package com.ruoyi.web.controller.system;
|
|
import java.util.HashMap;
|
import java.util.List;
|
import java.util.Map;
|
import java.util.Set;
|
import java.util.concurrent.TimeUnit;
|
|
import com.baomidou.mybatisplus.core.toolkit.Wrappers;
|
import com.ruoyi.common.core.domain.R;
|
import com.ruoyi.common.core.domain.entity.SysRole;
|
import com.ruoyi.common.core.domain.entity.TSysUserResp;
|
import com.ruoyi.common.core.domain.model.LoginUser;
|
import com.ruoyi.common.core.domain.model.LoginUserApplet;
|
import com.ruoyi.common.core.redis.RedisCache;
|
import com.ruoyi.common.redis.service.RedisService;
|
import com.ruoyi.framework.web.service.TokenService;
|
import com.ruoyi.system.model.TSysAppUser;
|
import com.ruoyi.system.service.ISysRoleService;
|
import com.ruoyi.system.service.TSysAppUserService;
|
import com.ruoyi.system.utils.wx.body.resp.Code2SessionRespBody;
|
import com.ruoyi.system.utils.wx.body.resq.Code2SessionResqBody;
|
import com.ruoyi.system.utils.wx.model.WeixinProperties;
|
import com.ruoyi.system.utils.wx.pojo.AppletUserDecodeData;
|
import com.ruoyi.system.utils.wx.pojo.AppletUserEncrypteData;
|
import com.ruoyi.system.utils.wx.tools.WxAppletTools;
|
import com.ruoyi.system.utils.wx.tools.WxUtils;
|
import io.swagger.annotations.Api;
|
import io.swagger.annotations.ApiOperation;
|
import lombok.extern.slf4j.Slf4j;
|
import org.springframework.beans.BeanUtils;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.util.CollectionUtils;
|
import org.springframework.util.StringUtils;
|
import org.springframework.web.bind.annotation.*;
|
import com.ruoyi.common.constant.Constants;
|
import com.ruoyi.common.core.domain.AjaxResult;
|
import com.ruoyi.common.core.domain.entity.SysMenu;
|
import com.ruoyi.common.core.domain.entity.SysUser;
|
import com.ruoyi.common.core.domain.model.LoginBody;
|
import com.ruoyi.common.utils.SecurityUtils;
|
import com.ruoyi.framework.web.service.SysLoginService;
|
import com.ruoyi.framework.web.service.SysPermissionService;
|
import com.ruoyi.system.service.ISysMenuService;
|
import org.springframework.web.client.RestTemplate;
|
|
import javax.annotation.Resource;
|
|
/**
|
* 登录验证
|
*
|
* @author ruoyi
|
*/
|
@Slf4j
|
@Api(tags = "登录")
|
@RestController
|
public class SysLoginController
|
{
|
@Autowired
|
private SysLoginService loginService;
|
|
@Autowired
|
private ISysMenuService menuService;
|
|
@Autowired
|
private SysPermissionService permissionService;
|
@Autowired
|
private RedisCache redisCache;
|
@Autowired
|
private TokenService tokenService;
|
@Autowired
|
private ISysRoleService roleService;
|
@Autowired
|
private WeixinProperties wxConfig;
|
@Autowired
|
private RestTemplate wxRestTemplate;
|
@Resource
|
private RedisService redisService;
|
@Resource
|
private TSysAppUserService sysAppUserService;
|
/**
|
* 账号密码登录
|
*
|
* @param loginBody 登录信息
|
* @return 结果
|
*/
|
@ApiOperation(value = "账号密码登录",notes = "账号密码登录")
|
@PostMapping("/login")
|
public AjaxResult login(@RequestBody LoginBody loginBody)
|
{
|
AjaxResult ajax = AjaxResult.success();
|
// 生成令牌
|
LoginUser loginUser = loginService.login(loginBody.getUsername(), loginBody.getPassword(), loginBody.getCode(),
|
loginBody.getUuid());
|
ajax.put(Constants.TOKEN, tokenService.createToken(loginUser));
|
List<SysRole> roles = loginUser.getUser().getRoles();
|
if(CollectionUtils.isEmpty(roles)){
|
return AjaxResult.error("请关联角色!");
|
}
|
if(roles.get(0).getStatus() == 1){
|
return AjaxResult.error("该账号角色已被禁用!");
|
}
|
|
List<SysMenu> menus = roleService.roleInfoFromUserId(loginUser.getUserId());
|
|
ajax.put("menus",menus);
|
ajax.put("roleName",roles.get(0).getRoleName());
|
ajax.put("userInfo",loginUser);
|
return ajax;
|
}
|
|
@ApiOperation(value = "通过code获得openid,获取用户信息",tags = {"微信小程序登录"})
|
@PostMapping("/openIdByJsCode")
|
public R<Map<String, Object>> openIdByJsCode(@RequestBody AppletUserEncrypteData data) {
|
log.info("<<<<<<<<换取openid开始<<<<<<<<:{}", data.getCode());
