add old lci module

lci/extra/mgmt/app/user/routes.py

@@ -0,0 +1,111 @@
+import jwt
+import hashlib
+from flask import Blueprint, render_template, request, current_app, jsonify
+from pmc import DnfsComm
+from dnfs import UsersTable, DnfsTable
+
+user_bp = Blueprint('user', __name__, template_folder='templates/features/user.html')
+
+comm = DnfsComm("http://localhost:8006")
+
+
+
+def get_user_from_token():
+    token = request.cookies.get('token')
+    if not token:
+        return None
+    try:
+        payload = jwt.decode(token, current_app.config['SECRET_KEY'], algorithms=['HS256'])
+        return payload  # 包含 user、user_id、exp 等字段
+    except jwt.ExpiredSignatureError:
+        return None
+    except jwt.InvalidTokenError:
+        return None
+
+
+def get_node():
+    try:
+        data = comm.get_and_trans(0)
+    except DnfsComm.GetFailed:
+        return "获取数据失败", 500
+    for item in data:
+        if item['title'] == 'Users':
+            node_id = item['id']
+            node_content = item['content']
+            return node_id, node_content
+    return None
+
+
+@user_bp.after_request
+def add_cors_headers(response):
+    response.headers['Access-Control-Allow-Origin'] = '*'  # 允许所有来源跨域访问，如需限制可替换为具体域名
+    response.headers['Access-Control-Allow-Headers'] = 'Content-Type,Authorization'
+    response.headers['Access-Control-Allow-Methods'] = 'GET,POST,PUT,DELETE,OPTIONS'
+    return response
+
+
+@user_bp.route('/api/mgmt/user', methods=['GET', 'POST'])
+def user():
+    try:
+        data = comm.get_and_trans(0)
+        dnfs_tab = DnfsTable(data)
+        users = dnfs_tab.query_by_title('Users')
+        table = UsersTable(users.content)
+        crt_dict = lambda user: {'user_id': user.id, 'username': user.name, 'role': user.privileges}
+        user_list = [crt_dict(user) for user in table.arr]
+    except DnfsComm.GetFailed:
+        return "获取数据失败", 500
+    except DnfsTable.NotFound:
+        return "未找到用户表", 404
+    except UsersTable.NotFound:
+        return "用户不存在", 401
+    except Exception as e:
+        return str(e), 404
+    payload = get_user_from_token()
+    if not payload:
+        return jsonify({"error": "未授权访问"}), 401
+
+    user_id = payload.get('user_id')
+    role = payload.get('role')
+
+    return render_template('features/user.html',
+                           response=user_list,
+                           current_user_id=user_id,
+                           current_role=role)
+
+
+@user_bp.route('/add_user', methods=['POST'])
+def add_user():
+    node_id, msg = get_node()
+    username = request.form.get('username')
+    password = request.form.get('password')
+    hashed_password = hashlib.sha256(password.encode("utf-8")).hexdigest()
+    role = "normal"
+    table = UsersTable(msg)
+    table.add_user(username, hashed_password, role)
+    table = str(table)
+    comm.upd(node_id, 0, 'Users', table)
+    return jsonify({"message": "用户添加成功"})
+
+
+@user_bp.route('/change_password', methods=['POST'])
+def change_password():
+    node_id, msg = get_node()
+    user_id = request.form.get('user_id')
+    new_password = request.form.get('new_password')
+    hashed_password = hashlib.sha256(new_password.encode("utf-8")).hexdigest()
+    table = UsersTable(msg)
+    table.change_password(int(user_id), hashed_password)
+    table = str(table)
+    comm.upd(node_id, 0, 'Users', table)
+    return jsonify({"message": "密码修改成功"})
+
+
+@user_bp.route('/delete_user<int:user_id>', methods=['POST'])
+def delete_user(user_id):
+    node_id, msg = get_node()
+    table = UsersTable(msg)
+    table.del_user(user_id)
+    table = str(table)
+    comm.upd(node_id, 0, 'Users', table)
+    return jsonify({"message": "用户删除成功"})