integrated_traffic/src/main/java/com/zcloud/controller/system/LoginController.java

package com.zcloud.controller.system;

import com.zcloud.controller.base.BaseController;
import com.zcloud.entity.PageData;
import com.zcloud.entity.system.User;
import com.zcloud.logs.LogAnno;
import com.zcloud.service.corp.CorpInfoService;
import com.zcloud.service.offduty.OffDutyService;
import com.zcloud.service.system.DepartmentService;
import com.zcloud.service.system.FHlogService;
import com.zcloud.service.system.RoleService;
import com.zcloud.service.system.UsersService;
import com.zcloud.util.*;
import net.sf.json.JSONObject;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.*;
import org.apache.shiro.crypto.hash.SimpleHash;
import org.apache.shiro.session.Session;
import org.apache.shiro.subject.Subject;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestParam;
import org.springframework.web.bind.annotation.ResponseBody;

import javax.servlet.http.HttpServletRequest;
import java.util.Date;
import java.util.HashMap;
import java.util.List;
import java.util.Map;

/**
 * 说明：登录处理类 作者：luoxiaobao 官网：www.qdkjchina.com
 */
@Controller
@RequestMapping("/admin")
public class LoginController extends BaseController {

	@Autowired
	private UsersService usersService;
	@Autowired
	private RoleService roleService;
	@Autowired
	private FHlogService FHLOG;
	@Autowired
	private DepartmentService departmentService;
	@Autowired
	private CorpInfoService corpinfoService;
	@Autowired
	private OffDutyService offdutyService;

	/**
	 * 请求登录验证用户接口
	 *
	 * @return
	 * @throws Exception
	 */
	@RequestMapping(value = "/check", produces = "application/json;charset=UTF-8")
	@ResponseBody
	@LogAnno(menuType= "首页",menuServer= "首页",instructionsOperate = "登录",instructionsType = "请求登录验证用户接口")
	public Object check() throws Exception {
		// 获取IP
		HttpServletRequest request = this.getRequest();
		String ip = "";
		if (request.getHeader("x-forwarded-for") == null) {
			ip = request.getRemoteAddr();
		} else {
			ip = request.getHeader("x-forwarded-for");
		}
		Boolean isLogin = true; // 当subject.login
								// 验证不通过时，用于跳过后续操作（有时会出现subject.login验证不通过，但是subject.isAuthenticated为true的情况）
		Map<String, Object> map = new HashMap<String, Object>();
//		if(!BasicInfoUtil.checkValid()) {
//			String errInfo = "invalid";
//			map.put("result", errInfo);
//			return map;
//		}
		PageData pd = new PageData();
		pd = this.getPageData();
		String source = pd.getString("SOURCE");
		String errInfo = "success";
		String loginData = pd.getString("KEYDATA");
		if(loginData.indexOf("zcloudchina")==-1){
			loginData = RSAUtils.decryptDataOnJava(loginData, RSAUtils.getPrivateKey());
		}


		String KEYDATA[] = loginData.replaceAll("zcloudchina", "").split(",zy,");

