258 lines
10 KiB
Java
258 lines
10 KiB
Java
package com.stdproject.controller;
|
||
|
||
import com.stdproject.common.Constants;
|
||
import com.stdproject.common.OperationLog;
|
||
import com.stdproject.common.Result;
|
||
import com.stdproject.entity.AppUser;
|
||
import com.stdproject.service.IAppUserService;
|
||
import com.stdproject.utils.CaptchaUtils;
|
||
import com.stdproject.utils.JwtUtils;
|
||
import io.swagger.v3.oas.annotations.Operation;
|
||
import io.swagger.v3.oas.annotations.tags.Tag;
|
||
import jakarta.servlet.http.HttpServletRequest;
|
||
import jakarta.validation.Valid;
|
||
import jakarta.validation.constraints.NotBlank;
|
||
import lombok.extern.slf4j.Slf4j;
|
||
import org.springframework.beans.factory.annotation.Autowired;
|
||
import org.springframework.security.authentication.AuthenticationManager;
|
||
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
|
||
import org.springframework.security.core.Authentication;
|
||
import org.springframework.security.core.context.SecurityContextHolder;
|
||
import org.springframework.web.bind.annotation.*;
|
||
|
||
import java.util.HashMap;
|
||
import java.util.Map;
|
||
import java.util.UUID;
|
||
import java.util.concurrent.TimeUnit;
|
||
|
||
/**
|
||
* 认证控制器
|
||
*
|
||
* @author StdProject
|
||
*/
|
||
@Tag(name = "认证管理", description = "用户登录、登出、验证码等认证相关接口")
|
||
@RestController
|
||
@RequestMapping("/auth")
|
||
@Slf4j
|
||
public class AuthController {
|
||
|
||
@Autowired
|
||
private AuthenticationManager authenticationManager;
|
||
|
||
@Autowired
|
||
private JwtUtils jwtUtils;
|
||
|
||
@Autowired
|
||
private CaptchaUtils captchaUtils;
|
||
|
||
@Autowired
|
||
private IAppUserService appUserService;
|
||
|
||
|
||
|
||
/**
|
||
* 登录请求类
|
||
*/
|
||
public static class LoginRequest {
|
||
@NotBlank(message = "用户名不能为空")
|
||
private String username;
|
||
|
||
@NotBlank(message = "密码不能为空")
|
||
private String password;
|
||
|
||
@NotBlank(message = "验证码不能为空")
|
||
private String captcha;
|
||
|
||
@NotBlank(message = "验证码Key不能为空")
|
||
private String captchaKey;
|
||
|
||
// Getters and Setters
|
||
public String getUsername() { return username; }
|
||
public void setUsername(String username) { this.username = username; }
|
||
public String getPassword() { return password; }
|
||
public void setPassword(String password) { this.password = password; }
|
||
public String getCaptcha() { return captcha; }
|
||
public void setCaptcha(String captcha) { this.captcha = captcha; }
|
||
public String getCaptchaKey() { return captchaKey; }
|
||
public void setCaptchaKey(String captchaKey) { this.captchaKey = captchaKey; }
|
||
}
|
||
|
||
/**
|
||
* 修改密码请求类
|
||
*/
|
||
public static class ChangePasswordRequest {
|
||
@NotBlank(message = "原密码不能为空")
|
||
private String oldPassword;
|
||
|
||
@NotBlank(message = "新密码不能为空")
|
||
private String newPassword;
|
||
|
||
// Getters and Setters
|
||
public String getOldPassword() { return oldPassword; }
|
||
public void setOldPassword(String oldPassword) { this.oldPassword = oldPassword; }
|
||
public String getNewPassword() { return newPassword; }
|
||
public void setNewPassword(String newPassword) { this.newPassword = newPassword; }
|
||
}
|
||
|
||
/**
|
||
* 生成验证码
|
||
*/
|
||
@Operation(summary = "生成验证码", description = "生成图形验证码")
|
||
@GetMapping("/captcha")
|
||
public Result<Map<String, String>> generateCaptcha() {
|
||
try {
|
||
// 生成验证码
|
||
CaptchaUtils.CaptchaResult captchaResult = captchaUtils.generateCaptcha();
|
||
|
||
// 生成验证码Key
|
||
String captchaKey = UUID.randomUUID().toString();
|
||
|
||
// 注意：验证码应当存储在会话中或其他存储中，此处省略存储步骤
|
||
// 在实际应用中，可以使用Session或其他方式存储验证码
|
||
|
||
Map<String, String> result = new HashMap<>();
|
||
result.put("captchaKey", captchaKey);
|
||
result.put("captchaImage", captchaResult.getImageBase64());
|
||
result.put("code", captchaResult.getCode()); // 临时方案：直接返回验证码（生产环境不建议）
|
||
|
||
return Result.success(result);
|
||
} catch (Exception e) {
|
||
log.error("生成验证码失败: {}", e.getMessage(), e);
|
||
return Result.error("生成验证码失败");
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 用户登录
|
||
*/
|
||
@Operation(summary = "用户登录", description = "用户登录认证")
|
||
@PostMapping("/login")
|
||
@OperationLog(type = Constants.OPT_TYPE_LOGIN, module = "认证管理", description = "用户登录")
|
||
