462 lines
12 KiB
Java
462 lines
12 KiB
Java
package com.nis.web.security;
|
||
|
||
import java.util.ArrayList;
|
||
import java.util.HashMap;
|
||
import java.util.List;
|
||
import java.util.Map;
|
||
|
||
import org.apache.shiro.SecurityUtils;
|
||
import org.apache.shiro.UnavailableSecurityManagerException;
|
||
import org.apache.shiro.session.InvalidSessionException;
|
||
import org.apache.shiro.session.Session;
|
||
import org.apache.shiro.subject.Subject;
|
||
|
||
import com.google.code.kaptcha.Constants;
|
||
import com.google.common.collect.Maps;
|
||
import com.nis.domain.SysArea;
|
||
import com.nis.domain.SysMenu;
|
||
import com.nis.domain.SysOffice;
|
||
import com.nis.domain.SysRole;
|
||
import com.nis.domain.SysUser;
|
||
import com.nis.util.CacheUtils;
|
||
import com.nis.util.StringUtil;
|
||
import com.nis.util.StringUtils;
|
||
import com.nis.util.TreeUtil;
|
||
import com.nis.web.dao.SysAreaDao;
|
||
import com.nis.web.dao.SysMenuDao;
|
||
import com.nis.web.dao.SysOfficeDao;
|
||
import com.nis.web.dao.SysRoleDao;
|
||
import com.nis.web.dao.UserDao;
|
||
import com.nis.web.security.SystemAuthorizingRealm.Principal;
|
||
import com.nis.web.service.BaseService;
|
||
import com.nis.web.service.SpringContextHolder;
|
||
|
||
|
||
/**
|
||
* 用户工具类
|
||
* @author darnell
|
||
* @version
|
||
*/
|
||
public class UserUtils {
|
||
|
||
private static UserDao userDao = SpringContextHolder.getBean(UserDao.class);
|
||
private static SysOfficeDao officeDao = SpringContextHolder.getBean(SysOfficeDao.class);
|
||
private static SysRoleDao roleDao = SpringContextHolder.getBean(SysRoleDao.class);
|
||
private static SysMenuDao sysMenuDao = SpringContextHolder.getBean(SysMenuDao.class);
|
||
private static SysAreaDao areaDao = SpringContextHolder.getBean(SysAreaDao.class);
|
||
|
||
|
||
public static final String USER_CACHE = "userCache";
|
||
public static final String USER_CACHE_ID_ = "id_";
|
||
public static final String USER_CACHE_LOGIN_NAME_ = "ln";
|
||
public static final String USER_CACHE_LIST_BY_OFFICE_ID_ = "oid_";
|
||
|
||
public static final String CACHE_ROLE_LIST = "roleList";
|
||
public static final String CACHE_MENU_LIST = "menuList";
|
||
public static final String CACHE_MENU_CFG_LIST = "menuCfgList";
|
||
public static final String CACHE_AREA_LIST = "areaList";
|
||
public static final String CACHE_OFFICE_LIST = "officeList";
|
||
public static final String CACHE_OFFICE_ALL_LIST = "officeAllList";
|
||
public static final String CACHE_OFFICE_ALL_MAP = "officeAllMap";
|
||
|
||
|
||
/**
|
||
* 根据ID获取用户
|
||
* @param id
|
||
* @return 取不到返回null
|
||
*/
|
||
public static SysUser get(String id){
|
||
SysUser user = (SysUser)CacheUtils.get(USER_CACHE, USER_CACHE_ID_ + id);
|
||
if (user == null){
|
||
user = userDao.getUserWithRelation(new SysUser(Long.valueOf(id),null));
|
||
if (user == null){
|
||
return null;
|
||
}
|
||
CacheUtils.put(USER_CACHE, USER_CACHE_ID_ + user.getId(), user);
|
||
CacheUtils.put(USER_CACHE, USER_CACHE_LOGIN_NAME_ + user.getLoginId(), user);
|
||
}
|
||
return user;
|
||
}
|
||
|
||
/**
|
||
* 根据登录名获取用户
|
||
* @param loginName
|
||
* @return 取不到返回null
|
||
*/
|
||
public static SysUser getByLoginName(String loginName){
|
||
SysUser user = (SysUser)CacheUtils.get(USER_CACHE, USER_CACHE_LOGIN_NAME_ + loginName);
|
||
if (user == null){
|
||
user = userDao.getUserWithRelation(new SysUser(null,loginName));
|
||
if (user == null){
|
||
return null;
|
||
}
|
||
CacheUtils.put(USER_CACHE, USER_CACHE_ID_ + user.getId(), user);
|
||
CacheUtils.put(USER_CACHE, USER_CACHE_LOGIN_NAME_ + user.getLoginId(), user);
