guoyuepeng
/
qa-prevention-gwj
1
0
Fork 3
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity
qa-prevention-gwj/src/main/java/com/zcloud/controller/system/LoginController.java

536 lines
26 KiB
Java
Raw Normal View History

初始化
2023-11-07 09:32:12 +08:00
package com.zcloud.controller.system;
import java.util.*;
import javax.servlet.http.HttpServletRequest;
import com.zcloud.service.system.*;
import com.zcloud.util.*;
import org.apache.http.HttpEntity;
import org.apache.http.client.entity.UrlEncodedFormEntity;
import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.entity.ContentType;
import org.apache.http.entity.StringEntity;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.message.BasicNameValuePair;
import org.apache.http.protocol.HTTP;
import org.apache.http.util.EntityUtils;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.DisabledAccountException;
import org.apache.shiro.authc.ExcessiveAttemptsException;
import org.apache.shiro.authc.IncorrectCredentialsException;
import org.apache.shiro.authc.LockedAccountException;
import org.apache.shiro.authc.UnknownAccountException;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.crypto.hash.SimpleHash;
import org.apache.shiro.session.Session;
import org.apache.shiro.subject.Subject;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestParam;
import org.springframework.web.bind.annotation.ResponseBody;
import com.alibaba.fastjson.JSON;
import com.fasterxml.jackson.databind.ObjectMapper;
import com.zcloud.controller.base.BaseController;
import com.zcloud.entity.PageData;
import com.zcloud.entity.system.Role;
import com.zcloud.entity.system.User;
import com.zcloud.service.bus.CorpInfoService;
import com.zcloud.service.bus.OffDutyService;
import net.sf.json.JSONObject;
/**
* 说明：登录处理类
* 作者：luoxiaobao
* 官网：www.qdkjchina.com
*/
@Controller
@RequestMapping("/admin")
public class LoginController extends BaseController {
@Autowired
private UsersService usersService;
@Autowired
private RoleService roleService;
@Autowired
private FHlogService FHLOG;
@Autowired
private DepartmentService departmentService;
@Autowired
private CorpInfoService corpinfoService;
@Autowired
private OffDutyService offdutyService;
@Autowired
private PhotoService photoService;
替赵煜提交代码
2024-04-02 17:06:03 +08:00
// @Value("${czks-useridentity}")
fix: app用户登录时候后台地址问题
2023-12-27 10:21:55 +08:00
// private String czksIdentity;
// @Value("${czks-baseimgpath}")
// private String czksBaseimgpath;
// @Value("${czks-backendaddr}")
// private String czksBackendaddr;
//
// @Value("${gwj-useridentity}")
// private String gwjIdentity;
// @Value("${gwj-baseimgpath}")
// private String gwjBaseimgpath;
// @Value("${gwj-backendaddr}")
// private String gwjBackendaddr;
登录时返回图片和后端接口地址
2023-12-07 10:30:43 +08:00
@Autowired
private CorpPathService corpPathService;
初始化
2023-11-07 09:32:12 +08:00
/**
* 请求登录验证用户接口
*
* @return
* @throws Exception
*/
@RequestMapping(value = "/check", produces = "application/json;charset=UTF-8")
@ResponseBody
public Object check() throws Exception {
// 获取IP
HttpServletRequest request = this.getRequest();
String ip = "";
if (request.getHeader("x-forwarded-for") == null) {
ip = request.getRemoteAddr();
} else {
ip = request.getHeader("x-forwarded-for");
}
Map<String, String> map = new HashMap<String, String>();
String errInfo = "success";
// if(!BasicInfoUtil.checkValid()) {
// String errInfo = "invalid";
// map.put("result", errInfo);
// return map;
// }
Session session = Jurisdiction.getSession();
