package jnpf.base.service;
|
|
import cn.hutool.core.util.IdUtil;
|
import cn.hutool.crypto.digest.DigestUtil;
|
import jnpf.base.ActionResult;
|
import jnpf.base.ActionResultCode;
|
import jnpf.base.model.uploadedit.*;
|
import jnpf.dms.DmsRevisionEditApi;
|
import jnpf.dmsEntity.storage.DmsRevisionEditRequest;
|
import jnpf.exception.DataException;
|
import jnpf.util.JsonUtil;
|
import jnpf.util.TicketUtil;
|
import jnpf.util.UserProvider;
|
import lombok.RequiredArgsConstructor;
|
import org.springframework.data.redis.core.StringRedisTemplate;
|
import org.springframework.data.redis.core.script.DefaultRedisScript;
|
import org.springframework.stereotype.Service;
|
import java.util.*;
|
import java.util.concurrent.TimeUnit;
|
|
/** DMS新增/修订审核共用临时副本；只保存附件结果，主子表仍由原生表单持久化。 */
|
@Service
|
@RequiredArgsConstructor
|
public class DmsAuditTemporaryEditService {
|
private final UploadEditAccess access;
|
private final DmsRevisionEditApi sources;
|
private final StringRedisTemplate redis;
|
private static final DefaultRedisScript<Long> CAS = new DefaultRedisScript<>(
|
"if redis.call('get',KEYS[1]) == ARGV[1] then redis.call('set',KEYS[1],ARGV[2],'KEEPTTL'); return 1 else return 0 end",Long.class);
|
|
/** 上传/模板凭据已经由原临时入口核验，转换成同一审核副本会话。 */
|
public Map<String,Object> beginUpload(UploadEditCommand command, Map<String,Object> file) {
|
UploadEditContext context = command.getContext();
|
if (!access.isDmsAuditTemporary(context)) throw denied();
|
Map<String,Object> proof = new LinkedHashMap<>();
|
proof.put("purpose", "dms-audit-upload");
|
proof.put("tenantId", UploadEditDraftService.tenant(UserProvider.getUser()));
|
proof.put("ownerId", UserProvider.getLoginUserId()); proof.put("modelId", context.getModelId());
|
proof.put("parentField", Objects.toString(context.getParentField(), "")); proof.put("field", context.getField());
|
proof.put("file", new LinkedHashMap<>(file)); proof.put("expiresAt", System.currentTimeMillis()+14400000L);
|
String receipt = TicketUtil.createTicket(JsonUtil.getObjectToString(proof), 14400L);
|
Map<String,Object> source = new LinkedHashMap<>(file); source.put("revisionEditReceipt", receipt);
|
UploadEditCommand issued = new UploadEditCommand(); issued.setContext(context);
|
issued.setFileId(command.getFileId()); issued.setFiles(List.of(source));
|
return begin(issued);
|
}
|
|
public Map<String,Object> begin(UploadEditCommand command) {
|
UploadEditContext context=command.getContext();
|
// 不把已保存记录、流程实例或可跟踪子行降级为临时副本。
|
if (context==null || text(context.getRecordId()) || text(context.getTaskId())) throw denied();
|
String owner=UserProvider.getLoginUserId(), tenant=UploadEditDraftService.tenant(UserProvider.getUser());
|
access.authorizeTemporary(context,owner);
|
if (command.getFiles()==null || command.getFiles().size()!=1) throw denied();
|
String receipt=Objects.toString(command.getFiles().get(0).get("revisionEditReceipt"),"");
|
Map<String,Object> proof=verify(receipt,context,tenant,owner);
|
Map<String,Object> file=(Map<String,Object>)proof.get("file");
|
if (!Objects.equals(command.getFileId(),file.get("fileId"))
|
|| !jnpf.base.util.UploadEditStateMachine.supportsEditing(file.get("name"))) throw denied();
|
UploadEditLease lease=new UploadEditLease();
|
lease.setLeaseId(IdUtil.simpleUUID()); lease.setDraftId(lease.getLeaseId());
|
lease.setTenantId(tenant); lease.setOwnerId(owner); lease.setRevisionTemporary(true);
|
