starpivot/apps/services/modules/user/api_setting.go

package user

import (
	"fmt"
	"io"
	"path"
	"strings"

	"yunyan/comm"
	"yunyan/lego/sys/mysql"
	"yunyan/lego/sys/wordfilter"
	"yunyan/pb"
	"yunyan/sys/aliyun/oss"

	ossSDK "github.com/aliyun/aliyun-oss-go-sdk/oss"
	"os"
	"path/filepath"
	"yunyan/utils"
)

// @Summary 用户设置接口
// @Description 用户设置接口
// @Tags User
// @Accept  json
// @Produce  json
// @Security BearerAuth
// @Param user body pb.UserSettingReq true "发送请求"
// @Success 200 {object} comm.HttpResult{data=pb.UserSettingResp} "成功返回"
// @Router /api/home/user_setting [post]
func (this *apiComp) Setting(session comm.IUserSession, req *pb.UserSettingReq) (resp *pb.UserSettingResp, errdata *pb.ErrorData) {
	var (
		ok                 bool
		user               *pb.DBUser
		filename, filePath string
		publicURL          string
		file               *os.File
		err                error
	)

	resp = &pb.UserSettingResp{}
	if req.Name != "" {
		if ok, _ = wordfilter.Validate(req.Name); !ok {
			errdata = &pb.ErrorData{
				Code:    pb.ErrorCode_NameInscriptionWords,
				Message: pb.ErrorCode_NameInscriptionWords.String(),
			}
			return
		}
	}

	if user, err = this.module.model.findforid(session.GetUserId()); err != nil && err != mysql.ErrNoDocuments {
		errdata = &pb.ErrorData{
			Code:    pb.ErrorCode_DBError,
			Message: err.Error(),
		}
		return
	}
	if req.Name != "" {
		user.Name = req.Name
	}
	if req.Language != "" {
		user.Language = req.Language
	}
	if req.Gender != "" {
		user.Gender = int32(utils.StringToInt64(req.Gender))
	}
	filename = session.GetMateToString("file_name")
	filePath = session.GetMateToString("file_path")
	if filename != "" && filePath != "" {
		defer os.Remove(filePath)
		if file, err = os.Open(filePath); err != nil {
			errdata = &pb.ErrorData{
				Code:    pb.ErrorCode_FileNotFound,
				Message: err.Error(),
			}
			return
		}
		defer file.Close()
		// 获取文件扩展名
		ext := filepath.Ext(filename)
		// 上传 - 使用用户ID+扩展名作为文件名避免冲突
		publicURL, err = putAvatar(session.GetUserId(), ext, file)
		if err != nil {
			errdata = &pb.ErrorData{
				Code:    pb.ErrorCode_StorageError,
				Message: err.Error(),
			}
			return
		}
		user.Avatar = publicURL
	}

	if err = this.module.model.save(user); err != nil {
		errdata = &pb.ErrorData{
			Code:    pb.ErrorCode_DBError,
			Message: err.Error(),
		}
		return
	}
	resp = &pb.UserSettingResp{
		Name:     req.Name,
		Language: req.Language,
		Avatar:   user.Avatar,
		Gender:   user.Gender,
	}
	return
}

// putAvatar 把头像传到阿里云 OSS，返回可直接访问的地址。
//
// 原实现走腾讯云 COS（sys/tencentyun/cos），2026-09-23 随 COS 整体下线改到 OSS，
// 与 user_getuploadurl / console 后台直传共用 comm.LoadAliyunOSSConf 那一份配置——
// 分家会让运维要盯两套存储。
//
// object key 用 uid 拼死且**不带随机段**，即同一用户换头像覆盖同一个对象：
// 与 COS 时期的行为一致（不留历史文件），代价是 URL 不变、客户端可能吃到缓存。
func putAvatar(uid, ext string, r io.Reader) (string, error) {
	// 扩展名白名单，且必须是图片：这个入口收的是头像，放开任意扩展名等于多一个任人上传的通道。
	ct := uploadExtWhitelist[strings.ToLower(ext)]
	if !strings.HasPrefix(ct, "image/") {
		return "", fmt.Errorf("不支持的头像格式: %s", ext)
	}
	conf, err := comm.LoadAliyunOSSConf(comm.AppName(), os.Getenv("FIELD_ENCRYPT_KEY"))
	if err != nil {
		return "", err
	}
	client, err := oss.NewPresigner(conf.Endpoint, conf.AccessKeyId, conf.AccessSecret, conf.Bucket)
	if err != nil {
		return "", fmt.Errorf("初始化阿里云 OSS 失败: %w", err)
	}
	key := path.Join(comm.OSSUploadRoot, "User", uid, "Avatar", uid+strings.ToLower(ext))
	if err = client.UploadObject(key, r, ossSDK.ContentType(ct)); err != nil {
		return "", err
	}
	// 没配自定义域名时 PublicURL 要从一个签名 URL 上摘 host，签名是纯本地运算、不发网络请求。
	signed, err := client.GetURL(key, 60)
	if err != nil {
		return "", err
	}
	return conf.PublicURL(signed, key), nil
}