// System.out.println("登录次数："+session.getAttribute("loginCount"));
//session 手机端需要打包安装到实机有效，模拟器一直返回null
// int loginCount = null != session.getAttribute("loginCount")?Integer.parseInt(session.getAttribute("loginCount").toString()):0;
// if (loginCount >= 5) {
// errInfo = "systemlock";
// map.put("result", "fail");
// map.put("errorCode", errInfo);
// map.put("msg", "发现异常登录,系统拒绝访问");
// map.put("failMsg", "发现异常登录,系统拒绝访问");
// return map;
// }
PageData pd = new PageData();
pd = this.getPageData();
替赵煜提交代码
2024-04-02 17:06:03 +08:00
PageData loginPd = new PageData();
loginPd.put("KEYDATA", pd.getString("KEYDATA"));
loginPd.put("tm", pd.getString("tm"));
初始化
2023-11-07 09:32:12 +08:00
String loginData = pd.getString("KEYDATA");
if (!loginData.startsWith("qdkjchina")) {
loginData = RSAUtils.decryptDataOnJava(loginData, RSAUtils.getPrivateKey());
}
int loginCount = 0;
String KEYDATA[] = loginData.replaceAll("qdkjchina", "").split(",qd,");
if (null != KEYDATA && KEYDATA.length >= 2) {
String USERNAME = KEYDATA[0]; //登录过来的用户名
String PASSWORD = KEYDATA[1]; //登录过来的密码
UsernamePasswordToken token;
if (null != pd.get("isLogin")) {
token = new UsernamePasswordToken(USERNAME, PASSWORD);
} else {
token = new UsernamePasswordToken(USERNAME, new SimpleHash("SHA-1", USERNAME, PASSWORD).toString());
}
pd.put("USERNAME", USERNAME);
pd = usersService.findByUsername(pd);
if (!Tools.isEmpty(pd)) {
if (!Tools.isEmpty(pd.getString("ERROR_COUNT"))) {
loginCount = Integer.parseInt(pd.getString("ERROR_COUNT"));
}
} else {
map.put("result", "exception");
map.put("msg", "未找到此用户");
map.put("exception", "未找到此用户");
return map;
}
Subject subject = SecurityUtils.getSubject();
try {
subject.login(token); //这一步在调用login(token)方法时,它会走到MyRealm.doGetAuthenticationInfo()方法中
} catch (UnknownAccountException uae) {
errInfo = "usererror";
} catch (IncorrectCredentialsException ice) {
errInfo = "usererror";
} catch (LockedAccountException lae) {
errInfo = "usererror";
} catch (ExcessiveAttemptsException eae) {
errInfo = "usererror";
} catch (DisabledAccountException sae) {
errInfo = "usererror";
} catch (AuthenticationException ae) {
errInfo = "usererror";
}
if (subject.isAuthenticated()) { //验证是否登录成功
removeSession(USERNAME);
if (pd != null) {
替赵煜提交代码
2024-04-02 17:06:03 +08:00
//查询该用户或企业的图片和后端地址
if (!Tools.isEmpty(pd.getString("CORPINFO_ID")) && !pd.getString("CORPINFO_ID").equals("1")) {
PageData pathData = corpPathService.getCorpPathByCorpId(pd);
map.put("baseImgPath",pathData.getString("PIC_PATH"));
map.put("USER_IDENTITY",pathData.getString("USER_IDENTITY"));
1.正式地址修改
2024-07-16 17:09:19 +08:00
map.put("BACKENDADDR", pathData.getString("BACK_END_PATH"));
替赵煜提交代码
2024-04-02 17:06:03 +08:00
} else {
PageData pathData = corpPathService.getCorpPathByPersonInfo(pd);
map.put("baseImgPath",pathData.getString("PIC_PATH"));
map.put("USER_IDENTITY",pathData.getString("USER_IDENTITY"));
map.put("BACKENDADDR", pathData.getString("BACK_END_PATH"));
}
// 如果用户不是港务局用户，则向对应分公司发送登录请求
if (!map.get("USER_IDENTITY").toString().equals("GWJ")) {
Map backEndPath = HttpClientUtil.getPOSTTest(map.get("BACKENDADDR").toString() + "admin/check", loginPd);
if (backEndPath.get("result").toString().equals("success")) {
backEndPath.put("baseImgPath",map.get("baseImgPath").toString());
backEndPath.put("USER_IDENTITY",map.get("USER_IDENTITY").toString());
backEndPath.put("BACKENDADDR", map.get("BACKENDADDR").toString());
System.out.println("登录返回参数：" + backEndPath);
return backEndPath;
