删除之前钉钉绑定在IES教师的账户

TEAMModelBI/Controllers/LoginController.cs

@@ -67,335 +67,6 @@ namespace TEAMModelBI.Controllers
             _http = http;
         }
 
-        /// <summary>
-        /// 钉钉扫码登录
-        /// 先获取是否在钉钉架构中
-        /// 获取数据库是否有该人员
-        /// </summary>
-        /// <param name="jsonElement"></param>
-        /// <returns>Json结果</returns>
-        [ProducesDefaultResponseType]
-        [HttpPost("DingLogin")]
-        [AllowAnonymous]
-        public async Task<IActionResult> DingLogin(JsonElement jsonElement)
-        {
-            //state 是前端传入的，钉钉并不会修改，比如有多种登录方式的时候，一个登录方法判断登录方式可以进行不同的处理。
-            try
-            {
-                string str_appKey = _configuration["DingDingAuth:appKey"];
-                string str_appSecret = _configuration["DingDingAuth:appSecret"];
-                if (string.IsNullOrWhiteSpace(str_appKey) || string.IsNullOrWhiteSpace(str_appSecret))
-                {
-                    return Ok(new { state = 0, message = "扫码登录失败" });
-                }
-                //自己传的code
-                if (!jsonElement.TryGetProperty("code", out JsonElement LoginTempCode)) return BadRequest();
-
-                //获取企业内部应用的accessToken
-                DefaultDingTalkClient Iclient = new DefaultDingTalkClient("https://oapi.dingtalk.com/gettoken");
-                OapiGettokenRequest request = new OapiGettokenRequest();
-                request.Appkey = str_appKey;
-                request.Appsecret = str_appSecret;
-                request.SetHttpMethod("GET");
-                OapiGettokenResponse tokenResponse = Iclient.Execute(request);
-                if (tokenResponse.IsError)
-                {
-                    return Ok(new { state = 0, message = "扫码登录失败" });
-                }
-
-                string access_token = tokenResponse.AccessToken;
-                //获取临时授权码 获取授权用户的个人信息
-                DefaultDingTalkClient clientinfo = new DefaultDingTalkClient("https://oapi.dingtalk.com/sns/getuserinfo_bycode");
-                OapiSnsGetuserinfoBycodeRequest req = new OapiSnsGetuserinfoBycodeRequest() { TmpAuthCode = $"{LoginTempCode}" };  //通过扫描二维码，跳转到指定的Url后，向Url中追加Code临时授权码
-                OapiSnsGetuserinfoBycodeResponse response = clientinfo.Execute(req, str_appKey, str_appSecret);
-                if (response.IsError)
-                {
-                    return Ok(new { state = 0, message = "扫码登录失败" });
-                }
-
-                string unionid = response.UserInfo.Unionid;
-                IDingTalkClient client2 = new DefaultDingTalkClient("https://oapi.dingtalk.com/topapi/user/getbyunionid"); //userid地址
-                OapiUserGetbyunionidRequest byunionidRequest = new OapiUserGetbyunionidRequest() { Unionid = unionid };
-                OapiUserGetbyunionidResponse byunionidResponse = client2.Execute(byunionidRequest, access_token);
-                if (byunionidResponse.IsError)
-                {
-                    return Ok(new { state = 0, message = "扫码登录失败" });
-                }
-
-                // 根据userId获取用户信息
-                string userid = byunionidResponse.Result.Userid;
-                IDingTalkClient client3 = new DefaultDingTalkClient("https://oapi.dingtalk.com/topapi/v2/user/get");
-                OapiV2UserGetRequest v2GetRequest = new OapiV2UserGetRequest()
-                {
-                    Userid = userid,
-                    Language = "zh_CN"
-                };
-                v2GetRequest.SetHttpMethod("POST");
-                OapiV2UserGetResponse v2GetResponse = client3.Execute(v2GetRequest, access_token);
-                if (v2GetResponse.IsError)
-                {
-                    return Ok(new { state = 0, message = "扫码登录失败" });
-                }
-
-                var DDbind = v2GetResponse.Result;
-
-                DingDingbinds dingDingBind = new DingDingbinds
-                {
-                    type = type,
-                    deptIdList = DDbind.DeptIdList,
-                    title = DDbind.Title,
-                    name = DDbind.Name,
-                    unionid = DDbind.Unionid,
-                    userid = DDbind.Userid,
-                };
-
-                Teacher teacher = null;
-                string sql = $"select distinct value(c) from c join A1 in c.ddbinds where A1.userid='{dingDingBind.userid}' AND A1.unionid ='{dingDingBind.unionid}'";
-                await foreach (var item in _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "Teacher").GetItemQueryIterator<Teacher>(queryText: sql, requestOptions: new QueryRequestOptions() { PartitionKey = new PartitionKey($"Base") }))
-                {
-                    teacher = item;
