package com.xiaopeng.account.controller;
|
|
import cn.hutool.core.util.DesensitizedUtil;
|
import com.alibaba.fastjson2.JSONObject;
|
import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
|
import com.baomidou.mybatisplus.core.toolkit.Wrappers;
|
import com.xiaopeng.account.constant.I18nKeyConstant;
|
import com.xiaopeng.account.model.dto.UserPwdResetDTO;
|
import com.xiaopeng.account.model.query.SysUserListQuery;
|
import com.xiaopeng.account.service.*;
|
import com.xiaopeng.api.model.account.*;
|
import com.xiaopeng.api.vo.account.LoginUser;
|
import com.xiaopeng.common.core.domain.R;
|
import com.xiaopeng.common.core.enums.DisabledEnum;
|
import com.xiaopeng.common.core.exception.ServiceException;
|
import com.xiaopeng.common.core.utils.RSAUtil;
|
import com.xiaopeng.common.core.utils.StringUtils;
|
import com.xiaopeng.common.core.web.controller.BaseController;
|
import com.xiaopeng.common.core.web.domain.AjaxResult;
|
import com.xiaopeng.common.core.web.page.PageInfo;
|
import com.xiaopeng.common.log.annotation.Log;
|
import com.xiaopeng.common.log.enums.BusinessType;
|
import com.xiaopeng.common.redis.service.RedisService;
|
import com.xiaopeng.common.security.service.TokenService;
|
import com.xiaopeng.common.security.utils.SecurityUtils;
|
import io.swagger.annotations.ApiOperation;
|
import io.swagger.annotations.ApiParam;
|
import org.apache.commons.lang3.ArrayUtils;
|
import org.apache.shardingsphere.transaction.annotation.ShardingSphereTransactionType;
|
import org.apache.shardingsphere.transaction.core.TransactionType;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.transaction.annotation.Transactional;
|
import org.springframework.validation.annotation.Validated;
|
import org.springframework.web.bind.annotation.*;
|
|
import javax.annotation.Resource;
|
import javax.servlet.http.HttpServletRequest;
|
import java.security.KeyPair;
|
import java.time.Duration;
|
import java.time.LocalDate;
|
import java.time.LocalDateTime;
|
import java.time.format.DateTimeFormatter;
|
import java.util.List;
|
import java.util.Objects;
|
import java.util.concurrent.TimeUnit;
|
import java.util.stream.Collectors;
|
|
/**
|
* 用户信息
|
*
|
* @author ruoyi
|
*/
|
@RestController
|
public class SysUserController extends BaseController {
|
private static final DateTimeFormatter UNIQUE_NUMBER_DATE_FORMATTER = DateTimeFormatter.BASIC_ISO_DATE;
|
private static final String UNIQUE_NUMBER_REDIS_KEY_PREFIX = "sys:user:unique-number:";
|
|
@Resource
|
private ISysUserService userService;
|
|
@Resource
|
private ISysRoleBakService roleBakService;
|
|
@Resource
|
private ISysRoleService sysRoleService;
|
@Resource
|
private ISysDeptService deptService;
|
|
@Resource
|
private ISysPostService postService;
|
|
@Resource
|
private ISysUserRoleService sysUserRoleService;
|
@Autowired
|
private RedisService redisService;
|
@Resource
|
private ISysGroupService sysGroupService;
|
|
|
/**
|
* 获取用户列表
|
*/
|
@GetMapping("/api/v1/sys-user/pageList")
|