} else {
map.put("result", "fail");
map.put("msg", backEndPath.get("msg").toString());
map.put("errorCode", errInfo);
map.put("failMsg", backEndPath.get("msg").toString());
return map;
}
}
初始化
2023-11-07 09:32:12 +08:00
if ("99".equals(pd.getString("STATUS"))) {
errInfo = "userlock";
map.put("result", "fail");
map.put("errorCode", errInfo);
map.put("msg", "帐号已锁定，请联系管理员");
map.put("failMsg", "帐号已锁定，请联系管理员");
return map;
}
add: app用户登录时候后台地址问题
2023-12-23 11:36:32 +08:00
// 判断是不是沧州矿石的用户
fix: app用户登录时候后台地址问题
2023-12-27 10:21:55 +08:00
// if (czksIdentity.equals(pd.getString("USER_IDENTITY"))) {
// // 沧州矿石的用户
// // 用户标识
// map.put("USER_IDENTITY", czksIdentity);
// // 图片路径
// map.put("baseImgPath", czksBaseimgpath);
// // 后台地址
// map.put("BACKENDADDR", czksBackendaddr);
// }
// if ("".equals(pd.getString("USER_IDENTITY"))) {
// // 港股的用户
// // 用户标识
// map.put("USER_IDENTITY", gwjIdentity);
// // 图片路径
// map.put("baseImgPath", gwjBaseimgpath);
// // 后台地址
// map.put("BACKENDADDR", gwjBackendaddr);
// }
初始化
2023-11-07 09:32:12 +08:00
PageData cpd = corpinfoService.findById(pd);
//System.out.println(cpd.getString("ISUSE"));
if (cpd != null) {
if (cpd.getString("ISUSE").equals("0")) {
if (pd != null) {
if (pd.getString("ROLE_ID").equals("1") || pd.getString("ROLE_ID").equals("0efe7308b3ef4e6594c9c0ddf900ad26")) {
errInfo = "usererror";
} else {
map.put("USERNAME", USERNAME);
map.put("USER_ID", pd.getString("USER_ID"));
map.put("NAME", pd.getString("NAME"));
map.put("ISMAIN", pd.getString("ISMAIN"));
map.put("DEPARTMENT_ID", pd.getString("DEPARTMENT_ID"));
map.put("CORPINFO_ID", pd.getString("CORPINFO_ID"));
map.put("LONGITUDE", cpd.getString("LONGITUDE"));
map.put("LATITUDE", cpd.getString("LATITUDE"));
// PageData dpd = new PageData();
// dpd.put("DEPARTMENT_ID", pd.getString("DEPARTMENT_ID"));
// dpd=departmentService.findById(dpd);
// map.put("DEPARTMENT_NAME", dpd.getString("NAME"));
// map.put("PARENT_NAME", dpd.getString("PARENT_NAME"));
// 现在多roleID 使用权限最高的
List<String> roleIds = new ArrayList<>();
String role = pd.getString("ROLE_ID");
roleIds.add(role);
if (Tools.notEmpty(pd.getString("ROLE_IDS"))) {
roleIds.add(Arrays.toString(pd.getString("ROLE_IDS").split(",")));
}
PageData rpd = roleService.findMaxRoleByRId(roleIds);
map.put("ROLEID", rpd.getString("ROLE_ID"));
map.put("ROLE_NAME", rpd.getString("ROLE_NAME"));
替赵煜提交代码
2024-04-02 17:06:03 +08:00
map.put("RNUMBER", rpd.getString("RNUMBER"));
初始化
2023-11-07 09:32:12 +08:00
map.put("USERBZ", pd.getString("BZ"));
PageData dpd = new PageData();
dpd.put("DEPARTMENT_ID", pd.getString("DEPARTMENT_ID"));
dpd = departmentService.findById(dpd);
map.put("DEPARTMENT_NAME", dpd.getString("NAME"));
User user = new User();
user.setUSER_ID(pd.getString("USER_ID"));
user.setUSERNAME(pd.getString("USERNAME"));
user.setPASSWORD(pd.getString("PASSWORD"));
user.setNAME(pd.getString("NAME"));
user.setROLE_ID(pd.getString("ROLE_ID"));
user.setLAST_LOGIN(pd.getString("LAST_LOGIN"));
user.setIP(pd.getString("IP"));
user.setSTATUS(pd.getString("STATUS"));
user.setRoleLevel(rpd.getString("LEVEL")); //用户等级
user.setSuperviseDepartId(this.superviseDepart(pd, rpd, dpd)); //查看部门
PageData ypd = photoService.findByUserId(user.getUSER_ID());
if (null != ypd) { //没有数据就新增，否则就修改
map.put("USERPHONE", ypd.getString("PHOTO1")); //主键
} else {
map.put("USERPHONE", "");
}
map.put("supDeparIds", user.getSuperviseDepartId());
map.put("roleLevel", rpd.getString("LEVEL"));
PageData isRest = this.getPageData();
