TEAMModelOS/TEAMModeBI/Controllers/LoginController.cs

using Azure.Cosmos;
using DingTalk.Api;
using DingTalk.Api.Request;
using DingTalk.Api.Response;
using Microsoft.AspNetCore.Http;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Extensions.Configuration;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text.Json;
using System.Threading.Tasks;
using TEAMModelOS.SDK.DI;
using TEAMModelOS.SDK.Models;
using HTEXLib.COMM.Helpers;
using TEAMModelOS.Models;
using Microsoft.Extensions.Options;
using TEAMModelOS.SDK.Extension;
using TEAMModelOS.SDK.Models.Service;
using Microsoft.AspNetCore.Authorization;
using Azure.Storage.Blobs.Models;
using System.IdentityModel.Tokens.Jwt;
using System.Net.Http;
using System.Text;
using System.Net;
using Newtonsoft.Json;
using System.Collections;
using Newtonsoft.Json.Linq;
using TEAMModelOS.SDK.Models.Cosmos.BI;
using Azure.Storage.Sas;
using System.Net.Http.Json;
//using static DingTalk.Api.Response.OapiV2UserGetResponse;

namespace TEAMModeBI.Controllers
{
    [ProducesResponseType(StatusCodes.Status200OK)]
    [ProducesResponseType(StatusCodes.Status400BadRequest)]
    [Route("common/login")]
    [ApiController]
    public class LoginController : ControllerBase
    {
        private readonly IConfiguration _configuration;
        //数据容器
        private readonly AzureCosmosFactory _azureCosmos;
        //文件容器
        private readonly AzureStorageFactory _azureStorage;
        //钉钉提示信息
        private readonly DingDing _dingDing;
        private readonly Option _option;
        //隐式登录
        private readonly CoreAPIHttpService _aoreAPIHttpService;
        private readonly IHttpClientFactory _http;

        string type = "ddteammodel";

        public LoginController(IConfiguration configuration, AzureCosmosFactory azureCosmos, AzureStorageFactory azureStorage, DingDing dingDing, IOptionsSnapshot<Option> option, CoreAPIHttpService aoreAPIHttpService, IHttpClientFactory http)
        {
            _configuration = configuration;
            _azureCosmos = azureCosmos;
            _azureStorage = azureStorage;
            _dingDing = dingDing;
            _option = option?.Value;
            _aoreAPIHttpService = aoreAPIHttpService;
            _http = http;
        }

        /// <summary>
        /// 钉钉扫码登录
        /// 先获取是否在钉钉架构中
        /// 获取数据库是否有该人员
        /// </summary>
        /// <param name="jsonElement"></param>
        /// <returns>Json结果</returns>
        [ProducesDefaultResponseType]
        [HttpPost("DingLogin")]
        [AllowAnonymous]
        public async Task<IActionResult> DingLogin(JsonElement jsonElement)
        {
            //state 是前端传入的，钉钉并不会修改，比如有多种登录方式的时候，一个登录方法判断登录方式可以进行不同的处理。
            try
            {
                string str_appKey = _configuration["DingDingAuth:appKey"];
                string str_appSecret = _configuration["DingDingAuth:appSecret"];
                if (string.IsNullOrWhiteSpace(str_appKey) || string.IsNullOrWhiteSpace(str_appSecret))
                {
                    return Ok(new { status = 0, message = "扫码登录失败" });
                }
                //自己传的code
                if (!jsonElement.TryGetProperty("code", out JsonElement LoginTempCode)) return BadRequest();

                //获取企业内部应用的accessToken
                DefaultDingTalkClient Iclient = new DefaultDingTalkClient("https://oapi.dingtalk.com/gettoken");
                OapiGettokenRequest request = new OapiGettokenRequest();
                request.Appkey = str_appKey;
                request.Appsecret = str_appSecret;
                request.SetHttpMethod("GET");
                OapiGettokenResponse tokenResponse = Iclient.Execute(request);
                if (tokenResponse.IsError)
                {
                    return Ok(new { status = 0, message = "扫码登录失败" });
                }

                string access_token = tokenResponse.AccessToken;
                //获取临时授权码 获取授权用户的个人信息
                DefaultDingTalkClient clientinfo = new DefaultDingTalkClient("https://oapi.dingtalk.com/sns/getuserinfo_bycode");
                OapiSnsGetuserinfoBycodeRequest req = new OapiSnsGetuserinfoBycodeRequest() { TmpAuthCode = $"{LoginTempCode}" };  //通过扫描二维码，跳转到指定的Url后，向Url中追加Code临时授权码
                OapiSnsGetuserinfoBycodeResponse response = clientinfo.Execute(req, str_appKey, str_appSecret);
                if (response.IsError)
                {
                    return Ok(new { status = 0, message = "扫码登录失败" });
                }

                string unionid = response.UserInfo.Unionid;
                IDingTalkClient client2 = new DefaultDingTalkClient("https://oapi.dingtalk.com/topapi/user/getbyunionid"); //userid地址
                OapiUserGetbyunionidRequest byunionidRequest = new OapiUserGetbyunionidRequest() { Unionid = unionid };
                OapiUserGetbyunionidResponse byunionidResponse = client2.Execute(byunionidRequest, access_token);
                if (byunionidResponse.IsError)
                {
                    return Ok(new { status = 0, message = "扫码登录失败" });
                }

                // 根据userId获取用户信息
                string userid = byunionidResponse.Result.Userid;
                IDingTalkClient client3 = new DefaultDingTalkClient("https://oapi.dingtalk.com/topapi/v2/user/get");
                OapiV2UserGetRequest v2GetRequest = new OapiV2UserGetRequest()
                {
                    Userid = userid,
                    Language = "zh_CN"
                };
                v2GetRequest.SetHttpMethod("POST");
                OapiV2UserGetResponse v2GetResponse = client3.Execute(v2GetRequest, access_token);
                if (v2GetResponse.IsError)
                {
                    return Ok(new { status = 0, message = "扫码登录失败" });
                }

                var DDbind = v2GetResponse.Result;

