lbqms.git - Gitblit

			@@ -2,6 +2,21 @@

			import cn.dev33.satoken.annotation.SaIgnore;
			import cn.hutool.core.collection.CollUtil;
			import cn.hutool.core.util.ObjectUtil;
			import cn.hutool.json.JSONObject;
			import cn.hutool.json.JSONUtil;
			import com.alibaba.fastjson.JSON;
			import jakarta.servlet.http.HttpServletRequest;
			import jakarta.validation.constraints.NotBlank;
			import lombok.RequiredArgsConstructor;
			import me.zhyd.oauth.cache.AuthDefaultStateCache;
			import me.zhyd.oauth.cache.AuthStateCache;
			import me.zhyd.oauth.model.AuthCallback;
			import me.zhyd.oauth.model.AuthResponse;
			import me.zhyd.oauth.model.AuthUser;
			import me.zhyd.oauth.request.AuthRequest;
			import me.zhyd.oauth.utils.AuthStateUtils;
			import org.dromara.common.auth.utils.AuthUtils;
			import org.dromara.common.core.domain.R;
			import org.dromara.common.core.domain.model.EmailLoginBody;
			import org.dromara.common.core.domain.model.LoginBody;
			@@ -13,6 +28,8 @@
			import org.dromara.common.tenant.helper.TenantHelper;
			import org.dromara.system.domain.bo.SysTenantBo;
			import org.dromara.system.domain.vo.SysTenantVo;
			import org.dromara.system.domain.vo.SysUserVo;
			import org.dromara.system.mapper.SysUserMapper;
			import org.dromara.system.service.ISysConfigService;
			import org.dromara.system.service.ISysTenantService;
			import org.dromara.web.domain.vo.LoginTenantVo;
			@@ -20,14 +37,14 @@
			import org.dromara.web.domain.vo.TenantListVo;
			import org.dromara.web.service.SysLoginService;
			import org.dromara.web.service.SysRegisterService;
			import jakarta.servlet.http.HttpServletRequest;
			import jakarta.validation.constraints.NotBlank;
			import lombok.RequiredArgsConstructor;
			import org.springframework.validation.annotation.Validated;
			import org.springframework.web.bind.annotation.*;

			import java.io.IOException;
			import java.net.URL;
			import java.util.HashMap;
			import java.util.List;
			import java.util.Map;

			/**
			* 认证
			@@ -41,10 +58,18 @@
			@RequestMapping("/auth")
			public class AuthController {

			private AuthStateCache authStateCache;
			private final SysLoginService loginService;
			private final SysRegisterService registerService;
			private final ISysConfigService configService;
			private final ISysTenantService tenantService;
			private final SysUserMapper userMapper;
			private final Map<String, String> auths = new HashMap<>();
			{
			auths.put("gitee", "{\"clientId\":\"38eaaa1b77b5e064313057a2f5745ce3a9f3e7686d9bd302c7df2f308ef6db81\",\"clientSecret\":\"2e633af8780cb9fe002c4c7291b722db944402e271efb99b062811f52d7da1ff\",\"redirectUri\":\"http://127.0.0.1:8888/social-login?source=gitee\"}");
			auths.put("github", "{\"clientId\":\"Iv1.1be0cdcd71aca63b\",\"clientSecret\":\"0d59d28b43152bc8906011624db37b0fed88d154\",\"redirectUri\":\"http://127.0.0.1:80/social-login?source=github\"}");
			authStateCache = AuthDefaultStateCache.INSTANCE;// 使用默认的缓存
			}