Map<String,Object> issuedFile=new LinkedHashMap<>(file); issuedFile.put("revisionEditReceipt",receipt); lease.setFile(issuedFile);
|
Map<String,Object> state=new LinkedHashMap<>(); state.put("lease",lease); state.put("context",context); state.put("receipt",receipt);
|
long remaining=((Number)proof.get("expiresAt")).longValue()-System.currentTimeMillis();
|
if (remaining<=0) throw denied();
|
redis.opsForValue().set(key(tenant,lease.getLeaseId()),JsonUtil.getObjectToString(state),remaining,TimeUnit.MILLISECONDS);
|
return response(lease);
|
}
|
public UploadEditLease find(String tenant,String owner,String id) {
|
String raw=redis.opsForValue().get(key(tenant,id));
|
if (raw==null) return null;
|
return checked(raw,tenant,owner,id);
|
}
|
public boolean canReadStatus(String tenant,String owner,String id) {
|
String raw=redis.opsForValue().get(key(tenant,id));
|
if (raw==null) return false;
|
Map<?,?> state=JsonUtil.getJsonToBean(raw,Map.class);
|
UploadEditLease lease=JsonUtil.getJsonToBean(state.get("lease"),UploadEditLease.class);
|
return Objects.equals(owner,lease.getOwnerId()) && Objects.equals(tenant,lease.getTenantId()) && Objects.equals(id,lease.getLeaseId());
|
}
|
private UploadEditLease checked(String raw,String tenant,String owner,String id) {
|
Map<?,?> state=JsonUtil.getJsonToBean(raw,Map.class);
|
UploadEditLease lease=JsonUtil.getJsonToBean(state.get("lease"),UploadEditLease.class);
|
if (!lease.isRevisionTemporary() || !Objects.equals(tenant,lease.getTenantId()) || !Objects.equals(owner,lease.getOwnerId())
|
|| !Objects.equals(id,lease.getLeaseId())) throw denied();
|
UploadEditContext context=JsonUtil.getJsonToBean(state.get("context"),UploadEditContext.class);
|
access.authorizeTemporary(context,owner);
|
verify(Objects.toString(state.get("receipt"),""),context,tenant,owner);
|
lease.setAllowDownload(access.allowDownload(context));
|
lease.setQianpiyeAnnotatorEnabled(access.qianpiyeAnnotatorEnabled(context));
|
return lease;
|
}
|
public boolean save(UploadEditSaveCommand command) {
|
String key=key(command.getTenantId(),command.getLeaseId());
|
String raw=redis.opsForValue().get(key);
|
if (raw==null) return false;
|
UploadEditLease lease=checked(raw,command.getTenantId(),command.getOwnerId(),command.getLeaseId());
|
if (Objects.equals(command.getOperationId(),lease.getLastOperationId())) return true;
|
if (!text(command.getOperationId()) || command.getFile()==null
|
|| !Objects.toString(command.getFile().get("fileId"),"").contains(","+lease.getLeaseId()+",")) throw denied();
|
Map<String,Object> state=JsonUtil.getJsonToBean(raw,Map.class);
|
UploadEditContext context=JsonUtil.getJsonToBean(state.get("context"),UploadEditContext.class);
|
Map<String,Object> proof=new LinkedHashMap<>(verify(Objects.toString(state.get("receipt"),""),context,lease.getTenantId(),lease.getOwnerId()));
|
Map<String,Object> file=new LinkedHashMap<>();
|
for(String field:List.of("fileId","name","fileSize","fileExtension","url")) file.put(field,command.getFile().get(field));
|
if (!jnpf.base.util.UploadEditStateMachine.supportsEditing(file.get("name"))) throw denied();
|
Object savedAt = command.getFile().get("contentSavedAt");
|
jnpf.base.util.UploadTemplateSource.inherit(file, lease.getFile());
|
if (savedAt instanceof Number) file.put("contentSavedAt", savedAt);
|
proof.put("file",new LinkedHashMap<>(file));
|
long remaining=(((Number)proof.get("expiresAt")).longValue()-System.currentTimeMillis())/1000;
|
