package com.ruoyi.web.controller.system; import com.alibaba.fastjson.JSON; import com.baomidou.mybatisplus.core.toolkit.Wrappers; import com.ruoyi.common.constant.Constants; import com.ruoyi.common.core.domain.AjaxResult; import com.ruoyi.common.core.domain.R; import com.ruoyi.common.core.domain.entity.SysMenu; import com.ruoyi.common.core.domain.entity.SysUser; import com.ruoyi.common.core.domain.entity.TAppUserResp; import com.ruoyi.common.core.domain.model.LoginAppBody; import com.ruoyi.common.core.domain.model.LoginBody; import com.ruoyi.common.core.domain.model.LoginUserApplet; import com.ruoyi.common.core.redis.RedisCache; import com.ruoyi.common.redis.service.RedisService; import com.ruoyi.common.utils.SecurityUtils; import com.ruoyi.framework.web.service.SysLoginService; import com.ruoyi.framework.web.service.SysPermissionService; import com.ruoyi.framework.web.service.TokenService; import com.ruoyi.system.model.TAppUser; import com.ruoyi.system.service.ISysMenuService; import com.ruoyi.system.service.ISysRoleService; import com.ruoyi.system.service.TAppUserService; import com.ruoyi.system.utils.wx.body.resp.Code2SessionRespBody; import com.ruoyi.system.utils.wx.body.resq.Code2SessionResqBody; import com.ruoyi.system.utils.wx.model.WeixinProperties; import com.ruoyi.system.utils.wx.pojo.AppletUserEncrypteData; import com.ruoyi.system.utils.wx.tools.WxAppletTools; import com.ruoyi.web.controller.tool.MsgUtils; import io.swagger.annotations.Api; import io.swagger.annotations.ApiOperation; import lombok.extern.slf4j.Slf4j; import org.springframework.beans.BeanUtils; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.util.StringUtils; import org.springframework.web.bind.annotation.*; import org.springframework.web.client.RestTemplate; import java.util.HashMap; import java.util.List; import java.util.Map; import java.util.Set; import java.util.concurrent.TimeUnit; /** * 登录验证 * * @author ruoyi */ @Slf4j @Api(tags = "登录") @RestController public class SysLoginController { @Autowired private SysLoginService loginService; @Autowired private ISysMenuService menuService; @Autowired private SysPermissionService permissionService; @Autowired private RedisCache redisCache; @Autowired private TokenService tokenService; @Autowired private ISysRoleService roleService; @Autowired private MsgUtils msgUtils; @Autowired private RestTemplate wxRestTemplate; @Autowired private WeixinProperties wxConfig; @Autowired private RedisService redisService; @Autowired private TAppUserService appUserService; /** * 获取验证码 * * @param phone 手机号 * @return 结果 */ @ApiOperation(value = "获取验证码",notes = "获取验证码") @GetMapping("/getCode") public AjaxResult getCode(@RequestParam String phone) { // 发送验证码并存储到redis if (StringUtils.hasLength(phone)) { String code = String.valueOf((int) (Math.random() * 1000000)); redisCache.setCacheObject(phone, code,5*60, TimeUnit.SECONDS); try { //TODO 待对接 // smsUtil.sendSms(phone, "2369926", new String[]{code}); } catch (Exception e) { throw new RuntimeException(e); } return AjaxResult.success("发送短信验证码成功!5分钟内有效"); } return AjaxResult.error(500, "发送短信验证码失败,请确认手机号码!"); } /** * 账号密码登录 * * @param loginBody 登录信息 * @return 结果 */ @ApiOperation(value = "短信登录",notes = "短信登录") @PostMapping("/loginCode") public AjaxResult loginCode(@RequestBody LoginBody loginBody) { AjaxResult ajax = AjaxResult.success(); // 生成令牌 LoginUserApplet