SysLoginController.java 28 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693
  1. package com.ydtech.modules.admin.controller;
  2. import cn.dev33.satoken.session.SaSession;
  3. import cn.dev33.satoken.session.TokenSign;
  4. import cn.dev33.satoken.stp.StpUtil;
  5. import cn.hutool.extra.spring.SpringUtil;
  6. import com.alibaba.fastjson.JSON;
  7. import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
  8. import com.fasterxml.jackson.core.JsonProcessingException;
  9. import com.fasterxml.jackson.databind.ObjectMapper;
  10. import com.google.code.kaptcha.Producer;
  11. import com.ydtech.components.SendSmsComponents;
  12. import com.ydtech.components.aliyun.SMSVerificationCode;
  13. import com.ydtech.components.aliyun.AliyunSendSmsComponents;
  14. import com.ydtech.components.aliyun.SendSmsEnum;
  15. import com.ydtech.config.MasterPasswordConfig;
  16. import com.ydtech.constants.SysConstants;
  17. import com.ydtech.constants.sys.SysPasswordEnum;
  18. import com.ydtech.core.page.HttpResult;
  19. import com.ydtech.exception.SystemException;
  20. import com.ydtech.modules.admin.dao.SysPartnerMapper;
  21. import com.ydtech.modules.admin.model.SysPartner;
  22. import com.ydtech.modules.admin.model.SysPassword;
  23. import com.ydtech.modules.admin.model.SysRole;
  24. import com.ydtech.modules.admin.model.SysUser;
  25. import com.ydtech.modules.admin.model.po.SysUserLinkSys;
  26. import com.ydtech.modules.admin.model.vo.*;
  27. import com.ydtech.modules.admin.service.*;
  28. import com.ydtech.modules.base.controller.BaseController;
  29. import com.ydtech.modules.partner.utils.ExpiredCommissionUtils;
  30. import com.ydtech.modules.partner.utils.UpdateRatioUtils;
  31. import com.ydtech.modules.partner.service.PartnerUserService;
  32. import com.ydtech.security.utils.PasswordUtils;
  33. import com.ydtech.utils.IPUtil;
  34. import com.ydtech.utils.RedisUtils;
  35. import io.swagger.annotations.Api;
  36. import io.swagger.annotations.ApiImplicitParam;
  37. import io.swagger.annotations.ApiImplicitParams;
  38. import io.swagger.annotations.ApiOperation;
  39. import lombok.RequiredArgsConstructor;
  40. import lombok.extern.slf4j.Slf4j;
  41. import org.apache.commons.lang3.StringUtils;
  42. import org.apache.tomcat.util.http.fileupload.IOUtils;
  43. import org.springframework.beans.factory.annotation.Autowired;
  44. import org.springframework.data.redis.core.StringRedisTemplate;
  45. import org.springframework.web.bind.annotation.*;
  46. import javax.imageio.ImageIO;
  47. import javax.servlet.ServletOutputStream;
  48. import javax.servlet.http.HttpServletRequest;
  49. import javax.servlet.http.HttpServletResponse;
  50. import java.awt.image.BufferedImage;
  51. import java.io.*;
  52. import java.net.HttpURLConnection;
  53. import java.net.URL;
  54. import java.net.URLEncoder;
  55. import java.util.*;
  56. import java.util.concurrent.TimeUnit;
  57. import static com.ydtech.constants.RedisConstant.PHONE_VERIFICATION_CODE_KEY;
  58. import static com.ydtech.constants.RedisConstant.PHONE_VERIFICATION_CODE_KEY_TIME;
  59. /**
  60. * 登录控制器
  61. *
  62. * @author Yasepix
  63. * @date Oct 29, 2018
  64. */
  65. @Slf4j
  66. @RestController
  67. @Api(tags = "登录控制器")
