From 3f194e5b1985267b57e1829d442ec2369f554f81 Mon Sep 17 00:00:00 2001 From: huangqizhen Date: Wed, 4 Dec 2024 17:36:29 +0800 Subject: [PATCH] =?UTF-8?q?=E5=90=8E=E7=AB=AF=E6=A1=86=E6=9E=B6=E7=AC=AC?= =?UTF-8?q?=E4=BA=8C=E7=89=88=E6=8E=A5=E5=8F=A3?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../example/admin/controller/AdminController.java | 39 +++++ .../java/com/example/admin/mapper/AdminMapper.java | 57 +++++++ .../src/main/java/com/example/admin/mian/qwe.java | 12 ++ .../example/admin/service/AdminServiceImpl.java | 82 +++++++++ .../admin/service/UserDetailServiceImpl.java | 26 +++ demo/admin/src/main/resources/application.yml | 16 ++ demo/audit/pom.xml | 7 +- .../java/com/example/audit/AuditApplication.java | 3 +- .../example/audit/controller/AuditController.java | 1 + .../java/com/example/commons/Util/JWTUtil.java | 190 +++++++++++++++++++++ .../com/example/commons/domain/entity/Admin.java | 48 +++++- .../com/example/commons/domain/entity/Detail.java | 1 + .../java/com/example/commons/domain/vo/Result.java | 1 + .../example/commons/security/SecurityConfig.java | 144 ++++++++++++++++ .../com/example/commons/security/TokenFilter.java | 52 ++++++ .../com/example/commons/sevice/AdminService.java | 16 ++ .../example/commons/sevice/RechargeService.java | 2 + .../com/example/consume/ConsumeApplication.java | 2 + demo/pom.xml | 61 +++++-- demo/recharge/pom.xml | 1 + .../com/example/recharge/RechargeApplication.java | 3 +- .../recharge/controller/RechargeController.java | 1 + .../example/recharge/mapper/RechargeMapper.java | 4 + .../recharge/service/RechargeServiceImpl.java | 6 + .../java/com/example/fefund/FefundApplication.java | 2 + .../example/statistics/StatisticsApplication.java | 4 +- .../java/com/example/user/UserApplication.java | 2 + .../java/com/example/user/mapper/UserMapper.java | 4 + 28 files changed, 758 insertions(+), 29 deletions(-) create mode 100644 demo/admin/src/main/java/com/example/admin/controller/AdminController.java create mode 100644 demo/admin/src/main/java/com/example/admin/mapper/AdminMapper.java create mode 100644 demo/admin/src/main/java/com/example/admin/mian/qwe.java create mode 100644 demo/admin/src/main/java/com/example/admin/service/AdminServiceImpl.java create mode 100644 demo/admin/src/main/java/com/example/admin/service/UserDetailServiceImpl.java create mode 100644 demo/admin/src/main/resources/application.yml create mode 100644 demo/commons/src/main/java/com/example/commons/Util/JWTUtil.java create mode 100644 demo/commons/src/main/java/com/example/commons/security/SecurityConfig.java create mode 100644 demo/commons/src/main/java/com/example/commons/security/TokenFilter.java create mode 100644 demo/commons/src/main/java/com/example/commons/sevice/AdminService.java diff --git a/demo/admin/src/main/java/com/example/admin/controller/AdminController.java b/demo/admin/src/main/java/com/example/admin/controller/AdminController.java new file mode 100644 index 0000000..791561c --- /dev/null +++ b/demo/admin/src/main/java/com/example/admin/controller/AdminController.java @@ -0,0 +1,39 @@ +package com.example.admin.controller; + + +import com.example.commons.Util.JWTUtil; +import com.example.commons.domain.entity.Admin; +import com.example.commons.domain.vo.Result; +import com.example.commons.sevice.AdminService; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.springframework.web.bind.annotation.*; + +import java.util.Arrays; + +@RestController +@RequestMapping("/admin") +@RequiredArgsConstructor +@Slf4j +@CrossOrigin +public class AdminController { + + + private final AdminService adminService; + + @PostMapping("/login") + public Result login(@RequestBody Admin admin){ + + try { + admin = adminService.login(admin); + String token = JWTUtil.createJWT(admin); + admin.setPassword(null); + return Result.success(token,admin); + } catch (Exception e) { + e.printStackTrace(); + log.error(e.getMessage()); + return Result.error(e.getMessage()); + } + + } +} diff --git a/demo/admin/src/main/java/com/example/admin/mapper/AdminMapper.java b/demo/admin/src/main/java/com/example/admin/mapper/AdminMapper.java new file mode 100644 index 0000000..2618e1a --- /dev/null +++ b/demo/admin/src/main/java/com/example/admin/mapper/AdminMapper.java @@ -0,0 +1,57 @@ +package com.example.admin.mapper; + +import com.example.commons.domain.entity.Admin; +import org.apache.ibatis.annotations.