269 lines
9.5 KiB
Go
269 lines
9.5 KiB
Go
package logic
|
||
|
||
import (
|
||
"fmt"
|
||
"strings"
|
||
|
||
"github.com/eryajf/go-ldap-admin/config"
|
||
"github.com/eryajf/go-ldap-admin/model"
|
||
"github.com/eryajf/go-ldap-admin/model/request"
|
||
"github.com/eryajf/go-ldap-admin/public/client/dingtalk"
|
||
"github.com/eryajf/go-ldap-admin/public/tools"
|
||
"github.com/eryajf/go-ldap-admin/service/ildap"
|
||
"github.com/eryajf/go-ldap-admin/service/isql"
|
||
"github.com/gin-gonic/gin"
|
||
"github.com/mozillazg/go-pinyin"
|
||
)
|
||
|
||
type DingTalkLogic struct {
|
||
}
|
||
|
||
// TODO: 目前同步没毛病，只有更新还需要再琢磨琢磨
|
||
|
||
//通过钉钉获取部门信息
|
||
func (d *DingTalkLogic) SyncDingTalkDepts(c *gin.Context, req interface{}) (data interface{}, rspError interface{}) {
|
||
// 1.获取所有部门
|
||
depts, err := dingtalk.GetDingTalkAllDepts(1)
|
||
if err != nil {
|
||
return nil, tools.NewOperationError(fmt.Errorf("获取钉钉部门列表失败：%s", err.Error()))
|
||
}
|
||
// 2.将部门这个数组进行拆分，一组是父ID为1的，一组是父ID不为1的
|
||
var firstDepts []*dingtalk.DingTalkDept // 父ID为1的部门
|
||
var otherDepts []*dingtalk.DingTalkDept // 父ID不为1的部门
|
||
for _, dept := range depts {
|
||
if dept.ParentId == 1 {
|
||
firstDepts = append(firstDepts, dept)
|
||
} else {
|
||
otherDepts = append(otherDepts, dept)
|
||
}
|
||
}
|
||
// 3.先写父ID为1的，再写父ID不为1的
|
||
for _, dept := range firstDepts {
|
||
err := d.AddDepts(&request.DingGroupAddReq{
|
||
GroupType: "cn",
|
||
GroupName: dept.Name,
|
||
Remark: dept.Remark,
|
||
SourceDeptId: fmt.Sprintf("%s_%d", config.Conf.DingTalk.Flag, dept.Id),
|
||
Source: config.Conf.DingTalk.Flag,
|
||
SourceDeptParentId: fmt.Sprintf("%s_%d", config.Conf.DingTalk.Flag, 1),
|
||
})
|
||
if err != nil {
|
||
return nil, tools.NewOperationError(fmt.Errorf("DsyncDingTalkDepts添加根部门失败：%s", err.Error()))
|
||
}
|
||
}
|
||
for _, dept := range otherDepts {
|
||
err := d.AddDepts(&request.DingGroupAddReq{
|
||
GroupType: "cn",
|
||
GroupName: dept.Name,
|
||
Remark: dept.Remark,
|
||
SourceDeptId: fmt.Sprintf("%s_%d", config.Conf.DingTalk.Flag, dept.Id),
|
||
Source: config.Conf.DingTalk.Flag,
|
||
SourceDeptParentId: fmt.Sprintf("%s_%d", config.Conf.DingTalk.Flag, dept.ParentId),
|
||
})
|
||
if err != nil {
|
||
return nil, tools.NewOperationError(fmt.Errorf("DsyncDingTalkDepts添加根部门失败：%s", err.Error()))
|
||
}
|
||
}
|
||
|
||
return nil, nil
|
||
}
|
||
|
||
// AddGroup 添加部门数据
|
||
func (d DingTalkLogic) AddDepts(r *request.DingGroupAddReq) error {
|
||
// 判断部门名称是否存在
|
||
parentGroup := new(model.Group)
|
||
err := isql.Group.Find(tools.H{"source_dept_id": r.SourceDeptParentId}, parentGroup)
|
||
if err != nil {
|
||
return tools.NewMySqlError(fmt.Errorf("查询父级部门失败：%s", err.Error()))
|
||
}
|
||
if !isql.Group.Exist(tools.H{"source_dept_id": r.SourceDeptId}) {
|
||
groupTmp := model.Group{
|
||
GroupName: r.GroupName,
|
||
Remark: r.Remark,
|
||
Creator: "system",
|
||
GroupType: "cn",
|
||
ParentId: parentGroup.ID,
|
||
SourceDeptId: r.SourceDeptId,
|
||
Source: r.Source,
|
||
