SysLoginController.java 29 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704
  1. package com.ydtech.modules.admin.controller;
  2. import cn.dev33.satoken.session.SaSession;
  3. import cn.dev33.satoken.session.TokenSign;
  4. import cn.dev33.satoken.stp.StpUtil;
  5. import cn.hutool.extra.spring.SpringUtil;
  6. import com.alibaba.fastjson.JSON;
  7. import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
  8. import com.fasterxml.jackson.core.JsonProcessingException;
  9. import com.fasterxml.jackson.databind.ObjectMapper;
  10. import com.google.code.kaptcha.Producer;
  11. import com.ydtech.components.aliyun.SMSVerificationCode;
  12. import com.ydtech.components.aliyun.SendSmsComponents;
  13. import com.ydtech.components.aliyun.SendSmsEnum;
  14. import com.ydtech.config.MasterPasswordConfig;
  15. import com.ydtech.constants.SysConstants;
  16. import com.ydtech.constants.sys.SysPasswordEnum;
  17. import com.ydtech.core.page.HttpResult;
  18. import com.ydtech.exception.SystemException;
  19. import com.ydtech.modules.admin.dao.SysPartnerMapper;
  20. import com.ydtech.modules.admin.model.SysPartner;
  21. import com.ydtech.modules.admin.model.SysPassword;
  22. import com.ydtech.modules.admin.model.SysRole;
  23. import com.ydtech.modules.admin.model.SysUser;
  24. import com.ydtech.modules.admin.model.po.SysUserLinkSys;
  25. import com.ydtech.modules.admin.model.vo.*;
  26. import com.ydtech.modules.admin.service.*;
  27. import com.ydtech.modules.base.controller.BaseController;
  28. import com.ydtech.modules.partner.utils.ExpiredCommissionUtils;
  29. import com.ydtech.modules.partner.utils.UpdateRatioUtils;
  30. import com.ydtech.modules.partner.service.PartnerUserService;
  31. import com.ydtech.security.utils.PasswordUtils;
  32. import com.ydtech.utils.IPUtil;
  33. import com.ydtech.utils.RedisUtils;
  34. import io.swagger.annotations.Api;
  35. import io.swagger.annotations.ApiImplicitParam;
  36. import io.swagger.annotations.ApiImplicitParams;
  37. import io.swagger.annotations.ApiOperation;
  38. import lombok.RequiredArgsConstructor;
  39. import lombok.extern.slf4j.Slf4j;
  40. import org.apache.commons.lang3.StringUtils;
  41. import org.apache.tomcat.util.http.fileupload.IOUtils;
  42. import org.springframework.beans.factory.annotation.Autowired;
  43. import org.springframework.data.redis.core.StringRedisTemplate;
  44. import org.springframework.web.bind.annotation.*;
  45. import javax.imageio.ImageIO;
  46. import javax.servlet.ServletOutputStream;
  47. import javax.servlet.http.HttpServletRequest;
  48. import javax.servlet.http.HttpServletResponse;
  49. import java.awt.image.BufferedImage;
  50. import java.io.*;
  51. import java.net.HttpURLConnection;
  52. import java.net.URL;
  53. import java.net.URLEncoder;
  54. import java.util.*;
  55. import java.util.concurrent.TimeUnit;
  56. import static com.ydtech.constants.RedisConstant.PHONE_VERIFICATION_CODE_KEY;
  57. import static com.ydtech.constants.RedisConstant.PHONE_VERIFICATION_CODE_KEY_TIME;
  58. /**
  59. * 登录控制器
  60. *
  61. * @author Yasepix
  62. * @date Oct 29, 2018
  63. */
  64. @Slf4j
  65. @RestController
  66. @Api(tags = "登录控制器")
  67. @RequiredArgsConstructor
  68. public class SysLoginController {
  69. // https://wenku.baidu.com/view/d7b845cf49fe04a1b0717fd5360cba1aa9118c49.html
