/*
|
* Copyright (c) 2018-2999 广州市蓝海创新科技有限公司 All rights reserved.
|
*
|
* https://www.mall4j.com/
|
*
|
* 未经允许，不可做商业用途！
|
*
|
* 版权所有，侵权必究！
|
*/
|
package com.yami.trading.sys.controller;
|
|
import cn.hutool.core.util.ArrayUtil;
|
import cn.hutool.core.util.StrUtil;
|
import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
|
import com.baomidou.mybatisplus.core.metadata.IPage;
|
import com.yami.trading.common.annotation.SysLog;
|
import com.yami.trading.common.domain.Result;
|
import com.yami.trading.common.exception.YamiShopBindException;
|
import com.yami.trading.common.util.GoogleAuthenticator;
|
import com.yami.trading.common.util.PageParam;
|
import com.yami.trading.security.common.util.SecurityUtils;
|
import com.yami.trading.security.common.enums.SysTypeEnum;
|
import com.yami.trading.security.common.manager.PasswordManager;
|
import com.yami.trading.security.common.manager.TokenStore;
|
import com.yami.trading.sys.constant.Constant;
|
import com.yami.trading.sys.dto.*;
|
import com.yami.trading.sys.model.SysRole;
|
import com.yami.trading.sys.model.SysUser;
|
import com.yami.trading.sys.model.UnbindingGoogleAuthModel;
|
import com.yami.trading.sys.service.SysRoleService;
|
import com.yami.trading.sys.service.SysUserService;
|
import io.swagger.annotations.Api;
|
import io.swagger.annotations.ApiOperation;
|
import org.springframework.beans.BeanUtils;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.http.ResponseEntity;
|
import org.springframework.security.access.prepost.PreAuthorize;
|
import org.springframework.security.crypto.password.PasswordEncoder;
|
import org.springframework.web.bind.annotation.*;
|
|
import javax.validation.Valid;
|
import java.util.*;
|
import java.util.stream.Collectors;
|
|
/**
|
* 系统用户
|
*
|
* @author lgh
|
*/
|
@RestController
|
@RequestMapping("/sys/user")
|
@Api(tags = "系统用户")
|
public class SysUserController {
|
@Autowired
|
private SysUserService sysUserService;
|
@Autowired
|
private SysRoleService sysRoleService;
|
@Autowired
|
private PasswordEncoder passwordEncoder;
|
@Autowired
|
private PasswordManager passwordManager;
|
@Autowired
|
private TokenStore tokenStore;
|
|
/**
|
* 所有用户列表
|
*/
|
@GetMapping("/page")
|
@PreAuthorize("@pms.hasPermission('sys:user:page')")
|
@ApiOperation("用户列表")
|
public ResponseEntity<IPage<SysUser>> page(String username, PageParam<SysUser> page) {
|
IPage<SysUser> sysUserPage = sysUserService.page(page, new LambdaQueryWrapper<SysUser>()
|
.like(StrUtil.isNotBlank(username), SysUser::getUsername, username).orderByDesc(SysUser::getCreateTime));
|
Map<Long, SysRole> sysRoleMap = sysRoleService.list().stream().collect(Collectors.toMap(SysRole::getRoleId, SysRole -> SysRole));
|
for (SysUser sysUser : sysUserPage.getRecords()) {
|
List<Long> roleIds = sysRoleService.listRoleIdByUserId(sysUser.getUserId());
|
List<String> roleNames = new ArrayList<>();
|
if (sysUser.getUsername().equals("admin")){
|
roleNames.add("超级管理员");
|
}
|
roleIds.forEach(rid -> {
|
if (sysRoleMap.containsKey(rid)) {
|
roleNames.add(sysRoleMap.get(rid).getRoleName());
|
}
|
});
|
sysUser.setRoleName(roleNames);
|
}
|
return ResponseEntity.ok(sysUserPage);
|
}
|
|
/**
|
* 获取登录的用户信息
|
*/
|
@GetMapping("/info")
|
@ApiOperation("获取登录的用户信息")
|
public ResponseEntity<SysUserInfoDto> info() {
|
SysUser sysUser = sysUserService.getSysUserById(SecurityUtils.getSysUser().getUserId());
|
SysUserInfoDto sysUserInfoDto = new SysUserInfoDto();
|
BeanUtils.copyProperties(sysUser, sysUserInfoDto);
|
List<Long> roleIds = sysRoleService.listRoleIdByUserId(sysUser.getUserId());
|
Map<Long, SysRole> sysRoleMap = sysRoleService.list().stream().collect(Collectors.toMap(SysRole::getRoleId, SysRole -> SysRole));
|
List<String> roleNames = new ArrayList<>();
|
if (sysUser.getUsername().equals("admin")){
|
