| | |
| | | import cn.dev33.satoken.stp.StpUtil; |
| | | import cn.hutool.core.bean.BeanUtil; |
| | | import cn.hutool.core.util.ObjectUtil; |
| | | import com.ruoyi.common.constant.CacheConstants; |
| | | import com.ruoyi.common.constant.Constants; |
| | | import com.ruoyi.common.core.domain.dto.RoleDTO; |
| | | import com.ruoyi.common.core.domain.entity.SysUser; |
| | |
| | | import com.ruoyi.common.enums.DeviceType; |
| | | import com.ruoyi.common.enums.LoginType; |
| | | import com.ruoyi.common.enums.UserStatus; |
| | | import com.ruoyi.common.exception.user.CaptchaException; |
| | | import com.ruoyi.common.exception.user.CaptchaExpireException; |
| | | import com.ruoyi.common.exception.user.UserException; |
| | | import com.ruoyi.common.exception.user.*; |
| | | import com.ruoyi.common.helper.LoginHelper; |
| | | import com.ruoyi.common.utils.DateUtils; |
| | | import com.ruoyi.common.utils.MessageUtils; |
| | |
| | | import com.ruoyi.common.utils.redis.RedisUtils; |
| | | import lombok.RequiredArgsConstructor; |
| | | import lombok.extern.slf4j.Slf4j; |
| | | import org.springframework.beans.factory.annotation.Value; |
| | | import org.springframework.stereotype.Service; |
| | | |
| | | import javax.servlet.http.HttpServletRequest; |
| | |
| | | private final LogininforService asyncService; |
| | | private final SysPermissionService permissionService; |
| | | |
| | | @Value("${user.password.maxRetryCount}") |
| | | private Integer maxRetryCount; |
| | | |
| | | @Value("${user.password.lockTime}") |
| | | private Integer lockTime; |
| | | |
| | | /** |
| | | * 登录验证 |
| | | * |
| | |
| | | */ |
| | | public String login(String username, String password, String code, String uuid) { |
| | | HttpServletRequest request = ServletUtils.getRequest(); |
| | | boolean captchaOnOff = configService.selectCaptchaOnOff(); |
| | | boolean captchaEnabled = configService.selectCaptchaEnabled(); |
| | | // 验证码开关 |
| | | if (captchaOnOff) { |
| | | if (captchaEnabled) { |
| | | validateCaptcha(username, code, uuid, request); |
| | | } |
| | | SysUser user = loadUserByUsername(username); |
| | |
| | | * 校验短信验证码 |
| | | */ |
| | | private boolean validateSmsCode(String phonenumber, String smsCode, HttpServletRequest request) { |
| | | String code = RedisUtils.getCacheObject(Constants.CAPTCHA_CODE_KEY + phonenumber); |
| | | String code = RedisUtils.getCacheObject(CacheConstants.CAPTCHA_CODE_KEY + phonenumber); |
| | | if (StringUtils.isBlank(code)) { |
| | | asyncService.recordLogininfor(phonenumber, Constants.LOGIN_FAIL, MessageUtils.message("user.jcaptcha.expire"), request); |
| | | throw new CaptchaExpireException(); |
| | |
| | | * @param uuid 唯一标识 |
| | | */ |
| | | public void validateCaptcha(String username, String code, String uuid, HttpServletRequest request) { |
| | | String verifyKey = Constants.CAPTCHA_CODE_KEY + StringUtils.defaultString(uuid, ""); |
| | | String verifyKey = CacheConstants.CAPTCHA_CODE_KEY + StringUtils.defaultString(uuid, ""); |
| | | String captcha = RedisUtils.getCacheObject(verifyKey); |
| | | RedisUtils.deleteObject(verifyKey); |
| | | if (captcha == null) { |
| | |
| | | */ |
| | | private void checkLogin(LoginType loginType, String username, Supplier<Boolean> supplier) { |
| | | HttpServletRequest request = ServletUtils.getRequest(); |
| | | String errorKey = Constants.LOGIN_ERROR + username; |
| | | Integer errorLimitTime = Constants.LOGIN_ERROR_LIMIT_TIME; |
| | | Integer setErrorNumber = Constants.LOGIN_ERROR_NUMBER; |
| | | String errorKey = CacheConstants.PWD_ERR_CNT_KEY + username; |
| | | String loginFail = Constants.LOGIN_FAIL; |
| | | |
| | | // 获取用户登录错误次数(可自定义限制策略 例如: key + username + ip) |
| | | Integer errorNumber = RedisUtils.getCacheObject(errorKey); |
| | | // 锁定时间内登录 则踢出 |
| | | if (ObjectUtil.isNotNull(errorNumber) && errorNumber.equals(setErrorNumber)) { |
| | | asyncService.recordLogininfor(username, loginFail, MessageUtils.message(loginType.getRetryLimitExceed(), errorLimitTime), request); |
| | | throw new UserException(loginType.getRetryLimitExceed(), errorLimitTime); |
| | | if (ObjectUtil.isNotNull(errorNumber) && errorNumber.equals(maxRetryCount)) { |
| | | asyncService.recordLogininfor(username, loginFail, MessageUtils.message(loginType.getRetryLimitExceed(), maxRetryCount, lockTime), request); |
| | | throw new UserException(loginType.getRetryLimitExceed(), maxRetryCount, lockTime); |
| | | } |
| | | |
| | | if (supplier.get()) { |
| | | // 是否第一次 |
| | | errorNumber = ObjectUtil.isNull(errorNumber) ? 1 : errorNumber + 1; |
| | | // 达到规定错误次数 则锁定登录 |
| | | if (errorNumber.equals(setErrorNumber)) { |
| | | RedisUtils.setCacheObject(errorKey, errorNumber, Duration.ofMinutes(errorLimitTime)); |
| | | asyncService.recordLogininfor(username, loginFail, MessageUtils.message(loginType.getRetryLimitExceed(), errorLimitTime), request); |
| | | throw new UserException(loginType.getRetryLimitExceed(), errorLimitTime); |
| | | if (errorNumber.equals(maxRetryCount)) { |
| | | RedisUtils.setCacheObject(errorKey, errorNumber, Duration.ofMinutes(lockTime)); |
| | | asyncService.recordLogininfor(username, loginFail, MessageUtils.message(loginType.getRetryLimitExceed(), maxRetryCount, lockTime), request); |
| | | throw new UserException(loginType.getRetryLimitExceed(), maxRetryCount, lockTime); |
| | | } else { |
| | | // 未达到规定错误次数 则递增 |
| | | RedisUtils.setCacheObject(errorKey, errorNumber); |