From d3d65af98906ccc78652c16be7e8a9fbdc03f258 Mon Sep 17 00:00:00 2001
From: liujie <1793218484@qq.com>
Date: 星期二, 12 五月 2026 19:13:27 +0800
Subject: [PATCH] 日志 + 加密
---
xp-robotaxi-account-boot/src/main/java/com/xiaopeng/account/controller/SysUserController.java | 51 ++++++++++++++++++++++++++++++++++++++++++++++++---
1 files changed, 48 insertions(+), 3 deletions(-)
diff --git a/xp-robotaxi-account-boot/src/main/java/com/xiaopeng/account/controller/SysUserController.java b/xp-robotaxi-account-boot/src/main/java/com/xiaopeng/account/controller/SysUserController.java
index 9b95925..559f216 100644
--- a/xp-robotaxi-account-boot/src/main/java/com/xiaopeng/account/controller/SysUserController.java
+++ b/xp-robotaxi-account-boot/src/main/java/com/xiaopeng/account/controller/SysUserController.java
@@ -12,6 +12,7 @@
import com.xiaopeng.common.core.enums.DisabledEnum;
import com.xiaopeng.common.core.exception.ServiceException;
import com.xiaopeng.common.core.utils.RSAUtil;
+import com.xiaopeng.common.core.utils.SensitiveDataCryptoUtil;
import com.xiaopeng.common.core.utils.StringUtils;
import com.xiaopeng.common.core.web.controller.BaseController;
import com.xiaopeng.common.core.web.domain.AjaxResult;
@@ -42,6 +43,9 @@
import java.util.Objects;
import java.util.concurrent.TimeUnit;
import java.util.stream.Collectors;
+import com.xiaopeng.common.log.annotation.AdminOperationLog;
+import com.xiaopeng.common.log.enums.AdminBusinessType;
+import com.xiaopeng.common.log.enums.AdminOperationType;
/**
* 用户信息
@@ -101,6 +105,12 @@
@Log(title = "帐号管理", businessType = BusinessType.INSERT)
@PostMapping("/api/v1/sys-user/add")
@ApiOperation(value = "添加帐号", tags = {"管理后台-帐号管理"})
+ @AdminOperationLog(
+ businessType = AdminBusinessType.ACCOUNT_MANAGEMENT,
+ operationType = AdminOperationType.ADD,
+ content = "添加帐号",
+ appendRequestData = true
+ )
public AjaxResult add(@RequestBody SysUser user) {
if (StringUtils.isNotEmpty(user.getPhoneNumber()) && !userService.checkPhoneUnique(user)) {
throw new ServiceException("手机号已开通账号", I18nKeyConstant.ACCOUNT_PHONE_DUPLICATE);
@@ -193,11 +203,17 @@
@Log(title = "帐号管理", businessType = BusinessType.UPDATE)
@PutMapping("/api/v1/sys-user/edit")
@ApiOperation(value = "编辑帐号", tags = {"管理后台-帐号管理"})
+ @AdminOperationLog(
+ businessType = AdminBusinessType.ACCOUNT_MANAGEMENT,
+ operationType = AdminOperationType.EDIT,
+ content = "编辑帐号",
+ appendRequestData = true
+ )
public AjaxResult edit(@Validated @RequestBody SysUser user) {
userService.checkUserAllowed(user);
// userService.checkUserDataScope(user.getId());
SysUser sysUser = userService.getOne(Wrappers.lambdaQuery(SysUser.class)
- .eq(SysUser::getPhoneNumber, user.getPhoneNumber())
+ .in(SysUser::getPhoneNumber, SensitiveDataCryptoUtil.queryValues(user.getPhoneNumber()))
.last("LIMIT 1"));
if (StringUtils.isNotEmpty(user.getPhoneNumber()) && (Objects.nonNull(sysUser) && !user.getId().equals(sysUser.getId()) )) {
@@ -232,6 +248,12 @@
@Log(title = "帐号管理", businessType = BusinessType.DELETE)
@DeleteMapping("/api/v1/sys-user/{userIds}")
@ApiOperation(value = "删除账号", tags = {"管理后台-帐号管理"})
+ @AdminOperationLog(
+ businessType = AdminBusinessType.ACCOUNT_MANAGEMENT,
+ operationType = AdminOperationType.DELETE,
+ content = "删除账号",
+ appendRequestData = true
+ )
public AjaxResult remove(@PathVariable Long[] userIds) {
if (ArrayUtils.contains(userIds, tokenService.getLoginUser())) {
throw new ServiceException("当前用户不能删除", I18nKeyConstant.ACCOUNT_CURRENT_USER_NOT_DELETE);
@@ -244,6 +266,12 @@
@PostMapping("/api/v1/sys-user/switchStatus/{id}")
@ApiOperation(value = "账号管理--禁用/启用", tags = {"管理后台-帐号管理"})
+ @AdminOperationLog(
+ businessType = AdminBusinessType.ACCOUNT_MANAGEMENT,
+ operationType = AdminOperationType.SWITCH_STATUS,
+ content = "账号管理--禁用/启用",
+ appendRequestData = true
+ )
public AjaxResult shopUserStart(@ApiParam(name = "id", value = "帐号ID") @PathVariable("id") Long id) {
SysUser sysUser = userService.getById(id);
if (sysUser.getStatus().equals(DisabledEnum.NO.getCode())) {
@@ -317,6 +345,12 @@
@Log(title = "帐号管理", businessType = BusinessType.UPDATE)
@PutMapping("/api/v1/sys-user/rePassword")
@ApiOperation(value = "重置密码", tags = {"管理后台-帐号管理"})
+ @AdminOperationLog(
+ businessType = AdminBusinessType.ACCOUNT_MANAGEMENT,
+ operationType = AdminOperationType.RESET_PASSWORD,
+ content = "重置密码",
+ appendRequestData = true
+ )
public AjaxResult resetPwd(@RequestBody UserPwdResetDTO dto) {
SysUser user = userService.getById(dto.getUserId());
if (Objects.isNull(user)) {
@@ -412,7 +446,7 @@
@PostMapping("/queryUserByPhoneList")
public R<List<SysUser>> queryUserByPhoneList(@RequestBody List<String> phoneList){
List<SysUser> list = userService.list(Wrappers.lambdaQuery(SysUser.class)
- .in(SysUser::getPhoneNumber, phoneList));
+ .in(SysUser::getPhoneNumber, buildPhoneQueryValues(phoneList)));
return R.ok(list);
}
@@ -425,11 +459,22 @@
@PostMapping("/queryUserByPhone")
public R<SysUser> queryUserByPhone(@RequestBody String phone){
SysUser user = userService.getOne(Wrappers.lambdaQuery(SysUser.class)
- .eq(SysUser::getPhoneNumber, phone)
+ .in(SysUser::getPhoneNumber, SensitiveDataCryptoUtil.queryValues(phone))
.last("LIMIT 1"));
return R.ok(user);
}
+ private List<String> buildPhoneQueryValues(List<String> phoneList) {
+ if (phoneList == null) {
+ return java.util.Collections.emptyList();
+ }
+ return phoneList.stream()
+ .filter(StringUtils::isNotBlank)
+ .flatMap(phone -> SensitiveDataCryptoUtil.queryValues(phone).stream())
+ .distinct()
+ .collect(Collectors.toList());
+ }
+
/**
* 通过账号查询用户
--
Gitblit v1.7.1