 获取事件关联的照片列表
|
|
/// </summary>
|
|
/// <remarks>
|
|
/// 请求示例：
|
|
///
|
|
/// GET /api/event/photos
|
|
/// Authorization: authorization id
|
|
///
|
|
/// 参数：
|
|
///
|
|
/// id: int
|
|
///
|
|
/// </remarks>
|
|
/// <param name="id">事件唯一 id</param>
|
|
/// <returns>验证通过则返回事件关联的照片列表</returns>
|
|
/// <response code="200">返回事件关联的照片列表</response>
|
|
/// <response code="401">未找到登录会话或已过期</response>
|
|
/// <response code="403">用户已禁用</response>
|
|
/// <response code="404">未找到关联用户或者未找到事件对象</response>
|
|
[Route("photos", Name = "getEventPhotos")]
|
|
[ProducesResponseType(StatusCodes.Status200OK)]
|
|
[ProducesResponseType(StatusCodes.Status401Unauthorized)]
|
|
[ProducesResponseType(StatusCodes.Status403Forbidden)]
|
|
[ProducesResponseType(StatusCodes.Status404NotFound)]
|
|
[HttpGet]
|
|
[ResponseCache(NoStore = true, Location = ResponseCacheLocation.None)]
|
|
public ActionResult<PhotoItem[]> GetPhotos([Required][FromQuery] int id)
|
|
{
|
|
var (result, user) = CheckPermission();
|
|
if (result != null)
|
|
{
|
|
return result;
|
|
}
|
|
if (user == null)
|
|
{
|
|
return NotFound();
|
|
}
|
|
SaveDatabase();
|
|
|
|
var photos = database.Photos.Where(p => p.RecordId == id && database.Records.Any(r => r.Id == id && r.OwnerId == user.Id));
|
|
|
|
return Ok(photos);
|
|
}
|
|
}
|