From 8a038cf6f0792cfe260a94e86d954b50f068e758 Mon Sep 17 00:00:00 2001
From: 无关风月 <443237572@qq.com>
Date: 星期五, 07 二月 2025 16:55:41 +0800
Subject: [PATCH] bug修改

---
 ruoyi-service/ruoyi-order/src/main/java/com/ruoyi/order/controller/TOrderInvoiceController.java |   44 +++++++++++++++++++++++++++++++-------------
 1 files changed, 31 insertions(+), 13 deletions(-)

diff --git a/ruoyi-service/ruoyi-order/src/main/java/com/ruoyi/order/controller/TOrderInvoiceController.java b/ruoyi-service/ruoyi-order/src/main/java/com/ruoyi/order/controller/TOrderInvoiceController.java
index e3838b3..c376527 100644
--- a/ruoyi-service/ruoyi-order/src/main/java/com/ruoyi/order/controller/TOrderInvoiceController.java
+++ b/ruoyi-service/ruoyi-order/src/main/java/com/ruoyi/order/controller/TOrderInvoiceController.java
@@ -9,13 +9,13 @@
 import com.ruoyi.common.core.web.page.PageInfo;
 import com.ruoyi.common.log.annotation.Log;
 import com.ruoyi.common.log.enums.BusinessType;
+import com.ruoyi.common.security.annotation.Logical;
+import com.ruoyi.common.security.annotation.RequiresPermissions;
+import com.ruoyi.common.security.service.TokenService;
 import com.ruoyi.order.api.model.TOrderInvoice;
 import com.ruoyi.order.api.query.TOrderInvoiceQuery;
 import com.ruoyi.order.api.vo.TOrderInvoiceVO;
-import com.ruoyi.order.dto.AddOrderInvoice;
-import com.ruoyi.order.dto.GetOrderInvoiceList;
-import com.ruoyi.order.dto.MyOrderInvoiceInfo;
-import com.ruoyi.order.dto.OrderInvoiceList;
+import com.ruoyi.order.dto.*;
 import com.ruoyi.order.export.OrderInvoiceExport;
 import com.ruoyi.order.service.TOrderInvoiceService;
 import io.swagger.annotations.Api;
@@ -53,6 +53,9 @@
 	@Resource
 	private TOrderInvoiceService orderInvoiceService;
 	
+	@Resource
+	private TokenService tokenService;
+	
 	
 	
 	
@@ -62,19 +65,24 @@
 	public AjaxResult addOrderInvoice(@RequestBody AddOrderInvoice addOrderInvoice){
 		return orderInvoiceService.addOrderInvoice(addOrderInvoice);
 	}
-
+	
+	
+	@RequiresPermissions(value = {"/invoiceManagement"}, logical = Logical.OR)
 	@PostMapping("/pageList")
 	@ApiOperation(value = "查询开票分页列表", tags = {"管理后台-发票管理"})
 	public AjaxResult<PageInfo<TOrderInvoiceVO>> pageList(@RequestBody TOrderInvoiceQuery query){
 		return AjaxResult.success(orderInvoiceService.pageList(query));
 	}
 
-	@GetMapping("/uploadPdf")
+	
+	
+	@RequiresPermissions(value = {"/invoiceManagement/accept_hear_case"}, logical = Logical.OR)
+	@PostMapping("/uploadPdf")
 	@ApiOperation(value = "上传发票", tags = {"管理后台-发票管理"})
-	public AjaxResult<String> uploadPdf(@RequestParam("id") Long id,
-										@RequestParam("invoiceUrl") String invoiceUrl){
-		TOrderInvoice orderInvoice = orderInvoiceService.getById(id);
-		orderInvoice.setInvoiceUrl(invoiceUrl);
+	public AjaxResult<String> uploadPdf(@RequestBody UploadPdfDTO dto){
+		TOrderInvoice orderInvoice = orderInvoiceService.getById(dto.getId());
+		orderInvoice.setInvoiceUrl(dto.getInvoiceUrl());
+		orderInvoice.setStatus(3);
 		orderInvoiceService.updateById(orderInvoice);
 		// 发送邮箱
 		// 收件人电子邮箱,TODO 换成自己的收件箱
@@ -133,7 +141,7 @@
 
 			// 组装附件
 			MimeBodyPart filePart = new MimeBodyPart();
-			String imageUrl = invoiceUrl;
+			String imageUrl = dto.getInvoiceUrl();
 			try {
 				// 下载数据
 				URL url = new URL(imageUrl);
@@ -141,7 +149,9 @@
 				byte[] imageBytes = IOUtils.toByteArray(inputStream);
 
 				// 创建临时文件
-				File tempFile = File.createTempFile("tempImage", ".png");
+				// 截取imageUrl后缀名
+				String fileExtension = imageUrl.substring(imageUrl.lastIndexOf("."));
+				File tempFile = File.createTempFile("tempImage", fileExtension);
 				try (FileOutputStream fos = new FileOutputStream(tempFile)) {
 					fos.write(imageBytes);
 				}
@@ -172,7 +182,9 @@
 		}
 		return AjaxResult.success();
 	}
-
+	
+	
+	@RequiresPermissions(value = {"/invoiceManagement"}, logical = Logical.OR)
 	@PostMapping("/statusCount")
 	@ApiOperation(value = "查询开票状态数量", tags = {"管理后台-发票管理"})
 	public AjaxResult<Map<String,Integer>> statusCount(@RequestBody TOrderInvoiceQuery query){
@@ -182,6 +194,7 @@
 	/**
 	 * 发票管理导出
 	 */
+	@RequiresPermissions(value = {"/invoiceManagement/export"}, logical = Logical.OR)
 	@ApiOperation(value = "发票管理导出", tags = {"管理后台-发票管理"})
 	@Log(title = "发票管理导出", businessType = BusinessType.EXPORT)
 	@PutMapping("/export")
@@ -235,6 +248,11 @@
 	@GetMapping("/getMyOrderInvoiceInfo/{id}")
 	@ApiOperation(value = "获取开票记录详情", tags = {"小程序-充电发票"})
 	public AjaxResult<MyOrderInvoiceInfo> getMyOrderInvoiceInfo(@PathVariable String id){
+		TOrderInvoice orderInvoice = orderInvoiceService.getById(id);
+		Long userId = tokenService.getLoginUserApplet().getUserId();
+		if(!orderInvoice.getAppUserId().equals(userId)){
+			return AjaxResult.error("权限不足");
+		}
 		MyOrderInvoiceInfo myOrderInvoiceInfo = orderInvoiceService.getMyOrderInvoiceInfo(id);
 		return AjaxResult.success(myOrderInvoiceInfo);
 	}

--
Gitblit v1.7.1