                DingDingbinds dingDingBind = new DingDingbinds
                {
                    type = type,
                    deptIdList = DDbind.DeptIdList,
                    title = DDbind.Title,
                    name = DDbind.Name,
                    unionid = DDbind.Unionid,
                    userid = DDbind.Userid,
                };

                Teacher teacher = null;
                string sql = $"select distinct value(c) from c join A1 in c.ddbinds where A1.userid='{dingDingBind.userid}' AND A1.unionid ='{dingDingBind.unionid}'";
                await foreach (var item in _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "Teacher").GetItemQueryIterator<Teacher>(queryText: sql, requestOptions: new QueryRequestOptions() { PartitionKey = new PartitionKey($"Base") }))
                {
                    teacher = item;
                    break;
                }
                if (teacher == null)
                {
                    return Ok(new { status = 1, dingDingBind = dingDingBind });
                }
                else
                {
                    var clientID = _configuration.GetValue<string>("HaBookAuth:CoreService:clientID");
                    var location = _option.Location;
                    TmdidImplicit implicit_token = await _aoreAPIHttpService.Implicit(
                        new Dictionary<string, string>()
                        {
                        { "grant_type", "implicit" },
                        { "client_id",clientID },
                        { "account",teacher.id },
                        { "nonce",Guid.NewGuid().ToString()}
                        }, location, _configuration);

                    Dictionary<string, object> dic = new Dictionary<string, object> { { "PartitionKey", "authority-bi" } };//设置只访问BI的权限
                    List<Authority> authorityBIList = await _azureStorage.FindListByDict<Authority>(dic);  //获取权限列表

                    if (implicit_token!=null)
                    {
                        var ddbind = teacher.ddbinds.Find(x => x.userid.Equals($"{dingDingBind.userid}") && x.unionid.Equals($"{dingDingBind.unionid}"));
                        if (ddbind != null)
                        {
                            List<string> roles = new List<string>();//角色列表
                            List<string> permissions = new List<string>();//权限列表
                            List<string> depts = new List<string>();    //部门id
                            School school_base = new School();
                            string school_code = null;
                            if (teacher.defaultSchool != null)
                            {
                                var schoolRoles = await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemStreamAsync(teacher.id, new PartitionKey($"Teacher-{teacher.defaultSchool}"));
                                if (schoolRoles.Status == 200) 
                                {
                                    using var json = await JsonDocument.ParseAsync(schoolRoles.ContentStream);                                   
                                    if (json.RootElement.TryGetProperty("roles", out JsonElement _roles) && _roles.ValueKind != JsonValueKind.Null) 
                                    {
                                        foreach (var obj in _roles.EnumerateArray()) 
                                        {
                                            if (obj.GetString().Equals("assist"))
                                            {
                                                roles.Add(obj.GetString());
                                            }
                                        }
                                    }
                                    if (json.RootElement.TryGetProperty("permissions", out JsonElement _permissions) && _permissions.ValueKind != JsonValueKind.Null)
                                    {
                                        foreach (var obj in _permissions.EnumerateArray())
                                        {
                                            foreach (var item in authorityBIList) 
                                            {
                                                if (item.RowKey.Equals(obj.GetString()))
                                                {
                                                    permissions.Add(obj.GetString());
                                                }
                                            }
                                        }
                                    }
                                }

                                school_base = await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemAsync<School>($"{teacher.defaultSchool}", new PartitionKey("Base"));
                                //foreach (var period in school_base.period)
                                //{
                                //    try
                                //    {
                                //        await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemAsync<ItemCond>($"{period.id}", new PartitionKey($"ItemCond-{teacher.defaultSchool}"));
                                //    }
                                //    catch (CosmosException)
                                //    {
                                //        ItemCond itemCond = new ItemCond
                                //        {
                                //            id = period.id,
                                //            pk = "ItemCond",
                                //            code = $"ItemCond-{teacher.defaultSchool}",
                                //            ttl = -1,
                                //        };
                                //        await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").CreateItemAsync<ItemCond>(itemCond, new PartitionKey($"ItemCond-{teacher.defaultSchool}"));
                                //    }
                                //}
                                school_code = teacher.defaultSchool;
                            }

                            foreach (var temp in ddbind.deptIdList) 
                            {
                                depts.Add(temp.ToString());
                            }

                            var auth_token = JwtAuthExtension.CreateAuthToken(_option.HostName, teacher.id,teacher.name?.ToString(),teacher.picture?.ToString(),_option.JwtSecretKey, scope: Constant.ScopeTeacher, schoolID: school_code?.ToString(), standard: school_base.standard, roles:roles.ToArray(),permissions:permissions.ToArray(),ddDepts: depts.ToArray(),ddsub:ddbind.userid);

                            return Ok(new { status = 200, auth_token = auth_token, teacher = teacher, id_token = implicit_token.id_token, access_token = implicit_token.access_token, expires_in = implicit_token.expires_in, token_type = implicit_token.token_type });
                        }
                    }
                    return Ok(new { status = 1, dingdinginfo = dingDingBind });
                }
            }
            catch (Exception e)
            {
                return Ok(new { status = 1, message = "code失效" });
            }
        }

        /// <summary>
        /// 钉钉绑定醍摩豆信息
        /// </summary>
        /// <param name="ddbindparam"></param>
        /// <returns></returns>
        [ProducesDefaultResponseType]
        [HttpPost("bind")]
        [AllowAnonymous]
        public async Task<IActionResult> Bind(JsonElement jsonElement)
        {
            try
            {
                jsonElement.TryGetProperty("mobile", out JsonElement mobile);
                jsonElement.TryGetProperty("idToken", out JsonElement idToken);
                if (!jsonElement.TryGetProperty("param", out JsonElement param)) return BadRequest();

                HttpClient httpClient = _http.CreateClient();
                Teacher teacher = new Teacher();
                DingDingbinds ddbinds = param.ToObject<DingDingbinds>();  //将json数据转换为实体类
                TmdidImplicit implicit_token = new TmdidImplicit();