  70. private final Producer producer;
  71. private final SysUserService sysUserService;
  72. private final StringRedisTemplate redisTemplate;
  73. private final SysUserRoleService sysUserRoleService;
  74. private final MasterPasswordConfig masterPasswordConfig;
  75. private final SysPasswordService sysPasswordService;
  76. private final SysUserLinkSysService sysUserLinkSysService;
  77. private final SysPartnerService sysPartnerService;
  78. private final SysPartnerMapper sysPartnerMapper;
  79. private final SysAgencyLeaderService sysAgencyLeaderService;
  80. private final SysLoginService sysLoginService;
  81. private final PartnerUserService partnerUserService;
  82. @GetMapping("captcha.jpg")
  83. @ApiOperation(value = "获取验证码", produces = "application/octet-stream")
  84. public void captcha(HttpServletResponse response, HttpServletRequest request) throws IOException {
  85. response.setHeader("Cache-Control", "no-store, no-cache");
  86. response.setContentType("image/jpeg");
  87. // 生成文字验证码
  88. String text = producer.createText();
  89. // 生成图片验证码
  90. BufferedImage image = producer.createImage(text);
  91. String redisKey = IPUtil.getIpAddr(request);
  92. // 保存到验证码到 session
  93. redisTemplate.opsForValue().set(redisKey, text, 120, TimeUnit.SECONDS);
  94. log.info("存入redis验证码为:" + text);
  95. log.info("存入redis验证码key:" + redisKey);
  96. ServletOutputStream out = response.getOutputStream();
  97. ImageIO.write(image, "jpg", out);
  98. response.setHeader("captchaUuid", UUID.randomUUID().toString());
  99. IOUtils.closeQuietly(out);
  100. }
  101. @GetMapping("captchaById")
  102. @ApiOperation(value = "获取验证码通过用户ID")
  103. @ApiImplicitParams({
  104. @ApiImplicitParam(name = "captchaId", value = "验证码ID,前端生成", required = true, dataType = "String")
  105. })
  106. public void captchaByIdNew(HttpServletResponse response, String captchaId) throws IOException {
  107. response.setHeader("Cache-Control", "no-store, no-cache");
  108. response.setContentType("image/jpeg");
  109. String text;
  110. String imageId = redisTemplate.opsForValue().get(captchaId);
  111. // 重复验证码问题
  112. if (StringUtils.isNotEmpty(imageId)) {
  113. text = imageId;
  114. } else {
  115. // 生成文字验证码
  116. text = producer.createText();
  117. }
  118. // 生成图片验证码
  119. BufferedImage image = producer.createImage(text);
  120. if (StringUtils.isEmpty(captchaId)) {
  121. throw new SystemException("captchaId 必传");
  122. }
  123. // 保存到验证码到 redis
  124. redisTemplate.opsForValue().set(captchaId, text, 120, TimeUnit.SECONDS);
  125. ServletOutputStream out = response.getOutputStream();
  126. ImageIO.write(image, "jpg", out);
  127. IOUtils.closeQuietly(out);
  128. }
  129. /**
  130. * 登录接口
  131. */
  132. @PostMapping(value = "/login")
  133. @ApiOperation(value = "登录")
  134. public HttpResult login(@RequestBody LoginBean loginBean, HttpServletRequest request) {
  135. String username = loginBean.getAccount();
  136. String password = loginBean.getPassword();
  137. String captcha = loginBean.getCaptcha();
  138. String redisKey = IPUtil.getIpAddr(request);
  139. // 从redis中获取
  140. String kaptcha = redisTemplate.opsForValue().get(redisKey);
  141. log.info("登录校验验证码,redis取出的信息为:" + redisKey + ":" + kaptcha);
