From c6aa75ca4476e66f04c1d5fbe45fe391438fa07f Mon Sep 17 00:00:00 2001 From: shijie <648688341@qq.com> Date: Sun, 27 Sep 2020 19:46:01 +0800 Subject: [PATCH] =?UTF-8?q?=E6=89=BE=E5=9B=9E=E5=AF=86=E7=A0=81?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- dq-financial-hrms-auth/pom.xml | 6 +-- .../hrauth/config/AuthorizationServer.java | 36 ++++++++++++------ .../hrauth/config/SecurityConfig.java | 18 ++++++--- .../financial/hrauth/config/TokenConfig.java | 6 ++- .../controller/UserLoginController.java | 1 - .../hrauth/service/UserLoginService.java | 1 + .../service/impl/UserLoginServiceImpl.java | 32 ++++++++-------- .../src/main/resources/bootstrap.properties | 2 +- .../mapper/hrmsauth/UserLoginMapper.xml | 10 +++++ .../framework/domain/hrms/UserEntity.java | 1 + .../domain/hrms/response/HrmsCode.java | 5 ++- .../domain/hrms/response/HrmsCode.class | Bin 3288 -> 3394 bytes .../src/main/resources/application.yml | 8 +++- .../src/main/resources/jwt.properties | 2 +- 14 files changed, 85 insertions(+), 43 deletions(-) diff --git a/dq-financial-hrms-auth/pom.xml b/dq-financial-hrms-auth/pom.xml index 360c9d38..9b389a3f 100644 --- a/dq-financial-hrms-auth/pom.xml +++ b/dq-financial-hrms-auth/pom.xml @@ -52,7 +52,7 @@ - + + <!– 指明版本，解决redis存储出现的问题：java.lang.NoSuchMethodError: org.springframework.data.redis.connection.RedisConnection.set([B[B)V问题 –> 2.3.3.RELEASE @@ -77,7 +77,7 @@ com.baomidou mybatis-plus-boot-starter 3.0.5 - + --> diff --git a/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/config/AuthorizationServer.java b/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/config/AuthorizationServer.java index 0afbaf5a..bda6718d 100644 --- a/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/config/AuthorizationServer.java +++ b/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/config/AuthorizationServer.java @@ -1,3 +1,4 @@ +/* package com.daqing.financial.hrauth.config; import org.springframework.beans.factory.annotation.Autowired; @@ -18,12 +19,14 @@ import org.springframework.security.oauth2.provider.token.AuthorizationServerTok import org.springframework.security.oauth2.provider.token.DefaultTokenServices; import org.springframework.security.oauth2.provider.token.TokenStore; +*/ /** * 配置OAuth2.0授权服务器 * * @auther River * @date 2020/9/21 17:49 - */ + *//* + @Configuration @EnableAuthorizationServer public class AuthorizationServer extends AuthorizationServerConfigurerAdapter { @@ -42,9 +45,11 @@ public class AuthorizationServer extends AuthorizationServerConfigurerAdapter { @Autowired public PasswordEncoder passwordEncoder; - /** + */ +/** * 配置令牌的安全约束(允许哪些请求访问) - */ + *//* + @Override public void configure(AuthorizationServerSecurityConfigurer security) throws Exception { security @@ -53,9 +58,11 @@ public class AuthorizationServer extends AuthorizationServerConfigurerAdapter { .allowFormAuthenticationForClients(); //允许表单提交,允许客户端访问 OAuth2 授权接口，否则请求 token 会返回 401。 } - /** + */ +/** * 配置支持哪些客户端访问 - */ + *//* + @Override public void configure(ClientDetailsServiceConfigurer clients) throws Exception { clients.inMemory() @@ -72,9 +79,11 @@ public class AuthorizationServer extends AuthorizationServerConfigurerAdapter { .scopes("all"); } - /** + */ +/** * 配置令牌(token)的访问端点 - */ + *//* + @Override public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception { endpoints @@ -84,9 +93,11 @@ public class AuthorizationServer extends AuthorizationServerConfigurerAdapter { .allowedTokenEndpointRequestMethods(HttpMethod.POST); // 允许的请求方式 } - /** + */ +/** * 令牌服务 - */ + *//* + @Bean public AuthorizationServerTokenServices tokenServices(){ DefaultTokenServices service = new DefaultTokenServices(); @@ -98,12 +109,15 @@ public class AuthorizationServer extends AuthorizationServerConfigurerAdapter { return service; } - /** + */ +/** * 授权码服务(设置授权码模式的授权码如何存取,暂时在内存,后期在数据库) - */ + *//* + @Bean public AuthorizationCodeServices authorizationCodeServices(){ return new InMemoryAuthorizationCodeServices(); } } +*/ diff --git a/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/config/SecurityConfig.java b/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/config/SecurityConfig.java index a558a568..1bd30dcc 100644 --- a/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/config/SecurityConfig.java +++ b/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/config/SecurityConfig.java @@ -1,3 +1,4 @@ +/* package com.daqing.financial.hrauth.config; import com.daqing.financial.hrauth.service.impl.UserLoginServiceImpl; @@ -11,17 +12,21 @@ import org.springframework.security.config.annotation.web.configuration.WebSecur import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; import org.springframework.security.crypto.password.PasswordEncoder; +*/ /** * @auther River * @date 2020/9/22 10:26 - */ + *//* + @Configuration @EnableWebSecurity // 开启security public class SecurityConfig extends WebSecurityConfigurerAdapter { - /** + */ +/** * 不能直接new对象,否则会在注入之前被拦截器拦截 - */ + *//* + @Bean public UserLoginServiceImpl customerLoginService(){ @@ -43,9 +48,11 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter { return new BCryptPasswordEncoder(); } - /** + */ +/** * 认证管理器 - */ + *//* + @Override @Bean public AuthenticationManager authenticationManagerBean() throws Exception { @@ -65,3 +72,4 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter { } } +*/ diff --git a/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/config/TokenConfig.java b/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/config/TokenConfig.java index 10df81ec..46a7aeb7 100644 --- a/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/config/TokenConfig.java +++ b/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/config/TokenConfig.java @@ -1,3 +1,4 @@ +/* package com.daqing.financial.hrauth.config; import org.springframework.context.annotation.Bean; @@ -5,12 +6,14 @@ import org.springframework.context.annotation.Configuration; import org.springframework.security.oauth2.provider.token.TokenStore; import org.springframework.security.oauth2.provider.token.store.InMemoryTokenStore; +*/ /** * 令牌配置类 * * @auther River * @date 2020/9/22 9:54 - */ + *//* + @Configuration public class TokenConfig { @@ -20,3 +23,4 @@ public class TokenConfig { return new InMemoryTokenStore(); } } +*/ diff --git a/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/controller/UserLoginController.java b/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/controller/UserLoginController.java index 365b35f8..12e4ff95 100644 --- a/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/controller/UserLoginController.java +++ b/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/controller/UserLoginController.java @@ -11,7 +11,6 @@ import org.springframework.web.bind.annotation.