刘光辉
4 小时以前 06f314545ac3514d7ce28939920866ae8188d31c
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
package jnpf.dmsService;
 
import jnpf.base.UserInfo;
import jnpf.dmsEntity.permission.entity.DmsFileVersionEntity;
import jnpf.dmsEntity.permission.enums.DmsPermissionAction;
import jnpf.dmsEntity.permission.enums.DmsResourceType;
import jnpf.dmsEntity.preview.form.DmsFilePreviewTicketRequest;
import jnpf.dmsEntity.preview.model.DmsFilePreviewTicket;
import jnpf.dmsEntity.preview.vo.DmsFilePreviewTicketVO;
import jnpf.dmsEntity.storage.entity.DmsFileObjectEntity;
import jnpf.dmsMapper.DmsFileObjectMapper;
import jnpf.dmsMapper.DmsFileVersionMapper;
import jnpf.dmsPermission.DmsCurrentIdentity;
import jnpf.dmsPermission.DmsFileControlPolicy;
import jnpf.dmsPermission.DmsPermissionError;
import jnpf.dmsPermission.DmsPermissionException;
import jnpf.dmsPermission.DmsPermissionExecutionContext;
import jnpf.dmsPermission.DmsPermissionGuard;
import jnpf.dmsPermission.DmsPermissionOperation;
import jnpf.dmsService.pdf.DmsPersistentPdfSources;
import jnpf.dmsService.pdf.DmsPdfGenerationTaskService;
import lombok.RequiredArgsConstructor;
import org.springframework.stereotype.Service;
 
import java.util.Date;
import java.util.UUID;
 
@Service
@RequiredArgsConstructor
public class DmsFilePreviewService {
    static final long TICKET_TTL_SECONDS = 5L * 60L;
 
    private final DmsCurrentIdentity currentIdentity;
    private final DmsPermissionGuard permissionGuard;
    private final DmsFileVersionMapper fileVersionMapper;
    private final DmsFileObjectMapper fileObjectMapper;
    private final DmsFilePreviewTicketIssuer ticketIssuer;
    private final DmsFileOperationLogService operationLogService;
    private final DmsWatermarkPreviewResolver watermarkPreviewResolver;
    private final DmsPreviewPreparationClient previewPreparationClient;
    private final DmsPdfGenerationTaskService pdfGenerationTaskService;
 
    public DmsFilePreviewTicketVO createTicket(DmsFilePreviewTicketRequest request) {
        request.normalized();
        UserInfo user = currentIdentity.requireUser();
        String tenantId = currentIdentity.tenantId(user);
        DmsFileVersionEntity resolvedVersion = resolveFileVersion(request, tenantId);
        UUID fileVersionId = resolvedVersion.getId();
        long expiresAtMillis = System.currentTimeMillis() + TICKET_TTL_SECONDS * 1000L;
 
        PreviewSource source = DmsFileControlPolicy.requiresPermissionCheck(
                resolvedVersion.getShifouShoukong())
                ? loadPreviewSourceWithPermission(request, tenantId, fileVersionId, expiresAtMillis)
                : loadPreviewSource(tenantId, fileVersionId);
 
        DmsFilePreviewTicket payload = previewPreparationClient.prepare(
                payload(user, tenantId, source, expiresAtMillis, request));
        String accessTicket = ticketIssuer.issue(payload, TICKET_TTL_SECONDS);
        DmsFilePreviewTicketVO result = new DmsFilePreviewTicketVO();
        result.setFileVersionId(fileVersionId);
        result.setFileName(payload.getFileName());
        result.setMimeType(payload.getMimeType());
        result.setSizeBytes(payload.getSizeBytes());
        result.setAccessTicket(accessTicket);
        result.setExpiresAt(new Date(expiresAtMillis));
        operationLogService.recordView(user, tenantId, source.version.getDocumentId(),
                source.version.getId(), source.version.getFileName(), request.getOperationId());
        return result;
    }
 