roleNames.add("超级管理员");
|
}
|
roleIds.forEach(rid -> {
|
if (sysRoleMap.containsKey(rid)) {
|
roleNames.add(sysRoleMap.get(rid).getRoleName());
|
}
|
});
|
sysUserInfoDto.setRoleName(roleNames);
|
return ResponseEntity.ok(sysUserInfoDto);
|
}
|
|
/**
|
* 修改密码
|
*/
|
@SysLog("修改密码")
|
@PostMapping("/password")
|
@ApiOperation(value = "修改密码")
|
public ResponseEntity<String> password(@RequestBody @Valid UpdatePasswordDto param) {
|
// 开源版代码，禁止用户修改admin 的账号密码
|
// 正式使用时，删除此部分代码即可
|
if (Objects.equals(1L, param.getId()) && StrUtil.isNotBlank(param.getNewPassword())) {
|
throw new YamiShopBindException("禁止修改admin的账号密码");
|
}
|
SysUser sysUser = sysUserService.getSysUserById(param.getId());
|
if (sysUser==null){
|
throw new YamiShopBindException("参数错误!");
|
}
|
String password = passwordManager.decryptPassword(param.getPassword());
|
if (!passwordEncoder.matches(password, sysUser.getPassword())) {
|
return ResponseEntity.badRequest().body("原密码不正确");
|
}
|
//新密码
|
String newPassword = passwordEncoder.encode(passwordManager.decryptPassword(param.getNewPassword()));
|
// 更新密码
|
sysUserService.updatePasswordByUserId(sysUser.getUserId(), newPassword);
|
tokenStore.deleteAllToken(String.valueOf(SysTypeEnum.ADMIN.value()), String.valueOf(sysUser.getUserId()));
|
return ResponseEntity.ok().build();
|
}
|
|
/**
|
* 修改资金密码
|
*/
|
@SysLog("修改资金密码")
|
@PostMapping("/updateSafePassword")
|
@ApiOperation(value = "修改资金密码")
|
public ResponseEntity<String> updateSafePassword(@RequestBody @Valid UpdateSafePasswordDto param) {
|
SysUser sysUser = sysUserService.getSysUserById(param.getId());
|
if (sysUser == null) {
|
throw new YamiShopBindException("参数错误!");
|
}
|
String safePassword = passwordManager.decryptPassword(param.getSafePassword());
|
sysUser.setSafePassword(passwordEncoder.encode(safePassword));
|
sysUserService.updateById(sysUser);
|
return ResponseEntity.ok().build();
|
}
|
|
/**
|
* 绑定谷歌验证码
|
*/
|
@SysLog("绑定谷歌验证码")
|
@PostMapping("/bindGoogleAuth")
|
@ApiOperation(value = "绑定谷歌验证码")
|
public Result<String> updateGoogleAuth(@RequestBody @Valid UpdateGoogleAuthDto param) {
|
SysUser sysUser = sysUserService.getSysUserById(param.getId());
|
if (sysUser == null) {
|
throw new YamiShopBindException("参数错误!");
|
}
|
SysUser rootSysUser = sysUserService.getSysUserById(SecurityUtils.getSysUser().getUserId());
|
long t = System.currentTimeMillis();
|
GoogleAuthenticator ga = new GoogleAuthenticator();
|
ga.setWindowSize(5);
|
boolean flag = ga.check_code(rootSysUser.getGoogleAuthSecret(), Long.valueOf(param.getRootGoogleAuthCode()), t);
|
if (flag) {
|
if (sysUser.isGoogleAuthBind()) {
|
throw new YamiShopBindException("谷歌验证码已绑定!");
|
}
|
boolean userFlag = ga.check_code(param.getSecret(), Long.valueOf(param.getGoogleAuthCode()), t);
|
if (!userFlag) {
|
throw new YamiShopBindException("谷歌验证码错误!");
|
}
|
sysUser.setGoogleAuthBind(true);
|
sysUser.setGoogleAuthSecret(param.getSecret());
|
sysUser.setUpdateTime(new Date());
|
sysUserService.updateById(sysUser);
|
} else {
|
throw new YamiShopBindException("超级谷歌验证码错误!");
|
}
|
return Result.succeed();
|
}
|
|
|
|
@SysLog("解绑谷歌验证码")
|
@PostMapping("/unbindingGoogleAuth")
|
@ApiOperation(value = "解绑谷歌验证码")
|
public Result unbindingGoogleAuth(@RequestBody @Valid UnbindingGoogleAuthModel param) {
|
SysUser sysUser = sysUserService.getSysUserById(param.getId());
|
if (sysUser == null) {
|
throw new YamiShopBindException("参数错误!");
|
}
|
SysUser rootSysUser = sysUserService.getSysUserById(SecurityUtils.getSysUser().getUserId());
|
long t = System.currentTimeMillis();
|
GoogleAuthenticator ga = new GoogleAuthenticator();
|
ga.setWindowSize(5);
|
boolean flag = ga.check_code(rootSysUser.getGoogleAuthSecret(), Long.valueOf(param.getRootGoogleAuthCode()), t);
|
if (flag) {
|
if (!sysUser.isGoogleAuthBind()) {
|
