package com.zy.common.web;
|
|
import com.alibaba.fastjson.JSON;
|
import com.baomidou.mybatisplus.mapper.EntityWrapper;
|
import com.baomidou.mybatisplus.mapper.Wrapper;
|
import com.core.annotations.ManagerAuth;
|
import com.core.common.AesUtils;
|
import com.core.common.Cools;
|
import com.core.common.DateUtils;
|
import com.core.common.R;
|
import com.core.exception.CoolException;
|
import com.zy.common.CodeRes;
|
import com.zy.common.entity.Parameter;
|
import com.zy.common.model.PowerDto;
|
import com.zy.common.model.enums.HtmlNavIconType;
|
import com.zy.common.properties.OSinfo;
|
import com.zy.common.properties.SystemProperties;
|
import com.zy.common.utils.RandomValidateCodeUtil;
|
import com.zy.system.entity.*;
|
import com.zy.system.service.*;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.beans.factory.annotation.Value;
|
import org.springframework.transaction.annotation.Transactional;
|
import org.springframework.web.bind.annotation.*;
|
|
import javax.servlet.http.HttpServletResponse;
|
import java.util.*;
|
import java.util.stream.Collectors;
|
|
/**
|
* Created by vincent on 2019-07-30
|
*/
|
@RestController
|
public class AuthController extends BaseController {
|
|
@Value("${super.pwd}")
|
private String superPwd;
|
@Autowired
|
private UserService userService;
|
@Autowired
|
private RoleService roleService;
|
@Autowired
|
private UserLoginService userLoginService;
|
@Autowired
|
private ResourceService resourceService;
|
@Autowired
|
private PdaResourceService pdaResourceService;
|
@Autowired
|
private RoleResourceService roleResourceService;
|
@Autowired
|
private PermissionService permissionService;
|
@Autowired
|
private RolePermissionService rolePermissionService;
|
@Autowired
|
private RolePdaResourceService rolePdaResourceService;
|
|
@RequestMapping("/login.action")
|
@ManagerAuth(value = ManagerAuth.Auth.NONE, memo = "登录")
|
public R loginAction(String username, String password){
|
//验证许可证是否有效
|
// LicenseVerify licenseVerify = new LicenseVerify();
|
// boolean verify = licenseVerify.verify();
|
// if (!verify) {//许可证已失效
|
// return R.parse(CodeRes.SYSTEM_20001);
|
// }
|
if (username.equals("super") && password.equals(Cools.md5(superPwd))) {
|
Map<String, Object> res = new HashMap<>();
|
res.put("username", username);
|
res.put("token", Cools.enToken(System.currentTimeMillis() + username, superPwd));
|
return R.ok(res);
|
}
|
EntityWrapper<User> userWrapper = new EntityWrapper<>();
|
userWrapper.eq("username", username);
|
User user = userService.selectOne(userWrapper);
|
if (Cools.isEmpty(user)){
|
return R.parse(CodeRes.USER_10001);
|
}
|
if (user.getStatus()!=1){
|
return R.parse(CodeRes.USER_10002);
|
}
|
if (!user.getPassword().equals(password)){
|
return R.parse(CodeRes.USER_10003);
|
}
|
String token = Cools.enToken(System.currentTimeMillis() + username, user.getPassword());
|
userLoginService.delete(new EntityWrapper<UserLogin>().eq("user_id", user.getId()).eq("system", "WMS"));
|
UserLogin userLogin = new UserLogin();
|
userLogin.setUserId(user.getId());
|
userLogin.setToken(token);
|
userLogin.setCreateTime(new Date());
|
userLogin.setSystem("WMS");
|
userLoginService.insert(userLogin);
|
Map<String, Object> res = new HashMap<>();
|
res.put("username", user.getUsername());
|
res.put("token", token);
|
return R.ok(res);
|
}
|
|
@RequestMapping("/code/switch.action")
|
public R code() {
|
return R.ok().add(Parameter.get().getCodeSwitch());
|
}
|
|
@RequestMapping("/code.action")
|
public void code(@RequestParam String sd, HttpServletResponse response) {
|
RandomValidateCodeUtil.getRandcode(sd, response);
|
}
|
|
@RequestMapping("/code.do")
|
public String codeDo(@RequestParam String sd) throws Exception {
|
String code = null;
|
int time = 0;
|
while (time < 3000) {
|
code = RandomValidateCodeUtil.code.get(sd);
|
if (!Cools.isEmpty(code)){
|
break;
|
} else {
|
Thread.sleep(10);
|
time = time + 100;
|
}
|
}
|
RandomValidateCodeUtil.code.remove(sd);
|
return code;
|
}
|
|
@RequestMapping("/user/detail/auth")
|
@ManagerAuth
|
public R userDetail(){
|
return R.ok(userService.selectById(getUserId()));
|
}
|
|
@RequestMapping("/menu/auth")
|
@ManagerAuth
|
public R menu(){
|
// 获取所有一级菜单
|
List<Resource> oneLevel;
|
User user = null;
|
Wrapper<Resource> resourceWrapper;
|
if (getUserId() == 9527) {
|
oneLevel = resourceService.selectList(new EntityWrapper<Resource>().eq("level", 1).orderBy("sort"));
|
resourceWrapper = new EntityWrapper<Resource>().eq("level", 2).eq("status", 1).orderBy("sort");
|
} else {
|
// 激活码验证
|
// if (!SystemProperties.SYSTEM_ACTIVATION) {
|
// return R.ok();
|
// }
|
oneLevel = resourceService.selectList(new EntityWrapper<Resource>().eq("level", 1).eq("status", 1).orderBy("sort"));
|
// 获取当前用户的所有二级菜单
|
user = userService.selectById(getUserId());
|
List<RoleResource> roleResources = roleResourceService.selectList(new EntityWrapper<RoleResource>().eq("role_id", user.getRoleId()));
|
List<Long> resourceIds = new ArrayList<>();
|
roleResources.forEach(roleResource -> resourceIds.add(roleResource.getResourceId()));
|
if (resourceIds.isEmpty()){
|
return R.ok();
|
}
|
resourceWrapper = new EntityWrapper<Resource>().in("id", resourceIds).eq("level", 2).eq("status", 1).orderBy("sort");
|
}
|
List<Resource> twoLevel = resourceService.selectList(resourceWrapper);
|
List<Map<String, Object>> result = new ArrayList<>();
|
for (Resource menu : oneLevel) {
|
Map<String, Object> map = new HashMap<>();
|
List<Resource> subMenu = new ArrayList<>();
|
Iterator<Resource> iterator = twoLevel.iterator();
|
while (iterator.hasNext()) {
|
Resource resource = iterator.next();
|
if (resource.getResourceId() != null && resource.getResourceId().equals(menu.getId())) {
|
|
// 是否拥有查看权限
|
if (getUserId() != 9527) {
|
Resource view = resourceService.selectOne(new EntityWrapper<Resource>().eq("resource_id", resource.getId()).like("code", "#view"));
|
if (!Cools.isEmpty(view)){
|
RoleResource param = new RoleResource();
|
param.setResourceId(view.getId());
|
param.setRoleId(user.getRoleId());
|
if (null == roleResourceService.selectOne(new EntityWrapper<>(param))){
|
continue;
|
}
|
}
|
}
|
|
subMenu.add(resource);
|
iterator.remove();
|
}
|
}
|
if (subMenu.isEmpty()) {
|
continue;
|
}
|
map.put("menuId", menu.getId());
|
map.put("menuCode", menu.getCode());
