406 lines
17 KiB
Vue
406 lines
17 KiB
Vue
<script setup lang="ts">
|
|
import { computed, nextTick, onMounted, reactive, ref, watch } from 'vue'
|
|
import { ElMessage, ElMessageBox, type FormInstance, type FormRules } from 'element-plus'
|
|
import { Pencil, Plus } from '@lucide/vue'
|
|
import {
|
|
changePlatformManagedUserStatus,
|
|
createPlatformManagedUser,
|
|
getPlatformUserOptions,
|
|
listPlatformManagedUsers,
|
|
resetPlatformManagedUserPassword,
|
|
updatePlatformManagedUser,
|
|
type PlatformManagedUser,
|
|
type PlatformUserOptions,
|
|
} from '@/modules/iam/api/platformIam'
|
|
import { getApiErrorDetails, getApiErrorMessage, type ApiErrorDetails } from '@/shared/api/http'
|
|
import ApiErrorMeta from '@/shared/components/ApiErrorMeta.vue'
|
|
import StatusBadge from '@/shared/components/StatusBadge.vue'
|
|
import DataTable, { type DataTableColumn } from '@/shared/components/DataTable.vue'
|
|
import QueryToolbar, { type QueryField, type QueryModel } from '@/shared/components/QueryToolbar.vue'
|
|
import { useUnsavedWorkRegistration } from '@/core/unsaved-work/useUnsavedWorkRegistration'
|
|
import { useAccessPreviewStore } from '@/core/access/accessPreview'
|
|
import { useAuthStore } from '@/core/auth/auth'
|
|
|
|
const access = useAccessPreviewStore()
|
|
const auth = useAuthStore()
|
|
const users = ref<PlatformManagedUser[]>([])
|
|
const options = ref<PlatformUserOptions>({ tenants: [], roles: [] })
|
|
const loading = ref(false)
|
|
const saving = ref(false)
|
|
const loadError = ref<ApiErrorDetails | null>(null)
|
|
const editorOpen = ref(false)
|
|
const formRef = ref<FormInstance>()
|
|
const editingUser = ref<PlatformManagedUser | null>(null)
|
|
const rowActionId = ref('')
|
|
let loadRequestId = 0
|
|
const page = ref(1)
|
|
const pageSize = ref(10)
|
|
const total = ref(0)
|
|
type UserFilters = QueryModel & { keyword: string; status: string }
|
|
const filters = ref<UserFilters>({ keyword: '', status: '' })
|
|
const appliedFilters = ref<UserFilters>({ ...filters.value })
|
|
const queryFields = computed<QueryField[]>(() => [
|
|
{
|
|
key: 'keyword',
|
|
type: 'input',
|
|
placeholder: '姓名、手机号、邮箱或员工编号',
|
|
props: { maxlength: 128, 'aria-label': '用户关键词' },
|
|
},
|
|
{
|
|
key: 'status',
|
|
type: 'select',
|
|
placeholder: '全部状态',
|
|
props: { 'aria-label': '用户状态' },
|
|
options: [
|
|
{ label: '正常', value: 'ACTIVE' },
|
|
{ label: '禁用', value: 'DISABLED' },
|
|
],
|
|
},
|
|
])
|
|
|
|
const emptyForm = () => ({
|
|
username: '',
|
|
displayName: '',
|
|
phone: '',
|
|
email: '',
|
|
tenantId: '0',
|
|
roleIds: [] as string[],
|
|
password: '',
|
|
confirmPassword: '',
|
|
status: 'ACTIVE' as 'ACTIVE' | 'DISABLED',
|
|
resetPassword: false,
|
|
})
|
|
const form = reactive(emptyForm())
|
|
|
|
const canCreate = computed(() => access.can('platform:user:create') && access.can('platform:user:grant-role'))
|
|
const canEdit = computed(() => access.can('platform:user:edit'))
|
|
const canGrantRoles = computed(() => access.can('platform:user:grant-role'))
|
|
const canChangeStatus = computed(() => access.can('platform:user:status'))
|
|
const canResetPassword = computed(() => access.can('platform:user:reset-password'))
|
|
const editorLabel = computed(() => editingUser.value ? `编辑用户 - ${editingUser.value.displayName}` : '新增用户')
|