@ApiOperation(value = "账号管理分页列表", tags = {"管理后台-账号管理"})
|
public AjaxResult<PageInfo<SysUser>> list(final SysUserListQuery sysUserListQuery) {
|
LoginUser loginUser = tokenService.getLoginUser();
|
PageInfo<SysUser> pageInfo = new PageInfo<SysUser>(sysUserListQuery.getPageNum(), sysUserListQuery.getPageSize());
|
PageInfo<SysUser> page = userService.getList(pageInfo, sysUserListQuery);
|
page.getRecords().forEach(user -> {
|
if(!loginUser.getPhoneDesensitization()){
|
user.setPhoneNumber(DesensitizedUtil.mobilePhone(user.getPhoneNumber()));
|
// user.setUserAccount(sysGroupService.getPhoneDesensitization(user.getUserAccount()));
|
}
|
});
|
return AjaxResult.success(page);
|
}
|
/**
|
* 获取用户不分页列表
|
*/
|
@GetMapping("/api/v1/sys-user/listAll")
|
@ApiOperation(value = "账号管理不分页列表", tags = {"管理后台-账号管理"})
|
public R<List<SysUser>> listAll() {
|
LoginUser loginUser = tokenService.getLoginUser();
|
List<SysUser> listAll = userService.list();
|
for (SysUser sysUser : listAll) {
|
if(!loginUser.getPhoneDesensitization()){
|
sysUser.setPhoneNumber(DesensitizedUtil.mobilePhone(sysUser.getPhoneNumber()));
|
}
|
}
|
return R.ok(listAll);
|
}
|
|
|
|
/**
|
* 新增用户
|
*/
|
@Log(title = "帐号管理", businessType = BusinessType.INSERT)
|
@PostMapping("/api/v1/sys-user/add")
|
@ApiOperation(value = "添加帐号", tags = {"管理后台-帐号管理"})
|
public AjaxResult add(@RequestBody SysUser user) {
|
if (StringUtils.isNotEmpty(user.getPhoneNumber()) && !userService.checkPhoneUnique(user)) {
|
throw new ServiceException("手机号已开通账号", I18nKeyConstant.ACCOUNT_PHONE_DUPLICATE);
|
}
|
if (StringUtils.isNotEmpty(user.getUserAccount()) && !userService.checkUserNameUnique(user)) {
|
throw new ServiceException("登录账号重复", I18nKeyConstant.ACCOUNT_DUPLICATE);
|
}
|
user.setUniqueNumber(generateUniqueNumber());
|
user.setPassword(SecurityUtils.encryptPassword(user.getPassword()));
|
//TODO 手机号脱敏存储
|
userService.insertUser(user);
|
SysUserRole sysUserRole = new SysUserRole();
|
sysUserRole.setRoleId(user.getRoleId());
|
sysUserRole.setUserId(user.getId());
|
sysUserRoleService.insertSysUserRole(sysUserRole);
|
return AjaxResult.success();
|
}
|
|
private String generateUniqueNumber() {
|
LocalDate today = LocalDate.now();
|
String dateStr = UNIQUE_NUMBER_DATE_FORMATTER.format(today);
|
String redisKey = UNIQUE_NUMBER_REDIS_KEY_PREFIX + dateStr;
|
|
LocalDateTime now = LocalDateTime.now();
|
LocalDateTime tomorrowStart = today.plusDays(1).atStartOfDay();
|
long expireSeconds = Duration.between(now, tomorrowStart).getSeconds() + 60;
|
|
for (int i = 0; i < 10; i++) {
|
Long seq = redisService.redisTemplate.opsForValue().increment(redisKey);
|
if (seq == null) {
|
throw new ServiceException("用户编号生成失败");
|
}
|
if (expireSeconds > 0) {
|
redisService.expire(redisKey, expireSeconds, TimeUnit.SECONDS);
|
}
|
if (seq > 999999L) {
|
throw new ServiceException("当天生成用户编号已达上限");
|
}
|
String uniqueNumber = dateStr + String.format("%06d", seq);
|
|
Long count = userService.lambdaQuery().eq(SysUser::getUniqueNumber, uniqueNumber).count();
|