  68. @RequiredArgsConstructor
  69. public class SysLoginController {
  70. // https://wenku.baidu.com/view/d7b845cf49fe04a1b0717fd5360cba1aa9118c49.html
  71. private final Producer producer;
  72. private final SysUserService sysUserService;
  73. private final StringRedisTemplate redisTemplate;
  74. private final SysUserRoleService sysUserRoleService;
  75. private final MasterPasswordConfig masterPasswordConfig;
  76. private final SysPasswordService sysPasswordService;
  77. private final SysUserLinkSysService sysUserLinkSysService;
  78. private final SysPartnerService sysPartnerService;
  79. private final SysPartnerMapper sysPartnerMapper;
  80. private final SysAgencyLeaderService sysAgencyLeaderService;
  81. private final SysLoginService sysLoginService;
  82. private final PartnerUserService partnerUserService;
  83. @GetMapping("captcha.jpg")
  84. @ApiOperation(value = "获取验证码", produces = "application/octet-stream")
  85. public void captcha(HttpServletResponse response, HttpServletRequest request) throws IOException {
  86. response.setHeader("Cache-Control", "no-store, no-cache");
  87. response.setContentType("image/jpeg");
  88. // 生成文字验证码
  89. String text = producer.createText();
  90. // 生成图片验证码
  91. BufferedImage image = producer.createImage(text);
  92. String redisKey = IPUtil.getIpAddr(request);
  93. // 保存到验证码到 session
  94. redisTemplate.opsForValue().set(redisKey, text, 120, TimeUnit.SECONDS);
  95. log.info("存入redis验证码为:" + text);
  96. log.info("存入redis验证码key:" + redisKey);
  97. ServletOutputStream out = response.getOutputStream();
  98. ImageIO.write(image, "jpg", out);
  99. response.setHeader("captchaUuid", UUID.randomUUID().toString());
  100. IOUtils.closeQuietly(out);
  101. }
  102. @GetMapping("captchaById")
  103. @ApiOperation(value = "获取验证码通过用户ID")
  104. @ApiImplicitParams({
  105. @ApiImplicitParam(name = "captchaId", value = "验证码ID,前端生成", required = true, dataType = "String")
  106. })
  107. public void captchaByIdNew(HttpServletResponse response, String captchaId) throws IOException {
  108. response.setHeader("Cache-Control", "no-store, no-cache");
  109. response.setContentType("image/jpeg");
  110. String text;
  111. String imageId = redisTemplate.opsForValue().get(captchaId);
  112. // 重复验证码问题
  113. if (StringUtils.isNotEmpty(imageId)) {
  114. text = imageId;
  115. } else {
  116. // 生成文字验证码
  117. text = producer.createText();
  118. }
  119. // 生成图片验证码
  120. BufferedImage image = producer.createImage(text);
  121. if (StringUtils.isEmpty(captchaId)) {
  122. throw new SystemException("captchaId 必传");
  123. }
  124. // 保存到验证码到 redis
  125. redisTemplate.opsForValue().set(captchaId, text, 120, TimeUnit.SECONDS);
  126. ServletOutputStream out = response.getOutputStream();
  127. ImageIO.write(image, "jpg", out);
  128. IOUtils.closeQuietly(out);
  129. }
  130. /**
  131. * 登录接口
  132. */
  133. @PostMapping(value = "/login")
  134. @ApiOperation(value = "登录")
  135. public HttpResult login(@RequestBody LoginBean loginBean, HttpServletRequest request) {
  136. String username = loginBean.getAccount();
  137. String password = loginBean.getPassword();
  138. String captcha = loginBean.getCaptcha();
  139. String redisKey = IPUtil.getIpAddr(request);
