perf: 导出account 列表需对文件进行加密 (#10366)

Co-authored-by: feng <1304903146@qq.com>

apps/common/drf/renders/base.py

@@ -1,6 +1,10 @@
 import abc
+import io
+import re
 from datetime import datetime
 
+import pyzipper
+from django.utils.translation import ugettext_lazy as _
 from rest_framework import serializers
 from rest_framework.renderers import BaseRenderer
 from rest_framework.utils import encoders, json
@@ -180,9 +184,39 @@ class BaseFileRenderer(BaseRenderer):
             self.write_column_titles(column_titles)
             self.write_rows(rows)
             self.after_render()
-            value = self.get_rendered_value()
+            value = self.compress_into_zip_file(view, request, response)
         except Exception as e:
             logger.debug(e, exc_info=True)
             value = 'Render error! ({})'.format(self.media_type).encode('utf-8')
             return value
         return value
+
+    def compress_into_zip_file(self, view, request, response):
+        value = self.get_rendered_value()
+        from accounts.models import Account
+        if str(view.model) not in (str(Account),) or self.template != 'export':
+            return value
+
+        filename_pattern = re.compile(r'filename="([^"]+)"')
+        content_disposition = response['Content-Disposition']
+        match = filename_pattern.search(content_disposition)
+        filename = match.group(1)
+        response['Content-Disposition'] = content_disposition.replace(self.format, 'zip')
+
+        contents_io = io.BytesIO()
+        secret_key = request.user.secret_key
+        if not secret_key:
+            content = _("{} - The encryption password has not been set - "
+                        "please go to personal information -> file encryption password "
+                        "to set the encryption password").format(request.user.name)
+
+            response['Content-Disposition'] = content_disposition.replace(self.format, 'txt')
+            contents_io.write(content.encode('utf-8'))
+            return contents_io.getvalue()
+
+        with pyzipper.AESZipFile(
+                contents_io, 'w', compression=pyzipper.ZIP_LZMA, encryption=pyzipper.WZ_AES
+        ) as zf:
+            zf.setpassword(secret_key.encode('utf8'))
+            zf.writestr(filename, value)
+        return contents_io.getvalue()

apps/locale/ja/LC_MESSAGES/django.po

@@ -547,6 +547,12 @@ msgstr ""
 "{} -暗号化変更タスクが完了しました: 暗号化パスワードが設定されていません-個人"
 "情報にアクセスしてください-> ファイル暗号化パスワードを設定してください"
 
+msgid ""
+"{} - The encryption password has not been set - please go to personal information -> file encryption "
+"password to set the encryption password"
+msgstr ""
+"{} - 暗号化パスワードが設定されていません-個人情報->ファイル暗号化パスワードに暗号化パスワードを設定してください"
+
 #: accounts/serializers/account/account.py:28
 msgid "Push now"
 msgstr "今すぐプッシュ"

apps/locale/zh/LC_MESSAGES/django.po

@@ -524,6 +524,13 @@ msgstr ""
 "{} - 账号备份任务已完成: 未设置加密密码 - 请前往个人信息 -> 文件加密密码中设"
 "置加密密码"
 
+msgid ""
+"{} - The encryption password has not been set - please go to personal information -> file "
+"encryption password to set the encryption password"
+msgstr ""
+"{} - 未设置加密密码 - 请前往个人信息 -> 文件加密密码中设"
+"置加密密码"
+
 #: accounts/notifications.py:33
 msgid "Notification of implementation result of encryption change plan"
 msgstr "改密计划任务结果通知"