SysLoginController.java 29 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708
  1. package com.ydtech.modules.admin.controller;
  2. import cn.dev33.satoken.session.SaSession;
  3. import cn.dev33.satoken.session.TokenSign;
  4. import cn.dev33.satoken.stp.StpUtil;
  5. import cn.hutool.extra.spring.SpringUtil;
  6. import com.alibaba.fastjson.JSON;
  7. import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
  8. import com.fasterxml.jackson.core.JsonProcessingException;
  9. import com.fasterxml.jackson.databind.ObjectMapper;
  10. import com.google.code.kaptcha.Producer;
  11. import com.ydtech.components.aliyun.SMSVerificationCode;
  12. import com.ydtech.components.aliyun.SendSmsComponents;
  13. import com.ydtech.components.aliyun.SendSmsEnum;
  14. import com.ydtech.config.MasterPasswordConfig;
  15. import com.ydtech.constants.SysConstants;
  16. import com.ydtech.constants.sys.SysPasswordEnum;
  17. import com.ydtech.core.page.HttpResult;
  18. import com.ydtech.exception.SystemException;
  19. import com.ydtech.modules.admin.dao.SysPartnerMapper;
  20. import com.ydtech.modules.admin.model.SysPartner;
  21. import com.ydtech.modules.admin.model.SysPassword;
  22. import com.ydtech.modules.admin.model.SysRole;
  23. import com.ydtech.modules.admin.model.SysUser;
  24. import com.ydtech.modules.admin.model.po.SysUserLinkSys;
  25. import com.ydtech.modules.admin.model.vo.*;
  26. import com.ydtech.modules.admin.service.*;
  27. import com.ydtech.modules.base.controller.BaseController;
  28. import com.ydtech.modules.partner.utils.ExpiredCommissionUtils;
  29. import com.ydtech.modules.partner.utils.UpdateRatioUtils;
  30. import com.ydtech.modules.partner.service.PartnerUserService;
  31. import com.ydtech.security.utils.PasswordUtils;
  32. import com.ydtech.utils.IPUtil;
  33. import com.ydtech.utils.RedisUtils;
  34. import io.swagger.annotations.Api;
  35. import io.swagger.annotations.ApiImplicitParam;
  36. import io.swagger.annotations.ApiImplicitParams;
  37. import io.swagger.annotations.ApiOperation;
  38. import lombok.RequiredArgsConstructor;
  39. import lombok.extern.slf4j.Slf4j;
  40. import org.apache.commons.lang3.StringUtils;
  41. import org.apache.tomcat.util.http.fileupload.IOUtils;
  42. import org.springframework.beans.factory.annotation.Autowired;
  43. import org.springframework.data.redis.core.StringRedisTemplate;
  44. import org.springframework.web.bind.annotation.*;
  45. import javax.imageio.ImageIO;
  46. import javax.servlet.ServletOutputStream;
  47. import javax.servlet.http.HttpServletRequest;
  48. import javax.servlet.http.HttpServletResponse;
  49. import java.awt.image.BufferedImage;
  50. import java.io.*;
  51. import java.net.HttpURLConnection;
  52. import java.net.URL;
  53. import java.net.URLEncoder;
  54. import java.util.*;
  55. import java.util.concurrent.TimeUnit;
  56. import static com.ydtech.constants.RedisConstant.PHONE_VERIFICATION_CODE_KEY;
  57. import static com.ydtech.constants.RedisConstant.PHONE_VERIFICATION_CODE_KEY_TIME;
  58. /**
  59. * 登录控制器
  60. *
  61. * @author Yasepix
  62. * @date Oct 29, 2018
  63. */
  64. @Slf4j
  65. @RestController
  66. @Api(tags = "登录控制器")
  67. @RequiredArgsConstructor
  68. public class SysLoginController {
  69. // https://wenku.baidu.com/view/d7b845cf49fe04a1b0717fd5360cba1aa9118c49.html