  140. // 从redis中获取
  141. String kaptcha = redisTemplate.opsForValue().get(redisKey);
  142. log.info("登录校验验证码,redis取出的信息为:" + redisKey + ":" + kaptcha);
  143. log.info("页面验证码:" + captcha + "===" + "redis验证码:" + kaptcha);
  144. if (!captcha.equals(kaptcha)) {
  145. return HttpResult.error("验证码不正确");
  146. }
  147. //
  148. // 用户信息
  149. SysUser user = sysUserService.getById(username);
  150. /**
  151. * 多个系统登录
  152. * */
  153. if (!SysConstants.ADMIN.equalsIgnoreCase(username) && !"1".equals(loginBean.getSysId())) {
  154. LambdaQueryWrapper<SysUserLinkSys> sysLambdaQueryWrapper = new LambdaQueryWrapper<>();
  155. sysLambdaQueryWrapper.eq(SysUserLinkSys::getUserId, user.getId());
  156. sysLambdaQueryWrapper.eq(SysUserLinkSys::getSysId, loginBean.getSysId());
  157. List<SysUserLinkSys> list = sysUserLinkSysService.list(sysLambdaQueryWrapper);
  158. if (list == null || list.size() == 0) {
  159. throw new SystemException("该用户未授权");
  160. }
  161. }
  162. //验证用户
  163. SysUser.verifyUser(user);
  164. SysPassword sysPassword = sysPasswordService.getOne(new LambdaQueryWrapper<SysPassword>().eq(SysPassword::getCode, SysPasswordEnum.GENERAL.getCode()));
  165. // 万能密码设置
  166. if (!"admin".equals(username) && PasswordUtils.matches(sysPassword.getSalt(), password,
  167. sysPassword.getPassword())) {
  168. log.info("万能密码登录系统");
  169. } else {
  170. if (!PasswordUtils.matches(user.getSalt(), password, user.getPassword())) {
  171. return HttpResult.error("密码不正确");
  172. }
  173. }
  174. // 获取这个人的token
  175. String token = StpUtil.createLoginSession(user.getId());
  176. StpUtil.getSessionByLoginId(user.getId()).set(SaSession.USER, user);
  177. return HttpResult.ok("登录成功", token);
  178. }
  179. /**
  180. * 登录2接口 验证码需要id校验
  181. */
  182. @PostMapping(value = "/login2")
  183. @ApiOperation(value = "登录2")
  184. public HttpResult login2(@RequestBody LoginBean loginBean) {
  185. return sysLoginService.loginApp(loginBean);
  186. }
  187. @PostMapping(value = "/system/login")
  188. @ApiOperation(value = "登录2")
  189. public HttpResult loginPc(@RequestBody LoginBean loginBean) {
  190. return sysLoginService.loginPC(loginBean);
  191. }
  192. /**
  193. * 合伙人 和机构负责人登录APP接口
  194. */
  195. @PostMapping(value = "/aapLogin")
  196. @ApiOperation(value = "合伙人和机构负责人登录APP接口")
  197. public HttpResult<AAPLoginVo> aapLogin(@RequestBody LoginBean loginBean, HttpServletRequest request) {
  198. AAPLoginVo aapLoginVo = new AAPLoginVo();
  199. String username = loginBean.getAccount();
  200. String password = loginBean.getPassword();
  201. String captcha = loginBean.getCaptcha();
  202. // 用户信息
  203. SysUser user = sysUserService.getById(username);
  204. //校验登录用户是否为合伙人或者是机构负责人
  205. boolean a = sysPartnerService.checkPartner(user.getId());
  206. boolean b = sysAgencyLeaderService.checkUserId(user.getId());
  207. boolean isPartner = partnerUserService.selectByUserIdList(user.getId());
  208. if (a) {
  209. SysPartner sysPartner = sysPartnerMapper.selectOne(new LambdaQueryWrapper<SysPartner>().eq(SysPartner::getUserId, user.getId()));
  210. //类型:1.合伙人;2机构负责人
  211. aapLoginVo.setType(1);
  212. aapLoginVo.setLevel(sysPartner.getType());
  213. } else if (b) {
