package com.whyc.service;
|
|
import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
|
import com.baomidou.mybatisplus.core.conditions.update.UpdateWrapper;
|
import com.github.pagehelper.PageHelper;
|
import com.github.pagehelper.PageInfo;
|
import com.whyc.mapper.UserInfMapper;
|
import com.whyc.pojo.Response;
|
import com.whyc.pojo.UserInf;
|
import com.whyc.util.ActionUtil;
|
import com.whyc.util.RSAUtil;
|
import org.apache.shiro.SecurityUtils;
|
import org.apache.shiro.authc.UnknownAccountException;
|
import org.apache.shiro.authc.UsernamePasswordToken;
|
import org.apache.shiro.subject.Subject;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.stereotype.Service;
|
import org.springframework.web.bind.annotation.RequestParam;
|
import org.springframework.web.multipart.MultipartFile;
|
|
import javax.servlet.ServletContext;
|
import javax.servlet.http.HttpServletRequest;
|
import java.util.Date;
|
import java.util.HashMap;
|
import java.util.List;
|
import java.util.Map;
|
|
@Service
|
public class UserInfService {
|
@Autowired(required = false)
|
private UserInfMapper mapper;
|
|
//查询所有用户信息
|
public Response getAllUser( int pageCurr, int pageSize) {
|
PageHelper.startPage(pageCurr,pageSize);
|
List<UserInf> list=mapper.getAllUser();
|
PageInfo pageInfo=new PageInfo(list);
|
return new Response().setII(1,list!=null,pageInfo,"数据返回");
|
}
|
//编辑权限
|
public Response updateUser(int uid,String uname, int udownloadRole) {
|
UpdateWrapper wrapper=new UpdateWrapper();
|
wrapper.set("udownload_role",udownloadRole);
|
wrapper.set("uname",uname);
|
wrapper.eq("uid",uid);
|
int bl=mapper.update(null,wrapper);
|
return new Response().set(1,bl>0);
|
}
|
|
//新添加用户信息
|
public Response addUser(UserInf uinf) {
|
QueryWrapper wrapper=new QueryWrapper();
|
//判断是否存在普通用户(uid>100)，若无,初始为1001
|
int judgecount=mapper.judgeUname();
|
if(judgecount==0){
|
uinf.setUid(101);
|
}
|
String pwd= RSAUtil.encrypt("123456", RSAUtil.getPublicKey());
|
uinf.setUsnid(pwd);
|
wrapper.eq("uname",uinf.getUname());
|
List list=mapper.selectList(wrapper);
|
if(list!=null&&list.size()>0){
|
return new Response().setII(1,false,list,"用户名已存在");
|
}
|
int bl=mapper.insert(uinf);
|
return new Response().set(1,bl>0);
|
}
|
//修改密码
|
public Response changeSnId(String uname,String oldSnId, String newSnId) {
|
if(uname==null||uname.equals("")){
|
return new Response().set(1,false,"找不到用户");
|
}
|
//验证老密码是否正确
|
String snIdRsa=mapper.selectSnId(uname);
|
//解密
|
String snId=RSAUtil.decrypt(snIdRsa,RSAUtil.getPrivateKey());
|
String[] decOld=RSAUtil.decryptFrontP(oldSnId,RSAUtil.fontSeparator);
|
String oldId=decOld[0];
|
String[] newOld=RSAUtil.decryptFrontP(newSnId,RSAUtil.fontSeparator);
|
String newId=newOld[0];
|
if(oldId.equals(snId)){
|
UpdateWrapper wrapper=new UpdateWrapper();
|
wrapper.set("usnid",RSAUtil.encrypt(newId,RSAUtil.getPublicKey()));
|
wrapper.eq("uname",uname);
|
int flag=mapper.update(null,wrapper);
|
return new Response().set(1,flag>0,flag>0?"修改成功":"修改失败");
|
}else {
|
return new Response().set(1,false,"原密码不择行情");
|
}
|
}
|
//删除用户信息
|
public Response delUser(int uid) {
|
UpdateWrapper wrapper=new UpdateWrapper();
|
wrapper.eq("uid",uid);
|
int bl=mapper.delete(wrapper);
|
return new Response().setII(1,bl>0,bl,"删除返回");
|
}
|
|
public Response login(String uname, String usnId, HttpServletRequest request) {
|
Response response = new Response();
|
String[] dataArr = RSAUtil.decryptFrontP(usnId, RSAUtil.fontSeparator);
|
//验签md5
|
if(dataArr[0]==null||dataArr[1]==null){
|
return response.set(1, false, "密码验签失败");
|
}
|
if (!dataArr[1].equals(ActionUtil.EncryptionMD5(org.apache.commons.lang3.StringUtils.trim(dataArr[0])).toString())) {
|
return response.set(1, false, "密码验签失败");
|
}
|
UsernamePasswordToken userToken = new UsernamePasswordToken(uname, dataArr[0]);
|
Subject subject = SecurityUtils.getSubject();
|
try {
|
subject.login(userToken);
|
} catch (Exception e) {
|
if(e instanceof UnknownAccountException){
|
return response.set(1,false,"账号不存在");
|
}
|
return response.set(1,false,"密码错误");
|
}
|
//登录成功
|
ServletContext servletContext = request.getServletContext();
|
servletContext.setAttribute(uname, request.getSession().getId());
|
//Session存储当前用户及权限组列表
|
UserInf userDB = (UserInf) subject.getPrincipal();
|
userDB.setUsnid(null);
|
request.getSession().setAttribute("user", userDB);
|
return response.setII(1,true, userDB,"登录成功");
|
}
|
|
public void logout() {
|
Subject subject = SecurityUtils.getSubject();
|
subject.logout();
|
}
|
}
|
