mirror of
https://github.com/Lost-MSth/Arcaea-server.git
synced 2026-02-11 10:27:27 +08:00
Update to v2.8.5
This commit is contained in:
Lost-MSth
@@ -1,7 +1,11 @@
|
||||
from .error import ArcError, InputError, DataExist
|
||||
from .error import ArcError, InputError, DataExist, NoAccess, NoData, UserBan
|
||||
from .constant import Constant
|
||||
from .character import UserCharacter
|
||||
from setting import Config
|
||||
import hashlib
|
||||
import base64
|
||||
import time
|
||||
from os import urandom
|
||||
|
||||
|
||||
class User:
|
||||
@@ -15,7 +19,9 @@ class User:
|
||||
pass
|
||||
|
||||
|
||||
class RegisterUser(User):
|
||||
class UserRegister(User):
|
||||
hash_pwd = None
|
||||
|
||||
def __init__(self, c) -> None:
|
||||
super().__init__()
|
||||
self.c = c
|
||||
@@ -52,6 +58,7 @@ class RegisterUser(User):
|
||||
raise InputError('Email address is invalid.')
|
||||
|
||||
def _build_user_code(self):
|
||||
# 生成9位的user_code，用的自然是随机
|
||||
from random import randint
|
||||
random_times = 0
|
||||
|
||||
@@ -103,4 +110,171 @@ class RegisterUser(User):
|
||||
values(:user_id, :name, :password, :join_date, :user_code, 0, 0, 0, 0, 0, 0, -1, 0, '', :memories, 0, :email)
|
||||
''', {'user_code': self.user_code, 'user_id': self.user_id, 'join_date': now, 'name': self.name, 'password': self.hash_pwd, 'memories': Config.DEFAULT_MEMORIES, 'email': self.email})
|
||||
self.c.execute('''insert into recent30(user_id) values(:user_id)''', {
|
||||
'user_id': self.user_id})
|
||||
'user_id': self.user_id})
|
||||
|
||||
|
||||
class UserLogin(User):
|
||||
# 密码和token的加密方式为 SHA-256
|
||||
device_id = None
|
||||
ip = None
|
||||
hash_pwd = None
|
||||
token = None
|
||||
now = 0
|
||||
|
||||
def __init__(self, c) -> None:
|
||||
super().__init__()
|
||||
self.c = c
|
||||
|
||||
def set_name(self, name: str):
|
||||
self.name = name
|
||||
|
||||
def set_password(self, password: str):
|
||||
self.password = password
|
||||
self.hash_pwd = hashlib.sha256(password.encode("utf8")).hexdigest()
|
||||
|
||||
def set_device_id(self, device_id: str):
|
||||
self.device_id = device_id
|
||||
|
||||
def set_ip(self, ip: str):
|
||||
self.ip = ip
|
||||
|
||||
def _arc_auto_ban(self):
|
||||
# 多设备自动封号机制，返回封号时长
|
||||
self.c.execute('''delete from login where user_id=?''',
|
||||
(self.user_id, ))
|
||||
self.c.execute(
|
||||
'''select ban_flag from user where user_id=?''', (self.user_id,))
|
||||
x = self.c.fetchone()
|
||||
if x and x[0] != '' and x[0] is not None:
|
||||
last_ban_time = int(x[0].split(':', 1)[0])
|
||||
i = 0
|
||||
while i < len(Constant.BAN_TIME) - 1 and Constant.BAN_TIME[i] <= last_ban_time:
|
||||
i += 1
|
||||
ban_time = Constant.BAN_TIME[i]
|
||||
else:
|
||||
ban_time = Constant.BAN_TIME[0]
|
||||
|
||||
ban_flag = ':'.join(
|
||||
(str(ban_time), str(self.now + ban_time * 86400000)))
|
||||
self.c.execute('''update user set ban_flag=? where user_id=?''',
|
||||
(ban_flag, self.user_id))
|
||||
|
||||
return ban_time * 86400000
|
||||
|
||||
def _check_device(self, device_list):
|
||||
should_delete_num = len(
|
||||
device_list) + 1 - Config.LOGIN_DEVICE_NUMBER_LIMIT
|
||||
|
||||
if not Config.ALLOW_LOGIN_SAME_DEVICE:
|
||||
if self.device_id in device_list: # 对相同设备进行删除
|
||||
self.c.execute('''delete from login where login_device=:a and user_id=:b''', {
|
||||
'a': self.device_id, 'b': self.user_id})
|
||||
should_delete_num = len(
|
||||
device_list) + 1 - device_list.count(self.device_id) - Config.LOGIN_DEVICE_NUMBER_LIMIT
|
||||
|
||||
if should_delete_num >= 1: # 删掉多余token
|
||||
if not Config.ALLOW_LOGIN_SAME_DEVICE and Config.ALLOW_BAN_MULTIDEVICE_USER_AUTO: # 自动封号检查
|
||||
self.c.execute(
|
||||
'''select count(*) from login where user_id=? and login_time>?''', (self.user_id, self.now-86400000))
|
