15 changed files with 68 additions and 559 deletions
@ -1,68 +0,0 @@ |
|||
package com.dreamchaser.depository_manage.security.bean; |
|||
|
|||
import com.dreamchaser.depository_manage.entity.User; |
|||
import com.dreamchaser.depository_manage.exception.MyException; |
|||
import com.dreamchaser.depository_manage.security.pool.AuthenticationTokenPool; |
|||
import com.dreamchaser.depository_manage.service.UserService; |
|||
import com.dreamchaser.depository_manage.utils.Md5; |
|||
import org.springframework.beans.factory.annotation.Autowired; |
|||
import org.springframework.stereotype.Component; |
|||
|
|||
/** |
|||
* 内置多种登录方式，和shiro中的realm类似 |
|||
*/ |
|||
@Component |
|||
public class LoginRealms { |
|||
@Autowired |
|||
private UserService userService; |
|||
|
|||
/** |
|||
* 认证，如果认证成功则返回凭证，否则返回null |
|||
* @param userToken 未认证的令牌 |
|||
* @return 如果认证成功则返回凭证，否则返回null |
|||
*/ |
|||
public String authenticate(UserToken userToken){ |
|||
if (userToken.getCredentials()!=null){ |
|||
//对密码加密
|
|||
userToken.setCredentials(Md5.crypt(userToken.getCredentials())); |
|||
} |
|||
if (userToken.getLoginType().equals(LoginType.EMAIl_PASSWORD)){ |
|||
return handle(userToken,emailLogin(userToken)); |
|||
} |
|||
//else if (其他登录方式...)
|
|||
//如果无匹配的认证方式则视为验证失败
|
|||
return null; |
|||
} |
|||
|
|||
/** |
|||
* 邮箱登录方式 |
|||
* @param userToken 令牌 |
|||
* @return 认证成功返回SimpleUser |
|||
*/ |
|||
private User emailLogin(UserToken userToken){ |
|||
return userService.findUserById(userToken.getPrincipal()); |
|||
} |
|||
|
|||
/** |
|||
* 根据传入的user是否为null（是否认证通过）来对令牌做剩下的操作（将user刻入令牌，并将该令牌放入令牌池中） |
|||
* @param userToken 经过验证后的令牌 |
|||
* @return token 根据令牌生成的凭证 ，如果认证未成功则返回null |
|||
*/ |
|||
private String handle(UserToken userToken,User user){ |
|||
if (user==null){ |
|||
//说明账户不存在
|
|||
throw new MyException(409,"该用户不存在，请注册后再登录！"); |
|||
} |
|||
//判断密码是否正确
|
|||
if (user.getPwd().equals(userToken.getCredentials())){ |
|||
//将UserP信息刻入令牌
|
|||
userToken.setUser(userService.singlePack(user)); |
|||
//获取token凭证
|
|||
String token=Md5.crypt(userToken.getPrincipal()+userToken.getInstant()); |
|||
//将令牌放入认证令牌池
|
|||
// AuthenticationTokenPool.addToken(token,userToken);
|
|||
return token; |
|||
} |
|||
return null; |
|||
} |
|||
} |
|||
@ -1,66 +0,0 @@ |
|||
package com.dreamchaser.depository_manage.security.bean; |
|||
|
|||
/** |
|||
* 登录方式枚举类 |
|||
* @author 金昊霖 |
|||
*/ |
|||
|
|||
public enum LoginType { |
|||
/** |
|||
* 通用 |
|||
*/ |
|||
COMMON("common_realm"), |
|||
/** |
|||
* 用户密码登录 |
|||
*/ |
|||
EMAIl_PASSWORD("user_password_realm"), |
|||
/** |
|||
* 手机验证码登录 |
|||
*/ |
|||
USER_PHONE("user_phone_realm"), |
|||
/** |
|||
* 第三方登录(微信登录) |
|||
*/ |
|||
WECHAT_LOGIN("wechat_login_realm"), |
|||
/** |
|||
* 第三方登录(qq登录) |
|||
*/ |
|||
QQ_LOGIN("qq_login_realm"); |
|||
|
|||
|
|||
private String type; |
|||
|
|||
LoginType(String type) { |
|||
this.type = type; |
|||
} |
|||
|
|||
public String getType() { |
|||