  142. log.info("页面验证码:" + captcha + "===" + "redis验证码:" + kaptcha);
  143. if (!captcha.equals(kaptcha)) {
  144. return HttpResult.error("验证码不正确");
  145. }
  146. //
  147. // 用户信息
  148. SysUser user = sysUserService.getById(username);
  149. /**
  150. * 多个系统登录
  151. * */
  152. if (!SysConstants.ADMIN.equalsIgnoreCase(username) && !"1".equals(loginBean.getSysId())) {
  153. LambdaQueryWrapper<SysUserLinkSys> sysLambdaQueryWrapper = new LambdaQueryWrapper<>();
  154. sysLambdaQueryWrapper.eq(SysUserLinkSys::getUserId, user.getId());
  155. sysLambdaQueryWrapper.eq(SysUserLinkSys::getSysId, loginBean.getSysId());
  156. List<SysUserLinkSys> list = sysUserLinkSysService.list(sysLambdaQueryWrapper);
  157. if (list == null || list.size() == 0) {
  158. throw new SystemException("该用户未授权");
  159. }
  160. }
  161. //验证用户
  162. SysUser.verifyUser(user);
  163. SysPassword sysPassword = sysPasswordService.getOne(new LambdaQueryWrapper<SysPassword>().eq(SysPassword::getCode, SysPasswordEnum.GENERAL.getCode()));
  164. // 万能密码设置
  165. if (!"admin".equals(username) && PasswordUtils.matches(sysPassword.getSalt(), password,
  166. sysPassword.getPassword())) {
  167. log.info("万能密码登录系统");
  168. } else {
  169. if (!PasswordUtils.matches(user.getSalt(), password, user.getPassword())) {
  170. return HttpResult.error("密码不正确");
  171. }
  172. }
  173. // 获取这个人的token
  174. String token = StpUtil.createLoginSession(user.getId());
  175. StpUtil.getSessionByLoginId(user.getId()).set(SaSession.USER, user);
  176. return HttpResult.ok("登录成功", token);
  177. }
  178. /**
  179. * 登录2接口 验证码需要id校验
  180. */
  181. @PostMapping(value = "/login2")
  182. @ApiOperation(value = "登录2")
  183. public HttpResult login2(@RequestBody LoginBean loginBean) {
  184. return sysLoginService.loginApp(loginBean);
  185. }
  186. @PostMapping(value = "/system/login")
  187. @ApiOperation(value = "登录2")
  188. public HttpResult loginPc(@RequestBody LoginBean loginBean) {
  189. return sysLoginService.loginPC(loginBean);
  190. }
  191. /**
  192. * 合伙人 和机构负责人登录APP接口
  193. */
  194. @PostMapping(value = "/aapLogin")
  195. @ApiOperation(value = "合伙人和机构负责人登录APP接口")
  196. public HttpResult<AAPLoginVo> aapLogin(@RequestBody LoginBean loginBean, HttpServletRequest request) {
  197. AAPLoginVo aapLoginVo = new AAPLoginVo();
  198. String username = loginBean.getAccount();
  199. String password = loginBean.getPassword();
  200. String captcha = loginBean.getCaptcha();
  201. // 用户信息
  202. SysUser user = sysUserService.getById(username);
  203. //校验登录用户是否为合伙人或者是机构负责人
  204. boolean a = sysPartnerService.checkPartner(user.getId());
  205. boolean b = sysAgencyLeaderService.checkUserId(user.getId());
  206. boolean isPartner = partnerUserService.selectByUserIdList(user.getId());
  207. if (a) {
  208. SysPartner sysPartner = sysPartnerMapper.selectOne(new LambdaQueryWrapper<SysPartner>().eq(SysPartner::getUserId, user.getId()));
  209. //类型:1.合伙人;2机构负责人
  210. aapLoginVo.setType(1);
  211. aapLoginVo.setLevel(sysPartner.getType());
  212. } else if (b) {
  213. aapLoginVo.setType(2);
  214. } else if(isPartner){
  215. SpringUtil.getBean(UpdateRatioUtils.class).loginBefore(user.getId());
  216. SpringUtil.getBean(UpdateRatioUtils.class).loginChange(user.getId());
  217. aapLoginVo.setType(1);
  218. }else {
