ai-agent-admin/backend-fastapi/core/wecom_sync/api.py

#!/usr/bin/env python
# -*- coding: utf-8 -*-
"""
企业微信同步 API - 组织架构与用户同步管理接口
"""
import asyncio
import logging

from fastapi import APIRouter, Depends, HTTPException, Query, Request
from fastapi.responses import PlainTextResponse
from sqlalchemy.ext.asyncio import AsyncSession

from app.base_schema import ResponseModel
from app.database import get_db
from core.wecom_sync.schema import (
    DeptTreeRequest,
    TestConnectionRequest,
    WecomSyncConfigUpdate,
)
from core.wecom_sync.service import WecomSyncService

logger = logging.getLogger(__name__)

router = APIRouter(prefix="/wecom-sync", tags=["企业微信组织同步"])


@router.post("/test-connection", response_model=ResponseModel, summary="连接测试")
async def test_connection(data: TestConnectionRequest):
    try:
        result = await WecomSyncService.test_connection(
            corp_id=data.corp_id,
            corp_secret=data.corp_secret,
        )
        return ResponseModel(data=result, message="连接成功")
    except Exception as e:
        raise HTTPException(status_code=400, detail=f"连接失败: {str(e)}")


@router.get("/config", summary="获取同步配置")
async def get_config():
    from core.system_config.service import SystemConfigService
    return await SystemConfigService.get_group_config("sync_wecom", mask_secrets=True)


@router.put("/config", response_model=ResponseModel, summary="保存同步配置")
async def update_config(
    data: WecomSyncConfigUpdate,
    db: AsyncSession = Depends(get_db),
):
    from core.system_config.service import SystemConfigService
    configs = {k: v for k, v in data.model_dump().items() if v is not None}
    updated = await SystemConfigService.update_group_config(db, "sync_wecom", configs)
    return ResponseModel(data=updated, message="保存成功")


@router.post("/sync/dept", response_model=ResponseModel, summary="同步组织架构")
async def sync_departments(db: AsyncSession = Depends(get_db)):
    try:
        result = await WecomSyncService.sync_departments(db)
        return ResponseModel(data=result, message="组织架构同步完成")
    except ValueError as e:
        raise HTTPException(status_code=400, detail=str(e))
    except Exception as e:
        logger.error(f"部门同步失败: {e}")
        raise HTTPException(status_code=500, detail=f"同步失败: {str(e)}")


@router.post("/sync/user", response_model=ResponseModel, summary="同步用户")
async def sync_users(db: AsyncSession = Depends(get_db)):
    try:
        result = await WecomSyncService.sync_users(db)
        return ResponseModel(data=result, message="用户同步完成")
    except ValueError as e:
        raise HTTPException(status_code=400, detail=str(e))
    except Exception as e:
        logger.error(f"用户同步失败: {e}")
        raise HTTPException(status_code=500, detail=f"同步失败: {str(e)}")


@router.get("/stats", summary="获取同步统计")
async def get_sync_stats(db: AsyncSession = Depends(get_db)):
    stats = await WecomSyncService.get_sync_stats(db)
    return stats


@router.post("/dept-tree", summary="获取企业微信部门树")
async def get_dept_tree(data: DeptTreeRequest):
    try:
        tree = await WecomSyncService.get_wecom_dept_tree(
            corp_id=data.corp_id,
            corp_secret=data.corp_secret,
        )
        return tree
    except Exception as e:
        raise HTTPException(status_code=400, detail=f"获取部门树失败: {str(e)}")


# ==================== 回调相关接口 ====================


@router.get("/callback", summary="企业微信回调URL验证")
async def wecom_callback_verify(
    msg_signature: str = Query(...),
    timestamp: str = Query(...),
    nonce: str = Query(...),
    echostr: str = Query(...),
):
    """
    企业微信在配置回调URL时会发送 GET 请求验证URL有效性
    需要解密 echostr 并返回明文
    """
    from core.wecom_sync.callback_handler import WecomCallbackHandler

    try:
        crypto = await WecomCallbackHandler.get_crypto()
    except ValueError as e:
        logger.error(f"回调配置不完整: {e}")
        raise HTTPException(status_code=500, detail="回调配置不完整")

    try:
        reply_echostr = crypto.handle_verify(msg_signature, timestamp, nonce, echostr)
    except ValueError:
        raise HTTPException(status_code=403, detail="签名验证失败")

    return PlainTextResponse(content=reply_echostr)


@router.post("/callback", summary="企业微信事件回调")
async def wecom_callback(
    request: Request,
    msg_signature: str = Query(...),
    timestamp: str = Query(...),
    nonce: str = Query(...),
):
    """
    企业微信事件订阅回调端点（无需认证）

    企业微信通过 POST XML 推送事件变更
    """
    from core.wecom_sync.callback_handler import WecomCallbackHandler
    from xml.etree import ElementTree

    try:
        crypto = await WecomCallbackHandler.get_crypto()
    except ValueError as e:
        logger.error(f"回调配置不完整: {e}")
        raise HTTPException(status_code=500, detail="回调配置不完整")

    body = await request.body()
    post_data = body.decode("utf-8")

    try:
        plaintext = crypto.handle_callback(msg_signature, timestamp, nonce, post_data)
    except ValueError:
        raise HTTPException(status_code=403, detail="签名验证失败")

    # 解析 XML 事件内容
    root = ElementTree.fromstring(plaintext)
    event_type = ""
    change_type = ""

    event_node = root.find("Event")
    if event_node is not None:
        event_type = event_node.text or ""

    change_type_node = root.find("ChangeType")
    if change_type_node is not None:
        change_type = change_type_node.text or ""

    # 企业微信通讯录变更事件的 Event 为 "change_contact"，具体类型在 ChangeType 中
    actual_event = change_type if event_type == "change_contact" else event_type
    logger.info(f"收到企业微信回调事件: Event={event_type}, ChangeType={change_type}")

    # 提取事件数据
    event_data = {}
    for child in root:
        event_data[child.tag] = child.text

    if actual_event:
        asyncio.create_task(_safe_handle_event(actual_event, event_data))

    return PlainTextResponse(content=crypto.generate_success_response(), media_type="application/xml")


async def _safe_handle_event(event_type: str, event_data: dict) -> None:
    from core.wecom_sync.callback_handler import WecomCallbackHandler
    try:
        await WecomCallbackHandler.handle_event(event_type, event_data)
    except Exception as e:
        logger.error(f"处理回调事件失败 [{event_type}]: {e}", exc_info=True)


@router.get("/callback/status", response_model=ResponseModel, summary="查询回调状态")
async def get_callback_status():
    try:
        result = await WecomSyncService.get_callback_status()
        return ResponseModel(data=result, message="查询成功")
    except Exception as e:
        return ResponseModel(data={"registered": False}, message="查询失败")