                Dictionary<string, object> dic = new Dictionary<string, object> { { "PartitionKey", "authority-bi" } };//设置只访问BI的权限
                List<Authority> authorityBIList = await _azureStorage.FindListByDict<Authority>(dic);  //获取权限列表
                List<string> roles = new List<string>();//角色列表
                List<string> permissions = new List<string>();//权限列表
                List<string> depts = new List<string>();    //部门id
                School school_base = new School();
                string school_code = null;
                var auth_token = "";

                string blobOrTable = DateTimeOffset.UtcNow.ToUnixTimeMilliseconds().ToString();
                OperateLog operateLog = new OperateLog();//操作记录
                operateLog.PartitionKey = "OperateLog-BI";
                operateLog.RowKey = blobOrTable;
                operateLog.recordID = blobOrTable;
                operateLog.platformSource = "BI";
                operateLog.tmdId = $"{teacher.id}";
                operateLog.tmdName = $"{teacher.name}";
                operateLog.visitApi = "common/login/bind";
                operateLog.operateTime = DateTime.Now;

                StringBuilder strBuilder = new StringBuilder();

                if (!string.IsNullOrEmpty($"{mobile}")) 
                {
                    List<JsonElement> mbs = new List<JsonElement>() { mobile };
                    string url = _configuration.GetValue<string>("HaBookAuth:CoreId:userinfo");

                    HttpResponseMessage responseMessage = await httpClient.PostAsJsonAsync(url, mbs);
                    if (responseMessage.StatusCode == HttpStatusCode.OK)
                    {
                        string responseBody = await responseMessage.Content.ReadAsStringAsync();
                        List<JsonElement> json_id = responseBody.ToObject<List<JsonElement>>();
                        string temp_id = null;
                        if (json_id.IsNotEmpty()) 
                        {
                            temp_id = json_id[0].GetProperty("id").ToString();
                        }

                        var client = _azureCosmos.GetCosmosClient();
                        teacher = await client.GetContainer(Constant.TEAMModelOS, "Teacher").ReadItemAsync<Teacher>(temp_id, new PartitionKey("Base"));

                        string sql = $"SELECT distinct value(c) FROM c join A1 in c.ddbinds where A1.userid='{ddbinds.userid}' and A1.unionid='{ddbinds.unionid}'";
                        await foreach (var item in _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "Teacher").GetItemQueryIterator<Teacher>(queryText: sql,
                            requestOptions: new QueryRequestOptions() { PartitionKey = new PartitionKey($"Base") }))
                        {
                            teacher = item;
                            break;
                        }
                        if (teacher != null)
                        {
                            if (teacher.id.Equals(temp_id))
                            {
                                var clientID = _configuration.GetValue<string>("HaBookAuth:CoreService:clientID");
                                var location = _option.Location;
                                implicit_token  = await _aoreAPIHttpService.Implicit(
                                    new Dictionary<string, string>()
                                    {
                                        { "grant_type", "implicit" },
                                        { "client_id",clientID },
                                        { "account",teacher.id },
                                        { "nonce",Guid.NewGuid().ToString()}
                                    }, location, _configuration);

                                if (implicit_token!=null)
                                {
                                    var ddbind = teacher.ddbinds.Find(x => x.userid.Equals($"{ddbinds.userid}") && x.unionid.Equals($"{ddbinds.unionid}"));
                                    if (ddbind == null)
                                    {
                                        teacher.ddbinds = new List<Teacher.DingDingBind> { new Teacher.DingDingBind { type = $"{type}", deptIdList = ddbinds.deptIdList, title = ddbinds.title, name = ddbinds.name, unionid = ddbinds.unionid, userid = ddbinds.userid } };
                                        await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "Teacher").ReplaceItemAsync<Teacher>(teacher, teacher.id, new PartitionKey(teacher.code));

                                        if (teacher.defaultSchool != null)
                                        {
                                            var schoolRoles = await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemStreamAsync(teacher.id, new PartitionKey($"Teacher-{teacher.defaultSchool}"));
                                            if (schoolRoles.Status == 200)
                                            {
                                                using var json = await JsonDocument.ParseAsync(schoolRoles.ContentStream);
                                                if (json.RootElement.TryGetProperty("roles", out JsonElement _roles) && _roles.ValueKind != JsonValueKind.Null)
                                                {
                                                    foreach (var obj in _roles.EnumerateArray())
                                                    {
                                                        //初始定义顾问的assistant 更改为assist
                                                        if (obj.GetString().Equals($"assist"))
                                                        {
                                                            roles.Add(obj.GetString());
                                                        }
                                                    }
                                                }
                                                if (json.RootElement.TryGetProperty("permissions", out JsonElement _permissions) && _permissions.ValueKind != JsonValueKind.Null)
                                                {
                                                    foreach (var obj in _permissions.EnumerateArray())
                                                    {
                                                        //限制只显示BI权限
                                                        foreach (var aut in authorityBIList)
                                                        {
                                                            if (aut.RowKey.Equals(obj.GetString()))
                                                            {
                                                                permissions.Add(obj.GetString());
                                                            }
                                                        }
                                                    }
                                                }
                                            }

                                            school_base = await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemAsync<School>($"{teacher.defaultSchool}", new PartitionKey("Base"));
                                            //foreach (var period in school_base.period)
                                            //{
                                            //    try
                                            //    {
                                            //        await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemAsync<ItemCond>($"{period.id}", new PartitionKey($"ItemCond-{teacher.defaultSchool}"));
                                            //    }
                                            //    catch (CosmosException)
                                            //    {
                                            //        ItemCond itemCond = new ItemCond
                                            //        {
                                            //            id = period.id,
                                            //            pk = "ItemCond",
                                            //            code = $"ItemCond-{teacher.defaultSchool}",
                                            //            ttl = -1,
                                            //        };
                                            //        await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").CreateItemAsync<ItemCond>(itemCond, new PartitionKey($"ItemCond-{teacher.defaultSchool}"));
                                            //    }
                                            //}
                                            school_code = teacher.defaultSchool;
                                        }