SourceDeptParentId: r.SourceDeptParentId,
|
||
GroupDN: fmt.Sprintf("cn=%s,%s", r.GroupName, parentGroup.GroupDN),
|
||
}
|
||
err = CommonAddGroup(&groupTmp)
|
||
if err != nil {
|
||
return tools.NewOperationError(fmt.Errorf("添加部门失败：%s", err.Error()))
|
||
}
|
||
}
|
||
// todo: 分组存在，但是信息有变更的情况，需要考量，但是这种组织架构的调整，通常是比较复杂的情况，这里并不好与之一一对应同步，暂时不做支持
|
||
return nil
|
||
}
|
||
|
||
//根据现有数据库同步到的部门信息，开启用户同步
|
||
func (d DingTalkLogic) SyncDingTalkUsers(c *gin.Context, req interface{}) (data interface{}, rspError interface{}) {
|
||
// 1.获取钉钉用户列表
|
||
users, err := dingtalk.GetDingTalkAllUsers()
|
||
if err != nil {
|
||
return nil, tools.NewOperationError(fmt.Errorf("SyncDingTalkUsers获取钉钉用户列表失败：%s", err.Error()))
|
||
}
|
||
// 2.遍历用户，开始写入
|
||
for _, detail := range users {
|
||
// 用户名的几种情况
|
||
var userName string
|
||
if detail.OrgEmail != "" {
|
||
userName = strings.Split(detail.OrgEmail, "@")[0]
|
||
}
|
||
if userName == "" && detail.Name != "" {
|
||
userName = strings.Join(pinyin.LazyConvert(detail.Name, nil), "")
|
||
}
|
||
if userName == "" && detail.Mobile != "" {
|
||
userName = detail.Mobile
|
||
}
|
||
if userName == "" && detail.Email != "" {
|
||
userName = strings.Split(detail.Email, "@")[0]
|
||
}
|
||
|
||
if detail.OrgEmail == "" {
|
||
detail.OrgEmail = detail.Email
|
||
}
|
||
|
||
// 如果企业内没有工号，则工号用名字占位
|
||
if detail.JobNumber == "" {
|
||
detail.JobNumber = detail.Mobile
|
||
}
|
||
|
||
//钉钉部门ids,转换为内部部门id
|
||
var sourceDeptIds []string
|
||
for _, deptId := range detail.DeptIds {
|
||
sourceDeptIds = append(sourceDeptIds, fmt.Sprintf("%s_%d", config.Conf.DingTalk.Flag, deptId))
|
||
}
|
||
groupIds, err := isql.Group.DingTalkDeptIdsToGroupIds(sourceDeptIds)
|
||
if err != nil {
|
||
return nil, tools.NewMySqlError(fmt.Errorf("SyncDingTalkUsers获取钉钉部门ids转换为内部部门id失败：%s", err.Error()))
|
||
}
|
||
|
||
// 写入用户
|
||
user := request.DingUserAddReq{
|
||
Username: userName,
|
||
Password: config.Conf.Ldap.UserInitPassword,
|
||
Nickname: detail.Name,
|
||
GivenName: detail.Name,
|
||
Mail: detail.OrgEmail,
|
||
JobNumber: detail.JobNumber,
|
||
Mobile: detail.Mobile,
|
||
Avatar: detail.Avatar,
|
||
PostalAddress: detail.WorkPlace,
|
||
// Departments: dept.GroupName,
|
||
Position: detail.Title,
|
||
Introduction: detail.Remark,
|
||
Status: 1,
|
||
DepartmentId: groupIds,
|
||
Source: config.Conf.DingTalk.Flag,
|
||
SourceUserId: fmt.Sprintf("%s_%s", config.Conf.DingTalk.Flag, detail.UserId),
|
||
SourceUnionId: fmt.Sprintf("%s_%s", config.Conf.DingTalk.Flag, detail.UnionId),
|
||
}
|
||
// 入库
|
||
err = d.AddUsers(&user)
|
||
if err != nil {
|
||
return nil, tools.NewOperationError(fmt.Errorf("SyncDingTalkUsers写入用户失败：%s", err.Error()))
|
||
}
|
||
}
|
||
|
||
// 3.获取钉钉已离职用户id列表
|
||
userIds, err := dingtalk.GetDingTalkLeaveUserIds()
|
||
if err != nil {
|
||
return nil, tools.NewOperationError(fmt.Errorf("SyncDingTalkUsers获取钉钉离职用户列表失败：%s", err.Error()))
|
||
}
|
||
// 4.遍历id，开始处理
|
||
for _, uid := range userIds {
|
||
user := new(model.User)
