feat: initialize Evergreen Health backend

2026-09-21 14:08:22 +08:00
commit 8553df5dd2
493 changed files with 75649 additions and 0 deletions
@@ -0,0 +1,12 @@
+// Admin.NET 项目的版权、商标、专利和其他相关权利均受相应法律法规的保护。使用本项目应遵守相关法律法规和许可证的要求。
+//
+// 本项目主要遵循 MIT 许可证和 Apache 许可证（版本 2.0）进行分发和使用。许可证位于源代码树根目录中的 LICENSE-MIT 和 LICENSE-APACHE 文件。
+//
+// 不得利用本项目从事危害国家安全、扰乱社会秩序、侵犯他人合法权益等法律法规禁止的活动！任何基于本项目二次开发而产生的一切法律纠纷和责任，我们不承担任何责任！
+
+namespace Admin.NET.Core.Service;
+
+public static class OAuthClaim
+{
+    public const string GiteeAvatarUrl = "urn:gitee:avatar_url";
+}
@@ -0,0 +1,50 @@
+// Admin.NET 项目的版权、商标、专利和其他相关权利均受相应法律法规的保护。使用本项目应遵守相关法律法规和许可证的要求。
+//
+// 本项目主要遵循 MIT 许可证和 Apache 许可证（版本 2.0）进行分发和使用。许可证位于源代码树根目录中的 LICENSE-MIT 和 LICENSE-APACHE 文件。
+//
+// 不得利用本项目从事危害国家安全、扰乱社会秩序、侵犯他人合法权益等法律法规禁止的活动！任何基于本项目二次开发而产生的一切法律纠纷和责任，我们不承担任何责任！
+
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Authentication.Cookies;
+using Microsoft.AspNetCore.Authentication.JwtBearer;
+using Microsoft.AspNetCore.Builder;
+
+namespace Admin.NET.Core;
+
+public static class OAuthSetup
+{
+    /// <summary>
+    /// 三方授权登录OAuth注册
+    /// </summary>
+    /// <param name="services"></param>
+    public static void AddOAuth(this IServiceCollection services)
+    {
+        var authOpt = App.GetConfig<OAuthOptions>("OAuth", true);
+        services.AddAuthentication(options =>
+            {
+                options.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
+                options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
+            })
+            .AddCookie(options =>
+            {
+                options.Cookie.SameSite = SameSiteMode.Lax;
+            })
+            .AddWeixin(options =>
+            {
+                options.ClientId = authOpt.Weixin?.ClientId!;
+                options.ClientSecret = authOpt.Weixin?.ClientSecret!;
+            })
+            .AddGitee(options =>
+            {
+                options.ClientId = authOpt.Gitee?.ClientId!;
+                options.ClientSecret = authOpt.Gitee?.ClientSecret!;
+
+                options.ClaimActions.MapJsonKey(OAuthClaim.GiteeAvatarUrl, "avatar_url");
+            });
+    }
+
+    public static void UseOAuth(this IApplicationBuilder app)
+    {
+        app.UseCookiePolicy(new CookiePolicyOptions { MinimumSameSitePolicy = SameSiteMode.Lax });
+    }
+}
@@ -0,0 +1,120 @@
+// Admin.NET 项目的版权、商标、专利和其他相关权利均受相应法律法规的保护。使用本项目应遵守相关法律法规和许可证的要求。
+//
+// 本项目主要遵循 MIT 许可证和 Apache 许可证（版本 2.0）进行分发和使用。许可证位于源代码树根目录中的 LICENSE-MIT 和 LICENSE-APACHE 文件。
+//
+// 不得利用本项目从事危害国家安全、扰乱社会秩序、侵犯他人合法权益等法律法规禁止的活动！任何基于本项目二次开发而产生的一切法律纠纷和责任，我们不承担任何责任！
+
+using Microsoft.AspNetCore.Authentication;
+using System.Security.Claims;
+
+namespace Admin.NET.Core.Service;
+
+/// <summary>
+/// 系统OAuth服务 🧩
+/// </summary>
+[AllowAnonymous]
+[ApiDescriptionSettings(Order = 498)]
+public class SysOAuthService : IDynamicApiController, ITransient
+{
+    private readonly IHttpContextAccessor _httpContextAccessor;
+    private readonly SqlSugarRepository<SysWechatUser> _sysWechatUserRep;
+
+    public SysOAuthService(IHttpContextAccessor httpContextAccessor,
+        SqlSugarRepository<SysWechatUser> sysWechatUserRep)
+    {
+        _httpContextAccessor = httpContextAccessor;
+        _sysWechatUserRep = sysWechatUserRep;
+    }
+
+    /// <summary>
+    /// 第三方登录 🔖
+    /// </summary>
+    /// <param name="provider"></param>
+    /// <param name="redirectUrl"></param>
+    /// <returns></returns>
+    [ApiDescriptionSettings(Name = "SignIn"), HttpGet]
+    [DisplayName("第三方登录")]
+    public virtual async Task<IActionResult> SignIn([FromQuery] string provider, [FromQuery] string redirectUrl)
+    {
