122 lines
3.9 KiB
Go
122 lines
3.9 KiB
Go
package logic
|
|
|
|
import (
|
|
"fmt"
|
|
"fusenapi/utils/basic"
|
|
"github.com/go-ldap/ldap/v3"
|
|
"net/http"
|
|
"strings"
|
|
|
|
"context"
|
|
|
|
"fusenapi/server/ldap-admin/internal/svc"
|
|
"fusenapi/server/ldap-admin/internal/types"
|
|
|
|
"github.com/zeromicro/go-zero/core/logx"
|
|
)
|
|
|
|
type GetLdapOrganizationMembersLogic struct {
|
|
logx.Logger
|
|
ctx context.Context
|
|
svcCtx *svc.ServiceContext
|
|
}
|
|
|
|
func NewGetLdapOrganizationMembersLogic(ctx context.Context, svcCtx *svc.ServiceContext) *GetLdapOrganizationMembersLogic {
|
|
return &GetLdapOrganizationMembersLogic{
|
|
Logger: logx.WithContext(ctx),
|
|
ctx: ctx,
|
|
svcCtx: svcCtx,
|
|
}
|
|
}
|
|
|
|
// 处理进入前逻辑w,r
|
|
// func (l *GetLdapOrganizationMembersLogic) BeforeLogic(w http.ResponseWriter, r *http.Request) {
|
|
// }
|
|
|
|
func (l *GetLdapOrganizationMembersLogic) GetLdapOrganizationMembers(req *types.GetLdapOrganizationMembersReq, r *http.Request) (resp *basic.Response) {
|
|
|
|
if !l.svcCtx.Ldap.VerifyAuthority(r) {
|
|
return resp.SetStatusWithMessage(basic.CodeUnAuth, "无权限，请联系管理员开通")
|
|
}
|
|
req.OrganizationDN = strings.Trim(req.OrganizationDN, " ")
|
|
if len(req.OrganizationDN) <= 3 || req.OrganizationDN[:3] != "ou=" {
|
|
return resp.SetStatusWithMessage(basic.CodeRequestParamsErr, "参数错误,无效的组织DN")
|
|
}
|
|
//先获取组织成员
|
|
//获取跟用户dn筛选排除该用户
|
|
rootDNSlice := strings.Split(l.svcCtx.Config.Ldap.RootDN, ",")
|
|
if len(rootDNSlice) == 0 {
|
|
return resp.SetStatusWithMessage(basic.CodeServiceErr, "根用户DN未设置")
|
|
}
|
|
rootCn := rootDNSlice[0]
|
|
filter := "(&(objectClass=groupOfUniqueNames)(!(" + rootCn + ")))"
|
|
fields := []string{"uniqueMember"} //只是查询成员
|
|
result, err := l.svcCtx.Ldap.Search(req.OrganizationDN, ldap.ScopeWholeSubtree, filter, fields, nil)
|
|
if err != nil {
|
|
logx.Error(err)
|
|
return resp.SetStatusWithMessage(basic.CodeServiceErr, "查询ldap组织成员错误,"+err.Error())
|
|
}
|
|
//遍历成员提取cn用于从用户基础组中获取用户信息列表
|
|
filterBuilder := strings.Builder{}
|
|
memberCount := 0
|
|
for _, entry := range result.Entries {
|
|
if entry.DN != req.OrganizationDN {
|
|
continue
|
|
}
|
|
//查到用户信息了
|
|
for _, attr := range entry.Attributes {
|
|
if attr.Name != "uniqueMember" {
|
|
continue
|
|
}
|
|
memberCount = len(attr.Values)
|
|
for _, memberDn := range attr.Values {
|
|
//不需要根用户
|
|
if memberDn == l.svcCtx.Config.Ldap.RootDN {
|
|
continue
|
|
}
|
|
//解析dn成每个小的单元
|
|
cellList := strings.Split(memberDn, ",") //取cn邮箱
|
|
filterBuilder.WriteString(fmt.Sprintf("(%s)", cellList[0]))
|
|
}
|
|
break
|
|
}
|
|
break
|
|
}
|
|
//从新赋值filter
|
|
filter = "(&(objectClass=posixAccount)(objectClass=inetOrgPerson)(|" + filterBuilder.String() + "))"
|
|
//从用户基本组中找到员工
|
|
userList, err := l.svcCtx.Ldap.GetLdapBaseTeamUsersByParams(filter)
|
|
if err != nil {
|
|
logx.Error(err)
|
|
return resp.SetStatusWithMessage(basic.CodeServiceErr, "查询ldap帐号信息失败,"+err.Error())
|
|
}
|
|
list := make([]types.GetLdapOrganizationMembersItem, 0, memberCount)
|
|
for _, user := range userList {
|
|
if user.Status != 1 {
|
|
//从部门member中移出
|
|
if err = l.svcCtx.Ldap.RemoveUserFromOrganization(req.OrganizationDN, user.UserDN); err != nil {
|
|
logx.Error("移除用户成员失败:", err)
|
|
}
|
|
continue
|
|
}
|
|
list = append(list, types.GetLdapOrganizationMembersItem{
|
|
UserId: user.UserId,
|
|
UserDN: user.UserDN,
|
|
UserName: user.UserName,
|
|
Email: user.Email,
|
|
Mobile: user.Mobile,
|
|
Avatar: user.Avatar,
|
|
EmployeeType: user.EmployeeType,
|
|
Status: user.Status,
|
|
})
|
|
}
|
|
return resp.SetStatusWithMessage(basic.CodeOK, "success", types.GetLdapOrganizationMembersRsp{
|
|
List: list,
|
|
})
|
|
}
|
|
|
|
// 处理逻辑后 w,r 如:重定向, resp 必须重新处理
|
|
// func (l *GetLdapOrganizationMembersLogic) AfterLogic(w http.ResponseWriter, r *http.Request, resp *basic.Response) {
|
|
// // httpx.OkJsonCtx(r.Context(), w, resp)
|
|
// }
|