  219. throw new SystemException("该用户无权限登录APP,只能合伙人或者机构负责人才能登录!");
  220. }
  221. String captchaId = loginBean.getCaptchaId();
  222. if (StringUtils.isEmpty(captchaId)) return HttpResult.error("验证码不正确");
  223. // 从redis中获取
  224. String kaptcha = redisTemplate.opsForValue().get(captchaId);
  225. log.info("登录校验验证码,redis取出的信息为:" + captchaId + ":" + kaptcha);
  226. log.info("页面验证码:" + captcha + "===" + "redis验证码:" + kaptcha);
  227. if (!captcha.equals(kaptcha)) {
  228. return HttpResult.error("验证码不正确");
  229. }
  230. /**
  231. * 多个系统登录 添加默认参数解决手机端登陆问题
  232. * */
  233. if (StringUtils.isBlank(loginBean.getSysId())) {
  234. loginBean.setSysId("1");
  235. }
  236. if (!SysConstants.ADMIN.equalsIgnoreCase(username) && !"1".equals(loginBean.getSysId())) {
  237. LambdaQueryWrapper<SysUserLinkSys> sysLambdaQueryWrapper = new LambdaQueryWrapper<>();
  238. sysLambdaQueryWrapper.eq(SysUserLinkSys::getUserId, user.getId());
  239. sysLambdaQueryWrapper.eq(SysUserLinkSys::getSysId, loginBean.getSysId());
  240. List<SysUserLinkSys> list = sysUserLinkSysService.list(sysLambdaQueryWrapper);
  241. if (list == null || list.size() == 0) {
  242. throw new SystemException("该用户未授权");
  243. }
  244. }
  245. //验证用户
  246. SysUser.verifyUser(user);
  247. SysPassword sysPassword = sysPasswordService.getOne(new LambdaQueryWrapper<SysPassword>().eq(SysPassword::getCode, SysPasswordEnum.GENERAL.getCode()));
  248. // 万能密码设置
  249. if (!"admin".equals(username) && PasswordUtils.matches(sysPassword.getSalt(), password,
  250. sysPassword.getPassword())) {
  251. log.info("万能密码登录系统");
  252. } else {
  253. if (!PasswordUtils.matches(user.getSalt(), password, user.getPassword())) {
  254. return HttpResult.error("密码不正确");
  255. }
  256. }
  257. //查询用户角色
  258. SysRole sysRole = sysUserRoleService.gainRoleByUserId(user.getId());
  259. //设置用户角色
  260. user.setRoleId(sysRole.getId().toString());
  261. user.setRoleName(sysRole.getName());
  262. // 获取这个人的token
  263. String token = StpUtil.createLoginSession(user.getId());
  264. StpUtil.getSessionByLoginId(user.getId()).set(SaSession.USER, user);
  265. aapLoginVo.setToken(token);
  266. SpringUtil.getBean(ExpiredCommissionUtils.class).initializeExpirationTime(user.getId());
  267. return HttpResult.ok("登录成功", aapLoginVo);
  268. }
  269. /**
  270. * 合伙人APP手机验证码登录
  271. *
  272. * @param phoneLoginVo 手机号登录实体
  273. * @return token
  274. */
  275. @PostMapping("/loginAPPByPhone")
  276. @ApiOperation(value = "合伙人APP手机验证码登录")
  277. public HttpResult<AAPLoginVo> loginAPPByPhone(@RequestBody PhoneLoginVo phoneLoginVo) {
  278. AAPLoginVo aapLoginVo = new AAPLoginVo();
  279. // 用户信息
  280. String phone = phoneLoginVo.getPhone();
  281. String phoneMsg = phoneLoginVo.getPhoneMsg();
  282. SysUser user = sysUserService.findByPhone(phone);
  283. //验证用户
  284. SysUser.verifyUser(user);
  285. //校验登录用户是否为合伙人或者是机构负责人
  286. boolean a = sysPartnerService.checkPartner(user.getId());
  287. boolean b = sysAgencyLeaderService.checkUserId(user.getId());
  288. SysUser partUser = sysUserService.findPartUserByPhone(phone);
  289. boolean isPartner = false;
  290. if (!Objects.isNull(partUser)){
  291. isPartner = partnerUserService.selectByUserIdList(partUser.getId());
  292. }
  293. if (a) {
  294. //类型:1.合伙人;2机构负责人
  295. aapLoginVo.setType(1);
  296. } else if (b) {