		if (null != KEYDATA && KEYDATA.length == 2) {
			String USERNAME = KEYDATA[0]; // 登录过来的用户名
			String PASSWORD = KEYDATA[1]; // 登录过来的密码
			UsernamePasswordToken token;
			if (null != pd.get("isLogin")) {
				token = new UsernamePasswordToken(USERNAME, PASSWORD);
			} else {
				token = new UsernamePasswordToken(USERNAME, new SimpleHash("SHA-1", USERNAME, PASSWORD).toString());
			}
			Subject subject = SecurityUtils.getSubject();
			try {
				subject.login(token); // 这一步在调用login(token)方法时,它会走到MyRealm.doGetAuthenticationInfo()方法中
			} catch (UnknownAccountException uae) {
				errInfo = "usererror";
				isLogin = false;
			} catch (IncorrectCredentialsException ice) {
				errInfo = "usererror";
				isLogin = false;
			} catch (LockedAccountException lae) {
				errInfo = "usererror";
				isLogin = false;
			} catch (ExcessiveAttemptsException eae) {
				errInfo = "usererror";
				isLogin = false;
			} catch (DisabledAccountException sae) {
				errInfo = "usererror";
				isLogin = false;
			} catch (AuthenticationException ae) {
				errInfo = "usererror";
				isLogin = false;
			}
			System.out.println(PASSWORD);
			try {
			if (subject.isAuthenticated() && isLogin) { // 验证是否登录成功
				removeSession(USERNAME);
				Session session = Jurisdiction.getSession();
				pd.put("USERNAME", USERNAME);
				pd = usersService.findByUsername(pd);
				PageData cpd = corpinfoService.findById(pd);
//				System.out.println(Integer.parseInt(cpd.get("TRIALDAY").toString()) );
				System.out.println(cpd.get("TRIALDAY"));
				if (Integer.parseInt(cpd.get("HAS_LIVE").toString()) >0 || cpd.getString("ISDELIVER").equals("0") ) {
					if (cpd.get("TRIALDAY")== null || Integer.parseInt(cpd.get("TRIALDAY").toString()) >= 0 ) {
						System.out.println(cpd.get("TRIALDAY"));
						System.out.println(cpd.getString("ISSTOP") == null);
						System.out.println("1".equals(cpd.getString("ISSTOP")));
						System.out.println("0".equals(cpd.getString("ISSTOP")));
						System.out.println(cpd.getString("ISSTOP"));
//					if (pd != null && pd.get("RIGHTS") != null && Tools.notEmpty(pd.get("RIGHTS").toString())
//							&& "788664966448".equals(pd.get("RIGHTS").toString())) {
						if ("1".equals(cpd.getString("ISSTOP")) || cpd.getString("ISSTOP") == null) {
							map.put("USERNAME", USERNAME);
							map.put("USER_ID", pd.getString("USER_ID"));
							map.put("NAME", pd.getString("NAME"));
							map.put("ISMAIN", pd.getString("ISMAIN"));
							map.put("IS_SAFETY", pd.get("IS_SAFETY"));
							map.put("ISHEAD", pd.getString("ISHEAD"));
							map.put("ISLEADER", pd.getString("ISLEADER"));
							map.put("DEPARTMENT_ID", pd.getString("DEPARTMENT_ID"));
							map.put("CORPINFO_ID", pd.getString("CORPINFO_ID"));
							map.put("CORP_NAME", cpd.getString("CORP_NAME"));
							map.put("PROVINCE", cpd.getString("PROVINCE"));
//	        	PageData dpd = new PageData();
//	        	dpd.put("DEPARTMENT_ID", pd.getString("DEPARTMENT_ID"));
//	        	dpd=departmentService.findById(dpd);
//	        	map.put("DEPARTMENT_NAME", dpd.getString("NAME"));
//	        	map.put("PARENT_NAME", dpd.getString("PARENT_NAME"));
							PageData rpd = roleService.findById(pd);
							map.put("ROLEID", rpd.getString("ROLE_ID"));
							map.put("ROLE_NAME", rpd.getString("ROLE_NAME"));
							map.put("USERBZ", pd.getString("BZ"));
							PageData dpd = new PageData();
							dpd.put("DEPARTMENT_ID", pd.getString("DEPARTMENT_ID"));
							dpd = departmentService.findById(dpd);
							map.put("DEPARTMENT_NAME", dpd.getString("NAME"));
							map.put("DEPARTMENT_LEVEL", dpd.getString("LEVEL"));
							map.put("ISSUPERVISE", dpd.getString("ISSUPERVISE"));
							User user = new User();
							user.setUSER_ID(pd.getString("USER_ID"));
							user.setUSERNAME(pd.getString("USERNAME"));
							user.setPASSWORD(pd.getString("PASSWORD"));
							user.setNAME(pd.getString("NAME"));
							user.setROLE_ID(pd.getString("ROLE_ID"));
							user.setLAST_LOGIN(pd.getString("LAST_LOGIN"));
							user.setIP(pd.getString("IP"));
							user.setSTATUS(pd.getString("STATUS"));
							if (Tools.notEmpty(pd.getString("WORKSTATUS")) && "2".equals(pd.getString("WORKSTATUS"))) {// 查看用户是否处于周期性休班中
								// 休班（周期性）
								map.put("ISREST", "1");
							} else {
								// 查看用户是否在休假中
								PageData isRest = this.getPageData();
								isRest.put("ISREST", "1");
								isRest.put("USER_ID", pd.getString("USER_ID"));
								isRest.put("CORPINFO_ID", pd.getString("CORPINFO_ID"));
								List<PageData> restList = offdutyService.listAll(isRest);
								if (restList != null && restList.size() > 0) {
									// 休假中
									map.put("ISREST", "1");
								} else {
									// 正常工作
									map.put("ISREST", "0");
								}
							}
							map.put("deptList", departmentService.listAll(cpd));
							map.put("userList", usersService.listAllUser(cpd));
							map.put("CORP_TRAINTYPE",
									Tools.isEmpty(cpd.getString("TRAINTYPE")) ? "" : cpd.getString("TRAINTYPE"));// 用户所属企业的培训行业类型到
							session.setAttribute(Const.SESSION_USER, user); // 把当前用户放入session
							session.setAttribute(Const.DEPARTMENT_ID, pd.getString("DEPARTMENT_ID")); // 把当前用户放入session
							session.setAttribute(Const.ISSUPERVISE, dpd.getString("ISSUPERVISE")); // 把当前用户放入session
							session.setAttribute(Const.VIPLEVEL, cpd.getString("VIPLEVEL")); // 把当前用户放入session
							System.out.println(session.getAttribute(Const.VIPLEVEL));
							session.setAttribute(Const.CORPINFO_ID, pd.getString("CORPINFO_ID")); // 把当前用户企业放入session
							session.setAttribute(Const.POST_ID,
									pd.getString("POST_ID") == null ? "" : pd.getString("POST_ID")); // 把当前用户岗位放入session
							session.setAttribute(Const.USER_ID, pd.getString("USER_ID")); // 把当前用户企业放入session
							session.setAttribute(Const.SESSION_USERNAME, USERNAME); // 放入用户名到session
							session.setAttribute(Const.SESSION_U_NAME, user.getNAME()); // 放入用户姓名到session
							session.setAttribute(Const.IS_MAIN, pd.get("ISMAIN")); // 是否主账号
							session.setAttribute(Const.CORP_TRAINTYPE,
									Tools.isEmpty(cpd.getString("TRAINTYPE")) ? "" : cpd.getString("TRAINTYPE")); // 放入当前用户所属企业的培训行业类型到session


