yangys
2024-04-02 6bed83e92f67954cd2135071133329f2205efe4f
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
package com.qianwen.smartman.modules.auth.endpoint;
 
import com.github.xiaoymin.knife4j.annotations.ApiSort;
import com.wf.captcha.SpecCaptcha;
import io.swagger.annotations.Api;
import io.swagger.annotations.ApiOperation;
import io.swagger.annotations.ApiParam;
import java.io.IOException;
import java.time.Duration;
import java.util.UUID;
import org.smartboot.license.client.LicenseException;
import com.qianwen.smartman.common.cache.CacheNames;
import com.qianwen.smartman.common.constant.CommonConstant;
import com.qianwen.smartman.common.constant.ExtCacheConstant;
import com.qianwen.smartman.common.constant.FmsConstant;
import com.qianwen.smartman.common.utils.LicenseUtil;
import com.qianwen.smartman.common.utils.MessageUtils;
import com.qianwen.core.cache.utils.CacheUtil;
import com.qianwen.core.jwt.JwtUtil;
import com.qianwen.core.jwt.props.JwtProperties;
import com.qianwen.core.log.annotation.ApiLog;
import com.qianwen.core.redis.cache.BladeRedis;
import com.qianwen.core.secure.BladeUser;
import com.qianwen.core.secure.utils.AuthUtil;
import com.qianwen.core.tenant.annotation.NonDS;
import com.qianwen.core.tool.api.R;
import com.qianwen.core.tool.support.Kv;
import com.qianwen.core.tool.utils.Func;
import com.qianwen.core.tool.utils.WebUtil;
import com.qianwen.smartman.modules.auth.granter.PasswordTokenGranter;
import com.qianwen.smartman.modules.auth.granter.RefreshTokenGranter;
import com.qianwen.smartman.modules.auth.provider.ITokenGranter;
import com.qianwen.smartman.modules.auth.provider.TokenGranterBuilder;
import com.qianwen.smartman.modules.auth.provider.TokenParameter;
import com.qianwen.smartman.modules.auth.utils.TokenUtil;
import com.qianwen.smartman.modules.sync.constant.QyWechatConstant;
import com.qianwen.smartman.modules.system.entity.UserInfo;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestParam;
import org.springframework.web.bind.annotation.RestController;
import org.springframework.web.multipart.MultipartFile;
 
@RequestMapping({"blade-auth"})
@Api(value = "用户授权认证", tags = {"授权接口"})
@RestController
@NonDS
@ApiSort(1)
/* loaded from: blade-api.jar:BOOT-INF/classes/org/springblade/modules/auth/endpoint/BladeTokenEndPoint.class */
public class BladeTokenEndPoint {
    private final BladeRedis bladeRedis;
    private final JwtProperties jwtProperties;
 
    public BladeTokenEndPoint(final BladeRedis bladeRedis, final JwtProperties jwtProperties) {
        this.bladeRedis = bladeRedis;
        this.jwtProperties = jwtProperties;
    }
 
    @PostMapping({"/oauth/token"})
    @ApiLog("登录用户验证")
    @ApiOperation(value = "获取认证令牌", notes = "传入租户ID:tenantId,账号:account,密码:password")
    public Kv token(@RequestParam @ApiParam(value = "租户ID", required = true) String tenantId, @RequestParam(required = false) @ApiParam(value = "账号", required = true) String username, @RequestParam(required = false) @ApiParam(value = "密码", required = true) String password) {
        Kv authInfo = Kv.create();
        String grantType = WebUtil.getRequest().getParameter("grant_type");
        String refreshToken = WebUtil.getRequest().getParameter(RefreshTokenGranter.GRANT_TYPE);
        String userType = Func.toStr(WebUtil.getRequest().getHeader(TokenUtil.USER_TYPE_HEADER_KEY), TokenUtil.DEFAULT_USER_TYPE);
        TokenParameter tokenParameter = new TokenParameter();
        tokenParameter.getArgs().set("tenantId", tenantId).set("username", username).set(PasswordTokenGranter.GRANT_TYPE, password).set("grantType", grantType).set("refreshToken", refreshToken).set("userType", userType);
        ITokenGranter granter = TokenGranterBuilder.getGranter(grantType);
        UserInfo userInfo = granter.grant(tokenParameter);
        if (null == userInfo || null == userInfo.getUser()) {
            return authInfo.set("error_code", 400).set("error_description", MessageUtils.message(TokenUtil.USER_NOT_FOUND, new Object[0]));
        }
        int errorCode = 200;
        String message = "";
        if (1 != userInfo.getUser().getStatus().intValue()) {
            errorCode = 400;
            message = MessageUtils.message(TokenUtil.USER_BLOCKED, new Object[0]);
        }
        if (200 != errorCode) {
            return authInfo.set("error_code", Integer.valueOf(errorCode)).set("error_description", message);
        }
        return TokenUtil.createAuthInfo(userInfo);
    }
 
    @GetMapping({"/oauth/logout"})
    @ApiLog("退出登录")
    @ApiOperation("退出登录")
    public Kv logout() {
        BladeUser user = AuthUtil.getUser();
        if (user != null && this.jwtProperties.getState().booleanValue()) {
            String token = JwtUtil.getToken(WebUtil.getRequest().getHeader("Blade-Auth"));
            JwtUtil.removeAccessToken(user.getTenantId(), String.valueOf(user.getUserId()), token);
        }
        return Kv.create().set(QyWechatConstant.CALLBACK_RESULT, FmsConstant.AUTOMATIC).set(CommonConstant.ALARM_MSG, QyWechatConstant.CALLBACK_RESULT);
    }
 
    @GetMapping({"/oauth/captcha"})
    @ApiOperation("获取验证码")
    public Kv captcha() {
        SpecCaptcha specCaptcha = new SpecCaptcha(130, 48, 5);
        String verCode = specCaptcha.text().toLowerCase();
        String key = UUID.randomUUID().toString();
        this.bladeRedis.setEx(CacheNames.CAPTCHA_KEY + key, verCode, Duration.ofMinutes(30L));
        return Kv.create().set("key", key).set("image", specCaptcha.toBase64());
    }
 
    @PostMapping({"/oauth/license-upload"})
    @ApiOperation("过期上传系统密钥文件")
    public R<Boolean> licenseUpload(@RequestParam MultipartFile file) throws IOException {
        String encrypt = new String(file.getBytes());
        try {
            LicenseUtil.setEncryptCode("000000", encrypt);
            return R.success("");
        } catch (LicenseException e) {
            return R.fail(MessageUtils.message("system.license.expired", new Object[0]));
        }
    }
 
    @GetMapping({"/oauth/clear-cache"})
    @ApiLog("清除缓存")
    @ApiOperation("清除缓存")
    public Kv clearCache() {
        CacheUtil.clear("blade:user", ExtCacheConstant.TENANT_MODE);
        CacheUtil.clear("blade:dict", ExtCacheConstant.TENANT_MODE);
        CacheUtil.clear("blade:sys", ExtCacheConstant.TENANT_MODE);
        CacheUtil.clear("blade:param", ExtCacheConstant.TENANT_MODE);
        CacheUtil.clear("blade:resource", ExtCacheConstant.TENANT_MODE);
        CacheUtil.clear("blade:menu", ExtCacheConstant.TENANT_MODE);
        return Kv.create().set(QyWechatConstant.CALLBACK_RESULT, FmsConstant.AUTOMATIC).set(CommonConstant.ALARM_MSG, QyWechatConstant.CALLBACK_RESULT);
    }
}