isRest.put("ISREST", "1");
isRest.put("USER_ID", pd.getString("USER_ID"));
isRest.put("CORPINFO_ID", pd.getString("CORPINFO_ID"));
List<PageData> restList = offdutyService.listAll(isRest);
if (restList != null && restList.size() > 0) {
// 休假中
map.put("ISREST", "1");
} else {
// 正常工作
map.put("ISREST", "0");
}
session.setAttribute(Const.SESSION_USER, user); //把当前用户放入session
session.setAttribute(Const.DEPARTMENT_ID, pd.getString("DEPARTMENT_ID")); //把当前用户放入session
session.setAttribute(Const.CORPINFO_ID, pd.getString("CORPINFO_ID")); //把当前用户企业放入session
session.setAttribute(Const.POST_ID, pd.getString("POST_ID") == null ? "" : pd.getString("POST_ID")); //把当前用户岗位放入session
session.setAttribute(Const.USER_ID, pd.getString("USER_ID")); //把当前用户企业放入session
session.setAttribute(Const.SESSION_USERNAME, USERNAME); //放入用户名到session
session.setAttribute(Const.SESSION_U_NAME, user.getNAME()); //放入用户姓名到session
session.setAttribute(Const.IS_MAIN, pd.get("ISMAIN")); //是否主账号
session.setAttribute(Const.ISSUPERVISE, dpd.getString("ISSUPERVISE")); //把当前用户放入session
FHLOG.save(USERNAME, "成功登录系统", ip); //记录日志
登录时返回图片和后端接口地址
2023-12-07 10:30:43 +08:00
初始化
2023-11-07 09:32:12 +08:00
}
} else {
token.clear();
errInfo = "usererror";
}
} else {
errInfo = "userUSEerror";
map.put("msg", "您的企业已到使用期限，请联系管理员");
}
} else {
errInfo = "usererror";
// map.put("msg", "用户不存在"); //用户账号枚举漏洞
}
} else {
errInfo = "usererror";
// map.put("msg", "用户不存在"); //用户账号枚举漏洞
}
} else {
token.clear();
errInfo = "usererror";
}
if (!"success".equals(errInfo)) FHLOG.save(USERNAME, "尝试登录系统失败,用户名密码错误,无权限", ip);
} else {
errInfo = "error"; //缺少参数
}
if ("success".equals(errInfo)) {
map.put("result", "success");
session.removeAttribute("loginCount");
} else {
map.put("errorCode", errInfo);
map.put("result", "fail");
if (loginCount == 4) {
map.put("msg", "帐号已锁定，请联系管理员");
map.put("failMsg", "帐号已锁定，请联系管理员");
} else {
if ("userUSEerror".equals(errInfo)) {
map.put("msg", "您的企业已被暂停使用，请联系管理员");
map.put("failMsg", "您的企业已被暂停使用，请联系管理员");
} else {
map.put("msg", "用户名或密码有误，您还有" + (4 - loginCount) + "次机会，请重试");
map.put("failMsg", "用户名或密码有误，您还有" + (4 - loginCount) + "次机会，请重试");
}
}
session.setAttribute("loginCount", loginCount + 1);
if ("error".equals(errInfo)) {
map.put("msg", "缺少参数");
map.put("failMsg", "");
} else {
pd.put("USERNAME", KEYDATA[0]);
pd = usersService.findByUsername(pd);
if (pd != null) {
int loginErrorCount = Tools.isEmpty(pd.getString("ERROR_COUNT")) ? 0 : Integer.parseInt(pd.getString("ERROR_COUNT"));
if (!"99".equals(pd.getString("LOCK_STATUS"))) { //非锁定帐号
if (loginErrorCount < 4) {
pd.put("LOCK_STATUS", "0");
pd.put("LAST_LOGIN", DateUtil.date2Str(new Date()));
pd.put("ERROR_COUNT", loginErrorCount + 1);
usersService.lockUser(pd);
} else {
pd.put("LOCK_STATUS", "99");
pd.put("ERROR_COUNT", loginErrorCount + 1);
pd.put("LAST_LOGIN", DateUtil.date2Str(new Date()));
usersService.lockUser(pd);
map.put("msg", "帐号已锁定，请联系管理员");
map.put("failMsg", "帐号已锁定，请联系管理员");
}
} else {
map.put("msg", "帐号已锁定，请联系管理员");
map.put("failMsg", "帐号已锁定，请联系管理员");
}
}
}
}
return map;
}
/**
* 系统用户注册接口
*
* @return
* @throws Exception
*/
@RequestMapping(value = "/register", produces = "application/json;charset=UTF-8")
@ResponseBody
public Object register(@RequestParam("callback") String callback) throws Exception {
Map<String, Object> map = new HashMap<String, Object>();
PageData pd = new PageData();
pd = this.getPageData();
String result = "00";
if (Tools.checkKey("USERNAME", pd.getString("FKEY"))) { //检验请求key值是否合法