||||
if self.c.fetchone()[0] >= Config.LOGIN_DEVICE_NUMBER_LIMIT:
|
||||
remaining_ts = self._arc_auto_ban()
|
||||
raise UserBan('Too many devices logging in during 24 hours.', 105, extra_data={
|
||||
'remaining_ts': remaining_ts})
|
||||
|
||||
self.c.execute('''delete from login where rowid in (select rowid from login where user_id=:user_id limit :a);''',
|
||||
{'user_id': self.user_id, 'a': int(should_delete_num)})
|
||||
|
||||
def login(self, name: str = '', password: str = '', device_id: str = '', ip: str = ''):
|
||||
if name:
|
||||
self.set_name(name)
|
||||
if password:
|
||||
self.set_password(password)
|
||||
if device_id:
|
||||
self.set_device_id(device_id)
|
||||
if ip:
|
||||
self.set_ip(ip)
|
||||
|
||||
self.c.execute('''select user_id, password, ban_flag from user where name = :name''', {
|
||||
'name': self.name})
|
||||
x = self.c.fetchone()
|
||||
if x is None:
|
||||
raise NoData('Username does not exist.', 104)
|
||||
|
||||
self.now = int(time.time() * 1000)
|
||||
if x[2] is not None and x[2] != '':
|
||||
# 自动封号检查
|
||||
ban_timestamp = int(x[2].split(':', 1)[1])
|
||||
if ban_timestamp > self.now:
|
||||
raise UserBan('Too many devices logging in during 24 hours.', 105, extra_data={
|
||||
'remaining_ts': ban_timestamp-self.now})
|
||||
|
||||
if x[1] == '':
|
||||
# 账号封禁
|
||||
raise UserBan('The account has been banned.', 106)
|
||||
|
||||
if x[1] != self.hash_pwd:
|
||||
raise NoAccess('Wrong password.', 104)
|
||||
|
||||
self.user_id = str(x[0])
|
||||
self.token = base64.b64encode(hashlib.sha256(
|
||||
(self.user_id + str(self.now)).encode("utf8") + urandom(8)).digest()).decode()
|
||||
|
||||
self.c.execute(
|
||||
'''select login_device from login where user_id = :user_id''', {"user_id": self.user_id})
|
||||
y = self.c.fetchall()
|
||||
if y:
|
||||
self._check_device([i[0] if i[0] else '' for i in y])
|
||||
|
||||
self.c.execute('''insert into login values(:access_token, :user_id, :time, :ip, :device_id)''', {
|
||||
'user_id': self.user_id, 'access_token': self.token, 'device_id': self.device_id, 'time': self.now, 'ip': self.ip})
|
||||
|
||||
|
||||
class UserAuth(User):
|
||||
token = None
|
||||
|
||||
def __init__(self, c) -> None:
|
||||
super().__init__()
|
||||
self.c = c
|
||||
|
||||
def token_get_id(self):
|
||||
# 用token获取id，没有考虑不同用户token相同情况，说不定会有bug
|
||||
self.c.execute('''select user_id from login where access_token = :token''', {
|
||||
'token': self.token})
|
||||
x = self.c.fetchone()
|
||||
if x is not None:
|
||||
self.user_id = x[0]
|
||||
else:
|
||||
raise NoAccess('Wrong token.', -4)
|
||||
|
||||
return self.user_id
|
||||
|
||||
def code_get_id(self):
|
||||
# 用user_code获取id
|
||||
|
||||
self.c.execute('''select user_id from user where user_code = :a''',
|
||||
{'a': self.user_code})
|
||||
x = self.c.fetchone()
|
||||
|
||||
if x is not None:
|
||||
self.user_id = x[0]
|
||||
else:
|
||||
raise NoData('No user.', 401, -3)
|
||||
|
||||
return self.user_id
|
||||
|
||||
|
||||
class UserOnline(User):
|
||||
character = None
|
||||
|
||||
def __init__(self, c, user_id=None) -> None:
|
||||
super().__init__()
|
||||
self.c = c
|
||||
self.user_id = user_id
|
||||
|
||||
def change_character(self, character_id: int, skill_sealed: bool = False):
|
||||
# 用户角色改变，包括技能封印的改变
|
||||
self.character = UserCharacter(self.c, character_id)
|
||||
self.character.select_character_uncap_condition(self)
|
||||
|
||||
self.c.execute('''update user set is_skill_sealed = :a, character_id = :b, is_char_uncapped = :c, is_char_uncapped_override = :d where user_id = :e''', {
|
||||
'a': 1 if skill_sealed else 0, 'b': self.character.character_id, 'c': self.character.is_uncapped, 'd': self.character.is_uncapped_override, 'e': self.user_id})
|
||||
|
||||
Reference in New Issue
Block a user