From 33e1839c6214ad72cc5a76ae254ce0bb542e9263 Mon Sep 17 00:00:00 2001
From: liusheng <337615773@qq.com>
Date: 星期六, 10 十月 2026 09:31:11 +0800
Subject: [PATCH] 提交
---
ruoyi-framework/src/main/java/com/ruoyi/framework/web/service/SysLoginService.java | 174 ++++++++++++++++++++++++++++++++++++++++++++++++++-------
1 files changed, 152 insertions(+), 22 deletions(-)
diff --git a/ruoyi-framework/src/main/java/com/ruoyi/framework/web/service/SysLoginService.java b/ruoyi-framework/src/main/java/com/ruoyi/framework/web/service/SysLoginService.java
index 8cf951a..fe60cf0 100644
--- a/ruoyi-framework/src/main/java/com/ruoyi/framework/web/service/SysLoginService.java
+++ b/ruoyi-framework/src/main/java/com/ruoyi/framework/web/service/SysLoginService.java
@@ -1,15 +1,6 @@
package com.ruoyi.framework.web.service;
-import javax.annotation.Resource;
-
-import lombok.extern.slf4j.Slf4j;
-import org.apache.commons.lang3.ObjectUtils;
-import org.springframework.beans.factory.annotation.Autowired;
-import org.springframework.security.authentication.AuthenticationManager;
-import org.springframework.security.authentication.BadCredentialsException;
-import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
-import org.springframework.security.core.Authentication;
-import org.springframework.stereotype.Component;
+import com.alibaba.fastjson2.JSONObject;
import com.ruoyi.common.constant.CacheConstants;
import com.ruoyi.common.constant.Constants;
import com.ruoyi.common.core.domain.entity.SysUser;
@@ -19,16 +10,26 @@
import com.ruoyi.common.exception.user.CaptchaException;
import com.ruoyi.common.exception.user.CaptchaExpireException;
import com.ruoyi.common.exception.user.UserPasswordNotMatchException;
-import com.ruoyi.common.utils.DateUtils;
-import com.ruoyi.common.utils.MessageUtils;
-import com.ruoyi.common.utils.ServletUtils;
-import com.ruoyi.common.utils.StringUtils;
+import com.ruoyi.common.utils.*;
import com.ruoyi.common.utils.ip.IpUtils;
import com.ruoyi.framework.manager.AsyncManager;
import com.ruoyi.framework.manager.factory.AsyncFactory;
import com.ruoyi.framework.security.context.AuthenticationContextHolder;
import com.ruoyi.system.service.ISysConfigService;
import com.ruoyi.system.service.ISysUserService;
+import lombok.extern.slf4j.Slf4j;
+import org.apache.commons.lang3.ObjectUtils;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.authentication.BadCredentialsException;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.Authentication;
+import org.springframework.stereotype.Component;
+
+import javax.annotation.Resource;
+import java.util.HashMap;
+import java.util.Map;
/**
* 鐧诲綍鏍￠獙鏂规硶
@@ -53,6 +54,24 @@
@Autowired
private ISysConfigService configService;
+ @Autowired
+ private RSAPublicKeyExample rsaPublicKeyExample;
+
+ @Value("${pri_key}")
+ private String priKey;
+
+ @Value("${isEncryp}")