-                    break;
-                }
-                if (teacher == null)
-                {
-                    return Ok(new { state = 1, dingDingBind });
-                }
-                else
-                {
-                    var clientID = _configuration.GetValue<string>("HaBookAuth:CoreService:clientID");
-                    var location = _option.Location;
-                    TmdidImplicit implicit_token = await _aoreAPIHttpService.Implicit(
-                        new Dictionary<string, string>()
-                        {
-                        { "grant_type", "implicit" },
-                        { "client_id",clientID },
-                        { "account",teacher.id },
-                        { "nonce",Guid.NewGuid().ToString()}
-                        }, location, _configuration);
-
-                    Dictionary<string, object> dic = new Dictionary<string, object> { { "PartitionKey", "authority-bi" } };//设置只访问BI的权限
-                    var table = _azureStorage.GetCloudTableClient().GetTableReference("SchoolSetting");
-                    List<Authority> authorityBIList = await table.FindListByDict<Authority>(dic);  //获取权限列表
-
-                    if (implicit_token!=null)
-                    {
-                        var ddbind = teacher.ddbinds.Find(x => x.userid.Equals($"{dingDingBind.userid}") && x.unionid.Equals($"{dingDingBind.unionid}"));
-                        if (ddbind != null)
-                        {
-                            List<string> roles = new List<string>();//角色列表
-                            List<string> permissions = new List<string>();//权限列表
-                            List<string> depts = new List<string>();    //部门id
-                            School school_base = new School();
-                            string school_code = null;
-                            if (teacher.defaultSchool != null)
-                            {
-                                var schoolRoles = await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemStreamAsync(teacher.id, new PartitionKey($"Teacher-{teacher.defaultSchool}"));
-                                if (schoolRoles.Status == 200) 
-                                {
-                                    using var json = await JsonDocument.ParseAsync(schoolRoles.ContentStream);                                   
-                                    if (json.RootElement.TryGetProperty("roles", out JsonElement _roles) && _roles.ValueKind != JsonValueKind.Null) 
-                                    {
-                                        foreach (var obj in _roles.EnumerateArray()) 
-                                        {
-                                            if (obj.GetString().Equals("assist"))
-                                            {
-                                                roles.Add(obj.GetString());
-                                            }
-                                        }
-                                    }
-                                    if (json.RootElement.TryGetProperty("permissions", out JsonElement _permissions) && _permissions.ValueKind != JsonValueKind.Null)
-                                    {
-                                        foreach (var obj in _permissions.EnumerateArray())
-                                        {
-                                            foreach (var item in authorityBIList) 
-                                            {
-                                                if (item.RowKey.Equals(obj.GetString()))
-                                                {
-                                                    permissions.Add(obj.GetString());
-                                                }
-                                            }
-                                        }
-                                    }
-                                }
-
-                                school_base = await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemAsync<School>($"{teacher.defaultSchool}", new PartitionKey("Base"));
-                                //foreach (var period in school_base.period)
-                                //{
-                                //    try
-                                //    {
-                                //        await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemAsync<ItemCond>($"{period.id}", new PartitionKey($"ItemCond-{teacher.defaultSchool}"));
-                                //    }
-                                //    catch (CosmosException)
-                                //    {