if (count == null || count == 0L) {
|
return uniqueNumber;
|
}
|
}
|
throw new ServiceException("用户编号生成失败，请稍后重试");
|
}
|
|
|
@GetMapping("/verifyUserNameRepeat/{username}")
|
@ApiOperation(value = "校验账号是否重复", tags = {"管理后台-系统用户管理"})
|
public AjaxResult verifyUserNameRepeat(@PathVariable String username){
|
SysUser user = new SysUser();
|
user.setUserAccount(username);
|
if (StringUtils.isNotEmpty(username) && !userService.checkUserNameUnique(user)) {
|
return error("账号不可重复");
|
}
|
return success();
|
}
|
|
|
|
|
|
|
/**
|
* 根据用户编号获取详细信息
|
*/
|
@ApiOperation(value = "获取用户详情", tags = {"管理后台-系统用户管理"})
|
@GetMapping("/api/v1/getInfo/{userId}")
|
public AjaxResult getInfo(@PathVariable Long userId) {
|
LoginUser loginUser = tokenService.getLoginUser();
|
userService.checkUserDataScope(userId);
|
AjaxResult ajax = AjaxResult.success();
|
List<SysRole> roles = sysRoleService.list();
|
ajax.put("roles", SysUser.isAdmin(userId) ? roles : roles.stream().filter(r -> !r.isAdmin()).collect(Collectors.toList()));
|
ajax.put("posts", postService.selectPostAll());
|
if (StringUtils.isNotNull(userId)) {
|
SysUser sysUser = userService.selectUserById(userId);
|
if(!loginUser.getPhoneDesensitization()){
|
sysUser.setPhoneNumber(DesensitizedUtil.mobilePhone(sysUser.getPhoneNumber()));
|
}
|
ajax.put(AjaxResult.DATA_TAG, sysUser);
|
ajax.put("postIds", postService.selectPostListByUserId(userId));
|
// ajax.put("roleIds", sysUser.getRoles().stream().map(SysRole::getId).collect(Collectors.toList()));
|
}
|
return AjaxResult.success(ajax);
|
}
|
|
|
/**
|
* 修改用户
|
*/
|
@Log(title = "帐号管理", businessType = BusinessType.UPDATE)
|
@PutMapping("/api/v1/sys-user/edit")
|
@ApiOperation(value = "编辑帐号", tags = {"管理后台-帐号管理"})
|
public AjaxResult edit(@Validated @RequestBody SysUser user) {
|
userService.checkUserAllowed(user);
|
// userService.checkUserDataScope(user.getId());
|
SysUser sysUser = userService.getOne(Wrappers.lambdaQuery(SysUser.class)
|
.eq(SysUser::getPhoneNumber, user.getPhoneNumber())
|
.last("LIMIT 1"));
|
|
if (StringUtils.isNotEmpty(user.getPhoneNumber()) && (Objects.nonNull(sysUser) && !user.getId().equals(sysUser.getId()) )) {
|
throw new ServiceException("手机号已开通账号", I18nKeyConstant.ACCOUNT_PHONE_DUPLICATE);
|
}
|
sysUser = userService.getOne(Wrappers.lambdaQuery(SysUser.class)
|
.eq(SysUser::getUserAccount, user.getUserAccount())
|
.last("LIMIT 1"));
|
if (StringUtils.isNotEmpty(user.getUserAccount()) && (Objects.nonNull(sysUser) && !user.getId().equals(sysUser.getId()) )) {
|
throw new ServiceException("登录账号重复", I18nKeyConstant.ACCOUNT_DUPLICATE);
|
}
|
if (user.getPassword() != null && !user.getPassword().isEmpty()) {
|
user.setPassword(null);
|
}
|
userService.updateById(user);
|
|
//删除旧的角色数据，添加新的角色
|
sysUserRoleService.remove(new LambdaQueryWrapper<SysUserRole>().eq(SysUserRole::getUserId, user.getId()));
|
//添加新的角色数据
|
SysUserRole userRole = new SysUserRole();
|
userRole.setUserId(user.getId());
|
userRole.setRoleId(user.getRoleId());
|
sysUserRoleService.save(userRole);