  70. private final Producer producer;
  71. private final SysUserService sysUserService;
  72. private final StringRedisTemplate redisTemplate;
  73. private final SysUserRoleService sysUserRoleService;
  74. private final MasterPasswordConfig masterPasswordConfig;
  75. private final SysPasswordService sysPasswordService;
  76. private final SysUserLinkSysService sysUserLinkSysService;
  77. private final SysPartnerService sysPartnerService;
  78. private final SysPartnerMapper sysPartnerMapper;
  79. private final SysAgencyLeaderService sysAgencyLeaderService;
  80. private final SysLoginService sysLoginService;
  81. private final PartnerUserService partnerUserService;
  82. @GetMapping("captcha.jpg")
  83. @ApiOperation(value = "获取验证码", produces = "application/octet-stream")
  84. public void captcha(HttpServletResponse response, HttpServletRequest request) throws IOException {
  85. response.setHeader("Cache-Control", "no-store, no-cache");
  86. response.setContentType("image/jpeg");
  87. // 生成文字验证码
  88. String text = producer.createText();
  89. // 生成图片验证码
  90. BufferedImage image = producer.createImage(text);
  91. String redisKey = IPUtil.getIpAddr(request);
  92. // 保存到验证码到 session
  93. redisTemplate.opsForValue().set(redisKey, text, 120, TimeUnit.SECONDS);
  94. log.info("存入redis验证码为:" + text);
  95. log.info("存入redis验证码key:" + redisKey);
  96. ServletOutputStream out = response.getOutputStream();
  97. ImageIO.write(image, "jpg", out);
  98. response.setHeader("captchaUuid", UUID.randomUUID().toString());
  99. IOUtils.closeQuietly(out);
  100. }
  101. @GetMapping("captchaById")
  102. @ApiOperation(value = "获取验证码通过用户ID")
  103. @ApiImplicitParams({
  104. @ApiImplicitParam(name = "captchaId", value = "验证码ID,前端生成", required = true, dataType = "String")
  105. })
  106. public void captchaByIdNew(HttpServletResponse response, String captchaId) throws IOException {
  107. response.setHeader("Cache-Control", "no-store, no-cache");
  108. response.setContentType("image/jpeg");
  109. String text;
  110. String imageId = redisTemplate.opsForValue().get(captchaId);
  111. // 重复验证码问题
  112. if (StringUtils.isNotEmpty(imageId)) {
  113. text = imageId;
  114. } else {
  115. // 生成文字验证码
  116. text = producer.createText();
  117. }
  118. // 生成图片验证码
  119. BufferedImage image = producer.createImage(text);
  120. if (StringUtils.isEmpty(captchaId)) {
  121. throw new SystemException("captchaId 必传");
  122. }
  123. // 保存到验证码到 redis
  124. redisTemplate.opsForValue().set(captchaId, text, 120, TimeUnit.SECONDS);
  125. ServletOutputStream out = response.getOutputStream();
  126. ImageIO.write(image, "jpg", out);
  127. IOUtils.closeQuietly(out);
  128. }
  129. /**
  130. * 登录接口
  131. */
  132. @PostMapping(value = "/login")
  133. @ApiOperation(value = "登录")
  134. public HttpResult login(@RequestBody LoginBean loginBean, HttpServletRequest request) {
  135. String username = loginBean.getAccount();
  136. String password = loginBean.getPassword();
  137. String captcha = loginBean.getCaptcha();
  138. String redisKey = IPUtil.getIpAddr(request);
  139. // 从redis中获取
  140. String kaptcha = redisTemplate.opsForValue().get(redisKey);
  141. log.info("登录校验验证码,redis取出的信息为:" + redisKey + ":" + kaptcha);
  142. log.info("页面验证码:" + captcha + "===" + "redis验证码:" + kaptcha);
