Files
2026-07-09 16:31:30 +08:00

529 lines
20 KiB
PHP
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
<?php
header("Content-Type: application/json; charset=utf-8");
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Methods: GET,POST,OPTIONS");
header("Access-Control-Allow-Headers: Content-Type");
if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
echo json_encode(['code' => 0, 'msg' => 'ok']);
exit;
}
session_start();
$expire = 1800;
if (empty($_SESSION['user_id']) || (time() - $_SESSION['login_time']) > $expire) {
echo json_encode(['code' => 401, 'msg' => '登录失效']);
exit;
}
$loginUid = $_SESSION['user_id'];
// 工单业务库 monitor
$dbWorkHost = '10.150.117.190';
$dbWorkUser = 'root';
$dbWorkPwd = 'hp93000';
$dbWorkName = 'monitor';
$connWork = mysqli_connect($dbWorkHost, $dbWorkUser, $dbWorkPwd, $dbWorkName);
if (!$connWork) {
echo json_encode(['code' => 500, 'msg' => '工单数据库连接失败:' . mysqli_connect_error()]);
exit;
}
mysqli_set_charset($connWork, 'utf8mb4');
// 配置库 alert_mail_stat(告警、通知配置统一此处)
$dbConfHost = "10.150.117.190";
$dbConfUser = "root";
$dbConfPwd = "hp93000";
$dbConfName = "alert_mail_stat";
$connConf = mysqli_connect($dbConfHost, $dbConfUser, $dbConfPwd, $dbConfName);
if(!$connConf){
echo json_encode(['code' => 500, 'msg' => '配置库连接失败']);
exit;
}
mysqli_set_charset($connConf, "utf8mb4");
// 获取当前用户角色权限
$isAdmin = 0;
$permList = "";
$roleId = 0;
$roleSql = "SELECT r.is_admin, r.perm_list, u.role_id FROM sys_user u LEFT JOIN sys_role r ON u.role_id=r.id WHERE u.uid = ?";
$stmtRole = mysqli_prepare($connWork, $roleSql);
mysqli_stmt_bind_param($stmtRole, 's', $loginUid);
mysqli_stmt_execute($stmtRole);
$roleRes = mysqli_stmt_get_result($stmtRole);
$roleRow = $roleRes ? mysqli_fetch_assoc($roleRes) : [];
if ($roleRow) {
$isAdmin = intval($roleRow['is_admin']);
$permList = $roleRow['perm_list'];
$roleId = intval($roleRow['role_id'] ?? 0);
}
// 读取当前角色页面权限列表(用于分发工单权限判断)
$allowPages = [];
if ($roleId > 0) {
$permSql = "SELECT page_key FROM sys_role_permission WHERE role_id = ?";
$stmtPerm = mysqli_prepare($connWork, $permSql);
mysqli_stmt_bind_param($stmtPerm, 'i', $roleId);
mysqli_stmt_execute($stmtPerm);
$pRes = mysqli_stmt_get_result($stmtPerm);
while ($p = mysqli_fetch_assoc($pRes)) {
$allowPages[] = $p['page_key'];
}
}
$action = $_REQUEST['action'] ?? '';
$post = json_decode(file_get_contents("php://input"), true) ?: [];
// ===================== 工单列表查询 =====================
if ($action === "get_list") {
$page = intval($_GET['page'] ?? 1);
$size = intval($_GET['size'] ?? 20);
$offset = ($page - 1) * $size;
$status = trim($_GET['status'] ?? '');
$keyword = trim($_GET['keyword'] ?? '');
$where = [];
$param = [];
$paramType = '';
// 全部用户查看全部工单,不再按uid过滤
$whereSql = "1=1";
if ($status !== '') {
$where[] = "status = ?";
$param[] = $status;
$paramType .= 'i';
}
if ($keyword !== '') {
$where[] = "(title LIKE ? OR content LIKE ?)";
$param[] = "%$keyword%";
$param[] = "%$keyword%";
$paramType .= 'ss';
}
if (!empty($where)) {
$whereSql = "WHERE " . implode(" AND ", $where);
}
// 分页列表,LEFT JOIN 认领人姓名
$listSql = "SELECT wo.*, uu.real_name claim_name
FROM work_order wo
LEFT JOIN sys_user uu ON wo.claim_uid = uu.uid
$whereSql ORDER BY create_time DESC LIMIT ?,?";
$param[] = $offset;
$param[] = $size;
$paramType .= 'ii';
$stmtList = mysqli_prepare($connWork, $listSql);
mysqli_stmt_bind_param($stmtList, $paramType, ...$param);
