epmet-cloud-lingshan/epmet-auth/src/main/java/com/epmet/controller/LoginController.java

package com.epmet.controller;

import com.epmet.commons.tools.annotation.LoginUser;
import com.epmet.commons.tools.exception.ErrorCode;
import com.epmet.commons.tools.security.dto.TokenDto;
import com.epmet.commons.tools.utils.Result;
import com.epmet.commons.tools.validator.AssertUtils;
import com.epmet.commons.tools.validator.ValidatorUtils;
import com.epmet.dto.form.LoginByPassWordFormDTO;
import com.epmet.dto.form.LoginByWxCodeFormDTO;
import com.epmet.dto.form.ResiWxPhoneFormDTO;
import com.epmet.dto.result.UserTokenResultDTO;
import com.epmet.service.CaptchaService;
import com.epmet.service.LoginService;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang3.StringUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.*;

import javax.imageio.ImageIO;
import javax.servlet.ServletOutputStream;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.awt.image.BufferedImage;
import java.io.IOException;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.util.Arrays;

/**
 * @Description 通用登录接口
 * @Author yinzuomei
 * @Date 2020/3/14 13:58
 */
@Slf4j
@RestController
@RequestMapping("login")
public class LoginController {
	@Autowired
	private CaptchaService captchaService;

	@Autowired
	private LoginService loginService;

	/**
	 * @return void
	 * @param response
	 * @param uuid
	 * @Author yinzuomei
	 * @Description 运营端管理后台-生成验证码
	 * @Date 2020/3/17 16:08
	 **/
	@GetMapping("captcha")
	public void captcha(HttpServletResponse response, String uuid) throws IOException {
		try {
			//uuid不能为空
			AssertUtils.isBlank(uuid, ErrorCode.IDENTIFIER_NOT_NULL);
			//生成图片验证码
			BufferedImage image = captchaService.create(uuid);
			response.reset();
			response.setHeader("Cache-Control", "no-store, no-cache");
			response.setContentType("image/jpeg");
			ServletOutputStream out = response.getOutputStream();
			ImageIO.write(image, "jpg", out);
			out.close();
		} catch (IOException e) {
			log.error("获取登陆验证码异常", e);
		}
	}

	/**
	 * @description 基层治理平台登录验证码
	 *
	 * @param response
	 * @return
	 * @author wxz
	 * @date 2021.10.25 14:19:40
	 */
	@GetMapping("ic-login-captcha")
	public void icLoginCaptcha(HttpServletResponse response, String uuid) throws IOException {
		try {
			//生成图片验证码
			BufferedImage image = captchaService.createIcLoginCaptcha(uuid);
			response.reset();
			response.setHeader("Cache-Control", "no-store, no-cache");
			response.setContentType("image/jpeg");
			ServletOutputStream out = response.getOutputStream();
			ImageIO.write(image, "jpg", out);
			out.close();
		} catch (IOException e) {
			log.error("获取登陆验证码异常", e);
		}
	}

	/**
	 * @param formDTO
	 * @return com.epmet.commons.tools.utils.Result<java.lang.String>
	 * @Author yinzuomei
	 * @Description 居民端微信小程序登录
	 * @Date 2020/3/14 14:35
	 **/
	@PostMapping("/resiwxmp/loginbywxcode")
	public Result<UserTokenResultDTO> loginByWxCode(@RequestBody LoginByWxCodeFormDTO formDTO) {
		//效验数据
		ValidatorUtils.validateEntity(formDTO);
		return loginService.loginByWxCode(formDTO);
	}

	/**
	 * @param formDTO
	 * @return com.epmet.commons.tools.utils.Result<com.epmet.dto.UserTokenResultDTO>
	 * @Author yinzuomei
	 * @Description 手机号+密码登录接口
	 * @Date 2020/3/14 19:46
	 **/
	@PostMapping("/operweb/loginbypassword")
	public Result<UserTokenResultDTO> loginByPassword(@RequestBody LoginByPassWordFormDTO formDTO) {
		//效验数据
		ValidatorUtils.validateEntity(formDTO);
		Result<UserTokenResultDTO> result = loginService.loginByPassword(formDTO);
		return result;
	}