|
||
}
|
||
return user;
|
||
}
|
||
|
||
/**
|
||
* 清除当前用户缓存
|
||
*/
|
||
public static void clearCache(){
|
||
removeCache(CACHE_ROLE_LIST);
|
||
removeCache(CACHE_MENU_LIST);
|
||
removeCache(CACHE_MENU_CFG_LIST);
|
||
removeCache(CACHE_AREA_LIST);
|
||
removeCache(CACHE_OFFICE_LIST);
|
||
removeCache(CACHE_OFFICE_ALL_LIST);
|
||
UserUtils.clearCache(getUser());
|
||
}
|
||
|
||
/**
|
||
* 清除指定用户缓存
|
||
* @param user
|
||
*/
|
||
public static void clearCache(SysUser user){
|
||
CacheUtils.remove(USER_CACHE, USER_CACHE_ID_ + user.getId());
|
||
CacheUtils.remove(USER_CACHE, USER_CACHE_LOGIN_NAME_ + user.getLoginId());
|
||
CacheUtils.remove(USER_CACHE, USER_CACHE_LOGIN_NAME_ + user.getOldLoginId());
|
||
if (user.getOffice() != null && user.getOffice().getId() != null){
|
||
CacheUtils.remove(USER_CACHE, USER_CACHE_LIST_BY_OFFICE_ID_ + user.getOffice().getId());
|
||
}
|
||
|
||
}
|
||
|
||
/**
|
||
* 获取当前用户
|
||
* @return 取不到返回 new User()
|
||
*/
|
||
public static SysUser getUser(){
|
||
Principal principal = getPrincipal();
|
||
if (principal!=null){
|
||
SysUser user = get(String.valueOf(principal.getId()));
|
||
if (user != null){
|
||
return user;
|
||
}
|
||
return new SysUser();
|
||
}
|
||
// 如果没有登录，则返回实例化空的User对象。
|
||
return new SysUser();
|
||
}
|
||
|
||
|
||
/**
|
||
* 验证码是否合法
|
||
* @param validateCode
|
||
* @return
|
||
*/
|
||
public static boolean validateCodeIsValid(String validateCode) {
|
||
String code = (String) getSession().getAttribute(Constants.KAPTCHA_SESSION_KEY);
|
||
return (StringUtil.isBlank(validateCode) || validateCode.toUpperCase().equals(code));
|
||
}
|
||
|
||
/**
|
||
* 获取当前用户角色列表
|
||
* @return
|
||
*/
|
||
public static List<SysRole> getRoleList(){
|
||
@SuppressWarnings("unchecked")
|
||
List<SysRole> roleList = (List<SysRole>)getCache(CACHE_ROLE_LIST);
|
||
if (roleList == null){
|
||
roleList = roleDao.findAllList(new SysRole());
|
||
putCache(CACHE_ROLE_LIST, roleList);
|
||
}
|
||
return roleList;
|
||
}
|
||
|
||
|
||
|
||
|
||
/**
|
||
* 获取当前用户授权菜单
|
||
* @return
|
||
*/
|
||
public static List<SysMenu> getMenuList(){
|
||
@SuppressWarnings("unchecked")
|
||
List<SysMenu> menuList = (List<SysMenu>)getCache(CACHE_MENU_LIST);
|
||
if (menuList == null){
|
||
SysUser user = getUser();
|
||
if (user.isAdmin()){
|
||
menuList = sysMenuDao.findAllList(new SysMenu());
|
||
}else{
|
||
menuList = sysMenuDao.findSysMenuByUserId(user.getId());
|
||
}
|
||
putCache(CACHE_MENU_LIST, menuList);
|
||
}
|
||
return menuList;
|
||
|
||
|
||
|
||
}
|
||
/**
|
||
* 获取所有业务配置菜单
|
||
* @return
|
||
*/
|
||
public static List<SysMenu> getMenuCfgList(){
|
||
@SuppressWarnings("unchecked")
|
||
List<SysMenu> menuList = (List<SysMenu>)getCache(CACHE_MENU_CFG_LIST);
|
||
if (StringUtil.isEmpty(menuList)){
|
||
menuList = sysMenuDao.findAllCfgList(com.nis.util.Constants.POLICIES_MENU_ID);
|
||
putCache(CACHE_MENU_CFG_LIST, menuList);
|
||
}
|
||
return menuList;
|
||
}
|
||
|
||
public static String getMenuNameById(String id) {
|
||
for (SysMenu menu : getMenuList()) {
|
||
if (menu.getId() == Long.valueOf(id)) {
|
||
return menu.getName();
|
||
}
|
||
}
|
||
return "";
|
||
}
|
||
|
||
|
||
|
||
|
||
/**
|
||
* 按照菜单各级递归排列
|
||
* @return
|
||
*/
|
||
public static List<SysMenu> getMenuTreeList(){
|
||
return new TreeUtil(getMenuList()).buildTree();
|
||
}
|
||
|
||
/**
|
||
* 按照菜单各级递归排列-左侧菜单
|
||
* @return
|
||
*/
|
||
public static List<SysMenu> getLeftMenuTreeList(){
|
||
|
||
List<SysMenu> newMenuList = new TreeUtil(getMenuList()).buildTreeLeft();
|
||