*; * @date 2020/9/22 15:27 */ @RestController -@RequestMapping("/hrms/auth/userlogin") public class UserLoginController { @Autowired diff --git a/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/service/UserLoginService.java b/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/service/UserLoginService.java index 5e884bfd..de69ee57 100644 --- a/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/service/UserLoginService.java +++ b/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/service/UserLoginService.java @@ -10,4 +10,5 @@ import com.daqing.framework.domain.hrms.request.UserLoginRequest; */ public interface UserLoginService extends IService { Boolean getBackPwd(UserLoginRequest user); + } diff --git a/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/service/impl/UserLoginServiceImpl.java b/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/service/impl/UserLoginServiceImpl.java index b2e27c6b..ae846e6e 100644 --- a/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/service/impl/UserLoginServiceImpl.java +++ b/dq-financial-hrms-auth/src/main/java/com/daqing/financial/hrauth/service/impl/UserLoginServiceImpl.java @@ -1,6 +1,5 @@ package com.daqing.financial.hrauth.service.impl; -import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper; import com.baomidou.mybatisplus.extension.service.impl.ServiceImpl; import com.daqing.financial.hrauth.dao.UserLoginDao; import com.daqing.financial.hrauth.service.UserLoginService; @@ -9,17 +8,10 @@ import com.daqing.framework.domain.hrms.request.UserLoginRequest; import com.daqing.framework.domain.hrms.response.HrmsCode; import com.daqing.framework.exception.ExceptionCast; import org.apache.commons.lang3.StringUtils; -import org.springframework.security.core.authority.SimpleGrantedAuthority; -import org.springframework.security.core.userdetails.User; -import org.springframework.security.core.userdetails.UserDetails; -import org.springframework.security.core.userdetails.UserDetailsService; -import org.springframework.security.core.userdetails.UsernameNotFoundException; import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; import org.springframework.stereotype.Service; import javax.annotation.Resource; -import java.util.ArrayList; -import java.util.List; import java.util.regex.Matcher; import java.util.regex.Pattern; @@ -28,12 +20,12 @@ import java.util.regex.Pattern; * @date 2020/9/22 15:01 */ @Service("userLoginService") -public class UserLoginServiceImpl extends ServiceImpl implements UserLoginService, UserDetailsService { +public class UserLoginServiceImpl extends ServiceImpl implements UserLoginService { @Resource private UserLoginDao userLoginDao; - @Override +/* @Override public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { UserEntity user = userLoginDao.getUser(username); List authorities = new ArrayList<>(); @@ -42,7 +34,7 @@ public class