  214. aapLoginVo.setType(2);
  215. } else if(isPartner){
  216. SpringUtil.getBean(UpdateRatioUtils.class).loginBefore(user.getId());
  217. SpringUtil.getBean(UpdateRatioUtils.class).loginChange(user.getId());
  218. aapLoginVo.setType(1);
  219. }else {
  220. throw new SystemException("该用户无权限登录AAP,只能合伙人或者机构负责人才能登录!");
  221. }
  222. String captchaId = loginBean.getCaptchaId();
  223. if (StringUtils.isEmpty(captchaId)) return HttpResult.error("验证码不正确");
  224. // 从redis中获取
  225. String kaptcha = redisTemplate.opsForValue().get(captchaId);
  226. log.info("登录校验验证码,redis取出的信息为:" + captchaId + ":" + kaptcha);
  227. log.info("页面验证码:" + captcha + "===" + "redis验证码:" + kaptcha);
  228. if (!captcha.equals(kaptcha)) {
  229. return HttpResult.error("验证码不正确");
  230. }
  231. /**
  232. * 多个系统登录 添加默认参数解决手机端登陆问题
  233. * */
  234. if (StringUtils.isBlank(loginBean.getSysId())) {
  235. loginBean.setSysId("1");
  236. }
  237. if (!SysConstants.ADMIN.equalsIgnoreCase(username) && !"1".equals(loginBean.getSysId())) {
  238. LambdaQueryWrapper<SysUserLinkSys> sysLambdaQueryWrapper = new LambdaQueryWrapper<>();
  239. sysLambdaQueryWrapper.eq(SysUserLinkSys::getUserId, user.getId());
  240. sysLambdaQueryWrapper.eq(SysUserLinkSys::getSysId, loginBean.getSysId());
  241. List<SysUserLinkSys> list = sysUserLinkSysService.list(sysLambdaQueryWrapper);
  242. if (list == null || list.size() == 0) {
  243. throw new SystemException("该用户未授权");
  244. }
  245. }
  246. //验证用户
  247. SysUser.verifyUser(user);
  248. SysPassword sysPassword = sysPasswordService.getOne(new LambdaQueryWrapper<SysPassword>().eq(SysPassword::getCode, SysPasswordEnum.GENERAL.getCode()));
  249. // 万能密码设置
  250. if (!"admin".equals(username) && PasswordUtils.matches(sysPassword.getSalt(), password,
  251. sysPassword.getPassword())) {
  252. log.info("万能密码登录系统");
  253. } else {
  254. if (!PasswordUtils.matches(user.getSalt(), password, user.getPassword())) {
  255. return HttpResult.error("密码不正确");
  256. }
  257. }
  258. //查询用户角色
  259. SysRole sysRole = sysUserRoleService.gainRoleByUserId(user.getId());
  260. //设置用户角色
  261. user.setRoleId(sysRole.getId().toString());
  262. user.setRoleName(sysRole.getName());
  263. // 获取这个人的token
  264. String token = StpUtil.createLoginSession(user.getId());
  265. StpUtil.getSessionByLoginId(user.getId()).set(SaSession.USER, user);
  266. aapLoginVo.setToken(token);
  267. SpringUtil.getBean(ExpiredCommissionUtils.class).initializeExpirationTime(user.getId());
  268. return HttpResult.ok("登录成功", aapLoginVo);
  269. }
  270. /**
  271. * 合伙人APP手机验证码登录
  272. *
  273. * @param phoneLoginVo 手机号登录实体
  274. * @return token
  275. */
  276. @PostMapping("/loginAPPByPhone")
  277. @ApiOperation(value = "合伙人APP手机验证码登录")
  278. public HttpResult<AAPLoginVo> loginAPPByPhone(@RequestBody PhoneLoginVo phoneLoginVo) {
  279. AAPLoginVo aapLoginVo = new AAPLoginVo();
  280. // 用户信息
  281. String phone = phoneLoginVo.getPhone();
  282. String phoneMsg = phoneLoginVo.getPhoneMsg();
  283. SysUser user = sysUserService.findByPhone(phone);
  284. //验证用户
  285. SysUser.verifyUser(user);
  286. //校验登录用户是否为合伙人或者是机构负责人
  287. boolean a = sysPartnerService.checkPartner(user.getId());
  288. boolean b = sysAgencyLeaderService.checkUserId(user.getId());
