api_user.go

/*
 * Copyright 2020 zhaoyunxing.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package dingtalk

import (
	"net/http"
	"net/url"
	"strconv"
	"time"

	"github.com/pkg/errors"
	"github.com/SyAtlantis/dingtalk/v3/constant"
	"github.com/SyAtlantis/dingtalk/v3/crypto"
	"github.com/SyAtlantis/dingtalk/v3/request"
	"github.com/SyAtlantis/dingtalk/v3/response"
)

// CreateUser 创建用户
func (ding *DingTalk) CreateUser(user *request.CreateUser) (req response.CreateUser, err error) {
	return req, ding.Request(http.MethodPost, constant.CreateUserKey, nil, user, &req)
}

// UpdateUser 更新用户信息
func (ding *DingTalk) UpdateUser(user *request.UpdateUser) (req response.Response, err error) {
	return req, ding.Request(http.MethodPost, constant.UpdateUserKey, nil, user, &req)
}

// DeleteUser 删除用户
func (ding *DingTalk) DeleteUser(userId string) (req response.Response, err error) {
	return req, ding.Request(http.MethodPost, constant.DeleteUserKey, nil, request.NewDeleteUser(userId), &req)
}

// GetUserDetail 根据userid获取用户详情
func (ding *DingTalk) GetUserDetail(user *request.UserDetail) (req response.UserDetail, err error) {
	return req, ding.Request(http.MethodPost, constant.GetUserDetailKey, nil, user, &req)
}

// GetUserIdByUnionId 根据unionid获取用户userid
func (ding *DingTalk) GetUserIdByUnionId(res *request.UnionIdGetUserId) (req response.UnionIdGetUserId, err error) {
	return req, ding.Request(http.MethodPost, constant.GetUserIdByUnionIdKey, nil, res, &req)
}

// GetUserIdByMobile 根据手机号获取userid
func (ding *DingTalk) GetUserIdByMobile(res *request.MobileGetUserId) (req response.MobileGetUserId, err error) {
	return req, ding.Request(http.MethodPost, constant.GetUserIdByMobileKey, nil, res, &req)
}

// GetOrgAdminUser 获取管理员列表
func (ding *DingTalk) GetOrgAdminUser() (req response.OrgAdminUser, err error) {
	return req, ding.Request(http.MethodPost, constant.GetOrgAdminUserKey, nil, nil, &req)
}

// GetOrgAdminScope 获取管理员通讯录权限范围
func (ding *DingTalk) GetOrgAdminScope(res *request.AdminUserScope) (req response.AdminUserScope, err error) {
	return req, ding.Request(http.MethodPost, constant.GetOrgAdminScopeKey, nil, res, &req)
}

// GetUserCanAccessApplet 获取管理员的应用管理权限
func (ding *DingTalk) GetUserCanAccessApplet(appId int, userId string) (req response.UserCanAccessApplet, err error) {
	if !ding.isv() {
		return response.UserCanAccessApplet{}, errors.New("应用必须是产品方案商所开发")
	}

	query := url.Values{}
	query.Set("appId", strconv.Itoa(appId))
	query.Set("userId", userId)

	return req, ding.Request(http.MethodGet, constant.GetUserCanAccessAppletKey, query, nil, &req)
}

// GetUserCount 获取员工人数
func (ding *DingTalk) GetUserCount(res *request.UserCount) (req response.UserCont, err error) {
	return req, ding.Request(http.MethodPost, constant.GetUserCountKey, nil, res, &req)
}

// GetInactiveUser 获取未登录钉钉的员工列表
func (ding *DingTalk) GetInactiveUser(res *request.InactiveUser) (req response.InactiveUser, err error) {
	return req, ding.Request(http.MethodPost, constant.GetInactiveUserKey, nil, res, &req)
}

// GetUserInfoByCode 通过免登码获取用户信息
func (ding *DingTalk) GetUserInfoByCode(code string) (req response.CodeGetUserInfo, err error) {
	return req, ding.Request(http.MethodPost, constant.GetUserInfoByCodeKey, nil,
		request.NewCodeGetUserInfo(code), &req)
}

// GetSSOUserInfo 获取应用管理员的身份信息
func (ding *DingTalk) GetSSOUserInfo(code string) (req response.SSOUserInfo, err error) {
	var (
		corpId = ding.corpId
		secret = ding.ssoSecret
		token  string
	)

	if len(corpId) <= 0 || len(secret) <= 0 {
		return response.SSOUserInfo{}, errors.New("corpId和SSOSecret不能为空")
	}

	if token, err = ding.GetSSOToken(corpId, secret); err != nil {
		return response.SSOUserInfo{}, err
	}

	query := url.Values{}
	query.Set("code", code)
	query.Set("access_token", token)

	return req, ding.Request(http.MethodGet, constant.GetSSOUserInfoKey, query, nil, &req)
}

// GetSnsUserInfo 根据sns临时授权码获取用户信息
// 该接口获取的用户信息仅用于扫码登录第三方网站、钉钉内免登第三方网站和使用钉钉账号登录第三方网站的场景。
func (ding *DingTalk) GetSnsUserInfo(code string) (req response.SnsUserInfo, err error) {
	timestamp := strconv.FormatInt(time.Now().UnixNano()/1e6, 10)
	sign := crypto.GetAvoidLoginSignature(timestamp, ding.secret)

	query := url.Values{}
	query.Set("accessKey", ding.key)
	query.Set("timestamp", timestamp)
	query.Set("signature", sign)

	return req, ding.Request(http.MethodPost, constant.GetSNSUserInfoKey, query, request.NewSnsUserInfo(code), &req)
}