xJourney/api_health
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ai review

Browse Source
This commit is contained in:
lik
2026-09-01 21:49:17 +08:00
parent 390c871d35
commit 98c9026485
14 changed files with 288 additions and 262 deletions
Download Patch File Download Diff File Expand all files Collapse all files
handler/escort_record.js
+36 -5
View File
@@ -5,21 +5,51 @@ class HandlerEscortRecord {
constructor() {
}
// 白名单：只允许写入 schema 定义的顶层字段（兼容 'patient.name' 等点号路径）
static RECORD_FIELDS = [
"userId", "healthProfileId", "patient", "escort",
"attendant", "hospital", "schedule", "payment", "notes", "status",
];
static pickFields(body) {
const picked = {};
for (const key of Object.keys(body || {})) {
const allowed = HandlerEscortRecord.RECORD_FIELDS.some(
(f) => key === f || key.startsWith(f + ".")
);
if (allowed) {
picked[key] = body[key];
}
}
return picked;
}
// 按条件查询记录（管理端，可查全部）
async getRecords(ctx) {
return this._listRecords(ctx, false);
}
// 查询"我的"记录：强制以登录用户身份查询，忽略 query 中的 userId
async getMyRecords(ctx) {
return this._listRecords(ctx, true);
}
async _listRecords(ctx, forceSelf) {
try {
const { page = 1, pageSize = 20, status, userId, appointmentDate } = ctx.request.query;
const effectiveUserId = forceSelf ? ctx.state.user?._id : userId;
// status解析成数组
let statusArray = null;
if (status && status.length > 0) {
statusArray = status.split(',')
}
}
const records = await DBModel.EscortRecord.findRecords({
page: parseInt(page),
pageSize: parseInt(pageSize),
status: statusArray,
userId,
userId: effectiveUserId,
appointmentDate,
});
@@ -31,7 +61,8 @@ class HandlerEscortRecord {
async getAttendantRecords(ctx) {
try {
const attendantId = ctx.state.user?._id || ctx.request.query?.attendantId;
// 只允许查询当前登录陪诊员自己的记录
const attendantId = ctx.state.user?._id;
if (!attendantId) {
return ResponseUtil.badRequest(ctx, "缺少陪诊员ID");
}
@@ -74,7 +105,7 @@ class HandlerEscortRecord {
return ResponseUtil.badRequest(ctx, "缺少患者信息");
}
const newRecord = await DBModel.EscortRecord.createRecord(record);
const newRecord = await DBModel.EscortRecord.createRecord(HandlerEscortRecord.pickFields(record));
return ResponseUtil.success(ctx, { record: newRecord }, "创建成功");
} catch (err) {
return ResponseUtil.internalError(ctx, err.message);
@@ -90,7 +121,7 @@ class HandlerEscortRecord {
return ResponseUtil.badRequest(ctx, "缺少记录ID");
}
const updatedRecord = await DBModel.EscortRecord.updateRecord(id, update);
const updatedRecord = await DBModel.EscortRecord.updateRecord(id, HandlerEscortRecord.pickFields(update));
if (!updatedRecord) {
return ResponseUtil.error(ctx, "陪诊记录不存在", null, 404);
}
handler/health_profile.js
+18 -2
View File
@@ -5,6 +5,22 @@ class HandlerHealthProfile {
constructor() {
}
// 白名单：只允许写入 schema 定义的顶层字段（兼容 'profile.name' 等点号路径）
static PROFILE_FIELDS = ["userId", "profile", "health"];
static pickFields(body) {
const picked = {};
for (const key of Object.keys(body || {})) {
const allowed = HandlerHealthProfile.PROFILE_FIELDS.some(
(f) => key === f || key.startsWith(f + ".")