if (remaining<=0) throw denied();
|
String receipt=TicketUtil.createTicket(JsonUtil.getObjectToString(proof),remaining);
|
file.put("revisionEditReceipt",receipt); lease.setFile(file); lease.setLastOperationId(command.getOperationId());
|
state.put("lease",lease); state.put("receipt",receipt);
|
if (!Long.valueOf(1).equals(redis.execute(CAS,List.of(key),raw,JsonUtil.getObjectToString(state)))) {
|
TicketUtil.deleteTicket(receipt); return false;
|
}
|
return true;
|
}
|
/** 原生落库之前校验带入来源并移除仅供未保存页面使用的凭据。 */
|
public void prepareSave(jnpf.base.model.flow.DataModel model) {
|
Map<String,Object> data = model.getDataNewMap();
|
String tenant = UploadEditDraftService.tenant(UserProvider.getUser());
|
String owner = UserProvider.getLoginUserId();
|
UploadEditContext mainContext = new UploadEditContext();
|
mainContext.setModelId(model.getVisualId()); mainContext.setField("wenjian");
|
if (data.containsKey("wenjian") && access.isDmsAuditTemporary(mainContext)) {
|
Object original = data.get("wenjian");
|
List<Map<String,Object>> mainFiles = jnpf.base.util.UploadEditStateMachine.files(original);
|
// 修订凭据由下面的原生保存校验核实；普通上传不能携带任意模板标记。
|
List<Map<String,Object>> ordinary = mainFiles.stream()
|
.filter(file -> !file.containsKey("revisionEditReceipt")).toList();
|
jnpf.base.util.UploadTemplateSource.normalize(ordinary, List.of(), tenant, owner);
|
data.put("wenjian", original instanceof String ? JsonUtil.getObjectToString(mainFiles) : mainFiles);
|
}
|
sanitizeFiles(data, "wenjian", "", data, model.getVisualId(), tenant, owner);
|
Object rows = data.get("jilu_mingxi");
|
if (rows instanceof List<?>) for (Object row : (List<?>) rows) {
|
if (row instanceof Map<?,?>) sanitizeFiles((Map<String,Object>) row, "jilu_wenjian",
|
"jilu_mingxi", data, model.getVisualId(), tenant, owner);
|
}
|
}
|
|
private void sanitizeFiles(Map<String,Object> row, String field, String parent, Map<String,Object> data,
|
String modelId, String tenant, String owner) {
|
Object original = row.get(field);
|
if (original == null || !(original instanceof List<?> || original instanceof String)) return;
|
boolean hasReceipt = original instanceof String
|
? ((String) original).contains("\"revisionEditReceipt\"")
|
: ((List<?>) original).stream().anyMatch(value -> value instanceof Map<?,?>
|
&& ((Map<?,?>) value).containsKey("revisionEditReceipt"));
|
if (!hasReceipt) return;
|
// 无修订凭据的普通业务字段保持原值与原生保存路径。
|
List<Map<String,Object>> files = jnpf.base.util.UploadEditStateMachine.files(original);
|
if (files.stream().noneMatch(file -> file.containsKey("revisionEditReceipt"))) return;
|
List<Map<String,Object>> clean = new ArrayList<>();
|
for (Map<String,Object> file : files) {
|
if (!file.containsKey("revisionEditReceipt")) { clean.add(file); continue; }
|
UploadEditContext context = new UploadEditContext();
|
context.setModelId(modelId); context.setField(field); context.setParentField(parent);
|
Map<String,Object> proof = verify(Objects.toString(file.get("revisionEditReceipt"), ""), context, tenant, owner);
|
Map<String,Object> canonical = (Map<String,Object>) proof.get("file");
|
if (!"dms-audit-upload".equals(proof.get("purpose"))
|
&& (!Objects.equals(proof.get("sourceItemId"), data.get("xiuding_shenqing_zixiang_id"))
|
|| !Objects.equals(proof.get("versionId"), row.get("yuan_wenjian_banben_id")))) throw denied();
|
if (!Objects.equals(canonical.get("fileId"), file.get("fileId"))) throw denied();
|
// 仅内部来源核验服务可返回原版本完整附件；新上传和编辑副本仍采用原规范值。
