282 lines
10 KiB
Go
282 lines
10 KiB
Go
package logic
|
||
|
||
import (
|
||
"fmt"
|
||
"strings"
|
||
|
||
"github.com/eryajf/go-ldap-admin/config"
|
||
"github.com/eryajf/go-ldap-admin/model"
|
||
"github.com/eryajf/go-ldap-admin/model/request"
|
||
"github.com/eryajf/go-ldap-admin/public/client/wechat"
|
||
"github.com/mozillazg/go-pinyin"
|
||
"github.com/wenerme/go-wecom/wecom"
|
||
|
||
"github.com/eryajf/go-ldap-admin/public/tools"
|
||
"github.com/eryajf/go-ldap-admin/service/ildap"
|
||
"github.com/eryajf/go-ldap-admin/service/isql"
|
||
"github.com/gin-gonic/gin"
|
||
)
|
||
|
||
type WeComLogic struct {
|
||
}
|
||
|
||
//通过企业微信获取部门信息
|
||
func (d *WeComLogic) SyncWeComDepts(c *gin.Context, req interface{}) (data interface{}, rspError interface{}) {
|
||
// 1.获取所有部门
|
||
depts, err := wechat.GetAllDepts()
|
||
if err != nil {
|
||
return nil, tools.NewOperationError(fmt.Errorf("获取企业微信部门列表失败：%s", err.Error()))
|
||
}
|
||
// 2.将部门这个数组进行拆分，一组是父ID为1的，一组是父ID不为1的
|
||
var firstDepts []wecom.ListDepartmentResponseItem // 父ID为1的部门
|
||
var otherDepts []wecom.ListDepartmentResponseItem // 父ID不为1的部门
|
||
for _, dept := range depts {
|
||
if dept.ID == 1 { // 跳过ID为1的根部门，由系统配置的根部门进行占位
|
||
continue
|
||
}
|
||
if dept.ParentID == 1 {
|
||
firstDepts = append(firstDepts, dept)
|
||
} else {
|
||
otherDepts = append(otherDepts, dept)
|
||
}
|
||
}
|
||
// 3.先写父ID为1的，再写父ID不为1的
|
||
for _, dept := range firstDepts {
|
||
err := d.AddDepts(&request.WeComGroupAddReq{
|
||
GroupType: "cn",
|
||
GroupName: strings.Join(pinyin.LazyConvert(dept.Name, nil), ""),
|
||
Remark: dept.Name,
|
||
SourceDeptId: fmt.Sprintf("%s_%d", config.Conf.WeCom.Flag, dept.ID),
|
||
Source: config.Conf.WeCom.Flag,
|
||
SourceDeptParentId: fmt.Sprintf("%s_%d", config.Conf.WeCom.Flag, 1),
|
||
})
|
||
if err != nil {
|
||
return nil, tools.NewOperationError(fmt.Errorf("SyncWeComDepts添加根部门失败：%s", err.Error()))
|
||
}
|
||
}
|
||
|
||
for _, dept := range otherDepts {
|
||
err := d.AddDepts(&request.WeComGroupAddReq{
|
||
GroupType: "cn",
|
||
GroupName: strings.Join(pinyin.LazyConvert(dept.Name, nil), ""),
|
||
Remark: dept.Name,
|
||
SourceDeptId: fmt.Sprintf("%s_%d", config.Conf.WeCom.Flag, dept.ID),
|
||
Source: config.Conf.WeCom.Flag,
|
||
SourceDeptParentId: fmt.Sprintf("%s_%d", config.Conf.WeCom.Flag, dept.ParentID),
|
||
})
|
||
if err != nil {
|
||
return nil, tools.NewOperationError(fmt.Errorf("SyncWeComDepts添加根部门失败：%s", err.Error()))
|
||
}
|
||
}
|
||
return nil, nil
|
||
}
|
||
|
||
// AddGroup 添加部门数据
|
||
func (d WeComLogic) AddDepts(r *request.WeComGroupAddReq) error {
|
||
// 判断部门名称是否存在
|
||
parentGroup := new(model.Group)
|
||
err := isql.Group.Find(tools.H{"source_dept_id": r.SourceDeptParentId}, parentGroup)
|
||
if err != nil {
|
||
return tools.NewMySqlError(fmt.Errorf("查询父级部门失败：%s", err.Error()))
|
||
}
|
||
if !isql.Group.Exist(tools.H{"source_dept_id": r.SourceDeptId}) {
|
||
groupTmp := model.Group{
|
||
GroupName: r.GroupName,
|
||
Remark: r.Remark,
|
||
Creator: "system",
|
||
GroupType: "cn",
|
||
ParentId: parentGroup.ID,
|
||
SourceDeptId: r.SourceDeptId,
|
||
Source: r.Source,
|
||