throw new YamiShopBindException("谷歌验证码未绑定，无需解绑!");
|
}
|
sysUser.setGoogleAuthBind(false);
|
sysUser.setGoogleAuthSecret("");
|
sysUser.setUpdateTime(new Date());
|
sysUserService.updateById(sysUser);
|
} else {
|
throw new YamiShopBindException("超级谷歌验证码错误!");
|
}
|
return Result.succeed();
|
}
|
|
/**
|
* 用户信息
|
*/
|
@GetMapping("/info/{userId}")
|
@PreAuthorize("@pms.hasPermission('sys:user:info')")
|
public ResponseEntity<SysUser> info(@PathVariable("userId") Long userId) {
|
SysUser user = sysUserService.getSysUserById(userId);
|
user.setUserId(null);
|
// if (!Objects.equals(user.getShopId(), SecurityUtils.getSysUser().getShopId())) {
|
// throw new YamiShopBindException("没有权限获取该用户信息");
|
// }
|
//获取用户所属的角色列表
|
List<Long> roleIdList = sysRoleService.listRoleIdByUserId(userId);
|
user.setRoleIdList(roleIdList);
|
return ResponseEntity.ok(user);
|
}
|
|
/**
|
* 保存用户
|
*/
|
@SysLog("保存用户")
|
@PostMapping
|
@PreAuthorize("@pms.hasPermission('sys:user:save')")
|
@ApiOperation("保存用户")
|
public ResponseEntity<String> save(@Valid @RequestBody SysUserDto user) {
|
String username = user.getUsername();
|
SysUser dbUser = sysUserService.getOne(new LambdaQueryWrapper<SysUser>()
|
.eq(SysUser::getUsername, username));
|
if (dbUser != null) {
|
return ResponseEntity.badRequest().body("该用户已存在");
|
}
|
SysUser sysUser = new SysUser();
|
sysUser.setPassword(passwordEncoder.encode(passwordManager.decryptPassword(user.getPassword())));
|
sysUser.setRemarks(user.getRemarks());
|
sysUser.setSafePassword(passwordEncoder.encode(passwordManager.decryptPassword(user.getSafePassword())));
|
sysUser.setEmail(user.getEmail());
|
sysUser.setRoleIdList(user.getRoleIdList());
|
sysUser.setMobile(user.getMobile());
|
sysUser.setUsername(username);
|
sysUser.setStatus(user.getStatus());
|
sysUserService.saveUserAndUserRole(sysUser);
|
return ResponseEntity.ok().build();
|
}
|
|
/**
|
* 修改用户
|
*/
|
@SysLog("修改用户")
|
@PutMapping
|
@PreAuthorize("@pms.hasPermission('sys:user:update')")
|
@ApiOperation("修改用户")
|
public ResponseEntity<String> update(@Valid @RequestBody UpdateSysUserDto dto) {
|
SysUser dbUser = sysUserService.getSysUserById(dto.getId());
|
if (dbUser == null) {
|
throw new YamiShopBindException("参数错误!");
|
}
|
// SysUser dbUserNameInfo = sysUserService.getByUserName(dto.getUsername());
|
// if (dbUserNameInfo != null && !Objects.equals(dbUserNameInfo.getUserId(),dto.getUserId())) {
|
// return ResponseEntity.badRequest().body("该用户已存在");
|
// }
|
// 开源版代码，禁止用户修改admin 的账号密码密码
|
// 正式使用时，删除此部分代码即可
|
boolean is = Objects.equals(1L, dbUser.getUserId()) && !StrUtil.equals("admin", dbUser.getUsername());
|
if (is) {
|
throw new YamiShopBindException("禁止修改admin的账号密码");
|
}
|
if (Objects.equals(1L, dbUser.getUserId()) && dbUser.getStatus() == 0) {
|
throw new YamiShopBindException("admin用户不可以被禁用");
|
}
|
dbUser.setRemarks(dto.getRemarks());
|
dbUser.setEmail(dto.getEmail());
|
dbUser.setRoleIdList(dto.getRoleIdList());
|
dbUser.setStatus(dto.getStatus());
|
dbUser.setMobile(dto.getMobile());
|
dbUser.setRemarks(dto.getRemarks());
|
sysUserService.updateUserAndUserRole(dbUser);
|
return ResponseEntity.ok().build();
|
}
|
|
/**
|
* 删除用户
|
*/
|
@SysLog("删除用户")
|
@DeleteMapping
|
@PreAuthorize("@pms.hasPermission('sys:user:delete')")
|
public ResponseEntity<String> delete(@RequestBody Long[] userIds) {
|
if (userIds.length == 0) {
|
return ResponseEntity.badRequest().body("请选择需要删除的用户");
|
}
|
if (ArrayUtil.contains(userIds, Constant.SUPER_ADMIN_ID)) {
|
return ResponseEntity.badRequest().body("系统管理员不能删除");
|
}
|
if (ArrayUtil.contains(userIds, SecurityUtils.getSysUser().getUserId())) {
|
return ResponseEntity.badRequest().body("当前用户不能删除");
|
}
|
sysUserService.deleteBatch(userIds, SecurityUtils.getSysUser().getShopId());
|
return ResponseEntity.ok().build();
|
}
|
}
|