|
return success();
|
}
|
|
@Resource
|
private TokenService tokenService;
|
/**
|
* 删除用户
|
*/
|
@Log(title = "帐号管理", businessType = BusinessType.DELETE)
|
@DeleteMapping("/api/v1/sys-user/{userIds}")
|
@ApiOperation(value = "删除账号", tags = {"管理后台-帐号管理"})
|
public AjaxResult remove(@PathVariable Long[] userIds) {
|
if (ArrayUtils.contains(userIds, tokenService.getLoginUser())) {
|
throw new ServiceException("当前用户不能删除", I18nKeyConstant.ACCOUNT_CURRENT_USER_NOT_DELETE);
|
}
|
return toAjax(userService.deleteUserByIds(userIds));
|
}
|
|
|
|
|
@PostMapping("/api/v1/sys-user/switchStatus/{id}")
|
@ApiOperation(value = "账号管理--禁用/启用", tags = {"管理后台-帐号管理"})
|
public AjaxResult shopUserStart(@ApiParam(name = "id", value = "帐号ID") @PathVariable("id") Long id) {
|
SysUser sysUser = userService.getById(id);
|
if (sysUser.getStatus().equals(DisabledEnum.NO.getCode())) {
|
sysUser.setStatus(DisabledEnum.YES.getCode());
|
} else {
|
sysUser.setStatus(DisabledEnum.NO.getCode());
|
}
|
return toAjax(userService.updateById(sysUser));
|
}
|
|
|
@PostMapping("/getUserList")
|
public R<List<SysUser>> getUserList(@RequestBody List<Integer> userIds) {
|
List<SysUser> list = userService.list(new LambdaQueryWrapper<SysUser>().in(SysUser::getId, userIds));
|
return R.ok(list);
|
}
|
|
|
@PostMapping("/isAdmin")
|
public R<Long> isAdmin(@RequestBody Long userId){
|
Long id = null;
|
SysUserRole one = sysUserRoleService.getOne(new LambdaQueryWrapper<SysUserRole>().eq(SysUserRole::getUserId, userId));
|
if (Objects.nonNull(one)) {
|
id =one.getRoleId();
|
}
|
return R.ok(id);
|
}
|
|
@PostMapping("/getSysUser")
|
public R<SysUser> getSysUser(@RequestParam("userId") Long userId) {
|
try {
|
SysUser sysUser = userService.selectUserById(userId);
|
return R.ok(sysUser);
|
} catch (Exception e) {
|
e.printStackTrace();
|
return R.ok();
|
}
|
}
|
|
@PostMapping("/updateSysUser")
|
@Transactional
|
@ShardingSphereTransactionType(TransactionType.BASE)
|
public R<Boolean> updateSysUser(@RequestBody SysUser sysUser) {
|
try {
|
sysUser.setUpdateBy(SecurityUtils.getUsername());
|
userService.updateUser(sysUser);
|
if(null != sysUser.getRoleId()){
|
sysUserRoleService.deleteSysUserRoleByUserId(sysUser.getId());
|
SysUserRole sysUserRole = new SysUserRole();
|
sysUserRole.setRoleId(sysUser.getRoleId());
|
sysUserRole.setUserId(sysUser.getId());
|
sysUserRoleService.insertSysUserRole(sysUserRole);
|
}
|
return R.ok(true);
|
} catch (Exception e) {
|
e.printStackTrace();
|
return R.fail();
|
}
|
}
|
|
|
|
|
|
|
|
|
/**
|
* 重置密码
|
*/
|
@Log(title = "帐号管理", businessType = BusinessType.UPDATE)
|
@PutMapping("/api/v1/sys-user/rePassword")
|
@ApiOperation(value = "重置密码", tags = {"管理后台-帐号管理"})
|
public AjaxResult resetPwd(@RequestBody UserPwdResetDTO dto) {
|
SysUser user = userService.getById(dto.getUserId());
|
if (Objects.isNull(user)) {
|
throw new ServiceException("用户不存在");
|
}
|
userService.checkUserAllowed(user);
|
// userService.checkUserDataScope(user.getId());
|