  143. if (!captcha.equals(kaptcha)) {
  144. return HttpResult.error("验证码不正确");
  145. }
  146. //
  147. // 用户信息
  148. SysUser user = sysUserService.getById(username);
  149. /**
  150. * 多个系统登录
  151. * */
  152. if (!SysConstants.ADMIN.equalsIgnoreCase(username) && !"1".equals(loginBean.getSysId())) {
  153. LambdaQueryWrapper<SysUserLinkSys> sysLambdaQueryWrapper = new LambdaQueryWrapper<>();
  154. sysLambdaQueryWrapper.eq(SysUserLinkSys::getUserId, user.getId());
  155. sysLambdaQueryWrapper.eq(SysUserLinkSys::getSysId, loginBean.getSysId());
  156. List<SysUserLinkSys> list = sysUserLinkSysService.list(sysLambdaQueryWrapper);
  157. if (list == null || list.size() == 0) {
  158. throw new SystemException("该用户未授权");
  159. }
  160. }
  161. //验证用户
  162. SysUser.verifyUser(user);
  163. SysPassword sysPassword = sysPasswordService.getOne(new LambdaQueryWrapper<SysPassword>().eq(SysPassword::getCode, SysPasswordEnum.GENERAL.getCode()));
  164. // 万能密码设置
  165. if (!"admin".equals(username) && PasswordUtils.matches(sysPassword.getSalt(), password,
  166. sysPassword.getPassword())) {
  167. log.info("万能密码登录系统");
  168. } else {
  169. if (!PasswordUtils.matches(user.getSalt(), password, user.getPassword())) {
  170. return HttpResult.error("密码不正确");
  171. }
  172. }
  173. // 获取这个人的token
  174. String token = StpUtil.createLoginSession(user.getId());
  175. StpUtil.getSessionByLoginId(user.getId()).set(SaSession.USER, user);
  176. return HttpResult.ok("登录成功", token);
  177. }
  178. /**
  179. * 登录2接口 验证码需要id校验
  180. */
  181. @PostMapping(value = "/login2")
  182. @ApiOperation(value = "登录2")
  183. public HttpResult login2(@RequestBody LoginBean loginBean) {
  184. return sysLoginService.loginApp(loginBean);
  185. }
  186. @PostMapping(value = "/system/login")
  187. @ApiOperation(value = "登录2")
  188. public HttpResult loginPc(@RequestBody LoginBean loginBean) {
  189. return sysLoginService.loginPC(loginBean);
  190. }
  191. /**
  192. * 合伙人 和机构负责人登录APP接口
  193. */
  194. @PostMapping(value = "/aapLogin")
  195. @ApiOperation(value = "合伙人和机构负责人登录APP接口")
  196. public HttpResult<AAPLoginVo> aapLogin(@RequestBody LoginBean loginBean, HttpServletRequest request) {
  197. AAPLoginVo aapLoginVo = new AAPLoginVo();
  198. String username = loginBean.getAccount();
  199. String password = loginBean.getPassword();
  200. String captcha = loginBean.getCaptcha();
  201. // 用户信息
  202. SysUser user = sysUserService.getById(username);
  203. //校验登录用户是否为合伙人或者是机构负责人
  204. boolean a = sysPartnerService.checkPartner(user.getId());
  205. boolean b = sysAgencyLeaderService.checkUserId(user.getId());
  206. boolean isPartner = partnerUserService.selectByUserIdList(user.getId());
  207. if (a) {
  208. SysPartner sysPartner = sysPartnerMapper.selectOne(new LambdaQueryWrapper<SysPartner>().eq(SysPartner::getUserId, user.getId()));
  209. //类型:1.合伙人;2机构负责人
  210. aapLoginVo.setType(1);
  211. aapLoginVo.setLevel(sysPartner.getType());
  212. } else if (b) {
  213. aapLoginVo.setType(2);
  214. } else if(isPartner){
  215. SpringUtil.getBean(UpdateRatioUtils.class).loginBefore(user.getId());
  216. SpringUtil.getBean(UpdateRatioUtils.class).loginChange(user.getId());
  217. aapLoginVo.setType(1);
  218. }else {
  219. throw new SystemException("该用户无权限登录APP,只能合伙人或者机构负责人才能登录!");