return type; |
|||
} |
|||
|
|||
/** |
|||
* 根据简单的字符串返回对应的LoginType |
|||
* @param s 简单的字符串 |
|||
* @return 对应的LoginType |
|||
*/ |
|||
public static LoginType getType(String s){ |
|||
switch (s) { |
|||
case "email": |
|||
return EMAIl_PASSWORD; |
|||
case "qq": |
|||
return QQ_LOGIN; |
|||
case "wechat": |
|||
return WECHAT_LOGIN; |
|||
case "phone": |
|||
return USER_PHONE; |
|||
default: |
|||
return null; |
|||
} |
|||
|
|||
} |
|||
|
|||
@Override |
|||
public String toString() { |
|||
return this.type; |
|||
} |
|||
} |
|||
@ -1,88 +0,0 @@ |
|||
package com.dreamchaser.depository_manage.security.bean; |
|||
|
|||
|
|||
import com.dreamchaser.depository_manage.entity.User; |
|||
import com.dreamchaser.depository_manage.pojo.UserP; |
|||
import lombok.Data; |
|||
|
|||
import java.time.Instant; |
|||
|
|||
|
|||
/** |
|||
* 登录令牌，默认有效期为7天 |
|||
* @author 金昊霖 |
|||
*/ |
|||
@Data |
|||
public class UserToken{ |
|||
|
|||
final long DEFAULT_TERM=60*60*24*7; |
|||
/** |
|||
* 登录方式 |
|||
*/ |
|||
private LoginType loginType; |
|||
/** |
|||
* 微信、qq的code，邮箱，或者用户名之类的 |
|||
*/ |
|||
private String principal; |
|||
|
|||
/** |
|||
* 相当于密码（一般是加密过的） |
|||
*/ |
|||
private String credentials; |
|||
|
|||
/** |
|||
* 放入的时间 |
|||
*/ |
|||
private Instant instant; |
|||
|
|||
/** |
|||
* 有效期(单位：秒) |
|||
*/ |
|||
private long term; |
|||
|
|||
/** |
|||
* 可以放一些不敏感的信息,以便下次访问时可以直接取出，如果user属性太多可以另外写个类，比如SimpleUser， |
|||
* 存放一些经常需要用到的信息。 |
|||
*/ |
|||
private UserP User; |
|||
|
|||
/** |
|||
* 根据时间判断是否有效 |
|||
* @return 有效则返回true，否则返回false |
|||
*/ |
|||
public boolean isValid(){ |
|||
return Instant.now().getEpochSecond()-instant.getEpochSecond()<=term; |
|||
} |
|||
|
|||
public UserToken(LoginType loginType, String principal, String credentials, Instant instant, long term, UserP user) { |
|||
this.loginType = loginType; |
|||
this.principal = principal; |
|||
this.credentials = credentials; |
|||
this.instant = instant; |
|||
this.term = term; |
|||
this.User = user; |
|||
} |
|||
|
|||
public UserToken(LoginType loginType, String principal, String credentials, Instant instant, long term) { |
|||
this.loginType = loginType; |
|||
this.principal = principal; |
|||
this.credentials = credentials; |
|||
this.instant = instant; |
|||
this.term = term; |
|||
} |
|||
|
|||
public UserToken(LoginType loginType, String principal, String credentials) { |
|||
this.loginType = loginType; |
|||
this.principal = principal; |
|||
this.credentials = credentials; |
|||
this.instant = Instant.now(); |
|||
this.term=DEFAULT_TERM; |
|||
} |
|||
|
|||
public UserToken(LoginType loginType, String principal) { |
|||
this.loginType = loginType; |
|||
this.principal = principal; |
|||
this.instant=Instant.now(); |
|||
this.term=DEFAULT_TERM; |
|||
} |
|||
} |
|||
@ -1,74 +0,0 @@ |
|||
package com.dreamchaser.depository_manage.security.bean; |
|||
|
|||
import lombok.Data; |
|||
|
|||
import java.time.Instant; |
|||
import java.util.Random; |
