sjl
5 years ago
parent
4dea290b68
commit
4c51872e4e
@ -0,0 +1,72 @@
|
|||||||
|
package com.yami.shop.api.controller;
|
||||||
|
|
||||||
|
|
||||||
|
import cn.hutool.core.util.StrUtil;
|
||||||
|
import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
|
||||||
|
import com.yami.shop.api.security.AuthenticationToken;
|
||||||
|
import com.yami.shop.bean.model.User;
|
||||||
|
import com.yami.shop.bean.param.UserRegisterParam;
|
||||||
|
import com.yami.shop.common.exception.YamiShopBindException;
|
||||||
|
import com.yami.shop.common.util.IPHelper;
|
||||||
|
import com.yami.shop.security.handler.LoginAuthSuccessHandler;
|
||||||
|
import com.yami.shop.security.model.AppConnect;
|
||||||
|
import com.yami.shop.security.service.YamiUserDetailsService;
|
||||||
|
import com.yami.shop.service.UserService;
|
||||||
|
import io.swagger.annotations.Api;
|
||||||
|
import io.swagger.annotations.ApiOperation;
|
||||||
|
import lombok.AllArgsConstructor;
|
||||||
|
import org.springframework.http.ResponseEntity;
|
||||||
|
import org.springframework.security.crypto.password.PasswordEncoder;
|
||||||
|
import org.springframework.security.oauth2.provider.token.ConsumerTokenServices;
|
||||||
|
import org.springframework.web.bind.annotation.*;
|
||||||
|
|
||||||
|
import javax.servlet.http.HttpServletRequest;
|
||||||
|
import javax.servlet.http.HttpServletResponse;
|
||||||
|
import javax.validation.Valid;
|
||||||
|
import java.util.Date;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* 用户信息
|
||||||
|
*
|
||||||
|
* @author SJL
|
||||||
|
*/
|
||||||
|
@RestController
|
||||||
|
@RequestMapping("/user")
|
||||||
|
@Api(tags = "用户注册相关接口")
|
||||||
|
@AllArgsConstructor
|
||||||
|
public class UserRegisterController {
|
||||||
|
|
||||||
|
private final UserService userService;
|
||||||
|
|
||||||
|
private final PasswordEncoder passwordEncoder;
|
||||||
|
|
||||||
|
@PostMapping("/register")
|
||||||
|
@ApiOperation(value = "注册", notes = "用户注册或绑定手机号接口")
|
||||||
|
public ResponseEntity<Boolean> register(@Valid @RequestBody UserRegisterParam userRegisterParam) {
|
||||||
|
userRegisterParam.setPassword(passwordEncoder.encode(userRegisterParam.getPassword()));
|
||||||
|
return ResponseEntity.ok(userService.insertUser(userRegisterParam));
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
@PutMapping("/updatePwd")
|
||||||
|
@ApiOperation(value = "修改密码", notes = "修改密码")
|
||||||
|
public ResponseEntity<Void> updatePwd(@Valid @RequestBody UserRegisterParam userRegisterParam) {
|
||||||
|
User user = userService.getOne(new LambdaQueryWrapper<User>().eq(User::getUserMobile, userRegisterParam.getUserMail()));
|
||||||
|
if (user == null) {
|
||||||
|
// 无法获取用户信息
|
||||||
|
throw new YamiShopBindException("yami.user.no.exist");
|
||||||
|
}
|
||||||
|
if (StrUtil.isBlank(userRegisterParam.getPassword())) {
|
||||||
|
// 新密码不能为空
|
||||||
|
throw new YamiShopBindException("yami.user.password.no.exist");
|
||||||
|
}
|
||||||
|
if (StrUtil.equals(passwordEncoder.encode(userRegisterParam.getPassword()), user.getLoginPassword())) {
|
||||||
|
// 新密码不能与原密码相同
|
||||||
|
throw new YamiShopBindException("yami.user.password.check");
|
||||||
|
}
|
||||||
|
user.setModifyTime(new Date());
|
||||||
|
user.setLoginPassword(passwordEncoder.encode(userRegisterParam.getPassword()));
|
||||||
|