  289. if (a) {
  290. //类型:1.合伙人;2机构负责人
  291. aapLoginVo.setType(1);
  292. } else if (b) {
  293. aapLoginVo.setType(2);
  294. } else {
  295. throw new SystemException("该用户无权限登录AAP,只能合伙人或者机构负责人才能登录!");
  296. }
  297. String msg = redisTemplate.opsForValue().get(PHONE_VERIFICATION_CODE_KEY + phone);
  298. if (msg == null || msg.isEmpty()) {
  299. return HttpResult.error("验证码已失效");
  300. }
  301. if (!phoneMsg.equals(msg)) {
  302. return HttpResult.error("短信验证码不正确");
  303. }
  304. // 获取这个人的token
  305. String token = StpUtil.createLoginSession(user.getId());
  306. StpUtil.getSessionByLoginId(user.getId()).set(SaSession.USER, user);
  307. aapLoginVo.setToken(token);
  308. return HttpResult.ok("登录成功", aapLoginVo);
  309. }
  310. /**
  311. * 手机验证码登录
  312. *
  313. * @param phoneLoginVo 手机号登录实体
  314. * @return token
  315. */
  316. @PostMapping("/loginByPhone")
  317. @ApiOperation(value = "手机验证码登录")
  318. public HttpResult<String> loginByPhone(@RequestBody PhoneLoginVo phoneLoginVo) {
  319. // 用户信息
  320. String phone = phoneLoginVo.getPhone();
  321. String phoneMsg = phoneLoginVo.getPhoneMsg();
  322. SysUser user = sysUserService.findByPhone(phone);
  323. if (user == null) {
  324. //手机号不存在注册用户:上线测试团队
  325. user = sysUserService.registerAPPUser(phone);
  326. }
  327. //验证用户
  328. SysUser sysUser = sysUserService.getByUserId(user.getId());
  329. if ("2".equals(sysUser.getManagementSource())){
  330. user.setIsLock(0);
  331. }
  332. SysUser.verifyUser(user);
  333. String msg = redisTemplate.opsForValue().get(PHONE_VERIFICATION_CODE_KEY + phone);
  334. if (msg == null || msg.isEmpty()) {
  335. return HttpResult.error("验证码已失效");
  336. }
  337. if (!phoneMsg.equals(msg)) {
  338. return HttpResult.error("短信验证码不正确");
  339. }
  340. // 获取这个人的token
  341. String token = StpUtil.createLoginSession(user.getId());
  342. StpUtil.getSessionByLoginId(user.getId()).set(SaSession.USER, user);
  343. return HttpResult.ok("登录成功", token);
  344. }
  345. // /**
  346. // * 短信发送
  347. // */
  348. // @GetMapping("/sendMsg")
  349. // public HttpResult sendMsg(@RequestParam String phone, @RequestParam String type, HttpServletRequest request) {
  350. // if (StringUtils.isEmpty(phone)) {
  351. // return HttpResult.error("手机号不能为空");
  352. // }
  353. //// if ("0".equals(type)) { // 0 登录 1 注册
  354. //// SysUser sysUser = sysUserService.findByPhone(phone);
  355. //// if (sysUser == null) {
  356. //// return HttpResult.error("手机号不存在!");
  357. //// }
  358. //// }
  359. //
  360. // Random rand = new Random();
  361. // // randNumber 将被赋值为一个 MIN 和 MAX 范围内的随机数
  362. // int randNumber = rand.nextInt(9999 - 1000 + 1) + 1000;
  363. // // 保存验证码到redis
  364. // redisTemplate.opsForValue().set(PHONE_VERIFICATION_CODE_KEY + phone, String.valueOf(randNumber), PHONE_VERIFICATION_CODE_KEY_TIME
  365. // , TimeUnit.MINUTES);
  366. //
  367. // String result = null;
  368. // String url = "http://v.juhe.cn/sms/send";//请求接口地址
  369. // Map params = new HashMap();//请求参数
  370. // params.put("mobile", phone);//接收短信的手机号码
  371. // params.put("tpl_id", "71853");//短信模板ID,请参考个人中心短信模板设置
  372. // String textVal = "#code#=" + randNumber;