  220. }
  221. String captchaId = loginBean.getCaptchaId();
  222. if (StringUtils.isEmpty(captchaId)) return HttpResult.error("验证码不正确");
  223. // 从redis中获取
  224. String kaptcha = redisTemplate.opsForValue().get(captchaId);
  225. log.info("登录校验验证码,redis取出的信息为:" + captchaId + ":" + kaptcha);
  226. log.info("页面验证码:" + captcha + "===" + "redis验证码:" + kaptcha);
  227. if (!captcha.equals(kaptcha)) {
  228. return HttpResult.error("验证码不正确");
  229. }
  230. /**
  231. * 多个系统登录 添加默认参数解决手机端登陆问题
  232. * */
  233. if (StringUtils.isBlank(loginBean.getSysId())) {
  234. loginBean.setSysId("1");
  235. }
  236. if (!SysConstants.ADMIN.equalsIgnoreCase(username) && !"1".equals(loginBean.getSysId())) {
  237. LambdaQueryWrapper<SysUserLinkSys> sysLambdaQueryWrapper = new LambdaQueryWrapper<>();
  238. sysLambdaQueryWrapper.eq(SysUserLinkSys::getUserId, user.getId());
  239. sysLambdaQueryWrapper.eq(SysUserLinkSys::getSysId, loginBean.getSysId());
  240. List<SysUserLinkSys> list = sysUserLinkSysService.list(sysLambdaQueryWrapper);
  241. if (list == null || list.size() == 0) {
  242. throw new SystemException("该用户未授权");
  243. }
  244. }
  245. //验证用户
  246. SysUser.verifyUser(user);
  247. SysPassword sysPassword = sysPasswordService.getOne(new LambdaQueryWrapper<SysPassword>().eq(SysPassword::getCode, SysPasswordEnum.GENERAL.getCode()));
  248. // 万能密码设置
  249. if (!"admin".equals(username) && PasswordUtils.matches(sysPassword.getSalt(), password,
  250. sysPassword.getPassword())) {
  251. log.info("万能密码登录系统");
  252. } else {
  253. if (!PasswordUtils.matches(user.getSalt(), password, user.getPassword())) {
  254. return HttpResult.error("密码不正确");
  255. }
  256. }
  257. //查询用户角色
  258. SysRole sysRole = sysUserRoleService.gainRoleByUserId(user.getId());
  259. //设置用户角色
  260. user.setRoleId(sysRole.getId().toString());
  261. user.setRoleName(sysRole.getName());
  262. // 获取这个人的token
  263. String token = StpUtil.createLoginSession(user.getId());
  264. StpUtil.getSessionByLoginId(user.getId()).set(SaSession.USER, user);
  265. aapLoginVo.setToken(token);
  266. SpringUtil.getBean(ExpiredCommissionUtils.class).initializeExpirationTime(user.getId());
  267. return HttpResult.ok("登录成功", aapLoginVo);
  268. }
  269. /**
  270. * 合伙人APP手机验证码登录
  271. *
  272. * @param phoneLoginVo 手机号登录实体
  273. * @return token
  274. */
  275. @PostMapping("/loginAPPByPhone")
  276. @ApiOperation(value = "合伙人APP手机验证码登录")
  277. public HttpResult<AAPLoginVo> loginAPPByPhone(@RequestBody PhoneLoginVo phoneLoginVo) {
  278. AAPLoginVo aapLoginVo = new AAPLoginVo();
  279. // 用户信息
  280. String phone = phoneLoginVo.getPhone();
  281. String phoneMsg = phoneLoginVo.getPhoneMsg();
  282. SysUser partUser = sysUserService.findPartUserByPhone(phone);
  283. SysUser user;
  284. boolean isPartner = false;
  285. if (Objects.isNull(partUser)){
  286. user = sysUserService.findByPhone(phone);
  287. }else {
  288. isPartner = partnerUserService.selectByUserIdList(partUser.getId());
  289. user = partUser;
  290. }
  291. //验证用户
  292. SysUser.verifyUser(user);
  293. //校验登录用户是否为合伙人或者是机构负责人
  294. boolean a = sysPartnerService.checkPartner(user.getId());
  295. boolean b = sysAgencyLeaderService.checkUserId(user.getId());
  296. if (a) {
  297. //类型:1.合伙人;2机构负责人
  298. aapLoginVo.setType(1);
