package com.ruoyi.web.controller.system; import com.alibaba.fastjson.JSON; import com.baomidou.mybatisplus.core.toolkit.Wrappers; import com.ruoyi.common.constant.AmountConstant; import com.ruoyi.common.constant.CacheConstants; import com.ruoyi.common.constant.Constants; import com.ruoyi.common.core.domain.AjaxResult; import com.ruoyi.common.core.domain.R; import com.ruoyi.common.core.domain.entity.SysMenu; import com.ruoyi.common.core.domain.entity.SysUser; import com.ruoyi.common.core.domain.entity.TAppUserResp; import com.ruoyi.common.core.domain.model.LoginAppBody; import com.ruoyi.common.core.domain.model.LoginUserApplet; import com.ruoyi.common.core.redis.RedisCache; import com.ruoyi.common.exception.ServiceException; import com.ruoyi.common.redis.service.RedisService; import com.ruoyi.common.utils.DateUtils; import com.ruoyi.common.utils.OrderNos; import com.ruoyi.common.utils.SecurityUtils; import com.ruoyi.common.utils.StringUtils; import com.ruoyi.common.utils.uuid.UUID; import com.ruoyi.framework.web.service.SysLoginService; import com.ruoyi.framework.web.service.SysPermissionService; import com.ruoyi.framework.web.service.TokenService; import com.ruoyi.system.model.TAppUser; import com.ruoyi.system.service.ISysMenuService; import com.ruoyi.system.service.ISysRoleService; import com.ruoyi.system.service.TAppUserService; import com.ruoyi.system.utils.wx.body.resp.Code2SessionRespBody; import com.ruoyi.system.utils.wx.body.resq.Code2SessionResqBody; import com.ruoyi.system.utils.wx.model.WeixinProperties; import com.ruoyi.system.utils.wx.pojo.AppletUserDecodeData; import com.ruoyi.system.utils.wx.pojo.AppletUserEncrypteData; import com.ruoyi.system.utils.wx.tools.WxAppletTools; import com.ruoyi.system.utils.wx.tools.WxUtils; import com.ruoyi.web.controller.tool.MsgUtils; import io.swagger.annotations.Api; import io.swagger.annotations.ApiOperation; import lombok.extern.slf4j.Slf4j; import org.springframework.beans.BeanUtils; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.web.bind.annotation.GetMapping; import org.springframework.web.bind.annotation.PostMapping; import org.springframework.web.bind.annotation.RequestBody; import org.springframework.web.bind.annotation.RestController; import org.springframework.web.client.RestTemplate; import java.math.BigDecimal; import java.text.ParseException; import java.util.*; import java.util.stream.Collectors; /** * 登录验证 * * @author ruoyi */ @Slf4j @Api(tags = "登录") @RestController public class SysLoginController { @Autowired private SysLoginService loginService; @Autowired private ISysMenuService menuService; @Autowired private SysPermissionService permissionService; @Autowired private RedisCache redisCache; @Autowired private TokenService tokenService; @Autowired private ISysRoleService roleService; @Autowired private MsgUtils msgUtils; @Autowired private RestTemplate wxRestTemplate; @Autowired private WeixinProperties wxConfig; @Autowired private RedisService redisService; @Autowired private TAppUserService appUserService; /** * 账号密码登录 * * @param param 登录信息 * @return 结果 */ @ApiOperation(value = "账号密码登录",notes = "账号密码登录") @PostMapping("/loginApp") public AjaxResult login(@RequestBody String param) { LoginAppBody loginAppBody = JSON.parseObject(param, LoginAppBody.class); AjaxResult ajax = AjaxResult.success(); // 生成令牌 LoginUserApplet loginUser = loginService.loginCodeApplet(loginAppBody.getAccount(), loginAppBody.getPassword()); ajax.put(Constants.TOKEN, tokenService.createTokenApplet(loginUser)); ajax.put("data",loginUser); return ajax; } @ApiOperation(value = "通过code获得openid,获取用户信息",tags = {"微信小程序登录"}) @PostMapping("/openIdByJsCode") public R> openIdByJsCode(@RequestBody AppletUserEncrypteData data) { log.info("<<<<<<<<换取openid开始<<<<<<<<:{}", data.getCode()); WxAppletTools appletTools = new WxAppletTools(wxRestTemplate, wxConfig, redisService); Code2SessionRespBody body = appletTools.getOpenIdByJscode2session(new Code2SessionResqBody().build(data.getCode())); String openid = body.getOpenid(); String sessionKey = body.getSessionKey(); // 用户信息解密 数据验签 // if (StringUtils.isNotBlank(data.getSignature())) { // WxUtils.verifySignature(data.getRawData(), sessionKey, data.getSignature()); // } // if(StringUtils.isEmpty(data.getEncryptedData()) || StringUtils.isEmpty(data.getIv())){ // return R.fail("已拒绝授权"); // } // AppletUserDecodeData appletUserDecodeData = WxUtils.encryptedData(data.getEncryptedData(), sessionKey, data.getIv()); // appletUserDecodeData.setOpenId(openid); String uuid = UUID.fastUUID().toString(); boolean lock = redisCache.trylockLoop(CacheConstants.LOGIN_LOCK_KEY + openid, uuid, 60); // 先使用openId进行查询 TAppUser sysAppUser = appUserService.getOne(Wrappers.lambdaQuery(TAppUser.class) .eq(TAppUser::getOpenId, openid)); if (lock){ try { if (sysAppUser==null){ sysAppUser = new TAppUser(); // sysAppUser.setPhoneNumber(appletUserDecodeData.getPhoneNumber()); sysAppUser.setOpenId(openid); // 手机号中间四位替换为* // sysAppUser.setNickName(appletUserDecodeData.getPhoneNumber().replaceAll("(\\d{3})\\d{4}(\\d{4})", "$1****$2")); appUserService.save(sysAppUser); }else { // 判断账号是否被冻结 if (sysAppUser.getStatus() == 2){ return R.fail("账号已冻结,请联系管理员"); } // 手机号相同但openId为空的情况 sysAppUser.setOpenId(openid); appUserService.updateById(sysAppUser); } }finally { redisCache.unlock(CacheConstants.LOGIN_LOCK_KEY + openid,uuid); } } LoginUserApplet loginUserApplet = new LoginUserApplet(); TAppUserResp sysUserResp = new TAppUserResp(); BeanUtils.copyProperties(sysAppUser, sysUserResp); loginUserApplet.setUser(sysUserResp); loginUserApplet.setUserId(sysAppUser.getId()); Map tokenInfos = new HashMap<>(); tokenInfos.put("token",tokenService.createTokenApplet(loginUserApplet)); tokenInfos.put("info",loginUserApplet); return R.ok(tokenInfos); } /** * 获取用户信息 * * @return 用户信息 */ @GetMapping("getInfo") public AjaxResult getInfo() { SysUser user = SecurityUtils.getLoginUser().getUser(); // 角色集合 Set roles = permissionService.getRolePermission(user); // 权限集合 Set permissions = permissionService.getMenuPermission(user); AjaxResult ajax = AjaxResult.success(); ajax.put("user", user); ajax.put("roles", roles); ajax.put("permissions", permissions); return ajax; } /** * 获取路由信息 * * @return 路由信息 */ @GetMapping("getRouters") public AjaxResult getRouters() { Long userId = SecurityUtils.getUserId(); List menus = menuService.selectMenuTreeByUserId(userId); return AjaxResult.success(menuService.buildMenus(menus)); } }