package org.dromara.web.service.impl; import cn.dev33.satoken.stp.SaLoginModel; import cn.dev33.satoken.stp.StpUtil; import cn.hutool.core.collection.CollUtil; import cn.hutool.core.map.MapUtil; import cn.hutool.core.util.ObjectUtil; import cn.hutool.http.HttpUtil; import cn.hutool.http.Method; import com.aizuda.snailjob.common.core.constant.SystemConstants; import lombok.RequiredArgsConstructor; import lombok.extern.slf4j.Slf4j; import me.zhyd.oauth.model.AuthResponse; import me.zhyd.oauth.model.AuthUser; import org.dromara.common.core.domain.model.LoginUser; import org.dromara.common.core.domain.model.SocialLoginBody; import org.dromara.common.core.enums.UserStatus; import org.dromara.common.core.exception.ServiceException; import org.dromara.common.core.exception.user.UserException; import org.dromara.common.core.utils.StreamUtils; import org.dromara.common.core.utils.ValidatorUtils; import org.dromara.common.json.utils.JsonUtils; import org.dromara.common.satoken.utils.LoginHelper; import org.dromara.common.social.config.properties.SocialProperties; import org.dromara.common.social.utils.SocialUtils; import org.dromara.common.tenant.helper.TenantHelper; import org.dromara.system.domain.SysUser; import org.dromara.system.domain.bo.SysSocialBo; import org.dromara.system.domain.vo.SysClientVo; import org.dromara.system.domain.vo.SysSocialVo; import org.dromara.system.domain.vo.SysUserVo; import org.dromara.system.mapper.SysUserMapper; import org.dromara.system.service.ISysSocialService; import org.dromara.web.domain.vo.LoginVo; import org.dromara.web.service.IAuthStrategy; import org.dromara.web.service.SysLoginService; import org.springframework.stereotype.Service; import java.util.List; import java.util.Optional; /** * 第三方授权策略 * * @author thiszhc is 三三 */ @Slf4j @Service("social" + IAuthStrategy.BASE_NAME) @RequiredArgsConstructor public class SocialAuthStrategy implements IAuthStrategy { private final SocialProperties socialProperties; private final ISysSocialService sysSocialService; private final SysUserMapper userMapper; private final SysLoginService loginService; /** * 登录-第三方授权登录 * * @param body 登录信息 * @param client 客户端信息 */ @Override public LoginVo login(String body, SysClientVo client) { SocialLoginBody loginBody = JsonUtils.parseObject(body, SocialLoginBody.class); ValidatorUtils.validate(loginBody); AuthResponse response = SocialUtils.loginAuth( loginBody.getSource(), loginBody.getSocialCode(), loginBody.getSocialState(), socialProperties); if (!response.ok()) { throw new ServiceException(response.getMsg()); } AuthUser authUserData = response.getData(); if ("GITEE".equals(authUserData.getSource())) { // 如用户使用 gitee 登录顺手 star 给作者一点支持 拒绝白嫖 HttpUtil.createRequest(Method.PUT, "https://gitee.com/api/v5/user/starred/dromara/RuoYi-Vue-Plus") .formStr(MapUtil.of("access_token", authUserData.getToken().getAccessToken())) .executeAsync(); HttpUtil.createRequest(Method.PUT, "https://gitee.com/api/v5/user/starred/dromara/RuoYi-Cloud-Plus") .formStr(MapUtil.of("access_token", authUserData.getToken().getAccessToken())) .executeAsync(); } if ("KEYCLOAK".equals(authUserData.getSource())) { // 新增KEYCLOAK用户自动创建逻辑 String authId = authUserData.getSource() + authUserData.getUuid(); List list = sysSocialService.selectByAuthId(authId); if (CollUtil.isEmpty(list)) { // 自动创建新用户 SysUser newUser = new SysUser(); newUser.setUserName(authUserData.getUsername()); newUser.setEmail(authUserData.getEmail()); newUser.setNickName(authUserData.getNickname()); newUser.setPassword("Initial123@"); // 初始密码需符合安全策略 newUser.setStatus("0"); userMapper.insert(newUser); // 假设存在插入方法 // 创建社交绑定记录 SysSocialBo newSocial = new SysSocialBo(); newSocial.setUserId(newUser.getUserId()); newSocial.setUserName(newUser.getUserName()); newSocial.setAuthId(authId); newSocial.setSource(authUserData.getSource()); newSocial.setTenantId(newUser.getTenantId()); newSocial.setOpenId(authUserData.getUuid()); newSocial.setAccessToken(authUserData.getToken().getAccessToken()); newSocial.setRefreshToken(authUserData.getToken().getRefreshToken()); newSocial.setIdToken(authUserData.getToken().getIdToken()); sysSocialService.insertByBo(newSocial); // 需确保服务有新增方法 // 重新查询确保数据可用 list = sysSocialService.selectByAuthId(authId); } else { // 更新社交绑定记录 SysSocialBo socialBo = new SysSocialBo(); socialBo.setId(list.get(0).getId()); socialBo.setAccessToken(authUserData.getToken().getAccessToken()); socialBo.setRefreshToken(authUserData.getToken().getRefreshToken()); socialBo.setIdToken(authUserData.getToken().getIdToken()); sysSocialService.updateByBo(socialBo); } } List list = sysSocialService.selectByAuthId(authUserData.getSource() + authUserData.getUuid()); if (CollUtil.isEmpty(list)) { throw new ServiceException("你还没有绑定第三方账号，绑定后才可以登录！"); } SysSocialVo social; if (TenantHelper.isEnable()) { Optional opt = StreamUtils.findAny(list, x -> x.getTenantId().equals(loginBody.getTenantId())); if (opt.isEmpty()) { throw new ServiceException("对不起，你没有权限登录当前租户！"); } social = opt.get(); } else { social = list.get(0); } LoginUser loginUser = TenantHelper.dynamic(social.getTenantId(), () -> { SysUserVo user = loadUser(social.getUserId()); // 此处可根据登录用户的数据不同 自行创建 loginUser 属性不够用继承扩展就行了 return loginService.buildLoginUser(user); }); loginUser.setClientKey(client.getClientKey()); loginUser.setDeviceType(client.getDeviceType()); SaLoginModel model = new SaLoginModel(); model.setDevice(client.getDeviceType()); // 自定义分配 不同用户体系 不同 token 授权时间 不设置默认走全局 yml 配置 // 例如: 后台用户30分钟过期 app用户1天过期 model.setTimeout(client.getTimeout()); model.setActiveTimeout(client.getActiveTimeout()); model.setExtra(LoginHelper.CLIENT_KEY, client.getClientId()); // 生成token LoginHelper.login(loginUser, model); LoginVo loginVo = new LoginVo(); loginVo.setAccessToken(StpUtil.getTokenValue()); loginVo.setExpireIn(StpUtil.getTokenTimeout()); loginVo.setClientId(client.getClientId()); return loginVo; } private SysUserVo loadUser(Long userId) { SysUserVo user = userMapper.selectVoById(userId); if (ObjectUtil.isNull(user)) { log.info("登录用户：{} 不存在.", ""); throw new UserException("user.not.exists", ""); } else if (UserStatus.DISABLE.getCode().equals(user.getStatus())) { log.info("登录用户：{} 已被停用.", ""); throw new UserException("user.blocked", ""); } return user; } }