mysqli_stmt_execute($stmtList);
$res = mysqli_stmt_get_result($stmtList);
$list = [];
while ($row = mysqli_fetch_assoc($res)) {
$list[] = $row;
}
// 总数统计
$countSql = "SELECT COUNT(id) total FROM work_order $whereSql";
$stmtCount = mysqli_prepare($connWork, $countSql);
array_pop($param);
array_pop($param);
$paramTypeCount = rtrim($paramType, 'ii');
if ($paramTypeCount) {
mysqli_stmt_bind_param($stmtCount, $paramTypeCount, ...$param);
}
mysqli_stmt_execute($stmtCount);
$countRow = mysqli_fetch_assoc(mysqli_stmt_get_result($stmtCount));
$total = intval($countRow['total']);
echo json_encode([
'code' => 0,
'list' => $list,
'total' => $total,
'page' => $page,
'size' => $size
], JSON_UNESCAPED_UNICODE);
exit;
}
// ===================== 根据告警ID查询关联工单 =====================
if ($action === "get_workorder_by_alertid") {
$alertId = trim($_GET['alert_id'] ?? '');
if (empty($alertId)) {
echo json_encode(['code' => 400, 'msg' => '缺少告警ID参数']);
exit;
}
$alertEsc = mysqli_real_escape_string($connWork, $alertId);
$sql = "SELECT id,title,status,assign_uid,create_time FROM work_order WHERE relate_alert_id = ? ORDER BY create_time DESC";
$stmt = mysqli_prepare($connWork, $sql);
mysqli_stmt_bind_param($stmt, 's', $alertEsc);
mysqli_stmt_execute($stmt);
$res = mysqli_stmt_get_result($stmt);
$list = [];
while ($row = mysqli_fetch_assoc($res)) {
$list[] = $row;
}
echo json_encode(['code' => 0, 'list' => $list]);
exit;
}
// ===================== 自动同步告警状态,批量更新工单为已完成 =====================
if ($action === "auto_sync_workorder_status") {
$resolveSql = "SELECT DISTINCT CONCAT(alert_name,'_',instance) as alert_id FROM alert_log WHERE alert_type=2";
$resolveRes = mysqli_query($connConf, $resolveSql);
$resolveAlertIds = [];
while ($row = mysqli_fetch_assoc($resolveRes)) {
$resolveAlertIds[] = $row['alert_id'];
}
if (empty($resolveAlertIds)) {
echo json_encode(['code' => 0, 'msg' => '暂无已恢复告警,无需更新工单', 'update_count' => 0]);
exit;
}
$inStr = implode("','", array_map(function($v) use ($connWork) {
return mysqli_real_escape_string($connWork, $v);
}, $resolveAlertIds));
$updateSql = "UPDATE work_order SET status=3,update_time=NOW() WHERE relate_alert_id IN ('$inStr') AND status IN (1,2)";
mysqli_query($connWork, $updateSql);
$updateCnt = mysqli_affected_rows($connWork);
echo json_encode([
'code' => 0,
'msg' => '工单状态自动同步完成,已恢复告警绑定工单全部置为已完成',
'update_count' => $updateCnt
], JSON_UNESCAPED_UNICODE);
exit;
}
// 1、获取实时活跃告警(alert_mail_stat.alert_firing 数据源)
if ($action === "get_firing_alert") {
$alertSql = "SELECT alert_id,alert_name,instance FROM alert_firing WHERE status='firing' ORDER BY receive_time DESC LIMIT 100";
$res = mysqli_query($connConf, $alertSql);
$list = [];
if($res instanceof mysqli_result){
while ($row = mysqli_fetch_assoc($res)) {
$list[] = $row;
}
}
echo json_encode(['code' => 0, 'list' => $list]);
exit;
}
// 2、新建工单
if ($action === "create") {
$title = trim($post['title'] ?? '');
$content = trim($post['content'] ?? '');
$assign = trim($post['assign_uid'] ?? '');
$relateAlertId = trim($post['relate_alert_id'] ?? '');
$notifyUser = trim($post['notify_user'] ?? '');
$notifyChannel = trim($post['notify_channel'] ?? '');
$status = 1;
if (!$title || !$content) {
echo json_encode(['code' => 400, 'msg' => '标题和内容不能为空']);
exit;
}
if (!empty($relateAlertId)) {
$alertEsc = mysqli_real_escape_string($connConf, $relateAlertId);