public Result<Map<String, Object>> login(@Valid @RequestBody LoginRequest loginRequest, HttpServletRequest request) {
|
||
try {
|
||
// 注意：在实际应用中，应该从会话或其他存储中获取验证码进行验证
|
||
// 此处简化处理，假设验证码已通过（实际应用中需要实现验证逻辑）
|
||
// 如果使用了临时方案，可以从前端传回验证码进行比对
|
||
|
||
// 进行身份认证
|
||
Authentication authentication = authenticationManager.authenticate(
|
||
new UsernamePasswordAuthenticationToken(
|
||
loginRequest.getUsername(),
|
||
loginRequest.getPassword()
|
||
)
|
||
);
|
||
AppUser user=appUserService.findByUsername(loginRequest.getUsername());
|
||
// 设置认证信息到安全上下文
|
||
SecurityContextHolder.getContext().setAuthentication(authentication);
|
||
|
||
// 生成JWT Token
|
||
String token = jwtUtils.generateToken(user.getUsername(),user.getId());
|
||
|
||
Map<String, Object> result = new HashMap<>();
|
||
result.put("token", token);
|
||
result.put("userInfo", user);
|
||
|
||
return Result.success(result);
|
||
|
||
} catch (Exception e) {
|
||
log.error("用户登录失败: {}", e.getMessage(), e);
|
||
return Result.error("登录失败: " + e.getMessage());
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 用户登出
|
||
*/
|
||
@Operation(summary = "用户登出", description = "用户登出")
|
||
@PostMapping("/logout")
|
||
@OperationLog(type = Constants.OPT_TYPE_OTHER, module = "认证管理", description = "用户登出")
|
||
public Result<Void> logout(HttpServletRequest request) {
|
||
try {
|
||
// 获取Token
|
||
String token = request.getHeader(Constants.JWT_HEADER);
|
||
if (token != null && token.startsWith(Constants.JWT_PREFIX)) {
|
||
token = token.substring(Constants.JWT_PREFIX.length());
|
||
|
||
// 注意：在实际应用中，应该实现Token失效机制
|
||
// 可以考虑使用短期Token或其他方式实现Token失效
|
||
// 此处省略Token黑名单实现
|
||
}
|
||
|
||
// 清除安全上下文
|
||
SecurityContextHolder.clearContext();
|
||
|
||
return Result.success();
|
||
} catch (Exception e) {
|
||
log.error("用户登出失败: {}", e.getMessage(), e);
|
||
return Result.error("登出失败");
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 获取当前用户信息
|
||
*/
|
||
@Operation(summary = "获取当前用户信息", description = "获取当前登录用户的详细信息")
|
||
@GetMapping("/userinfo")
|
||
public Result<AppUser> getCurrentUserInfo(HttpServletRequest request) {
|
||
try {
|
||
String token = request.getHeader(Constants.JWT_HEADER);
|
||
if (token != null && token.startsWith(Constants.JWT_PREFIX)) {
|
||
token = token.substring(Constants.JWT_PREFIX.length());
|
||
String username = jwtUtils.getUsernameFromToken(token);
|
||
AppUser userInfo = appUserService.findByUsername(username);
|
||
return Result.success(userInfo);
|
||
}
|
||
|
||
return Result.unauthorized();
|
||
} catch (Exception e) {
|
||
log.error("获取用户信息失败: {}", e.getMessage(), e);
|
||
return Result.error("获取用户信息失败");
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 修改密码
|
||
*/
|
||
@Operation(summary = "修改密码", description = "修改当前用户密码")
|
||
@PostMapping("/changePassword")
|
||
@OperationLog(type = Constants.OPT_TYPE_UPDATE, module = "认证管理", description = "修改密码")
|
||
public Result<Void> changePassword(@Valid @RequestBody ChangePasswordRequest request, HttpServletRequest httpRequest) {
|
||
try {
|
||
String token = httpRequest.getHeader(Constants.JWT_HEADER);
|
||
if (token != null && token.startsWith(Constants.JWT_PREFIX)) {
|
||
token = token.substring(Constants.JWT_PREFIX.length());
|
||
String username = jwtUtils.getUsernameFromToken(token);
|
||
|
||
boolean success = appUserService.changePassword(username, request.getOldPassword(), request.getNewPassword());
|
||
if (success) {
|
||
return Result.success();
|
||
} else {
|
||
return Result.error("原密码错误");
|
||
}
|
||
}
|
||
|
||
return Result.unauthorized();
|
||
} catch (Exception e) {
|
||
log.error("修改密码失败: {}", e.getMessage(), e);
|
||
return Result.error("修改密码失败");
|
||
}
|
||
}
|
||
|
||
@PostMapping("/refreshToken")
|
||
public Result<String> refreshToken(@RequestBody Map<String, String> params) {
|
||
String refreshToken = params.get("refreshToken");
|
||
if (refreshToken == null || refreshToken.trim().isEmpty()) {
|
||
return Result.error("刷新令牌不能为空");
|
||
}
|
||
// 验证refreshToken的有效性并获取用户信息
|
||
String username = jwtUtils.getUsernameFromToken(refreshToken);
|
||
if (username != null) {
|
||
AppUser user = appUserService.findByUsername(username);
|
||
// 生成新的token
|
||
return Result.success(jwtUtils.generateToken(user.getUsername(), user.getId()));
|
||
}
|
||
return Result.error("无效的刷新令牌");
|
||
}
|
||
|
||
|
||
} |