litao
2 years ago
parent
a423c5424f
commit
444f6000e9
6 changed files with 176 additions and 10 deletions
@ -0,0 +1,117 @@ |
||||
/* |
||||
* Copyright (c) 2018-2028, Chill Zhuang All rights reserved. |
||||
* |
||||
* Redistribution and use in source and binary forms, with or without |
||||
* modification, are permitted provided that the following conditions are met: |
||||
* |
||||
* Redistributions of source code must retain the above copyright notice, |
||||
* this list of conditions and the following disclaimer. |
||||
* Redistributions in binary form must reproduce the above copyright |
||||
* notice, this list of conditions and the following disclaimer in the |
||||
* documentation and/or other materials provided with the distribution. |
||||
* Neither the name of the dreamlu.net developer nor the names of its |
||||
* contributors may be used to endorse or promote products derived from |
||||
* this software without specific prior written permission. |
||||
* Author: Chill 庄骞 (smallchill@163.com) |
||||
*/ |
||||
package org.springblade.modules.auth.granter; |
||||
|
||||
import lombok.AllArgsConstructor; |
||||
import org.springblade.common.cache.CacheNames; |
||||
import org.springblade.common.cache.ParamCache; |
||||
import org.springblade.core.log.exception.ServiceException; |
||||
import org.springblade.core.redis.cache.BladeRedis; |
||||
import org.springblade.core.tool.utils.DigestUtil; |
||||
import org.springblade.core.tool.utils.Func; |
||||
import org.springblade.core.tool.utils.WebUtil; |
||||
import org.springblade.modules.auth.enums.UserEnum; |
||||
import org.springblade.modules.auth.provider.ITokenGranter; |
||||
import org.springblade.modules.auth.provider.TokenParameter; |
||||
import org.springblade.modules.auth.utils.TokenUtil; |
||||
import org.springblade.modules.system.entity.Tenant; |
||||
import org.springblade.modules.system.entity.UserInfo; |
||||
import org.springblade.modules.system.service.IRoleService; |
||||
import org.springblade.modules.system.service.ITenantService; |
||||
import org.springblade.modules.system.service.IUserService; |
||||
import org.springframework.stereotype.Component; |
||||
|
||||
import javax.servlet.http.HttpServletRequest; |
||||
import java.time.Duration; |
||||
import java.util.List; |
||||
|
||||
/** |
||||
* PasswordTokenGranter |
||||
* |
||||
* @author Chill |
||||
*/ |
||||
@Component |
||||
@AllArgsConstructor |
||||
public class NoPasswordTokenGranter implements ITokenGranter { |
||||
|
||||
public static final String GRANT_TYPE = "nopassword"; |
||||
public static final Integer FAIL_COUNT = 5; |
||||
public static final String FAIL_COUNT_VALUE = "account.failCount"; |
||||
|
||||
private final IUserService userService; |
||||
private final IRoleService roleService; |
||||
private final ITenantService tenantService; |
||||
private final BladeRedis bladeRedis; |
||||
|
||||
@Override |
||||
public UserInfo grant(TokenParameter tokenParameter) { |
||||
HttpServletRequest request = WebUtil.getRequest(); |
||||
// 获取用户绑定ID
|
||||
String headerDept = request.getHeader(TokenUtil.DEPT_HEADER_KEY); |
||||
String headerRole = request.getHeader(TokenUtil.ROLE_HEADER_KEY); |
||||
|
||||
// 获取用户信息
|
||||
String tenantId = tokenParameter.getArgs().getStr("tenantId"); |
||||
String username = tokenParameter.getArgs().getStr("username"); |
||||
String password = tokenParameter.getArgs().getStr("password"); |
||||
|
||||
// 判断登录是否锁定
|
||||
int cnt = Func.toInt(bladeRedis.get(CacheNames.tenantKey(tenantId, CacheNames.USER_FAIL_KEY, username)), 0); |
||||
int failCount = Func.toInt(ParamCache.getValue(FAIL_COUNT_VALUE), FAIL_COUNT); |
||||
if (cnt >= failCount) { |
||||
throw new ServiceException(TokenUtil.USER_HAS_TOO_MANY_FAILS); |
||||
} |
||||
|
||||
UserInfo userInfo = null; |
||||
if (Func.isNoneBlank(username, password)) { |
||||
// 获取租户信息
|
||||
Tenant tenant = tenantService.getByTenantId(tenantId); |
||||
if (TokenUtil.judgeTenant(tenant)) { |
||||
throw new ServiceException(TokenUtil.USER_HAS_NO_TENANT_PERMISSION); |
||||
} |
||||
// 获取用户类型
|
||||
String userType = tokenParameter.getArgs().getStr("userType"); |
||||
// 根据不同用户类型调用对应的接口返回数据，用户可自行拓展
|
||||
if (userType.equals(UserEnum.WEB.getName())) { |
||||
userInfo = userService.userInfo(tenantId, username, password, UserEnum.WEB); |
||||
} else if (userType.equals(UserEnum.APP.getName())) { |
||||
userInfo = userService.userInfo(tenantId, username, password, UserEnum.APP); |
||||
} else { |
||||
userInfo = userService.userInfo(tenantId, username, password, UserEnum.OTHER); |
||||
} |
||||
} |
||||
if (userInfo == null || userInfo.getUser() == null) { |
||||
// 增加错误锁定次数
|
||||
bladeRedis.setEx(CacheNames.tenantKey(tenantId, CacheNames.USER_FAIL_KEY, username), cnt + 1, Duration.ofMinutes(30)); |
||||
} else { |
||||
// 成功则清除登录错误次数
|
||||
bladeRedis.del(CacheNames.tenantKey(tenantId, CacheNames.USER_FAIL_KEY, username)); |
||||
} |
||||
// 多部门情况下指定单部门
|
||||
if (Func.isNotEmpty(headerDept) && userInfo != null && userInfo.getUser().getDeptId().contains(headerDept)) { |
||||
userInfo.getUser().setDeptId(headerDept); |
||||
} |
||||
// 多角色情况下指定单角色
|
||||
if (Func.isNotEmpty(headerRole) && userInfo != null && userInfo.getUser().getRoleId().contains(headerRole)) { |
||||
List<String> roleAliases = roleService.getRoleAliases(headerRole); |
||||
userInfo.setRoles(roleAliases); |
||||
userInfo.getUser().setRoleId(headerRole); |
||||
} |
||||
return userInfo; |
||||
} |
||||
|
||||
} |
||||
Loading…
Reference in new issue