|
|
|
useUnsavedWorkRegistration({
|
|
key: 'platform-user-editor',
|
|
label: editorLabel,
|
|
isOpen: editorOpen,
|
|
model: form,
|
|
requiredPermission: computed(() => editingUser.value ? 'platform:user:edit' : 'platform:user:create'),
|
|
})
|
|
|
|
const availableRoles = computed(() => options.value.roles.filter((role) =>
|
|
String(role.tenantId) === '0'
|
|
&& (role.status === 'ACTIVE' || form.roleIds.includes(String(role.id))),
|
|
))
|
|
|
|
const formRules = computed<FormRules>(() => ({
|
|
username: editingUser.value ? [] : [
|
|
{ required: true, whitespace: true, message: '请输入用户名', trigger: 'blur' },
|
|
{ pattern: /^[A-Za-z0-9_.@-]{4,64}$/, message: '用户名为 4-64 位字母、数字或 _ . @ -', trigger: 'blur' },
|
|
],
|
|
displayName: editingUser.value && !canEdit.value ? [] : [{ required: true, whitespace: true, message: '请输入姓名', trigger: 'blur' }],
|
|
phone: editingUser.value && !canEdit.value ? [] : [
|
|
{ required: true, message: '请输入手机号', trigger: 'blur' },
|
|
{ pattern: /^1\d{10}$/, message: '请输入正确的 11 位手机号', trigger: 'blur' },
|
|
],
|
|
email: editingUser.value && !canEdit.value ? [] : [{ type: 'email', message: '请输入有效的邮箱地址', trigger: 'blur' }],
|
|
roleIds: editingUser.value && !canEdit.value ? [] : [{ type: 'array', required: true, min: 1, message: '请选择角色', trigger: 'change' }],
|
|
password: editingUser.value && !form.resetPassword ? [] : [
|
|
{ required: true, message: '请输入密码', trigger: 'blur' },
|
|
{ pattern: /^(?=.*[A-Za-z])(?=.*\d).{8,64}$/, message: '密码为 8-64 位，且必须包含字母和数字', trigger: 'blur' },
|
|
],
|
|
confirmPassword: editingUser.value && !form.resetPassword ? [] : [
|
|
{ required: true, message: '请再次输入密码', trigger: 'blur' },
|
|
{ validator: (_rule, value, callback) => value === form.password ? callback() : callback(new Error('两次输入的密码不一致')), trigger: 'blur' },
|
|
],
|
|
}))
|
|
|
|
const userColumns: DataTableColumn[] = [
|
|
{ key: 'actions', label: '操作', width: 170, fixed: 'left', slotName: 'actions' },
|
|
{ prop: 'username', label: '用户名', minWidth: 145 },
|
|
{ prop: 'displayName', label: '姓名', minWidth: 130 },
|
|
{ key: 'roles', label: '角色', minWidth: 180, slotName: 'roles' },
|
|
{ key: 'status', label: '状态', width: 100, slotName: 'status' },
|
|
{ key: 'lastLoginAt', label: '最后登录', minWidth: 170, slotName: 'lastLoginAt' },
|
|
]
|
|
|
|
function userQuery() {
|
|
return {
|
|
page: page.value,
|
|
size: pageSize.value,
|
|
...(appliedFilters.value.keyword.trim() ? { keyword: appliedFilters.value.keyword.trim() } : {}),
|
|
...(appliedFilters.value.status ? { status: appliedFilters.value.status as PlatformManagedUser['status'] } : {}),
|
|
}
|
|
}
|
|
|
|
async function loadUsers() {
|
|
const requestId = ++loadRequestId
|
|
loading.value = true
|
|
loadError.value = null
|
|
try {
|
|
const result = await listPlatformManagedUsers(userQuery())
|
|
if (requestId !== loadRequestId) return
|
|
users.value = result.records
|
|
total.value = result.total
|
|
} catch (error) {
|
|
if (requestId !== loadRequestId) return
|
|
users.value = []
|
|
total.value = 0
|
|
loadError.value = getApiErrorDetails(error, '用户列表加载失败，请稍后重试')
|
|
} finally {
|
|
if (requestId === loadRequestId) loading.value = false
|
|
}
|
|
}
|
|
|
|
async function loadInitialData() {
|
|
const requestId = ++loadRequestId
|
|
loading.value = true
|
|
loadError.value = null