|||
|
|||
/** |
|||
* 验证码，默认有效期为五分钟 |
|||
* @author 金昊霖 |
|||
*/ |
|||
@Data |
|||
public class VerificationCode { |
|||
/** |
|||
* 默认持续时间 |
|||
*/ |
|||
private final long DEFAULT_TERM=60*5; |
|||
/** |
|||
* 验证码 |
|||
*/ |
|||
private String code; |
|||
/** |
|||
* 创建时刻 |
|||
*/ |
|||
private Instant instant; |
|||
/** |
|||
* 有效期 |
|||
*/ |
|||
private long term; |
|||
|
|||
/** |
|||
* 根据时间判断是否有效 |
|||
* @return boolean值 |
|||
*/ |
|||
public boolean isValid(){ |
|||
return Instant.now().getEpochSecond()-instant.getEpochSecond()<=term; |
|||
} |
|||
|
|||
public VerificationCode(Instant instant, long term) { |
|||
//生成随机验证码code
|
|||
generateCode(); |
|||
this.instant = instant; |
|||
this.term = term; |
|||
} |
|||
|
|||
|
|||
public VerificationCode(Instant instant) { |
|||
//生成随机验证码code
|
|||
generateCode(); |
|||
this.instant = instant; |
|||
this.term=DEFAULT_TERM; |
|||
} |
|||
|
|||
public VerificationCode() { |
|||
//生成随机验证码code
|
|||
generateCode(); |
|||
this.instant=Instant.now(); |
|||
this.term=DEFAULT_TERM; |
|||
} |
|||
|
|||
private void generateCode(){ |
|||
StringBuilder codeNum = new StringBuilder(); |
|||
int [] numbers = {0,1,2,3,4,5,6,7,8,9}; |
|||
Random random = new Random(); |
|||
for (int i = 0; i < 5; i++) { |
|||
//目的是产生足够随机的数，避免产生的数字重复率高的问题
|
|||
int next = random.nextInt(10000); |
|||
codeNum.append(numbers[next % 10]); |
|||
} |
|||
this.code= codeNum.toString(); |
|||
} |
|||
|
|||
|
|||
} |
|||
@ -1,54 +0,0 @@ |
|||
package com.dreamchaser.depository_manage.security.pool; |
|||
|
|||
import com.dreamchaser.depository_manage.security.bean.VerificationCode; |
|||
|
|||
import java.util.Map; |
|||
import java.util.concurrent.ConcurrentHashMap; |
|||
|
|||
/** |
|||
* 验证码等待池 |
|||
* @author 金昊霖 |
|||
*/ |
|||
public class VerificationCodePool { |
|||
private static Map<String, VerificationCode> pool=new ConcurrentHashMap<>(10); |
|||
|
|||
/** |
|||
* 增加一条验证码 |
|||
* @param principal 主要内容，如邮箱，电话号码等 |
|||
* @param verificationCode 验证码 |
|||
*/ |
|||
public static void addCode(String principal,VerificationCode verificationCode){ |
|||
pool.put(principal, verificationCode); |
|||
} |
|||
|
|||
/** |
|||
* 根据principal主要信息获取未过期的验证码，如果没有未过期的令牌则返回null |
|||
* @param principal 主要内容，如邮箱，电话号码等 |
|||
* @return verificationCode 未过期的验证码或者null |
|||
*/ |
|||
public static VerificationCode getCode(String principal){ |
|||
VerificationCode verificationCode=pool.get(principal); |
|||
|
|||
//如果没有相应验证码则直接返回null
|
|||
if (verificationCode==null){ |
|||
return null; |
|||
} |
|||
|
|||
//判断令牌是否过期
|
|||
if (verificationCode.isValid()){ |
|||
return verificationCode; |
|||
}else{ |
|||
//清除过期验证码
|
|||
pool.remove(principal); |
|||
return null; |
|||
} |
|||
} |
|||
|
|||
/** |
|||
* 根据主要信息principal删除对应的验证码 |
|||
* @param principal 主要信息 |
|||
*/ |
|||
public static void removeCode(String principal){ |
|||
pool.remove(principal); |
|||
} |
|||
} |
|||
Loading…
Reference in new issue