forked from integrated_whb/integrated_whb
328 lines
13 KiB
Java
328 lines
13 KiB
Java
package com.zcloud.controller.system;
|
||
|
||
import com.zcloud.controller.base.BaseController;
|
||
import com.zcloud.entity.PageData;
|
||
import com.zcloud.entity.system.User;
|
||
import com.zcloud.logs.LogAnno;
|
||
import com.zcloud.service.corp.CorpInfoService;
|
||
import com.zcloud.service.offduty.OffDutyService;
|
||
import com.zcloud.service.system.DepartmentService;
|
||
import com.zcloud.service.system.FHlogService;
|
||
import com.zcloud.service.system.RoleService;
|
||
import com.zcloud.service.system.UsersService;
|
||
import com.zcloud.util.*;
|
||
import net.sf.json.JSONObject;
|
||
import org.apache.shiro.SecurityUtils;
|
||
import org.apache.shiro.authc.*;
|
||
import org.apache.shiro.crypto.hash.SimpleHash;
|
||
import org.apache.shiro.session.Session;
|
||
import org.apache.shiro.subject.Subject;
|
||
import org.springframework.beans.factory.annotation.Autowired;
|
||
import org.springframework.stereotype.Controller;
|
||
import org.springframework.web.bind.annotation.RequestMapping;
|
||
import org.springframework.web.bind.annotation.RequestParam;
|
||
import org.springframework.web.bind.annotation.ResponseBody;
|
||
|
||
import javax.servlet.http.HttpServletRequest;
|
||
import java.util.Date;
|
||
import java.util.HashMap;
|
||
import java.util.List;
|
||
import java.util.Map;
|
||
|
||
/**
|
||
* 说明：登录处理类 作者：luoxiaobao 官网：www.qdkjchina.com
|
||
*/
|
||
@Controller
|
||
@RequestMapping("/admin")
|
||
public class LoginController extends BaseController {
|
||
|
||
@Autowired
|
||
private UsersService usersService;
|
||
@Autowired
|
||
private RoleService roleService;
|
||
@Autowired
|
||
private FHlogService FHLOG;
|
||
@Autowired
|
||
private DepartmentService departmentService;
|
||
@Autowired
|
||
private CorpInfoService corpinfoService;
|
||
@Autowired
|
||
private OffDutyService offdutyService;
|
||
|
||
/**
|
||
* 请求登录验证用户接口
|
||
*
|
||
* @return
|
||
* @throws Exception
|
||
*/
|
||
@RequestMapping(value = "/check", produces = "application/json;charset=UTF-8")
|
||
@ResponseBody
|
||
@LogAnno(menuType= "首页",menuServer= "首页",instructionsOperate = "登录",instructionsType = "请求登录验证用户接口")
|
||
public Object check() throws Exception {
|
||
// 获取IP
|
||
HttpServletRequest request = this.getRequest();
|
||
String ip = "";
|
||
if (request.getHeader("x-forwarded-for") == null) {
|
||
ip = request.getRemoteAddr();
|
||
} else {
|
||
ip = request.getHeader("x-forwarded-for");
|
||
}
|
||
Boolean isLogin = true; // 当subject.login
|
||
// 验证不通过时，用于跳过后续操作（有时会出现subject.login验证不通过，但是subject.isAuthenticated为true的情况）
|
||
Map<String, Object> map = new HashMap<String, Object>();
|
||
// if(!BasicInfoUtil.checkValid()) {
|
||
// String errInfo = "invalid";
|
||
// map.put("result", errInfo);
|
||
// return map;
|
||
// }
|
||
PageData pd = new PageData();
|
||
pd = this.getPageData();
|
||
String source = pd.getString("SOURCE");
|
||
String errInfo = "success";
|
||
String loginData = pd.getString("KEYDATA");
|
||
if(loginData.indexOf("zcloudchina")==-1){
|
||
loginData = RSAUtils.decryptDataOnJava(loginData, RSAUtils.getPrivateKey());
|
||
}
|
||
|
||
|
||