  299. } else if (b) {
  300. aapLoginVo.setType(2);
  301. } else if(isPartner){
  302. SpringUtil.getBean(UpdateRatioUtils.class).loginBefore(user.getId());
  303. SpringUtil.getBean(UpdateRatioUtils.class).loginChange(user.getId());
  304. aapLoginVo.setType(1);
  305. } else {
  306. throw new SystemException("该用户无权限登录APP,只能合伙人或者机构负责人才能登录!");
  307. }
  308. String msg = redisTemplate.opsForValue().get(PHONE_VERIFICATION_CODE_KEY + phone);
  309. if (msg == null || msg.isEmpty()) {
  310. return HttpResult.error("验证码已失效");
  311. }
  312. if (!phoneMsg.equals(msg)) {
  313. return HttpResult.error("短信验证码不正确");
  314. }
  315. // 获取这个人的token
  316. String token = StpUtil.createLoginSession(user.getId());
  317. StpUtil.getSessionByLoginId(user.getId()).set(SaSession.USER, user);
  318. aapLoginVo.setToken(token);
  319. return HttpResult.ok("登录成功", aapLoginVo);
  320. }
  321. /**
  322. * 手机验证码登录
  323. *
  324. * @param phoneLoginVo 手机号登录实体
  325. * @return token
  326. */
  327. @PostMapping("/loginByPhone")
  328. @ApiOperation(value = "手机验证码登录")
  329. public HttpResult<String> loginByPhone(@RequestBody PhoneLoginVo phoneLoginVo) {
  330. // 用户信息
  331. String phone = phoneLoginVo.getPhone();
  332. String phoneMsg = phoneLoginVo.getPhoneMsg();
  333. SysUser user = sysUserService.findByPhone(phone);
  334. if (user == null) {
  335. //手机号不存在注册用户:上线测试团队
  336. user = sysUserService.registerAPPUser(phone);
  337. }
  338. //验证用户
  339. SysUser sysUser = sysUserService.getByUserId(user.getId());
  340. if ("2".equals(sysUser.getManagementSource())){
  341. user.setIsLock(0);
  342. }
  343. SysUser.verifyUser(user);
  344. String msg = redisTemplate.opsForValue().get(PHONE_VERIFICATION_CODE_KEY + phone);
  345. if (msg == null || msg.isEmpty()) {
  346. return HttpResult.error("验证码已失效");
  347. }
  348. if (!phoneMsg.equals(msg)) {
  349. return HttpResult.error("短信验证码不正确");
  350. }
  351. // 获取这个人的token
  352. String token = StpUtil.createLoginSession(user.getId());
  353. StpUtil.getSessionByLoginId(user.getId()).set(SaSession.USER, user);
  354. return HttpResult.ok("登录成功", token);
  355. }
  356. // /**
  357. // * 短信发送
  358. // */
  359. // @GetMapping("/sendMsg")
  360. // public HttpResult sendMsg(@RequestParam String phone, @RequestParam String type, HttpServletRequest request) {
  361. // if (StringUtils.isEmpty(phone)) {
  362. // return HttpResult.error("手机号不能为空");
  363. // }
  364. //// if ("0".equals(type)) { // 0 登录 1 注册
  365. //// SysUser sysUser = sysUserService.findByPhone(phone);
  366. //// if (sysUser == null) {
  367. //// return HttpResult.error("手机号不存在!");
  368. //// }
  369. //// }
  370. //
  371. // Random rand = new Random();
  372. // // randNumber 将被赋值为一个 MIN 和 MAX 范围内的随机数
  373. // int randNumber = rand.nextInt(9999 - 1000 + 1) + 1000;
  374. // // 保存验证码到redis
  375. // redisTemplate.opsForValue().set(PHONE_VERIFICATION_CODE_KEY + phone, String.valueOf(randNumber), PHONE_VERIFICATION_CODE_KEY_TIME
  376. // , TimeUnit.MINUTES);
  377. //
  378. // String result = null;
  379. // String url = "http://v.juhe.cn/sms/send";//请求接口地址
  380. // Map params = new HashMap();//请求参数
  381. // params.put("mobile", phone);//接收短信的手机号码
  382. // params.put("tpl_id", "71853");//短信模板ID,请参考个人中心短信模板设置
  383. // String textVal = "#code#=" + randNumber;