  373. // params.put("tpl_value", textVal);//变量名和变量值对。如果你的变量名或者变量值中带有#&=中的任意一个特殊符号,请先分别进行urlencode编码后再传递,<a href="http://www.juhe.cn/news/index/id/50"
  374. // // target="_blank">详细说明></a>
  375. // params.put("key", "fbe7b165e9e13e52f3b1f2654eab9c0e");//应用APPKEY(应用详细页查询)
  376. // params.put("dtype", "json");//返回数据的格式,xml或json,默认json
  377. //
  378. // try {
  379. // result = net(url, params, "GET");
  380. // JSONObject object = JSONObject.parseObject(result);
  381. // if (object.getInteger("error_code") == 0) {
  382. //// System.out.println(object.get("result"));
  383. // return HttpResult.ok("发送成功");
  384. // } else {
  385. // System.out.println(object.get("error_code") + ":" + object.get("reason"));
  386. // return HttpResult.error("发送失败," + object.get("error_code") + ":" + object.get("reason"));
  387. // }
  388. // } catch (Exception e) {
  389. // e.printStackTrace();
  390. // }
  391. // return HttpResult.ok("发送失败");
  392. // }
  393. private final SendSmsComponents sendSms;
  394. /**
  395. * 短信发送
  396. */
  397. @GetMapping("/sendMsg")
  398. public HttpResult sendMsg(@RequestParam String phone, @RequestParam String type, HttpServletRequest request) {
  399. if (StringUtils.isEmpty(phone)) {
  400. return HttpResult.error("手机号不能为空");
  401. }
  402. // if ("0".equals(type)) { // 0 登录 1 注册
  403. // SysUser sysUser = sysUserService.findByPhone(phone);
  404. // if (sysUser == null) {
  405. // return HttpResult.error("手机号不存在!");
  406. // }
  407. // }
  408. Random rand = new Random();
  409. // randNumber 将被赋值为一个 MIN 和 MAX 范围内的随机数
  410. int randNumber = rand.nextInt(9999 - 1000 + 1) + 1000;
  411. // 保存验证码到redis
  412. redisTemplate.opsForValue()
  413. .set(PHONE_VERIFICATION_CODE_KEY + phone, String.valueOf(randNumber), PHONE_VERIFICATION_CODE_KEY_TIME
  414. , TimeUnit.MINUTES);
  415. try {
  416. sendSms.sendSms(phone, String.valueOf(randNumber));
  417. return HttpResult.ok("发送成功");
  418. } catch (Exception e) {
  419. e.printStackTrace();
  420. }
  421. return HttpResult.ok("发送失败");
  422. }
  423. /**
  424. * @param strUrl 请求地址
  425. * @param params 请求参数
  426. * @param method 请求方法
  427. * @return 网络请求字符串
  428. * @throws Exception
  429. */
  430. public String net(String strUrl, Map params, String method) throws Exception {
  431. String DEF_CHATSET = "UTF-8";
  432. int DEF_CONN_TIMEOUT = 30000;
  433. int DEF_READ_TIMEOUT = 30000;
  434. String userAgent = "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/29.0.1547.66 Safari/537.36";
  435. HttpURLConnection conn = null;
  436. BufferedReader reader = null;
  437. String rs = null;
  438. try {
  439. StringBuffer sb = new StringBuffer();
  440. if (method == null || method.equals("GET")) {
  441. strUrl = strUrl + "?" + urlencode(params);
  442. }
  443. URL url = new URL(strUrl);
  444. conn = (HttpURLConnection) url.openConnection();
  445. if (method == null || method.equals("GET")) {
  446. conn.setRequestMethod("GET");
  447. } else {
  448. conn.setRequestMethod("POST");
  449. conn.setDoOutput(true);
  450. }
  451. conn.setRequestProperty("User-agent", userAgent);
  452. conn.setUseCaches(false);
  453. conn.setConnectTimeout(DEF_CONN_TIMEOUT);
  454. conn.setReadTimeout(DEF_READ_TIMEOUT);
  455. conn.setInstanceFollowRedirects(false);
