forked from luyan/epmet-cloud-lingshan
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
242 lines
7.4 KiB
242 lines
7.4 KiB
package com.epmet.controller;
|
|
|
|
import com.epmet.commons.tools.annotation.LoginUser;
|
|
import com.epmet.commons.tools.constant.NumConstant;
|
|
import com.epmet.commons.tools.exception.ErrorCode;
|
|
import com.epmet.commons.tools.security.dto.TokenDto;
|
|
import com.epmet.commons.tools.utils.RSASignature;
|
|
import com.epmet.commons.tools.utils.Result;
|
|
import com.epmet.commons.tools.validator.AssertUtils;
|
|
import com.epmet.commons.tools.validator.ValidatorUtils;
|
|
import com.epmet.dto.form.LoginByPassWordFormDTO;
|
|
import com.epmet.dto.form.LoginByWxCodeFormDTO;
|
|
import com.epmet.dto.form.ResiWxPhoneFormDTO;
|
|
import com.epmet.dto.result.UserTokenResultDTO;
|
|
import com.epmet.service.CaptchaService;
|
|
import com.epmet.service.LoginService;
|
|
import lombok.extern.slf4j.Slf4j;
|
|
import org.apache.commons.lang3.StringUtils;
|
|
import org.springframework.beans.factory.annotation.Autowired;
|
|
import org.springframework.beans.factory.annotation.Value;
|
|
import org.springframework.web.bind.annotation.*;
|
|
|
|
import javax.imageio.ImageIO;
|
|
import javax.servlet.ServletOutputStream;
|
|
import javax.servlet.http.HttpServletRequest;
|
|
import javax.servlet.http.HttpServletResponse;
|
|
import java.awt.image.BufferedImage;
|
|
import java.io.IOException;
|
|
import java.security.MessageDigest;
|
|
import java.security.NoSuchAlgorithmException;
|
|
import java.util.Arrays;
|
|
import java.util.HashMap;
|
|
import java.util.Map;
|
|
|
|
/**
|
|
* @Description 通用登录接口
|
|
* @Author yinzuomei
|
|
* @Date 2020/3/14 13:58
|
|
*/
|
|
@Slf4j
|
|
@RestController
|
|
@RequestMapping("login")
|
|
public class LoginController {
|
|
@Value("${epmet.login.privateKey}")
|
|
private String privateKey;
|
|
@Autowired
|
|
private CaptchaService captchaService;
|
|
|
|
@Autowired
|
|
private LoginService loginService;
|
|
|
|
/**
|
|
* @return void
|
|
* @param response
|
|
* @param uuid
|
|
* @Author yinzuomei
|
|
* @Description 运营端管理后台-生成验证码
|
|
* @Date 2020/3/17 16:08
|
|
**/
|
|
@GetMapping("captcha")
|
|
public void captcha(HttpServletResponse response, String uuid) throws IOException {
|
|
try {
|
|
//uuid不能为空
|
|
AssertUtils.isBlank(uuid, ErrorCode.IDENTIFIER_NOT_NULL);
|
|
//生成图片验证码
|
|
BufferedImage image = captchaService.create(uuid);
|
|
response.reset();
|
|
response.setHeader("Cache-Control", "no-store, no-cache");
|
|
response.setContentType("image/jpeg");
|
|
ServletOutputStream out = response.getOutputStream();
|
|
ImageIO.write(image, "jpg", out);
|
|
out.close();
|
|
} catch (IOException e) {
|
|
log.error("获取登陆验证码异常", e);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* 返回文字版的验证码
|
|
* 磐石大屏3.10号提出的需求
|
|
* @param uuid
|
|
* @throws IOException
|
|
*/
|
|
@PostMapping("captcha/{uuid}")
|
|
public Result captcha(@PathVariable(name = "uuid", required = true) String uuid) {
|
|
Map<String, String> map = new HashMap<>();
|
|
map.put("captcha", captchaService.getTextCaptcha(uuid));
|
|
return new Result().ok(map);
|
|
|
|
}
|
|
|
|
/**
|
|
* @param formDTO
|
|
* @return com.epmet.commons.tools.utils.Result<java.lang.String>
|
|
* @Author yinzuomei
|
|
* @Description 居民端微信小程序登录
|
|
* @Date 2020/3/14 14:35
|
|
**/
|
|
@PostMapping("/resiwxmp/loginbywxcode")
|
|
public Result<UserTokenResultDTO> loginByWxCode(@RequestBody LoginByWxCodeFormDTO formDTO) {
|
|
//效验数据
|
|
ValidatorUtils.validateEntity(formDTO);
|
|
return loginService.loginByWxCode(formDTO);
|
|
}
|
|
|
|
/**
|
|
* @param formDTO
|
|
* @return com.epmet.commons.tools.utils.Result<com.epmet.dto.UserTokenResultDTO>
|
|
* @Author yinzuomei
|
|
* @Description 手机号+密码登录接口
|
|
* @Date 2020/3/14 19:46
|
|
**/
|
|
@PostMapping("/operweb/loginbypassword")
|
|
public Result<UserTokenResultDTO> loginByPassword(@RequestBody LoginByPassWordFormDTO formDTO) throws Exception {
|
|
//效验数据
|