pd.put("USER_ID", this.get32UUID()); //ID 主键
pd.put("ROLE_ID", "fhadminzhuche"); //角色ID fhadminzhuche 为注册用户
pd.put("NUMBER", ""); //编号
pd.put("PHONE", ""); //手机号
pd.put("BZ", "注册用户"); //备注
pd.put("LAST_LOGIN", ""); //最后登录时间
pd.put("IP", ""); //IP
pd.put("STATUS", "0"); //状态
pd.put("SKIN", "pcoded-navbar navbar-image-3,navbar pcoded-header navbar-expand-lg navbar-light header-dark,"); //用户默认皮肤
pd.put("EMAIL", "");
pd.put("ROLE_IDS", "");
pd.put("PASSWORD", new SimpleHash("SHA-1", pd.getString("USERNAME"), pd.getString("PASSWORD")).toString()); //密码加密
if (null == usersService.findByUsername(pd)) { //判断用户名是否存在
usersService.saveUser(pd); //执行保存
FHLOG.save(pd.getString("USERNAME"), "新注册");
} else {
result = "01"; //用户名已存在
}
} else {
result = "05"; //不合法的注册
}
map.put("result", result);
JSONObject sresult = JSONObject.fromObject(map);
;
return callback + "(" + sresult.toString() + ")";
}
/**
* 判断是否登录状态
*
* @return
* @throws Exception
*/
@RequestMapping(value = "/islogin")
@ResponseBody
public Object islogin() throws Exception {
Map<String, String> map = new HashMap<String, String>();
String errInfo = "success";
Session session = Jurisdiction.getSession();
if (null == session.getAttribute(Const.SESSION_USERNAME)) {
errInfo = "errer";
}
map.put("result", errInfo);
return map;
}
/**
* 清理session
*/
public void removeSession(String USERNAME) {
Session session = Jurisdiction.getSession(); //以下清除session缓存
session.removeAttribute(Const.SESSION_USER);
session.removeAttribute(USERNAME + Const.SESSION_ROLE_RIGHTS);
session.removeAttribute(USERNAME + Const.SESSION_ALLMENU);
session.removeAttribute(USERNAME + Const.SHIROSET);
session.removeAttribute(Const.SESSION_USERNAME);
session.removeAttribute(Const.SESSION_U_NAME);
session.removeAttribute(Const.SESSION_USERROL);
session.removeAttribute(Const.SESSION_RNUMBERS);
session.removeAttribute(Const.SKIN);
}
/**
* 获取用户监管部门id
* 等级(0--公司领导，1部门领导，3普通员工)
*
* @param userPd
* @param userRole 企业主账号
* 监管部门
*/
public String superviseDepart(PageData userPd, PageData userRole, PageData dpd) throws Exception {
String userSuperviseDepart = "NOT";
if (!Tools.isEmpty(userRole.getString("LEVEL"))) {
if ("0".equals(userRole.getString("LEVEL")) || "1".equals(userPd.getString("ISMAIN"))) { // 如果是 领导 或者是主账号 就显示 全部信息
userSuperviseDepart = "ALL";
} else if ("1".equals(userRole.getString("LEVEL"))) { //还要监管自己部门，如果没有监管自己，要增加上
String[] checkedIds = dpd.getString("checkedIds").split(",");
Map<String, Integer> chuchongMap = new HashMap<>(checkedIds.length + 1); //去重Map
chuchongMap.put(userPd.getString("DEPARTMENT_ID"), 0);
StringBuffer supDeptId = new StringBuffer();
for (int i = 0; i < checkedIds.length; i++) {
if (!Tools.isEmpty(checkedIds[i])) {
if (!chuchongMap.containsKey(checkedIds[i])) { //去除重复 ， 判断空
supDeptId.append("'" + checkedIds[i] + "',");
}
}
}
supDeptId.append("'" + userPd.getString("DEPARTMENT_ID") + "'");
userSuperviseDepart = supDeptId.toString();
} else {
userSuperviseDepart = "NOT";
}
}
return userSuperviseDepart;
}
// PageData pd1 = new PageData();
// pd1.put("DEPARTMENT_ID",Jurisdiction.getDEPARTMENT_ID());
// pd1.put("ISSUPERVISE",1); //是监管部门
// PageData idss = departmentService.findById(pd1);
// if(idss!=null){
// String ids = idss.getString("checkedIds");
// if(ids!=null && Tools.notEmpty(ids) && ids.lastIndexOf(",")>-1 ) {
// String idList[] = ids.split(",");
// String a = "";
// for(String list:idList){
// a+="'"+list+"',";
//
// }
// a = a.substring(0,a.length()-1);
// pd.put("ArrayDATA_IDS", a);
// }
// }
}