String KEYDATA[] = loginData.replaceAll("zcloudchina", "").split(",zy,");
|
||
|
||
if (null != KEYDATA && KEYDATA.length == 2) {
|
||
String USERNAME = KEYDATA[0]; // 登录过来的用户名
|
||
String PASSWORD = KEYDATA[1]; // 登录过来的密码
|
||
UsernamePasswordToken token;
|
||
if (null != pd.get("isLogin")) {
|
||
token = new UsernamePasswordToken(USERNAME, PASSWORD);
|
||
} else {
|
||
token = new UsernamePasswordToken(USERNAME, new SimpleHash("SHA-1", USERNAME, PASSWORD).toString());
|
||
}
|
||
Subject subject = SecurityUtils.getSubject();
|
||
try {
|
||
subject.login(token); // 这一步在调用login(token)方法时,它会走到MyRealm.doGetAuthenticationInfo()方法中
|
||
} catch (UnknownAccountException uae) {
|
||
errInfo = "usererror";
|
||
isLogin = false;
|
||
} catch (IncorrectCredentialsException ice) {
|
||
errInfo = "usererror";
|
||
isLogin = false;
|
||
} catch (LockedAccountException lae) {
|
||
errInfo = "usererror";
|
||
isLogin = false;
|
||
} catch (ExcessiveAttemptsException eae) {
|
||
errInfo = "usererror";
|
||
isLogin = false;
|
||
} catch (DisabledAccountException sae) {
|
||
errInfo = "usererror";
|
||
isLogin = false;
|
||
} catch (AuthenticationException ae) {
|
||
errInfo = "usererror";
|
||
isLogin = false;
|
||
}
|
||
System.out.println(PASSWORD);
|
||
try {
|
||
if (subject.isAuthenticated() && isLogin) { // 验证是否登录成功
|
||
removeSession(USERNAME);
|
||
Session session = Jurisdiction.getSession();
|
||
pd.put("USERNAME", USERNAME);
|
||
pd = usersService.findByUsername(pd);
|
||
PageData cpd = corpinfoService.findById(pd);
|
||
// if (pd != null && pd.get("RIGHTS") != null && Tools.notEmpty(pd.get("RIGHTS").toString())
|
||
// && "788664966448".equals(pd.get("RIGHTS").toString())) {
|
||
map.put("USERNAME", USERNAME);
|
||
map.put("USER_ID", pd.getString("USER_ID"));
|
||
map.put("NAME", pd.getString("NAME"));
|
||
map.put("ISMAIN", pd.getString("ISMAIN"));
|
||
map.put("IS_SAFETY", pd.get("IS_SAFETY"));
|
||
map.put("ISHEAD", pd.getString("ISHEAD"));
|
||
map.put("ISLEADER", pd.getString("ISLEADER"));
|
||
map.put("DEPARTMENT_ID", pd.getString("DEPARTMENT_ID"));
|
||
map.put("CORPINFO_ID", pd.getString("CORPINFO_ID"));
|
||
map.put("CORP_NAME", cpd.getString("CORP_NAME"));
|
||
map.put("PROVINCE", cpd.getString("PROVINCE"));
|
||
// PageData dpd = new PageData();
|
||
// dpd.put("DEPARTMENT_ID", pd.getString("DEPARTMENT_ID"));
|
||
// dpd=departmentService.findById(dpd);
|
||
// map.put("DEPARTMENT_NAME", dpd.getString("NAME"));
|
||
// map.put("PARENT_NAME", dpd.getString("PARENT_NAME"));
|
||
PageData rpd = roleService.findById(pd);
|
||
map.put("ROLEID", rpd.getString("ROLE_ID"));
|
||
map.put("ROLE_NAME", rpd.getString("ROLE_NAME"));
|
||
map.put("USERBZ", pd.getString("BZ"));
|
||
PageData dpd = new PageData();
|
||
dpd.put("DEPARTMENT_ID", pd.getString("DEPARTMENT_ID"));
|
||
dpd = departmentService.findById(dpd);
|
||
map.put("DEPARTMENT_NAME", dpd.getString("NAME"));
|
||
map.put("DEPARTMENT_LEVEL", dpd.getString("LEVEL"));
|
||
map.put("ISSUPERVISE", dpd.getString("ISSUPERVISE"));
|
||
User user = new User();
|
||
user.setUSER_ID(pd.getString("USER_ID"));
|
||
user.setUSERNAME(pd.getString("USERNAME"));
|
||
user.setPASSWORD(pd.getString("PASSWORD"));
|
||
user.setNAME(pd.getString("NAME"));
|
||