+ private Integer isEncryp;
+
+ @Value("${sltd_pub_path}")
+ private String sltdPubPath;
+
+ @Value("${spring.profiles.active}")
+ private String active;
+
+ @Value("${lwl_app_key}")
+ private String APP_KEY;
+
/**
* 鐧诲綍楠岃瘉
*
@@ -62,7 +81,7 @@
* @param uuid 鍞竴鏍囪瘑
* @return 缁撴灉
*/
- public String login(String username, String password, String code, String uuid, String orgid) {
+ public String login(String username, String password, String code, String uuid, String orgid, String campusid, String userType) {
boolean captchaEnabled = configService.selectCaptchaEnabled();
// 楠岃瘉鐮佸紑鍏�
if (captchaEnabled) {
@@ -71,7 +90,8 @@
// 鐢ㄦ埛楠岃瘉
Authentication authentication = null;
try {
- UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(username + "&" + orgid, password);
+ if (StringUtils.isEmpty(campusid)) campusid = "1";
+ UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(username + "&" + orgid + "&" + campusid + "&" + userType, password);
AuthenticationContextHolder.setContext(authenticationToken);
// 璇ユ柟娉曚細鍘昏皟鐢║serDetailsServiceImpl.loadUserByUsername
authentication = authenticationManager.authenticate(authenticationToken);
@@ -93,9 +113,112 @@
return tokenService.createToken(loginUser);
}
+ public String getTokenWN(String userName) {
+ SysUser sysUser = userService.selectUserByUserName(userName);
+ System.out.println("sysUser鐨勭粨鏋滀负锛�" + sysUser);
+
+ LoginUser loginUser = new LoginUser();
+ loginUser.setUserId(sysUser.getUserId());
+ loginUser.setDeptId(sysUser.getDeptId());
+ loginUser.setUser(sysUser);
+ return tokenService.createToken(loginUser);
+ }
+
+ /**
+ * SSO 鍗曠偣鐧诲綍涓氬姟澶勭悊
+ * <p>
+ * 1. 濡傛灉鏄� sltd 鐜锛屽厛閫氳繃 SSO token 鎹㈠彇鍛樺伐璐﹀彿
+ * 2. RSA 瑙ｅ瘑 userName锛堣嫢寮�鍚姞瀵嗭級
+ * 3. 鏍规嵁 userName + orgid + deptId + campusid 鐢熸垚鐧诲綍 token
+ *
+ * @param userName 鐢ㄦ埛鍚嶏紙鍙兘涓虹┖锛屽鏋� sltd 妯″紡鍒欎粠 token 涓幏鍙栵級
+ * @param orgid 缁勭粐鏈烘瀯ID
+ * @param deptId 閮ㄩ棬ID
+ * @param campusid 鏍″尯 ID
+ * @param token SLTD SSO token锛堜粎 sltd 鐜涓嬩娇鐢級
+ * @return 鐧诲綍鎴愬姛鍚庣殑 JWT token锛屽け璐ヨ繑鍥� null
+ */
+ public String ssoLogin(String userName, String orgid, String deptId, String campusid, String token) {
+ // sltd 鐜锛氶�氳繃 SSO token 鑾峰彇鍛樺伐璐﹀彿
+ if ("sltd".equals(active) || "nhfy".equals(active)) {
+ userName = resolveUserNameBySltdToken(token);
+ if (userName == null) {
+ return null;
+ }
+ }
+
+ log.info("銆怱SO鐧诲綍銆憉serName={}", userName);
+
+ if (StringUtils.isEmpty(userName) || StringUtils.isEmpty(orgid)) {
+ log.error("銆怱SO鐧诲綍銆戠敤鎴峰悕鎴栫粍缁囨満鏋勪笉鑳戒负绌�");
+ return null;
+ }
+
+ // RSA 瑙ｅ瘑鐢ㄦ埛鍚�
+ if (isEncryp != null && isEncryp == 1) {
+ userName = rsaPublicKeyExample.decryptedData(userName, priKey);
+ }
+
+ if (StringUtils.isEmpty(deptId)) deptId = "null";
+ if (StringUtils.isEmpty(campusid)) campusid = "null";
+ return loginByUserName(userName + "&" + orgid + "&" + deptId + "&" + campusid);
+ }
+
+ /**
+ * 璋冪敤鐪佺珛鍚屽痉鎺ュ彛锛岄�氳繃 SSO token 鑾峰彇鍛樺伐璐﹀彿
