E9单点登录1
wynne1005
4 years ago
parent
4c50bc4687
commit
1f2b304968
@ -0,0 +1,21 @@
|
|||||||
|
package cn.estsh.i3plus.core.api.iservice.base;
|
||||||
|
|
||||||
|
import cn.estsh.i3plus.pojo.model.platform.SystemLoginModel;
|
||||||
|
import cn.estsh.impp.framework.boot.util.ResultBean;
|
||||||
|
|
||||||
|
import javax.servlet.http.HttpServletRequest;
|
||||||
|
import java.util.function.BiFunction;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* @author Wynne.Lu
|
||||||
|
* @date 2021/1/18 上午10:50
|
||||||
|
* @desc
|
||||||
|
*/
|
||||||
|
public interface ISystemLoginStrategyService {
|
||||||
|
/**
|
||||||
|
* @param request
|
||||||
|
* @param loginModel
|
||||||
|
* @return
|
||||||
|
*/
|
||||||
|
BiFunction<HttpServletRequest, SystemLoginModel, ResultBean> login();
|
||||||
|
}
|
||||||
@ -0,0 +1,44 @@
|
|||||||
|
package cn.estsh.i3plus.core.apiservice.auth.realm.strategy;
|
||||||
|
|
||||||
|
import cn.estsh.i3plus.core.api.iservice.base.ISystemLoginService;
|
||||||
|
import cn.estsh.i3plus.pojo.base.shirotoken.AdminToken;
|
||||||
|
import org.apache.shiro.authc.AuthenticationInfo;
|
||||||
|
import org.apache.shiro.authc.AuthenticationToken;
|
||||||
|
import org.apache.shiro.authc.SimpleAuthenticationInfo;
|
||||||
|
import org.apache.shiro.authz.AuthorizationInfo;
|
||||||
|
import org.apache.shiro.authz.SimpleAuthorizationInfo;
|
||||||
|
import org.apache.shiro.realm.AuthorizingRealm;
|
||||||
|
import org.apache.shiro.subject.PrincipalCollection;
|
||||||
|
import org.slf4j.Logger;
|
||||||
|
import org.slf4j.LoggerFactory;
|
||||||
|
import org.springframework.beans.factory.annotation.Autowired;
|
||||||
|
import org.springframework.stereotype.Component;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* @author Wynne.Lu
|
||||||
|
* @date 2021/1/18 下午2:32
|
||||||
|
* @desc
|
||||||
|
*/
|
||||||
|
@Component
|
||||||
|
public class E9AuthRealm extends AuthorizingRealm {
|
||||||
|
|
||||||
|
public static final Logger LOGGER = LoggerFactory.getLogger(E9AuthRealm.class);
|
||||||
|
|
||||||
|
@Autowired
|
||||||
|
private ISystemLoginService systemLoginService;
|
||||||
|
|
||||||
|
public E9AuthRealm(){
|
||||||
|
//添加支持的token
|
||||||
|
this.setAuthenticationTokenClass(AdminToken.class);
|
||||||
|
}
|
||||||
|
|
||||||
|
@Override
|
||||||
|
protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principalCollection) {
|
||||||
|
return new SimpleAuthorizationInfo();
|
||||||
|
}
|
||||||
|
|
||||||
|
@Override
|
||||||
|
protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authenticationToken) {
|
||||||
|
return new SimpleAuthenticationInfo();
|
||||||
|
}
|
||||||
|
}
|
||||||
@ -0,0 +1,87 @@
|
|||||||
|
package cn.estsh.i3plus.core.apiservice.serviceimpl.base.login.strategy;
|
||||||
|
|
||||||
|
import cn.estsh.i3plus.core.api.iservice.base.ISystemLoginService;
|
||||||
|
import cn.estsh.i3plus.core.api.iservice.base.ISystemLoginStrategyService;
