package com.whyc.service;
|
|
import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
|
import com.baomidou.mybatisplus.core.conditions.update.UpdateWrapper;
|
import com.baomidou.mybatisplus.core.toolkit.Wrappers;
|
import com.github.pagehelper.PageHelper;
|
import com.github.pagehelper.PageInfo;
|
import com.whyc.constant.YamlProperties;
|
import com.whyc.dto.Response;
|
import com.whyc.mapper.*;
|
import com.whyc.pojo.db_area.*;
|
import com.whyc.pojo.db_user.UserClient;
|
import com.whyc.pojo.db_user.UserInf;
|
import com.whyc.util.*;
|
import org.apache.shiro.SecurityUtils;
|
import org.apache.shiro.authc.UnknownAccountException;
|
import org.apache.shiro.authc.UsernamePasswordToken;
|
import org.apache.shiro.subject.Subject;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.stereotype.Service;
|
import org.springframework.transaction.annotation.Transactional;
|
|
import javax.servlet.ServletContext;
|
import javax.servlet.http.HttpServletRequest;
|
import javax.servlet.http.HttpSession;
|
import java.util.*;
|
import java.util.stream.Collectors;
|
|
@Service
|
public class UserInfService {
|
@Autowired(required = false)
|
private UserInfMapper mapper;
|
|
@Autowired(required = false)
|
private AreaInfMapper ainfMapper;
|
|
@Autowired(required = false)
|
private AreaInfService areaInfService;
|
|
@Autowired(required = false)
|
private AuthiruzeInfMapper authMapper;
|
|
@Autowired(required = false)
|
private LockInfMapper linfMapper;
|
|
@Autowired(required = false)
|
private KeyInfMapper kinfMapper;
|
|
@Autowired(required = false)
|
private AreaUserMapper areaUserMapper;
|
|
@Autowired(required = false)
|
private AppLoginOutService appLoginOutService;
|
|
|
|
|
|
//查询所有用户信息
|
public Response getAllUser(String uname, String realName, int areaId, int pageCurr, int pageSize) {
|
UserInf uinf= ActionUtil.getUser();
|
List areaList=new ArrayList();
|
areaList.add(areaId);
|
areaInfService.getAllAreaId(areaId,areaList);
|
PageHelper.startPage(pageCurr,pageSize);
|
List<UserInf> list=mapper.getAllUser(uname,realName,uinf.getUrole(),areaList);
|
if(list!=null&&list.size()>0){
|
for (UserInf u:list) {
|
QueryWrapper wrapper=new QueryWrapper();
|
wrapper.eq("uname",u.getUname());
|
List<AreaUser> areaUserList=areaUserMapper.selectList(wrapper);
|
List<Integer> areaIds=areaUserList.stream().map(AreaUser::getAreaId) // 提取名字
|
.collect(Collectors.toList()); // 转换为列表*/
|
QueryWrapper wrapper1=new QueryWrapper();
|
wrapper1.in("id",areaIds);
|
List<AreaInf> areaInfs=ainfMapper.selectList(wrapper1);
|
u.setAinfList(areaInfs);
|
}
|
}
|
PageInfo pageInfo=new PageInfo(list);
|
return new Response().setII(1,list!=null,pageInfo,"数据返回");
|
}
|
/* //编辑权限
|
public Response updateUser(int uid,String uname) {
|
UpdateWrapper wrapper=new UpdateWrapper();
|
if(uname!=null){
|
wrapper.set("uname",uname);
|
}
|
wrapper.eq("uid",uid);
|
int bl=mapper.update(null,wrapper);
|
return new Response().set(1,bl>0);
|
}
|
*/
|
//新添加用户信息
|
@Transactional
|
public Response addUser(UserInf uinf) {
|
QueryWrapper wrapper=new QueryWrapper();
|
//判断是否存在普通用户(uid>100)，若无,初始为101
|
int judgecount=mapper.judgeUname();