*; + + +import java.util.List; + +@Mapper +public interface AdminMapper { + @Insert({ + "insert into admin", + "(name,username,password,permission,area,admin_flag,create_time)", + "values", + "(#{name},#{username},,#{password},#{permission},#{area},#{admin_flag},now())" + }) + @Options(useGeneratedKeys = true,keyColumn = "admin_id",keyProperty = "adminId") + int insert(Admin admin); + + @Update({ + "" + }) + int update(Admin admin); + @Select({ + "select * from admin", + "where admin_id=#{adminId}" + }) + Admin selectById(Integer adminId); + @Select({ + "select * from admin", + "where username=#{username}" + }) + Admin selectByName(String username); + @Select({ + "" + }) + List select(Admin admin); +} diff --git a/demo/admin/src/main/java/com/example/admin/mian/qwe.java b/demo/admin/src/main/java/com/example/admin/mian/qwe.java new file mode 100644 index 0000000..1b21aad --- /dev/null +++ b/demo/admin/src/main/java/com/example/admin/mian/qwe.java @@ -0,0 +1,12 @@ +package com.example.admin.mian; + +import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; + +public class qwe { + public static void main(String[] args) { + BCryptPasswordEncoder encoder = new BCryptPasswordEncoder(); + String rawPassword = "123"; + String encodedPassword = encoder.encode(rawPassword); + System.out.println("Encoded password: " + encodedPassword); + } +} \ No newline at end of file diff --git a/demo/admin/src/main/java/com/example/admin/service/AdminServiceImpl.java b/demo/admin/src/main/java/com/example/admin/service/AdminServiceImpl.java new file mode 100644 index 0000000..1733c06 --- /dev/null +++ b/demo/admin/src/main/java/com/example/admin/service/AdminServiceImpl.java @@ -0,0 +1,82 @@ +package com.example.admin.service; + +import com.example.admin.mapper.AdminMapper; +import com.example.commons.domain.entity.Admin; +import com.example.commons.security.SecurityConfig; +import com.example.commons.security.TokenFilter; +import com.example.commons.sevice.AdminService; +import com.github.pagehelper.PageHelper; +import com.github.pagehelper.PageInfo; +import lombok.RequiredArgsConstructor; +import org.springframework.beans.factory.annotation.Autowired; + + +import org.springframework.security.authentication.AuthenticationManager; +import org.springframework.security.authentication.BadCredentialsException; +import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; +import org.springframework.security.core.Authentication; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.stereotype.Service; + + +import java.util.List; + +@Service +@RequiredArgsConstructor +public class AdminServiceImpl implements AdminService { + @Autowired + private SecurityConfig securityConfig; + private final AdminMapper adminMapper; + @Autowired + private AuthenticationManager authenticationManager; + @Autowired + private PasswordEncoder passwordEncoder; + + @Override + public int add(Admin admin) { + return adminMapper.insert(admin); + } + + @Override + public int edit(Admin admin) { + return adminMapper.update(admin); + } + + @Override + public Admin findById(Integer adminId) { + return adminMapper.selectById(adminId); + } + + @Override + public Admin findByUsername(String username) { + return adminMapper.selectByName(username); + } + + @Override + public List search(Admin admin) { + return adminMapper.select(admin); + } + + @Override + public PageInfo searchForPage(Integer pageNum, Integer pageSize, Admin admin) { + PageHelper.startPage(pageNum, pageSize); + List list = adminMapper.select(admin); + return new PageInfo<>(list); + + } + + @Override + public Admin login(Admin admin) throws Exception { + UsernamePasswordAuthenticationToken token = + new UsernamePasswordAuthenticationToken(admin.getUsername(),admin.getPassword()); + try { + Authentication authentication = authenticationManager.authenticate(token); + Admin loginAdmin = (Admin) authentication.getPrincipal(); + + return loginAdmin; + }catch (BadCredentialsException exception){ + throw new BadCredentialsException("用户或密码错误"); + + } + } +} diff --git a/demo/admin/src/main/java/com/example/admin/service/UserDetailServiceImpl.java b/demo/admin/src/main/java/com/example/admin/service/UserDetailServiceImpl.java new file mode 100644 index 0000000..233f8e6 --- /dev/null +++ b/demo/admin/src/main/java/com/example/admin/service/UserDetailServiceImpl.java @@ -0,0 +1,26 @@ +package com.example.admin.service; + +import com.example.admin.mapper.AdminMapper; +import com.example.commons.domain.entity.Admin; +import lombok.RequiredArgsConstructor; +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.security.core.userdetails.UserDetails; +import org.springframework.security.core.userdetails.UserDetailsService; +import