SourceDeptParentId: r.SourceDeptParentId,
|
||
GroupDN: fmt.Sprintf("cn=%s,%s", r.GroupName, parentGroup.GroupDN),
|
||
}
|
||
err = CommonAddGroup(&groupTmp)
|
||
if err != nil {
|
||
return tools.NewOperationError(fmt.Errorf("添加部门失败：%s", err.Error()))
|
||
}
|
||
}
|
||
// todo: 分组存在，但是信息有变更的情况，需要考量，但是这种组织架构的调整，通常是比较复杂的情况，这里并不好与之一一对应同步，暂时不做支持
|
||
return nil
|
||
}
|
||
|
||
//根据现有数据库同步到的部门信息，开启用户同步
|
||
func (d WeComLogic) SyncWeComUsers(c *gin.Context, req interface{}) (data interface{}, rspError interface{}) {
|
||
// 1.获取企业微信用户列表
|
||
users, err := wechat.GetAllUsers()
|
||
if err != nil {
|
||
return nil, tools.NewOperationError(fmt.Errorf("SyncWeComUsers获取企业微信用户列表失败：%s", err.Error()))
|
||
}
|
||
// 2.将用户拆分成两组，一组状态为1的在职正常用户，一组状态为2的禁用账户
|
||
// 此问题在企业微信这里没有统一的定论
|
||
// 有的公司是员工离职，直接在企业微信后台删除(企业微信又没有对应接口拿到已经被删除的用户)
|
||
// 也有公司是在后台禁用账号，这两者不同，处理方式也不一样
|
||
// 目前先以第二种为准，判断用户状态字段来判断用户是否离职
|
||
var liveUsers []wecom.ListUserResponseItem
|
||
var leaveUsers []wecom.ListUserResponseItem
|
||
for _, user := range users {
|
||
if user.Status == 1 {
|
||
liveUsers = append(liveUsers, user)
|
||
}
|
||
if user.Status == 2 {
|
||
leaveUsers = append(leaveUsers, user)
|
||
}
|
||
}
|
||
// 2.遍历用户，开始写入
|
||
for _, detail := range liveUsers {
|
||
// 用户名的几种情况
|
||
var userName string
|
||
if detail.Email != "" {
|
||
userName = strings.Split(detail.Email, "@")[0]
|
||
}
|
||
if userName == "" && detail.Name != "" {
|
||
userName = strings.Join(pinyin.LazyConvert(detail.Name, nil), "")
|
||
}
|
||
if userName == "" && detail.Mobile != "" {
|
||
userName = detail.Mobile
|
||
}
|
||
if userName == "" && detail.Email != "" {
|
||
userName = strings.Split(detail.Email, "@")[0]
|
||
}
|
||
|
||
if detail.BizMail == "" {
|
||
detail.BizMail = detail.Email
|
||
}
|
||
|
||
// 如果企业内没有工号，则工号用名字占位
|
||
// if detail.JobNumber == "" {
|
||
// detail.JobNumber = detail.Mobile
|
||
// }
|
||
|
||
//企业微信部门ids,转换为内部部门id
|
||
var sourceDeptIds []string
|
||
for _, deptId := range detail.Department {
|
||
sourceDeptIds = append(sourceDeptIds, fmt.Sprintf("%s_%d", config.Conf.WeCom.Flag, deptId))
|
||
}
|
||
groupIds, err := isql.Group.DeptIdsToGroupIds(sourceDeptIds)
|
||
if err != nil {
|
||
return nil, tools.NewMySqlError(fmt.Errorf("SyncWeComUsers获取企业微信部门ids转换为内部部门id失败：%s", err.Error()))
|
||
}
|
||
|
||
// 写入用户
|
||
user := request.WeComUserAddReq{
|
||
Username: userName,
|
||
Password: config.Conf.Ldap.UserInitPassword,
|
||
Nickname: detail.Name,
|
||
GivenName: detail.Name,
|
||
Mail: detail.BizMail,
|
||
JobNumber: detail.Name, // 工号暂用名字替代
|
||
Mobile: detail.Mobile,
|
||
Avatar: detail.Avatar,
|
||
PostalAddress: detail.Address,
|
||
// Departments: dept.GroupName,
|
||
Position: detail.Position,
|
||
Introduction: detail.Name,
|
||
Status: 1,
|
||
DepartmentId: groupIds,
|
||
Source: config.Conf.WeCom.Flag,
|
||
SourceUserId: fmt.Sprintf("%s_%s", config.Conf.WeCom.Flag, detail.UserID),
|
||
SourceUnionId: fmt.Sprintf("%s_%s", config.Conf.WeCom.Flag, detail.UserID),
|
||
}
|
||
// 入库
|
||
err = d.AddUsers(&user)
|
||
if err != nil {
|
||
return nil, tools.NewOperationError(fmt.Errorf("SyncWeComUsers写入用户失败：%s", err.Error()))