  384. // params.put("tpl_value", textVal);//变量名和变量值对。如果你的变量名或者变量值中带有#&=中的任意一个特殊符号,请先分别进行urlencode编码后再传递,<a href="http://www.juhe.cn/news/index/id/50"
  385. // // target="_blank">详细说明></a>
  386. // params.put("key", "fbe7b165e9e13e52f3b1f2654eab9c0e");//应用APPKEY(应用详细页查询)
  387. // params.put("dtype", "json");//返回数据的格式,xml或json,默认json
  388. //
  389. // try {
  390. // result = net(url, params, "GET");
  391. // JSONObject object = JSONObject.parseObject(result);
  392. // if (object.getInteger("error_code") == 0) {
  393. //// System.out.println(object.get("result"));
  394. // return HttpResult.ok("发送成功");
  395. // } else {
  396. // System.out.println(object.get("error_code") + ":" + object.get("reason"));
  397. // return HttpResult.error("发送失败," + object.get("error_code") + ":" + object.get("reason"));
  398. // }
  399. // } catch (Exception e) {
  400. // e.printStackTrace();
  401. // }
  402. // return HttpResult.ok("发送失败");
  403. // }
  404. @Autowired
  405. private SendSmsComponents sendSms;
  406. /**
  407. * 短信发送
  408. */
  409. @GetMapping("/sendMsg")
  410. public HttpResult sendMsg(@RequestParam String phone, @RequestParam String type, HttpServletRequest request) {
  411. if (StringUtils.isEmpty(phone)) {
  412. return HttpResult.error("手机号不能为空");
  413. }
  414. // if ("0".equals(type)) { // 0 登录 1 注册
  415. // SysUser sysUser = sysUserService.findByPhone(phone);
  416. // if (sysUser == null) {
  417. // return HttpResult.error("手机号不存在!");
  418. // }
  419. // }
  420. Random rand = new Random();
  421. // randNumber 将被赋值为一个 MIN 和 MAX 范围内的随机数
  422. int randNumber = rand.nextInt(9999 - 1000 + 1) + 1000;
  423. // 保存验证码到redis
  424. redisTemplate.opsForValue()
  425. .set(PHONE_VERIFICATION_CODE_KEY + phone, String.valueOf(randNumber), PHONE_VERIFICATION_CODE_KEY_TIME
  426. , TimeUnit.MINUTES);
  427. try {
  428. SMSVerificationCode smsVerificationCode = new SMSVerificationCode(String.valueOf(randNumber));
  429. String jsonString = JSON.toJSONString(smsVerificationCode);
  430. sendSms.sendSms(phone, SendSmsEnum.SMS_220650023, jsonString);
  431. return HttpResult.ok("发送成功");
  432. } catch (Exception e) {
  433. e.printStackTrace();
  434. }
  435. return HttpResult.ok("发送失败");
  436. }
  437. /**
  438. * @param strUrl 请求地址
  439. * @param params 请求参数
  440. * @param method 请求方法
  441. * @return 网络请求字符串
  442. * @throws Exception
  443. */
  444. public String net(String strUrl, Map params, String method) throws Exception {
  445. String DEF_CHATSET = "UTF-8";
  446. int DEF_CONN_TIMEOUT = 30000;
  447. int DEF_READ_TIMEOUT = 30000;
  448. String userAgent = "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/29.0.1547.66 Safari/537.36";
  449. HttpURLConnection conn = null;
  450. BufferedReader reader = null;
  451. String rs = null;
  452. try {
  453. StringBuffer sb = new StringBuffer();
  454. if (method == null || method.equals("GET")) {
  455. strUrl = strUrl + "?" + urlencode(params);
  456. }
  457. URL url = new URL(strUrl);
  458. conn = (HttpURLConnection) url.openConnection();
  459. if (method == null || method.equals("GET")) {
  460. conn.setRequestMethod("GET");
  461. } else {
  462. conn.setRequestMethod("POST");
  463. conn.setDoOutput(true);
  464. }
  465. conn.setRequestProperty("User-agent", userAgent);