|
WxAppletTools appletTools = new WxAppletTools(wxRestTemplate, wxConfig, redisService);
|
Code2SessionRespBody body = appletTools.getOpenIdByJscode2session(new Code2SessionResqBody().build(data.getCode()));
|
String openid = body.getOpenid();
|
String sessionKey = body.getSessionKey();
|
// 用户信息解密 数据验签
|
// if (StringUtils.isNotBlank(data.getSignature())) {
|
// WxUtils.verifySignature(data.getRawData(), sessionKey, data.getSignature());
|
// }
|
if(StringUtils.isEmpty(data.getEncryptedData()) || StringUtils.isEmpty(data.getIv())){
|
return R.fail("已拒绝授权");
|
}
|
AppletUserDecodeData appletUserDecodeData = WxUtils.encryptedData(data.getEncryptedData(), sessionKey, data.getIv());
|
appletUserDecodeData.setOpenId(openid);
|
// 先使用openId和当前手机号进行查询
|
TSysAppUser sysAppUser = sysAppUserService.getOne(Wrappers.lambdaQuery(TSysAppUser.class)
|
.and(e->e.eq(TSysAppUser::getOpenId, appletUserDecodeData.getOpenId()).or()
|
.eq(TSysAppUser::getPhone, appletUserDecodeData.getPhoneNumber())));
|
if (sysAppUser==null){
|
// appUser.setTenantAttributes();
|
// appUser.setTenantType();
|
sysAppUser = new TSysAppUser();
|
sysAppUser.setPhone(appletUserDecodeData.getPhoneNumber());
|
// sysAppUser.setAccount(appletUserDecodeData.getPhoneNumber());
|
// sysAppUser.setPassword(SecurityUtils.encryptPassword(appletUserDecodeData.getPhoneNumber().substring(5)));
|
sysAppUser.setOpenId(appletUserDecodeData.getOpenId());
|
// 手机号中间四位替换为*
|
sysAppUser.setNickName(appletUserDecodeData.getPhoneNumber().replaceAll("(\\d{3})\\d{4}(\\d{4})", "$1****$2"));
|
sysAppUserService.save(sysAppUser);
|
}
|
LoginUserApplet loginUserApplet = new LoginUserApplet();
|
TSysUserResp sysUserResp = new TSysUserResp();
|
BeanUtils.copyProperties(sysAppUser, sysUserResp);
|
loginUserApplet.setUser(sysUserResp);
|
loginUserApplet.setUserId(sysAppUser.getId());
|
Map<String, Object> tokenInfos = new HashMap<>();
|
tokenInfos.put("token",tokenService.createTokenApplet(loginUserApplet));
|
tokenInfos.put("info",loginUserApplet);
|
return R.ok(tokenInfos);
|
}
|
|
/**
|
* 账号密码登录
|
*
|
* @param loginBody 登录信息
|
* @return 结果
|
*/
|
@ApiOperation(value = "短信登录",notes = "短信登录")
|
@PostMapping("/loginCode")
|
public AjaxResult loginCode(@RequestBody LoginBody loginBody)
|
{
|
AjaxResult ajax = AjaxResult.success();
|
// 生成令牌
|
LoginUserApplet loginUser = loginService.loginCodeApplet(loginBody.getUsername(), loginBody.getCode());
|
ajax.put(Constants.TOKEN, tokenService.createTokenApplet(loginUser));
|
ajax.put("userInfo",loginUser);
|
return ajax;
|
}
|
|
/**
|
* 获取验证码
|
*
|
* @param phone 手机号
|
* @return 结果
|
*/
|
@ApiOperation(value = "获取验证码",notes = "获取验证码")
|
@GetMapping("/getCode")
|
public AjaxResult getCode(@RequestParam String phone)
|
{
|
// 发送验证码并存储到redis
|
if (StringUtils.hasLength(phone)) {
|
String code = String.valueOf((int) (Math.random() * 1000000));
|
redisCache.setCacheObject(phone, code,5*60,TimeUnit.SECONDS);
|
try {
|
// smsUtil.sendSms(phone, "2369926", new String[]{code});
|
} catch (Exception e) {
|
throw new RuntimeException(e);
|
}
|
return AjaxResult.success("发送短信验证码成功!5分钟内有效");
|
}
|
return AjaxResult.error(500, "发送短信验证码失败,请确认手机号码!");
|
}
|
|
/**
|
* 获取用户信息
|
*
|
* @return 用户信息
|
*/
|
@GetMapping("getInfo")
|
public AjaxResult getInfo()
|
{
|
SysUser user = SecurityUtils.getLoginUser().getUser();
|
// 角色集合
|
Set<String> roles = permissionService.getRolePermission(user);
|
// 权限集合
|
Set<String> permissions = permissionService.getMenuPermission(user);
|
AjaxResult ajax = AjaxResult.success();
|
ajax.put("user", user);
|
ajax.put("roles", roles);
|
ajax.put("permissions", permissions);
|
return ajax;
|
}
|
|
/**
|
* 获取路由信息
|
*
|
* @return 路由信息
|
*/
|
@GetMapping("getRouters")
|
public AjaxResult getRouters()
|
{
|
Long userId = SecurityUtils.getUserId();
|
List<SysMenu> menus = menuService.selectMenuTreeByUserId(userId);
|
return AjaxResult.success(menuService.buildMenus(menus));
|
}
|
}
|