shiro优化
alwaysfrin
7 years ago
parent
537e5791c5
commit
d9ea77507f
@ -1,15 +0,0 @@
|
||||
package cn.estsh.i3plus.core.api.token;
|
||||
|
||||
/**
|
||||
* @Description : 管理员token
|
||||
* @Reference :
|
||||
* @Author : alwaysfrin
|
||||
* @CreateDate : 2018-10-13 18:00
|
||||
* @Modify:
|
||||
**/
|
||||
public class AdminToken extends BaseToken {
|
||||
|
||||
public AdminToken(String loginName, String loginPwd, String languageCode) {
|
||||
super(loginName, loginPwd, languageCode);
|
||||
}
|
||||
}
|
||||
@ -1,59 +0,0 @@
|
||||
package cn.estsh.i3plus.core.api.token;
|
||||
|
||||
import org.apache.shiro.authc.AuthenticationToken;
|
||||
|
||||
/**
|
||||
* @Description : 基本验证类
|
||||
* @Reference :
|
||||
* @Author : alwaysfrin
|
||||
* @CreateDate : 2018-10-13 18:00
|
||||
* @Modify:
|
||||
**/
|
||||
public class BaseToken implements AuthenticationToken {
|
||||
|
||||
private String loginName;
|
||||
private String loginPwd;
|
||||
private String languageCode;
|
||||
|
||||
public BaseToken(String loginName, String loginPwd, String languageCode) {
|
||||
this.loginName = loginName;
|
||||
this.loginPwd = loginPwd;
|
||||
this.languageCode = languageCode;
|
||||
}
|
||||
|
||||
//身份
|
||||
@Override
|
||||
public Object getPrincipal() {
|
||||
return this.loginName;
|
||||
}
|
||||
|
||||
//验证
|
||||
@Override
|
||||
public Object getCredentials() {
|
||||
return this.loginPwd;
|
||||
}
|
||||
|
||||
public String getLoginName() {
|
||||
return loginName;
|
||||
}
|
||||
|
||||
public void setLoginName(String loginName) {
|
||||
this.loginName = loginName;
|
||||
}
|
||||
|
||||
public String getLoginPwd() {
|
||||
return loginPwd;
|
||||
}
|
||||
|
||||
public void setLoginPwd(String loginPwd) {
|
||||
this.loginPwd = loginPwd;
|
||||
}
|
||||
|
||||
public String getLanguageCode() {
|
||||
return languageCode;
|
||||
}
|
||||
|
||||
public void setLanguageCode(String languageCode) {
|
||||
this.languageCode = languageCode;
|
||||
}
|
||||
}
|
||||
@ -1,15 +0,0 @@
|
||||
package cn.estsh.i3plus.core.api.token;
|
||||
|
||||
/**
|
||||
* @Description : 超级管理员token
|
||||
* @Reference :
|
||||
* @Author : alwaysfrin
|
||||
* @CreateDate : 2018-10-13 18:00
|
||||
* @Modify:
|
||||
**/
|
||||
public class SaAdminToken extends BaseToken {
|
||||
|
||||
public SaAdminToken(String loginName, String loginPwd, String languageCode) {
|
||||
super(loginName, loginPwd, languageCode);
|
||||
}
|
||||
}
|
||||
@ -1,15 +0,0 @@
|
||||
package cn.estsh.i3plus.core.api.token;
|
||||
|
||||
/**
|
||||
* @Description : 普通用户token
|
||||
* @Reference :
|
||||
* @Author : alwaysfrin
|
||||
* @CreateDate : 2018-10-13 18:00
|
||||
* @Modify:
|
||||
**/
|
||||
public class UserToken extends BaseToken {
|
||||
|
||||
public UserToken(String loginName, String loginPwd, String languageCode) {
|
||||
super(loginName, loginPwd, languageCode);
|
||||
}
|
||||
}
|
||||
@ -1,71 +0,0 @@
|
||||
package cn.estsh.i3plus.core.apiservice.auth.filter;
|
||||
|
||||
import cn.estsh.i3plus.core.apiservice.auth.AuthUtil;
|
||||
import cn.estsh.i3plus.core.apiservice.configuration.ShiroAuthConfiguration;
|
||||
import cn.estsh.i3plus.platform.common.enumutil.CommonEnumUtil;
|
||||
import cn.estsh.i3plus.platform.common.util.CommonConstWords;
|
||||
import cn.estsh.i3plus.pojo.model.busi.ResultBean;