user.setROLE_ID(pd.getString("ROLE_ID"));
|
||
user.setLAST_LOGIN(pd.getString("LAST_LOGIN"));
|
||
user.setIP(pd.getString("IP"));
|
||
user.setSTATUS(pd.getString("STATUS"));
|
||
if (Tools.notEmpty(pd.getString("WORKSTATUS")) && "2".equals(pd.getString("WORKSTATUS"))) {// 查看用户是否处于周期性休班中
|
||
// 休班（周期性）
|
||
map.put("ISREST", "1");
|
||
} else {
|
||
// 查看用户是否在休假中
|
||
PageData isRest = this.getPageData();
|
||
isRest.put("ISREST", "1");
|
||
isRest.put("USER_ID", pd.getString("USER_ID"));
|
||
isRest.put("CORPINFO_ID", pd.getString("CORPINFO_ID"));
|
||
List<PageData> restList = offdutyService.listAll(isRest);
|
||
if (restList != null && restList.size() > 0) {
|
||
// 休假中
|
||
map.put("ISREST", "1");
|
||
} else {
|
||
// 正常工作
|
||
map.put("ISREST", "0");
|
||
}
|
||
}
|
||
map.put("deptList", departmentService.listAll(cpd));
|
||
map.put("userList", usersService.listAllUser(cpd));
|
||
map.put("CORP_TRAINTYPE",
|
||
Tools.isEmpty(cpd.getString("TRAINTYPE")) ? "" : cpd.getString("TRAINTYPE"));// 用户所属企业的培训行业类型到
|
||
session.setAttribute(Const.SESSION_USER, user); // 把当前用户放入session
|
||
session.setAttribute(Const.DEPARTMENT_ID, pd.getString("DEPARTMENT_ID")); // 把当前用户放入session
|
||
session.setAttribute(Const.ISSUPERVISE, dpd.getString("ISSUPERVISE")); // 把当前用户放入session
|
||
session.setAttribute(Const.VIPLEVEL, cpd.getString("VIPLEVEL")); // 把当前用户放入session
|
||
System.out.println(session.getAttribute(Const.VIPLEVEL));
|
||
session.setAttribute(Const.CORPINFO_ID, pd.getString("CORPINFO_ID")); // 把当前用户企业放入session
|
||
session.setAttribute(Const.POST_ID,
|
||
pd.getString("POST_ID") == null ? "" : pd.getString("POST_ID")); // 把当前用户岗位放入session
|
||
session.setAttribute(Const.USER_ID, pd.getString("USER_ID")); // 把当前用户企业放入session
|
||
session.setAttribute(Const.SESSION_USERNAME, USERNAME); // 放入用户名到session
|
||
session.setAttribute(Const.SESSION_U_NAME, user.getNAME()); // 放入用户姓名到session
|
||
session.setAttribute(Const.IS_MAIN, pd.get("ISMAIN")); // 是否主账号
|
||
session.setAttribute(Const.CORP_TRAINTYPE,
|
||
Tools.isEmpty(cpd.getString("TRAINTYPE")) ? "" : cpd.getString("TRAINTYPE")); // 放入当前用户所属企业的培训行业类型到session
|
||
|
||
|
||
// 记录日志
|
||
PageData log = new PageData();
|
||
log.put("USERNAME", USERNAME);
|
||
log.put("CONTENT", "成功登录系统");
|
||
log.put("FHLOG_ID", UuidUtil.get32UUID());
|
||
log.put("IP", ip);
|
||
log.put("CZTIME", DateUtil.date2Str(new Date()));
|
||
log.put("SOURCE", source);
|
||
log.put("USER_ID", pd.getString("USER_ID"));
|
||
log.put("CORPINFO_ID", pd.getString("CORPINFO_ID"));
|
||
log.put("TYPE", "1");
|
||
log.put("NAME", pd.getString("NAME"));
|
||
log.put("DEPARTMENT", dpd.getString("NAME"));
|
||
log.put("DEPARTMENT_ID", dpd.getString("DEPARTMENT_ID"));
|
||
|
||
FHLOG.save(log);
|
||
|
||
} else {
|
||
token.clear();
|
||
errInfo = "usererror";
|
||
}
|
||
}catch (Exception e){
|
||
e.printStackTrace();
|
||
map.put("msg", "用户名或密码有误");
|
||
return map;
|
||
}
|
||
if (!"success".equals(errInfo))
|
||
FHLOG.save(USERNAME, "尝试登录系统失败,用户名密码错误,无权限", ip);
|
||
|
||
} else {
|
||
errInfo = "error"; // 缺少参数
|
||
}
|
||
map.put("result", errInfo);
|
||
if ("usererror".equals(errInfo)) {
|
||
map.put("msg", "用户名或密码有误");
|
||
} else if ("error".equals(errInfo)) {
|
||