userService.updateById(user);
|
||||||
|
return ResponseEntity.ok().build();
|
||||||
|
}
|
||||||
|
}
|
||||||
@ -0,0 +1,154 @@
|
|||||||
|
package com.yami.shop.api.security;
|
||||||
|
|
||||||
|
import cn.hutool.extra.servlet.ServletUtil;
|
||||||
|
import com.yami.shop.common.exception.YamiShopBindException;
|
||||||
|
import com.yami.shop.common.util.Json;
|
||||||
|
import com.yami.shop.common.xss.XssUtil;
|
||||||
|
import com.yami.shop.security.exception.BadCredentialsException;
|
||||||
|
import com.yami.shop.security.exception.UsernameNotFoundException;
|
||||||
|
import org.springframework.beans.factory.annotation.Autowired;
|
||||||
|
import org.springframework.security.authentication.AuthenticationManager;
|
||||||
|
import org.springframework.security.core.Authentication;
|
||||||
|
import org.springframework.security.core.AuthenticationException;
|
||||||
|
import org.springframework.security.core.userdetails.UserDetails;
|
||||||
|
import org.springframework.security.core.userdetails.UserDetailsService;
|
||||||
|
import org.springframework.security.crypto.password.PasswordEncoder;
|
||||||
|
import org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter;
|
||||||
|
import org.springframework.security.web.authentication.AuthenticationFailureHandler;
|
||||||
|
import org.springframework.security.web.authentication.AuthenticationSuccessHandler;
|
||||||
|
import org.springframework.web.HttpRequestMethodNotSupportedException;
|
||||||
|
|
||||||
|
import javax.servlet.ServletException;
|
||||||
|
import javax.servlet.ServletInputStream;
|
||||||
|
import javax.servlet.http.HttpServletRequest;
|
||||||
|
import javax.servlet.http.HttpServletResponse;
|
||||||
|
import java.io.IOException;
|
||||||
|
import java.nio.charset.StandardCharsets;
|
||||||
|
|
||||||
|
/**
|
||||||
|
*
|
||||||
|
* @author SJL
|
||||||
|
*/
|
||||||
|
public class YamiAuthenticationProcessingFilter extends AbstractAuthenticationProcessingFilter {
|
||||||
|
|
||||||
|
private UserDetailsService userDetailsService;
|
||||||
|
|
||||||
|
private PasswordEncoder passwordEncoder;
|
||||||
|
/**
|
||||||
|
* 请求字符串的最大长度 1m
|
||||||
|
*/
|
||||||
|
public static final int MAX_STRING_SIZE = 1024 * 1024;
|
||||||
|
|
||||||
|
protected YamiAuthenticationProcessingFilter(String defaultFilterProcessesUrl) {
|
||||||
|
super(defaultFilterProcessesUrl);
|
||||||
|
}
|
||||||
|
|
||||||
|
@Autowired
|
||||||
|
public void setPasswordEncoder(PasswordEncoder passwordEncoder) {
|
||||||
|
this.passwordEncoder = passwordEncoder;
|
||||||
|
}
|
||||||
|
|
||||||
|
@Autowired
|
||||||
|
public void setUserDetailsService(UserDetailsService userDetailsService) {
|
||||||
|
this.userDetailsService = userDetailsService;
|
||||||
|
}
|
||||||
|
|
||||||
|
@Override
|
||||||
|
@Autowired
|
||||||
|
public void setAuthenticationManager(AuthenticationManager authenticationManager) {
|
||||||
|
super.setAuthenticationManager(authenticationManager);
|
||||||
|
}
|
||||||
|
|
||||||
|
@Override
|
||||||
|
@Autowired
|
||||||
|
public void setAuthenticationSuccessHandler(AuthenticationSuccessHandler successHandler) {
|
||||||
|
super.setAuthenticationSuccessHandler(successHandler);
|
||||||
|
}
|
||||||
|
|
||||||
|
@Override
|
||||||
|
@Autowired
|
||||||
|
public void setAuthenticationFailureHandler(AuthenticationFailureHandler failureHandler) {