|
if(judgecount==0){
|
uinf.setUid(101);
|
}
|
String pwd= RSAUtil.encrypt("123456", RSAUtil.getPublicKey());
|
uinf.setUsnid(pwd);
|
wrapper.select("uid","uname");
|
wrapper.eq("uname",uinf.getUname());
|
UserInf user=mapper.selectOne(wrapper);
|
if(user!=null){
|
return new Response().setII(1,false,user,"用户名已存在");
|
}
|
uinf.setCreateTime(new Date());
|
int bl=mapper.insert(uinf);
|
//查询出刚插入的用户id
|
UserInf user1=mapper.selectOne(wrapper);
|
//添加新额对应关系
|
if(uinf.getIdList()!=null){
|
List<AreaUser> areaUserList=new ArrayList<>();
|
for (Integer areaId: uinf.getIdList()) {
|
AreaUser areaUser=new AreaUser();
|
areaUser.setUid(user1.getUid());
|
areaUser.setAreaId(areaId);
|
areaUser.setUname(user1.getUname());
|
areaUserList.add(areaUser);
|
}
|
areaUserMapper.insertBatchSomeColumn(areaUserList);
|
}
|
return new Response().set(1,bl>0);
|
}
|
//修改密码
|
public Response changeSnId(String uname,String oldSnId, String newSnId) {
|
if(uname==null||uname.equals("")){
|
return new Response().set(1,false,"找不到用户");
|
}
|
//验证老密码是否正确
|
String snIdRsa=mapper.selectSnId(uname);
|
//解密
|
String snId=RSAUtil.decrypt(snIdRsa,RSAUtil.getPrivateKey());
|
String[] decOld=RSAUtil.decryptFrontP(oldSnId,RSAUtil.fontSeparator);
|
String oldId=decOld[0];
|
String[] newOld=RSAUtil.decryptFrontP(newSnId,RSAUtil.fontSeparator);
|
String newId=newOld[0];
|
if(oldId.equals(snId)){
|
UpdateWrapper wrapper=new UpdateWrapper();
|
wrapper.set("usnid",RSAUtil.encrypt(newId,RSAUtil.getPublicKey()));
|
wrapper.eq("uname",uname);
|
int flag=mapper.update(null,wrapper);
|
return new Response().set(1,flag>0,flag>0?"修改成功":"修改失败");
|
}else {
|
return new Response().set(1,false,"原密码不正确");
|
}
|
}
|
//重置密码
|
public Response resetSnId(int uid ) {
|
UpdateWrapper wrapper=new UpdateWrapper();
|
wrapper.set("usnid",RSAUtil.encrypt("123456",RSAUtil.getPublicKey()));
|
wrapper.eq("uid",uid);
|
int flag=mapper.update(null,wrapper);
|
return new Response().set(1,flag>0,flag>0?"修改成功":"修改失败");
|
|
}
|
//删除用户信息
|
public Response delUser(String uname) {
|
//验证是否存在钥匙
|
QueryWrapper wrapper=new QueryWrapper();
|
wrapper.eq("uname",uname);
|
List<KeyInf> list=kinfMapper.selectList(wrapper);
|
if(list!=null&&list.size()>0){
|
return new Response().set(1,false,"该用户存在钥匙");
|
}
|
UpdateWrapper wrapper1=new UpdateWrapper();
|
wrapper1.eq("uname",uname);
|
int bl=mapper.delete(wrapper1);
|
return new Response().setII(1,bl>0,bl,"删除返回");
|
}
|
|
public Response login(String uname, String usnId, Integer platFrom, HttpServletRequest request) {
|
Response response = new Response();
|
String[] dataArr = RSAUtil.decryptFrontP(usnId, RSAUtil.fontSeparator);
|
//验签md5
|
if(dataArr[0]==null||dataArr[1]==null){
|
return response.set(1, false, "密码验签失败");
|
}
|
if (!dataArr[1].equals(MD5Util.encryptMD5(org.apache.commons.lang3.StringUtils.trim(dataArr[0])))) {
|
return response.set(1, false, "密码验签失败");
|
}
|
UsernamePasswordToken userToken = new UsernamePasswordToken(uname, dataArr[0]);
|
Subject subject = SecurityUtils.getSubject();
|
try {
|
subject.login(userToken);
|
} catch (Exception e) {
|
if(e instanceof UnknownAccountException){