return toAjax(userService.resetUserPwd(user.getId(), SecurityUtils.encryptPassword(dto.getNewPassword().trim())));
|
}
|
|
/**
|
* 状态修改
|
*/
|
@Log(title = "用户管理", businessType = BusinessType.UPDATE)
|
@PutMapping("/changeStatus")
|
public AjaxResult changeStatus(@RequestBody SysUser user) {
|
userService.checkUserAllowed(user);
|
userService.checkUserDataScope(user.getId());
|
user.setUpdateBy(SecurityUtils.getUsername());
|
return toAjax(userService.updateUserStatus(user));
|
}
|
|
/**
|
* 根据用户编号获取授权角色
|
*/
|
@GetMapping("/authRole/{userId}")
|
public AjaxResult authRole(@PathVariable("userId") Long userId) {
|
AjaxResult ajax = AjaxResult.success();
|
SysUser user = userService.selectUserById(userId);
|
List<SysRoleBak> roles = roleBakService.selectRolesByUserId(userId);
|
ajax.put("user", user);
|
ajax.put("roles", SysUser.isAdmin(userId) ? roles : roles.stream().filter(r -> !r.isAdmin()).collect(Collectors.toList()));
|
return ajax;
|
}
|
|
/**
|
* 用户授权角色
|
*/
|
@Log(title = "用户管理", businessType = BusinessType.GRANT)
|
@PutMapping("/authRole")
|
public AjaxResult insertAuthRole(Long userId, Long[] roleIds) {
|
userService.checkUserDataScope(userId);
|
userService.insertUserAuth(userId, roleIds);
|
return success();
|
}
|
|
/**
|
* 获取部门树列表
|
*/
|
@GetMapping("/deptTree")
|
public AjaxResult deptTree(SysDept dept) {
|
return success(deptService.selectDeptTreeList(dept));
|
}
|
|
@PostMapping("/updateUser")
|
public R<Boolean> updateUser(@RequestBody SysUser sysUser){
|
return R.ok(userService.updateById(sysUser));
|
}
|
|
/**
|
* 通过用户id查询角色对象
|
* @param userId
|
* @return
|
*/
|
@PostMapping("/queryRoleByUserId/{userId}")
|
public R<SysRole> queryRoleByUserId(@PathVariable("userId") Long userId){
|
SysUserRole one = sysUserRoleService.getOne(Wrappers.lambdaQuery(SysUserRole.class)
|
.eq(SysUserRole::getUserId, userId)
|
.last("LIMIT 1"));
|
System.out.println("通过用户id查询角色对象"+one);
|
if(Objects.nonNull(one)){
|
SysRole byId = sysRoleService.getOne(Wrappers.lambdaQuery(SysRole.class)
|
.eq(SysRole::getId,one.getRoleId())
|
.last("LIMIT 1"));
|
return R.ok(byId);
|
}
|
return R.ok();
|
}
|
|
|
@PostMapping("/queryRoleByRoleId/{roleId}")
|
public R<SysRole> queryRoleByRoleId(@PathVariable("roleId") Long roleId){
|
return R.ok( sysRoleService.getOne(Wrappers.lambdaQuery(SysRole.class)
|
.eq(SysRole::getId, roleId)
|
.last("LIMIT 1")));
|
}
|
|
/**
|
* 通过手机号集合查询用户
|
* @param phoneList
|
* @return
|
*/
|
@PostMapping("/queryUserByPhoneList")
|
public R<List<SysUser>> queryUserByPhoneList(@RequestBody List<String> phoneList){
|
List<SysUser> list = userService.list(Wrappers.lambdaQuery(SysUser.class)
|
.in(SysUser::getPhoneNumber, phoneList));
|
return R.ok(list);
|
}
|
|
|
/**
|
* 通过手机号查询用户
|
* @param phone
|
* @return
|
*/
|
@PostMapping("/queryUserByPhone")
|
public R<SysUser> queryUserByPhone(@RequestBody String phone){
|
SysUser user = userService.getOne(Wrappers.lambdaQuery(SysUser.class)
|
.eq(SysUser::getPhoneNumber, phone)
|
.last("LIMIT 1"));
|
return R.ok(user);