|
||||||
|
import cn.estsh.i3plus.core.api.iservice.busi.ILicenseClickService;
|
||||||
|
import cn.estsh.i3plus.core.api.iservice.busi.ISysUserService;
|
||||||
|
import cn.estsh.i3plus.platform.common.util.CommonConstWords;
|
||||||
|
import cn.estsh.i3plus.pojo.base.bean.BaseThreadLocal;
|
||||||
|
import cn.estsh.i3plus.pojo.base.enumutil.CommonEnumUtil;
|
||||||
|
import cn.estsh.i3plus.pojo.model.platform.SystemLoginModel;
|
||||||
|
import cn.estsh.i3plus.pojo.platform.bean.SessionUser;
|
||||||
|
import cn.estsh.impp.framework.boot.auth.AuthUtil;
|
||||||
|
import cn.estsh.impp.framework.boot.util.ImppRedis;
|
||||||
|
import cn.estsh.impp.framework.boot.util.RedisCacheTool;
|
||||||
|
import cn.estsh.impp.framework.boot.util.ResultBean;
|
||||||
|
import cn.estsh.impp.framework.boot.util.ValidatorBean;
|
||||||
|
import lombok.extern.slf4j.Slf4j;
|
||||||
|
import org.springframework.beans.factory.annotation.Autowired;
|
||||||
|
import org.springframework.stereotype.Service;
|
||||||
|
|
||||||
|
import javax.annotation.Resource;
|
||||||
|
import javax.servlet.http.HttpServletRequest;
|
||||||
|
import java.util.function.BiFunction;
|
||||||
|
|
||||||
|
import static cn.estsh.i3plus.platform.common.util.CommonConstWords.DEFAULT_LANGUAGE;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* @author Wynne.Lu
|
||||||
|
* @date 2021/1/18 下午4:39
|
||||||
|
* @desc
|
||||||
|
*/
|
||||||
|
@Slf4j
|
||||||
|
@Service
|
||||||
|
public class DefaultLoginStrategy implements ISystemLoginStrategyService {
|
||||||
|
|
||||||
|
@Resource(name = "redisCore")
|
||||||
|
protected ImppRedis redisCore;
|
||||||
|
|
||||||
|
@Autowired
|
||||||
|
private ILicenseClickService licenseClickService;
|
||||||
|
|
||||||
|
@Autowired
|
||||||
|
private ISysUserService userService;
|
||||||
|
|
||||||
|
@Autowired
|
||||||
|
private ISystemLoginService loginService;
|
||||||
|
|
||||||
|
@Override
|
||||||
|
public BiFunction<HttpServletRequest, SystemLoginModel, ResultBean> login() {
|
||||||
|
return (request, loginModel) -> {
|
||||||
|
ResultBean result;
|
||||||
|
ValidatorBean.checkNotNull(loginModel.getLanguageCode(), "语言不能为空");
|
||||||
|
// TODO 后期移除，暂时用于避免自动登录后前台没有正确的传输组织代码信息
|
||||||
|
if ("null".equals(loginModel.getLanguageCode())) {
|
||||||
|
loginModel.setLanguageCode(DEFAULT_LANGUAGE);
|
||||||
|
}
|
||||||
|
|
||||||
|
// 设置语言代码
|
||||||
|
BaseThreadLocal.setData(BaseThreadLocal.LANGUAGE_CODE, loginModel.getLanguageCode());
|
||||||
|
|
||||||
|
ValidatorBean.checkNotNull(loginModel.getLoginName(), "用户名不能为空");
|
||||||
|
ValidatorBean.checkNotNull(loginModel.getLoginPwd(), "密码不能为空");
|
||||||
|
|
||||||
|
int sessionMode = RedisCacheTool.getSysConfigIntVal(CommonConstWords.CONFIG_SESSION_MODE, CommonConstWords.CONFIG_SESSION_MODE_DEFAULT);
|
||||||
|
if (sessionMode != CommonEnumUtil.SESSION_MODE.SEIZE.getValue()) {
|