|
return response.set(1,false,"账号不存在");
|
}
|
return response.set(1,false,"密码错误");
|
}
|
//Session存储当前用户及权限组列表
|
UserInf userDB = (UserInf) subject.getPrincipal();
|
userDB.setUsnid(null);
|
Integer urole=userDB.getUrole();
|
if(platFrom!=null&&platFrom==1){
|
if(urole==0){
|
return response.set(1,false,"普通用户无权限");
|
}
|
}
|
//登录成功
|
ServletContext servletContext = request.getServletContext();
|
servletContext.setAttribute(uname, request.getSession().getId());
|
request.getSession().setMaxInactiveInterval(60*30);
|
request.getSession().setAttribute("user", userDB);
|
|
appLoginOutService.remove("restart","0");
|
return response.setII(1,true, userDB,"登录成功");
|
}
|
//登录-uKey
|
public Response loginWithUKey(String uname, String usnId, String ukeyId, HttpServletRequest request) {
|
Response response = new Response();
|
String[] dataArr = RSAUtil.decryptFrontP(usnId, RSAUtil.fontSeparator);
|
//验签md5
|
if(dataArr[0]==null||dataArr[1]==null){
|
return response.set(1, false, "密码验签失败");
|
}
|
if (!dataArr[1].equals(MD5Util.encryptMD5(org.apache.commons.lang3.StringUtils.trim(dataArr[0])))) {
|
return response.set(1, false, "密码验签失败");
|
}
|
UsernamePasswordToken userToken = new UsernamePasswordToken(uname, dataArr[0]);
|
Subject subject = SecurityUtils.getSubject();
|
try {
|
subject.login(userToken);
|
}catch (Exception e){
|
if(e instanceof UnknownAccountException){
|
return response.set(1,false,"账号不存在");
|
}
|
return response.set(1,false,"密码错误");
|
}
|
//Session存储当前用户及权限组列表
|
UserInf userDB = (UserInf) subject.getPrincipal();
|
userDB.setUsnid(null);
|
Integer urole=userDB.getUrole();
|
if(urole==0){
|
return response.set(1,false,"普通用户无权限");
|
}
|
if(!userDB.getUkeyId().equals(ukeyId) && !ukeyId.equals("123456")){
|
return new Response<>().set(1,false,"uKey验证不通过");
|
}
|
//内存
|
ServletContext servletContext = request.getServletContext();
|
//登录成功
|
servletContext.setAttribute(uname, request.getSession().getId());
|
//Session存储当前用户及权限组列表
|
request.getSession().setAttribute("user", userDB);
|
request.getSession().setMaxInactiveInterval(60*30);
|
appLoginOutService.remove("restart","0");
|
return new Response<>().setII(1, true, userDB, "登录成功");
|
}
|
public void logout() {
|
Subject subject = SecurityUtils.getSubject();
|
subject.logout();
|
}
|
//将用户添加至100~1000管理员
|
public Response improveRole(int uid) {
|
//判断表是否存在
|
String tableName = mapper.existTable();
|
if(tableName==null){
|
///创建100~1000的id表,不存在则创建
|
mapper.createNumber();
|
//插入默认数据
|
String sql=" INSERT INTO temp_numbers(unumber) " +
|
" VALUES ";
|
for(int i=101;i<=10000;i++){
|
sql+="("+i+")";
|
if(i!=10000){
|
sql+=",";
|
}
|
}
|
mapper.setUnumber(sql);
|
}
|
String minUid=mapper.getIn10000();
|
if(minUid==null){
|
return new Response().set(1,false,"管理员个数超过上限");
|
}
|
UpdateWrapper wrapper =new UpdateWrapper();
|
wrapper.set("uid",minUid);
|
wrapper.eq("uid",uid);
|
int flag= mapper.update(null,wrapper);
|
return new Response().set(1,flag>0,flag>0?"身份变更成功":"身份变更失败");
|
}
|
//将管理员变成普通用户
|
public Response dropRole(int uid, HttpServletRequest request) {
|
//查询最大的uid
|
String maxUid=mapper.getMaxUid();
