first commit

WangHan

2024-09-12 d5855a4926926698b740bc6c7ba489de47adb68b

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
package tech.powerjob.server.web.controller;
 
import org.springframework.web.bind.annotation.*;
import tech.powerjob.common.response.ResultDTO;
import tech.powerjob.common.utils.CollectionUtils;
import tech.powerjob.server.auth.Permission;
import tech.powerjob.server.auth.PowerJobUser;
import tech.powerjob.server.auth.RoleScope;
import tech.powerjob.server.auth.common.AuthConstants;
import tech.powerjob.server.auth.interceptor.ApiPermission;
import tech.powerjob.server.auth.login.LoginTypeInfo;
import tech.powerjob.server.auth.service.WebAuthService;
import tech.powerjob.server.auth.service.login.LoginRequest;
import tech.powerjob.server.auth.service.login.PowerJobLoginService;
import tech.powerjob.server.web.request.ComponentUserRoleInfo;
 
import javax.annotation.Resource;
import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.util.List;
import java.util.Optional;
 
/**
 * 登录 & 权限相关
 *
 * @author tjq
 * @since 2023/4/16
 */
@RestController
@RequestMapping("/auth")
public class AuthController {
 
    @Resource
    private WebAuthService webAuthService;
    @Resource
    private PowerJobLoginService powerJobLoginService;
 
    @GetMapping("/supportLoginTypes")
    public ResultDTO<List<LoginTypeInfo>> listSupportLoginTypes() {
        return ResultDTO.success(powerJobLoginService.fetchSupportLoginTypes());
    }
 
    @GetMapping("/thirdPartyLoginUrl")
    public ResultDTO<String> getThirdPartyLoginUrl(String type, HttpServletRequest request) {
        String url = powerJobLoginService.fetchThirdPartyLoginUrl(type, request);
        return ResultDTO.success(url);
    }
 
    /**
     * 第三方账号体系回调登录接口，eg, 接受钉钉登录回调
     * @param httpServletRequest 请求
     * @param httpServletResponse 响应
     * @return 登录结果
     */
    @RequestMapping(value = "/thirdPartyLoginCallback", method = {RequestMethod.GET, RequestMethod.POST})
    public ResultDTO<PowerJobUser> loginCallback(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse) {
 
        LoginRequest loginContext = new LoginRequest().setHttpServletRequest(httpServletRequest);
 
        // 常见登录组件的标准规范（钉钉、企业微信、飞书），第三方原样透传。开发者在对接第三方登录体系时，可能需要修改此处，将 type 回填
        final String state = httpServletRequest.getParameter("state");
        loginContext.setLoginType(state);
 
        final PowerJobUser powerJobUser = powerJobLoginService.doLogin(loginContext);
        fillJwt4LoginUser(powerJobUser, httpServletResponse);
 
        return ResultDTO.success(powerJobUser);
    }
 
    /**
     * 第三方账号体系直接登录接口，eg, 接受 PowerJob 自带账号密码体系的登录请求
     * @param loginRequest 登录请求
     * @param httpServletResponse 响应
     * @return 登录结果
     */
    @PostMapping("/thirdPartyLoginDirect")
    public ResultDTO<PowerJobUser> selfLogin(@RequestBody LoginRequest loginRequest, HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse) {
        loginRequest.setHttpServletRequest(httpServletRequest);
        try {
            final PowerJobUser powerJobUser = powerJobLoginService.doLogin(loginRequest);
            if (powerJobUser == null) {
                return ResultDTO.failed("USER_NOT_FOUND");
            }
            fillJwt4LoginUser(powerJobUser, httpServletResponse);
            return ResultDTO.success(powerJobUser);
        } catch (Exception e) {
            return ResultDTO.failed(e.getMessage());
        }
    }
 
    @GetMapping(value = "/ifLogin")
    public ResultDTO<PowerJobUser> ifLogin(HttpServletRequest httpServletRequest) {
        final Optional<PowerJobUser> powerJobUser = powerJobLoginService.ifLogin(httpServletRequest);
        return powerJobUser.map(ResultDTO::success).orElseGet(() -> ResultDTO.success(null));
    }
 
    /* ****************** 授权相关 ****************** */
 
    @GetMapping("/listGlobalAdmin")
    public ResultDTO<List<Long>> listGlobalAdmin() {
        // 全局只设置超级管理员权限
        ComponentUserRoleInfo componentUserRoleInfo = webAuthService.fetchComponentUserRoleInfo(RoleScope.GLOBAL, AuthConstants.GLOBAL_ADMIN_TARGET_ID);
        return ResultDTO.success(componentUserRoleInfo.getAdmin());
    }
 
    @PostMapping("/saveGlobalAdmin")
    @ApiPermission(name = "Auth-SaveGlobalAdmin", roleScope = RoleScope.GLOBAL, requiredPermission = Permission.SU)
    public ResultDTO<Void> saveGlobalAdmin(@RequestBody ComponentUserRoleInfo componentUserRoleInfo) {
 
        if (CollectionUtils.isEmpty(componentUserRoleInfo.getAdmin())) {
            throw new IllegalArgumentException("At least one super administrator is required!");
        }
 
        webAuthService.processPermissionOnSave(RoleScope.GLOBAL, AuthConstants.GLOBAL_ADMIN_TARGET_ID, componentUserRoleInfo);
 
        return ResultDTO.success(null);
    }
 
    private void fillJwt4LoginUser(PowerJobUser powerJobUser, HttpServletResponse httpServletResponse) {
        httpServletResponse.addCookie(new Cookie(AuthConstants.JWT_NAME, powerJobUser.getJwtToken()));
    }
}