dingdanquanliucheng/backend/app/services/file_service.py

162 lines
7.4 KiB
Python
Raw Normal View History

from datetime import datetime
2026-05-14 16:12:25 +08:00
from sqlalchemy.exc import SQLAlchemyError
from sqlalchemy.orm import Session
from backend.app.core.config import get_settings
2026-05-14 16:12:25 +08:00
from backend.app.core.error_codes import ErrorCode
from backend.app.core.exceptions import AppException
from backend.app.repositories.file_repository import FileRepository
from backend.app.services.audit_service import audit_service
from backend.app.services.storage_service import storage_service
2026-05-14 16:12:25 +08:00
class FileService:
def __init__(self) -> None:
self.settings = get_settings()
self.repository = FileRepository()
2026-05-14 16:12:25 +08:00
def create_upload_token(self, payload: dict, session: Session | None = None) -> dict:
2026-05-14 16:12:25 +08:00
if not payload["file_name"].strip():
raise AppException(code=ErrorCode.PARAM_ERROR, message="文件名不能为空", status_code=400)
if not payload["biz_type"].strip():
raise AppException(code=ErrorCode.PARAM_ERROR, message="业务类型不能为空", status_code=400)
file_category = self._detect_file_category(payload["file_type"], payload["file_name"])
self._validate_file_size(file_category, payload["file_size"])
token_payload = storage_service.create_upload_token(
payload["biz_type"],
payload["biz_id"],
payload["file_name"],
payload["file_size"],
)
token_payload["file_category"] = file_category
return token_payload
2026-05-14 16:12:25 +08:00
def save_attachment(self, payload: dict, session: Session | None = None) -> dict:
if session is None:
raise AppException(code=ErrorCode.INTERNAL_ERROR, message="数据库连接不可用", status_code=500)
attachment_payload = self.build_attachment_payload(payload, created_by=payload.get("created_by"))
try:
attachment = self.repository.create_attachment(session, attachment_payload)
audit_service.write_log(
session,
{
"operate_type": "attachment_create",
"biz_type": payload["biz_type"],
"biz_id": payload["biz_id"],
"before_value": None,
"after_value": self._map_attachment(attachment),
"remark": f"保存附件 {payload['file_name']}",
},
)
session.commit()
return self._map_attachment(attachment)
except AppException:
session.rollback()
raise
except SQLAlchemyError as exc:
session.rollback()
raise AppException(code=ErrorCode.INTERNAL_ERROR, message="数据库异常", status_code=500) from exc
def build_attachment_payload(
self,
payload: dict,
created_by: int | None = None,
require_file_size: bool = True,
) -> dict:
if not payload["biz_type"].strip():
raise AppException(code=ErrorCode.PARAM_ERROR, message="业务类型不能为空", status_code=400)
if not payload["file_name"].strip():
raise AppException(code=ErrorCode.PARAM_ERROR, message="文件名不能为空", status_code=400)
if not payload["file_url"].strip():
raise AppException(code=ErrorCode.PARAM_ERROR, message="文件地址不能为空", status_code=400)
file_name = payload["file_name"]
file_url = payload["file_url"]
file_type = payload.get("file_type") or None
file_size = payload.get("file_size")
if require_file_size and (file_size is None or int(file_size) <= 0):
raise AppException(code=ErrorCode.PARAM_ERROR, message="文件大小不能为空", status_code=400)
file_category = self._detect_file_category(file_type or "", file_name)
if file_size is not None and int(file_size) > 0:
self._validate_file_size(file_category, int(file_size))
object_key = storage_service.extract_object_key(file_url)
file_ext = self._extract_file_ext(file_name)
self._validate_attachment_file(file_name, file_url, object_key)
# 司机任务操作里可能只有文件名和 URL这里允许 MIME 和大小为空,但仍统一沉淀附件元数据。
return {
2026-05-14 16:12:25 +08:00
"biz_type": payload["biz_type"],
"biz_id": payload["biz_id"],
"file_name": file_name,
"file_url": file_url,
"file_type": file_type,
"file_size": int(file_size) if file_size is not None else None,
"created_by": created_by,
"storage_provider": "aliyun_oss",
"bucket_name": self.settings.aliyun_oss_bucket,
"object_key": object_key,
"content_type": file_type,
"file_ext": file_ext,
"file_category": file_category,
2026-05-14 16:12:25 +08:00
}
2026-05-15 13:47:08 +08:00
def _validate_attachment_file(self, file_name: str, file_url: str, object_key: str) -> None:
expected_name = file_name.strip()
object_name = object_key.rsplit("/", 1)[-1]
# 保存附件时再次核对 object key 与文件名,避免前端绕过上传凭证直接塞入不匹配文件。
2026-05-15 13:47:08 +08:00
if expected_name and expected_name not in object_name:
raise AppException(code=ErrorCode.FILE_UPLOAD_FAILED, message="附件文件名与对象地址不匹配", status_code=400)
if not file_url.startswith(("http://", "https://")):
raise AppException(code=ErrorCode.FILE_UPLOAD_FAILED, message="附件地址格式不正确", status_code=400)
def _detect_file_category(self, file_type: str, file_name: str) -> str:
content_type = (file_type or "").lower()
suffix = self._extract_file_ext(file_name).lower()
if content_type.startswith("image/") or suffix in {"jpg", "jpeg", "png", "gif", "webp"}:
return "image"
if content_type.startswith("video/") or suffix in {"mp4", "mov", "avi"}:
return "video"
if suffix in {"xlsx", "xls", "csv"}:
return "import"
return "document"
2026-05-14 16:12:25 +08:00
def _validate_file_size(self, file_category: str, file_size: int) -> None:
max_mb = (
self.settings.oss_upload_max_image_mb
if file_category == "image"
else self.settings.oss_upload_max_video_mb
if file_category == "video"
else max(self.settings.oss_upload_max_image_mb, self.settings.oss_upload_max_video_mb)
)
if file_size > max_mb * 1024 * 1024:
raise AppException(code=ErrorCode.FILE_UPLOAD_FAILED, message="文件大小超出限制", status_code=400)
def _extract_file_ext(self, file_name: str) -> str:
parts = file_name.rsplit(".", 1)
return parts[1] if len(parts) == 2 else ""
def _map_attachment(self, attachment) -> dict:
return {
"attachment_id": attachment.id,
"biz_type": attachment.biz_type,
"biz_id": attachment.biz_id,
"file_name": attachment.file_name,
"file_url": attachment.file_url,
"file_type": attachment.file_type,
"file_size": attachment.file_size,
"storage_provider": attachment.storage_provider,
"bucket_name": attachment.bucket_name,
"object_key": attachment.object_key,
"content_type": attachment.content_type,
"file_ext": attachment.file_ext,
"file_category": attachment.file_category,
"created_at": attachment.created_at.strftime("%Y-%m-%d %H:%M:%S") if attachment.created_at else "",
}
file_service = FileService()