1
Sunshine
2024-11-05 1ec0f818f512186b3af02637906632264fe97119
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
package com.nova.sankuai.controller.v1;
 
import com.alibaba.fastjson.JSONObject;
import com.nova.sankuai.domain.dto.LoginUserDto;
import com.nova.sankuai.domain.enums.SourceTypeEnum;
import com.nova.sankuai.domain.vo.common.MessageCode;
import com.nova.sankuai.infra.config.CommonException;
import com.nova.sankuai.infra.constants.ResultCode;
import com.nova.sankuai.infra.utils.IpUtil;
import com.nova.sankuai.infra.utils.MessageCodeUtil;
import com.nova.sankuai.infra.utils.ResultJson;
import com.nova.sankuai.infra.utils.UserUtil;
import com.nova.sankuai.service.IChannelInfoService;
import com.nova.sankuai.service.ISysUserService;
import io.swagger.annotations.Api;
import io.swagger.annotations.ApiOperation;
import lombok.AllArgsConstructor;
import org.apache.commons.lang.StringUtils;
import org.springframework.http.ResponseEntity;
import org.springframework.security.access.prepost.PreAuthorize;
import org.springframework.web.bind.annotation.*;
 
import javax.servlet.http.HttpServletRequest;
import java.io.IOException;
import java.util.Map;
 
/**
 * @author weikangdi
 */
@Api(tags = "登录授权")
@RestController
@RequestMapping(value = "/api/v1/auth")
@AllArgsConstructor
public class AuthController {
 
    private final ISysUserService sysUserService;
 
    private final IChannelInfoService channelInfoService;
 
    @PostMapping(value = "/smsLogin")
    @ApiOperation(value = "手机验证码登录")
    public ResultJson smsLogin(@RequestBody LoginUserDto userDto) {
        if (!SourceTypeEnum.ADMIN.getCode().equals(userDto.getSource())) {
            ResultJson checkResult = channelInfoService.checkChannel(userDto.getAppId(), null);
            if (checkResult != null) {
                return checkResult;
            }
        }
        JSONObject token = sysUserService.smsLogin(userDto);
        return ResultJson.ok(token);
    }
 
    @GetMapping("/generate-verify-code")
    @ApiOperation("生成图形验证码")
    public ResponseEntity<ResultJson<Map<String, String>>> generateVerifyCode(String phone) throws IOException {
        if (!MessageCodeUtil.verifyPhone(phone)) {
            throw new CommonException("手机号不符合规范");
        }
        ResponseEntity responseEntity = MessageCodeUtil.getGenerateImgCode(phone);
        return responseEntity;
    }
 
    @GetMapping("/code")
    @ApiOperation(value = "获取手机验证码")
    public ResultJson<Object> getCode(@RequestParam(value = "phone", required = false) String phone,
                                      @RequestParam(value = "source", required = false) Integer source,
                                      HttpServletRequest request,
                                      @RequestHeader(value = "verify-code", required = false) String verifyCode,
                                      @RequestParam(value = "inputVerifyCode", required = false) String inputVerifyCode) {
        if (StringUtils.isBlank(phone)) return ResultJson.failure(ResultCode.BAD_REQUEST, "phone 不能为空");
        if (StringUtils.isBlank(verifyCode)) return ResultJson.failure(ResultCode.BAD_REQUEST, "请求头校验失败");
        if (inputVerifyCode == null) return ResultJson.failure(ResultCode.BAD_REQUEST, "请求头校验失败");
        if (source == null) return ResultJson.failure(ResultCode.BAD_REQUEST, "source 不能为空");
 
        if (!MessageCodeUtil.verifyPhone(phone)) {
            throw new CommonException("手机号不符合规范");
        }
        MessageCode code = MessageCodeUtil.getCode(phone);
        if (code != null) {
            boolean verifyImage = MessageCodeUtil.verifyImageCode(phone, verifyCode, inputVerifyCode);
            if (!verifyImage) {
                throw new CommonException("图片验证码错误");
            }
        }
        String ip = IpUtil.getIpAddr(request);
        sysUserService.getCode(phone, source, ip);
        return ResultJson.success();
    }
 
    @GetMapping(value = "/logout")
    @ApiOperation(value = "退出登录")
    @PreAuthorize("hasAuthority('auth.logout')")
    public ResultJson<Void> logout(HttpServletRequest request) {
        String token = request.getHeader("Authorization");
        UserUtil.removeUserByToken(token);
        return ResultJson.success();
    }
 
}