||||||
|
AuthUtil.logout();
|
||||||
|
}
|
||||||
|
|
||||||
|
SessionUser user = userService.queryUserLogin(
|
||||||
|
loginModel.getLoginName().trim(),
|
||||||
|
loginModel.getLoginPwd().trim(),
|
||||||
|
loginModel.getLanguageCode(),
|
||||||
|
loginService.getLoginPlatform(request).getValue(),
|
||||||
|
loginModel.getDeviceId()
|
||||||
|
);
|
||||||
|
|
||||||
|
String redisKey = CommonConstWords.USER_LOGIN_ERROR + "_" + user.getUser().getId();
|
||||||
|
redisCore.deleteKey(redisKey);
|
||||||
|
|
||||||
|
result = new ResultBean(true, AuthUtil.getSession().getId().toString(), AuthUtil.getSessionUser());
|
||||||
|
result.setUrl("/");
|
||||||
|
|
||||||
|
AuthUtil.setOrganize(user.getUser().getOrganize());
|
||||||
|
return result;
|
||||||
|
};
|
||||||
|
}
|
||||||
|
}
|
||||||
@ -0,0 +1,104 @@
|
|||||||
|
package cn.estsh.i3plus.core.apiservice.serviceimpl.base.login.strategy;
|
||||||
|
|
||||||
|
import cn.estsh.i3plus.core.api.iservice.base.ISystemLoginService;
|
||||||
|
import cn.estsh.i3plus.core.api.iservice.base.ISystemLoginStrategyService;
|
||||||
|
import cn.estsh.i3plus.core.api.iservice.busi.ILicenseClickService;
|
||||||
|
import cn.estsh.i3plus.core.api.iservice.busi.ISysUserService;
|
||||||
|
import cn.estsh.i3plus.platform.common.tool.ServletRequestTool;
|
||||||
|
import cn.estsh.i3plus.platform.common.util.CommonConstWords;
|
||||||
|
import cn.estsh.i3plus.platform.common.util.PlatformConstWords;
|
||||||
|
import cn.estsh.i3plus.pojo.base.bean.BaseThreadLocal;
|
||||||
|
import cn.estsh.i3plus.pojo.base.enumutil.CommonEnumUtil;
|
||||||
|
import cn.estsh.i3plus.pojo.base.enumutil.ImppEnumUtil;
|
||||||
|
import cn.estsh.i3plus.pojo.model.platform.SystemLoginModel;
|
||||||
|
import cn.estsh.i3plus.pojo.platform.bean.SessionUser;
|
||||||
|
import cn.estsh.impp.framework.boot.auth.AuthUtil;
|
||||||
|
import cn.estsh.impp.framework.boot.util.ImppRedis;
|
||||||
|
import cn.estsh.impp.framework.boot.util.RedisCacheTool;
|
||||||
|
import cn.estsh.impp.framework.boot.util.ResultBean;
|
||||||
|
import cn.estsh.impp.framework.boot.util.ValidatorBean;
|
||||||
|
import lombok.extern.slf4j.Slf4j;
|
||||||
|
import org.springframework.beans.factory.annotation.Autowired;
|
||||||
|
import org.springframework.context.annotation.Lazy;
|
||||||
|
import org.springframework.stereotype.Service;
|
||||||
|
|
||||||
|
import javax.annotation.Resource;
|
||||||
|
import javax.servlet.http.HttpServletRequest;
|
||||||
|
import java.util.Arrays;
|
||||||
|
import java.util.function.BiFunction;
|
||||||
|
|
||||||
|
import static cn.estsh.i3plus.platform.common.util.CommonConstWords.DEFAULT_LANGUAGE;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* @author Wynne.Lu
|
||||||
|
* @date 2021/1/18 上午10:53
|
||||||
|
* @desc
|
||||||
|
*/
|
||||||
|
@Lazy
|
||||||
|
@Slf4j
|
||||||
|
@Service
|
||||||
|
public class E9LoginStrategy implements ISystemLoginStrategyService {