UserLoginServiceImpl extends ServiceImpl UserDetails userDetails = new User(user.getAccount(),new BCryptPasswordEncoder().encode(user.getPassword()),authorities); return userDetails; - } + }*/ /** * 忘记密码 @@ -51,21 +43,27 @@ public class UserLoginServiceImpl extends ServiceImpl public Boolean getBackPwd(UserLoginRequest user){ //判断重置密码参数是否为空 if(StringUtils.isEmpty(user.getPhoneAccount())){ - ExceptionCast.cast(HrmsCode.PHNOE_ACCOUNT_ILLEGAL); + ExceptionCast.cast(HrmsCode.PHNOE_ACCOUNT_NOT_EMPTY); } if(StringUtils.isEmpty(user.getVerifyCode())){ - ExceptionCast.cast(HrmsCode.VERIFY_CODE_ILLEGAL); + ExceptionCast.cast(HrmsCode.VERIFY_CODE_NOT_EMPTY); } if(StringUtils.isEmpty(user.getNewPwd())){ ExceptionCast.cast(HrmsCode.NEW_PASSWORD_NOT_EMPTY); } //校验手机账号是否存在 - int count = this.count(new QueryWrapper() - .eq("phone_account", user.getPhoneAccount())); + String phoneAccount = user.getPhoneAccount(); +/* int count = this.count(new QueryWrapper() + .eq("phone_account", phoneAccount));*/ + int count = userLoginDao.selectCount(phoneAccount); if (count == 0) { - ExceptionCast.cast(HrmsCode.PHNOE_ACCOUNT_ILLEGAL); + ExceptionCast.cast(HrmsCode.PHNOE_ACCOUNT_NOT_EMPTY); + } + //判断验证码是否匹配,目前固定为123456 + String verify = "123456"; + if(!verify.equals(user.getVerifyCode())){ + ExceptionCast.cast(HrmsCode.NEW_PASSWORD_NOT_EMPTY); } - //判断验证码是否匹配 //密码格式校验 Pattern pattern = Pattern.compile("^[a-zA-Z0-9]{8,20}$"); diff --git a/dq-financial-hrms-auth/src/main/resources/bootstrap.properties b/dq-financial-hrms-auth/src/main/resources/bootstrap.properties index 40330e13..a7c7a0bb 100644 --- a/dq-financial-hrms-auth/src/main/resources/bootstrap.properties +++ b/dq-financial-hrms-auth/src/main/resources/bootstrap.properties @@ -1,6 +1,6 @@ #�������� -spring.application.name=dq-financial-hrms +spring.application.name=dq-financial-hrms-auth #�������ĵ�ַ spring.cloud.nacos.config.server-addr=192.168.31.142:8848 spring.cloud.nacos.config.namespace=7632bdaa-3381-4669-b3f9-2fc73be451e8 diff --git a/dq-financial-hrms-auth/src/main/resources/mapper/hrmsauth/UserLoginMapper.xml b/dq-financial-hrms-auth/src/main/resources/mapper/hrmsauth/UserLoginMapper.xml index 00a7fad6..f412f4fd 100644 --- a/dq-financial-hrms-auth/src/main/resources/mapper/hrmsauth/UserLoginMapper.xml +++ b/dq-financial-hrms-auth/src/main/resources/mapper/hrmsauth/UserLoginMapper.xml @@ -2,6 +2,16 @@ + + + + + + + + + + update hrms_user set password = #{password} where phone_account = #{phoneAccount} diff --git a/dq-framework-model/src/main/java/com/daqing/framework/domain/hrms/UserEntity.java b/dq-framework-model/src/main/java/com/daqing/framework/domain/hrms/UserEntity.java index b45d3d3d..e6f5bebe 100644 --- a/dq-framework-model/src/main/java/com/daqing/framework/domain/hrms/UserEntity.java +++ b/dq-framework-model/src/main/java/com/daqing/framework/domain/hrms/UserEntity.java @@ -77,4 +77,5 @@ public class UserEntity implements Serializable { * 更新时间 */ private Date motifyTime; + } diff --git a/dq-framework-model/src/main/java/com/daqing/framework/domain/hrms/response/HrmsCode.java b/dq-framework-model/src/main/java/com/daqing/framework/domain/hrms/response/HrmsCode.java index 3f39ab24..34c752d1 100644 --- a/dq-framework-model/src/main/java/com/daqing/framework/domain/hrms/response/HrmsCode.java +++ b/dq-framework-model/src/main/java/com/daqing/framework/domain/hrms/response/HrmsCode.java @@ -21,10 +21,11 @@ public enum HrmsCode implements ResultCode { DEPT_EMP_EXSIT(false, 22004, "请将部门下所有员工移除后再执行删除操作！"), DEPT_POSITION_EXSIT(false, 22005, "该部门下已存在该职位！"), - PHNOE_ACCOUNT_ILLEGAL(false,33001,"手机号码为空"), - VERIFY_CODE_ILLEGAL(false,33002,"短信验证码为空"), + PHNOE_ACCOUNT_NOT_EMPTY(false,33001,"手机号码为空"), + VERIFY_CODE_NOT_EMPTY(false,33002,"短信验证码为空"), NEW_PASSWORD_NOT_EMPTY(false,33003,"新密码不能为空"), NEW_PASSWORD_ILLEGAL(false,33004,"新密码格式不正确"), + VERIFY_CODE_ILLEGAL(false,33005,"验证码不匹配"), EMP_POSITION_EXSIT(false, 22006, "该职位下已关联员工！"); diff --git a/dq-framework-model/target/classes/com/daqing/framework/domain/hrms/response/HrmsCode.class b/dq-framework-model/target/classes/com/daqing/framework/domain/hrms/response/HrmsCode.class index bb64c0362d9ea4cdb40b39961acfa54601a59eef..234a83103a433b289b338ecf3aff5fc3a7f085f2 100644 GIT binary patch delta 1424 zcmZuwOK_7_6#j0~BsYKWl#ro7+v!-x4qB$eqq^`>plzByfF`96Bvl9@iM7xcZ79Cb zP|HK0wZe~pShNUeb*7?(nL;TpTsbbBVZ*R-M^fTrTe0IM_h;X;WPiE&<^bKoNfK0f}>xm8PAn|yw6u-4=8cltVlK7U8h+tS(*5GdU2ZEJ1_ z1U>$GZzgVjC#uY=VsYY6F>NX6;P!PYOyImgmFaR6nw6q7uF!=~6nyY2v|^J&8`=ey z>^X!g9S14S-MTM;hQS`CcU^pC& z#nvcvV;iR~2{qLok@;Q{x&~rS$)*1#Qxmhv*)gh| znz}G|{!4`o`uOx0Blj*3-QS!Xxt=~as<4rcziofS+5%7FFZ&7+uYo`<7St5+Jpe-T ztdTrxB+nYjvqo~LksN9yGa9L=Mk=9^O3?3N;b+rGFQ<_n4{#NO9ve`|r}5s5XUWDE zb4r#J21sNl1{6@H3(x7ykFw;^?9B6&S6XGz!_tAY_F z*IJREt$i}5whbYzUHd<6bx!S$dF^fIrYsKyS=yR;4;GrD2(@R6=`$)?GIv{`wae+Z z0+!BedBttC>KHfjewJHlLzJQxyg(jlqH}bhJga)912pM5Iv30I|vr*L+RksIR m#ucn^ikG={(k|ERT3`% delta 1329 zcmaJ=Nla5=5dPll^8UU)D-vr2G!i9fiNWn)A_y%7sSBG>6-7`h?zm8K*McZ6fZJ1C zak-diR4_HcG*P2RuUPIW`C;#5i5=ecmPVDqGaU!a}M4uL`o(ELfD zllduuBIch3PBT9vFpv2cfwRod2^2H`Dqu1{FAxy8z-E_*iyD+m=18U6Y-916!u3MV)~>xUmvlI}9?3qjb z$XAfuf1PAwi$Xyxkr9t0 zZSwHQQi>ZgOQ-9hf@IG}waiU&j)}x`XCa9(l z?1bVH)Fcp#-ne+8ESZx~O^d*4bE01Hk6-c*wW-p+)KNc`<`vyj67OoHteZuT02n)z z%N9?XUJF?~>%k~b+lE!LwbgVkt*$)%&mm1p*eR_v=aTlnL-HgP)8Z!(42 diff --git a/dq-govern-gateway/src/main/resources/application.yml b/dq-govern-gateway/src/main/resources/application.yml index 2241cc7f..865b65c5 100644 --- a/dq-govern-gateway/src/main/resources/application.yml +++ b/dq-govern-gateway/src/main/resources/application.yml @@ -17,4 +17,10 @@ spring: predicates: - Path=/api/** filters: - - RewritePath=/api/(?.*),/ $\{segment} \ No newline at end of file + - RewritePath=/api/(?.*),/ $\{segment} + - id: hrms_auth_route + uri: http://localhost:9000/dq-financial-hrms-auth #lb://dq-financial-hrms-auth + predicates: + - Path=/apiHrmsAuth/** + filters: + - RewritePath=/apiHrmsAuth/(?.*), /$\{segment} \ No newline at end of file diff --git a/dq-govern-gateway/src/main/resources/jwt.properties b/dq-govern-gateway/src/main/resources/jwt.properties index b72b07ea..a37d3cc8 100644 --- a/dq-govern-gateway/src/main/resources/jwt.properties +++ b/dq-govern-gateway/src/main/resources/jwt.properties @@ -1 +1 @@ -jwt.ignoreUrlList=/api/hrms/employee/list,/route-api/refresh \ No newline at end of file +jwt.ignoreUrlList=/apiHrmsAuth/getBackPwd, \ No newline at end of file