|
||
err = isql.User.Find(tools.H{"source_user_id": fmt.Sprintf("%s_%s", config.Conf.DingTalk.Flag, uid)}, user)
|
||
if err != nil {
|
||
return nil, tools.NewMySqlError(fmt.Errorf("在MySQL查询用户失败: " + err.Error()))
|
||
}
|
||
// 先从ldap删除用户
|
||
err = ildap.User.Delete(user.UserDN)
|
||
if err != nil {
|
||
return nil, tools.NewLdapError(fmt.Errorf("在LDAP删除用户失败" + err.Error()))
|
||
}
|
||
// 然后更新MySQL中用户状态
|
||
err = isql.User.ChangeStatus(int(user.ID), 2)
|
||
if err != nil {
|
||
return nil, tools.NewMySqlError(fmt.Errorf("在MySQL更新用户状态失败: " + err.Error()))
|
||
}
|
||
}
|
||
|
||
return nil, nil
|
||
}
|
||
|
||
// AddUser 添加用户数据
|
||
func (d DingTalkLogic) AddUsers(r *request.DingUserAddReq) error {
|
||
// 根据 unionid 查询用户,不存在则创建
|
||
if !isql.User.Exist(tools.H{"source_union_id": r.SourceUnionId}) {
|
||
// 根据角色id获取角色
|
||
r.RoleIds = []uint{2} // 默认添加为普通用户角色
|
||
roles, err := isql.Role.GetRolesByIds(r.RoleIds)
|
||
if err != nil {
|
||
return tools.NewValidatorError(fmt.Errorf("根据角色ID获取角色信息失败:%s", err.Error()))
|
||
}
|
||
|
||
deptIds := tools.SliceToString(r.DepartmentId, ",")
|
||
user := model.User{
|
||
Username: r.Username,
|
||
Password: r.Password,
|
||
Nickname: r.Nickname,
|
||
GivenName: r.GivenName,
|
||
Mail: r.Mail,
|
||
JobNumber: r.JobNumber,
|
||
Mobile: r.Mobile,
|
||
Avatar: r.Avatar,
|
||
PostalAddress: r.PostalAddress,
|
||
Departments: r.Departments,
|
||
Position: r.Position,
|
||
Introduction: r.Introduction,
|
||
Status: r.Status,
|
||
Creator: "system",
|
||
DepartmentId: deptIds,
|
||
Roles: roles,
|
||
Source: r.Source,
|
||
SourceUserId: r.SourceUserId,
|
||
SourceUnionId: r.SourceUnionId,
|
||
UserDN: fmt.Sprintf("uid=%s,%s", r.Username, config.Conf.Ldap.UserDN),
|
||
}
|
||
err = CommonAddUser(&user, r.DepartmentId)
|
||
if err != nil {
|
||
return err
|
||
}
|
||
}
|
||
// todo: 用户如果存在，则暂时跳过，目前用户名取自邮箱等内容，因为这个不确定性，可能会造成一些逻辑上的问题，因为默认情况下，用户名是无法在ldap中更改的，所以暂时跳过，如果用户有这里的需求，可以根据自己的情况固定用户名的字段，也就可以打开如下的注释了
|
||
// else {
|
||
// oldData := new(model.User)
|
||
// if err := isql.User.Find(tools.H{"source_union_id": r.SourceUnionId}, oldData); err != nil {
|
||
// return err
|
||
// }
|
||
// if r.Username != oldData.Username || r.Mail != oldData.Mail || r.Mobile != oldData.Mobile {
|
||
// user := model.User{
|
||
// Model: oldData.Model,
|
||
// Username: r.Username,
|
||
// Nickname: r.Nickname,
|
||
// GivenName: r.GivenName,
|
||
// Mail: r.Mail,
|
||
// JobNumber: r.JobNumber,
|
||
// Mobile: r.Mobile,
|
||
// Avatar: r.Avatar,
|
||
// PostalAddress: r.PostalAddress,
|
||
// Departments: r.Departments,
|
||
// Position: r.Position,
|
||
// Introduction: r.Introduction,
|
||
// Creator: oldData.Creator,
|
||
// DepartmentId: tools.SliceToString(r.DepartmentId, ","),
|
||
// Source: oldData.Source,
|
||
// Roles: oldData.Roles,
|
||
// UserDN: oldData.UserDN,
|
||
// }
|
||
// if err := CommonUpdateUser(oldData, &user, r.DepartmentId); err != nil {
|
||
// return err
|
||
// }
|
||
// }
|
||
// }
|
||
return nil
|
||
}
|