package com.zd.auth.service; import com.zd.common.core.exception.PreAuthorizeException; import com.zd.common.core.utils.IpUtils; import com.zd.model.constant.BaseConstants; import com.zd.model.constant.HttpStatus; import com.zd.model.constant.SecurityConstants; import com.zd.model.constant.UserConstants; import com.zd.model.domain.R; import com.zd.model.enums.UserStatus; import com.zd.model.entity.LoginUser; import com.zd.system.api.entity.SysLogininfor; import com.zd.model.entity.SysUser; import com.zd.system.api.feign.RemoteLogService; import com.zd.system.api.feign.RemoteUserService; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.stereotype.Component; import com.zd.common.core.exception.ServiceException; import com.zd.common.core.utils.SecurityUtils; import com.zd.common.core.utils.ServletUtils; import com.zd.common.core.utils.StringUtils; /** * 登录校验方法 * * @author zd */ @Component public class SysLoginService { @Autowired private RemoteLogService remoteLogService; @Autowired private RemoteUserService remoteUserService; /** * 登录 */ public LoginUser login(String username, Integer loginType, String password) { // 用户名或密码为空 错误 if (StringUtils.isAnyBlank(username, password)) { // recordLogininfor(username, Constants.LOGIN_FAIL, "用户/密码必须填写"); throw new ServiceException("用户/密码必须填写", 530); } // 密码如果不在指定范围内 错误 if (password.length() < UserConstants.PASSWORD_MIN_LENGTH || password.length() > UserConstants.PASSWORD_MAX_LENGTH) { // recordLogininfor(username, Constants.LOGIN_FAIL, "用户密码不在指定范围"); throw new ServiceException("用户密码不在指定范围", 530); } // 用户名不在指定范围内 错误 if (username.length() < UserConstants.USERNAME_MIN_LENGTH || username.length() > UserConstants.USERNAME_MAX_LENGTH) { // recordLogininfor(username, Constants.LOGIN_FAIL, "用户名不在指定范围"); throw new ServiceException("用户名不在指定范围", 530); } // 查询用户信息 R userResult = remoteUserService.getUserInfo(username, loginType, SecurityConstants.INNER); if (R.FAIL == userResult.getCode()) { throw new ServiceException(userResult.getMsg()); } if (HttpStatus.FORBIDDEN == userResult.getCode()) { throw new PreAuthorizeException(); } if (StringUtils.isNull(userResult) || StringUtils.isNull(userResult.getData())) { // recordLogininfor(username, Constants.LOGIN_FAIL, "登录用户不存在"); throw new ServiceException("登录用户:" + username + " 不存在", 530); } LoginUser userInfo = userResult.getData(); SysUser user = userResult.getData().getSysUser(); if (UserStatus.DELETED.getCode().equals(user.getDelFlag())) { // recordLogininfor(username, Constants.LOGIN_FAIL, "对不起,您的账号已被删除"); throw new ServiceException("对不起,您的账号:" + username + " 已被删除", 530); } if (UserStatus.DISABLE.getCode().equals(user.getStatus())) { // recordLogininfor(username, Constants.LOGIN_FAIL, "用户已停用,请联系管理员"); throw new ServiceException("对不起,您的账号:" + username + " 已停用", 530); } if (!SecurityUtils.matchesPassword(password, user.getPassword())) { // recordLogininfor(username, Constants.LOGIN_FAIL, "用户密码错误"); throw new ServiceException("用户不存在/密码错误", 530); } recordLogininfor(user, BaseConstants.LOGIN_SUCCESS, "登录成功"); return userInfo; } public void logout(SysUser user) { recordLogininfor(user, BaseConstants.LOGOUT, "退出成功"); } /** * 注册 */ public void register(String username, String password) { // 用户名或密码为空 错误 if (StringUtils.isAnyBlank(username, password)) { throw new ServiceException("用户/密码必须填写"); } if (username.length() < UserConstants.USERNAME_MIN_LENGTH || username.length() > UserConstants.USERNAME_MAX_LENGTH) { throw new ServiceException("账户长度必须在2到20个字符之间"); } if (password.length() < UserConstants.PASSWORD_MIN_LENGTH || password.length() > UserConstants.PASSWORD_MAX_LENGTH) { throw new ServiceException("密码长度必须在5到20个字符之间"); } // 注册用户信息 SysUser sysUser = new SysUser(); sysUser.setUserName(username); sysUser.setNickName(username); sysUser.setPassword(SecurityUtils.encryptPassword(password)); R registerResult = remoteUserService.registerUserInfo(sysUser, SecurityConstants.INNER); if (R.FAIL == registerResult.getCode()) { throw new ServiceException(registerResult.getMsg()); } // recordLogininfor(username, Constants.REGISTER, "注册成功"); } /** * 记录登录信息 * * @param user 用户名 * @param status 状态 * @param message 消息内容 * @return */ public void recordLogininfor(SysUser user, String status, String message) { SysLogininfor logininfor = new SysLogininfor(); logininfor.setUserName(user.getUserName()); logininfor.setIpaddr(IpUtils.getIpAddr(ServletUtils.getRequest())); logininfor.setMsg(message); // 日志状态 if (StringUtils.equalsAny(status, BaseConstants.LOGIN_SUCCESS, BaseConstants.LOGOUT, BaseConstants.REGISTER)) { logininfor.setStatus("0"); } else if (BaseConstants.LOGIN_FAIL.equals(status)) { logininfor.setStatus("1"); } logininfor.setUserId(user.getUserId()); logininfor.setDeptId(user.getDeptId()); remoteLogService.saveLogininfor(logininfor, SecurityConstants.INNER); } }