1、永诚报价代码优化

src/main/java/com/ydtech/aop/GlobalExceptionHandler.java

@@ -1,6 +1,7 @@
 package com.ydtech.aop;
 
 import cn.dev33.satoken.exception.NotLoginException;
+import cn.dev33.satoken.exception.NotPermissionException;
 import com.ydtech.aop.exception.DescribeException;
 import com.ydtech.aop.exception.ErrorInfo;
 import com.ydtech.core.page.HttpResult;
@@ -86,6 +87,15 @@ public class GlobalExceptionHandler {
         return HttpResult.error(HttpStatus.SC_UNAUTHORIZED,"未登录状态，无法访问。");
     }
 
+    @ExceptionHandler(value = NotPermissionException.class)
+    @ResponseBody
+    public HttpResult notPermissionException(NotPermissionException e) {
+//        e.printStackTrace();
+        return HttpResult.error(HttpStatus.SC_FORBIDDEN,"未获得权限，无法访问。");
+    }
+
+
+
 
 }
 

src/main/java/com/ydtech/components/StpInterfaceImpl.java

@@ -0,0 +1,58 @@
+package com.ydtech.components;
+
+import cn.dev33.satoken.stp.StpInterface;
+import cn.dev33.satoken.stp.StpUtil;
+import com.ydtech.modules.admin.model.SysUser;
+import com.ydtech.modules.admin.service.SysUserService;
+import org.springframework.stereotype.Component;
+
+import javax.annotation.Resource;
+import java.io.Serializable;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Set;
+import java.util.stream.Collectors;
+
+/**
+ * sa-token
+ * 自定义权限加载接口实现类
+ */
+@Component
+public class StpInterfaceImpl implements StpInterface {
+
+    @Resource
+    private SysUserService sysUserService;
+
+    /**
+     * 返回一个账号所拥有的权限码集合
+     */
+    @Override
+    public List<String> getPermissionList(Object loginId, String loginType) {
+
+        SysUser sysUser = sysUserService.getById(loginId.toString());
+        Set<String> permissionsSet =  sysUserService.findPermissions(sysUser);
+
+        // 本 list 仅做模拟，实际项目中要根据具体业务逻辑来查询权限
+        List<String> list = permissionsSet.stream().collect(Collectors.toList());
+//        list.add("101");
+//        list.add("user.add");
+//        list.add("user.update");
+//        list.add("user.get");
+//        // list.add("user.delete");
+//        list.add("art.*");
+        return list;
+    }
+
+    /**
+     * 返回一个账号所拥有的角色标识集合 (权限与角色可分开校验)
+     */
+    @Override
+    public List<String> getRoleList(Object loginId, String loginType) {
+        // 本 list 仅做模拟，实际项目中要根据具体业务逻辑来查询角色
+        List<String> list = new ArrayList<String>();
+//        list.add("admin");
+//        list.add("super-admin");
+        return list;
+    }
+
+}

src/main/java/com/ydtech/modules/admin/controller/SysUserController.java

@@ -1,6 +1,7 @@
 package com.ydtech.modules.admin.controller;
 
 
+import cn.dev33.satoken.annotation.SaCheckPermission;
 import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
 import com.baomidou.mybatisplus.core.conditions.update.LambdaUpdateWrapper;
 import com.baomidou.mybatisplus.core.metadata.IPage;
@@ -720,6 +721,7 @@ public class SysUserController extends BaseController {
     @ApiImplicitParams({
             @ApiImplicitParam(name = "userId", value = "用户信息", required = true, dataType = "String")
     })
+    @SaCheckPermission("sys:menu:add")
     public HttpResult findUserInfo(@PathVariable String userId) {
         return HttpResult.ok(sysUserInfoService.getById(userId));
     }

src/main/java/com/ydtech/modules/ins/service/impl/InsAlltrustApiServiceImpl.java

@@ -292,15 +292,11 @@ public class InsAlltrustApiServiceImpl implements InsAlltrustApiService {
         // 获取协议配置信息
         YcConfigureParameters ycConfigureParameters = gainYcConfigParams(quoteVo.getAgreementId());
 
+        BaseQuoteInfoVo yaQuoteInfoVo = insOrdersComponents.getQuoteInfo(quoteVo.getOrderNo());
 
+        gainVehicleModel(ycConfigureParameters, yaQuoteInfoVo.getCarInfo());
 
 
-
-
-
-
-//    public HttpResult quoteApi(BaseQuoteInfoVo yaQuoteInfoVo) {
-        BaseQuoteInfoVo yaQuoteInfoVo = insOrdersComponents.getQuoteInfo(quoteVo.getOrderNo());
         HttpResult httpResult = new HttpResult();
         ObjectMapper xmlMapper = this.gainXmlMapper();