package com.iplatform.security; import com.iplatform.base.Constants; import com.iplatform.base.DefaultUserPrincipal; import com.iplatform.base.SecurityConstants; import com.iplatform.base.cache.MenuCacheProvider; import com.iplatform.base.service.UserServiceImpl; import com.iplatform.base.util.UserUtils; import com.iplatform.model.po.S_menu; import com.iplatform.model.po.S_user_core; import com.iplatform.security.config.SecurityProperties; import com.walker.infrastructure.utils.PhoneNumberUtils; import com.walker.infrastructure.utils.StringUtils; import com.walker.web.UserType; import org.slf4j.Logger; import org.slf4j.LoggerFactory; import org.springframework.security.core.userdetails.UserDetails; import org.springframework.security.core.userdetails.UserDetailsService; import org.springframework.security.core.userdetails.UsernameNotFoundException; import java.util.HashMap; import java.util.List; import java.util.Map; public class DefaultUserDetailsService implements UserDetailsService { protected final transient Logger logger = LoggerFactory.getLogger(getClass()); private UserServiceImpl userService = null; private SecurityProperties securityProperties; private MenuCacheProvider menuCacheProvider; public void setMenuCacheProvider(MenuCacheProvider menuCacheProvider) { this.menuCacheProvider = menuCacheProvider; } public void setSecurityProperties(SecurityProperties securityProperties) { this.securityProperties = securityProperties; } // public void setPasswordEncoder(PasswordEncoder passwordEncoder) { // this.passwordEncoder = passwordEncoder; // } public void setUserService(UserServiceImpl userService) { this.userService = userService; } @Override public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { // UserPrincipal userPrincipal = this.acquireUserPrincipal(username); logger.debug("loadUserByUsername = " + username); DefaultUserDetails userDetails = this.acquireUserPrincipal(username); if(userDetails == null) { throw new UsernameNotFoundException("not found user: " + username); } // 被禁用的用户也不能登录 if(!userDetails.isEnabled()) { throw new UsernameNotFoundException("user is forbidden: " + username); } // 验证用户 // 2023-01-28 验证密码放在登录回调中。 // this.validateUserInfo(userDetails.getUserPrincipal()); return userDetails; } /*private void validateUserInfo(UserPrincipal userPrincipal){ // 2023-01-26 通过 PlatformLoginCallback 来校验密码。 PlatformLoginCallback loginCallback = LoginCallbackUtils.getLoginCallbackBean(UserType.getType(userPrincipal.getUserInfo().getUser_type())); if(loginCallback == null){ throw new ApplicationRuntimeException("未找到: loginCallback, userType = " + userPrincipal.getUserInfo().getUser_type()); } boolean success = loginCallback.validatePassword(userPrincipal); if(!success){ throw new BadCredentialsException(ResponseCode.USER_CREDENTIALS_ERROR.getMessage()); } // Authentication usernamePasswordAuthenticationToken = SecurityContextHolder.getContext().getAuthentication(); // String password = usernamePasswordAuthenticationToken.getCredentials().toString(); // if(!this.passwordEncoder.matches(password, userPrincipal.getPassword())){ // throw new BadCredentialsException(ResponseCode.USER_CREDENTIALS_ERROR.getMessage()); // } logger.debug("清空必要的缓存:或更新登录缓存"); }*/ public DefaultUserDetails acquireUserPrincipal(String loginId){ if(StringUtils.isEmpty(loginId)){ return null; } DefaultUserPrincipal userPrincipal = null; // 如果超级管理员，不能查数据库，直接创建对象。2022-11-06 if(loginId.equals(Constants.SUPERVISOR_NAME_DEFAULT)){ userPrincipal = (DefaultUserPrincipal) UserUtils.createSupervisor(this.securityProperties.getSupervisorPassword()); DefaultUserDetails userDetails = new DefaultUserDetails(userPrincipal); // 2022-12-02 userDetails.addGrantedAuthority(SecurityConstants.ROLE_SUPER_ADMIN); userDetails.addGrantedAuthority(SecurityConstants.ROLE_ADMIN); userDetails.addGrantedAuthority(SecurityConstants.ROLE_USER); // userDetails.addGrantedAuthority(com.walker.web.Constants.ROLE_ACTIVITI_USER); userDetails.setRoleIdListToPrincipal(); return userDetails; } // 2023-06-28 根据登录账号是否手机号，支持移动端和PC端手机登录方式。 