  297. aapLoginVo.setType(2);
  298. } else if(isPartner){
  299. SpringUtil.getBean(UpdateRatioUtils.class).loginBefore(user.getId());
  300. SpringUtil.getBean(UpdateRatioUtils.class).loginChange(user.getId());
  301. aapLoginVo.setType(1);
  302. } else {
  303. throw new SystemException("该用户无权限登录APP,只能合伙人或者机构负责人才能登录!");
  304. }
  305. String msg = redisTemplate.opsForValue().get(PHONE_VERIFICATION_CODE_KEY + phone);
  306. if (msg == null || msg.isEmpty()) {
  307. return HttpResult.error("验证码已失效");
  308. }
  309. if (!phoneMsg.equals(msg)) {
  310. return HttpResult.error("短信验证码不正确");
  311. }
  312. // 获取这个人的token
  313. String token = StpUtil.createLoginSession(user.getId());
  314. StpUtil.getSessionByLoginId(user.getId()).set(SaSession.USER, user);
  315. aapLoginVo.setToken(token);
  316. return HttpResult.ok("登录成功", aapLoginVo);
  317. }
  318. /**
  319. * 手机验证码登录
  320. *
  321. * @param phoneLoginVo 手机号登录实体
  322. * @return token
  323. */
  324. @PostMapping("/loginByPhone")
  325. @ApiOperation(value = "手机验证码登录")
  326. public HttpResult<String> loginByPhone(@RequestBody PhoneLoginVo phoneLoginVo) {
  327. // 用户信息
  328. String phone = phoneLoginVo.getPhone();
  329. String phoneMsg = phoneLoginVo.getPhoneMsg();
  330. SysUser user = sysUserService.findByPhone(phone);
  331. if (user == null) {
  332. //手机号不存在注册用户:上线测试团队
  333. user = sysUserService.registerAPPUser(phone);
  334. }
  335. //验证用户
  336. SysUser sysUser = sysUserService.getByUserId(user.getId());
  337. if ("2".equals(sysUser.getManagementSource())){
  338. user.setIsLock(0);
  339. }
  340. SysUser.verifyUser(user);
  341. String msg = redisTemplate.opsForValue().get(PHONE_VERIFICATION_CODE_KEY + phone);
  342. if (msg == null || msg.isEmpty()) {
  343. return HttpResult.error("验证码已失效");
  344. }
  345. if (!phoneMsg.equals(msg)) {
  346. return HttpResult.error("短信验证码不正确");
  347. }
  348. // 获取这个人的token
  349. String token = StpUtil.createLoginSession(user.getId());
  350. StpUtil.getSessionByLoginId(user.getId()).set(SaSession.USER, user);
  351. return HttpResult.ok("登录成功", token);
  352. }
  353. // /**
  354. // * 短信发送
  355. // */
  356. // @GetMapping("/sendMsg")
  357. // public HttpResult sendMsg(@RequestParam String phone, @RequestParam String type, HttpServletRequest request) {
  358. // if (StringUtils.isEmpty(phone)) {
  359. // return HttpResult.error("手机号不能为空");
  360. // }
  361. //// if ("0".equals(type)) { // 0 登录 1 注册
  362. //// SysUser sysUser = sysUserService.findByPhone(phone);
  363. //// if (sysUser == null) {
  364. //// return HttpResult.error("手机号不存在!");
  365. //// }
  366. //// }
  367. //
  368. // Random rand = new Random();
  369. // // randNumber 将被赋值为一个 MIN 和 MAX 范围内的随机数
  370. // int randNumber = rand.nextInt(9999 - 1000 + 1) + 1000;
  371. // // 保存验证码到redis
  372. // redisTemplate.opsForValue().set(PHONE_VERIFICATION_CODE_KEY + phone, String.valueOf(randNumber), PHONE_VERIFICATION_CODE_KEY_TIME
  373. // , TimeUnit.MINUTES);
  374. //
  375. // String result = null;
  376. // String url = "http://v.juhe.cn/sms/send";//请求接口地址
  377. // Map params = new HashMap();//请求参数
  378. // params.put("mobile", phone);//接收短信的手机号码
  379. // params.put("tpl_id", "71853");//短信模板ID,请参考个人中心短信模板设置
  380. // String textVal = "#code#=" + randNumber;