			/**
			* 登录方法
			@@ -57,9 +82,9 @@
			LoginVo loginVo = new LoginVo();
			// 生成令牌
			String token = loginService.login(
			body.getTenantId(),
			body.getUsername(), body.getPassword(),
			body.getCode(), body.getUuid());
			body.getTenantId(),
			body.getUsername(), body.getPassword(),
			body.getCode(), body.getUuid());
			loginVo.setToken(token);
			return R.ok(loginVo);
			}
			@@ -74,7 +99,10 @@
			public R<LoginVo> smsLogin(@Validated @RequestBody SmsLoginBody body) {
			LoginVo loginVo = new LoginVo();
			// 生成令牌
			String token = loginService.smsLogin(body.getTenantId(), body.getPhonenumber(), body.getSmsCode());
			String token = loginService.smsLogin(
			body.getTenantId(),
			body.getPhonenumber(),
			body.getSmsCode());
			loginVo.setToken(token);
			return R.ok(loginVo);
			}
			@@ -89,7 +117,10 @@
			public R<LoginVo> emailLogin(@Validated @RequestBody EmailLoginBody body) {
			LoginVo loginVo = new LoginVo();
			// 生成令牌
			String token = loginService.emailLogin(body.getTenantId(), body.getEmail(), body.getEmailCode());
			String token = loginService.emailLogin(
			body.getTenantId(),
			body.getEmail(),
			body.getEmailCode());
			loginVo.setToken(token);
			return R.ok(loginVo);
			}
			@@ -108,6 +139,64 @@
			loginVo.setToken(token);
			return R.ok(loginVo);
			}




			/**
			* 认证授权
			* @param source
			* @throws IOException
			*/
			@GetMapping("/binding/{source}")
			@ResponseBody
			public R<LoginVo> authBinding(@PathVariable("source") String source, HttpServletRequest request){
			SysUserVo userLoding = new SysUserVo();
			if (ObjectUtil.isNull(userLoding)) {
			return R.fail("授权失败，请先登录再绑定");
			}
			if (userMapper.checkAuthUser(userLoding.getUserId(),source) > 0)
			{
			return R.fail(source + "平台账号已经绑定");
			}
			String obj = auths.get(source);
			if (StringUtils.isEmpty(obj))
			{
			return R.fail(source + "平台账号暂不支持");
			}
			JSONObject json = JSONUtil.parseObj(obj);
			AuthRequest authRequest = AuthUtils.getAuthRequest(source,
			json.getStr("clientId"),
			json.getStr("clientSecret"),
			json.getStr("redirectUri"), authStateCache);
			String authorizeUrl = authRequest.authorize(AuthStateUtils.createState());
			return R.ok(authorizeUrl);
			}

			/**
			* @param source
			* @param callback
			* @param request
			* @return
			*/
			@SuppressWarnings("unchecked")
			@GetMapping("/social-login/{source}")
			public R<String> socialLogin(@PathVariable("source") String source, AuthCallback callback, HttpServletRequest request) throws IOException {
			String obj = auths.get(source);
			if (StringUtils.isEmpty(obj))
			{
			return R.fail("第三方平台系统不支持或未提供来源");
			}
			JSONObject json = JSONUtil.parseObj(obj);
			AuthRequest authRequest = AuthUtils.getAuthRequest(source,
			json.getStr("clientId"),
			json.getStr("clientSecret"),
			json.getStr("redirectUri"), authStateCache);
			AuthResponse<AuthUser> response = authRequest.login(callback);
			return loginService.socialLogin(source, response, request);
			}



			/**
			* 退出登录
			@@ -140,9 +229,17 @@
			List<SysTenantVo> tenantList = tenantService.queryList(new SysTenantBo());
			List<TenantListVo> voList = MapstructUtils.convert(tenantList, TenantListVo.class);
			// 获取域名
			String host = new URL(request.getRequestURL().toString()).getHost();
			String host;
			String referer = request.getHeader("referer");
			if (StringUtils.isNotBlank(referer)) {
			// 这里从referer中取值是为了本地使用hosts添加虚拟域名，方便本地环境调试
			host = referer.split("//")[1].split("/")[0];
			} else {
			host = new URL(request.getRequestURL().toString()).getHost();
			}
			// 根据域名进行筛选
			List<TenantListVo> list = StreamUtils.filter(voList, vo -> StringUtils.equals(vo.getDomain(), host));
			List<TenantListVo> list = StreamUtils.filter(voList, vo ->
			StringUtils.equals(vo.getDomain(), host));
			// 返回对象
			LoginTenantVo vo = new LoginTenantVo();
			vo.setVoList(CollUtil.isNotEmpty(list) ? list : voList);