boolean isPhoneNumber = PhoneNumberUtils.isCellPhoneNumber(loginId); Object[] userInfo = null; if(isPhoneNumber && !this.securityProperties.isUserNameIsPhone()){ // 通过手机号字段查询用户 userInfo = this.userService.queryLoginUser(loginId, true); } else { // 通过用户名自动查询用户 userInfo = this.userService.queryLoginUser(loginId, false); } if(userInfo == null){ logger.debug("用户不存在: " + loginId); return null; } S_user_core user = (S_user_core) userInfo[0]; // 用户信息一定存在 List roleIdList = (List)userInfo[1];// 角色ID集合，不一定存在 logger.debug("找到用户: " + user.getUser_name()); // 加入普通用户具有的角色ID，权限根据角色ID判断 userPrincipal = new DefaultUserPrincipal(user); // 设置登录时间，后面要计算过期，2022-11-14 userPrincipal.setLastLoginTime(System.currentTimeMillis()); DefaultUserDetails userDetails = new DefaultUserDetails(userPrincipal); if(roleIdList != null){ for(String roleId : roleIdList){ userDetails.addGrantedAuthority(roleId); } } // 2022-12-21，用户数据权限 ========================= // 2023-07-17，由于oracle查询报错（in (:roleIds)）,暂时关闭数据权限查询 // Map dataScopeMap = this.acquireUserDataScopeList(roleIdList); // if(dataScopeMap != null){ // logger.debug("用户数据权限集合 = " + dataScopeMap); // userPrincipal.setDataScopeMap(dataScopeMap); // } // ================================================ // 2022-11-15 int userType = userDetails.getUserPrincipal().getUserInfo().getUser_type(); /* 设置用户的角色类型 */ if(userType == UserType.TYPE_SUPER){ userDetails.addGrantedAuthority(SecurityConstants.ROLE_SUPER_ADMIN); userDetails.addGrantedAuthority(SecurityConstants.ROLE_ADMIN); userDetails.addGrantedAuthority(SecurityConstants.ROLE_USER); } else if(userType == UserType.TYPE_ADMIN || userType == UserType.TYPE_ADMIN_DEPT){ userDetails.addGrantedAuthority(SecurityConstants.ROLE_ADMIN); userDetails.addGrantedAuthority(SecurityConstants.ROLE_USER); // } else if(userType == UserType.TYPE_NORMAL || userType == UserType.TYPE_APP_REG){ } else if(userType == UserType.TYPE_NORMAL){ userDetails.addGrantedAuthority(SecurityConstants.ROLE_USER); } else if(userType == UserType.TYPE_APP_REG){ // 2023-01-27 app注册用户，不给任何角色权限 // 2023-03-20 app注册用户，需要给'ROLE_USER'，因为还需要访问公共权限（登录后都能看的如：/permit/**,/getInfo），但不给任何角色！ userDetails.addGrantedAuthority(SecurityConstants.ROLE_USER); } else if(userType == UserType.TYPE_MERCHANT_ADMIN){ // 2023-06-06 商户管理员（泛指独立业务单位的：单位管理员） userDetails.addGrantedAuthority(SecurityConstants.ROLE_MERCHANT); userDetails.addGrantedAuthority(SecurityConstants.ROLE_USER); } else throw new IllegalArgumentException("unknown user type: " + userType); // 添加工作流角色，否则activiti7老报错'无权限'，2023-03-21 // userDetails.addGrantedAuthority(com.walker.web.Constants.ROLE_ACTIVITI_USER); // userDetails.setRoleIdListToPrincipal(); return userDetails; } /** * 由于oracle查询报错（in (:roleIds)）,暂时关闭数据权限查询 * @param roleIdList * @return * @date 2023-07-17 */ @Deprecated private Map acquireUserDataScopeList(List roleIdList){ if(StringUtils.isEmptyList(roleIdList)){ return null; } List dataScopeMenuIdList = this.userService.queryUserDataScopeMenuIdList(roleIdList); if(StringUtils.isEmptyList(dataScopeMenuIdList)){ return null; } Map dataScopeMap = new HashMap<>(8); S_menu menu = null; for(String menuId : dataScopeMenuIdList){ menu = this.menuCacheProvider.getCacheData(menuId); if(menu == null){ throw new IllegalStateException("菜单缓存不存在:" + menuId); } dataScopeMap.put(menu.getParent_id(), menuId.replaceFirst(Constants.DATA_SCOPE_NAME, StringUtils.EMPTY_STRING)); } return dataScopeMap; } }