                                        foreach (var tempdept in ddbinds.deptIdList)
                                        {
                                            depts.Add(tempdept.ToString());
                                        }
                                        strBuilder.Append($"醍摩豆账户{teacher.id}【{teacher.name}】和钉钉账户{ddbinds.userid}【{ddbinds.name}】进行绑定，绑定成功");
                                    }
                                }
                                else 
                                {
                                    if (teacher.ddbinds.IsNotEmpty()) 
                                    {
                                        teacher.ddbinds.RemoveAll(x => x.userid.Equals(ddbinds.userid) && x.unionid.Equals(ddbinds.unionid));
                                        await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "Teacher").ReplaceItemAsync<Teacher>(teacher, teacher.id, new PartitionKey(teacher.code));
                                    }

                                    strBuilder.Append($"醍摩豆账户{teacher.id}【{teacher.name}】和钉钉账户{ddbinds.userid}【{ddbinds.name}】进行绑定，绑定失败");
                                    operateLog.operateDescribe = strBuilder.ToString();
                                    await _azureStorage.Save<OperateLog>(operateLog);
                                    return Ok(new { status = 1, message = "绑定失败" });                                
                                }
                            }
                            else
                            {
                                operateLog.operateDescribe = $"醍摩豆账户{teacher.id}【{teacher.name}】和钉钉账户{ddbinds.userid}【{ddbinds.name}】进行绑定，账号已被别的醍摩豆id绑定";
                                await _azureStorage.Save<OperateLog>(operateLog);

                                return Ok(new
                                {
                                    location = _option.Location,
                                    //账号已被别的醍摩豆id绑定
                                    status = 2,
                                    tmdid = teacher.id,
                                    name = teacher.name,
                                    ddid = ddbinds.userid,
                                    ddname = ddbinds.name
                                });
                            }
                        }
                        else 
                        {
                            teacher = new Teacher
                            {
                                id = temp_id,
                                pk = "Base",
                                code = "Base",
                                name = temp_id,
                                //创建账号并第一次登录IES5则默认赠送1G
                                size = 1,
                                defaultSchool = null,
                                schools = new List<Teacher.TeacherSchool>(),
                                ddbinds = new List<Teacher.DingDingBind> { new Teacher.DingDingBind { type = $"{type}", deptIdList = ddbinds.deptIdList, title = ddbinds.title, name = ddbinds.name, unionid = ddbinds.unionid, userid = ddbinds.userid } },
                            };
                            var container = _azureStorage.GetBlobContainerClient(temp_id);
                            await container.CreateIfNotExistsAsync(PublicAccessType.None); //尝试创建Teacher私有容器，如存在则不做任何事，保障容器一定存在
                            teacher = await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "Teacher").CreateItemAsync<Teacher>(teacher, new PartitionKey("Base"));

                            foreach (var tempdept in ddbinds.deptIdList)
                            {
                                depts.Add(tempdept.ToString());
                            }

                            auth_token = JwtAuthExtension.CreateAuthToken(_option.HostName, teacher.id, teacher.name?.ToString(), teacher.picture?.ToString(), _option.JwtSecretKey, scope: Constant.ScopeTeacher, schoolID: school_code?.ToString(), standard: school_base.standard, roles: roles.ToArray(), permissions: permissions.ToArray(), ddDepts: depts.ToArray(), ddsub: ddbinds.userid);

                            strBuilder.Append($"醍摩豆账户{teacher.id}【{teacher.name}】和钉钉账户{ddbinds.userid}【{ddbinds.name}】进行绑定，新建的账户绑定成功");
                     
                        }
                    }
                    else
                    {
                        return Ok(new { status = 3, message = "通过手机号查询用户信息异常" });
                    }
                }

                if (!string.IsNullOrEmpty($"{idToken}"))
                {
                    var jwt = new JwtSecurityToken($"{idToken}");
                    //if (!jwt.Payload.Iss.Equals("account.teammodel", StringComparison.OrdinalIgnoreCase)) return BadRequest();
                    var id = jwt.Payload.Sub;
                    jwt.Payload.TryGetValue("name", out object name);
                    jwt.Payload.TryGetValue("picture", out object picture);
                    //检查是否有绑定信息
                    var client = _azureCosmos.GetCosmosClient();
                    teacher = await client.GetContainer(Constant.TEAMModelOS, "Teacher").ReadItemAsync<Teacher>(id, new PartitionKey("Base"));
                    string sql = $"select distinct value(c) from c join A1 in c.ddbinds where A1.userid='{ddbinds.userid}' AND A1.unionid ='{ddbinds.unionid}'";
                    await foreach (var item in _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "Teacher").GetItemQueryIterator<Teacher>(queryText: sql,
                        requestOptions: new QueryRequestOptions() { PartitionKey = new PartitionKey($"Base") }))
                    {
                        teacher = item;
                        break;
                    }

                    if (teacher != null)
                    {
                        if (teacher.id.Equals(id))
                        {
                            var ddbind = teacher.ddbinds.Find(x => x.userid.Equals($"{ddbinds.userid}") && x.unionid.Equals($"{ddbinds.unionid}"));
                            if (ddbind == null)
                            {
                                teacher.ddbinds = new List<Teacher.DingDingBind> { new Teacher.DingDingBind { type = $"{type}", deptIdList = ddbinds.deptIdList, title = ddbinds.title, name = ddbinds.name, unionid = ddbinds.unionid, userid = ddbinds.userid } };
                                await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "Teacher").ReplaceItemAsync<Teacher>(teacher, teacher.id, new PartitionKey(teacher.code));
                                