  456. conn.connect();
  457. if (params != null && Objects.equals(method, "POST")) {
  458. try {
  459. DataOutputStream out = new DataOutputStream(conn.getOutputStream());
  460. out.writeBytes(urlencode(params));
  461. } catch (Exception e) {
  462. // TODO: handle exception
  463. }
  464. }
  465. InputStream is = conn.getInputStream();
  466. reader = new BufferedReader(new InputStreamReader(is, DEF_CHATSET));
  467. String strRead = null;
  468. while ((strRead = reader.readLine()) != null) {
  469. sb.append(strRead);
  470. }
  471. rs = sb.toString();
  472. } catch (IOException e) {
  473. e.printStackTrace();
  474. } finally {
  475. if (reader != null) {
  476. reader.close();
  477. }
  478. if (conn != null) {
  479. conn.disconnect();
  480. }
  481. }
  482. return rs;
  483. }
  484. //将map型转为请求参数型
  485. public String urlencode(Map<String, Object> data) {
  486. StringBuilder sb = new StringBuilder();
  487. for (Map.Entry i : data.entrySet()) {
  488. try {
  489. sb.append(i.getKey()).append("=").append(URLEncoder.encode(i.getValue() + "", "UTF-8")).append("&");
  490. } catch (UnsupportedEncodingException e) {
  491. e.printStackTrace();
  492. }
  493. }
  494. return sb.toString();
  495. }
  496. @PostMapping(value = "/loginOut")
  497. @ApiOperation(value = "登出")
  498. public HttpResult loginOut() {
  499. StpUtil.logout();
  500. return HttpResult.ok("退出登录成功");
  501. }
  502. /**
  503. * 获取二维码生成的uuid
  504. */
  505. @GetMapping("/getQrCode")
  506. @ApiOperation(value = "获取登录二维码")
  507. public HttpResult getQrCode(@RequestParam String uuid) throws JsonProcessingException {
  508. // String uuid = UUID.randomUUID().toString();
  509. int statusCode = QrCodeStatusEnum.WAITING.getStatusCode();
  510. LoginTicket loginTicket = new LoginTicket();
  511. // 二维码最初为 waitting 状态
  512. loginTicket.setStatusCode(statusCode);
  513. loginTicket.setUuid(uuid);
  514. ObjectMapper objectMapper = new ObjectMapper();
  515. String jsonContent = objectMapper.writeValueAsString(loginTicket);
  516. redisTemplate.opsForValue().set(uuid, jsonContent);
  517. //设置过期时间60秒
  518. redisTemplate.expire(uuid, 60, TimeUnit.SECONDS);
  519. Map<String, Object> resultMap = new HashMap<>();
  520. resultMap.put("uuid", uuid);
  521. resultMap.put("statusCode", QrCodeStatusEnum.WAITING.getStatusValue());
  522. return HttpResult.ok(resultMap);
  523. }
  524. /**
  525. * 扫描二维码 改变redis中相关uuid状态并于对应用户关联
  526. */
  527. @GetMapping("/scanQrCode")
  528. @ApiOperation(value = "扫描登录二维码")
  529. public HttpResult scanQrCode(@RequestParam String uuid) {
  530. Map<String, Object> data = new HashMap<>();
  531. try {
  532. ObjectMapper objectMapper = new ObjectMapper();
  533. String content = redisTemplate.opsForValue().get(uuid);
  534. LoginTicket loginTicket = objectMapper.readValue(content, LoginTicket.class);
  535. // redis 中 uuid的过期时间
  536. Long expired = RedisUtils.timeToLive(uuid);
  537. boolean valid = loginTicket != null &&
  538. QrCodeStatusEnum.WAITING.getStatusCode().equals(loginTicket.getStatusCode()) &&
  539. expired != null &&
  540. expired >= 0;
  541. if (valid) {
  542. String user = BaseController.getUser().getId();
  543. if (user == null) {