|
map.put("menuIcon", HtmlNavIconType.get(menu.getCode()));
|
map.put("menu", menu.getName());
|
map.put("subMenu", subMenu);
|
result.add(map);
|
}
|
return R.ok(result);
|
}
|
|
@RequestMapping("/power/list/auth")
|
@ManagerAuth
|
public R powerList(){
|
List<Resource> oneLevels = resourceService.selectList(new EntityWrapper<Resource>().eq("level", 1).eq("status", 1).orderBy("sort"));
|
List<Map> result = new ArrayList<>();
|
// 一级
|
for (Resource oneLevel : oneLevels){
|
List<Map> twoLevelsList = new ArrayList<>();
|
Map<String, Object> oneLevelMap = new HashMap<>();
|
oneLevelMap.put("title", oneLevel.getName());
|
oneLevelMap.put("id", oneLevel.getId());
|
oneLevelMap.put("spread", true);
|
oneLevelMap.put("children", twoLevelsList);
|
List<Resource> twoLevels = resourceService.selectList(new EntityWrapper<Resource>().eq("resource_id", oneLevel.getId()).eq("level", 2).eq("status", 1).orderBy("sort"));
|
// 二级
|
for (Resource twoLevel : twoLevels){
|
Map<String, Object> twoLevelMap = new HashMap<>();
|
twoLevelMap.put("title", twoLevel.getName());
|
twoLevelMap.put("id", twoLevel.getId());
|
twoLevelMap.put("spread", false);
|
|
List<Map> threeLevelsList = new ArrayList<>();
|
twoLevelMap.put("children", threeLevelsList);
|
// 三级
|
List<Resource> threeLevels = resourceService.selectList(new EntityWrapper<Resource>().eq("resource_id", twoLevel.getId()).eq("level", 3).eq("status", 1).orderBy("sort"));
|
for (Resource threeLevel : threeLevels){
|
Map<String, Object> threeLevelMap = new HashMap<>();
|
threeLevelMap.put("title", threeLevel.getName());
|
threeLevelMap.put("id", threeLevel.getId());
|
threeLevelMap.put("checked", false);
|
threeLevelsList.add(threeLevelMap);
|
}
|
|
twoLevelsList.add(twoLevelMap);
|
}
|
result.add(oneLevelMap);
|
}
|
|
// 功能模块
|
Map<String, Object> functions = new HashMap<>();
|
functions.put("title", "pda功能");
|
functions.put("id", "function");
|
functions.put("spread", true);
|
List<Map> funcs = new ArrayList<>();
|
functions.put("children", funcs);
|
List<PdaResource> oneLevs = pdaResourceService.selectList(new EntityWrapper<PdaResource>().eq("level", 1).eq("status", 1).orderBy("sort"));
|
// 一级
|
for (PdaResource oneLev : oneLevs) {
|
List<Map> twoLevelsList = new ArrayList<>();
|
Map<String, Object> oneLevelMap = new HashMap<>();
|
oneLevelMap.put("title", oneLev.getName());
|
oneLevelMap.put("id", oneLev.getId());
|
oneLevelMap.put("spread", true);
|
oneLevelMap.put("checked", false);
|
oneLevelMap.put("children", twoLevelsList);
|
|
List<PdaResource> twoLevels = pdaResourceService.selectList(new EntityWrapper<PdaResource>().eq("resource_id", oneLev.getId()).eq("level", 2).eq("status", 1).orderBy("sort"));
|
// 二级
|
for (PdaResource twoLevel : twoLevels){
|
Map<String, Object> twoLevelMap = new HashMap<>();
|
twoLevelMap.put("title", twoLevel.getName());
|
twoLevelMap.put("id", twoLevel.getId());
|
twoLevelMap.put("spread", false);
|
twoLevelMap.put("checked", false);
|
List<Map> threeLevelsList = new ArrayList<>();
|
twoLevelMap.put("children", threeLevelsList);
|
// 三级
|