                                //添加
                                if (teacher.defaultSchool != null)
                                {
                                    var schoolRoles = await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemStreamAsync(teacher.id, new PartitionKey($"Teacher-{teacher.defaultSchool}"));
                                    if (schoolRoles.Status == 200)
                                    {
                                        using var json = await JsonDocument.ParseAsync(schoolRoles.ContentStream);
                                        if (json.RootElement.TryGetProperty("roles", out JsonElement _roles) && _roles.ValueKind != JsonValueKind.Null)
                                        {
                                            foreach (var obj in _roles.EnumerateArray())
                                            {
                                                //初始定义顾问的assistant 更改为assist
                                                if (obj.GetString().Equals($"assist"))
                                                {
                                                    roles.Add(obj.GetString());
                                                }
                                            }
                                        }
                                        if (json.RootElement.TryGetProperty("permissions", out JsonElement _permissions) && _permissions.ValueKind != JsonValueKind.Null)
                                        {
                                            foreach (var obj in _permissions.EnumerateArray())
                                            {
                                                //限制只显示BI权限
                                                foreach (var aut in authorityBIList)
                                                {
                                                    if (aut.RowKey.Equals(obj.GetString()))
                                                    {
                                                        permissions.Add(obj.GetString());
                                                    }
                                                }
                                            }
                                        }
                                    }

                                    school_base = await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemAsync<School>($"{teacher.defaultSchool}", new PartitionKey("Base"));
                                    //foreach (var period in school_base.period)
                                    //{
                                    //    try
                                    //    {
                                    //        await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemAsync<ItemCond>($"{period.id}", new PartitionKey($"ItemCond-{teacher.defaultSchool}"));
                                    //    }
                                    //    catch (CosmosException)
                                    //    {
                                    //        ItemCond itemCond = new ItemCond
                                    //        {
                                    //            id = period.id,
                                    //            pk = "ItemCond",
                                    //            code = $"ItemCond-{teacher.defaultSchool}",
                                    //            ttl = -1,
                                    //        };
                                    //        await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").CreateItemAsync<ItemCond>(itemCond, new PartitionKey($"ItemCond-{teacher.defaultSchool}"));
                                    //    }
                                    //}
                                    school_code = teacher.defaultSchool;
                                }

                                foreach (var tempdept in ddbinds.deptIdList)
                                {
                                    depts.Add(tempdept.ToString());
                                }
                            }

                            auth_token = JwtAuthExtension.CreateAuthToken(_option.HostName, teacher.id, teacher.name?.ToString(), teacher.picture?.ToString(), _option.JwtSecretKey, scope: Constant.ScopeTeacher, schoolID: school_code?.ToString(), standard: school_base.standard, roles: roles.ToArray(), permissions: permissions.ToArray(), ddDepts: depts.ToArray(), ddsub: ddbinds.userid);

                            operateLog.operateDescribe = $"新建的账户的醍摩豆账户{teacher.id}【{teacher.name}】和钉钉账户{ddbinds.userid}【{ddbinds.name}】进行绑定，绑定成功";
                            await _azureStorage.Save<OperateLog>(operateLog);

                            return Ok(new
                            {
                                status = 200,
                                auth_token = auth_token,
                                idToken = idToken,
                                teacher = teacher,
                                location = _option.Location,
                            });
                        }
                        else
                        {
                            operateLog.operateDescribe = $"醍摩豆账户{teacher.id}【{teacher.name}】和钉钉账户{ddbinds.userid}【{ddbinds.name}】进行绑定，账号已被别的醍摩豆id绑定";
                            await _azureStorage.Save<OperateLog>(operateLog);

                            return Ok(new
                            {
                                location = _option.Location,
                                //账号已被别的醍摩豆id绑定
                                status = 2,
                                tmdid = teacher.id,
                                name = teacher.name,
                                userid = ddbinds.userid,
                                ddname = ddbinds.name
                            });
                        }
                    }
                    else
                    {
                        teacher = new Teacher
                        {
                            id = id,
                            pk = "Base",
                            code = "Base",
                            name = name?.ToString(),
                            picture = picture?.ToString(),
                            //创建账号并第一次登录IES5则默认赠送1G
                            size = 1,
                            defaultSchool = null,
                            schools = new List<Teacher.TeacherSchool>(),
                            ddbinds = new List<Teacher.DingDingBind> { new Teacher.DingDingBind { type = $"{type}", deptIdList = ddbinds.deptIdList, title = ddbinds.title, name = ddbinds.name, unionid = ddbinds.unionid, userid = ddbinds.userid } }
                        };

                        var container = _azureStorage.GetBlobContainerClient(id);
                        await container.CreateIfNotExistsAsync(PublicAccessType.None); //尝试创建Teacher私有容器，如存在则不做任何事，保障容器一定存在
                        teacher = await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "Teacher").CreateItemAsync<Teacher>(teacher, new PartitionKey("Base"));

                        foreach (var tempdept in ddbinds.deptIdList)
                        {
                            depts.Add(tempdept.ToString());
                        }

                        auth_token = JwtAuthExtension.CreateAuthToken(_option.HostName, teacher.id, teacher.name?.ToString(), teacher.picture?.ToString(), _option.JwtSecretKey, scope: Constant.ScopeTeacher, schoolID: school_code?.ToString(), standard: school_base.standard, roles: roles.ToArray(), permissions: permissions.ToArray(), ddDepts: depts.ToArray(), ddsub: ddbinds.userid);

                        strBuilder.Append($"醍摩豆账户{teacher.id}【{teacher.name}】和钉钉账户{ddbinds.userid}【{ddbinds.name}】进行绑定，新建的账户绑定成功");                        
                        await _azureStorage.Save<OperateLog>(operateLog);
                        return Ok(new
                        {
                            status = 200,
                            auth_token = auth_token,
                            idToken = id,
                            //teacher = teacher,
                            location = _option.Location,
                        });
                    }
                }

                auth_token = JwtAuthExtension.CreateAuthToken(_option.HostName, teacher.id, teacher.name?.ToString(), teacher.picture?.ToString(), _option.JwtSecretKey, scope: Constant.ScopeTeacher, schoolID: school_code.ToString(), standard: school_base.standard, roles: roles.ToArray(), permissions: permissions.ToArray(), ddDepts: depts.ToArray(), ddsub: ddbinds.userid);
                string temp_idToken = string.IsNullOrEmpty($"{idToken}") ? implicit_token.id_token : idToken.ToString();
                operateLog.operateDescribe = strBuilder.ToString();
                return Ok(new
                {
                    status = 200,
                    auth_token = auth_token,
                    idToken = temp_idToken,
                    teacher = teacher,
                    location = _option.Location,
                });
            }
            catch (Exception ex)
            {
                await _dingDing.SendBotMsg($"BI,{_option.Location} common/login/bind   \n {ex.Message}{ex.StackTrace} ", GroupNames.醍摩豆服務運維群組);
                return Ok(new
                {
                    status = 1,
                    location = _option.Location                    
                });
            }
        }