);
if (allowed) {
picked[key] = body[key];
}
}
return picked;
}
async getProfiles(ctx) {
try {
const { page = 1, pageSize = 20, userId, name, mobile, sortBy } = ctx.request.query;
@@ -46,7 +62,7 @@ class HandlerHealthProfile {
try {
const body = ctx.request.body;
const newProfile = await DBModel.HealthProfile.createProfile(body);
const newProfile = await DBModel.HealthProfile.createProfile(HandlerHealthProfile.pickFields(body));
return ResponseUtil.success(ctx, { profile: newProfile }, "创建成功");
} catch (err) {
return ResponseUtil.internalError(ctx, err.message);
@@ -62,7 +78,7 @@ class HandlerHealthProfile {
return ResponseUtil.badRequest(ctx, "缺少档案ID");
}
const updatedProfile = await DBModel.HealthProfile.updateProfileById(id, update);
const updatedProfile = await DBModel.HealthProfile.updateProfileById(id, HandlerHealthProfile.pickFields(update));
if (!updatedProfile) {
return ResponseUtil.notFound(ctx, "健康档案不存在");
}
handler/org.js
-170
View File
@@ -1,170 +0,0 @@
import { DBModel } from "../models/index.js";
import ResponseUtil from "../utils/responseUtil.js";
class HandlerHospital {
constructor() {
}
async searchHospitalByName(ctx) {
try {
const { name, page = 1, pageSize = 20 } = ctx.request.query;
if (!name) {
return ResponseUtil.badRequest(ctx, "缺少搜索关键词");
}
const hospitals = await DBModel.Hospital.findByName(name, {
page: parseInt(page),
pageSize: parseInt(pageSize),
});
return ResponseUtil.success(ctx, { hospitals }, "查询成功");
} catch (err) {
return ResponseUtil.internalError(ctx, err.message);
}
}
async getHospitalsByCity(ctx) {
try {
const { city, page = 1, pageSize = 20, level, type } = ctx.request.query;
if (!city) {
return ResponseUtil.badRequest(ctx, "缺少城市参数");
}
const hospitals = await DBModel.Hospital.findByCity(city, {
page: parseInt(page),
pageSize: parseInt(pageSize),
level,
type,
});
return ResponseUtil.success(ctx, { hospitals }, "查询成功");
} catch (err) {
return ResponseUtil.internalError(ctx, err.message);
}
}
async getHospitalSelector(ctx) {
try {
const { city, level, type } = ctx.request.query;
const hospitals = await DBModel.Hospital.getHospitalSelector({
city,
level,
type,
});
return ResponseUtil.success(ctx, { hospitals }, "查询成功");
} catch (err) {
return ResponseUtil.internalError(ctx, err.message);
}
}
async getHospitalById(ctx) {
try {
const { id } = ctx.params;
if (!id) {
return ResponseUtil.badRequest(ctx, "缺少医院ID");
}
const hospital = await DBModel.Hospital.findById(id);
if (!hospital) {
return ResponseUtil.notFound(ctx, "医院不存在");
}
return ResponseUtil.success(ctx, { hospital }, "查询成功");
} catch (err) {
return ResponseUtil.internalError(ctx, err.message);
}
}
async createHospital(ctx) {
try {
const hospital = ctx.request.body;
if (!hospital.basic?.name) {
return ResponseUtil.badRequest(ctx, "缺少医院名称");
}
const newHospital = await DBModel.Hospital.createHospital(hospital);
return ResponseUtil.success(ctx, { hospital: newHospital }, "创建成功");
} catch (err) {
return ResponseUtil.internalError(ctx, err.message);
}
}
async updateHospital(ctx) {
try {
const { id } = ctx.params;
const update = ctx.request.body;
if (!id) {
return ResponseUtil.badRequest(ctx, "缺少医院ID");
}
const updatedHospital = await DBModel.Hospital.updateHospital(id, update);
if (!updatedHospital) {
return ResponseUtil.notFound(ctx, "医院不存在");
}
return ResponseUtil.success(ctx, { hospital: updatedHospital }, "更新成功");
} catch (err) {
return ResponseUtil.internalError(ctx, err.message);
}
}
async setHospitalStatus(ctx) {
try {
const { id } = ctx.params;
const { isEnabled } = ctx.request.body;
if (!id) {
return ResponseUtil.badRequest(ctx, "缺少医院ID");
}
const updatedHospital = await DBModel.Hospital.setHospitalStatus(id, isEnabled);
if (!updatedHospital) {
return ResponseUtil.notFound(ctx, "医院不存在");
}
return ResponseUtil.success(ctx, { hospital: updatedHospital }, "状态更新成功");
} catch (err) {
return ResponseUtil.internalError(ctx, err.message);
}
}
async getAllHospitals(ctx) {
try {
const { page = 1, pageSize = 20 } = ctx.request.query;
const skip = (parseInt(page) - 1) * parseInt(pageSize);
const hospitals = await DBModel.Hospital.find({})
.sort({ "service.sortOrder": 1, "basic.name": 1 })
.skip(skip)
.limit(parseInt(pageSize));
const total = await DBModel.Hospital.countDocuments({});
return ResponseUtil.success(ctx, { hospitals, total }, "查询成功");
} catch (err) {
return ResponseUtil.internalError(ctx, err.message);
}
}
async deleteHospital(ctx) {
try {
const { id } = ctx.params;
if (!id) {
return ResponseUtil.badRequest(ctx, "缺少医院ID");
}
const deletedHospital = await DBModel.Hospital.findByIdAndDelete(id);
if (!deletedHospital) {
return ResponseUtil.notFound(ctx, "医院不存在");
}
return ResponseUtil.success(ctx, null, "删除成功");
} catch (err) {
return ResponseUtil.internalError(ctx, err.message);
}
}
}
export { HandlerHospital };