|
||||||
|
super.setAuthenticationFailureHandler(failureHandler);
|
||||||
|
}
|
||||||
|
|
||||||
|
@Override
|
||||||
|
public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response) throws AuthenticationException, ServletException{
|
||||||
|
if (!ServletUtil.METHOD_POST.equals(request.getMethod())) {
|
||||||
|
throw new HttpRequestMethodNotSupportedException(request.getMethod(), new String[] { "POST" });
|
||||||
|
}
|
||||||
|
|
||||||
|
AuthenticationToken authenticationToken = Json.parseObject(getStringFromStream(request), AuthenticationToken.class);
|
||||||
|
UserDetails userDetails = getUserDetails(authenticationToken);
|
||||||
|
return handleAuthenticationToken(authenticationToken,userDetails);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* 获取用户信息
|
||||||
|
* @param authenticationToken
|
||||||
|
* @return
|
||||||
|
*/
|
||||||
|
protected UserDetails getUserDetails(AuthenticationToken authenticationToken) {
|
||||||
|
UserDetails user;
|
||||||
|
try {
|
||||||
|
user = userDetailsService.loadUserByUsername(authenticationToken.getPrincipal());
|
||||||
|
} catch (UsernameNotFoundException var6) {
|
||||||
|
// 账号或密码不正确
|
||||||
|
throw new UsernameNotFoundException("账号或密码不正确");
|
||||||
|
}
|
||||||
|
if (!user.isEnabled()) {
|
||||||
|
// 账号已被锁定,请联系管理员
|
||||||
|
throw new UsernameNotFoundException("账号已被锁定,请联系管理员");
|
||||||
|
}
|
||||||
|
|
||||||
|
String encodedPassword = user.getPassword();
|
||||||
|
String rawPassword = authenticationToken.getCredentials().toString();
|
||||||
|
|
||||||
|
// 密码不正确
|
||||||
|
if (!passwordEncoder.matches(rawPassword,encodedPassword)){
|
||||||
|
// 账号或密码不正确
|
||||||
|
throw new BadCredentialsException("账号或密码不正确");
|
||||||
|
}
|
||||||
|
return user;
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
/**
|
||||||
|
* 保存用户信息
|
||||||
|
*/
|
||||||
|
protected AuthenticationToken handleAuthenticationToken(AuthenticationToken authentication, UserDetails userDetails) {
|
||||||
|
// 保存用户信息
|
||||||
|
authentication.setPrincipal(userDetails.getUsername());
|
||||||
|
authentication.setDetails(userDetails);
|
||||||
|
authentication.setAuthenticated(true);
|
||||||
|
return authentication;
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
public String getStringFromStream(HttpServletRequest req) {
|
||||||
|
if (req.getContentLength() > MAX_STRING_SIZE) {
|
||||||
|
// 请求数据过长
|
||||||
|
throw new YamiShopBindException("yami.request.data.too.long");
|
||||||
|
}
|
||||||
|
ServletInputStream is;
|
||||||
|
try {
|
||||||
|
is = req.getInputStream();
|
||||||
|
int nRead = 1;
|
||||||
|
int nTotalRead = 0;
|
||||||
|
byte[] bytes = new byte[1024];
|
||||||
|
while (nRead > 0) {
|
||||||
|
nRead = is.read(bytes, nTotalRead, bytes.length - nTotalRead);
|
||||||
|
if (nRead > 0) {
|
||||||
|
nTotalRead = nTotalRead + nRead;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if (nTotalRead > MAX_STRING_SIZE) {
|
||||||
|
// 请求数据过长
|
||||||
|
throw new YamiShopBindException("yami.request.data.too.long");
|
||||||
|
}
|
||||||
|
return XssUtil.clean(new String(bytes, 0, nTotalRead, StandardCharsets.UTF_8));
|
||||||
|
} catch (IOException e) {
|
||||||
|
e.printStackTrace();
|
||||||
|
return "";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
Loading…
Reference in new issue