        /// <summary>
        /// 依据id_Ttoken获取教师信息
        /// </summary>
        /// <param name="jsonElement"></param>
        /// <returns></returns>
        [ProducesDefaultResponseType]
        [HttpPost("get-teacherinfo")]
        public async Task<IActionResult> GetTeacherInfo(JsonElement jsonElement)
        {
            try
            {
                if (!jsonElement.TryGetProperty("id_token", out JsonElement id_token)) return BadRequest();
                var jwt = new JwtSecurityToken(id_token.GetString());
                //TODO 此驗證IdToken先簡單檢查，後面需向Core ID新API，驗證Token
                //if (!jwt.Payload.Iss.Equals("account.teammodel", StringComparison.OrdinalIgnoreCase)) return BadRequest();
                var id = jwt.Payload.Sub;
                jwt.Payload.TryGetValue("name", out object name);
                jwt.Payload.TryGetValue("picture", out object picture);

                Teacher teacher = null;

                //检查是否有绑定信息
                var client = _azureCosmos.GetCosmosClient();
                teacher = await client.GetContainer(Constant.TEAMModelOS, "Teacher").ReadItemAsync<Teacher>($"{id}", new PartitionKey("Base"));
                var auth_token = "";

                var clientID = _configuration.GetValue<string>("HaBookAuth:CoreService:clientID");
                var location = _option.Location;
                TmdidImplicit implicit_token = await _aoreAPIHttpService.Implicit(
                    new Dictionary<string, string>()
                    {
                                        { "grant_type", "implicit" },
                                        { "client_id",clientID },
                                        { "account",teacher.id },
                                        { "nonce",Guid.NewGuid().ToString()}
                    }, location, _configuration);

                Dictionary<string, object> dic = new Dictionary<string, object> { { "PartitionKey", "authority-bi" } };//设置只访问BI的权限
                List<Authority> authorityBIList = await _azureStorage.FindListByDict<Authority>(dic);  //获取权限列表

                List<string> roles = new List<string>();//角色列表
                List<string> permissions = new List<string>();//权限列表
                List<string> depts = new List<string>();    //部门id
                School school_base = new School();
                string school_code = null;

                if (implicit_token!=null)
                {

                    if (teacher.defaultSchool != null)
                    {
                        var schoolRoles = await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemStreamAsync(teacher.id, new PartitionKey($"Teacher-{teacher.defaultSchool}"));
                        if (schoolRoles.Status == 200)
                        {
                            using var json = await JsonDocument.ParseAsync(schoolRoles.ContentStream);
                            if (json.RootElement.TryGetProperty("roles", out JsonElement _roles) && _roles.ValueKind != JsonValueKind.Null)
                            {
                                foreach (var obj in _roles.EnumerateArray())
                                {
                                    //初始定义顾问的assistant 更改为assist
                                    if (obj.GetString().Equals($"assist"))
                                    {
                                        roles.Add(obj.GetString());
                                    }
                                }
                            }
                            if (json.RootElement.TryGetProperty("permissions", out JsonElement _permissions) && _permissions.ValueKind != JsonValueKind.Null)
                            {
                                foreach (var obj in _permissions.EnumerateArray())
                                {
                                    //限制只显示BI权限
                                    foreach (var aut in authorityBIList)
                                    {
                                        if (aut.RowKey.Equals(obj.GetString()))
                                        {
                                            permissions.Add(obj.GetString());
                                        }
                                    }
                                }
                            }
                        }

                        school_base = await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemAsync<School>($"{teacher.defaultSchool}", new PartitionKey("Base"));
                        //foreach (var period in school_base.period)
                        //{
                        //    try
                        //    {
                        //        await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").ReadItemAsync<ItemCond>($"{period.id}", new PartitionKey($"ItemCond-{teacher.defaultSchool}"));
                        //    }
                        //    catch (CosmosException)
                        //    {
                        //        ItemCond itemCond = new ItemCond
                        //        {
                        //            id = period.id,
                        //            pk = "ItemCond",
                        //            code = $"ItemCond-{teacher.defaultSchool}",
                        //            ttl = -1,
                        //        };
                        //        await _azureCosmos.GetCosmosClient().GetContainer(Constant.TEAMModelOS, "School").CreateItemAsync<ItemCond>(itemCond, new PartitionKey($"ItemCond-{teacher.defaultSchool}"));
                        //    }
                        //}
                        school_code = teacher.defaultSchool;
                    }
                    List<Teacher.DingDingBind> ddbinds = teacher.ddbinds;
                    Teacher.DingDingBind ddbind = new Teacher.DingDingBind();
                    if (teacher.ddbinds.Count > 0)
                    {
                        if (ddbinds != null)
                        {
                            foreach (var temp in ddbinds)
                            {
                                ddbind.userid = temp.userid;
                                ddbind.deptIdList = temp.deptIdList;
                            }
                        }

