From 93fe0b66e85e95e3a7e77a28504d6d289b6906b9 Mon Sep 17 00:00:00 2001 From: kaiyu <404897439@qq.com> Date: Fri, 08 Oct 2021 13:11:22 +0800 Subject: [PATCH] screen-manage screen-api 更改拦截器逻辑,记录token无效的请求IP以及URL。 manage记录到数据库日志中 api记录在日志文件中 --- screen-api/src/main/java/com/moral/api/service/impl/UserServiceImpl.java | 145 +++++++++++++++++++++++++++-------------------- 1 files changed, 83 insertions(+), 62 deletions(-) diff --git a/screen-api/src/main/java/com/moral/api/service/impl/UserServiceImpl.java b/screen-api/src/main/java/com/moral/api/service/impl/UserServiceImpl.java index 6ccef8c..161de75 100644 --- a/screen-api/src/main/java/com/moral/api/service/impl/UserServiceImpl.java +++ b/screen-api/src/main/java/com/moral/api/service/impl/UserServiceImpl.java @@ -1,5 +1,14 @@ package com.moral.api.service.impl; +import lombok.extern.slf4j.Slf4j; +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.beans.factory.annotation.Value; +import org.springframework.stereotype.Service; +import org.springframework.transaction.annotation.Transactional; +import org.springframework.util.ObjectUtils; +import org.springframework.web.context.request.RequestContextHolder; +import org.springframework.web.context.request.ServletRequestAttributes; + import java.util.ArrayList; import java.util.Comparator; import java.util.Date; @@ -9,13 +18,6 @@ import java.util.Map; import java.util.Objects; import java.util.stream.Collectors; - -import org.springframework.beans.factory.annotation.Autowired; -import org.springframework.beans.factory.annotation.Value; -import org.springframework.stereotype.Service; -import org.springframework.transaction.annotation.Transactional; -import org.springframework.web.context.request.RequestContextHolder; -import org.springframework.web.context.request.ServletRequestAttributes; import javax.servlet.http.HttpServletRequest; @@ -30,7 +32,6 @@ import com.moral.api.entity.Organization; import com.moral.api.entity.User; import com.moral.api.entity.UserGroup; - import com.moral.api.entity.UserLog; import com.moral.api.mapper.MenuMapper; import com.moral.api.mapper.UserGroupMapper; @@ -58,6 +59,7 @@ * @since 2021-03-09 */ @Service +@Slf4j public class UserServiceImpl extends ServiceImpl<UserMapper, User> implements UserService { @Autowired @@ -72,9 +74,11 @@ @Autowired private UserLogMapper userLogMapper; + @Autowired + private OperationLogUtils operationLogUtils; + @Value("${AES.KEY}") private String AESKey; - @Override public UserBO selectUserInfo(Map<String, Object> parameters) { @@ -135,14 +139,14 @@ userInfo.put("organization", orgInfo); //��������������� - List<Map<String, Object>> groups = new ArrayList<>(); - for (Group group : userBo.getGroups()) { - HashMap<String, Object> groupMap = new LinkedHashMap<>(); + Group group = userBo.getGroup(); + Map<String, Object> groupMap = new LinkedHashMap<>(); + userInfo.put("group", groupMap); + if (group != null) { groupMap.put("id", group.getId()); groupMap.put("groupName", group.getGroupName()); - groups.add(groupMap); + userInfo.put("group", groupMap); } - userInfo.put("groups", groups); Map<String, Object> map = new HashMap<>(); map.put("userId", userBo.getId()); @@ -151,18 +155,17 @@ try { //������token������������redis String token = TokenUtils.getToken(userBo.getId().toString(), userInfo); - Map<String, Object> data = new HashMap<>(); - data.put("token", token); - data.put("user", userInfo); - result.put("data", data); + result.put("token", token); } catch (Exception e) { log.error("token���������������" + e.getMessage()); result.put("code", ResponseCodeEnum.TOKEN_CREATE_ERROR.getCode()); result.put("msg", ResponseCodeEnum.TOKEN_CREATE_ERROR.getMsg()); + return result; } //������ HttpServletRequest request = ((ServletRequestAttributes) Objects.requireNonNull(RequestContextHolder.getRequestAttributes())).getRequest(); UserLog userLog = new UserLog(); + userLog.setType(Constants.LOGIN_OPERTATE_TYPE); userLog.setIp(WebUtils.getIpAddr(request)); userLog.setOperateId(userBo.getId()); userLog.setOrganizationId(userBo.getOrganizationId()); @@ -172,12 +175,19 @@ } @Override + public Map<String, Object> getCurrentUserInfo() { + Map<String, Object> userInfo = (Map<String, Object>) TokenUtils.getUserInfo(); + return userInfo; + } + + @Override public Map<String, Object> getMenus(Map<String, Object> parameters) { List<Menu> allMenus; if (parameters.containsKey("userId")) { allMenus = menuMapper.selectUserMenu(Integer.parseInt(parameters.get("userId").toString())); } else { allMenus = menuMapper.selectOrganizationMenu(Integer.parseInt(parameters.get("orgId").toString())); + allMenus.removeIf(m -> "������������".equals(m.getName())); } Map<String, Object> resultMap = new LinkedHashMap<>(); @@ -192,10 +202,10 @@ oneMenu.forEach(o -> { Map<String, Object> menuMap = new LinkedHashMap<>(); menuMap.put("id", o.getId()); - menuMap.put("name", o.getName()); + menuMap.put("label", o.getName()); menuMap.put("url", o.getUrl()); menuMap.put("icon", o.getIcon()); - menuMap.put("child", getMenusByRecursion(o, allMenus)); + menuMap.put("children", getMenusByRecursion(o, allMenus)); newList.add(menuMap); }); resultMap.put("menus", newList); @@ -216,11 +226,11 @@ nextLevelMenus.forEach(o -> { Map<String, Object> menuMap = new LinkedHashMap<>(); menuMap.put("id", o.getId()); - menuMap.put("name", o.getName()); + menuMap.put("label", o.getName()); menuMap.put("url", o.getUrl()); menuMap.put("icon", o.getIcon()); //��������������� - menuMap.put("child", getMenusByRecursion(o, menus)); + menuMap.put("children", getMenusByRecursion(o, menus)); list.add(menuMap); }); } @@ -229,31 +239,33 @@ @Override @Transactional - public Map<String, Object> addUser(User user, String token) { + public Map<String, Object> addUser(User user) { + Map<String, Object> result = new HashMap<>(); - Map<String, Object> currentUserInfo = (Map<String, Object>) TokenUtils.getUserInfoByToken(token); + Map<String, Object> currentUserInfo = (Map<String, Object>) TokenUtils.getUserInfo(); QueryWrapper<User> queryWrapper = new QueryWrapper<>(); queryWrapper.eq("account", user.getAccount()).eq("is_delete", Constants.NOT_DELETE); //������������������������ - if (user.selectOne(queryWrapper) != null) { + if (user.selectCount(queryWrapper) > 0) { result.put("code", ResponseCodeEnum.ACCOUNT_EXIST.getCode()); result.put("msg", ResponseCodeEnum.ACCOUNT_EXIST.getMsg()); return result; } - //������������������ + //������������ if (!RegexUtils.checkAccount(user.getAccount())) { result.put("code", ResponseCodeEnum.ACCOUNT_INVALID.getCode()); result.put("msg", ResponseCodeEnum.ACCOUNT_INVALID.getMsg()); return result; } - //������������������ - if (user.getEmail() != null && !RegexUtils.checkEmail(user.getEmail())) { + + //������������ + if (!ObjectUtils.isEmpty(user.getEmail()) && !RegexUtils.checkEmail(user.getEmail())) { result.put("code", ResponseCodeEnum.EMAIL_INVALID.getCode()); result.put("msg", ResponseCodeEnum.EMAIL_INVALID.getMsg()); return result; } - //������������������ + //������������ String password = user.getPassword(); //������������ password = AESUtils.decrypt(password, AESKey); @@ -262,8 +274,8 @@ result.put("msg", ResponseCodeEnum.PASSWORD_INVALID.getMsg()); return result; } - //��������������������� - if (user.getMobile() != null && !RegexUtils.checkMobile(user.getMobile())) { + //��������������� + if (!ObjectUtils.isEmpty(user.getMobile()) && !RegexUtils.checkMobile(user.getMobile())) { result.put("code", ResponseCodeEnum.MOBILE_INVALID.getCode()); result.put("msg", ResponseCodeEnum.MOBILE_INVALID.getMsg()); return result; @@ -291,56 +303,66 @@ } userMapper.insert(user); //������ - HttpServletRequest request = ((ServletRequestAttributes) Objects.requireNonNull(RequestContextHolder.getRequestAttributes())).getRequest(); String content = "������������������" + user.getAccount(); - OperationLogUtils.insertLog(request, content); + operationLogUtils.insertLog(content, Constants.INSERT_OPERATE_TYPE); return result; } @Override @Transactional - public void deleteUser(User user) { - String userId = user.getId().toString(); + public void deleteUser(Integer userId) { + User user = userMapper.selectById(userId); //������������user - user.setIsDelete(Constants.DELETE); - userMapper.updateById(user); - //������������user_group + UpdateWrapper<User> updateWrapper = new UpdateWrapper<>(); + updateWrapper.eq("id", userId).set("is_delete", Constants.DELETE); + userMapper.update(null, updateWrapper); + //������user_group UpdateWrapper<UserGroup> deleteWrapper = new UpdateWrapper<>(); - deleteWrapper.set("is_delete", Constants.DELETE).eq("user_id", userId); - //������redis - if (TokenUtils.hHasKey(userId)) { - String token = TokenUtils.hget(userId).toString(); - TokenUtils.destoryToken(userId, token); + deleteWrapper.eq("user_id", userId); + userGroupMapper.delete(deleteWrapper); + //������redis + if (TokenUtils.hHasKey(userId.toString())) { + String token = TokenUtils.hget(userId.toString()).toString(); + TokenUtils.destoryToken(userId.toString(), token); } - userGroupMapper.update(null, deleteWrapper); //������ - HttpServletRequest request = ((ServletRequestAttributes) Objects.requireNonNull(RequestContextHolder.getRequestAttributes())).getRequest(); String content = "������������������" + user.getAccount(); - OperationLogUtils.insertLog(request, content); + operationLogUtils.insertLog(content, Constants.DELETE_OPERATE_TYPE); } @Override @Transactional - public Map<String, Object> updateUser(User user, String token) { + public Map<String, Object> updateUser(User user) { + Map<String, Object> result = new HashMap<>(); //��������������� Map<String, Object> update = JSONObject.parseObject(JSON.toJSONString(user), Map.class); - Map<String, Object> result = new HashMap<>(); - Map<String, Object> currentUserInfo = (Map<String, Object>) TokenUtils.getUserInfoByToken(token); + Map<String, Object> currentUserInfo = (Map<String, Object>) TokenUtils.getUserInfo(); User beforeUser = userMapper.selectById(user.getId()); Map<String, Object> before = JSONObject.parseObject(JSON.toJSONString(beforeUser), Map.class); - String account = beforeUser.getAccount(); + /*String account = beforeUser.getAccount(); //account������������ - user.setAccount(account); + user.setAccount(account);*/ + System.out.println(user); + if (!ObjectUtils.isEmpty(user.getAccount())) { + QueryWrapper<User> queryWrapper = new QueryWrapper<>(); + queryWrapper.eq("is_delete", Constants.NOT_DELETE).eq("account", user.getAccount()); + if (userMapper.selectCount(queryWrapper) > 0) { + result.put("code", ResponseCodeEnum.ACCOUNT_EXIST.getCode()); + result.put("msg", ResponseCodeEnum.ACCOUNT_EXIST.getMsg()); + return result; + } + } //������������ - if (user.getEmail() != null && !RegexUtils.checkEmail(user.getEmail())) { + if (!ObjectUtils.isEmpty(user.getEmail()) && !RegexUtils.checkEmail(user.getEmail())) { result.put("code", ResponseCodeEnum.EMAIL_INVALID.getCode()); result.put("msg", ResponseCodeEnum.EMAIL_INVALID.getMsg()); return result; } //������������ String password = user.getPassword(); - if (password != null) { + System.out.println("password==" + password); + if (!ObjectUtils.isEmpty(password)) { //������������ password = AESUtils.decrypt(password, AESKey); if (!RegexUtils.checkPassword(password)) { @@ -351,7 +373,7 @@ } //��������������������� - if (user.getMobile() != null && !RegexUtils.checkMobile(user.getMobile())) { + if (!ObjectUtils.isEmpty(user.getMobile()) && !RegexUtils.checkMobile(user.getMobile())) { result.put("code", ResponseCodeEnum.MOBILE_INVALID.getCode()); result.put("msg", ResponseCodeEnum.MOBILE_INVALID.getMsg()); return result; @@ -386,7 +408,6 @@ userMapper.updateById(user); //������ - HttpServletRequest request = ((ServletRequestAttributes) Objects.requireNonNull(RequestContextHolder.getRequestAttributes())).getRequest(); StringBuilder content = new StringBuilder("������������������" + user.getAccount() + "->"); for (String key : update.keySet()) { Object afterValue = update.get(key); @@ -396,18 +417,19 @@ content.append(key).append(":").append(beforeValue).append("=>").append(afterValue).append(";"); } } - OperationLogUtils.insertLog(request, content.toString()); - + HttpServletRequest request = ((ServletRequestAttributes) Objects.requireNonNull(RequestContextHolder.getRequestAttributes())).getRequest(); + operationLogUtils.insertLog(content.toString(), Constants.UPDATE_OPERATE_TYPE); return result; } @Override public Page<User> selectUsers(Map<String, Object> parameters) { - Map<String, Object> currentUserInfo = (Map<String, Object>) TokenUtils.getUserInfoByToken(parameters.get("token").toString()); + Map<String, Object> currentUserInfo = (Map<String, Object>) TokenUtils.getUserInfo(); Map<String, Object> orgInfo = (Map<String, Object>) currentUserInfo.get("organization"); QueryWrapper<User> queryWrapper = new QueryWrapper<>(); queryWrapper.eq("organization_id", orgInfo.get("id")) - .eq("is_delete", Constants.NOT_DELETE); + .eq("is_delete", Constants.NOT_DELETE) + .eq("is_admin", false); Object order = parameters.get("order"); Object orderType = parameters.get("orderType"); Object account = parameters.get("account"); @@ -432,8 +454,8 @@ queryWrapper.like("wechat", wechat); } - Integer page = (Integer) parameters.get("page"); - Integer size = (Integer) parameters.get("size"); + int page = Integer.parseInt(parameters.get("page").toString()); + int size = Integer.parseInt(parameters.get("size").toString()); Page<User> pageData = new Page<>(page, size); //������������,������create_time������ if (order != null && orderType != null) { @@ -446,7 +468,6 @@ queryWrapper.orderByDesc("create_time"); } userMapper.selectPage(pageData, queryWrapper); - return pageData; } -- Gitblit v1.8.0