|
||||
import cn.estsh.i3plus.pojo.platform.bean.SessionUser;
|
||||
import com.alibaba.fastjson.JSONObject;
|
||||
import org.apache.shiro.web.filter.AccessControlFilter;
|
||||
import org.slf4j.Logger;
|
||||
import org.slf4j.LoggerFactory;
|
||||
|
||||
import javax.servlet.ServletRequest;
|
||||
import javax.servlet.ServletResponse;
|
||||
import javax.servlet.http.HttpServletResponse;
|
||||
import java.io.IOException;
|
||||
import java.io.PrintWriter;
|
||||
|
||||
/**
|
||||
* @Description : 管理员授权路径过滤
|
||||
* @Reference :
|
||||
* @Author : alwaysfrin
|
||||
* @CreateDate : 2018-10-13 19:17
|
||||
* @Modify:
|
||||
**/
|
||||
public class AdminFilter extends AccessControlFilter {
|
||||
public static final Logger LOGGER = LoggerFactory.getLogger(AdminFilter.class);
|
||||
|
||||
@Override
|
||||
protected boolean isAccessAllowed(ServletRequest request, ServletResponse response, Object mappedValue) throws Exception {
|
||||
SessionUser sessionUser = AuthUtil.getSessionUser();
|
||||
if(sessionUser != null && CommonEnumUtil.USER_TYPE.ADMIN.getCode().equals(sessionUser.getUserType())){
|
||||
return true;
|
||||
}else{
|
||||
return false;
|
||||
}
|
||||
}
|
||||
|
||||
@Override
|
||||
protected boolean onAccessDenied(ServletRequest request, ServletResponse response) throws Exception {
|
||||
if (response instanceof HttpServletResponse) {
|
||||
HttpServletResponse httpServletResponse = (HttpServletResponse)response;
|
||||
|
||||
httpServletResponse.setHeader("Content-Type", "application/json;charset=UTF-8");
|
||||
httpServletResponse.setContentType("application/json;charset=UTF-8");
|
||||
PrintWriter out = null;
|
||||
|
||||
try {
|
||||
ResultBean result = new ResultBean();
|
||||
result.setSuccess(false);
|
||||
result.setErrorMsg("未登录");
|
||||
result.setCode("need-login");
|
||||
result.setUrl(ShiroAuthConfiguration.ADMIN_LOGIN_URI);
|
||||
|
||||
out = response.getWriter();
|
||||
out.print(JSONObject.toJSONString(result));
|
||||
out.flush();
|
||||
} catch (IOException var11) {
|
||||
LOGGER.error(var11.getMessage(), var11);
|
||||
} finally {
|
||||
if (out != null) {
|
||||
out.close();
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
return false;
|
||||
}
|
||||
}
|
||||
@ -1,71 +0,0 @@
|
||||
package cn.estsh.i3plus.core.apiservice.auth.filter;
|
||||
|
||||
import cn.estsh.i3plus.core.apiservice.auth.AuthUtil;
|
||||
import cn.estsh.i3plus.core.apiservice.configuration.ShiroAuthConfiguration;
|
||||
import cn.estsh.i3plus.platform.common.enumutil.CommonEnumUtil;
|
||||
import cn.estsh.i3plus.platform.common.util.CommonConstWords;
|
||||
import cn.estsh.i3plus.pojo.model.busi.ResultBean;
|
||||
import cn.estsh.i3plus.pojo.platform.bean.SessionUser;
|
||||
import com.alibaba.fastjson.JSONObject;
|
||||
import org.apache.shiro.web.filter.AccessControlFilter;
|
||||
import org.slf4j.Logger;
|
||||
import org.slf4j.LoggerFactory;
|
||||
|
||||
import javax.servlet.ServletRequest;
|
||||
import javax.servlet.ServletResponse;
|
||||
import javax.servlet.http.HttpServletResponse;
|
||||
import java.io.IOException;
|
||||
import java.io.PrintWriter;
|
||||
|
||||
/**
|
||||
* @Description : 超级管理员授权路径过滤
|
||||
* @Reference :
|
||||
* @Author : alwaysfrin
|
||||
* @CreateDate : 2018-10-13 19:17
|
||||
* @Modify:
|
||||
**/
|
||||