|
|
try {
|
|
const [result, optionRecords] = await Promise.all([
|
|
listPlatformManagedUsers(userQuery()),
|
|
getPlatformUserOptions(),
|
|
])
|
|
options.value = {
|
|
tenants: optionRecords.tenants.filter((tenant) => String(tenant.id) === '0'),
|
|
roles: optionRecords.roles.filter((role) => String(role.tenantId) === '0'),
|
|
}
|
|
if (requestId !== loadRequestId) return
|
|
users.value = result.records
|
|
total.value = result.total
|
|
} catch (error) {
|
|
if (requestId !== loadRequestId) return
|
|
users.value = []
|
|
total.value = 0
|
|
loadError.value = getApiErrorDetails(error, '内部用户列表加载失败，请稍后重试')
|
|
} finally {
|
|
if (requestId === loadRequestId) loading.value = false
|
|
}
|
|
}
|
|
|
|
function openCreate() {
|
|
Object.assign(form, emptyForm())
|
|
editingUser.value = null
|
|
editorOpen.value = true
|
|
nextTick(() => formRef.value?.clearValidate())
|
|
}
|
|
|
|
function openEdit(row: PlatformManagedUser) {
|
|
editingUser.value = row
|
|
Object.assign(form, {
|
|
username: row.username,
|
|
displayName: row.displayName,
|
|
phone: row.phone ?? '',
|
|
email: row.email ?? '',
|
|
tenantId: '0',
|
|
roleIds: row.roleIds.map(String),
|
|
password: '',
|
|
confirmPassword: '',
|
|
status: row.status,
|
|
resetPassword: false,
|
|
})
|
|
editorOpen.value = true
|
|
nextTick(() => formRef.value?.clearValidate())
|
|
}
|
|
|
|
function isCurrentUser(row: PlatformManagedUser | null) {
|
|
if (!row) return false
|
|
return String(row.userId) === auth.user?.id || String(row.authUserId) === auth.user?.id
|
|
}
|
|
|
|
function cannotDisable(row: PlatformManagedUser | null) {
|
|
return Boolean(row?.protectedAccount) || isCurrentUser(row)
|
|
}
|
|
|
|
async function saveUser() {
|
|
const valid = await formRef.value?.validate().catch(() => false)
|
|
if (!valid) return
|
|
saving.value = true
|
|
try {
|
|
if (!editingUser.value) {
|
|
await createPlatformManagedUser({
|
|
username: form.username.trim(),
|
|
displayName: form.displayName.trim(),
|
|
phone: form.phone.trim(),
|
|
email: form.email.trim(),
|
|
tenantId: '0',
|
|
roleIds: form.roleIds,
|
|
password: form.password,
|
|
status: form.status,
|
|
})
|
|
ElMessage.success('用户添加成功')
|
|
} else {
|
|
const row = editingUser.value
|
|
if (canEdit.value) {
|
|
await updatePlatformManagedUser(row.membershipId, {
|
|
displayName: form.displayName.trim(),
|
|
phone: form.phone.trim(),
|
|
email: form.email.trim(),
|
|
tenantId: '0',
|
|
roleIds: form.roleIds,
|
|
})
|
|
}
|
|
if (canChangeStatus.value && form.status !== row.status) {
|
|
await changePlatformManagedUserStatus(row.membershipId, form.status)
|
|
}
|
|
if (canResetPassword.value && form.resetPassword) {
|
|
await resetPlatformManagedUserPassword(row.membershipId, form.password)
|
|
}
|
|
ElMessage.success(form.resetPassword ? '用户信息已更新，密码已重置' : '用户信息已更新')
|
|
}
|
|
editorOpen.value = false
|
|
await loadUsers()
|
|
} catch (error) {
|
|
ElMessage.error(getApiErrorMessage(error, editingUser.value ? '用户更新失败，请稍后重试' : '用户添加失败，请稍后重试'))
|
|
} finally {
|
|
saving.value = false
|
|
}
|
|
}
|
|
|
|
async function toggleStatus(row: PlatformManagedUser) {
|
|
const targetStatus = row.status === 'ACTIVE' ? 'DISABLED' : 'ACTIVE'
|
|
const targetLabel = targetStatus === 'ACTIVE' ? '启用' : '禁用'
|
|
try {
|
|