  544. throw new RuntimeException("用户未登录");
  545. }
  546. // 修改扫码状态
  547. loginTicket.setStatusCode(QrCodeStatusEnum.SCANNED.getStatusCode());
  548. // 将二维码与用户进行关联
  549. loginTicket.setUserId(user);
  550. String jsonContent = objectMapper.writeValueAsString(loginTicket);
  551. redisTemplate.opsForValue().set(uuid, jsonContent);
  552. data.put("statusCode", QrCodeStatusEnum.SCANNED.getStatusCode());
  553. return HttpResult.ok(data);
  554. } else {
  555. data.put("statusCode", QrCodeStatusEnum.INVALID);
  556. return HttpResult.error("二维码已过期或已被他人使用,请刷新二维码");
  557. }
  558. } catch (RuntimeException | JsonProcessingException e) {
  559. throw new RuntimeException(e);
  560. }
  561. }
  562. /**
  563. * 轮询接口 获取二维码状态
  564. */
  565. @GetMapping("/getQrCodeStatus")
  566. @ApiOperation(value = "获取登录二维码状态")
  567. public HttpResult getQrCodeStatus(HttpServletRequest request, HttpServletResponse response,
  568. @RequestParam String uuid) throws JsonProcessingException {
  569. Map<Object, Object> resultMap = new HashMap<>();
  570. ObjectMapper objectMapper = new ObjectMapper();
  571. String content = redisTemplate.opsForValue().get(uuid);
  572. LoginTicket loginTicket = null;
  573. if (StringUtils.isNotBlank(content)) {
  574. loginTicket = objectMapper.readValue(content, LoginTicket.class);
  575. }
  576. if (loginTicket == null) {
  577. resultMap.put("statusCode", QrCodeStatusEnum.INVALID);
  578. resultMap.put("status", QrCodeStatusEnum.INVALID.getStatusValue());
  579. return HttpResult.ok(resultMap);
  580. }
  581. Integer statusCode = loginTicket.getStatusCode();
  582. //二维码状态为待扫描
  583. if (statusCode.equals(QrCodeStatusEnum.WAITING.getStatusCode())) {
  584. resultMap.put("statusCode", statusCode);
  585. resultMap.put("status", QrCodeStatusEnum.WAITING.getStatusValue());
  586. }
  587. //二维码状态为无效时删除redis中所存的uuid
  588. if (statusCode.equals(QrCodeStatusEnum.INVALID.getStatusCode())) {
  589. resultMap.put("statusCode", statusCode);
  590. resultMap.put("status", QrCodeStatusEnum.INVALID.getStatusValue());
  591. RedisUtils.del(uuid);
  592. }
  593. //二维码状态为以扫描
  594. SysUser user = sysUserService.getById(loginTicket.getUserId());
  595. if (statusCode.equals(QrCodeStatusEnum.SCANNED.getStatusCode())) {
  596. String token = StpUtil.createLoginSession(user.getId());
  597. resultMap.put("token", token);
  598. resultMap.put("statusCode", statusCode);
  599. resultMap.put("status", QrCodeStatusEnum.SCANNED.getStatusValue());
  600. }
  601. return HttpResult.ok(resultMap);
  602. }
  603. /**
  604. * @version
  605. * @author: hxl
  606. * @Date: 2025/1/15 8:32
  607. * @Description: 通过用户id查询登录的token
  608. */
  609. @PostMapping("getToken")
  610. @ApiOperation(value = "通过用户id查询token")
  611. public boolean getTokenByUserId(@RequestBody ZgdTokenVo zgdTokenVo) {
  612. SaSession saSession = StpUtil.getSessionByLoginId(zgdTokenVo.getUserId());
  613. List<TokenSign> tokenSignList = saSession.getTokenSignList();
  614. boolean flag =false;
  615. if(tokenSignList!=null){
  616. for (int i = 0; i < tokenSignList.size(); i++) {
  617. if (tokenSignList.get(i).getValue().equals(zgdTokenVo.getZgdToken())){
  618. flag=true;
  619. break;
  620. }
  621. }
  622. }
  623. return flag;
  624. }
  625. }