From 63368d374f7c57bd05eb65eac2023e4698d1a7af Mon Sep 17 00:00:00 2001 From: gao <gaoleox@163> Date: Thu, 21 May 2020 19:29:27 +0800 Subject: [PATCH] Merge branch 'master' of https://chonggaoxiao:xcg523511090712@gitee.com/chonggaoxiao/new_excoin.git --- src/main/java/com/xcong/excoin/common/system/controller/LoginController.java | 63 ++++++++++++++++++++++++++----- 1 files changed, 52 insertions(+), 11 deletions(-) diff --git a/src/main/java/com/xcong/excoin/common/system/controller/LoginController.java b/src/main/java/com/xcong/excoin/common/system/controller/LoginController.java index 28feccb..a5e363c 100644 --- a/src/main/java/com/xcong/excoin/common/system/controller/LoginController.java +++ b/src/main/java/com/xcong/excoin/common/system/controller/LoginController.java @@ -1,12 +1,24 @@ package com.xcong.excoin.common.system.controller; +import cn.hutool.core.codec.Base64; import cn.hutool.core.util.IdUtil; +import cn.hutool.crypto.SecureUtil; +import cn.hutool.crypto.asymmetric.KeyType; +import cn.hutool.crypto.asymmetric.RSA; +import cn.hutool.crypto.asymmetric.Sign; +import cn.hutool.crypto.asymmetric.SignAlgorithm; import com.alibaba.fastjson.JSONObject; import com.xcong.excoin.common.contants.AppContants; import com.xcong.excoin.common.response.Result; import com.xcong.excoin.common.system.bean.LoginUserBean; import com.xcong.excoin.common.system.dto.LoginDto; +import com.xcong.excoin.common.system.dto.RegisterDto; +import com.xcong.excoin.configurations.properties.ApplicationProperties; +import com.xcong.excoin.configurations.properties.SecurityProperties; +import com.xcong.excoin.modules.member.service.MemberService; import com.xcong.excoin.utils.RedisUtils; +import io.swagger.annotations.Api; +import io.swagger.annotations.ApiOperation; import lombok.extern.slf4j.Slf4j; import org.springframework.beans.factory.annotation.Value; import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; @@ -26,12 +38,19 @@ * @Version V1.0 **/ @Slf4j +@Api(value = "登陆注册类", tags = "登陆注册类") @RestController @RequestMapping(value = "/") public class LoginController { - @Value("${rsa.private_key}") - private String privateKey; + @Resource + private MemberService memberservice; + + @Resource + private ApplicationProperties applicationProperties; + + @Resource + private SecurityProperties securityProperties; @Resource private AuthenticationManagerBuilder authenticationManagerBuilder; @@ -39,19 +58,41 @@ @Resource private RedisUtils redisUtils; + @ApiOperation(value = "登陆接口", notes = "登陆接口") @PostMapping("/login") public Result login(@RequestBody @Validated LoginDto loginDto) { - UsernamePasswordAuthenticationToken authToken = new UsernamePasswordAuthenticationToken(loginDto.getUsername(), loginDto.getPassword()); + // 将账号密码交给spring security验证,并调用userServiceDetails + UsernamePasswordAuthenticationToken authToken = new UsernamePasswordAuthenticationToken(loginDto.getUsername(), SecureUtil.md5(loginDto.getPassword())); Authentication authentication = authenticationManagerBuilder.getObject().authenticate(authToken); - String token = IdUtil.simpleUUID(); + + // 获取当前验证过后的用户 LoginUserBean loginUserBean = (LoginUserBean) authentication.getPrincipal(); - redisUtils.set(AppContants.APP_LOGIN_PREFIX + token, JSONObject.toJSONString(loginUserBean), 300000); - Map<String, Object> authInfo = new HashMap<String, Object>(2){ - { - put("token", token); - put("user", loginUserBean); - } - }; + + // 生成UUID作为token + String token = IdUtil.simpleUUID(); + redisUtils.set(AppContants.APP_LOGIN_PREFIX + token, JSONObject.toJSONString(loginUserBean), applicationProperties.getRedisExpire()); + Map<String, Object> authInfo = new HashMap<>(); + // 开启debug模式,则将加密后的token返回 + if (applicationProperties.isDebug()) { + authInfo.put("token", token); + authInfo.put("rsaToken", generateAsaToken(token)); + authInfo.put("user", loginUserBean); + } else { + authInfo.put("token", token); + authInfo.put("user", loginUserBean); + } return Result.ok("success", authInfo); } + + public String generateAsaToken(String token) { + RSA rsa = new RSA(null, securityProperties.getPublicKey()); + return rsa.encryptBase64(token + "_" +System.currentTimeMillis(), KeyType.PublicKey); + } + + @ApiOperation(value = "app注册接口", notes = "app注册接口,验证码必须输入可默认为123456") + @PostMapping(value = "/register") + public Result register(@RequestBody @Validated RegisterDto registerDto) { + return memberservice.register(registerDto); + } + } -- Gitblit v1.9.1