await ElMessageBox.confirm(`确认${targetLabel}用户“${row.displayName}”吗？`, `${targetLabel}用户`, {
|
|
confirmButtonText: `确认${targetLabel}`,
|
|
cancelButtonText: '取消',
|
|
type: targetStatus === 'DISABLED' ? 'warning' : 'info',
|
|
})
|
|
rowActionId.value = String(row.membershipId)
|
|
const updated = await changePlatformManagedUserStatus(row.membershipId, targetStatus)
|
|
Object.assign(row, updated)
|
|
ElMessage.success(`用户已${targetLabel}`)
|
|
} catch (error) {
|
|
if (error === 'cancel' || error === 'close') return
|
|
ElMessage.error(getApiErrorMessage(error, `用户${targetLabel}失败，请稍后重试`))
|
|
} finally {
|
|
rowActionId.value = ''
|
|
}
|
|
}
|
|
|
|
function formatLogin(value: string | null) {
|
|
if (!value) return '—'
|
|
return value.replace('T', ' ').slice(0, 16)
|
|
}
|
|
|
|
function applyFilters() {
|
|
appliedFilters.value = { ...filters.value }
|
|
if (page.value === 1) void loadUsers()
|
|
else page.value = 1
|
|
}
|
|
|
|
watch([page, pageSize], () => void loadUsers())
|
|
onMounted(loadInitialData)
|
|
</script>
|
|
|
|
<template>
|
|
<div class="business-page">
|
|
<el-alert v-if="loadError" type="error" :closable="false" show-icon role="alert">
|
|
<template #title>
|
|
<div class="api-error-alert-title"><span>{{ loadError.message }}</span><ApiErrorMeta :details="loadError" /></div>
|
|
<el-button link type="danger" @click="loadInitialData">重新加载</el-button>
|
|
</template>
|
|
</el-alert>
|
|
|
|
<QueryToolbar
|
|
v-model="filters"
|
|
class="surface-panel"
|
|
ariaLabel="用户筛选"
|
|
:fields="queryFields"
|
|
@search="applyFilters"
|
|
/>
|
|
|
|
<section class="surface-panel table-panel" :aria-busy="loading">
|
|
<header class="panel-heading">
|
|
<div>
|
|
<h2>内部用户列表 <span class="secondary-text">共 {{ total }} 条</span></h2>
|
|
<p>维护平台内部员工账号、平台角色和使用状态。</p>
|
|
</div>
|
|
<el-button v-if="canCreate" type="primary" @click="openCreate"><Plus :size="16" />新增用户</el-button>
|
|
</header>
|
|
|
|
<DataTable v-model:page="page" v-model:page-size="pageSize" :data="users" :columns="userColumns"
|
|
:loading="loading" :total="total" aria-label="内部用户列表" row-key="membershipId" empty-text="没有符合筛选条件的内部用户">
|
|
<template #actions="{ row }">
|
|
<div class="table-actions">
|
|
<el-button v-if="canEdit || canChangeStatus || canResetPassword" link type="primary" @click="openEdit(row as PlatformManagedUser)">
|
|
<Pencil :size="15" />编辑
|
|
</el-button>
|
|
<el-button v-if="canChangeStatus" link :type="(row as PlatformManagedUser).status === 'ACTIVE' ? 'danger' : 'success'"
|
|
:loading="rowActionId === String((row as PlatformManagedUser).membershipId)"
|
|
:disabled="cannotDisable(row as PlatformManagedUser)"
|
|
:title="(row as PlatformManagedUser).protectedAccount ? '系统管理员不能被禁用' : isCurrentUser(row as PlatformManagedUser) ? '不能禁用当前登录用户' : undefined"
|
|
@click="toggleStatus(row as PlatformManagedUser)">
|
|
{{ (row as PlatformManagedUser).status === 'ACTIVE' ? '禁用' : '启用' }}
|
|
</el-button>
|
|
</div>
|
|
</template>
|
|
<template #roles="{ row }">
|
|
<div class="tag-list">
|
|
<el-tag v-for="role in (row as PlatformManagedUser).roleNames" :key="role" effect="plain" size="small">{{ role }}</el-tag>
|
|
<span v-if="!(row as PlatformManagedUser).roleNames.length" class="secondary-text">未分配</span>
|
|
</div>
|
|
</template>
|
|
<template #status="{ row }"><StatusBadge :status="(row as PlatformManagedUser).status === 'ACTIVE' ? '正常' : '禁用'" /></template>