|
ValidatorUtils.validateEntity(formDTO);
|
|
//解密密码
|
|
if (StringUtils.isNotBlank(formDTO.getPhone())&&formDTO.getPhone().length() > NumConstant.FIFTY) {
|
|
String phone = RSASignature.decryptByPrivateKey(formDTO.getPhone(), privateKey);
|
|
formDTO.setPhone(phone);
|
|
}
|
|
if (StringUtils.isNotBlank(formDTO.getMobile())&&formDTO.getMobile().length() > NumConstant.FIFTY) {
|
|
String phone = RSASignature.decryptByPrivateKey(formDTO.getMobile(), privateKey);
|
|
formDTO.setMobile(phone);
|
|
}
|
|
if (StringUtils.isNotBlank(formDTO.getPassword())&&formDTO.getPassword().length() > NumConstant.FIFTY) {
|
|
String confirmNewPassWord = RSASignature.decryptByPrivateKey(formDTO.getPassword(), privateKey);
|
|
formDTO.setPassword(confirmNewPassWord);
|
|
}
|
|
return loginService.loginByPassword(formDTO);
|
|
}
|
|
|
|
/**
|
|
* @param request
|
|
* @return com.epmet.commons.tools.utils.Result
|
|
* @Author yinzuomei
|
|
* @Description 退出登录
|
|
* @Date 2020/3/18 22:43
|
|
**/
|
|
@PostMapping(value = "logout")
|
|
public Result logout(@LoginUser TokenDto tokenDto, HttpServletRequest request) {
|
|
return loginService.logoutByToken(tokenDto);
|
|
}
|
|
|
|
/**
|
|
* @param formDTO
|
|
* @return com.epmet.commons.tools.utils.Result
|
|
* @author yinzuomei
|
|
* @description 获取用户微信绑定的手机号
|
|
* @Date 2020/7/2 14:33
|
|
**/
|
|
@PostMapping("getresiwxphone")
|
|
public Result getResiWxPhone(@RequestBody ResiWxPhoneFormDTO formDTO) {
|
|
String phone = loginService.getResiWxPhone(formDTO);
|
|
if (StringUtils.isNotBlank(phone) && !"null".equals(phone)) {
|
|
return new Result().ok(phone);
|
|
}
|
|
return new Result().ok("");
|
|
}
|
|
//================start test code==========
|
|
/**
|
|
* 校验签名
|
|
*/
|
|
public static boolean checkSignature(String signature, String timestamp, String nonce) {
|
|
System.out.println("signature:" + signature + "timestamp:" + timestamp + "nonc:" + nonce);
|
|
String WECHAT_TOKEN = "1jkoyyih83nj8";
|
|
String[] arr = new String[]{WECHAT_TOKEN, timestamp, nonce};
|
|
// 将token、timestamp、nonce三个参数进行字典序排序
|
|
Arrays.sort(arr);
|
|
StringBuilder content = new StringBuilder();
|
|
for (int i = 0; i < arr.length; i++) {
|
|
content.append(arr[i]);
|
|
}
|
|
MessageDigest md = null;
|
|
String tmpStr = null;
|
|
|
|
try {
|
|
md = MessageDigest.getInstance("SHA-1");
|
|
// 将三个参数字符串拼接成一个字符串进行sha1加密
|
|
byte[] digest = md.digest(content.toString().getBytes());
|
|
tmpStr = byteToStr(digest);
|
|
} catch (NoSuchAlgorithmException e) {
|
|
log.error("method exception", e);
|
|
}
|
|
|
|
content = null;
|
|
// 将sha1加密后的字符串可与signature对比，标识该请求来源于微信
|
|
System.out.println(tmpStr.equals(signature.toUpperCase()));
|
|
return tmpStr != null && tmpStr.equals(signature.toUpperCase());
|
|
}
|
|
|
|
/**
|
|
* 将字节数组转换为十六进制字符串
|
|
*
|
|
* @param byteArray
|
|
* @return
|
|
*/
|
|
private static String byteToStr(byte[] byteArray) {
|
|
String strDigest = "";
|
|
for (int i = 0; i < byteArray.length; i++) {
|
|
strDigest += byteToHexStr(byteArray[i]);
|
|
}
|
|
return strDigest;
|
|
}
|
|
|
|
/**
|
|
* 将字节转换为十六进制字符串
|
|
*
|
|
* @param mByte
|
|
* @return
|
|
*/
|
|
private static String byteToHexStr(byte mByte) {
|
|
char[] Digit = {'0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'A', 'B', 'C', 'D', 'E', 'F'};
|
|
char[] tempArr = new char[2];
|
|
tempArr[0] = Digit[(mByte >>> 4) & 0X0F];
|
|
tempArr[1] = Digit[mByte & 0X0F];
|
|
|
|
String s = new String(tempArr);
|
|
return s;
|
|
}
|
|
|
|
|
|
/**
|
|
* 打开开发者模式签名认证
|
|
* @param signature
|
|
* @param timestamp
|
|
* @param nonce
|
|
* @param echostr
|
|
* @return
|
|
*/
|
|
@ResponseBody
|
|
@RequestMapping(value = "/service", method = RequestMethod.GET)
|
|
public Object defaultView(String signature, String timestamp, String nonce, String echostr) {
|
|
if (echostr == null || echostr.isEmpty()) {
|
|
return nonce;
|
|
}
|
|
if (checkSignature(signature, timestamp, nonce)) {
|
|
return echostr;
|
|
}
|
|
return nonce;
|
|
}
|
|
}
|
|
|