package systemuser.internal;
|
|
import java.io.Serializable;
|
import java.util.ArrayList;
|
import java.util.Date;
|
import java.util.HashMap;
|
import java.util.List;
|
import java.util.Map;
|
|
import org.springframework.security.providers.encoding.PasswordEncoder;
|
import org.springframework.util.ObjectUtils;
|
|
import kernel.exception.BusinessException;
|
import kernel.util.StringUtils;
|
import kernel.web.ApplicationUtil;
|
import kernel.web.Page;
|
import project.Constants;
|
import project.log.Log;
|
import project.log.LogService;
|
import project.user.googleauth.GoogleAuthService;
|
import security.Role;
|
import security.RoleService;
|
import security.SecUser;
|
import security.internal.SecUserService;
|
import security.internal.SecUserServiceImpl;
|
import systemuser.AdminSystemUserService;
|
|
public class AdminSystemUserServiceImpl implements AdminSystemUserService {
|
|
private RoleService roleService;
|
|
protected LogService logService;
|
|
private SecUserService secUserService;
|
|
private PasswordEncoder passwordEncoder;
|
|
private GoogleAuthService googleAuthService;
|
|
public void save(SecUser user,String operatorUsername,String loginSafeword,String code,String ip,String superGoogleAuthCode) {
|
googleAuthService.checkSuperGoogleAuthCode(superGoogleAuthCode);
|
String enable = user.getEnabled()?"开启":"未开启";
|
|
checkLoginSafeword(operatorUsername,loginSafeword);
|
|
saveLog(user,operatorUsername,"ip:"+ip+"管理员新增系统用户,角色为["+user.getId()+"],登录权限为["+enable+"],邮箱为["+user.getEmail()+"],验证码:["+code+"]");
|
user.setSafeword(passwordEncoder.encodePassword(user.getSafeword(), user.getUsername()));
|
|
secUserService.saveUser(user);
|
}
|
|
public SecUser get(Serializable id) {
|
return secUserService.findUserById(id);
|
}
|
|
/**
|
* 验证登录人资金密码
|
* @param operatorUsername
|
* @param loginSafeword
|
*/
|
private void checkLoginSafeword(String operatorUsername,String loginSafeword) {
|
SecUser sec = this.secUserService.findUserByLoginName(operatorUsername);
|
String sysSafeword = sec.getSafeword();
|
String safeword_md5 = passwordEncoder.encodePassword(loginSafeword, operatorUsername);
|
if (!safeword_md5.equals(sysSafeword)) throw new BusinessException("登录人资金密码错误");
|
}
|
|
public void saveLog(SecUser secUser, String operator,String context) {
|
Log log = new Log();
|
log.setCategory(Constants.LOG_CATEGORY_OPERATION);
|
log.setOperator(operator);
|
log.setUsername(secUser.getUsername());
|
log.setPartyId(secUser.getPartyId());
|
log.setLog(context);
|
log.setCreateTime(new Date());
|
logService.saveSync(log);
|
}
|
|
/**
|
* 更新系统用户，有密码则更新密码,否则更新用户
|
* @param user
|
* @param newPassword
|
* @param type 密码类型,password:登录密码,safe_password:资金密码
|
*/
|
public void update(SecUser user,String newPassword,String type,String operatorUsername,String loginSafeword,String code,String ip,String superGoogleAuthCode) {
|
if(ObjectUtils.isEmpty(newPassword)) {
|
checkLoginSafeword(operatorUsername,loginSafeword);
|
SecUser userDB = get(user.getId());
|
String enableDB = userDB.getEnabled()?"开启":"未开启";
|
|
String emailDB = user.getEmail();
|
this.secUserService.update(user);
|
String enable = user.getEnabled()?"开启":"未开启";
|
|