	/**
	 * @param request
	 * @return com.epmet.commons.tools.utils.Result
	 * @Author yinzuomei
	 * @Description 退出登录
	 * @Date 2020/3/18 22:43
	 **/
	@PostMapping(value = "logout")
	public Result logout(@LoginUser TokenDto tokenDto, HttpServletRequest request) {
		return loginService.logoutByToken(tokenDto);
	}

	/**
	 * @param formDTO
	 * @return com.epmet.commons.tools.utils.Result
	 * @author yinzuomei
	 * @description 获取用户微信绑定的手机号
	 * @Date 2020/7/2 14:33
	 **/
	@PostMapping("getresiwxphone")
	public Result getResiWxPhone(@RequestBody ResiWxPhoneFormDTO formDTO) {
		String phone = loginService.getResiWxPhone(formDTO);
		if (StringUtils.isNotBlank(phone) && !"null".equals(phone)) {
			return new Result().ok(phone);
		}
		return new Result().ok("");
	}
	//================start test code==========
	/**
	 * 校验签名
	 */
	public static boolean checkSignature(String signature, String timestamp, String nonce) {
		System.out.println("signature:" + signature + "timestamp:" + timestamp + "nonc:" + nonce);
		String WECHAT_TOKEN = "1jkoyyih83nj8";
		String[] arr = new String[]{WECHAT_TOKEN, timestamp, nonce};
		// 将token、timestamp、nonce三个参数进行字典序排序
		Arrays.sort(arr);
		StringBuilder content = new StringBuilder();
		for (int i = 0; i < arr.length; i++) {
			content.append(arr[i]);
		}
		MessageDigest md = null;
		String tmpStr = null;

		try {
			md = MessageDigest.getInstance("SHA-1");
			// 将三个参数字符串拼接成一个字符串进行sha1加密
			byte[] digest = md.digest(content.toString().getBytes());
			tmpStr = byteToStr(digest);
		} catch (NoSuchAlgorithmException e) {
			e.printStackTrace();
		}

		content = null;
		// 将sha1加密后的字符串可与signature对比，标识该请求来源于微信
		System.out.println(tmpStr.equals(signature.toUpperCase()));
		return tmpStr != null ? tmpStr.equals(signature.toUpperCase()) : false;
	}

	/**
	 * 将字节数组转换为十六进制字符串
	 *
	 * @param byteArray
	 * @return
	 */
	private static String byteToStr(byte[] byteArray) {
		String strDigest = "";
		for (int i = 0; i < byteArray.length; i++) {
			strDigest += byteToHexStr(byteArray[i]);
		}
		return strDigest;
	}

	/**
	 * 将字节转换为十六进制字符串
	 *
	 * @param mByte
	 * @return
	 */
	private static String byteToHexStr(byte mByte) {
		char[] Digit = {'0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'A', 'B', 'C', 'D', 'E', 'F'};
		char[] tempArr = new char[2];
		tempArr[0] = Digit[(mByte >>> 4) & 0X0F];
		tempArr[1] = Digit[mByte & 0X0F];

		String s = new String(tempArr);
		return s;
	}


	/**
	 * 打开开发者模式签名认证
	 * @param signature
	 * @param timestamp
	 * @param nonce
	 * @param echostr
	 * @return
	 */
	@ResponseBody
	@RequestMapping(value = "/service", method = RequestMethod.GET)
	public Object defaultView(String signature, String timestamp, String nonce, String echostr) {
		if (echostr == null || echostr.isEmpty()) {
			return nonce;
		}
		if (this.checkSignature(signature, timestamp, nonce)) {
			return echostr;
		}
		return nonce;
	}
}