public class SaAdminFilter extends AccessControlFilter {
|
||||
public static final Logger LOGGER = LoggerFactory.getLogger(SaAdminFilter.class);
|
||||
|
||||
@Override
|
||||
protected boolean isAccessAllowed(ServletRequest request, ServletResponse response, Object mappedValue) throws Exception {
|
||||
SessionUser sessionUser = AuthUtil.getSessionUser();
|
||||
if(sessionUser != null && CommonEnumUtil.USER_TYPE.SA.getCode().equals(sessionUser.getUserType())){
|
||||
return true;
|
||||
}else{
|
||||
return false;
|
||||
}
|
||||
}
|
||||
|
||||
@Override
|
||||
protected boolean onAccessDenied(ServletRequest request, ServletResponse response) throws Exception {
|
||||
if (response instanceof HttpServletResponse) {
|
||||
HttpServletResponse httpServletResponse = (HttpServletResponse)response;
|
||||
|
||||
httpServletResponse.setHeader("Content-Type", "application/json;charset=UTF-8");
|
||||
httpServletResponse.setContentType("application/json;charset=UTF-8");
|
||||
PrintWriter out = null;
|
||||
|
||||
try {
|
||||
ResultBean result = new ResultBean();
|
||||
result.setSuccess(false);
|
||||
result.setErrorMsg("未登录");
|
||||
result.setCode("need-login");
|
||||
result.setUrl(ShiroAuthConfiguration.SAADMIN_LOGIN_URI);
|
||||
|
||||
out = response.getWriter();
|
||||
out.print(JSONObject.toJSONString(result));
|
||||
out.flush();
|
||||
} catch (IOException var11) {
|
||||
LOGGER.error(var11.getMessage(), var11);
|
||||
} finally {
|
||||
if (out != null) {
|
||||
out.close();
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
return false;
|
||||
}
|
||||
}
|
||||
@ -1,75 +0,0 @@
|
||||
package cn.estsh.i3plus.core.apiservice.auth.filter;
|
||||
|
||||
import cn.estsh.i3plus.core.apiservice.auth.AuthUtil;
|
||||
import cn.estsh.i3plus.core.apiservice.configuration.ShiroAuthConfiguration;
|
||||
import cn.estsh.i3plus.platform.common.enumutil.CommonEnumUtil;
|
||||
import cn.estsh.i3plus.platform.common.util.CommonConstWords;
|
||||
import cn.estsh.i3plus.pojo.model.busi.ResultBean;
|
||||
import cn.estsh.i3plus.pojo.platform.bean.SessionUser;
|
||||
import com.alibaba.fastjson.JSONObject;
|
||||
import org.apache.shiro.web.filter.AccessControlFilter;
|
||||
import org.slf4j.Logger;
|
||||
import org.slf4j.LoggerFactory;
|
||||
|
||||
import javax.servlet.ServletRequest;
|
||||
import javax.servlet.ServletResponse;
|
||||
import javax.servlet.http.HttpServletRequest;
|
||||
import javax.servlet.http.HttpServletResponse;
|
||||
import java.io.IOException;
|
||||
import java.io.PrintWriter;
|
||||
|
||||
/**
|
||||
* @Description : 用户授权路径过滤
|
||||
* @Reference :
|
||||
* @Author : alwaysfrin
|
||||
* @CreateDate : 2018-10-13 19:17
|
||||
* @Modify:
|
||||
**/
|
||||
public class UserFilter extends AccessControlFilter {
|
||||
public static final Logger LOGGER = LoggerFactory.getLogger(UserFilter.class);
|
||||
|
||||
@Override
|
||||
protected boolean isAccessAllowed(ServletRequest servletRequest, ServletResponse response, Object mappedValue) throws Exception {
|
||||
SessionUser sessionUser = AuthUtil.getSessionUser();
|
||||
if (sessionUser != null) {
|
||||
LOGGER.info("===用户已登陆==={}",sessionUser);
|
||||
return true;
|
||||
} else {
|
||||
LOGGER.info("===用户未登陆==={}",sessionUser);
|
||||
return false;
|
||||
}
|
||||
}
|
||||
|
||||
@Override
|
||||