    private DmsFileVersionEntity resolveFileVersion(DmsFilePreviewTicketRequest request,
                                                    String tenantId) {
        if (request.getResourceType() == DmsResourceType.DOCUMENT) {
            DmsFileVersionEntity current = fileVersionMapper.selectCurrentEffective(tenantId,
                    request.getResourceId());
            if (current == null) {
                throw DmsPermissionException.of(DmsPermissionError.RESOURCE_NOT_FOUND,
                        "文件没有现行有效版本");
            }
            return current;
        }
        if (request.getResourceType() == DmsResourceType.FILE_VERSION) {
            DmsFileVersionEntity version = fileVersionMapper.selectReadableByTenantAndId(tenantId,
                    request.getResourceId());
            if (version == null) {
                throw DmsPermissionException.of(DmsPermissionError.RESOURCE_NOT_FOUND,
                        "文件版本不存在");
            }
            return version;
        }
        throw DmsPermissionException.of(DmsPermissionError.INVALID_REQUEST,
                "仅支持预览 DOCUMENT 或 FILE_VERSION");
    }
 
    private PreviewSource loadPreviewSourceWithPermission(DmsFilePreviewTicketRequest request,
                                                           String tenantId, UUID fileVersionId,
                                                           long expiresAtMillis) {
        DmsPermissionExecutionContext context = new DmsPermissionExecutionContext();
        context.setResourceType(DmsResourceType.FILE_VERSION);
        context.setResourceId(fileVersionId);
        context.setActionCode(DmsPermissionAction.READ);
        context.setOperationId(request.getOperationId());
        context.setSessionExpiresAt(new Date(expiresAtMillis));
        return permissionGuard.execute(context, new DmsPermissionOperation<PreviewSource>() {
            @Override
            public PreviewSource execute() {
                return loadPreviewSource(tenantId, fileVersionId);
            }
 
            @Override
            public PreviewSource replay() {
                return loadPreviewSource(tenantId, fileVersionId);
            }
        });
    }
 
    private PreviewSource loadPreviewSource(String tenantId, UUID fileVersionId) {
        DmsFileVersionEntity version = fileVersionMapper.selectReadableByTenantAndId(
                tenantId, fileVersionId);
        DmsFileObjectEntity object = fileObjectMapper.selectByTenantAndFileVersionId(tenantId,
                fileVersionId);
        if (version == null || object == null) {
            throw DmsPermissionException.of(DmsPermissionError.RESOURCE_NOT_FOUND,
                    "文件版本或存储对象不存在");
        }
        return new PreviewSource(version, object);
    }
 
    private DmsFilePreviewTicket payload(UserInfo user, String tenantId, PreviewSource source,
                                         long expiresAtMillis, DmsFilePreviewTicketRequest request) {
        DmsFilePreviewTicket payload = new DmsFilePreviewTicket();
        payload.setScope(DmsFilePreviewTicket.SCOPE);
        payload.setTenantId(tenantId);
        payload.setUserId(user.getUserId().trim());
        payload.setFileVersionId(source.version.getId());
        payload.setHistoricalAccess(source.version.getLifecycleStatus() != null
                && !"EFFECTIVE".equals(source.version.getLifecycleStatus()));
        payload.setFileName(source.version.getFileName());
        payload.setMimeType(source.version.getMimeType());
        payload.setSizeBytes(source.version.getSizeBytes());
        payload.setStoragePlatform(source.object.getStoragePlatform());
        payload.setBucketName(source.object.getBucketName());
        payload.setBasePath(source.object.getBasePath());
        payload.setObjectPath(source.object.getObjectPath());
        payload.setObjectName(source.object.getObjectName());
        payload.setPdfSource(DmsPersistentPdfSources.valid(source.version, source.object));
        if (payload.getPdfSource() == null) {
            pdfGenerationTaskService.enqueueMissingEligible(tenantId, source.version.getId(),
                    source.version.getFileName(), source.version.getChecksumSha256());
        }
        payload.setPreviewFormat(request.getPreviewFormat());
        if ("download".equals(request.getWatermarkType())) {
            payload.setWatermarks(watermarkPreviewResolver.resolveDownload(user, tenantId, source.version, request));
        } else if ("print".equals(request.getWatermarkType())) {
            payload.setWatermarks(watermarkPreviewResolver.resolvePrint(user, tenantId, source.version, request));
        } else {
            payload.setWatermarks(watermarkPreviewResolver.resolve(user, tenantId, source.version, request));
        }
        payload.setExpiresAt(expiresAtMillis);
        return payload;
    }
 
    private static final class PreviewSource {
        private final DmsFileVersionEntity version;
        private final DmsFileObjectEntity object;
 
        private PreviewSource(DmsFileVersionEntity version, DmsFileObjectEntity object) {
            this.version = version;
            this.object = object;
        }
    }
}