feat: 资金冻结 P2 客服后台 API（配置/明细/风险/手动解冻）

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-26 18:55:26 +08:00
parent 6a1895e566
commit 3194a47f52
4 changed files with 500 additions and 0 deletions
--- a/jituan/views_fund_freeze.py
+++ b/jituan/views_fund_freeze.py
@@ -0,0 +1,105 @@
+"""客服后台资金冻结 API。"""
+from rest_framework.parsers import JSONParser
+from rest_framework.permissions import IsAuthenticated
+from rest_framework.response import Response
+from rest_framework.views import APIView
+
+from backend.utils import verify_kefu_permission
+from jituan.services import fund_freeze_admin as admin_svc
+
+PERM_CFG = 'djcfg001'
+PERM_LED = 'djled001'
+PERM_RISK = 'djrisk001'
+
+
+def _auth(request, perm_code: str):
+    username = (request.data.get('username') or request.data.get('phone') or '').strip()
+    if not username:
+        return None, None, Response({'code': 400, 'msg': '缺少username'})
+    kefu, permissions = verify_kefu_permission(request, username)
+    if kefu is None:
+        return None, None, permissions
+    codes = set(permissions or [])
+    user = getattr(request, 'user', None)
+    if getattr(user, 'IsSuperuser', False) or '000001' in codes:
+        return kefu, permissions, None
+    if perm_code not in codes:
+        return None, None, Response({'code': 403, 'msg': f'无权限（需要 {perm_code}）'})
+    return kefu, permissions, None
+
+
+class FundFreezeConfigView(APIView):
+    """
+    POST /jituan/houtai/fund-freeze-config
+    action: get | save
+    """
+    permission_classes = [IsAuthenticated]
+    parser_classes = [JSONParser]
+
+    def post(self, request):
+        kefu, permissions, err = _auth(request, PERM_CFG)
+        if err:
+            return err
+        action = (request.data.get('action') or 'get').strip().lower()
+        if action == 'get':
+            return Response({'code': 0, 'msg': 'ok', 'data': admin_svc.build_config_payload(request)})
+        if action == 'save':
+            operator = getattr(getattr(request, 'user', None), 'UserUID', '') or ''
+            data, msg = admin_svc.save_config(request, request.data, operator=operator)
+            if msg:
+                return Response({'code': 400, 'msg': msg})
+            return Response({'code': 0, 'msg': '已保存', 'data': data})
+        return Response({'code': 400, 'msg': '无效 action'})
+
+
+class FundFreezeLedgerView(APIView):
+    """
+    POST /jituan/houtai/fund-freeze-ledger
+    action: list | events | unfreeze
+    """
+    permission_classes = [IsAuthenticated]
+    parser_classes = [JSONParser]
+
+    def post(self, request):
+        kefu, permissions, err = _auth(request, PERM_LED)
+        if err:
+            return err
+        action = (request.data.get('action') or 'list').strip().lower()
+        if action == 'list':
+            return Response({'code': 0, 'msg': 'ok', 'data': admin_svc.list_ledgers(request, request.data)})
+        if action == 'events':
+            from jituan.services.fund_freeze_admin import _club
+            try:
+                lid = int(request.data.get('ledger_id') or 0)
+            except (TypeError, ValueError):
+                return Response({'code': 400, 'msg': 'ledger_id 无效'})
+            return Response({
+                'code': 0,
+                'msg': 'ok',
+                'data': {'list': admin_svc.list_unfreeze_events(lid, _club(request))},
+            })
+        if action == 'unfreeze':
+            operator = getattr(getattr(request, 'user', None), 'UserUID', '') or ''
+            data, msg = admin_svc.manual_unfreeze(request, request.data, operator=operator)
+            if msg:
+                return Response({'code': 400, 'msg': msg})
+            return Response({'code': 0, 'msg': '解冻成功', 'data': data})
+        return Response({'code': 400, 'msg': '无效 action'})
+
+
+class FundFreezeRiskView(APIView):
+    """
+    POST /jituan/houtai/fund-freeze-risk
+    action: list
+    """
+    permission_classes = [IsAuthenticated]
+    parser_classes = [JSONParser]
+
+    def post(self, request):
+        kefu, permissions, err = _auth(request, PERM_RISK)
+        if err:
+            return err
+        action = (request.data.get('action') or 'list').strip().lower()
+        if action == 'list':
+            return Response({'code': 0, 'msg': 'ok', 'data': admin_svc.list_risk_users(request, request.data)})
+        return Response({'code': 400, 'msg': '无效 action'})