2

peternameyakj

2024-08-14 9bcf85f8d8f9b503e386a67924f5943cd77bd813

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
package project.web.admin;
 
import java.util.Date;
import java.util.List;
import java.util.Map;
 
import javax.servlet.http.HttpServletRequest;
 
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.providers.encoding.PasswordEncoder;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;
import org.springframework.web.servlet.ModelAndView;
 
import kernel.exception.BusinessException;
import kernel.util.StringUtils;
import kernel.web.Page;
import kernel.web.PageActionSupport;
import project.Constants;
import project.log.AdminLogService;
import project.log.Log;
import project.log.LogService;
import security.SecUser;
import security.internal.SecUserService;
 
@RestController
public class AdminCodeLogController extends PageActionSupport {
 
    @Autowired
    private AdminLogService adminLogService;
    
    @Autowired
    private LogService logService;
    
    @Autowired
    private SecUserService secUserService;
    
    @Autowired
    private PasswordEncoder passwordEncoder;
    
    private final String action = "normal/adminCodeLogAction!";
    
    @RequestMapping(action + "list.action")
    public ModelAndView list(HttpServletRequest request) {
        String loginPartyId = getLoginPartyId();
        String date_para = request.getParameter("date_para");
        String log_para = request.getParameter("log_para");
        String name_para = request.getParameter("name_para");
        String target = request.getParameter("target");
        int pageNo = this.checkAndSetPageNo(request.getParameter("pageNo"));
        int pageSize = 30;
        List<Date> date_range = toRangeDate(date_para);
        Page page = this.adminLogService.pagedQueryCodeLog(pageNo, pageSize, log_para, name_para, target, 
                date_range.get(0), date_range.get(1), loginPartyId, this.getUsername_login(),null);
        
        ModelAndView modelAndView = new ModelAndView();
        modelAndView.addObject("pageNo", pageNo);
        modelAndView.addObject("pageSize", pageSize);
        modelAndView.addObject("page", page);
        modelAndView.addObject("message", message);
        modelAndView.addObject("error", error);
        modelAndView.addObject("date_para", date_para);
        modelAndView.addObject("log_para", log_para);
        modelAndView.addObject("name_para", name_para);
        modelAndView.addObject("target", target);
        modelAndView.setViewName("code_log_list");
        return modelAndView;
    }
    
    @RequestMapping(action + "get_code.action")
    public ModelAndView get_code(HttpServletRequest request) {
        
        String login_safeword = request.getParameter("login_safeword");
        String log_id = request.getParameter("log_id");
        
        String error = "";
        ModelAndView modelAndView = new ModelAndView();
        
        try {
            if (StringUtils.isEmptyString(login_safeword)) {
                throw new BusinessException("资金密码不能为空");
            }
            SecUser sec = this.secUserService.findUserByLoginName(this.getUsername_login());
 
            checkLoginSafeword(sec, this.getUsername_login(), login_safeword);
            
            Page page = this.adminLogService.pagedQueryCodeLog(1, 10, null, null, null, 
                    null, null, getLoginPartyId(), this.getUsername_login(), log_id);
            List<Map> list = page.getElements();
            Map map = list.get(0);
            Log log = new Log();
            log.setCategory(Constants.LOG_CATEGORY_OPERATION);
            log.setUsername("");
            log.setOperator(this.getUsername_login());
            log.setLog("管理员查看手机号/邮箱号["+String.valueOf(map.get("target"))+"]的验证码，管理员ip["+this.getIp(getRequest())+"]");
            logService.saveSync(log);
            
            modelAndView.addObject("page", page);
            modelAndView.addObject("message", "操作成功");
            modelAndView.setViewName("code_log_get");
            return modelAndView;
        } catch (BusinessException e) {
            modelAndView.addObject("error", e.getMessage());
            modelAndView.setViewName("code_log_list");
            return modelAndView;
        } catch (Throwable t) {
            error = ("[ERROR] " + t.getMessage());
            modelAndView.addObject("error", error);
            modelAndView.setViewName("code_log_list");
            return modelAndView;
        }
    }
    
    
    /**
     * 验证登录人资金密码
     */
    private void checkLoginSafeword(SecUser secUser,String operatorUsername,String loginSafeword) {
        String sysSafeword = secUser.getSafeword();
        String safeword_md5 = passwordEncoder.encodePassword(loginSafeword, operatorUsername);
        if (!safeword_md5.equals(sysSafeword)) {
            throw new BusinessException("登录人资金密码错误");
        }
    }
}