  466. conn.setUseCaches(false);
  467. conn.setConnectTimeout(DEF_CONN_TIMEOUT);
  468. conn.setReadTimeout(DEF_READ_TIMEOUT);
  469. conn.setInstanceFollowRedirects(false);
  470. conn.connect();
  471. if (params != null && Objects.equals(method, "POST")) {
  472. try {
  473. DataOutputStream out = new DataOutputStream(conn.getOutputStream());
  474. out.writeBytes(urlencode(params));
  475. } catch (Exception e) {
  476. // TODO: handle exception
  477. }
  478. }
  479. InputStream is = conn.getInputStream();
  480. reader = new BufferedReader(new InputStreamReader(is, DEF_CHATSET));
  481. String strRead = null;
  482. while ((strRead = reader.readLine()) != null) {
  483. sb.append(strRead);
  484. }
  485. rs = sb.toString();
  486. } catch (IOException e) {
  487. e.printStackTrace();
  488. } finally {
  489. if (reader != null) {
  490. reader.close();
  491. }
  492. if (conn != null) {
  493. conn.disconnect();
  494. }
  495. }
  496. return rs;
  497. }
  498. //将map型转为请求参数型
  499. public String urlencode(Map<String, Object> data) {
  500. StringBuilder sb = new StringBuilder();
  501. for (Map.Entry i : data.entrySet()) {
  502. try {
  503. sb.append(i.getKey()).append("=").append(URLEncoder.encode(i.getValue() + "", "UTF-8")).append("&");
  504. } catch (UnsupportedEncodingException e) {
  505. e.printStackTrace();
  506. }
  507. }
  508. return sb.toString();
  509. }
  510. @PostMapping(value = "/loginOut")
  511. @ApiOperation(value = "登出")
  512. public HttpResult loginOut() {
  513. StpUtil.logout();
  514. return HttpResult.ok("退出登录成功");
  515. }
  516. /**
  517. * 获取二维码生成的uuid
  518. */
  519. @GetMapping("/getQrCode")
  520. @ApiOperation(value = "获取登录二维码")
  521. public HttpResult getQrCode(@RequestParam String uuid) throws JsonProcessingException {
  522. // String uuid = UUID.randomUUID().toString();
  523. int statusCode = QrCodeStatusEnum.WAITING.getStatusCode();
  524. LoginTicket loginTicket = new LoginTicket();
  525. // 二维码最初为 waitting 状态
  526. loginTicket.setStatusCode(statusCode);
  527. loginTicket.setUuid(uuid);
  528. ObjectMapper objectMapper = new ObjectMapper();
  529. String jsonContent = objectMapper.writeValueAsString(loginTicket);
  530. redisTemplate.opsForValue().set(uuid, jsonContent);
  531. //设置过期时间60秒
  532. redisTemplate.expire(uuid, 60, TimeUnit.SECONDS);
  533. Map<String, Object> resultMap = new HashMap<>();
  534. resultMap.put("uuid", uuid);
  535. resultMap.put("statusCode", QrCodeStatusEnum.WAITING.getStatusValue());
  536. return HttpResult.ok(resultMap);
  537. }
  538. /**
  539. * 扫描二维码 改变redis中相关uuid状态并于对应用户关联
  540. */
  541. @GetMapping("/scanQrCode")
  542. @ApiOperation(value = "扫描登录二维码")
  543. public HttpResult scanQrCode(@RequestParam String uuid) {
  544. Map<String, Object> data = new HashMap<>();
  545. try {
  546. ObjectMapper objectMapper = new ObjectMapper();
  547. String content = redisTemplate.opsForValue().get(uuid);
  548. LoginTicket loginTicket = objectMapper.readValue(content, LoginTicket.class);
  549. // redis 中 uuid的过期时间
  550. Long expired = RedisUtils.timeToLive(uuid);
  551. boolean valid = loginTicket != null &&
  552. QrCodeStatusEnum.WAITING.getStatusCode().equals(loginTicket.getStatusCode()) &&
  553. expired != null &&
  554. expired >= 0;
  555. if (valid) {
