package com.ld.igds.web;
|
|
import com.bstek.bdf2.core.context.ContextHolder;
|
import com.bstek.bdf2.core.model.DefaultUser;
|
import com.bstek.dorado.core.Configure;
|
import com.google.code.kaptcha.Constants;
|
import com.ld.igds.constant.BizType;
|
import com.ld.igds.io.constant.OrderRespEnum;
|
import com.ld.igds.io.notify.NotifyWebInvoker;
|
import com.ld.igds.log.service.HLogLoginService;
|
import com.ld.igds.sys.service.SysUserService;
|
import com.ld.igds.util.ContextUtil;
|
import com.ld.igds.util.FilesUtil;
|
import lombok.extern.slf4j.Slf4j;
|
import org.apache.commons.lang3.StringUtils;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.security.web.WebAttributes;
|
import org.springframework.stereotype.Controller;
|
import org.springframework.web.bind.annotation.PostMapping;
|
import org.springframework.web.bind.annotation.RequestMapping;
|
import org.springframework.web.bind.annotation.RequestParam;
|
import org.springframework.web.servlet.ModelAndView;
|
|
import javax.annotation.Resource;
|
import javax.servlet.http.HttpServletRequest;
|
|
/**
|
* 登录接口
|
*
|
* @author Andy
|
*/
|
@Slf4j
|
@Controller
|
@RequestMapping
|
public class LoginController {
|
|
@Autowired
|
private SysUserService sysUserService;
|
@Autowired
|
private NotifyWebInvoker notifyWebInvoker;
|
@Resource
|
private HLogLoginService loginService;
|
|
/**
|
* 登录验证入口
|
*
|
* @param username
|
* @param password
|
* @param captcha
|
* @return
|
*/
|
@PostMapping("/login-check")
|
public String login(HttpServletRequest request,
|
@RequestParam(name = "username_") String username,
|
@RequestParam(name = "password_") String password,
|
@RequestParam(name = "captcha_") String captcha) {
|
|
if (StringUtils.isEmpty(username) || StringUtils.isEmpty(password)) {
|
return "redirect:/login?tag=01&username=" + username;
|
}
|
|
boolean tag = Configure.getBoolean("bdf2.useCaptchaForLogin");
|
if (tag) {
|
if (StringUtils.isEmpty(captcha)) {
|
return "redirect:/login?tag=02&username=" + username;
|
}
|
String sessionCaptcha = (String) ContextHolder.getHttpSession().getAttribute(Constants.KAPTCHA_SESSION_KEY);
|
if (StringUtils.isEmpty(sessionCaptcha)) {
|
return "redirect:/login?tag=03&username=" + username;
|
}
|
if (!captcha.equals(sessionCaptcha)) {
|
return "redirect:/login?tag=04&username=" + username;
|
}
|
}
|
|
|
//判断限制登陆
|
int num = loginService.checkLoginLimit(request, username);
|
if (num >= 3) {
|
return "redirect:/login?tag=11&username=" + username;
|
}
|
|
DefaultUser user = sysUserService.loadUser(username);
|
if (null == user) {
|
num = loginService.addNoUser(request, username);
|
if (num >= 3) {
|
return "redirect:/login?tag=12&username=" + username;
|
}
|
return "redirect:/login?tag=05&username=" + username;
|
}
|
|
if (!user.isEnabled()) {//用户离职
|
return "redirect:/login?tag=07&username=" + username;
|
}
|
|
tag = sysUserService.checkPassword(username, password, user);
|
if (!tag) {
|
num = loginService.addPwdError(request, user);
|
if (num >= 3) {
|
return "redirect:/login?tag=11&username=" + username;
|
}
|
return "redirect:/login?tag=06&username=" + username;
|
}
|
|
String subDeptId = ContextUtil.subDeptId(user);
|
|
//添加通知原登录人员被踢
|
notifyWebInvoker.notifyWeb(user.getCompanyId(), subDeptId, user.getUsername(), OrderRespEnum.LOGOUT, BizType.SYS, "您的账号在其他地方登录，被迫下线");
|
|
loginService.addLoginInfo(request, user);
|
|
//直接定向到系统验证方法
|
return "forward:/security_check_?username_=" + username + "&password_=" + password + "&captcha_=" + captcha;
|
}
|
|
/**
|
* 登录页面
|
*
|
* @return
|
*/
|
@RequestMapping("/login")
|
public ModelAndView login(
|
@RequestParam(name = "tag", required = false) String tag,
|
@RequestParam(name = "username", required = false) String username) {
|
|
ModelAndView view = new ModelAndView();
|
|
// 设置logo-title
|
String logName = FilesUtil.getLogoTitleByCompanyId(ContextUtil.getDefaultCompanyId());
|
view.addObject("logoTitle", "./static/img/" + logName);
|
|
if (StringUtils.isNotEmpty(tag)) {
|
if ("01".equals(tag)) {
|
tag = "用户名和密码不能为空";
|
}
|
if ("02".equals(tag)) {
|
tag = "验证码不能为空";
|
}
|
if ("03".equals(tag)) {
|
tag = "验证码过期，请重新输入";
|
}
|
if ("04".equals(tag)) {
|
tag = "验证码不正确";
|
}
|
if ("05".equals(tag)) {
|
tag = "系统不存在当前用户";
|
}
|
if ("06".equals(tag)) {
|
tag = "用户密码错误";
|
}
|
if ("07".equals(tag)) {
|
tag = "当前用户已离职";
|
}
|
if ("10".equals(tag)) {
|
tag = "您的账号在其他地方登录，被迫下线";
|
}
|
if ("11".equals(tag)) {
|
tag = "连续3次错误，限制登陆10分钟";
|
}
|
if ("12".equals(tag)) {
|
tag = "连续3次输入不存在账号，限制登陆10分钟";
|
}
|
view.addObject("TAG", tag);
|
view.addObject("USERNAME", username);
|
}
|
|
// 调整使用系统异常信息
|
Exception exp = (Exception) ContextHolder.getHttpSession()
|
.getAttribute(WebAttributes.AUTHENTICATION_EXCEPTION);
|
|
if (null == exp) {
|
exp = (Exception) ContextHolder.getRequest().getAttribute(
|
WebAttributes.AUTHENTICATION_EXCEPTION);
|
}
|
if (null != exp) {
|
|
log.error("===登陆异常原因==={}", exp);
|
|
if ("Bad credentials".equals(exp.getMessage())) {
|
view.addObject("TAG", "用户名和密码错误!!");
|
} else if ("The password is invalid".equals(exp.getMessage())) {
|
view.addObject("TAG", "密码错误!!");
|
} else {
|
view.addObject("TAG", "登陆验证异常，请重新尝试");
|
}
|
}
|
|
view.setViewName("admin/login/login");
|
return view;
|
}
|
|
/**
|
* 登出
|
*
|
* @return
|
*/
|
@RequestMapping("/log-out")
|
public String logOut() {
|
log.info("======用户退出系统========{}", ContextUtil.getLoginUserCName());
|
ContextHolder.getHttpSession().removeAttribute(ContextHolder.LOGIN_USER_SESSION_KEY);
|
return "redirect:/login";
|
}
|
|
}
|
