小程序对接finish

longz

2026-04-27 25df88d0ab9d7444ed1d162b9efa1259ac2f6f66

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
package com.sinata.appointment.service;
 
import cn.dev33.satoken.stp.StpUtil;
import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
import com.sinata.appointment.constants.BizErrorCode;
import com.sinata.appointment.dto.LoginRequest;
import com.sinata.appointment.dto.LoginResponse;
import com.sinata.appointment.entity.SysUser;
import com.sinata.appointment.exception.BizException;
import com.sinata.appointment.mapper.SysUserMapper;
import java.util.List;
import lombok.RequiredArgsConstructor;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.stereotype.Service;
 
/**
 * 平台管理后台登录（sys_user 用户名+密码，BCrypt）。与小程序 {@link MiniAuthApplicationService} 无密码共用关系。
 */
@Service
@RequiredArgsConstructor
public class AuthApplicationService {
 
    private final SysUserMapper sysUserMapper;
    private final BCryptPasswordEncoder bcrypt;
    private final CaptchaService captchaService;
    private final AdminLoginCryptoService adminLoginCryptoService;
 
    public LoginResponse login(LoginRequest req) {
        captchaService.validateAndConsume(req.getCaptchaId(), req.getCaptchaCode());
        String username = adminLoginCryptoService.decryptLoginField(req.getUsername(), "用户名");
        String password = adminLoginCryptoService.decryptLoginField(req.getPassword(), "密码");
        SysUser user =
                sysUserMapper.selectOne(
                        new LambdaQueryWrapper<SysUser>()
                                .eq(SysUser::getUsername, username)
                                .eq(SysUser::getDelFlag, 0));
        if (user == null || user.getStatus() == null || user.getStatus() != 1) {
            throw new BizException(BizErrorCode.AUTH_INVALID_CREDENTIALS, "用户名或密码错误");
        }
        if (!bcrypt.matches(password, user.getPasswordHash())) {
            throw new BizException(BizErrorCode.AUTH_INVALID_CREDENTIALS, "用户名或密码错误");
        }
        StpUtil.login(user.getId());
        List<String> roles = sysUserMapper.listRoleCodesByUserId(user.getId());
        List<String> permissions = sysUserMapper.listPermissionCodesByUserId(user.getId());
        return LoginResponse.builder()
                .token(StpUtil.getTokenValue())
                .userId(user.getId())
                .displayName(user.getRealName() != null ? user.getRealName() : user.getUsername())
                .roles(roles)
                .permissions(permissions)
                .avatarUrl(user.getAvatarUrl())
                .build();
    }
 
    public void logout() {
        StpUtil.logout();
    }
}