$checkResolveSql = "SELECT 1 FROM alert_log WHERE CONCAT(alert_name,'_',instance) = ? AND alert_type=2 LIMIT 1";
$stmtCheck = mysqli_prepare($connConf, $checkResolveSql);
mysqli_stmt_bind_param($stmtCheck, 's', $alertEsc);
mysqli_stmt_execute($stmtCheck);
$checkRes = mysqli_stmt_get_result($stmtCheck);
if (mysqli_num_rows($checkRes) > 0) {
$status = 3;
}
}
// 新建工单默认无认领人 claim_uid=''
$sql = "INSERT INTO work_order(title,content,create_uid,assign_uid,relate_alert_id,notify_user,notify_channel,status,is_read,claim_uid,create_time,update_time) VALUES (?,?,?,?,?,?,?,?,?, '',NOW(),NOW())";
$stmt = mysqli_prepare($connWork, $sql);
mysqli_stmt_bind_param($stmt, 'ssssssss', $title, $content, $loginUid, $assign, $relateAlertId, $notifyUser, $notifyChannel, $status);
$ok = mysqli_stmt_execute($stmt);
if (!$ok) {
echo json_encode(['code' => 500, 'msg' => '创建失败:' . mysqli_error($connWork)]);
exit;
}
$orderId = mysqli_insert_id($connWork);
sendWorkOrderNotify($connConf, $connWork, $orderId, $notifyUser, $notifyChannel);
echo json_encode(['code' => 0, 'msg' => '工单提交成功,通知已下发', 'init_status' => $status]);
exit;
}
// ========== 新增:工单认领接口 claim_work ==========
if ($action === "claim_work") {
$id = intval($post['id'] ?? 0);
$uid = trim($post['uid'] ?? '');
if ($id <= 0 || empty($uid)) {
echo json_encode(["code" => 400, "msg" => "参数错误"]);
exit;
}
// 校验工单未被认领
$chkSql = "SELECT id FROM work_order WHERE id=? AND (claim_uid IS NULL OR claim_uid = '')";
$stmtChk = mysqli_prepare($connWork, $chkSql);
mysqli_stmt_bind_param($stmtChk, 'i', $id);
mysqli_stmt_execute($stmtChk);
$chkRes = mysqli_stmt_get_result($stmtChk);
if(mysqli_num_rows($chkRes) === 0){
echo json_encode(["code" => 400, "msg" => "该工单已被他人认领,无法重复认领"]);
exit;
}
$updateSql = "UPDATE work_order SET claim_uid=?, claim_time=NOW() WHERE id=?";
$stmt = mysqli_prepare($connWork, $updateSql);
mysqli_stmt_bind_param($stmt, 'si', $uid, $id);
$ok = mysqli_stmt_execute($stmt);
if($ok){
echo json_encode(["code" => 0, "msg" => "工单认领成功,现在你可以编辑处理"]);
}else{
echo json_encode(["code" => 500, "msg" => "认领失败:".mysqli_error($connWork)]);
}
exit;
}
// 3、编辑工单(权限:管理员 或 当前用户是认领人)
if ($action === "edit") {
$id = intval($post['id'] ?? 0);
$title = trim($post['title'] ?? '');
$content = trim($post['content'] ?? '');
$assign = trim($post['assign_uid'] ?? '');
$relateAlertId = trim($post['relate_alert_id'] ?? '');
$notifyUser = trim($post['notify_user'] ?? '');
$notifyChannel = trim($post['notify_channel'] ?? '');
if ($id <= 0 || empty($title) || empty($content)) {
echo json_encode(['code' => 400, 'msg' => '参数不能为空']);
exit;
}
// 权限重写
if ($isAdmin !== 1) {
$chkSql = "SELECT id FROM work_order WHERE id=? AND claim_uid=?";
$stmtChk = mysqli_prepare($connWork, $chkSql);
mysqli_stmt_bind_param($stmtChk, 'is', $id, $loginUid);
mysqli_stmt_execute($stmtChk);
$chkRes = mysqli_stmt_get_result($stmtChk);
if (mysqli_num_rows($chkRes) === 0) {
echo json_encode(['code' => 403, 'msg' => '仅工单认领人可编辑']);
exit;
}
}
$sql = "UPDATE work_order SET title=?,content=?,assign_uid=?,relate_alert_id=?,notify_user=?,notify_channel=?,update_time=NOW() WHERE id=?";
$stmt = mysqli_prepare($connWork, $sql);
mysqli_stmt_bind_param($stmt, 'ssssssi', $title, $content, $assign, $relateAlertId, $notifyUser, $notifyChannel, $id);
mysqli_stmt_execute($stmt);
sendWorkOrderNotify($connConf, $connWork, $id, $notifyUser, $notifyChannel);
echo json_encode(['code' => 0, 'msg' => '工单保存成功,通知已更新下发']);