List<PdaResource> threeLevels = pdaResourceService.selectList(new EntityWrapper<PdaResource>().eq("resource_id", twoLevel.getId()).eq("level", 3).eq("status", 1).orderBy("sort"));
|
for (PdaResource threeLevel : threeLevels){
|
Map<String, Object> threeLevelMap = new HashMap<>();
|
threeLevelMap.put("title", threeLevel.getName());
|
threeLevelMap.put("id", threeLevel.getId());
|
threeLevelMap.put("checked", false);
|
threeLevelsList.add(threeLevelMap);
|
}
|
twoLevelsList.add(twoLevelMap);
|
}
|
funcs.add(oneLevelMap);
|
}
|
result.add(functions);
|
|
return R.ok(result);
|
}
|
|
@RequestMapping(value = "/power/{roleId}/auth")
|
@ManagerAuth
|
public R get(@PathVariable("roleId") Long roleId) {
|
List<Object> result = new ArrayList<>();
|
// 菜单
|
List<RoleResource> roleResources = roleResourceService.selectList(new EntityWrapper<RoleResource>().eq("role_id", roleId));
|
for (RoleResource roleResource : roleResources){
|
Resource resource = resourceService.selectById(roleResource.getResourceId());
|
if (!Cools.isEmpty(resource)){
|
if (resource.getLevel() == 3){
|
result.add(resource.getId());
|
}
|
}
|
}
|
// 功能
|
List<RolePermission> rolePermissions = rolePermissionService.selectList(new EntityWrapper<RolePermission>().eq("role_id", roleId));
|
for (RolePermission rolePermission : rolePermissions){
|
Permission permission = permissionService.selectById(rolePermission.getPermissionId());
|
if (!Cools.isEmpty(permission)){
|
result.add(permission.getAction());
|
}
|
}
|
// pda权限
|
List<RolePdaResource> rolePdaResources = rolePdaResourceService.selectList(new EntityWrapper<RolePdaResource>().eq("role_id", roleId));
|
for (RolePdaResource rolePdaResource : rolePdaResources) {
|
PdaResource pdaResource = pdaResourceService.selectById(rolePdaResource.getResourceId());
|
if (!Cools.isEmpty(pdaResource)) {
|
if (pdaResource.getLevel() == 1){
|
List<PdaResource> pdaResources = pdaResourceService.selectList(new EntityWrapper<PdaResource>().eq("resource_id", pdaResource.getId()));
|
if (Cools.isEmpty(pdaResources)) {
|
result.add(pdaResource.getId());
|
}
|
}
|
if (pdaResource.getLevel() == 2){
|
List<PdaResource> pdaResources = pdaResourceService.selectList(new EntityWrapper<PdaResource>().eq("resource_id", pdaResource.getId()));
|
if (Cools.isEmpty(pdaResources)) {
|
result.add(pdaResource.getId());
|
}
|
}
|
}
|
}
|
return R.ok(result);
|
}
|
|
@RequestMapping("/power/auth")
|
@ManagerAuth(memo = "授权")
|
@Transactional
|
public R power(Long roleId, String powers){
|
Role role = roleService.selectById(roleId);
|
Long leaderId = role.getLeader();
|
roleResourceService.delete(new EntityWrapper<RoleResource>().eq("role_id", roleId));
|
rolePermissionService.delete(new EntityWrapper<RolePermission>().eq("role_id", roleId));
|
rolePdaResourceService.delete(new EntityWrapper<RolePdaResource>().eq("role_id", roleId));
|
if (!Cools.isEmpty(powers)){
|
List<PowerDto> dtos = JSON.parseArray(powers, PowerDto.class);
|
for (PowerDto dto : dtos) {
|
if (isNumber(dto.getTwo())) {
|
Resource resource = resourceService.selectOne(new EntityWrapper<Resource>().eq("id", dto.getTwo()).eq("level", 2));
|
if (!Cools.isEmpty(resource)) {
|
// 校验上级权限
|
if (leaderId != null) {
|