+ *
+ * @param token SLTD SSO token
+ * @return 鍛樺伐璐﹀彿锛岄獙璇佸け璐ヨ繑鍥� null
+ */
+ private String resolveUserNameBySltdToken(String token) {
+ Map<String, String> headers = new HashMap<>();
+ headers.put("app-key", APP_KEY);
+ Map<String, String> requestParams = new HashMap<>();
+ requestParams.put("token", token);
+ String url = active != null && active.contains("nhfy")
+ ? sltdPubPath + "/hbos-thirdparty-integration/standard/ih/getHisLoginUserInfo"
+ : sltdPubPath + "/checkSsoTokenId";
+ log.info("銆怱LTD token 楠岃瘉銆戣姹傚湴鍧�锛歿}锛宼oken闀垮害锛歿}锛宼oken缁撳熬锛歿}", url, token.length(),
+ token.length() > 4 ? token.substring(token.length() - 4) : token);
+ String reqData = HttpUtil.postFormRequest(url, requestParams, headers, null);
+ log.info("銆怱LTD token 楠岃瘉銆戝搷搴旂粨鏋滐細{}", reqData);
+
+ if (StringUtils.isEmpty(reqData)) {
+ log.error("銆怱LTD token 楠岃瘉銆戝搷搴斾负绌猴紝楠岃瘉澶辫触");
+ return null;
+ }
+
+ Map<String, Object> map = JSONObject.parseObject(reqData, Map.class);
+ if (ObjectUtils.isEmpty(map)) {
+ log.error("銆怱LTD token 楠岃瘉銆戝搷搴旇В鏋愪负绌猴紝楠岃瘉澶辫触锛屽搷搴斿唴瀹癸細{}", reqData);
+ return null;
+ }
+
+ Object codeObj = map.get("code");
+ int code = codeObj instanceof Number ? ((Number) codeObj).intValue() : -1;
+ if (code != 200) {
+ log.error("銆怱LTD token 楠岃瘉銆戝搷搴旂爜寮傚父锛岄獙璇佸け璐ワ紝code={}, message={}, 鍝嶅簲鍐呭锛歿}",
+ code, map.get("message"), reqData);
+ return null;
+ }
+
+ Object dataObj = map.get("data");
+ if (!(dataObj instanceof Map)) {
+ log.error("銆怱LTD token 楠岃瘉銆戝搷搴旂己灏慸ata鑺傜偣锛岄獙璇佸け璐ワ紝data={}", dataObj);
+ return null;
+ }
+
+ Object accountNo = ((Map<?, ?>) dataObj).get("accountNo");
+ if (accountNo == null || StringUtils.isEmpty(String.valueOf(accountNo))) {
+ log.error("銆怱LTD token 楠岃瘉銆戝搷搴攄ata涓病鏈塧ccountNo锛岄獙璇佸け璐ワ紝data={}", dataObj);
+ return null;
+ }
+ return String.valueOf(accountNo);
+ }
public String loginByUserName(String userName) {
SysUser sysUser = userService.selectUserByUserNameAndDeptId(userName);
+ log.info("---------sysUser鐨勫�间负:{}", sysUser);
if (ObjectUtils.isNotEmpty(sysUser)) {
// 鏋勫缓鐧诲綍鐢ㄦ埛瀵硅薄
LoginUser loginUser = new LoginUser();
@@ -132,15 +255,22 @@
}
/**
- * 璁板綍鐧诲綍淇℃伅
+ * 璁板綍鐧诲綍淇℃伅锛堝紓姝ユ墽琛岋紝涓嶉樆濉炵櫥褰曚富娴佺▼锛�
*
* @param userId 鐢ㄦ埛ID
*/
public void recordLoginInfo(Long userId) {
- SysUser sysUser = new SysUser();
- sysUser.setUserId(userId);
- sysUser.setLoginIp(IpUtils.getIpAddr(ServletUtils.getRequest()));
- sysUser.setLoginDate(DateUtils.getNowDate());
- userService.updateUserProfile(sysUser);
+ // 鍦ㄥ紓姝ュ墠鎹曡幏IP锛岄伩鍏嶅紓姝ョ嚎绋嬩腑Request涓婁笅鏂囧け鏁�
+ String loginIp = IpUtils.getIpAddr(ServletUtils.getRequest());
+ AsyncManager.me().execute(new java.util.TimerTask() {
+ @Override
+ public void run() {
+ SysUser sysUser = new SysUser();
+ sysUser.setUserId(userId);
+ sysUser.setLoginIp(loginIp);
+ sysUser.setLoginDate(DateUtils.getNowDate());
+ userService.updateUserProfile(sysUser);
+ }
+ });
}
}
--
Gitblit v1.9.3