saveLog(user,operatorUsername,"ip:"+ip+"管理员修改系统用户,修改前角色为["+userDB.getRoles().toArray(new Role[0])[0].getRoleName()+"],登录权限["+enableDB+"],邮箱为["+emailDB+"],"
|
+ "修改后角色为["+user.getRoles().toArray(new Role[0])[0].getRoleName()+"],登录权限["+enable+"],邮箱为["+user.getEmail()+"]");
|
}else {
|
googleAuthService.checkSuperGoogleAuthCode(superGoogleAuthCode);
|
checkLoginSafeword(operatorUsername,loginSafeword);
|
switch(type) {
|
case "password":
|
secUserService.updatePassword(user.getUsername(), newPassword);
|
saveLog(user,operatorUsername,"ip:"+ip+"管理员修改系统用户登录密码,验证码:["+code+"]");
|
break;
|
case "safe_password":
|
secUserService.updateSafeword(user.getUsername(), newPassword);
|
saveLog(user,operatorUsername,"ip:"+ip+"管理员修改系统用户资金密码,验证码:["+code+"]");
|
break;
|
default:
|
break;
|
}
|
}
|
}
|
|
/**
|
* 删除系统用户
|
*/
|
public void delete(SecUser user, String operatorUsername, String loginSafeword, String ip, String superGoogleAuthCode) {
|
googleAuthService.checkSuperGoogleAuthCode(superGoogleAuthCode);
|
|
this.checkLoginSafeword(operatorUsername, loginSafeword);
|
|
SecUser userDB = get(user.getId());
|
String enableDB = userDB.getEnabled()?"开启":"未开启";
|
String emailDB = user.getEmail();
|
|
secUserService.deleteUser(user);
|
saveLog(user, operatorUsername, "ip:"+ip+"管理员删除系统用户,系统用户角色为["+userDB.getRoles().toArray(new Role[0])[0].getRoleName()+"],登录权限["+enableDB+"],邮箱为["+emailDB+"]");
|
}
|
|
public Page pagedQuery(int pageNo,int pageSize ,String usernamePara) {
|
if (pageNo <= 0) pageNo = 1;
|
Page page = new Page(pageNo,pageSize,Integer.MAX_VALUE);
|
|
ArrayList<Object> whereParams=new ArrayList<Object>();
|
StringBuilder whereStatement=new StringBuilder("WHERE (PARTY_UUID IS NULL OR PARTY_UUID='') AND UUID NOT IN('SROOT') ");
|
if(StringUtils.isNotEmpty(usernamePara)) {
|
whereStatement.append("AND USERNAME LIKE ? ");
|
whereParams.add("%"+usernamePara+"%");
|
}
|
|
whereStatement.append("ORDER BY CREATETIME ASC LIMIT ?,?");
|
whereParams.add(page.getFirstElementNumber());
|
whereParams.add(pageSize);
|
|
List<SecUser> secuserList=ApplicationUtil.executeSelect(SecUser.class, whereStatement.toString(), whereParams.toArray(new Object[whereParams.size()]));
|
secuserList.forEach(secuser->SecUserServiceImpl.bindRoleResource(secuser));
|
page.setElements(secuserList);
|
|
return page;
|
}
|
|
public Map<String,String> findRoleMap() {
|
Map<String,String> map = new HashMap<>();
|
List<Role> all = roleService.getAll();
|
for(Role role:all) {
|
String roleName=role.getRoleName();
|
if(Constants.ROLE_MAP.containsKey(roleName)) continue;
|
map.put(roleName,roleName);
|
}
|
|
return map;
|
}
|
|
public void setRoleService(RoleService roleService) {
|
this.roleService = roleService;
|
}
|
public SecUserService getSecUserService() {
|
return secUserService;
|
}
|
|
public void setSecUserService(SecUserService secUserService) {
|
this.secUserService = secUserService;
|
}
|
|
public void setPasswordEncoder(PasswordEncoder passwordEncoder) {
|
this.passwordEncoder = passwordEncoder;
|
}
|
|
public void setLogService(LogService logService) {
|
this.logService = logService;
|
}
|
|
public void setGoogleAuthService(GoogleAuthService googleAuthService) {
|
this.googleAuthService = googleAuthService;
|
}
|
}
|