RoleResource roleResource = roleResourceService.selectOne(new EntityWrapper<RoleResource>().eq("role_id", leaderId).eq("resource_id", resource.getId()));
|
if (null == roleResource) {
|
throw new CoolException(resource.getName().concat("无法授权给").concat(role.getName()));
|
}
|
}
|
RoleResource roleResource = new RoleResource();
|
roleResource.setRoleId(roleId);
|
roleResource.setResourceId(resource.getId());
|
roleResourceService.insert(roleResource);
|
}
|
|
} else {
|
if (dto.getTwo().substring(0,1).contains("-")) {
|
PdaResource pdaResource = pdaResourceService.selectOne(new EntityWrapper<PdaResource>().eq("id", dto.getTwo()).eq("level", 1));
|
if (!Cools.isEmpty(pdaResource)) {
|
// 校验上级权限
|
if (leaderId != null) {
|
RolePdaResource rolePdaResource = rolePdaResourceService.selectOne(new EntityWrapper<RolePdaResource>().eq("role_id", leaderId).eq("resource_id", pdaResource.getId()));
|
if (null == rolePdaResource) {
|
throw new CoolException(pdaResource.getName().concat("无法授权给").concat(role.getName()));
|
}
|
}
|
RolePdaResource rolePdaResource = new RolePdaResource();
|
rolePdaResource.setRoleId(roleId);
|
rolePdaResource.setResourceId(pdaResource.getId());
|
rolePdaResourceService.insert(rolePdaResource);
|
}
|
} else {
|
Permission permission = permissionService.selectOne(new EntityWrapper<Permission>().eq("action", dto.getTwo()));
|
if (!Cools.isEmpty(permission)){
|
RolePermission rolePermission = new RolePermission();
|
rolePermission.setRoleId(roleId);
|
rolePermission.setPermissionId(permission.getId());
|
rolePermissionService.insert(rolePermission);
|
}
|
}
|
|
}
|
for (String three : dto.getThree()){
|
if (three.substring(0,1).contains("-")) {
|
PdaResource pdaResource = pdaResourceService.selectOne(new EntityWrapper<PdaResource>().eq("id", three).eq("level", 2));
|
if (!Cools.isEmpty(pdaResource)) {
|
// 校验上级权限
|
if (leaderId != null) {
|
RolePdaResource rolePdaResource = rolePdaResourceService.selectOne(new EntityWrapper<RolePdaResource>().eq("role_id", leaderId).eq("resource_id", pdaResource.getId()));
|
if (null == rolePdaResource) {
|
throw new CoolException(pdaResource.getName().concat("无法授权给").concat(role.getName()));
|
}
|
}
|
RolePdaResource rolePdaResource = new RolePdaResource();
|
rolePdaResource.setRoleId(roleId);
|
rolePdaResource.setResourceId(pdaResource.getId());
|
rolePdaResourceService.insert(rolePdaResource);
|
}
|
} else {
|
Resource resource1 = resourceService.selectOne(new EntityWrapper<Resource>().eq("id", three).eq("level", 3));
|
if (!Cools.isEmpty(resource1)) {
|
// 校验上级权限
|
if (leaderId != null) {
|
RoleResource roleResource = roleResourceService.selectOne(new EntityWrapper<RoleResource>().eq("role_id", leaderId).eq("resource_id", resource1.getId()));
|
if (null == roleResource) {
|
throw new CoolException(resource1.getName().concat("无法授权给").concat(role.getName()));
|
}
|
}
|
RoleResource roleResource = new RoleResource();
|
roleResource.setRoleId(roleId);
|
roleResource.setResourceId(resource1.getId());
|
roleResourceService.insert(roleResource);
|
}
|
}
|
|
}
|
}
|
}
|
return R.ok();
|
}
|
|
@RequestMapping(value = "/power/menu/{resourceId}/auth")
|
@ManagerAuth
|