|
||||||
|
|
||||||
|
@Resource(name = "redisCore")
|
||||||
|
protected ImppRedis redisCore;
|
||||||
|
|
||||||
|
@Autowired
|
||||||
|
private ILicenseClickService licenseClickService;
|
||||||
|
|
||||||
|
@Autowired
|
||||||
|
private ISysUserService userService;
|
||||||
|
|
||||||
|
@Autowired
|
||||||
|
private ISystemLoginService loginService;
|
||||||
|
|
||||||
|
@Override
|
||||||
|
public BiFunction<HttpServletRequest, SystemLoginModel, ResultBean> login() {
|
||||||
|
return (request, loginModel) -> {
|
||||||
|
boolean isRequestFromSpecificIp = validateHost(request);
|
||||||
|
if (!isRequestFromSpecificIp) {
|
||||||
|
return ResultBean.fail("单点登录请求未从指定授权服务器发送，校验失败。");
|
||||||
|
}
|
||||||
|
licenseClickService.checkLicenseNumberLogin();
|
||||||
|
ValidatorBean.checkNotNull(loginModel.getLanguageCode(), "语言不能为空");
|
||||||
|
// TODO 后期移除，暂时用于避免自动登录后前台没有正确的传输组织代码信息
|
||||||
|
if ("null".equals(loginModel.getLanguageCode())) {
|
||||||
|
loginModel.setLanguageCode(DEFAULT_LANGUAGE);
|
||||||
|
}
|
||||||
|
|
||||||
|
// 设置语言代码
|
||||||
|
BaseThreadLocal.setData(BaseThreadLocal.LANGUAGE_CODE, loginModel.getLanguageCode());
|
||||||
|
BaseThreadLocal.setData(PlatformConstWords.AUTH_REALM_CHOOSE, ImppEnumUtil.AUTH_REALM_STRATEGY.PANASONIC.getStrategyName());
|
||||||
|
|
||||||
|
int sessionMode = RedisCacheTool.getSysConfigIntVal(CommonConstWords.CONFIG_SESSION_MODE, CommonConstWords.CONFIG_SESSION_MODE_DEFAULT);
|
||||||
|
if (sessionMode != CommonEnumUtil.SESSION_MODE.SEIZE.getValue()) {
|
||||||
|
AuthUtil.logout();
|
||||||
|
}
|
||||||
|
|
||||||
|
SessionUser user = userService.queryUserLogin(
|
||||||
|
loginModel.getLoginName().trim(),
|
||||||
|
loginModel.getLoginPwd() == null ? null : loginModel.getLoginPwd().trim(),
|
||||||
|
loginModel.getLanguageCode(),
|
||||||
|
loginService.getLoginPlatform(request).getValue(),
|
||||||
|
loginModel.getDeviceId()
|
||||||
|
);
|
||||||
|
|
||||||
|
String redisKey = CommonConstWords.USER_LOGIN_ERROR + "_" + user.getUser().getId();
|
||||||
|
redisCore.deleteKey(redisKey);
|
||||||
|
|
||||||
|
ResultBean result = new ResultBean(true, AuthUtil.getSession().getId().toString(), AuthUtil.getSessionUser());
|
||||||
|
result.setUrl("/");
|
||||||
|
|
||||||
|
AuthUtil.setOrganize(user.getUser().getOrganize());
|
||||||
|
|
||||||
|
return null;
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
private boolean validateHost(HttpServletRequest request) {
|
||||||
|
final String delimiter = ",";
|
||||||
|
String hostsConfig = RedisCacheTool.getSysConfigStrVal(PlatformConstWords.OSS_REQUEST_HOST);
|
||||||
|
String[] hosts = hostsConfig.split(delimiter);
|
||||||
|
String requestHost = ServletRequestTool.getRequestHost(request);
|
||||||
|
return Arrays.stream(hosts).anyMatch(d -> requestHost.equals(d));
|
||||||
|
}
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue