package security.internal;
|
|
import java.io.Serializable;
|
import java.util.Date;
|
import java.util.List;
|
import java.util.Set;
|
import java.util.regex.Pattern;
|
import java.util.stream.Collectors;
|
|
import org.apache.commons.lang3.ObjectUtils;
|
import org.springframework.jdbc.core.JdbcTemplate;
|
import org.springframework.security.providers.encoding.PasswordEncoder;
|
|
import com.google.common.collect.Sets;
|
|
import kernel.bo.RecordObjectMapper;
|
import kernel.exception.BusinessException;
|
import kernel.util.StringUtils;
|
import kernel.web.ApplicationUtil;
|
import security.Resource;
|
import security.Role;
|
import security.SecUser;
|
|
/**
|
* @author JORGE
|
* @description SecUser实体持久层操作
|
*/
|
public class SecUserServiceImpl implements SecUserService {
|
/**
|
* 密码工具
|
*/
|
private PasswordEncoder passwordEncoder;
|
|
public void setPasswordEncoder(PasswordEncoder passwordEncoder) {
|
this.passwordEncoder = passwordEncoder;
|
}
|
|
public void saveUser(SecUser user) {
|
if(null==user) return;
|
JdbcTemplate jdbcTemplate=ApplicationUtil.getBean(JdbcTemplate.class);
|
|
List<String> uuids=jdbcTemplate.queryForList("SELECT UUID FROM SCT_USER WHERE USERNAME=?", String.class, user.getUsername());
|
if (ObjectUtils.isNotEmpty(uuids)) throw new BusinessException("系统存在相同[系统登录名]！");
|
|
user.setCreateTime(new Date());
|
if(null==user.getId()) user.setId(ApplicationUtil.getCurrentTimeUUID());
|
user.setPassword(passwordEncoder.encodePassword(user.getPassword(), user.getUsername()));
|
|
ApplicationUtil.executeInsert(user);
|
cascadeRole(user);
|
}
|
|
/**
|
* 根据用户名删除用户
|
* 删除用户后,此删除的用户不再关联角色
|
* @param user 需要删除的用户
|
*/
|
public void deleteUser(SecUser user) {
|
if(null==user) return;
|
JdbcTemplate jdbcTemplate=ApplicationUtil.getBean(JdbcTemplate.class);
|
|
String uuid=null;
|
List<String> uuids=jdbcTemplate.queryForList("SELECT UUID FROM SCT_USER WHERE USERNAME=?", String.class, user.getUsername());
|
if (ObjectUtils.isEmpty(uuids) || null==(uuid=uuids.get(0))) throw new BusinessException("系统用户登录名不存在！");
|
|
jdbcTemplate.update("DELETE FROM SCT_USER WHERE UUID=?",uuid);
|
jdbcTemplate.update("DELETE FROM SCT_USER_ROLE WHERE USER_UUID=?",uuid);
|
}
|
|
/**
|
* 根据用户名查找用户
|
* @param userName 用户名
|
* @return 用户信息(包含关联角色与权限)
|
*/
|
public SecUser findUserByLoginName(String userName) {
|
if(ObjectUtils.isEmpty(userName)) return null;
|
JdbcTemplate jdbcTemplate=ApplicationUtil.getBean(JdbcTemplate.class);
|
|
String userSql="SELECT * FROM SCT_USER WHERE USERNAME=?";
|
List<SecUser> users=jdbcTemplate.query(userSql, RecordObjectMapper.newInstance(SecUser.class), userName);
|
|
SecUser user=null;
|
if(null==users || users.isEmpty() || null==(user=users.get(0))) return null;
|
|
return bindRoleResource(user);
|
}
|
|
/**
|
* 根据邮箱查找用户
|
* @param userName 用户名
|
* @return 用户信息(包含关联角色与权限)
|
*/
|
public SecUser findUserByLoginName2(String emailPhone) {
|
String userName = emailPhone;
|
if(ObjectUtils.isEmpty(emailPhone)) return null;
|
String sql = "";
|
if(isValidPhone(emailPhone)) {
|
sql ="SELECT * FROM PAT_PARTY WHERE USERNAME=?";
|
}else if(isValidEmail(emailPhone)) {
|
sql="SELECT * FROM PAT_PARTY WHERE USERNAME=?";
|
}
|
JdbcTemplate jdbcTemplate=ApplicationUtil.getBean(JdbcTemplate.class);
|
if(ObjectUtils.isNotEmpty(sql)) {
|
List<SecUser> userList=jdbcTemplate.query(sql, RecordObjectMapper.newInstance(SecUser.class), emailPhone);
|
if(org.springframework.util.ObjectUtils.isEmpty(userList)) {
|
return null;
|
}
|
userName = userList.get(0).getUsername();
|
}
|
String userSql="SELECT * FROM SCT_USER WHERE USERNAME=?";
|
List<SecUser> users=jdbcTemplate.query(userSql, RecordObjectMapper.newInstance(SecUser.class), userName);
|
|
SecUser user=null;
|
if(null==users || users.isEmpty() || null==(user=users.get(0))) return null;
|
|
return bindRoleResource(user);
|
}
|
|
@Override
|
public SecUser findValidUserByLoginName(String loginName, String[] rolesArrty) {
|
if(ObjectUtils.isEmpty(loginName) || ObjectUtils.isEmpty(rolesArrty)) return null;
|
|
SecUser user = findUserByLoginName(loginName);
|
if (null == user) return null;
|
|
Set<Role> userRoleSet=user.getRoles();
|
if(null==userRoleSet || userRoleSet.isEmpty()) return null;
|
|
Set<String> allRoleSet=Sets.newHashSet(rolesArrty);
|
allRoleSet.retainAll(userRoleSet.stream().map(role->role.getRoleName()).collect(Collectors.toSet()));
|
|
return allRoleSet.isEmpty()?null:user;
|
}
|
|
@Override
|
public void updatePassword(String username, String oldpassword, String newPassword) {
|
if(ObjectUtils.isEmpty(username) || ObjectUtils.isEmpty(oldpassword) || ObjectUtils.isEmpty(newPassword)) return;
|
JdbcTemplate jdbcTemplate=ApplicationUtil.getBean(JdbcTemplate.class);
|
|
List<SecUser> users=jdbcTemplate.query("SELECT * FROM SCT_USER WHERE USERNAME=?",RecordObjectMapper.newInstance(SecUser.class),username);
|
if(null==users || users.isEmpty()) return;
|
SecUser user=users.get(0);
|
if(null==user) return;
|
|
if (passwordEncoder.encodePassword(oldpassword,username).equals(user.getPassword())) {
|
jdbcTemplate.update("UPDATE SCT_USER SET PASSWORD=? WHERE UUID=?",passwordEncoder.encodePassword(newPassword,username),user.getId());
|
} else {
|
throw new BusinessException("旧密码不正确");
|
}
|
}
|
|
@Override
|
public void updatePassword(String username, String password) {
|
if(ObjectUtils.isEmpty(username) || ObjectUtils.isEmpty(password)) return;
|
JdbcTemplate jdbcTemplate=ApplicationUtil.getBean(JdbcTemplate.class);
|
|
List<SecUser> users=jdbcTemplate.query("SELECT * FROM SCT_USER WHERE USERNAME=?",RecordObjectMapper.newInstance(SecUser.class),username);
|
if(null==users || users.isEmpty()) throw new BusinessException("没有找到用户");
|
|
SecUser user=users.get(0);
|
if(null==user) throw new BusinessException("没有找到用户");
|
|
jdbcTemplate.update("UPDATE SCT_USER SET PASSWORD=? WHERE UUID=?",passwordEncoder.encodePassword(password,username),user.getId());
|
}
|
|
@Override
|
public void updateSafeword(String username, String oldpassword, String newPassword) {
|
if(ObjectUtils.isEmpty(username) || ObjectUtils.isEmpty(oldpassword) || ObjectUtils.isEmpty(newPassword)) return;
|
JdbcTemplate jdbcTemplate=ApplicationUtil.getBean(JdbcTemplate.class);
|
|
List<SecUser> users=jdbcTemplate.query("SELECT * FROM SCT_USER WHERE USERNAME=?",RecordObjectMapper.newInstance(SecUser.class),username);
|
if(null==users || users.isEmpty()) return;
|
SecUser user=users.get(0);
|
if(null==user) return;
|
|
String oldpassword_encoder = passwordEncoder.encodePassword(oldpassword, username);
|
if(!StringUtils.isNullOrEmpty(user.getSafeword())) {
|
if (oldpassword_encoder.equals(user.getSafeword())) {
|
jdbcTemplate.update("UPDATE SCT_USER SET SAFEWORD=? WHERE UUID=?",passwordEncoder.encodePassword(newPassword,username),user.getId());
|
} else {
|
throw new BusinessException("旧密码不正确");
|
}
|
}else {
|
jdbcTemplate.update("UPDATE SCT_USER SET SAFEWORD=? WHERE UUID=?",passwordEncoder.encodePassword(newPassword,username),user.getId());
|
}
|
}
|
|
@Override
|
public void updateSafeword(String username, String newPassword) {
|
if(ObjectUtils.isEmpty(username) || ObjectUtils.isEmpty(newPassword)) return;
|
|
JdbcTemplate jdbcTemplate=ApplicationUtil.getBean(JdbcTemplate.class);
|
|
List<SecUser> users=jdbcTemplate.query("SELECT * FROM SCT_USER WHERE USERNAME=?",RecordObjectMapper.newInstance(SecUser.class),username);
|
if(null==users || users.isEmpty()) throw new BusinessException("没有找到用户");
|
SecUser user=users.get(0);
|
if(null==user) throw new BusinessException("没有找到用户");
|
|
jdbcTemplate.update("UPDATE SCT_USER SET SAFEWORD=? WHERE UUID=?",passwordEncoder.encodePassword(newPassword,username),user.getId());
|
}
|
|
@Override
|
public SecUser findUserByPartyId(Serializable partyId) {
|
if(null==partyId) return null;
|
|
JdbcTemplate jdbcTemplate=ApplicationUtil.getBean(JdbcTemplate.class);
|
List<SecUser> users=jdbcTemplate.query("SELECT * FROM SCT_USER WHERE PARTY_UUID=?",RecordObjectMapper.newInstance(SecUser.class),partyId);
|
|
SecUser user=null;
|
if(null==users || users.isEmpty() || null==(user=users.get(0))) return null;
|
|
return bindRoleResource(user);
|
}
|
|
/**
|
* 查找所有系统用户
|
*/
|
public List<SecUser> findAllSysUsers() {
|
JdbcTemplate jdbcTemplate=ApplicationUtil.getBean(JdbcTemplate.class);
|
List<SecUser> users=jdbcTemplate.query("SELECT * FROM SCT_USER WHERE PARTY_UUID is null or PARTY_UUID=''",RecordObjectMapper.newInstance(SecUser.class));
|
if(null!=users) for(int i=0;i<users.size();bindRoleResource(users.get(i++)));
|
return users;
|
}
|
|
@Override
|
public void update(SecUser user) {
|
if(null==user) return;
|
|
JdbcTemplate jdbcTemplate=ApplicationUtil.getBean(JdbcTemplate.class);
|
List<SecUser> users=jdbcTemplate.query("SELECT * FROM SCT_USER WHERE UUID=? OR USERNAME=?",RecordObjectMapper.newInstance(SecUser.class),user.getId(),user.getUsername());
|
|
SecUser dbUser=null;
|
if(null==users || users.isEmpty() || null==(dbUser=users.get(0))) { //execute insert
|
Object[] jdbcParams=ApplicationUtil.getInsertStatement(user);
|
String insertUserSql=(String)jdbcParams[0];
|
Object[] sqlParameters=(Object[])jdbcParams[1];
|
jdbcTemplate.update(insertUserSql,sqlParameters);
|
}else { //execute update
|
if(null==user.getId()) user.setId(dbUser.getId());
|
if(null==user.getUsername()) user.setUsername(dbUser.getUsername());
|
if(null==user.getId()) user.setId(ApplicationUtil.getCurrentTimeUUID());
|
|
Object[] jdbcParams=ApplicationUtil.getUpdateStatement(user,"WHERE UUID=? OR USERNAME=?",new Object[] {user.getId(),user.getUsername()});
|
String updateUserSql=(String)jdbcParams[0];
|
Object[] sqlParameters=(Object[])jdbcParams[1];
|
jdbcTemplate.update(updateUserSql,sqlParameters);
|
}
|
|
cascadeRole(user);
|
}
|
|
@Override
|
public SecUser findUserById(Serializable id) {
|
if(null==id) return null;
|
|
JdbcTemplate jdbcTemplate=ApplicationUtil.getBean(JdbcTemplate.class);
|
List<SecUser> users=jdbcTemplate.query("SELECT * FROM SCT_USER WHERE UUID=?",RecordObjectMapper.newInstance(SecUser.class),id);
|
|
SecUser user=null;
|
if(null==users || users.isEmpty() || null==(user=users.get(0))) return null;
|
|
return bindRoleResource(user);
|
}
|
|
/**
|
* 级联角色资源
|
* @param secuser 用户对象
|
*/
|
private static final void cascadeRole(SecUser secuser) {
|
if(null==secuser) return;
|
|
JdbcTemplate jdbcTemplate=ApplicationUtil.getBean(JdbcTemplate.class);
|
Serializable userId=secuser.getId();
|
Set<Role> roles=secuser.getRoles();
|
|
jdbcTemplate.update("DELETE FROM SCT_USER_ROLE WHERE USER_UUID=?",userId);
|
if(ObjectUtils.isEmpty(roles)) return;
|
|
List<Object[]> argList=roles.stream().map(role->new Object[] {userId,role.getId()}).collect(Collectors.toList());
|
jdbcTemplate.batchUpdate("INSERT INTO SCT_USER_ROLE(USER_UUID,ROLE_UUID) VALUES(?,?)", argList);
|
}
|
|
/**
|
* 绑定角色资源
|
* @param secuser 用户对象
|
*/
|
public static final SecUser bindRoleResource(SecUser secuser) {
|
if(null==secuser) return secuser;
|
JdbcTemplate jdbcTemplate=ApplicationUtil.getBean(JdbcTemplate.class);
|
|
String roleSql="SELECT * FROM SCT_ROLE SR WHERE EXISTS (SELECT ROLE_UUID FROM SCT_USER_ROLE WHERE USER_UUID=? AND ROLE_UUID=SR.UUID)";
|
List<Role> roleList=jdbcTemplate.query(roleSql, RecordObjectMapper.newInstance(Role.class), secuser.getId());
|
|
if(null==roleList || roleList.isEmpty()) return secuser;
|
Set<Role> roleSet=roleList.stream().filter(role->null!=role).collect(Collectors.toSet());
|
secuser.setRoles(roleSet);
|
|
String resoSql="SELECT * FROM SCT_RESOURCE SR WHERE EXISTS (SELECT RESOURCE_UUID FROM SCT_ROLE_RESOURCE WHERE ROLE_UUID=? AND RESOURCE_UUID=SR.UUID)";
|
for(Role role:roleSet) {
|
List<Resource> resoList=jdbcTemplate.query(resoSql, RecordObjectMapper.newInstance(Resource.class), role.getId());
|
if(null==resoList || resoList.isEmpty()) continue;
|
role.setResources(resoList.stream().filter(reso->null!=reso).collect(Collectors.toSet()));
|
}
|
|
return secuser;
|
}
|
|
// 手机号校验
|
private boolean isValidPhone(String username) {
|
Pattern p = Pattern.compile("[0-9]*");
|
return p.matcher(username).matches();
|
}
|
|
// 邮箱校验
|
private boolean isValidEmail(String username) {
|
String regexPattern = "^(?=.{1,64}@)[A-Za-z0-9_-]+(\\.[A-Za-z0-9_-]+)*@"
|
+ "[^-][A-Za-z0-9-]+(\\.[A-Za-z0-9-]+)*(\\.[A-Za-z]{2,})$";
|
return Pattern.compile(regexPattern)
|
.matcher(username)
|
.matches();
|
}
|
}
|
