package com.dsh.guns.modular.system.controller.system; import com.dsh.course.feignClient.auth.UserClient; import com.dsh.course.feignClient.auth.model.GetTokenRequest; import com.dsh.course.feignClient.auth.model.TokenResponse; import com.dsh.course.model.node.MenuNode; import com.dsh.guns.config.UserExt; import com.dsh.guns.modular.system.controller.util.MD5; import com.dsh.guns.modular.system.model.Role; import com.dsh.guns.modular.system.service.IRelationService; import com.dsh.guns.modular.system.service.IRoleService; import com.dsh.guns.modular.system.util.CacheUtil; import com.google.code.kaptcha.Constants; import com.dsh.guns.core.base.controller.BaseController; import com.dsh.guns.core.common.exception.InvalidKaptchaException; import com.dsh.guns.core.util.KaptchaUtil; import com.dsh.guns.core.util.SinataUtil; import com.dsh.guns.modular.system.model.User; import com.dsh.guns.modular.system.service.IMenuService; import com.dsh.guns.modular.system.service.IUserService; import com.dsh.guns.modular.system.util.AESUtils; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.stereotype.Controller; import org.springframework.ui.Model; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.RequestMethod; import javax.annotation.Resource; import javax.servlet.http.HttpServletRequest; import java.util.*; /** * 登录控制器 * * @author fengshuonan * @Date 2017年1月10日 下午8:25:24 */ @Controller public class LoginController extends BaseController { @Autowired private IMenuService menuService; @Autowired private IUserService userService; @Autowired private IRelationService relationService; @Autowired private IRoleService roleService; @Resource private UserClient userClient; private Map loginTime = new HashMap<>(); private Map loginFailures = new HashMap<>(); private List ips = Arrays.asList("127.0.0.1","192.168.0.14","192.168.0.20","192.168.0.23","192.168.0.214","192.168.0.239","192.168.0.13","192.168.0.214"); /** * 跳转到主页 */ @RequestMapping(value = "/", method = RequestMethod.GET) public String index(Model model) { model.addAttribute("tips", ""); //获取菜单列表 User user = UserExt.getUser(); if(null == user){ return "/login.html"; } List roleList = Arrays.asList(user.getRoleid().split(",")); if (roleList == null || roleList.size() == 0) { model.addAttribute("tips", "该用户没有角色,无法登陆"); return "/login.html"; } Integer language = UserExt.getLanguage(); List menus = menuService.getMenusByRoleIds(roleList); List titles = MenuNode.buildTitle(menus); List resUrlsByRoleId = menuService.getResUrlsByRoleId(Integer.valueOf(roleList.get(0))); CacheUtil.menus.put(user.getAccount(), resUrlsByRoleId); if (SinataUtil.isEmpty(user)){ String a ="请重新登录"; model.addAttribute("tips", a); return "/login.html"; } //设置角色 // ShiroKit.getUser().setRoleType(user.getRoleType()); model.addAttribute("titles", titles); Role role = roleService.getBaseMapper().selectById(roleList.get(0)); User byId = userService.getById(user.getId()); //获取用户头像 Obtain user profile String avatar = byId.getAvatar(); Integer objectType = user.getObjectType(); model.addAttribute("roleNames", role.getName()); model.addAttribute("language", language); model.addAttribute("avatar", avatar); model.addAttribute("userName", user.getName()); model.addAttribute("type", 0); // model.addAttribute("passwordHint", // null == user.getPassWordUpdate() // || user.getPassWordUpdate().getTime() + 7776000000L <= System.currentTimeMillis() // ? a: ""); return "/index.html"; } /** * 跳转到场地管理页面 */ @RequestMapping(value = "/login", method = RequestMethod.GET) public String login() { if (false || false) { return REDIRECT + "/"; } else { return "/login.html" ; } } /** * 点击登录执行的动作 */ @RequestMapping(value = "/login", method = RequestMethod.POST) public String loginVali(String username, String password, String remember, Model model, HttpServletRequest request,Integer language) { String ip = request.getHeader("x-forwarded-for"); if (ip != null && ip.length() != 0 && !"unknown".equalsIgnoreCase(ip)) { // 多次反向代理后会有多个ip值,第一个ip才是真实ip //After multiple reverse proxies, there will be multiple IP values, and the first IP is the real IP. if (ip.indexOf(",") != -1) { ip = ip.split(",")[0]; } } if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) { ip = request.getHeader("Proxy-Client-IP"); } if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) { ip = request.getHeader("WL-Proxy-Client-IP"); } if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) { ip = request.getHeader("HTTP_CLIENT_IP"); } if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) { ip = request.getHeader("HTTP_X_FORWARDED_FOR"); } if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) { ip = request.getHeader("X-Real-IP"); } if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) { ip = request.getRemoteAddr(); } // if (!ips.contains(ip)) { // model.addAttribute("tips", "请在特定的网络下使用系统"); // return "/login.html"; // } Integer f = loginFailures.get(username); f = f == null ? 0 : f; Long t = loginTime.get(username); t = null == t ? 0 : t; if (System.currentTimeMillis() - t > (30 * 60 * 1000)) { loginFailures.put(username, f = 1); loginTime.put(username, System.currentTimeMillis()); } else { f++; loginFailures.put(username, f); } // if (f > 5 && (System.currentTimeMillis() - t) <= (30 * 60 * 1000)) { // model.addAttribute("tips", "登录次数过多,请等30分钟再试!"); // return "/login.html"; // } //验证验证码是否正确 //Verify if the verification code is correct. if (KaptchaUtil.getKaptchaOnOff()) { String kaptcha = super.getPara("kaptcha").trim(); String code = (String) super.getSession().getAttribute(Constants.KAPTCHA_SESSION_KEY); if (Objects.isNull(kaptcha) || !kaptcha.equalsIgnoreCase(code)) { throw new InvalidKaptchaException(); } } User user = userService.getByAccount(username); password = AESUtils.decrypt(password); String s = MD5.md5(password); if(!user.getPassword().equals(s)){ model.addAttribute("tips", "账号密码错误"); return "/login.html"; } GetTokenRequest tokenRequest = new GetTokenRequest(); tokenRequest.setUsername(username); tokenRequest.setPassword(password); tokenRequest.setObject(user); TokenResponse token = userClient.getToken(tokenRequest); super.getSession().setAttribute("user", user); super.getSession().setAttribute("username", user.getAccount()); super.getSession().setAttribute("token", token); super.getSession().setAttribute("language",language); return REDIRECT + "/"; } /** * 退出登录 */ @RequestMapping(value = "/logout", method = RequestMethod.GET) public String logOut() { deleteAllCookie(); return REDIRECT + "/login"; } }