org.springframework.security.core.userdetails.UsernameNotFoundException; +import org.springframework.stereotype.Service; +import org.springframework.util.ObjectUtils; + +@Service +@RequiredArgsConstructor +public class UserDetailServiceImpl implements UserDetailsService { + @Autowired + private AdminMapper adminMapper; + @Override + public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { + Admin admin=adminMapper.selectByName(username); + if(ObjectUtils.isEmpty(admin)){ + throw new UsernameNotFoundException("用户名不存在"); + } + return admin; + } +} diff --git a/demo/admin/src/main/resources/application.yml b/demo/admin/src/main/resources/application.yml new file mode 100644 index 0000000..8ce8708 --- /dev/null +++ b/demo/admin/src/main/resources/application.yml @@ -0,0 +1,16 @@ +server: + port: 10070 + +spring: + datasource: + driver-class-name: com.mysql.cj.jdbc.Driver + url: jdbc:mysql://39.101.133.168/hwgold?serverTimezone=GMT%2b8 + username: hwgold + password: 'AGX4Z3YMxiCG3GR2' + application: + name: recharge +mybatis: + configuration: + map-underscore-to-camel-case: true + log-impl: org.apache.ibatis.logging.stdout.StdOutImpl + diff --git a/demo/audit/pom.xml b/demo/audit/pom.xml index 64850ed..7d34466 100644 --- a/demo/audit/pom.xml +++ b/demo/audit/pom.xml @@ -53,11 +53,11 @@ 3.0.4 test + com.example commons 0.0.1 - compile @@ -68,10 +68,7 @@ spring-boot-maven-plugin - - org.projectlombok - lombok - + diff --git a/demo/audit/src/main/java/com/example/audit/AuditApplication.java b/demo/audit/src/main/java/com/example/audit/AuditApplication.java index 58d3bbf..65fce98 100644 --- a/demo/audit/src/main/java/com/example/audit/AuditApplication.java +++ b/demo/audit/src/main/java/com/example/audit/AuditApplication.java @@ -3,9 +3,10 @@ package com.example.audit; import org.mybatis.spring.annotation.MapperScan; import org.springframework.boot.SpringApplication; import org.springframework.boot.autoconfigure.SpringBootApplication; +import org.springframework.context.annotation.ComponentScan; @SpringBootApplication -@MapperScan("com.example.**.mapper") +@ComponentScan(basePackages = {"com.example.commons.security","com.example.audit"}) public class AuditApplication { public static void main(String[] args) { diff --git a/demo/audit/src/main/java/com/example/audit/controller/AuditController.java b/demo/audit/src/main/java/com/example/audit/controller/AuditController.java index 92dfaf7..6bab6f2 100644 --- a/demo/audit/src/main/java/com/example/audit/controller/AuditController.java +++ b/demo/audit/src/main/java/com/example/audit/controller/AuditController.java @@ -56,6 +56,7 @@ public class AuditController { else { return Result.success(auditService.searchForConsumeDetail(page.getPageNum(), page.getPageSize(), page.getConsumeDetail())); } + } } diff --git a/demo/commons/src/main/java/com/example/commons/Util/JWTUtil.java b/demo/commons/src/main/java/com/example/commons/Util/JWTUtil.java new file mode 100644 index 0000000..c0ff5eb --- /dev/null +++ b/demo/commons/src/main/java/com/example/commons/Util/JWTUtil.java @@ -0,0 +1,190 @@ +package com.example.commons.Util; + +import com.fasterxml.jackson.core.JsonProcessingException; +import com.fasterxml.jackson.databind.ObjectMapper; +import io.jsonwebtoken.Claims; +import io.jsonwebtoken.JwtBuilder; +import io.jsonwebtoken.Jwts; +import io.jsonwebtoken.SignatureAlgorithm; +import org.springframework.security.core.userdetails.UserDetails; + +import javax.crypto.SecretKey; +import javax.crypto.spec.SecretKeySpec; +import java.util.Base64; +import java.util.Date; +import java.util.UUID; + +/** + * JWT的工具类 + */ +public class JWTUtil { + + //有效期为 + public static final Long JWT_TTL = 60 * 60 *1000L;// 60 * 60 *1000 一个小时 + + //设置 密钥 + public static final String JWT_KEY = "bobzyh"; + + public static String getUUID(){ + String token = UUID.randomUUID().toString().replaceAll("-", ""); + return token; + } + + /** + * 用户信息创建JWT,默认有效期30分钟 + * @param user + * @return + */ + public static String createJWT(UserDetails user) { + ObjectMapper mapper = new ObjectMapper(); + try { + String json = mapper.writeValueAsString(user); + System.out.println("用户的JSON"); + System.out.println(json); + return createJWT(json, JWT_TTL); + } catch (JsonProcessingException e) { + throw new RuntimeException(e); + } + } + + /** + * 用户信息创建JWT, 指定有效期，单位秒 + * @param user + * @param ttlMillis + * @return + */ + public static String createJWT(UserDetails user, Long ttlMillis) { + ObjectMapper mapper = new ObjectMapper(); + try { + String json = mapper.writeValueAsString(user); + return createJWT(json, ttlMillis); + } catch (JsonProcessingException e) { + throw new RuntimeException(e); + } + } + + /** + * 生成jtw + * @param subject token中要存放的数据（json格式） + * @return + */ + public static String createJWT(String subject) { + JwtBuilder builder = getJwtBuilder(subject, 30*60*1000L, getUUID());// 设置过期时间 + return builder.compact(); + } + + /** + * 生成jtw + * @param subject token中要存放的数据（json格式） + * @param ttlMillis token超时时间 + * @return + */ + public static String createJWT(String subject, Long ttlMillis) { + JwtBuilder builder = getJwtBuilder(subject, ttlMillis, getUUID());// 设置过期时间 + return builder.compact(); + } + + private static JwtBuilder getJwtBuilder(String subject, Long ttlMillis, String uuid) { + SignatureAlgorithm signatureAlgorithm = SignatureAlgorithm.HS256; //加密算法 + SecretKey secretKey = generalKey(); //密钥 + long nowMillis = System.currentTimeMillis(); //当前时间 + Date now = new Date(nowMillis); + if(ttlMillis==null){ + ttlMillis= JWTUtil.JWT_TTL; + } + long expMillis = nowMillis + ttlMillis; + Date expDate = new Date(expMillis); //过期时间 + return Jwts.builder() + .setId(uuid) //唯一的ID + .setSubject(subject) // 主题 可以是JSON数据 + .setIssuer("sg") // 签发者 + .setIssuedAt(now) // 签发时间 + .signWith(signatureAlgorithm, secretKey) //使用HS256对称加密算法签名, 第二个参数为秘钥 + .setExpiration(expDate); + } + + /** + * 创建token + * @param id + * @param subject + * @param ttlMillis + * @return + */ + public static String createJWT(String id, String subject, Long ttlMillis) { + JwtBuilder builder = getJwtBuilder(subject, ttlMillis, id);// 设置过期时间 + return builder.compact(); + } + + /** + * 生成加密后的秘钥 secretKey + * @return + */ + public static SecretKey generalKey() { + byte[] encodedKey = Base64.getDecoder().decode(JWTUtil.JWT_KEY); + SecretKey key = new SecretKeySpec(encodedKey, 0, encodedKey.length, "AES"); + return key; + } + + /** + * 解析 + * + * @param jwt + * @return + * @throws Exception + */ + public static Claims parseJWT(String jwt) throws Exception { + SecretKey secretKey = generalKey(); + return Jwts.parser() + .setSigningKey(secretKey) + .parseClaimsJws(jwt) + .getBody(); + } + + /** + * 解析为用户 + * @param jwt + * @return + * @throws Exception + */ + public static UserDetails getUserDetails(String jwt, Class cls) throws Exception { + Claims claims = JWTUtil.parseJWT(jwt); + String json = claims.getSubject(); + ObjectMapper mapper = new ObjectMapper(); + UserDetails user = null; + user = mapper.readValue(json, cls); + + return user; + } + + public static UserDetails getUserDetailsList(String jwt, Class ...cls) throws Exception { + Claims claims = JWTUtil.parseJWT(jwt); + String json = claims.getSubject(); + ObjectMapper mapper = new ObjectMapper(); + if (cls != null && cls.length > 0) { + for (Class cl : cls) { + try { + UserDetails user = mapper.readValue(json, cl); + return user; + } catch (JsonProcessingException e) { + e.printStackTrace(); + } + } + } + return null; + } + + +// public static void main(String[] args) throws Exception { +// +// // 加密 +// String jwt = createJWT("2123"); +// System.out.println(jwt); +// +// // 解密 +// Claims claims = parseJWT("eyJhbGciOiJIUzI1NiJ9.eyJqdGkiOiI2Y2QzZGU0NWRiN2I0MjVlOWJlZTAzYzUyNjY2ODhhYiIsInN1YiI6IjIxMjMiLCJpc3MiOiJzZyIsImlhdCI6MTcxMDgzMTc4NCwiZXhwIjoxNzEwODM1Mzg0fQ.k6RPyIvKX-mrS26YbyaDNVLlihGqTQDeLj2gsrNokCk"); +// String subject = claims.getSubject(); +// System.out.println(subject); +// +// } + +} diff --git a/demo/commons/src/main/java/com/example/commons/domain/entity/Admin.java b/demo/commons/src/main/java/com/example/commons/domain/entity/Admin.java index 48a03e2..f0af4e5 100644 --- a/demo/commons/src/main/java/com/example/commons/domain/entity/Admin.java +++ b/demo/commons/src/main/java/com/example/commons/domain/entity/Admin.java @@ -1,23 +1,65 @@ package com.example.commons.domain.entity; import com.fasterxml.jackson.annotation.JsonFormat; +import com.fasterxml.jackson.annotation.JsonIgnore; import lombok.Data; import lombok.NoArgsConstructor; import org.springframework.format.annotation.DateTimeFormat; +import org.springframework.security.core.GrantedAuthority; +import org.springframework.security.core.authority.SimpleGrantedAuthority; +import org.springframework.security.core.userdetails.UserDetails; -import java.util.Date; +import java.io.Serializable; +import java.util.