|
|
<template #lastLoginAt="{ row }">{{ formatLogin((row as PlatformManagedUser).lastLoginAt) }}</template>
|
|
</DataTable>
|
|
</section>
|
|
|
|
<el-dialog v-model="editorOpen" :title="editorLabel" width="min(760px, calc(100vw - 32px))" :close-on-click-modal="false" destroy-on-close>
|
|
<el-form ref="formRef" :model="form" :rules="formRules" label-position="top">
|
|
<div class="form-grid two-cols">
|
|
<el-form-item label="用户名" prop="username" required>
|
|
<el-input v-model="form.username" :disabled="Boolean(editingUser)" placeholder="登录用户名" maxlength="64" />
|
|
</el-form-item>
|
|
<el-form-item label="姓名" prop="displayName" required>
|
|
<el-input v-model="form.displayName" :disabled="Boolean(editingUser) && !canEdit" placeholder="真实姓名" maxlength="64" />
|
|
</el-form-item>
|
|
<el-form-item label="手机号" prop="phone" required>
|
|
<el-input v-model="form.phone" :disabled="Boolean(editingUser) && !canEdit" placeholder="手机号码" inputmode="tel" maxlength="11" />
|
|
</el-form-item>
|
|
<el-form-item label="邮箱" prop="email">
|
|
<el-input v-model="form.email" :disabled="Boolean(editingUser) && !canEdit" placeholder="邮箱地址" inputmode="email" maxlength="128" />
|
|
</el-form-item>
|
|
<el-form-item label="角色" prop="roleIds" required>
|
|
<el-select v-model="form.roleIds" multiple collapse-tags collapse-tags-tooltip
|
|
:disabled="Boolean(editingUser) && (!canEdit || !canGrantRoles || editingUser?.protectedAccount)" placeholder="选择角色">
|
|
<el-option v-for="role in availableRoles" :key="role.id" :label="role.name" :value="String(role.id)" :disabled="role.status !== 'ACTIVE'" />
|
|
</el-select>
|
|
</el-form-item>
|
|
<el-form-item label="状态" prop="status">
|
|
<el-select v-model="form.status" :disabled="Boolean(editingUser) && (!canChangeStatus || cannotDisable(editingUser))">
|
|
<el-option label="正常" value="ACTIVE" />
|
|
<el-option label="禁用" value="DISABLED" />
|
|
</el-select>
|
|
</el-form-item>
|
|
<el-form-item v-if="editingUser" label="最后登录">
|
|
<el-input :model-value="formatLogin(editingUser.lastLoginAt)" disabled />
|
|
</el-form-item>
|
|
</div>
|
|
|
|
<template v-if="!editingUser || canResetPassword">
|
|
<el-checkbox v-if="editingUser" v-model="form.resetPassword">同时重置密码</el-checkbox>
|
|
<div v-if="!editingUser || form.resetPassword" class="form-grid two-cols password-fields">
|
|
<el-form-item :label="editingUser ? '新密码' : '初始密码'" prop="password" required>
|
|
<el-input v-model="form.password" type="password" show-password autocomplete="new-password" placeholder="8-64 位，包含字母和数字" />
|
|
</el-form-item>
|
|
<el-form-item label="确认密码" prop="confirmPassword" required>
|
|
<el-input v-model="form.confirmPassword" type="password" show-password autocomplete="new-password" placeholder="再次输入密码" />
|
|
</el-form-item>
|
|
</div>
|
|
</template>
|
|
</el-form>
|
|
<template #footer>
|
|
<el-button :disabled="saving" @click="editorOpen = false">取消</el-button>
|
|
<el-button type="primary" :loading="saving" @click="saveUser">{{ editingUser ? '保存修改' : '确认添加' }}</el-button>
|
|
</template>
|
|
</el-dialog>
|
|
</div>
|
|
</template>
|
|
|
|
<style scoped>
|
|
.password-fields { margin-top: 16px; }
|
|
@media (max-width: 720px) {
|
|
.form-grid.two-cols { grid-template-columns: 1fr; }
|
|
}
|
|
</style>
|