  381. // params.put("tpl_value", textVal);//变量名和变量值对。如果你的变量名或者变量值中带有#&=中的任意一个特殊符号,请先分别进行urlencode编码后再传递,<a href="http://www.juhe.cn/news/index/id/50"
  382. // // target="_blank">详细说明></a>
  383. // params.put("key", "fbe7b165e9e13e52f3b1f2654eab9c0e");//应用APPKEY(应用详细页查询)
  384. // params.put("dtype", "json");//返回数据的格式,xml或json,默认json
  385. //
  386. // try {
  387. // result = net(url, params, "GET");
  388. // JSONObject object = JSONObject.parseObject(result);
  389. // if (object.getInteger("error_code") == 0) {
  390. //// System.out.println(object.get("result"));
  391. // return HttpResult.ok("发送成功");
  392. // } else {
  393. // System.out.println(object.get("error_code") + ":" + object.get("reason"));
  394. // return HttpResult.error("发送失败," + object.get("error_code") + ":" + object.get("reason"));
  395. // }
  396. // } catch (Exception e) {
  397. // e.printStackTrace();
  398. // }
  399. // return HttpResult.ok("发送失败");
  400. // }
  401. @Autowired
  402. private SendSmsComponents sendSms;
  403. /**
  404. * 短信发送
  405. */
  406. @GetMapping("/sendMsg")
  407. public HttpResult sendMsg(@RequestParam String phone, @RequestParam String type, HttpServletRequest request) {
  408. if (StringUtils.isEmpty(phone)) {
  409. return HttpResult.error("手机号不能为空");
  410. }
  411. // if ("0".equals(type)) { // 0 登录 1 注册
  412. // SysUser sysUser = sysUserService.findByPhone(phone);
  413. // if (sysUser == null) {
  414. // return HttpResult.error("手机号不存在!");
  415. // }
  416. // }
  417. Random rand = new Random();
  418. // randNumber 将被赋值为一个 MIN 和 MAX 范围内的随机数
  419. int randNumber = rand.nextInt(9999 - 1000 + 1) + 1000;
  420. // 保存验证码到redis
  421. redisTemplate.opsForValue()
  422. .set(PHONE_VERIFICATION_CODE_KEY + phone, String.valueOf(randNumber), PHONE_VERIFICATION_CODE_KEY_TIME
  423. , TimeUnit.MINUTES);
  424. try {
  425. SMSVerificationCode smsVerificationCode = new SMSVerificationCode(String.valueOf(randNumber));
  426. String jsonString = JSON.toJSONString(smsVerificationCode);
  427. sendSms.sendSms(phone, SendSmsEnum.SMS_220650023, jsonString);
  428. return HttpResult.ok("发送成功");
  429. } catch (Exception e) {
  430. e.printStackTrace();
  431. }
  432. return HttpResult.ok("发送失败");
  433. }
  434. /**
  435. * @param strUrl 请求地址
  436. * @param params 请求参数
  437. * @param method 请求方法
  438. * @return 网络请求字符串
  439. * @throws Exception
  440. */
  441. public String net(String strUrl, Map params, String method) throws Exception {
  442. String DEF_CHATSET = "UTF-8";
  443. int DEF_CONN_TIMEOUT = 30000;
  444. int DEF_READ_TIMEOUT = 30000;
  445. String userAgent = "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/29.0.1547.66 Safari/537.36";
  446. HttpURLConnection conn = null;
  447. BufferedReader reader = null;
  448. String rs = null;
  449. try {
  450. StringBuffer sb = new StringBuffer();
  451. if (method == null || method.equals("GET")) {
  452. strUrl = strUrl + "?" + urlencode(params);
  453. }
  454. URL url = new URL(strUrl);
  455. conn = (HttpURLConnection) url.openConnection();
  456. if (method == null || method.equals("GET")) {
  457. conn.setRequestMethod("GET");
  458. } else {
  459. conn.setRequestMethod("POST");
  460. conn.setDoOutput(true);
  461. }
  462. conn.setRequestProperty("User-agent", userAgent);
  463. conn.setUseCaches(false);
