package user import ( "fmt" "io" "path" "strings" "yunyan/comm" "yunyan/lego/sys/mysql" "yunyan/lego/sys/wordfilter" "yunyan/pb" "yunyan/sys/aliyun/oss" ossSDK "github.com/aliyun/aliyun-oss-go-sdk/oss" "os" "path/filepath" "yunyan/utils" ) // @Summary 用户设置接口 // @Description 用户设置接口 // @Tags User // @Accept json // @Produce json // @Security BearerAuth // @Param user body pb.UserSettingReq true "发送请求" // @Success 200 {object} comm.HttpResult{data=pb.UserSettingResp} "成功返回" // @Router /api/home/user_setting [post] func (this *apiComp) Setting(session comm.IUserSession, req *pb.UserSettingReq) (resp *pb.UserSettingResp, errdata *pb.ErrorData) { var ( ok bool user *pb.DBUser filename, filePath string publicURL string file *os.File err error ) resp = &pb.UserSettingResp{} if req.Name != "" { if ok, _ = wordfilter.Validate(req.Name); !ok { errdata = &pb.ErrorData{ Code: pb.ErrorCode_NameInscriptionWords, Message: pb.ErrorCode_NameInscriptionWords.String(), } return } } if user, err = this.module.model.findforid(session.GetUserId()); err != nil && err != mysql.ErrNoDocuments { errdata = &pb.ErrorData{ Code: pb.ErrorCode_DBError, Message: err.Error(), } return } if req.Name != "" { user.Name = req.Name } if req.Language != "" { user.Language = req.Language } if req.Gender != "" { user.Gender = int32(utils.StringToInt64(req.Gender)) } filename = session.GetMateToString("file_name") filePath = session.GetMateToString("file_path") if filename != "" && filePath != "" { defer os.Remove(filePath) if file, err = os.Open(filePath); err != nil { errdata = &pb.ErrorData{ Code: pb.ErrorCode_FileNotFound, Message: err.Error(), } return } defer file.Close() // 获取文件扩展名 ext := filepath.Ext(filename) // 上传 - 使用用户ID+扩展名作为文件名避免冲突 publicURL, err = putAvatar(session.GetUserId(), ext, file) if err != nil { errdata = &pb.ErrorData{ Code: pb.ErrorCode_StorageError, Message: err.Error(), } return } user.Avatar = publicURL } if err = this.module.model.save(user); err != nil { errdata = &pb.ErrorData{ Code: pb.ErrorCode_DBError, Message: err.Error(), } return } resp = &pb.UserSettingResp{ Name: req.Name, Language: req.Language, Avatar: user.Avatar, Gender: user.Gender, } return } // putAvatar 把头像传到阿里云 OSS,返回可直接访问的地址。 // // 原实现走腾讯云 COS(sys/tencentyun/cos),2026-09-23 随 COS 整体下线改到 OSS, // 与 user_getuploadurl / console 后台直传共用 comm.LoadAliyunOSSConf 那一份配置—— // 分家会让运维要盯两套存储。 // // object key 用 uid 拼死且**不带随机段**,即同一用户换头像覆盖同一个对象: // 与 COS 时期的行为一致(不留历史文件),代价是 URL 不变、客户端可能吃到缓存。 func putAvatar(uid, ext string, r io.Reader) (string, error) { // 扩展名白名单,且必须是图片:这个入口收的是头像,放开任意扩展名等于多一个任人上传的通道。 ct := uploadExtWhitelist[strings.ToLower(ext)] if !strings.HasPrefix(ct, "image/") { return "", fmt.Errorf("不支持的头像格式: %s", ext) } conf, err := comm.LoadAliyunOSSConf(comm.AppName(), os.Getenv("FIELD_ENCRYPT_KEY")) if err != nil { return "", err } client, err := oss.NewPresigner(conf.Endpoint, conf.AccessKeyId, conf.AccessSecret, conf.Bucket) if err != nil { return "", fmt.Errorf("初始化阿里云 OSS 失败: %w", err) } key := path.Join(comm.OSSUploadRoot, "User", uid, "Avatar", uid+strings.ToLower(ext)) if err = client.UploadObject(key, r, ossSDK.ContentType(ct)); err != nil { return "", err } // 没配自定义域名时 PublicURL 要从一个签名 URL 上摘 host,签名是纯本地运算、不发网络请求。 signed, err := client.GetURL(key, 60) if err != nil { return "", err } return conf.PublicURL(signed, key), nil }