|
if ("dms-revision-edit".equals(proof.get("purpose")) && proof.get("sourceFileJson") instanceof String) {
|
canonical = JsonUtil.getJsonToBean((String)proof.get("sourceFileJson"), Map.class);
|
if (!Objects.equals(canonical.get("fileId"), file.get("fileId"))
|
|| !Objects.equals(canonical.get("fileId"), proof.get("originFileId"))) throw denied();
|
}
|
clean.add(new LinkedHashMap<>(canonical));
|
}
|
row.put(field, original instanceof String ? JsonUtil.getObjectToString(clean) : clean);
|
}
|
|
public Map<String,Object> result(String id) {
|
String tenant=UploadEditDraftService.tenant(UserProvider.getUser()),owner=UserProvider.getLoginUserId();
|
UploadEditLease lease=find(tenant,owner,id);
|
if (lease==null) throw denied();
|
return response(lease);
|
}
|
public void cleanup(String tenant,String owner,String id) {
|
String key=key(tenant,id),raw=redis.opsForValue().get(key);
|
if (raw==null) return;
|
Map<?,?> state=JsonUtil.getJsonToBean(raw,Map.class);
|
UploadEditLease lease=JsonUtil.getJsonToBean(state.get("lease"),UploadEditLease.class);
|
if (!Objects.equals(owner,lease.getOwnerId())) throw denied();
|
// 不删除附件实体：原生表单可能已经采用。删除会话阻止后续回调重新写入。
|
redis.delete(key);
|
}
|
private Map<String,Object> verify(String receipt,UploadEditContext context,String tenant,String owner) {
|
String raw = text(receipt) ? TicketUtil.parseTicket(receipt) : null;
|
Map<String,Object> upload = raw == null ? Collections.emptyMap() : JsonUtil.getJsonToBean(raw, Map.class);
|
if ("dms-audit-upload".equals(upload.get("purpose"))) {
|
if (!Objects.equals(tenant, upload.get("tenantId")) || !Objects.equals(owner, upload.get("ownerId"))
|
|| !Objects.equals(context.getModelId(), upload.get("modelId"))
|
|| !Objects.equals(context.getField(), upload.get("field"))
|
|| !Objects.toString(context.getParentField(), "").equals(upload.get("parentField"))
|
|| !(upload.get("expiresAt") instanceof Number)
|
|| ((Number)upload.get("expiresAt")).longValue() <= System.currentTimeMillis()
|
|| !(upload.get("file") instanceof Map<?,?>) || !access.isDmsAuditTemporary(context)) throw denied();
|
return upload;
|
}
|
DmsRevisionEditRequest request=new DmsRevisionEditRequest();
|
request.setReceipt(receipt);request.setTenantId(tenant);request.setOwnerId(owner);request.setModelId(context.getModelId());
|
request.setField(context.getField());request.setParentField(context.getParentField());
|
ActionResult<Map<String,Object>> result=sources.verify(request);
|
if (result==null || !ActionResultCode.SUCCESS.getCode().equals(result.getCode()) || result.getData()==null) throw denied();
|
return result.getData();
|
}
|
private static Map<String,Object> response(UploadEditLease lease) {
|
Map<String,Object> result=new LinkedHashMap<>();result.put("leaseId",lease.getLeaseId());result.put("draftId",lease.getDraftId());
|
result.put("source",lease.getFile());result.put("files",List.of(lease.getFile()));result.put("revision",0);
|
result.put("canDiscard",false);result.put("revisionTemporary",true);return result;
|
}
|
private static String key(String tenant,String id) {
|
if (!text(tenant) || id==null || !id.matches("[a-f0-9]{32}")) throw denied();
|
return "upload-edit:dms-revision:"+DigestUtil.sha256Hex(tenant)+":"+id;
|
}
|
private static boolean text(String value) { return value!=null && !value.isBlank(); }
|
private static DataException denied() { return new DataException("附件编辑授权已失效，请重新选择来源或上传附件"); }
|
}
|