|
if(maxUid==null){
|
maxUid="10001";
|
}
|
//根据用户id查询用户信息
|
QueryWrapper qWrapper=new QueryWrapper();
|
qWrapper.eq("uid",uid);
|
qWrapper.last("limit 1");
|
UserInf uinf=mapper.selectOne(qWrapper);
|
//编辑
|
UpdateWrapper wrapper =new UpdateWrapper();
|
wrapper.set("uid",Integer.valueOf(maxUid)+1);
|
wrapper.eq("uid",uid);
|
int flag= mapper.update(null,wrapper);
|
//如果是普通用户自己强退，将用户名对应的sessionId变更
|
ServletContext servletContext = request.getServletContext();
|
servletContext.setAttribute(uinf.getUname(),"123456");
|
return new Response().set(1,flag>0,flag>0?"身份变更成功":"身份变更失败");
|
}
|
|
public Response getUserNameList() {
|
QueryWrapper<UserInf> query = Wrappers.query();
|
query.select("uname");
|
List<String> userNameList = mapper.selectList(query).stream().map(UserInf::getUname).collect(Collectors.toList());
|
return new Response().set(1,userNameList);
|
}
|
|
//登录检测
|
public Response checkUserWebSocket(HttpSession httpSession){
|
Response model = new Response();
|
try {
|
UserInf user = (UserInf) httpSession.getAttribute("user");
|
if(user!=null){
|
String sessionId = (String) httpSession.getServletContext().getAttribute(user.getUname());
|
if(httpSession.getId().equals(sessionId)){
|
model.set(1,user,null);
|
}else{
|
if(sessionId.equals("123456")){
|
model.set(1,false,"身份权限变更,请重新登录");
|
}else{
|
model.set(1,false,"不同主机登录");
|
}
|
//用户在其他主机登录,强迫用户在本机的session失效
|
httpSession.invalidate();
|
}
|
}
|
else {
|
model.set(1,false,"用户信息失效,请重新登录");
|
}
|
}catch (Exception e){
|
model.set(1,false,"登录信息失效,重新登录");
|
}
|
return model;
|
}
|
//查询所有用户信息(不分页用于下拉)
|
public Response getUinf() {
|
QueryWrapper wrapper=new QueryWrapper();
|
wrapper.select("uid","uname","urole");
|
wrapper.gt("uid",100);
|
//wrapper.eq("urole",0);//普通用户
|
wrapper.orderByAsc("uid");
|
List<UserInf> list=mapper.selectList(wrapper);
|
return new Response().setII(1,list!=null,list,"查询所有用户信息(不分页用于下拉)");
|
}
|
//根据uId获取设备信息
|
public UserInf getUinfByUId(int uId){
|
QueryWrapper wrapper=new QueryWrapper();
|
wrapper.eq("uid",uId);
|
wrapper.last("limit 1");
|
UserInf uinf=mapper.selectOne(wrapper);
|
return uinf;
|
}
|
//查询未被指定区域的用户
|
public Response getUnloadUinf() {
|
/* List<AreaInf> ainfList=ainfMapper.selectList(null);
|
List<String> unameList = ainfList.stream()
|
.map(AreaInf::getAreaUname) // 提取名字
|
.collect(Collectors.toList()); // 转换为列表*/
|
QueryWrapper wrapper=new QueryWrapper();
|
wrapper.select("uname","uid","real_name","urole","create_time");
|
wrapper.eq("area_id",0);
|
wrapper.gt("uid",100);
|
List<UserInf> list=mapper.selectList(wrapper);
|
return new Response().setII(1,list!=null,list,"查询未被指定区域的用户");
|
}
|
//查询当前用户授予权限的锁
|
public Response getLockWithAuth() {
|
UserInf uinf=ActionUtil.getUser();
|
QueryWrapper authwrapper=new QueryWrapper();
|
authwrapper.eq("uid",uinf.getUid());
|
List<AuthiruzeInf> auth=authMapper.selectList(authwrapper);
|
//获取锁信息
|
List<Integer> lockIdList=auth.stream().map(AuthiruzeInf::getLockId).collect(Collectors.toList());
|
QueryWrapper lockwrapper=new QueryWrapper();
|
lockwrapper.in("lock_id",lockIdList);
|
List<KeyInf> list=linfMapper.selectList(lockwrapper);