exit;
}
// 4、修改工单状态(权限:管理员 或 当前用户是认领人)
if ($action === "update_status") {
$id = intval($post['id'] ?? 0);
$status = intval($post['status'] ?? 1);
if ($id <= 0) {
echo json_encode(['code' => 400, 'msg' => '工单ID错误']);
exit;
}
if ($isAdmin !== 1) {
$chkSql = "SELECT id FROM work_order WHERE id=? AND claim_uid=?";
$stmtChk = mysqli_prepare($connWork, $chkSql);
mysqli_stmt_bind_param($stmtChk, 'is', $id, $loginUid);
mysqli_stmt_execute($stmtChk);
$chkRes = mysqli_stmt_get_result($stmtChk);
if (mysqli_num_rows($chkRes) === 0) {
echo json_encode(['code' => 403, 'msg' => '仅工单认领人可修改状态']);
exit;
}
}
$sql = "UPDATE work_order SET status=?,is_read=1,update_time=NOW() WHERE id=?";
$stmt = mysqli_prepare($connWork, $sql);
mysqli_stmt_bind_param($stmt, 'ii', $status, $id);
mysqli_stmt_execute($stmt);
echo json_encode(['code' => 0, 'msg' => '状态更新成功']);
exit;
}
// 5、管理员/拥有system_manage权限角色 分发工单
if ($action === "assign") {
if ($isAdmin !== 1 && !in_array("system_manage", $allowPages)) {
echo json_encode(['code' => 403, 'msg' => '无工单分发权限,请联系管理员']);
exit;
}
$id = intval($post['id'] ?? 0);
$assignUid = trim($post['assign_uid'] ?? '');
$sql = "UPDATE work_order SET assign_uid=?,is_read=0,update_time=NOW() WHERE id=?";
$stmt = mysqli_prepare($connWork, $sql);
mysqli_stmt_bind_param($stmt, 'si', $assignUid, $id);
mysqli_stmt_execute($stmt);
echo json_encode(['code' => 0, 'msg' => '工单分发成功']);
exit;
}
// 一键标记当前用户全部待处理工单为已读
if ($action === 'mark_all_read') {
$uid = $post['uid'] ?? '';
$sql = "UPDATE work_order SET is_read=1 WHERE assign_uid=? AND status=1";
$stmt = mysqli_prepare($connWork, $sql);
mysqli_stmt_bind_param($stmt, "s", $uid);
mysqli_stmt_execute($stmt);
echo json_encode(['code' => 0, 'msg' => '已全部标记为已读']);
exit;
}
// 语言切换
if ($action === 'save_lang') {
$lang = $post['lang'] ?? 'zh';
$sql = "UPDATE sys_config SET v=? WHERE k='lang'";
$stmt = mysqli_prepare($connConf, $sql);
mysqli_stmt_bind_param($stmt, "s", $lang);
mysqli_stmt_execute($stmt);
echo json_encode(['code' => 0, 'msg' => '成功']);
exit;
}
// 同步Prometheus实时告警,自动清理恢复告警
if ($action === "sync_prom_alerts") {
$promUrl = "http://10.150.117.190:9090/api/v1/alerts";
$resp = @file_get_contents($promUrl);
if($resp === false){
echo json_encode(["code"=>500,"msg"=>"无法连接Prometheus接口"],JSON_UNESCAPED_UNICODE);
exit;
}
$promData = json_decode($resp,true);
if(!isset($promData['data']['alerts'])){
echo json_encode(["code"=>500,"msg"=>"Prometheus返回数据异常"],JSON_UNESCAPED_UNICODE);
exit;
}
mysqli_query($connConf,"UPDATE alert_firing SET status='resolved'");
$alerts = $promData['data']['alerts'] ?? [];
foreach($alerts as $item){
$alertName = $item['labels']['alertname'] ?? "unknown";
$instance = $item['labels']['instance'] ?? "unknown";
$alertId = $alertName."_".$instance;
$sql = "INSERT INTO alert_firing(alert_id,alert_name,instance,status,receive_time) VALUES (?,?,?,'firing',NOW()) ON DUPLICATE KEY UPDATE status='firing',receive_time=NOW()";
$stmt = mysqli_prepare($connConf,$sql);
mysqli_stmt_bind_param($stmt,"sss",$alertId,$alertName,$instance);
mysqli_stmt_execute($stmt);
}
$syncNum = count($alerts);
$syncWorkUrl = $_SERVER['REQUEST_SCHEME'] . "://" . $_SERVER['HTTP_HOST'] . $_SERVER['SCRIPT_NAME'] . "?action=auto_sync_workorder_status";
@file_get_contents($syncWorkUrl);
echo json_encode([
"code"=>0,
"msg"=>"Prometheus告警同步完成,已自动同步工单状态",
"active_alert_total"=>$syncNum
],JSON_UNESCAPED_UNICODE);