                        foreach (var temp in ddbind.deptIdList)
                        {
                            depts.Add(temp.ToString());
                        }
                    }
                    else return Ok(new { status = 1, message = "该账户未绑定钉钉信息！请扫码绑定信息！" });

                    auth_token = JwtAuthExtension.CreateAuthToken(_option.HostName, teacher.id, teacher.name?.ToString(), teacher.picture?.ToString(), _option.JwtSecretKey, scope: Constant.ScopeTeacher, schoolID: school_code.ToString(), standard: school_base.standard, roles: roles.ToArray(), permissions: permissions.ToArray(), ddDepts: depts.ToArray(), ddsub: ddbind.userid);
                }

                var (osblob_uri, osblob_sas) = roles.Contains("area") ? _azureStorage.GetBlobContainerSAS("teammodelos", BlobContainerSasPermissions.Write | BlobContainerSasPermissions.Read | BlobContainerSasPermissions.List | BlobContainerSasPermissions.Delete) : _azureStorage.GetBlobContainerSAS("teammodelos", BlobContainerSasPermissions.Read | BlobContainerSasPermissions.List);

                return Ok(new { status = 200, auth_token = auth_token, teacher = teacher, id_token = implicit_token.id_token, access_token = implicit_token.access_token, expires_in = implicit_token.expires_in, token_type = implicit_token.token_type, osblob_uri, osblob_sas });

            }
            catch (Exception ex)
            {
                await _dingDing.SendBotMsg($"BI，{_option.Location}, /common/login/get-teacherinfo \n{ex.Message}{ex.StackTrace}", GroupNames.醍摩豆服務運維群組);
                return BadRequest();
            }
        }

        /// <summary>
        /// 钉钉扫码登录获取扫码信息
        /// </summary>
        /// <param name="jsonElement"></param>
        /// <returns></returns>
        [ProducesDefaultResponseType]
        [HttpPost("get-ddscancode")]
        public async Task<IActionResult> GetDingDingScanCode(JsonElement jsonElement)
        {
            try
            {
                string appKey = _configuration["DingDingAuth:appKey"];
                string appSecret = _configuration["DingDingAuth:appSecret"];
                if (string.IsNullOrWhiteSpace(appKey) || string.IsNullOrWhiteSpace(appSecret))
                {
                    return Ok(new { status = 0, message = "请检查配置钉钉的信息" });
                }
                //自己传的code
                if (!jsonElement.TryGetProperty("code", out JsonElement LoginTempCode)) return BadRequest();

                //获取access_token
                IDingTalkClient tokenClient = new DefaultDingTalkClient("https://oapi.dingtalk.com/gettoken");
                OapiGettokenRequest tokenRequest = new OapiGettokenRequest() { Appkey = appKey, Appsecret = appSecret };
                tokenRequest.SetHttpMethod("Get");
                OapiGettokenResponse tokenRespone = tokenClient.Execute(tokenRequest);
                if (tokenRespone.IsError)
                {
                    return BadRequest();
                }

                string access_token = tokenRespone.AccessToken;
                //获取临时授权码 获取授权用户的个人信息
                DefaultDingTalkClient clientinfo = new DefaultDingTalkClient("https://oapi.dingtalk.com/sns/getuserinfo_bycode");
                OapiSnsGetuserinfoBycodeRequest req = new OapiSnsGetuserinfoBycodeRequest() { TmpAuthCode = $"{LoginTempCode}" };  //通过扫描二维码，跳转到指定的Url后，向Url中追加Code临时授权码
                OapiSnsGetuserinfoBycodeResponse response = clientinfo.Execute(req, appKey, appSecret);
                if (response.IsError)
                {
                    return Ok(new { state = 0, message = "获取个人信息失败！" });
                }

                string unionid = response.UserInfo.Unionid;
                IDingTalkClient client2 = new DefaultDingTalkClient("https://oapi.dingtalk.com/topapi/user/getbyunionid"); //userid地址
                OapiUserGetbyunionidRequest byunionidRequest = new OapiUserGetbyunionidRequest() { Unionid = unionid };
                OapiUserGetbyunionidResponse byunionidResponse = client2.Execute(byunionidRequest, access_token);
                if (byunionidResponse.IsError)
                {
                    return Ok(new { state = 0, message = "扫码登录失败" });
                }

                // 根据userId获取用户信息
                string userid = byunionidResponse.Result.Userid;
                IDingTalkClient client3 = new DefaultDingTalkClient("https://oapi.dingtalk.com/topapi/v2/user/get");
                OapiV2UserGetRequest v2GetRequest = new OapiV2UserGetRequest()
                {
                    Userid = userid,
                    Language = "zh_CN"
                };

                v2GetRequest.SetHttpMethod("POST");
                OapiV2UserGetResponse v2GetResponse = client3.Execute(v2GetRequest, access_token);
                if (v2GetResponse.IsError)
                {
                    return Ok(new { state = 0, message = "扫码登录失败" });
                }

                List<DingDingUserInfo> ddusers = await _azureStorage.FindListByDict<DingDingUserInfo>(new Dictionary<string, object>() { { "RowKey", $"{v2GetResponse.Result.Userid}" }, { "unionId", $"{v2GetResponse.Result.Unionid}" } });

                if (ddusers.Count > 0)
                {
                    DingDingUserInfo ddUserInfo = new DingDingUserInfo();
                    foreach (var item in ddusers)
                    {
                        ddUserInfo = item;
                    }

                    return Ok(new { state = 200, ddUserId = ddUserInfo });
                }
                else
                {
                    string divide = appKey.Equals("dingrucgsnt8p13rfbgd") ? "continent" : "international";
                    DingDingUserInfo dingDingUserInfo = new DingDingUserInfo()
                    {
                        PartitionKey = divide,
                        RowKey = v2GetResponse.Result.Userid,
                        unionId = v2GetResponse.Result.Unionid,
                        name = v2GetResponse.Result.Name,
                        title = v2GetResponse.Result.Title,
                        mobile = v2GetResponse.Result.Mobile,
                        jobNumber = v2GetResponse.Result.JobNumber,
                        pid = 0,
                        deptId = 0,
                        deptName = null,
                        depts = string.Join(",", v2GetResponse.Result.DeptIdList.ToArray()),
                        avatar = v2GetResponse.Result.Avatar,
                        isAdmin = v2GetResponse.Result.Admin,
                        tmdId = "",
                        tmdName = "",
                        tmdMobile = "",
                        mail = "",
                        picture = "",
                        roles = "",
                        permissions = "",
                    };
                    await _azureStorage.Save<DingDingUserInfo>(dingDingUserInfo);

                    return Ok(new { state = 400, ddUserId = dingDingUserInfo });
                }
            }
            catch (Exception ex)
            {
                await _dingDing.SendBotMsg($"BI， {_option.Location} /common/login/ddScan   \n {ex.Message}{ex.StackTrace}", GroupNames.醍摩豆服務運維群組);
                return BadRequest();
            }
        }