|
}
|
|
|
/**
|
* 通过账号查询用户
|
* @param userName
|
* @return
|
*/
|
@ResponseBody
|
@PostMapping("/logan/queryUserByUserName")
|
public R<SysUser> queryUserByUserName(@RequestBody String userName){
|
SysUser user = userService.getOne(Wrappers.lambdaQuery(SysUser.class)
|
.eq(SysUser::getUserAccount, userName)
|
.last("LIMIT 1"));
|
return R.ok(user);
|
}
|
|
|
/**
|
* 添加管理员
|
* @param user
|
*/
|
@ResponseBody
|
@PostMapping("/addSysUser")
|
@Transactional
|
@ShardingSphereTransactionType(TransactionType.BASE)
|
public R<Long> addSysUser(@RequestBody SysUser user) {
|
// if (StringUtils.isNotEmpty(user.getPhonenumber()) && !userService.checkPhoneUnique(user)) {
|
// throw new RuntimeException("手机号已开通账号");
|
// }
|
if (StringUtils.isNotEmpty(user.getUserAccount()) && !userService.checkUserNameUnique(user)) {
|
throw new RuntimeException("登录账号已存在");
|
}
|
user.setCreateBy(SecurityUtils.getUsername());
|
user.setPassword(SecurityUtils.encryptPassword(user.getPassword()));
|
userService.insertUser(user);
|
SysUserRole sysUserRole = new SysUserRole();
|
sysUserRole.setRoleId(user.getRoleId());
|
sysUserRole.setUserId(user.getId());
|
sysUserRoleService.insertSysUserRole(sysUserRole);
|
return R.ok(user.getId());
|
}
|
|
|
@ResponseBody
|
@PostMapping("/resetPassword")
|
public R resetPassword(@RequestBody SysUser user) {
|
user.setPassword(SecurityUtils.encryptPassword(user.getPassword()));
|
user.setUpdateBy(SecurityUtils.getUsername());
|
userService.resetPwd(user);
|
return R.ok();
|
}
|
|
|
@ResponseBody
|
@PostMapping("/getSysUserById")
|
public SysUser getSysUserById(@RequestParam("userId") Long userId){
|
return userService.getById(userId);
|
}
|
|
|
@ResponseBody
|
@PostMapping("/base/v1/getRsaPubKey")
|
@ApiOperation(value = "获取数据加密RSA公钥", tags = {"公共接口"})
|
public R<String> getRsaPubKey(HttpServletRequest request){
|
String sessionId = request.getSession(true).getId();
|
if(StringUtils.isEmpty(sessionId)){
|
throw new ServiceException("请求失败，请稍后重试", I18nKeyConstant.REQUEST_FAILED);
|
}
|
Object cacheObject = redisService.getCacheObject("session:id:" + sessionId);
|
if (null != cacheObject) {
|
JSONObject jsonObject = JSONObject.parseObject(cacheObject.toString());
|
return R.ok(jsonObject.getString("publicKey"));
|
}
|
KeyPair keyPair = RSAUtil.generateKeyPair();
|
String publicKey = RSAUtil.getPublicKey(keyPair);
|
String privateKey = RSAUtil.getPrivateKey(keyPair);
|
JSONObject jsonObject = new JSONObject();
|
jsonObject.put("publicKey", publicKey);
|
jsonObject.put("privateKey", privateKey);
|
redisService.setCacheObject("session:id:" + sessionId, jsonObject.toJSONString(), 1L, TimeUnit.MINUTES);
|
return R.ok(publicKey);
|
}
|
/**
|
* 根据ID列表批量查询管理用户信息
|
*
|
* @param ids 管理用户ID列表
|
* @return 管理用户列表
|
*/
|
@PostMapping("/logan/inner/sys-user/listByIds")
|
R<List<SysUser>> listByIds(@RequestBody List<Long> ids){
|
List<SysUser> list = userService.list(new LambdaQueryWrapper<SysUser>().in(SysUser::getId, ids));
|
return R.ok(list);
|
}
|
|
}
|