-                                //        ItemCond itemCond = new ItemCond
-                                //        {
-                                //            id = period.id,
-                                //            pk = "ItemCond",
-                                //            code = $"ItemCond-{teacher.defaultSchool}",
-                                //            ttl = -1,
-                                //        };
-                                //        await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").CreateItemAsync<ItemCond>(itemCond, new PartitionKey($"ItemCond-{teacher.defaultSchool}"));
-                                //    }
-                                //}
-                                school_code = teacher.defaultSchool;
-                            }
-
-                            foreach (var temp in ddbind.deptIdList) 
-                            {
-                                depts.Add(temp.ToString());
-                            }
-
-
-                            return Ok(new { state = 200, teacher = teacher, id_token = implicit_token.id_token, access_token = implicit_token.access_token, expires_in = implicit_token.expires_in, token_type = implicit_token.token_type });
-                        }
-                    }
-                    return Ok(new { state = 1, dingdinginfo = dingDingBind });
-                }
-            }
-            catch (Exception e)
-            {
-                return Ok(new { state = 1, message = "code失效" });
-            }
-        }
-
-        /// <summary>
-        /// 依据id_Ttoken获取教师信息
-        /// </summary>
-        /// <param name="jsonElement"></param>
-        /// <returns></returns>
-        [ProducesDefaultResponseType]
-        [HttpPost("get-teacherinfo")]
-        public async Task<IActionResult> GetTeacherInfo(JsonElement jsonElement)
-        {
-            try
-            {
-                if (!jsonElement.TryGetProperty("id_token", out JsonElement id_token)) return BadRequest();
-                var jwt = new JwtSecurityToken(id_token.GetString());
-                //TODO 此驗證IdToken先簡單檢查，後面需向Core ID新API，驗證Token
-                //if (!jwt.Payload.Iss.Equals("account.teammodel", StringComparison.OrdinalIgnoreCase)) return BadRequest();
-                var id = jwt.Payload.Sub;
-                jwt.Payload.TryGetValue("name", out object name);
-                jwt.Payload.TryGetValue("picture", out object picture);
-
-                Teacher teacher = null;
-
-                //检查是否有绑定信息
-                var client = _azureCosmos.GetCosmosClient();
-                teacher = await client.GetContainer(Constant.TEAMModelOS, "Teacher").ReadItemAsync<Teacher>($"{id}", new PartitionKey("Base"));
-                var auth_token = "";
-
-                var clientID = _configuration.GetValue<string>("HaBookAuth:CoreService:clientID");
-                var location = _option.Location;
-                TmdidImplicit implicit_token = await _aoreAPIHttpService.Implicit(
-                    new Dictionary<string, string>()
-                    {
-                                        { "grant_type", "implicit" },
-                                        { "client_id",clientID },
-                                        { "account",teacher.id },
-                                        { "nonce",Guid.NewGuid().ToString()}
-                    }, location, _configuration);
-
-                Dictionary<string, object> dic = new Dictionary<string, object> { { "PartitionKey", "authority-bi" } };//设置只访问BI的权限
-                var table = _azureStorage.GetCloudTableClient().GetTableReference("SchoolSetting");
-                List<Authority> authorityBIList = await table.FindListByDict<Authority>(dic);  //获取权限列表
-
-                List<string> roles = new List<string>();//角色列表
-                List<string> permissions = new List<string>();//权限列表
-                List<string> depts = new List<string>();    //部门id
-                School school_base = new School();
-                string school_code = null;
-
-                if (implicit_token!=null)
-                {
-
-                    if (teacher.defaultSchool != null)
-                    {
-                        var schoolRoles = await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemStreamAsync(teacher.id, new PartitionKey($"Teacher-{teacher.defaultSchool}"));
-                        if (schoolRoles.Status == 200)
-                        {
-                            using var json = await JsonDocument.ParseAsync(schoolRoles.ContentStream);
-                            if (json.RootElement.TryGetProperty("roles", out JsonElement _roles) && _roles.ValueKind != JsonValueKind.Null)
