package com.ruoyi.common.security.utils;
|
|
import javax.servlet.http.HttpServletRequest;
|
|
import com.ruoyi.system.api.model.AppUser;
|
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
|
import com.ruoyi.common.core.constant.SecurityConstants;
|
import com.ruoyi.common.core.constant.TokenConstants;
|
import com.ruoyi.common.core.context.SecurityContextHolder;
|
import com.ruoyi.common.core.utils.ServletUtils;
|
import com.ruoyi.common.core.utils.StringUtils;
|
import com.ruoyi.system.api.model.LoginUser;
|
|
/**
|
* 权限获取工具类
|
*
|
* @author ruoyi
|
*/
|
public class SecurityUtils
|
{
|
/**
|
* 获取用户ID
|
*/
|
public static Long getUserId()
|
{
|
return SecurityContextHolder.getUserId();
|
}
|
|
/**
|
* 获取用户名称
|
*/
|
public static String getUsername()
|
{
|
return SecurityContextHolder.getUserName();
|
}
|
|
/**
|
* 获取用户key
|
*/
|
public static String getUserKey()
|
{
|
return SecurityContextHolder.getUserKey();
|
}
|
|
/**
|
* 获取登录用户信息
|
*/
|
public static LoginUser getLoginUser()
|
{
|
return SecurityContextHolder.get(SecurityConstants.LOGIN_USER, LoginUser.class);
|
}
|
|
public static AppUser getAppLoginUser()
|
{
|
return SecurityContextHolder.get(SecurityConstants.COMPANY_LOGIN_USER, AppUser.class);
|
}
|
|
/**
|
* 获取企业用户信息
|
*/
|
public static AppUser getCompanyLoginUser()
|
{
|
return SecurityContextHolder.get(SecurityConstants.COMPANY_LOGIN_USER, AppUser.class);
|
}
|
|
|
/**
|
* 获取请求token
|
*/
|
public static String getToken()
|
{
|
return getToken(ServletUtils.getRequest());
|
}
|
|
/**
|
* 根据request获取请求token
|
*/
|
public static String getToken(HttpServletRequest request)
|
{
|
// 从header获取token标识
|
String token = request.getHeader(SecurityConstants.AUTHORIZATION_HEADER);
|
return replaceTokenPrefix(token);
|
}
|
|
/**
|
* 裁剪token前缀
|
*/
|
public static String replaceTokenPrefix(String token)
|
{
|
// 如果前端设置了令牌前缀，则裁剪掉前缀
|
if (StringUtils.isNotEmpty(token) && token.startsWith(TokenConstants.PREFIX))
|
{
|
token = token.replaceFirst(TokenConstants.PREFIX, "");
|
}
|
return token;
|
}
|
|
/**
|
* 是否为管理员
|
*
|
* @param userId 用户ID
|
* @return 结果
|
*/
|
public static boolean isAdmin(Long userId)
|
{
|
return userId != null && 1L == userId;
|
}
|
|
/**
|
* 生成BCryptPasswordEncoder密码
|
*
|
* @param password 密码
|
* @return 加密字符串
|
*/
|
public static String encryptPassword(String password)
|
{
|
BCryptPasswordEncoder passwordEncoder = new BCryptPasswordEncoder();
|
return passwordEncoder.encode(password);
|
}
|
|
/**
|
* 判断密码是否相同
|
*
|
* @param rawPassword 真实密码
|
* @param encodedPassword 加密后字符
|
* @return 结果
|
*/
|
public static boolean matchesPassword(String rawPassword, String encodedPassword)
|
{
|
BCryptPasswordEncoder passwordEncoder = new BCryptPasswordEncoder();
|
return passwordEncoder.matches(rawPassword, encodedPassword);
|
}
|
|
public static void main(String[] args) {
|
String password1 = "$2a$10$qB8arbbFx4mevJzCOoChhebLS/ULjY7BCBNMNk9CoSJHAUM/Ixr2K";
|
for (int i = 0; i < 5; i++) {
|
String password = encryptPassword("123");
|
System.out.println(matchesPassword("123",password1));
|
}
|
}
|
}
|