exit;
}
// 定时同步:告警恢复自动完工单
if($action === "sync_alert_auto_close"){
$alertApi = "./index.php?act=active_firing";
$raw = @file_get_contents($alertApi);
$activeList = json_decode($raw, true) ?: [];
$activeKeys = [];
foreach($activeList as $item){
$activeKeys[] = $item['alert_name'] . "_" . $item['instance'];
}
$sql = "SELECT id, relate_alert_id FROM work_order WHERE status IN(1,2) AND relate_alert_id <> ''";
$res = mysqli_query($connWork, $sql);
while($row = mysqli_fetch_assoc($res)){
if(!in_array($row['relate_alert_id'], $activeKeys)){
$updateSql = "UPDATE work_order SET status=3, update_time=NOW() WHERE id = ".(int)$row['id'];
mysqli_query($connWork, $updateSql);
}
}
echo json_encode(['code'=>0, 'msg'=>'同步完成']);
exit;
}
// ==================== 全局通知统一函数 ====================
function sendWorkOrderNotify($connConf, $connWork, $orderId, $notifyUserStr, $channelStr)
{
if (empty($notifyUserStr) || empty($channelStr)) return;
$userArr = explode(",", $notifyUserStr);
$channelArr = explode(",", $channelStr);
$cfgRes = mysqli_query($connConf, "SELECT * FROM sys_smtp_config WHERE id=1");
$notifyCfg = $cfgRes ? mysqli_fetch_assoc($cfgRes) : [];
if(empty($notifyCfg)) return;
$orderRes = mysqli_query($connWork, "SELECT * FROM work_order WHERE id=$orderId");
$order = $orderRes ? mysqli_fetch_assoc($orderRes) : [];
$title = $order['title'];
$content = $order['content'];
$relateId = $order['relate_alert_id'] ?: "";
$msgText = "【运维工单通知】\n工单ID$orderId\n关联告警:$relateId\n标题:$title\n详情:$content";
foreach ($channelArr as $ch) {
$ch = trim($ch);
switch ($ch) {
case "mail":
sendMailNotify($notifyCfg, $connWork, $userArr, $title, $content, $relateId, $orderId);
break;
case "dingtalk":
sendDingNotify($notifyCfg, $msgText);
break;
case "wecom":
sendWecomNotify($notifyCfg, $msgText);
break;
}
}
}
// 邮件发送
function sendMailNotify($smtp, $connWork, $uidList, $title, $content, $relateId, $orderId)
{
if (empty($smtp['smtp_host']) || empty($smtp['smtp_account'])) return;
$emailList = [];
foreach ($uidList as $uid) {
$uid = trim($uid);
if (empty($uid)) continue;
$res = mysqli_query($connWork, "SELECT email FROM sys_user WHERE uid='$uid'");
$u = mysqli_fetch_assoc($res);
if (!empty($u['email'])) $emailList[] = $u['email'];
}
if (empty($emailList)) return;
$to = implode(",", array_unique($emailList));
$subject = "【工单通知】#$orderId $title";
$body = "<h3>工单 #$orderId</h3>
<p>关联告警ID$relateId</p>
<p>标题:$title</p>
<pre style='background:#f5f5f5;padding:10px'>$content</pre>";
}
// 钉钉机器人推送
function sendDingNotify($cfg, $text)
{
$webhook = $cfg['ding_webhook'] ?? '';
$secret = $cfg['ding_secret'] ?? '';
if(empty($webhook)) return;
$data = json_encode([
"msgtype" => "text",
"text" => ["content" => $text]
]);
$opts = ["http" => ["method" => "POST", "header" => "Content-Type:application/json", "content" => $data]];
file_get_contents($webhook, false, stream_context_create($opts));
}
// 企业微信机器人推送
function sendWecomNotify($cfg, $text)
{
$webhook = $cfg['wecom_webhook'] ?? '';
if(empty($webhook)) return;
$data = json_encode([
"msgtype" => "text",
"text" => ["content" => $text]
]);
$opts = ["http" => ["method" => "POST", "header" => "Content-Type:application/json", "content" => $data]];
file_get_contents($webhook, false, stream_context_create($opts));
}
// 无匹配动作
echo json_encode(['code' => 400, 'msg' => '无效请求动作']);
mysqli_close($connWork);
mysqli_close($connConf);
exit;
?>