  464. conn.setConnectTimeout(DEF_CONN_TIMEOUT);
  465. conn.setReadTimeout(DEF_READ_TIMEOUT);
  466. conn.setInstanceFollowRedirects(false);
  467. conn.connect();
  468. if (params != null && Objects.equals(method, "POST")) {
  469. try {
  470. DataOutputStream out = new DataOutputStream(conn.getOutputStream());
  471. out.writeBytes(urlencode(params));
  472. } catch (Exception e) {
  473. // TODO: handle exception
  474. }
  475. }
  476. InputStream is = conn.getInputStream();
  477. reader = new BufferedReader(new InputStreamReader(is, DEF_CHATSET));
  478. String strRead = null;
  479. while ((strRead = reader.readLine()) != null) {
  480. sb.append(strRead);
  481. }
  482. rs = sb.toString();
  483. } catch (IOException e) {
  484. e.printStackTrace();
  485. } finally {
  486. if (reader != null) {
  487. reader.close();
  488. }
  489. if (conn != null) {
  490. conn.disconnect();
  491. }
  492. }
  493. return rs;
  494. }
  495. //将map型转为请求参数型
  496. public String urlencode(Map<String, Object> data) {
  497. StringBuilder sb = new StringBuilder();
  498. for (Map.Entry i : data.entrySet()) {
  499. try {
  500. sb.append(i.getKey()).append("=").append(URLEncoder.encode(i.getValue() + "", "UTF-8")).append("&");
  501. } catch (UnsupportedEncodingException e) {
  502. e.printStackTrace();
  503. }
  504. }
  505. return sb.toString();
  506. }
  507. @PostMapping(value = "/loginOut")
  508. @ApiOperation(value = "登出")
  509. public HttpResult loginOut() {
  510. StpUtil.logout();
  511. return HttpResult.ok("退出登录成功");
  512. }
  513. /**
  514. * 获取二维码生成的uuid
  515. */
  516. @GetMapping("/getQrCode")
  517. @ApiOperation(value = "获取登录二维码")
  518. public HttpResult getQrCode(@RequestParam String uuid) throws JsonProcessingException {
  519. // String uuid = UUID.randomUUID().toString();
  520. int statusCode = QrCodeStatusEnum.WAITING.getStatusCode();
  521. LoginTicket loginTicket = new LoginTicket();
  522. // 二维码最初为 waitting 状态
  523. loginTicket.setStatusCode(statusCode);
  524. loginTicket.setUuid(uuid);
  525. ObjectMapper objectMapper = new ObjectMapper();
  526. String jsonContent = objectMapper.writeValueAsString(loginTicket);
  527. redisTemplate.opsForValue().set(uuid, jsonContent);
  528. //设置过期时间60秒
  529. redisTemplate.expire(uuid, 60, TimeUnit.SECONDS);
  530. Map<String, Object> resultMap = new HashMap<>();
  531. resultMap.put("uuid", uuid);
  532. resultMap.put("statusCode", QrCodeStatusEnum.WAITING.getStatusValue());
  533. return HttpResult.ok(resultMap);
  534. }
  535. /**
  536. * 扫描二维码 改变redis中相关uuid状态并于对应用户关联
  537. */
  538. @GetMapping("/scanQrCode")
  539. @ApiOperation(value = "扫描登录二维码")
  540. public HttpResult scanQrCode(@RequestParam String uuid) {
  541. Map<String, Object> data = new HashMap<>();
  542. try {
  543. ObjectMapper objectMapper = new ObjectMapper();
  544. String content = redisTemplate.opsForValue().get(uuid);
  545. LoginTicket loginTicket = objectMapper.readValue(content, LoginTicket.class);
  546. // redis 中 uuid的过期时间
  547. Long expired = RedisUtils.timeToLive(uuid);
  548. boolean valid = loginTicket != null &&
  549. QrCodeStatusEnum.WAITING.getStatusCode().equals(loginTicket.getStatusCode()) &&
  550. expired != null &&
  551. expired >= 0;
  552. if (valid) {
  553. String user = BaseController.getUser().getId();