        /// <summary>
        /// 钉钉绑定醍摩豆
        /// </summary>
        /// <returns></returns>
        [HttpPost("binguser")]
        public async Task<IActionResult> BindUser(JsonElement jsonElement) 
        {
            try
            {
                if (!jsonElement.TryGetProperty("mobile", out JsonElement moile)) return BadRequest();
                if (!jsonElement.TryGetProperty("partitionKey", out JsonElement partitionKey)) return BadRequest();
                if (!jsonElement.TryGetProperty("rowKey", out JsonElement userId)) return BadRequest();

                //操作记录
                OperateLog operateLog = new OperateLog();
                string blobOrTable = DateTimeOffset.UtcNow.ToUnixTimeMilliseconds().ToString();
                operateLog.PartitionKey = "OperateLog-BI";
                operateLog.RowKey = blobOrTable;
                operateLog.recordID = blobOrTable;
                operateLog.platformSource = "BI";
                operateLog.visitApi = "/tabledd/set-ddinductionuser";
                operateLog.operateTime = DateTime.Now;

                HttpClient httpClient = _http.CreateClient();
                string url = _configuration.GetValue<string>("HaBookAuth:CoreId:userinfo");
                HttpResponseMessage responseMessage = await httpClient.PostAsJsonAsync(url, moile);

                if (responseMessage.StatusCode == HttpStatusCode.OK)
                {
                    var temp = await responseMessage.Content.ReadAsStringAsync();
                    if (temp.Length > 0)
                    {
                        List<DingDingUserInfo> ddUserInfos = new();
                        List<JsonElement> itemjson = temp.ToObject<List<JsonElement>>();
                        var tempUser = await _azureStorage.FindListByDict<DingDingUserInfo>(new Dictionary<string, object> { { "PartitionKey", $"{partitionKey}" }, { "RowKey", $"{userId}" } });
                        foreach (var item in itemjson)
                        {
                            foreach (var itemUser in tempUser)
                            {
                                var tmdId = item.GetProperty("id").ToString();
                                var tmdName = item.GetProperty("name").ToString();
                                itemUser.tmdId = tmdId;
                                itemUser.tmdName = tmdName;
                                itemUser.tmdMobile = item.GetProperty("mobile").ToString();
                                itemUser.picture = item.GetProperty("picture").ToString();
                                itemUser.mail = item.GetProperty("mail").ToString();

                                operateLog.tmdId = item.GetProperty("id").ToString();
                                operateLog.tmdName = item.GetProperty("name").ToString();
                                operateLog.operateDescribe = $"{tmdName}【{tmdId}】醍摩豆账号和{itemUser.name}【{itemUser.RowKey}】钉钉账户绑定成功";

                                ddUserInfos.Add(itemUser);
                            }
                        }

                        var dingDingUserInfos = await _azureStorage.UpdateAll<DingDingUserInfo>(ddUserInfos);
                        await _azureStorage.Save<OperateLog>(operateLog); //保存操作记录

                        return Ok(new { state = 200, ddUsers = dingDingUserInfos });
                    }
                    else return Ok(new { state = 400, message = "该手机没有注册提莫信息" });
                }
                else return Ok(new { state = responseMessage.StatusCode });

            }
            catch (Exception ex)
            {
                await _dingDing.SendBotMsg($"BI， {_option.Location} /common/login/binguser   \n {ex.Message}{ex.StackTrace}", GroupNames.醍摩豆服務運維群組);
                return BadRequest();
            }
        }

        /// <summary>
        /// 获取钉钉信息详情
        /// </summary>
        /// <param name="jsonElement"></param>
        /// <returns></returns>
        [HttpPost("get-ddinfo")]
        public async Task<IActionResult> GetDingDingInfo(JsonElement jsonElement)
        {
            if (!jsonElement.TryGetProperty("partitionKey", out JsonElement partitionKey)) return BadRequest();
            if (!jsonElement.TryGetProperty("rowKey", out JsonElement userId)) return BadRequest();
            var tempUser = await _azureStorage.FindListByDict<DingDingUserInfo>(new Dictionary<string, object> { { "PartitionKey", $"{partitionKey}" }, { "RowKey", $"{userId}" } });

            List<string> roles = new();//角色列表
            List<DingDingUserInfo> ddUserInfos = new();
            foreach (var itemUser in tempUser)
            {
                //roles = new List<string>(itemUser.roles.Split(new string[] { "," }, StringSplitOptions.RemoveEmptyEntries));

                roles = !itemUser.roles.Equals("") ? new List<string>(itemUser.roles.Split(",")) : new List<string>();
                ddUserInfos.Add(itemUser);
            }
            
            var (osblob_uri, osblob_sas) = roles.Contains("assist") ? _azureStorage.GetBlobContainerSAS("teammodelos", BlobContainerSasPermissions.Write | BlobContainerSasPermissions.Read | BlobContainerSasPermissions.List | BlobContainerSasPermissions.Delete) : _azureStorage.GetBlobContainerSAS("teammodelos", BlobContainerSasPermissions.Read | BlobContainerSasPermissions.List);

            return Ok(new { state = 200, ddUserInfos, osblob_uri, osblob_sas });
        }

        public record DingDingbinds
        {
            public string type { get; set; }

            /// <summary>
            /// 所属部门id列表
            /// </summary>
            public List<long> deptIdList { get; set; }

            /// <summary>
            /// 职位名称
            /// </summary>
            public string title { get; set; }

            /// <summary>
            /// 钉钉用户名
            /// </summary>
            public string name { get; set; }

            /// <summary>
            /// 钉钉unionid
            /// </summary>
            public string unionid { get; set; }

            /// <summary>
            /// 钉钉ID
            /// </summary>
            public string userid { get; set; }
        }

       
    }
}