							// 记录日志
							PageData log = new PageData();
							log.put("USERNAME", USERNAME);
							log.put("CONTENT", "成功登录系统");
							log.put("FHLOG_ID", UuidUtil.get32UUID());
							log.put("IP", ip);
							log.put("CZTIME", DateUtil.date2Str(new Date()));
							log.put("SOURCE", source);
							log.put("USER_ID", pd.getString("USER_ID"));
							log.put("CORPINFO_ID", pd.getString("CORPINFO_ID"));
							log.put("TYPE", "1");
							log.put("NAME", pd.getString("NAME"));
							log.put("DEPARTMENT", dpd.getString("NAME"));
							log.put("DEPARTMENT_ID", dpd.getString("DEPARTMENT_ID"));

							FHLOG.save(log);

						} else {
							errInfo = "usercorperror";
						}

					} else {
						errInfo = "userUSEerror";
					}
				}else {
						errInfo = "userUSEerror";
					}
			} else {
				token.clear();
				errInfo = "usererror";
			}
			}catch (Exception e){
				e.printStackTrace();
				map.put("msg", "用户名或密码有误");
				return map;
			}
			if (!"success".equals(errInfo))
				FHLOG.save(USERNAME, "尝试登录系统失败,用户名密码错误,无权限", ip);

		} else {
			errInfo = "error"; // 缺少参数
		}
		map.put("result", errInfo);
		if ("usererror".equals(errInfo)) {
			map.put("msg", "用户名或密码有误");
		} else if ("error".equals(errInfo)) {
			map.put("msg", "缺少参数");
		} else if ("userUSEerror".equals(errInfo)) {
			map.put("msg", "尊敬的一体化数字平台客户，您的平台服务已过期，如需恢复平台使用功能，请联系我们客户服务人员，客服热线：13303358557");
		}
		else if ("usercorperror".equals(errInfo)) {
			map.put("msg", "尊敬的一体化数字平台客户，您好， 您的平台服务已暂停使用，如需恢复使用请联系我们客户服务人员，客服热线：13313350564");
		}
		return map;
	}

	public static void main(String[] args)  {
		System.out.println(RSAUtils.encryptedDataOnJava("zcloudchina唐山永发达商贸有限公司曹妃甸区青林公路西加气站,zy,f18c1055e629c37fedd8cc059dfc2d7889dd3d1a", RSAUtils.getPrivateKey()));