-                            {
-                                foreach (var obj in _roles.EnumerateArray())
-                                {
-                                    //初始定义顾问的assistant 更改为assist
-                                    if (obj.GetString().Equals($"assist"))
-                                    {
-                                        roles.Add(obj.GetString());
-                                    }
-                                }
-                            }
-                            if (json.RootElement.TryGetProperty("permissions", out JsonElement _permissions) && _permissions.ValueKind != JsonValueKind.Null)
-                            {
-                                foreach (var obj in _permissions.EnumerateArray())
-                                {
-                                    //限制只显示BI权限
-                                    foreach (var aut in authorityBIList)
-                                    {
-                                        if (aut.RowKey.Equals(obj.GetString()))
-                                        {
-                                            permissions.Add(obj.GetString());
-                                        }
-                                    }
-                                }
-                            }
-                        }
-
-                        school_base = await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemAsync<School>($"{teacher.defaultSchool}", new PartitionKey("Base"));
-                        //foreach (var period in school_base.period)
-                        //{
-                        //    try
-                        //    {
-                        //        await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemAsync<ItemCond>($"{period.id}", new PartitionKey($"ItemCond-{teacher.defaultSchool}"));
-                        //    }
-                        //    catch (CosmosException)
-                        //    {
-                        //        ItemCond itemCond = new ItemCond
-                        //        {
-                        //            id = period.id,
-                        //            pk = "ItemCond",
-                        //            code = $"ItemCond-{teacher.defaultSchool}",
-                        //            ttl = -1,
-                        //        };
-                        //        await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").CreateItemAsync<ItemCond>(itemCond, new PartitionKey($"ItemCond-{teacher.defaultSchool}"));
-                        //    }
-                        //}
-                        school_code = teacher.defaultSchool;
-                    }
-                    List<Teacher.DingDingBind> ddbinds = teacher.ddbinds;
-                    Teacher.DingDingBind ddbind = new Teacher.DingDingBind();
-                    if (teacher.ddbinds.Count > 0)
-                    {
-                        if (ddbinds != null)
-                        {
-                            foreach (var temp in ddbinds)
-                            {
-                                ddbind.userid = temp.userid;
-                                ddbind.deptIdList = temp.deptIdList;
-                            }
-                        }
-
-                        foreach (var temp in ddbind.deptIdList)
-                        {
-                            depts.Add(temp.ToString());
-                        }
-                    }
-                    else return Ok(new { state = 1, message = "该账户未绑定钉钉信息！请扫码绑定信息！" });
-
-                }
-
-                var (osblob_uri, osblob_sas) = roles.Contains("area") ? _azureStorage.GetBlobContainerSAS("teammodelos", BlobContainerSasPermissions.Write | BlobContainerSasPermissions.Read | BlobContainerSasPermissions.List | BlobContainerSasPermissions.Delete) : _azureStorage.GetBlobContainerSAS("teammodelos", BlobContainerSasPermissions.Read | BlobContainerSasPermissions.List);
-
-                return Ok(new { state = 200, auth_token = auth_token, teacher = teacher, id_token = implicit_token.id_token, access_token = implicit_token.access_token, expires_in = implicit_token.expires_in, token_type = implicit_token.token_type, osblob_uri, osblob_sas });
-
-            }
-            catch (Exception ex)
-            {
-                await _dingDing.SendBotMsg($"BI，{_option.Location}, /common/login/get-teacherinfo \n{ex.Message}{ex.StackTrace}", GroupNames.成都开发測試群組);
-                return BadRequest();
-            }
-        }
-
         /// <summary>
         /// 钉钉扫码登录获取扫码信息
         /// </summary>