*; @Data @NoArgsConstructor -public class Admin { +public class Admin implements UserDetails, Serializable { private Integer adminId; private String name; private String username; private String password; - private String permission; + private Integer permission; private String area; private String adminFlag; @JsonFormat(pattern = "yyyy-MM-dd", timezone = "GMT+8") @DateTimeFormat(pattern = "yyyy-MM-dd") private Date createTime; + + @Override + @JsonIgnore + public Collection getAuthorities() { + Setauthorities = new HashSet<>(); + if(permission == 1){ + + authorities.add(new SimpleGrantedAuthority("ROLE_SUPER_ADMIN")); + }else if(permission == 2){ + authorities.add(new SimpleGrantedAuthority("ROLE_ADMIN")); + } + return authorities; + } + @Override + @JsonIgnore + public boolean isAccountNonExpired() { + return UserDetails.super.isAccountNonExpired(); + } + + @Override + @JsonIgnore + public boolean isAccountNonLocked() { + return UserDetails.super.isAccountNonLocked(); + } + + @Override + @JsonIgnore + public boolean isCredentialsNonExpired() { + return UserDetails.super.isCredentialsNonExpired(); + } + + @Override + @JsonIgnore + public boolean isEnabled() { + return UserDetails.super.isEnabled(); + } } + diff --git a/demo/commons/src/main/java/com/example/commons/domain/entity/Detail.java b/demo/commons/src/main/java/com/example/commons/domain/entity/Detail.java index 1b7184d..3cd1a84 100644 --- a/demo/commons/src/main/java/com/example/commons/domain/entity/Detail.java +++ b/demo/commons/src/main/java/com/example/commons/domain/entity/Detail.java @@ -38,6 +38,7 @@ public class Detail { private Date endDate; private Date startDate; private String uname; + private Integer firstRecharge; } diff --git a/demo/commons/src/main/java/com/example/commons/domain/vo/Result.java b/demo/commons/src/main/java/com/example/commons/domain/vo/Result.java index dda1825..84205b2 100644 --- a/demo/commons/src/main/java/com/example/commons/domain/vo/Result.java +++ b/demo/commons/src/main/java/com/example/commons/domain/vo/Result.java @@ -20,6 +20,7 @@ public class Result { public static Result success(Integer code, Object data) { return success(code, "操作成功", data); } + public static Result success(String msg, Object data) {return success(200, msg, data);} public static Result success(Object data){ return success(200, data); } diff --git a/demo/commons/src/main/java/com/example/commons/security/SecurityConfig.java b/demo/commons/src/main/java/com/example/commons/security/SecurityConfig.java new file mode 100644 index 0000000..0514b60 --- /dev/null +++ b/demo/commons/src/main/java/com/example/commons/security/SecurityConfig.java @@ -0,0 +1,144 @@ +package com.example.commons.security; + + +import com.example.commons.domain.vo.Result; +import jakarta.servlet.http.HttpServletResponse; +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.http.HttpMethod; +import org.springframework.security.authentication.AuthenticationManager; +import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration; +import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity; +import org.springframework.security.config.annotation.web.builders.HttpSecurity; +import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; +import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer; +import org.springframework.security.config.http.SessionCreationPolicy; +import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.security.web.AuthenticationEntryPoint; +import org.springframework.security.web.SecurityFilterChain; +import org.springframework.security.web.access.AccessDeniedHandler; +import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter; +import org.springframework.web.cors.CorsConfiguration; +import org.springframework.web.cors.CorsConfigurationSource; +import org.springframework.web.cors.UrlBasedCorsConfigurationSource; + +/** + * SpringSecurity的配置文件 + */ +@Configuration + +@EnableWebSecurity // 开启Security的支持 +@EnableGlobalMethodSecurity(prePostEnabled = true) // 开启方法注解 + +public class SecurityConfig { + + + @Autowired + TokenFilter tokenFilter; + + // 核心配置 配置一个过滤器链 + @Bean + public SecurityFilterChain configure(HttpSecurity http) throws Exception { + // 这里可以对httpSecurity进行详细的配置 链式调用的配置方式 + http.formLogin(AbstractHttpConfigurer::disable) // 方法引用，禁用表单登录 + .logout(AbstractHttpConfigurer::disable) // 禁用默认退出 + .csrf(AbstractHttpConfigurer::disable) // 禁用csrf的保护，分布式的前后端分离的项目 + // 设定CORS + .cors(cors -> cors.configurationSource(corsConfigurationSource())) + // 禁用Session, + .sessionManagement( session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS)) + // 用户未登录的处理 + .exceptionHandling( exception -> exception.authenticationEntryPoint(authenticationEntryPoint())) + // 用户权限不足的处理 + .exceptionHandling( exception -> exception.accessDeniedHandler(accessDeniedHandler())) + // 配置路径拦截 + .authorizeHttpRequests( request -> + request.requestMatchers( HttpMethod.GET, + // 用户不登录可以访问的路径 + "/captcha", + "/category", + "/product/**", + "/upload/**").permitAll() + .requestMatchers( HttpMethod.POST, + // 用户不登录就可以访问的路径 + "/user/login", "/user", + "/admin/login","/upload/**").permitAll() + .requestMatchers( + "/error","alipay/**" + ).permitAll() + .anyRequest().authenticated() // 其它路径，必须要登录后才能访问 + ); + // 配置Token过滤器, 将过滤器加入到执行链中 + http.addFilterBefore(tokenFilter, UsernamePasswordAuthenticationFilter.class); + + return http.build(); + } + + /** + * 1. 