//		System.out.println(RSAUtils.decryptDataOnJava("zjXAwStb7s23FUAL/u9b8j8ZOFsBUYb3nCDgkGmx2iZsxRr7UQZIXR/VGIdp1IR9BxHA2lmqS11nAXEVPMtmksFthzfuU1pvaS7Cz9GwfrMNidpL1QHXfuzD56qCeR90Ne6n1ugOdY6MMq5DotATqIBILIxidAqwYPYeTf55E4A=", RSAUtils.getPrivateKey()));
	}

	/**
	 * 系统用户注册接口
	 *
	 * @return
	 * @throws Exception
	 */
	@RequestMapping(value = "/register", produces = "application/json;charset=UTF-8")
	@ResponseBody
	public Object register(@RequestParam("callback") String callback) throws Exception {
		Map<String, Object> map = new HashMap<String, Object>();
		PageData pd = new PageData();
		pd = this.getPageData();
		String result = "00";
		if (Tools.checkKey("USERNAME", pd.getString("FKEY"))) { // 检验请求key值是否合法
			pd.put("USER_ID", this.get32UUID()); // ID 主键
			pd.put("ROLE_ID", "fhadminzhuche"); // 角色ID fhadminzhuche 为注册用户
			pd.put("NUMBER", ""); // 编号
			pd.put("PHONE", ""); // 手机号
			pd.put("BZ", "注册用户"); // 备注
			pd.put("LAST_LOGIN", ""); // 最后登录时间
			pd.put("IP", ""); // IP
			pd.put("STATUS", "0"); // 状态
			pd.put("SKIN",
					"pcoded-navbar navbar-image-3,navbar pcoded-header navbar-expand-lg navbar-light header-dark,"); // 用户默认皮肤
			pd.put("EMAIL", "");
			pd.put("ROLE_IDS", "");
			pd.put("PASSWORD", new SimpleHash("SHA-1", pd.getString("USERNAME"), pd.getString("PASSWORD")).toString()); // 密码加密
			if (null == usersService.findByUsername(pd)) { // 判断用户名是否存在
				usersService.saveUser(pd); // 执行保存
				FHLOG.save(pd.getString("USERNAME"), "新注册");
			} else {
				result = "01"; // 用户名已存在
			}
		} else {
			result = "05"; // 不合法的注册
		}
		map.put("result", result);
		JSONObject sresult = JSONObject.fromObject(map);
		;
		return callback + "(" + sresult.toString() + ")";
	}

	/**
	 * 判断是否登录状态
	 *
	 * @return
	 * @throws Exception
	 */
	@RequestMapping(value = "/islogin")
	@ResponseBody
	public Object islogin() throws Exception {
		Map<String, String> map = new HashMap<String, String>();
		String errInfo = "success";
		Session session = Jurisdiction.getSession();
		if (null == session.getAttribute(Const.SESSION_USERNAME)) {
			errInfo = "errer";
		}
		map.put("result", errInfo);
		return map;
	}

	/**
	 * 清理session
	 */
	public void removeSession(String USERNAME) {
		Session session = Jurisdiction.getSession(); // 以下清除session缓存
		session.removeAttribute(Const.SESSION_USER);
		session.removeAttribute(USERNAME + Const.SESSION_ROLE_RIGHTS);
		session.removeAttribute(USERNAME + Const.SESSION_ALLMENU);
		session.removeAttribute(USERNAME + Const.SHIROSET);
		session.removeAttribute(Const.SESSION_USERNAME);
		session.removeAttribute(Const.SESSION_U_NAME);
		session.removeAttribute(Const.SESSION_USERROL);
		session.removeAttribute(Const.SESSION_RNUMBERS);
		session.removeAttribute(Const.SKIN);
	}
}