loginUser = loginService.loginCodeApplet(loginBody.getUsername(), loginBody.getCode()); ajax.put(Constants.TOKEN, tokenService.createTokenApplet(loginUser)); ajax.put("info",loginUser); return ajax; } /** * 账号密码登录 * * @param param 登录信息 * @return 结果 */ @ApiOperation(value = "账号密码登录",notes = "账号密码登录") @PostMapping("/loginApp") public AjaxResult login(@RequestBody String param) { LoginAppBody loginAppBody = JSON.parseObject(param, LoginAppBody.class); AjaxResult ajax = AjaxResult.success(); // 生成令牌 LoginUserApplet loginUser = loginService.loginPwdApplet(loginAppBody.getAccount(), loginAppBody.getPassword()); ajax.put(Constants.TOKEN, tokenService.createTokenApplet(loginUser)); ajax.put("data",loginUser); return ajax; } @ApiOperation(value = "通过code获得openid,获取用户信息") @PostMapping("/openIdByJsCode") public R> openIdByJsCode(@RequestBody AppletUserEncrypteData data) { log.info("<<<<<<<<换取openid开始<<<<<<<<:{}", data.getCode()); WxAppletTools appletTools = new WxAppletTools(wxRestTemplate, wxConfig, redisService); Code2SessionRespBody body = appletTools.getOpenIdByJscode2session(new Code2SessionResqBody().build(data.getCode())); String openid = body.getOpenid(); String sessionKey = body.getSessionKey(); // 用户信息解密 数据验签 // if (StringUtils.isNotBlank(data.getSignature())) { // WxUtils.verifySignature(data.getRawData(), sessionKey, data.getSignature()); // } // if(StringUtils.isEmpty(data.getEncryptedData()) || StringUtils.isEmpty(data.getIv())){ // return R.fail("已拒绝授权"); // } // AppletUserDecodeData appletUserDecodeData = WxUtils.encryptedData(data.getEncryptedData(), sessionKey, data.getIv()); // appletUserDecodeData.setOpenId(openid); // 先使用openId和当前手机号进行查询 TAppUser sysAppUser = appUserService.getOne(Wrappers.lambdaQuery(TAppUser.class) .and(e->e.eq(TAppUser::getOpenid, openid))); if (sysAppUser==null){ sysAppUser = new TAppUser(); // sysAppUser.setPhoneNumber(appletUserDecodeData.getPhoneNumber()); sysAppUser.setOpenid(openid); // 手机号中间四位替换为* // sysAppUser.setNickName(appletUserDecodeData.getPhoneNumber().replaceAll("(\\d{3})\\d{4}(\\d{4})", "$1****$2")); appUserService.save(sysAppUser); }else { // 判断账号是否被冻结 if (sysAppUser.getStatus() == 2){ return R.fail("账号已冻结,请联系管理员"); } // 手机号相同但openId为空的情况 sysAppUser.setOpenid(openid); appUserService.updateById(sysAppUser); } LoginUserApplet loginUserApplet = new LoginUserApplet(); TAppUserResp sysUserResp = new TAppUserResp(); BeanUtils.copyProperties(sysAppUser, sysUserResp); loginUserApplet.setUser(sysUserResp); loginUserApplet.setUserId(sysAppUser.getId()); Map tokenInfos = new HashMap<>(); tokenInfos.put("token",tokenService.createTokenApplet(loginUserApplet)); tokenInfos.put("info",loginUserApplet); return R.ok(tokenInfos); } /** * 获取用户信息 * * @return 用户信息 */ @GetMapping("getInfo") public AjaxResult getInfo() { SysUser user = SecurityUtils.getLoginUser().getUser(); // 角色集合 Set roles = permissionService.getRolePermission(user); // 权限集合 Set permissions = permissionService.getMenuPermission(user); AjaxResult ajax = AjaxResult.success(); ajax.put("user", user); ajax.put("roles", roles); ajax.put("permissions", permissions); return ajax; } /** * 获取路由信息 * * @return 路由信息 */ @GetMapping("getRouters") public AjaxResult getRouters() { Long userId = SecurityUtils.getUserId(); List menus = menuService.selectMenuTreeByUserId(userId); return AjaxResult.success(menuService.buildMenus(menus)); } }