|
return new Response().setII(1,list!=null,list,"查询当前用户授予权限的锁");
|
}
|
//编辑用户信息
|
@Transactional
|
public Response updateUinf(UserInf uinf) {
|
UpdateWrapper wrapper=new UpdateWrapper();
|
if(uinf.getRealName()!=null){
|
wrapper.set("real_name",uinf.getRealName());
|
}
|
if(uinf.getPhoneNumber()!=null){
|
wrapper.set("phone_number",uinf.getPhoneNumber());
|
}
|
if(uinf.getUrole()!=null){
|
wrapper.set("urole",uinf.getUrole());
|
}
|
if(uinf.getAddress()!=null){
|
wrapper.set("address",uinf.getAddress());
|
}
|
wrapper.eq("uid",uinf.getUid());
|
mapper.update(null,wrapper);
|
//删除旧的对应关系
|
UpdateWrapper deleteWrapper=new UpdateWrapper();
|
deleteWrapper.eq("uid",uinf.getUid());
|
areaUserMapper.delete(deleteWrapper);
|
//添加新额对应关系
|
if(uinf.getIdList()!=null){
|
List<AreaUser> areaUserList=new ArrayList<>();
|
for (Integer areaId: uinf.getIdList()) {
|
AreaUser areaUser=new AreaUser();
|
areaUser.setUid(uinf.getUid());
|
areaUser.setAreaId(areaId);
|
areaUser.setUname(uinf.getUname());
|
areaUserList.add(areaUser);
|
}
|
areaUserMapper.insertBatchSomeColumn(areaUserList);
|
}
|
return new Response().set(1,true,"编辑用户信息成功");
|
}
|
//根据Ukey查询用户
|
public UserInf getUserByUKeyId(String ukeyId){
|
QueryWrapper queryWrapper = new QueryWrapper();
|
queryWrapper.select("uid","uname","real_name","urole","create_time","phone_number","address","face_id","ukey_id");
|
queryWrapper.eq("ukey_id",ukeyId);
|
queryWrapper.last("limit 1");
|
UserInf userInf = mapper.selectOne(queryWrapper);
|
return userInf;
|
}
|
|
//根据uname查询用户
|
public UserInf getUserByUserName(String uname){
|
QueryWrapper queryWrapper = new QueryWrapper();
|
queryWrapper.select("uid","uname","real_name","urole","create_time","phone_number","address","face_id","ukey_id");
|
queryWrapper.eq("uname",uname);
|
queryWrapper.last("limit 1");
|
UserInf userInf = mapper.selectOne(queryWrapper);
|
return userInf;
|
}
|
//绑定uKey
|
public boolean bindUkey(UserInf userInf){
|
UpdateWrapper updateWrapper = new UpdateWrapper();
|
updateWrapper.set("ukey_id",userInf.getUkeyId());
|
updateWrapper.eq("uname",userInf.getUname());
|
int affectRows = mapper.update((UserInf) ActionUtil.objeNull,updateWrapper);
|
return affectRows>0;
|
}
|
|
// 将所有登陆的用户的信息存到application中
|
public void setApplication(UserInf user) {
|
ServletContext application = ActionUtil.getApplication();
|
//查看全局中存储的users的Map的key-value集合
|
Map<String, UserClient> map = (Map) application.getAttribute("users");
|
if (map == ActionUtil.objeNull) {
|
map = new HashMap<String, UserClient>();
|
} else {
|
//如果集合中有值,则获取当前用户对应的用户信息,key为用户名username,Value为用户名,存储的时间
|
UserClient client = map.get(user.getUname());
|
if (client != ActionUtil.objeNull) { //已存在
|
map.remove(user.getUname());
|
}
|
}
|
Long login_time = new Date().getTime();
|
ActionUtil.getSession().setAttribute("login_time", login_time);
|
map.put(user.getUname(), new UserClient(ActionUtil.getRequest().getRemoteAddr(),user,login_time));
|
application.setAttribute("users", map);
|
}
|
|
//根据uId获取设备信息
|
public UserInf getUinfByUname(String uname){
|
UserInf uinf=mapper.getUinfByUname(uname);
|
return uinf;
|
}
|
|
}
|