+        if (string.IsNullOrWhiteSpace(provider) || !await _httpContextAccessor.HttpContext.IsProviderSupportedAsync(provider))
+            throw Oops.Oh("不支持的OAuth类型");
+
+        var request = _httpContextAccessor.HttpContext!.Request;
+        var url = $"{request.Scheme}://{request.Host}{request.PathBase}{request.Path}Callback?provider={provider}&redirectUrl={redirectUrl}";
+        var properties = new AuthenticationProperties
+        {
+            RedirectUri = url,
+            Items = { ["LoginProvider"] = provider }
+        };
+        return await Task.FromResult(new ChallengeResult(provider, properties));
+    }
+
+    /// <summary>
+    /// 授权回调 🔖
+    /// </summary>
+    /// <param name="provider"></param>
+    /// <param name="redirectUrl"></param>
+    /// <returns></returns>
+    [ApiDescriptionSettings(Name = "SignInCallback"), HttpGet]
+    [DisplayName("授权回调")]
+    public virtual async Task<IActionResult> SignInCallback([FromQuery] string provider = null, [FromQuery] string redirectUrl = "")
+    {
+        if (string.IsNullOrWhiteSpace(provider) || !await _httpContextAccessor.HttpContext.IsProviderSupportedAsync(provider))
+            throw Oops.Oh("不支持的OAuth类型");
+
+        var authenticateResult = await _httpContextAccessor.HttpContext!.AuthenticateAsync(provider);
+        if (!authenticateResult.Succeeded)
+            throw Oops.Oh("授权失败");
+
+        var openIdClaim = authenticateResult.Principal.FindFirst(ClaimTypes.NameIdentifier);
+        if (openIdClaim == null || string.IsNullOrWhiteSpace(openIdClaim.Value))
+            throw Oops.Oh("授权失败");
+
+        var name = authenticateResult.Principal.FindFirst(ClaimTypes.Name)?.Value;
+        var email = authenticateResult.Principal.FindFirst(ClaimTypes.Email)?.Value;
+        var mobilePhone = authenticateResult.Principal.FindFirst(ClaimTypes.MobilePhone)?.Value;
+        var dateOfBirth = authenticateResult.Principal.FindFirst(ClaimTypes.DateOfBirth)?.Value;
+        var gender = authenticateResult.Principal.FindFirst(ClaimTypes.Gender)?.Value;
+        var avatarUrl = "";
+
+        var platformType = PlatformTypeEnum.微信公众号;
+        if (provider == "Gitee")
+        {
+            platformType = PlatformTypeEnum.Gitee;
+            avatarUrl = authenticateResult.Principal.FindFirst(OAuthClaim.GiteeAvatarUrl)?.Value;
+        }
+
+        // 若账号不存在则新建
+        var wechatUser = await _sysWechatUserRep.AsQueryable().Includes(u => u.SysUser).ClearFilter().FirstAsync(u => u.OpenId == openIdClaim.Value);
+        if (wechatUser == null)
+        {
+            var userId = await App.GetRequiredService<SysUserService>().AddUser(new AddUserInput()
+            {
+                Account = name,
+                RealName = name,
+                NickName = name,
+                Email = email,
+                Avatar = avatarUrl,
+                Phone = mobilePhone,
+                OrgId = 1300000000101, // 根组织架构
+                RoleIdList = new List<long> { 1300000000104 } // 仅本人数据角色
+            });
+
+            await _sysWechatUserRep.InsertAsync(new SysWechatUser()
+            {
+                UserId = userId,
+                OpenId = openIdClaim.Value,
+                Avatar = avatarUrl,
+                NickName = name,
+                PlatformType = platformType
+            });
+
+            wechatUser = await _sysWechatUserRep.AsQueryable().Includes(u => u.SysUser).ClearFilter().FirstAsync(u => u.OpenId == openIdClaim.Value);
+        }
+
+        // 构建Token令牌
+        var token = await App.GetRequiredService<SysAuthService>().CreateToken(wechatUser.SysUser);
+
+        return new RedirectResult($"{redirectUrl}/#/login?token={token.AccessToken}");
+    }
+}