  556. String user = BaseController.getUser().getId();
  557. if (user == null) {
  558. throw new RuntimeException("用户未登录");
  559. }
  560. // 修改扫码状态
  561. loginTicket.setStatusCode(QrCodeStatusEnum.SCANNED.getStatusCode());
  562. // 将二维码与用户进行关联
  563. loginTicket.setUserId(user);
  564. String jsonContent = objectMapper.writeValueAsString(loginTicket);
  565. redisTemplate.opsForValue().set(uuid, jsonContent);
  566. data.put("statusCode", QrCodeStatusEnum.SCANNED.getStatusCode());
  567. return HttpResult.ok(data);
  568. } else {
  569. data.put("statusCode", QrCodeStatusEnum.INVALID);
  570. return HttpResult.error("二维码已过期或已被他人使用,请刷新二维码");
  571. }
  572. } catch (RuntimeException | JsonProcessingException e) {
  573. throw new RuntimeException(e);
  574. }
  575. }
  576. /**
  577. * 轮询接口 获取二维码状态
  578. */
  579. @GetMapping("/getQrCodeStatus")
  580. @ApiOperation(value = "获取登录二维码状态")
  581. public HttpResult getQrCodeStatus(HttpServletRequest request, HttpServletResponse response,
  582. @RequestParam String uuid) throws JsonProcessingException {
  583. Map<Object, Object> resultMap = new HashMap<>();
  584. ObjectMapper objectMapper = new ObjectMapper();
  585. String content = redisTemplate.opsForValue().get(uuid);
  586. LoginTicket loginTicket = null;
  587. if (StringUtils.isNotBlank(content)) {
  588. loginTicket = objectMapper.readValue(content, LoginTicket.class);
  589. }
  590. if (loginTicket == null) {
  591. resultMap.put("statusCode", QrCodeStatusEnum.INVALID);
  592. resultMap.put("status", QrCodeStatusEnum.INVALID.getStatusValue());
  593. return HttpResult.ok(resultMap);
  594. }
  595. Integer statusCode = loginTicket.getStatusCode();
  596. //二维码状态为待扫描
  597. if (statusCode.equals(QrCodeStatusEnum.WAITING.getStatusCode())) {
  598. resultMap.put("statusCode", statusCode);
  599. resultMap.put("status", QrCodeStatusEnum.WAITING.getStatusValue());
  600. }
  601. //二维码状态为无效时删除redis中所存的uuid
  602. if (statusCode.equals(QrCodeStatusEnum.INVALID.getStatusCode())) {
  603. resultMap.put("statusCode", statusCode);
  604. resultMap.put("status", QrCodeStatusEnum.INVALID.getStatusValue());
  605. RedisUtils.del(uuid);
  606. }
  607. //二维码状态为以扫描
  608. SysUser user = sysUserService.getById(loginTicket.getUserId());
  609. if (statusCode.equals(QrCodeStatusEnum.SCANNED.getStatusCode())) {
  610. String token = StpUtil.createLoginSession(user.getId());
  611. resultMap.put("token", token);
  612. resultMap.put("statusCode", statusCode);
  613. resultMap.put("status", QrCodeStatusEnum.SCANNED.getStatusValue());
  614. }
  615. return HttpResult.ok(resultMap);
  616. }
  617. /**
  618. * @version
  619. * @author: hxl
  620. * @Date: 2025/1/15 8:32
  621. * @Description: 通过用户id查询登录的token
  622. */
  623. @PostMapping("getToken")
  624. @ApiOperation(value = "通过用户id查询token")
  625. public boolean getTokenByUserId(@RequestBody ZgdTokenVo zgdTokenVo) {
  626. SaSession saSession = StpUtil.getSessionByLoginId(zgdTokenVo.getUserId());
  627. List<TokenSign> tokenSignList = saSession.getTokenSignList();
  628. boolean flag =false;
  629. if(tokenSignList!=null){
  630. for (int i = 0; i < tokenSignList.size(); i++) {
  631. if (tokenSignList.get(i).getValue().equals(zgdTokenVo.getZgdToken())){
  632. flag=true;
  633. break;
  634. }
  635. }
  636. }
  637. return flag;
  638. }
  639. }