package com.sinata.appointment.service;
|
|
import cn.dev33.satoken.stp.StpUtil;
|
import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
|
import com.sinata.appointment.constants.BizErrorCode;
|
import com.sinata.appointment.dto.LoginRequest;
|
import com.sinata.appointment.dto.LoginResponse;
|
import com.sinata.appointment.entity.SysUser;
|
import com.sinata.appointment.exception.BizException;
|
import com.sinata.appointment.mapper.SysUserMapper;
|
import java.util.List;
|
import lombok.RequiredArgsConstructor;
|
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
|
import org.springframework.stereotype.Service;
|
|
/**
|
* 平台管理后台登录（sys_user 用户名+密码，BCrypt）。与小程序 {@link MiniAuthApplicationService} 无密码共用关系。
|
*/
|
@Service
|
@RequiredArgsConstructor
|
public class AuthApplicationService {
|
|
private final SysUserMapper sysUserMapper;
|
private final BCryptPasswordEncoder bcrypt;
|
private final CaptchaService captchaService;
|
private final AdminLoginCryptoService adminLoginCryptoService;
|
|
public LoginResponse login(LoginRequest req) {
|
captchaService.validateAndConsume(req.getCaptchaId(), req.getCaptchaCode());
|
String username = adminLoginCryptoService.decryptLoginField(req.getUsername(), "用户名");
|
String password = adminLoginCryptoService.decryptLoginField(req.getPassword(), "密码");
|
SysUser user =
|
sysUserMapper.selectOne(
|
new LambdaQueryWrapper<SysUser>()
|
.eq(SysUser::getUsername, username)
|
.eq(SysUser::getDelFlag, 0));
|
if (user == null) {
|
throw new BizException(BizErrorCode.AUTH_INVALID_CREDENTIALS, "用户名或密码错误");
|
}
|
if (user.getStatus() == null || user.getStatus() != 1) {
|
throw new BizException(BizErrorCode.AUTH_FORBIDDEN, "账号被禁用，请联系管理员");
|
}
|
if (!bcrypt.matches(password, user.getPasswordHash())) {
|
throw new BizException(BizErrorCode.AUTH_INVALID_CREDENTIALS, "用户名或密码错误");
|
}
|
StpUtil.login(user.getId());
|
List<String> roles = sysUserMapper.listRoleCodesByUserId(user.getId());
|
List<String> permissions = sysUserMapper.listPermissionCodesByUserId(user.getId());
|
return LoginResponse.builder()
|
.token(StpUtil.getTokenValue())
|
.userId(user.getId())
|
.displayName(user.getRealName() != null ? user.getRealName() : user.getUsername())
|
.roles(roles)
|
.permissions(permissions)
|
.avatarUrl(user.getAvatarUrl())
|
.build();
|
}
|
|
public void logout() {
|
StpUtil.logout();
|
}
|
}
|