  554. if (user == null) {
  555. throw new RuntimeException("用户未登录");
  556. }
  557. // 修改扫码状态
  558. loginTicket.setStatusCode(QrCodeStatusEnum.SCANNED.getStatusCode());
  559. // 将二维码与用户进行关联
  560. loginTicket.setUserId(user);
  561. String jsonContent = objectMapper.writeValueAsString(loginTicket);
  562. redisTemplate.opsForValue().set(uuid, jsonContent);
  563. data.put("statusCode", QrCodeStatusEnum.SCANNED.getStatusCode());
  564. return HttpResult.ok(data);
  565. } else {
  566. data.put("statusCode", QrCodeStatusEnum.INVALID);
  567. return HttpResult.error("二维码已过期或已被他人使用,请刷新二维码");
  568. }
  569. } catch (RuntimeException | JsonProcessingException e) {
  570. throw new RuntimeException(e);
  571. }
  572. }
  573. /**
  574. * 轮询接口 获取二维码状态
  575. */
  576. @GetMapping("/getQrCodeStatus")
  577. @ApiOperation(value = "获取登录二维码状态")
  578. public HttpResult getQrCodeStatus(HttpServletRequest request, HttpServletResponse response,
  579. @RequestParam String uuid) throws JsonProcessingException {
  580. Map<Object, Object> resultMap = new HashMap<>();
  581. ObjectMapper objectMapper = new ObjectMapper();
  582. String content = redisTemplate.opsForValue().get(uuid);
  583. LoginTicket loginTicket = null;
  584. if (StringUtils.isNotBlank(content)) {
  585. loginTicket = objectMapper.readValue(content, LoginTicket.class);
  586. }
  587. if (loginTicket == null) {
  588. resultMap.put("statusCode", QrCodeStatusEnum.INVALID);
  589. resultMap.put("status", QrCodeStatusEnum.INVALID.getStatusValue());
  590. return HttpResult.ok(resultMap);
  591. }
  592. Integer statusCode = loginTicket.getStatusCode();
  593. //二维码状态为待扫描
  594. if (statusCode.equals(QrCodeStatusEnum.WAITING.getStatusCode())) {
  595. resultMap.put("statusCode", statusCode);
  596. resultMap.put("status", QrCodeStatusEnum.WAITING.getStatusValue());
  597. }
  598. //二维码状态为无效时删除redis中所存的uuid
  599. if (statusCode.equals(QrCodeStatusEnum.INVALID.getStatusCode())) {
  600. resultMap.put("statusCode", statusCode);
  601. resultMap.put("status", QrCodeStatusEnum.INVALID.getStatusValue());
  602. RedisUtils.del(uuid);
  603. }
  604. //二维码状态为以扫描
  605. SysUser user = sysUserService.getById(loginTicket.getUserId());
  606. if (statusCode.equals(QrCodeStatusEnum.SCANNED.getStatusCode())) {
  607. String token = StpUtil.createLoginSession(user.getId());
  608. resultMap.put("token", token);
  609. resultMap.put("statusCode", statusCode);
  610. resultMap.put("status", QrCodeStatusEnum.SCANNED.getStatusValue());
  611. }
  612. return HttpResult.ok(resultMap);
  613. }
  614. /**
  615. * @version
  616. * @author: hxl
  617. * @Date: 2025/1/15 8:32
  618. * @Description: 通过用户id查询登录的token
  619. */
  620. @PostMapping("getToken")
  621. @ApiOperation(value = "通过用户id查询token")
  622. public boolean getTokenByUserId(@RequestBody ZgdTokenVo zgdTokenVo) {
  623. SaSession saSession = StpUtil.getSessionByLoginId(zgdTokenVo.getUserId());
  624. List<TokenSign> tokenSignList = saSession.getTokenSignList();
  625. boolean flag =false;
  626. if(tokenSignList!=null){
  627. for (int i = 0; i < tokenSignList.size(); i++) {
  628. if (tokenSignList.get(i).getValue().equals(zgdTokenVo.getZgdToken())){
  629. flag=true;
  630. break;
  631. }
  632. }
  633. }
  634. return flag;
  635. }
  636. }