map.put("msg", "缺少参数");
|
||
}
|
||
return map;
|
||
}
|
||
|
||
public static void main(String[] args) {
|
||
System.out.println(RSAUtils.encryptedDataOnJava("zcloudchina唐山永发达商贸有限公司曹妃甸区青林公路西加气站,zy,f18c1055e629c37fedd8cc059dfc2d7889dd3d1a", RSAUtils.getPrivateKey()));
|
||
|
||
// System.out.println(RSAUtils.decryptDataOnJava("zjXAwStb7s23FUAL/u9b8j8ZOFsBUYb3nCDgkGmx2iZsxRr7UQZIXR/VGIdp1IR9BxHA2lmqS11nAXEVPMtmksFthzfuU1pvaS7Cz9GwfrMNidpL1QHXfuzD56qCeR90Ne6n1ugOdY6MMq5DotATqIBILIxidAqwYPYeTf55E4A=", RSAUtils.getPrivateKey()));
|
||
}
|
||
|
||
/**
|
||
* 系统用户注册接口
|
||
*
|
||
* @return
|
||
* @throws Exception
|
||
*/
|
||
@RequestMapping(value = "/register", produces = "application/json;charset=UTF-8")
|
||
@ResponseBody
|
||
public Object register(@RequestParam("callback") String callback) throws Exception {
|
||
Map<String, Object> map = new HashMap<String, Object>();
|
||
PageData pd = new PageData();
|
||
pd = this.getPageData();
|
||
String result = "00";
|
||
if (Tools.checkKey("USERNAME", pd.getString("FKEY"))) { // 检验请求key值是否合法
|
||
pd.put("USER_ID", this.get32UUID()); // ID 主键
|
||
pd.put("ROLE_ID", "fhadminzhuche"); // 角色ID fhadminzhuche 为注册用户
|
||
pd.put("NUMBER", ""); // 编号
|
||
pd.put("PHONE", ""); // 手机号
|
||
pd.put("BZ", "注册用户"); // 备注
|
||
pd.put("LAST_LOGIN", ""); // 最后登录时间
|
||
pd.put("IP", ""); // IP
|
||
pd.put("STATUS", "0"); // 状态
|
||
pd.put("SKIN",
|
||
"pcoded-navbar navbar-image-3,navbar pcoded-header navbar-expand-lg navbar-light header-dark,"); // 用户默认皮肤
|
||
pd.put("EMAIL", "");
|
||
pd.put("ROLE_IDS", "");
|
||
pd.put("PASSWORD", new SimpleHash("SHA-1", pd.getString("USERNAME"), pd.getString("PASSWORD")).toString()); // 密码加密
|
||
if (null == usersService.findByUsername(pd)) { // 判断用户名是否存在
|
||
usersService.saveUser(pd); // 执行保存
|
||
FHLOG.save(pd.getString("USERNAME"), "新注册");
|
||
} else {
|
||
result = "01"; // 用户名已存在
|
||
}
|
||
} else {
|
||
result = "05"; // 不合法的注册
|
||
}
|
||
map.put("result", result);
|
||
JSONObject sresult = JSONObject.fromObject(map);
|
||
;
|
||
return callback + "(" + sresult.toString() + ")";
|
||
}
|
||
|
||
/**
|
||
* 判断是否登录状态
|
||
*
|
||
* @return
|
||
* @throws Exception
|
||
*/
|
||
@RequestMapping(value = "/islogin")
|
||
@ResponseBody
|
||
public Object islogin() throws Exception {
|
||
Map<String, String> map = new HashMap<String, String>();
|
||
String errInfo = "success";
|
||
Session session = Jurisdiction.getSession();
|
||
if (null == session.getAttribute(Const.SESSION_USERNAME)) {
|
||
errInfo = "errer";
|
||
}
|
||
map.put("result", errInfo);
|
||
return map;
|
||
}
|
||
|
||
/**
|
||
* 清理session
|
||
*/
|
||
public void removeSession(String USERNAME) {
|
||
Session session = Jurisdiction.getSession(); // 以下清除session缓存
|
||
session.removeAttribute(Const.SESSION_USER);
|
||
session.removeAttribute(USERNAME + Const.SESSION_ROLE_RIGHTS);
|
||
session.removeAttribute(USERNAME + Const.SESSION_ALLMENU);
|
||
session.removeAttribute(USERNAME + Const.SHIROSET);
|
||
session.removeAttribute(Const.SESSION_USERNAME);
|
||
session.removeAttribute(Const.SESSION_U_NAME);
|
||
session.removeAttribute(Const.SESSION_USERROL);
|
||
session.removeAttribute(Const.SESSION_RNUMBERS);
|
||
session.removeAttribute(Const.SKIN);
|
||
}
|
||
}
|