|
||
}
|
||
}
|
||
|
||
// 3.获取企业微信已离职用户id列表
|
||
// 4.遍历id，开始处理
|
||
for _, userTmp := range leaveUsers {
|
||
user := new(model.User)
|
||
err = isql.User.Find(tools.H{"source_user_id": fmt.Sprintf("%s_%s", config.Conf.WeCom.Flag, userTmp.UserID)}, user)
|
||
if err != nil {
|
||
return nil, tools.NewMySqlError(fmt.Errorf("在MySQL查询用户失败: " + err.Error()))
|
||
}
|
||
// 先从ldap删除用户
|
||
err = ildap.User.Delete(user.UserDN)
|
||
if err != nil {
|
||
return nil, tools.NewLdapError(fmt.Errorf("在LDAP删除用户失败" + err.Error()))
|
||
}
|
||
// 然后更新MySQL中用户状态
|
||
err = isql.User.ChangeStatus(int(user.ID), 2)
|
||
if err != nil {
|
||
return nil, tools.NewMySqlError(fmt.Errorf("在MySQL更新用户状态失败: " + err.Error()))
|
||
}
|
||
}
|
||
return nil, nil
|
||
}
|
||
|
||
// AddUser 添加用户数据
|
||
func (d WeComLogic) AddUsers(r *request.WeComUserAddReq) error {
|
||
// 根据 unionid 查询用户,不存在则创建
|
||
if !isql.User.Exist(tools.H{"source_union_id": r.SourceUnionId}) {
|
||
// 根据角色id获取角色
|
||
r.RoleIds = []uint{2} // 默认添加为普通用户角色
|
||
roles, err := isql.Role.GetRolesByIds(r.RoleIds)
|
||
if err != nil {
|
||
return tools.NewValidatorError(fmt.Errorf("根据角色ID获取角色信息失败:%s", err.Error()))
|
||
}
|
||
|
||
deptIds := tools.SliceToString(r.DepartmentId, ",")
|
||
user := model.User{
|
||
Username: r.Username,
|
||
Password: r.Password,
|
||
Nickname: r.Nickname,
|
||
GivenName: r.GivenName,
|
||
Mail: r.Mail,
|
||
JobNumber: r.JobNumber,
|
||
Mobile: r.Mobile,
|
||
Avatar: r.Avatar,
|
||
PostalAddress: r.PostalAddress,
|
||
Departments: r.Departments,
|
||
Position: r.Position,
|
||
Introduction: r.Introduction,
|
||
Status: r.Status,
|
||
Creator: "system",
|
||
DepartmentId: deptIds,
|
||
Roles: roles,
|
||
Source: r.Source,
|
||
SourceUserId: r.SourceUserId,
|
||
SourceUnionId: r.SourceUnionId,
|
||
UserDN: fmt.Sprintf("uid=%s,%s", r.Username, config.Conf.Ldap.UserDN),
|
||
}
|
||
err = CommonAddUser(&user, r.DepartmentId)
|
||
if err != nil {
|
||
return err
|
||
}
|
||
}
|
||
// todo: 用户如果存在，则暂时跳过，目前用户名取自邮箱等内容，因为这个不确定性，可能会造成一些逻辑上的问题，因为默认情况下，用户名是无法在ldap中更改的，所以暂时跳过，如果用户有这里的需求，可以根据自己的情况固定用户名的字段，也就可以打开如下的注释了
|
||
// else {
|
||
// oldData := new(model.User)
|
||
// if err := isql.User.Find(tools.H{"source_union_id": r.SourceUnionId}, oldData); err != nil {
|
||
// return err
|
||
// }
|
||
// if r.Username != oldData.Username || r.Mail != oldData.Mail || r.Mobile != oldData.Mobile {
|
||
// user := model.User{
|
||
// Model: oldData.Model,
|
||
// Username: r.Username,
|
||
// Nickname: r.Nickname,
|
||
// GivenName: r.GivenName,
|
||
// Mail: r.Mail,
|
||
// JobNumber: r.JobNumber,
|
||
// Mobile: r.Mobile,
|
||
// Avatar: r.Avatar,
|
||
// PostalAddress: r.PostalAddress,
|
||
// Departments: r.Departments,
|
||
// Position: r.Position,
|
||
// Introduction: r.Introduction,
|
||
// Creator: oldData.Creator,
|
||
// DepartmentId: tools.SliceToString(r.DepartmentId, ","),
|
||
// Source: oldData.Source,
|
||
// Roles: oldData.Roles,
|
||
// UserDN: oldData.UserDN,
|
||
// }
|
||
// if err := CommonUpdateUser(oldData, &user, r.DepartmentId); err != nil {
|
||
// return err
|
||
// }
|
||
// }
|
||
// }
|
||
return nil
|
||
}
|