protected boolean onAccessDenied(ServletRequest request, ServletResponse response) throws Exception {
|
||||
if (response instanceof HttpServletResponse) {
|
||||
LOGGER.info("===请求拒绝===请求路径：{}",((HttpServletRequest)request).getRequestURL());
|
||||
HttpServletResponse httpServletResponse = (HttpServletResponse)response;
|
||||
|
||||
httpServletResponse.setHeader("Content-Type", "application/json;charset=UTF-8");
|
||||
httpServletResponse.setContentType("application/json;charset=UTF-8");
|
||||
PrintWriter out = null;
|
||||
|
||||
try {
|
||||
ResultBean result = new ResultBean();
|
||||
result.setSuccess(false);
|
||||
result.setErrorMsg("未登录");
|
||||
result.setCode("need-login");
|
||||
result.setUrl(ShiroAuthConfiguration.USER_LOGIN_URI);
|
||||
|
||||
out = response.getWriter();
|
||||
out.print(JSONObject.toJSONString(result));
|
||||
out.flush();
|
||||
} catch (IOException var11) {
|
||||
LOGGER.error(var11.getMessage(), var11);
|
||||
} finally {
|
||||
if (out != null) {
|
||||
out.close();
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
return false;
|
||||
}
|
||||
}
|
||||
@ -1,35 +1,31 @@
|
||||
package cn.estsh.i3plus.core.apiservice.serviceimpl.busi;
|
||||
package cn.estsh.i3plus.core.apiservice.serviceimpl.base;
|
||||
|
||||
import cn.estsh.i3plus.core.api.iservice.busi.ISystemUserService;
|
||||
import cn.estsh.i3plus.core.api.token.AdminToken;
|
||||
import cn.estsh.i3plus.core.api.token.SaAdminToken;
|
||||
import cn.estsh.i3plus.core.api.token.UserToken;
|
||||
import cn.estsh.i3plus.core.apiservice.auth.AuthUtil;
|
||||
import cn.estsh.i3plus.core.apiservice.controller.DemoAuthController;
|
||||
import cn.estsh.i3plus.core.api.iservice.base.ISystemLoginService;
|
||||
import cn.estsh.i3plus.platform.common.enumutil.CommonEnumUtil;
|
||||
import cn.estsh.i3plus.pojo.base.shirotoken.AdminToken;
|
||||
import cn.estsh.i3plus.pojo.base.shirotoken.SaAdminToken;
|
||||
import cn.estsh.i3plus.pojo.base.shirotoken.UserToken;
|
||||
import cn.estsh.i3plus.pojo.platform.bean.SessionUser;
|
||||
import cn.estsh.i3plus.pojo.platform.bean.SysUser;
|
||||
import cn.estsh.i3plus.pojo.platform.repository.SysUserRepository;
|
||||
import cn.estsh.impp.framework.boot.auth.AuthUtil;
|
||||
import cn.estsh.impp.framework.boot.exception.ImppExceptionBuilder;
|
||||
import cn.estsh.impp.framework.boot.exception.ImppExceptionEnum;
|
||||
import org.apache.commons.lang3.StringUtils;
|
||||
import org.slf4j.Logger;
|
||||
import org.slf4j.LoggerFactory;
|
||||
import org.springframework.beans.factory.annotation.Autowired;
|
||||
import org.springframework.stereotype.Service;
|
||||
|
||||
import javax.websocket.Session;
|
||||
|
||||
/**
|
||||
* @Description : 用户系统方法
|
||||
* @Description : 用户登陆方法
|
||||
* @Reference :
|
||||
* @Author : alwaysfrin
|
||||
* @CreateDate : 2018-10-13 17:18
|
||||
* @Modify:
|
||||
**/
|
||||
@Service
|
||||
public class SystemUserService implements ISystemUserService {
|
||||
private static final Logger LOGGER = LoggerFactory.getLogger(SystemUserService.class);
|
||||
public class SystemLoginService implements ISystemLoginService {
|
||||
private static final Logger LOGGER = LoggerFactory.getLogger(SystemLoginService.class);
|
||||
|
||||
@Autowired
|
||||
private SysUserRepository sysUserRDao;
|
||||
Loading…
Reference in New Issue