public R buttonResource(@PathVariable("resourceId") Long resourceId) {
|
List<Resource> resources;
|
if (getUserId() == 9527) {
|
resources = resourceService.selectList(new EntityWrapper<Resource>().eq("level", 3).eq("resource_id", resourceId));
|
} else {
|
resources = roleResourceService.getMenuButtomResource(resourceId, getUserId());
|
}
|
for (Resource resource : resources) {
|
resource.setCode(resource.getCode().split("#")[1]);
|
}
|
return R.ok(resources);
|
}
|
|
@GetMapping(value = "/system/activation/auth")
|
public R activation() {
|
if (SystemProperties.SYSTEM_ACTIVATION) {
|
String activationCode = SystemProperties.getActivationCode(OSinfo.getOSname().getActivationCodePath());
|
String timeStr = AesUtils.decrypt(activationCode, SystemProperties.SALT);
|
if (null == timeStr) {
|
SystemProperties.SYSTEM_ACTIVATION = Boolean.FALSE;
|
return R.error();
|
}
|
Date exprTime = DateUtils.convert(timeStr, DateUtils.yyyyMMddHHmmss);
|
if (new Date().getTime() < exprTime.getTime()) {
|
return R.ok().add(DateUtils.convert(exprTime));
|
} else {
|
SystemProperties.SYSTEM_ACTIVATION = Boolean.FALSE;
|
return R.error();
|
}
|
} else {
|
return R.error();
|
}
|
}
|
|
@PostMapping(value = "/system/secret/auth")
|
@ManagerAuth
|
public R systemSecret(@RequestParam(value = "secret") String secret) {
|
if (Cools.isEmpty(secret)) {
|
return R.error("请输入激活码");
|
}
|
// 验证激活码
|
String timeStr = AesUtils.decrypt(secret, SystemProperties.SALT);
|
if (null == timeStr) {
|
return R.error("激活码错误");
|
}
|
Date exprTime = DateUtils.convert(timeStr, DateUtils.yyyyMMddHHmmss);
|
if (new Date().getTime() >= exprTime.getTime()) {
|
return R.error("激活码已失效");
|
}
|
boolean result = SystemProperties.saveActivationCode(OSinfo.getOSname().getActivationCodePath(), secret);
|
if (!result) {
|
return R.error("激活失败");
|
}
|
SystemProperties.SYSTEM_ACTIVATION = Boolean.TRUE;
|
return R.ok("激活成功，有效期至"+DateUtils.convert(exprTime));
|
}
|
|
@RequestMapping("/menu/pda/auth")
|
@ManagerAuth
|
public R menuPda(@RequestBody HashMap<String,String> params){
|
Long userId = getUserId();
|
String level = params.get("level");
|
Long id = Long.valueOf(params.get("id"));
|
List<RolePdaResource> rolePdaResources;
|
if (userId == 9527L) {
|
rolePdaResources = rolePdaResourceService.selectList(new EntityWrapper<>());
|
} else {
|
Long roleId = getUser().getRoleId();
|
rolePdaResources = rolePdaResourceService.selectList(new EntityWrapper<RolePdaResource>().eq("role_id", roleId));
|
}
|
if (Cools.isEmpty(rolePdaResources)) {
|
return R.ok();
|
}
|
List<Long> collect = rolePdaResources.stream().map(RolePdaResource::getResourceId).distinct().collect(Collectors.toList());
|
List<PdaResource> pdaResources = pdaResourceService.selectBatchIds(collect);
|
List<PdaResource> results = new ArrayList<>();
|
|
for (PdaResource pdaResource : pdaResources) {
|
if (Integer.parseInt(level) == 1) {
|
if (pdaResource.getLevel().equals(Short.valueOf(level))) {
|
results.add(pdaResource);
|
}
|
} else {
|
if (pdaResource.getLevel().equals(Short.valueOf(level)) && pdaResource.getResourceId().equals(id)) {
|
results.add(pdaResource);
|
}
|
}
|
}
|
return R.ok().add(results);
|
}
|
|
}
|