配置认证管理器 + * @param config + * @return + * @throws Exception + */ + @Bean + protected AuthenticationManager authenticationManager( + AuthenticationConfiguration config ) throws Exception { + return config.getAuthenticationManager(); + } + + /** + * 2. 密码编码器 + * @return + */ + @Bean + public PasswordEncoder passwordEncoder() { + return new BCryptPasswordEncoder(); + } + + /** + * 3. 用户未登录时的错误处理 + * @return + */ + @Bean + public AuthenticationEntryPoint authenticationEntryPoint() { + return ( request, response, authException) -> { + response.setStatus(HttpServletResponse.SC_UNAUTHORIZED); // 401 + response.setContentType("application/json; charset=utf-8"); + response.getWriter().write(Result.error("用户未登录").toJson()); + }; + } + + /** + * 4. 权限不足时的处理 + * @return + */ + @Bean + public AccessDeniedHandler accessDeniedHandler() { + return ( request, response, authException) -> { + response.setStatus(HttpServletResponse.SC_FORBIDDEN); // 403 + response.setContentType("application/json; charset=utf-8"); + response.getWriter().write(Result.error("当前用户权限不足！").toJson()); + }; + } + + /** + * 5. 配置跨域请求 + * @return + */ + @Bean + public CorsConfigurationSource corsConfigurationSource() { + CorsConfiguration config = new CorsConfiguration(); + config.addAllowedOriginPattern("*"); // 允许任何的源 + config.addAllowedMethod("*"); // 允许任何的HTTP请求方式 + config.addAllowedHeader("*"); // 允许任何的HTTP头 + config.setAllowCredentials(true); // 允许证书 + config.setMaxAge(3600L); // 设置浏览器预检的时间 + + // 生成源 + UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(); + source.registerCorsConfiguration("/**", config); + return source; + } +} diff --git a/demo/commons/src/main/java/com/example/commons/security/TokenFilter.java b/demo/commons/src/main/java/com/example/commons/security/TokenFilter.java new file mode 100644 index 0000000..5f18881 --- /dev/null +++ b/demo/commons/src/main/java/com/example/commons/security/TokenFilter.java @@ -0,0 +1,52 @@ +package com.example.commons.security; + + +import com.example.commons.Util.JWTUtil; +import com.example.commons.domain.entity.Admin; +import jakarta.servlet.FilterChain; +import jakarta.servlet.ServletException; +import jakarta.servlet.http.HttpServletRequest; +import jakarta.servlet.http.HttpServletResponse; + +import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; +import org.springframework.security.core.context.SecurityContextHolder; +import org.springframework.security.core.userdetails.UserDetails; +import org.springframework.security.web.authentication.WebAuthenticationDetailsSource; + +import org.springframework.stereotype.Component; +import org.springframework.util.ObjectUtils; +import org.springframework.util.StringUtils; +import org.springframework.web.filter.OncePerRequestFilter; + +import java.io.IOException; + +@Component +public class TokenFilter extends OncePerRequestFilter { + @Override + protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException { + // 取Token 生成登录信息 + String token = request.getHeader("token"); + // token不为空 + if (StringUtils.hasText(token)){ + // jwt解密 + try { + UserDetails userDetails = JWTUtil.getUserDetailsList(token,Admin.class); + if ( ! ObjectUtils.isEmpty(userDetails)) { + // 将这个用户注册到Security中 + UsernamePasswordAuthenticationToken authenticationToken + + = new UsernamePasswordAuthenticationToken( + userDetails, null, + userDetails.getAuthorities()); + authenticationToken.setDetails(new WebAuthenticationDetailsSource().buildDetails(request)); + SecurityContextHolder.getContext().setAuthentication(authenticationToken); + } + } catch (Exception e) { + e.printStackTrace(); + // Token无效， + } + } + // 过滤器放行 + filterChain.doFilter(request, response); + } +} diff --git a/demo/commons/src/main/java/com/example/commons/sevice/AdminService.java b/demo/commons/src/main/java/com/example/commons/sevice/AdminService.java new file mode 100644 index 0000000..5123620 --- /dev/null +++ b/demo/commons/src/main/java/com/example/commons/sevice/AdminService.java @@ -0,0 +1,16 @@ +package com.example.commons.sevice; + +import com.example.commons.domain.entity.Admin; +import com.github.pagehelper.PageInfo; + +import java.util.List; + +public interface AdminService { + int add(Admin admin); + int edit(Admin admin); + Admin findById(Integer adminId); + Admin findByUsername(String username); + List search(Admin admin); + PageInfo searchForPage(Integer pageNum, Integer pageSize,Admin admin); + Admin login(Admin admin)throws Exception; +} diff --git a/demo/commons/src/main/java/com/example/commons/sevice/RechargeService.java b/demo/commons/src/main/java/com/example/commons/sevice/RechargeService.java index 0368e78..334f9c1 100644 --- a/demo/commons/src/main/java/com/example/commons/sevice/RechargeService.java +++ b/demo/commons/src/main/java/com/example/commons/sevice/RechargeService.java @@ -15,4 +15,6 @@ public interface RechargeService { Recharge findById(int id) throws Exception; List search(RechargeVo rechargeVo) ; PageInfo searchForPage(Integer pageNum, Integer pageSize, RechargeVo rechargeVo); + + int getAllByjwAndup(Integer jwcode, String updateType); } diff --git a/demo/consume/src/main/java/com/example/consume/ConsumeApplication.java b/demo/consume/src/main/java/com/example/consume/ConsumeApplication.java index 79aba5c..f779c38 100644 --- a/demo/consume/src/main/java/com/example/consume/ConsumeApplication.java +++ b/demo/consume/src/main/java/com/example/consume/ConsumeApplication.java @@ -2,8 +2,10 @@ package com.example.consume; import org.springframework.boot.SpringApplication; import org.springframework.boot.autoconfigure.SpringBootApplication; +import org.springframework.context.annotation.ComponentScan; @SpringBootApplication +@ComponentScan(basePackages = {"com.example.commons.security","com.example.consume"}) public class ConsumeApplication { public static void main(String[] args) { diff --git a/demo/pom.xml b/demo/pom.xml index 574b452..25c111c 100644 --- a/demo/pom.xml +++ b/demo/pom.xml @@ -25,6 +25,7 @@ statistics consume refund + admin @@ -34,33 +35,70 @@ 3.3.6 3.3.0-beta.2 - 2.0.0 + + + + com.101tec + zkclient + 0.11 + + io.jsonwebtoken jjwt 0.9.1 + + + javax.xml.bind + jaxb-api + 2.3.1 + + + + org.springframework.boot + spring-boot-starter-security + + + org.springframework.boot + spring-boot-starter-data-redis + + + org.springframework.boot + spring-boot-starter-data-elasticsearch + com.github.pagehelper pagehelper-spring-boot-starter 1.4.6 + org.slf4j slf4j-simple - 2.0.0 + + + + org.springframework.boot + spring-boot-starter-web + + + org.springframework.boot + spring-boot-starter org.projectlombok lombok true + org.springframework.boot - spring-boot-starter-web + spring-boot-starter-test + test @@ -86,13 +124,7 @@ - - org.apache.dubbo - dubbo-bom - ${dubbo.version} - pom - import - + @@ -100,14 +132,7 @@ org.springframework.boot spring-boot-maven-plugin - - - - org.projectlombok - lombok - - - + diff --git a/demo/recharge/pom.xml b/demo/recharge/pom.xml index 6e1fd75..69a74cf 100644 --- a/demo/recharge/pom.xml +++ b/demo/recharge/pom.xml @@ -16,6 +16,7 @@ + com.example commons diff --git a/demo/recharge/src/main/java/com/example/recharge/RechargeApplication.java b/demo/recharge/src/main/java/com/example/recharge/RechargeApplication.java index a20c35a..df3006a 100644 --- a/demo/recharge/src/main/java/com/example/recharge/RechargeApplication.java +++ b/demo/recharge/src/main/java/com/example/recharge/RechargeApplication.java @@ -3,9 +3,10 @@ package com.example.recharge; import org.mybatis.spring.annotation.MapperScan; import org.springframework.boot.SpringApplication; import org.springframework.boot.autoconfigure.SpringBootApplication; +import org.springframework.context.annotation.ComponentScan; @SpringBootApplication -@MapperScan("com.example.**.mapper") +@ComponentScan(basePackages = {"com.example.commons.security","com.example.recharge"}) public class RechargeApplication { public static void main(String[] args) { diff --git a/demo/recharge/src/main/java/com/example/recharge/controller/RechargeController.java b/demo/recharge/src/main/java/com/example/recharge/controller/RechargeController.java index acbe6a4..83a1cd8 100644 --- a/demo/recharge/src/main/java/com/example/recharge/controller/RechargeController.java +++ b/demo/recharge/src/main/java/com/example/recharge/controller/RechargeController.java @@ -23,6 +23,7 @@ public class RechargeController { @PostMapping("/add") public Result add(@RequestBody Recharge recharge) { + try { rechargeService.add(recharge); return Result.success(); diff --git a/demo/recharge/src/main/java/com/example/recharge/mapper/RechargeMapper.java b/demo/recharge/src/main/java/com/example/recharge/mapper/RechargeMapper.java index df29caf..cd29991 100644 --- a/demo/recharge/src/main/java/com/example/recharge/mapper/RechargeMapper.java +++ b/demo/recharge/src/main/java/com/example/recharge/mapper/RechargeMapper.java @@ -48,4 +48,8 @@ public interface RechargeMapper { "" }) List select(RechargeVo rechargeVo); +//根据jwcode和充值类型判断有没有，有首充标识设为0，否者设为1 + @Select({"select * from detail", + "where jwcode=#{jwcode} and update_type=#{updatType}"}) + int getAllByjwAndup(Integer jwcode,String updateType); } diff --git a/demo/recharge/src/main/java/com/example/recharge/service/RechargeServiceImpl.java b/demo/recharge/src/main/java/com/example/recharge/service/RechargeServiceImpl.java index eef7878..c3bd94d 100644 --- a/demo/recharge/src/main/java/com/example/recharge/service/RechargeServiceImpl.java +++ b/demo/recharge/src/main/java/com/example/recharge/service/RechargeServiceImpl.java @@ -6,6 +6,7 @@ import com.example.commons.domain.entity.Detail; import com.example.commons.domain.entity.Recharge; import com.example.commons.domain.vo.RechargeVo; import com.example.commons.sevice.RechargeService; + import com.example.recharge.mapper.RechargeMapper; import com.example.statistics.mapper.DetailMapper; @@ -109,4 +110,9 @@ public class RechargeServiceImpl implements RechargeService { List list= rechargeMapper.select(rechargeVo); return new PageInfo<>(list); } + @Override + public int getAllByjwAndup(Integer jwcode, String updateType) { + + return rechargeMapper.getAllByjwAndup(jwcode,updateType); + } } diff --git a/demo/refund/src/main/java/com/example/fefund/FefundApplication.java b/demo/refund/src/main/java/com/example/fefund/FefundApplication.java index 71062f3..cbf7871 100644 --- a/demo/refund/src/main/java/com/example/fefund/FefundApplication.java +++ b/demo/refund/src/main/java/com/example/fefund/FefundApplication.java @@ -2,8 +2,10 @@ package com.example.fefund; import org.springframework.boot.SpringApplication; import org.springframework.boot.autoconfigure.SpringBootApplication; +import org.springframework.context.annotation.ComponentScan; @SpringBootApplication +@ComponentScan(basePackages = {"com.example.commons.security","com.example.fefund"}) public class FefundApplication { public static void main(String[] args) { diff --git a/demo/statistics/src/main/java/com/example/statistics/StatisticsApplication.java b/demo/statistics/src/main/java/com/example/statistics/StatisticsApplication.java index bb49c78..c0c2f92 100644 --- a/demo/statistics/src/main/java/com/example/statistics/StatisticsApplication.java +++ b/demo/statistics/src/main/java/com/example/statistics/StatisticsApplication.java @@ -3,9 +3,11 @@ package com.example.statistics; import org.mybatis.spring.annotation.MapperScan; import org.springframework.boot.SpringApplication; import org.springframework.boot.autoconfigure.SpringBootApplication; +import org.springframework.context.annotation.ComponentScan; @SpringBootApplication -@MapperScan("com.example.**.mapper") +@ComponentScan(basePackages = {"com.example.commons.security","com.example.statistics"}) + public class StatisticsApplication { public static void main(String[] args) { diff --git a/demo/user/src/main/java/com/example/user/UserApplication.java b/demo/user/src/main/java/com/example/user/UserApplication.java index d91955c..4a6d8fa 100644 --- a/demo/user/src/main/java/com/example/user/UserApplication.java +++ b/demo/user/src/main/java/com/example/user/UserApplication.java @@ -2,8 +2,10 @@ package com.example.user; import org.springframework.boot.SpringApplication; import org.springframework.boot.autoconfigure.SpringBootApplication; +import org.springframework.context.annotation.ComponentScan; @SpringBootApplication +@ComponentScan(basePackages = {"com.example.commons.security","com.example.user"}) public class UserApplication { public static void main(String[] args) { diff --git a/demo/user/src/main/java/com/example/user/mapper/UserMapper.java b/demo/user/src/main/java/com/example/user/mapper/UserMapper.java index e1b1f2f..f6d720c 100644 --- a/demo/user/src/main/java/com/example/user/mapper/UserMapper.java +++ b/demo/user/src/main/java/com/example/user/mapper/UserMapper.java @@ -22,5 +22,9 @@ public interface UserMapper { "" }) List selectAll(User user); + @Select({ + "select * from user where name=#{name}" + }) + User selectByName(String name); }