/* for (SysMenu menu : newMenuList) {
|
||
menu.getChildren();
|
||
|
||
}*/
|
||
|
||
return newMenuList;
|
||
}
|
||
|
||
|
||
|
||
|
||
|
||
|
||
/**
|
||
* 验证用户是否有该权限
|
||
* @param permission
|
||
* @return
|
||
*/
|
||
public static boolean checkPermission(String permission) {
|
||
return SecurityUtils.getSubject().isPermitted(permission);
|
||
}
|
||
|
||
|
||
|
||
/**
|
||
* 获取当前用户有权限访问的部门
|
||
* @return
|
||
*/
|
||
public static List<SysOffice> getOfficeList(){
|
||
@SuppressWarnings("unchecked")
|
||
List<SysOffice> officeList = (List<SysOffice>)getCache(CACHE_OFFICE_LIST);
|
||
if (officeList == null){
|
||
SysUser user = getUser();
|
||
if (user.isAdmin()){
|
||
officeList = officeDao.findAllList(new SysOffice());
|
||
}else{
|
||
SysOffice office = new SysOffice();
|
||
office.getSqlMap().put("dsf", BaseService.dataScopeFilter(user, "a", ""));
|
||
officeList = officeDao.findList(office);
|
||
}
|
||
putCache(CACHE_OFFICE_LIST, officeList);
|
||
}
|
||
return officeList;
|
||
}
|
||
|
||
|
||
|
||
/**
|
||
* 获取当前用户授权的区域
|
||
* @return
|
||
*/
|
||
public static List<SysArea> getAreaList(){
|
||
@SuppressWarnings("unchecked")
|
||
List<SysArea> areaList = (List<SysArea>)getCache(CACHE_AREA_LIST);
|
||
if (areaList == null){
|
||
areaList = areaDao.findAllList(new SysArea());
|
||
putCache(CACHE_AREA_LIST, areaList);
|
||
}
|
||
return areaList;
|
||
}
|
||
|
||
/**
|
||
* 获取当前用户有权限访问的部门
|
||
* @return
|
||
*/
|
||
public static List<SysOffice> getOfficeAllList(){
|
||
@SuppressWarnings("unchecked")
|
||
List<SysOffice> officeList = (List<SysOffice>)getCache(CACHE_OFFICE_ALL_LIST);
|
||
if (officeList == null){
|
||
officeList = officeDao.findAllList(new SysOffice());
|
||
putCache(CACHE_OFFICE_ALL_MAP, getOfficeAllMap(officeList));
|
||
}
|
||
|
||
return officeList;
|
||
}
|
||
|
||
/**
|
||
* 获取当前用户有权限访问的部门
|
||
* @return
|
||
*/
|
||
public static Map<Long, SysOffice> getOfficeAllMap(){
|
||
@SuppressWarnings("unchecked")
|
||
Map<Long, SysOffice> officeMap = (Map<Long, SysOffice>)getCache(CACHE_OFFICE_ALL_MAP);
|
||
if (officeMap == null){
|
||
officeMap = getOfficeAllMap(getOfficeAllList());
|
||
}
|
||
|
||
return officeMap;
|
||
}
|
||
|
||
|
||
|
||
|
||
private static Map<Long, SysOffice> getOfficeAllMap(List<SysOffice> officeList) {
|
||
Map<Long, SysOffice> officeMap = new HashMap<Long,SysOffice>();
|
||
for (SysOffice office: officeList) {
|
||
officeMap.put(office.getId(), office);
|
||
}
|
||
return officeMap;
|
||
}
|
||
|
||
|
||
/**
|
||
* 获取当前部门各个部门级别描述
|
||
* @param deptId
|
||
* @return
|
||
*/
|
||
public static String getOfficeDesc(Long deptId) {
|
||
|
||
StringBuilder offices = new StringBuilder();
|
||
Map<Long, SysOffice> officeMap = getOfficeAllMap();
|
||
SysOffice office = officeMap.get(deptId);
|
||
|
||
if(!StringUtil.isEmpty(office)) {
|
||
|
||
String[] parentIds = office.getParentIds().split(",");
|
||
|
||
for(String id : parentIds) {
|
||
if (StringUtils.isNotBlank(id) && !id.equals("0") && !id.equals("1")) {//去除空|0无意义|1顶部公司组织机构
|
||
SysOffice parentOffice = officeMap.get(Long.valueOf(id));
|
||
offices.append(StringUtil.isEmpty(parentOffice) ? "" : parentOffice.getName()).append("-");
|
||
}
|
||
}
|
||
|
||
offices.append(office.getName());
|
||
}
|
||
return offices.toString();
|
||
|
||
}
|
||
|
||
|
||
|
||
|
||
/**
|
||
* 获取授权主要对象
|
||
*/
|
||
public static Subject getSubject(){
|
||
return SecurityUtils.getSubject();
|
||
}
|
||
|
||
/**
|
||
* 获取当前登录者对象
|
||
*/
|
||
public static Principal getPrincipal(){
|
||
try{
|
||
Subject subject = SecurityUtils.getSubject();
|
||
Principal principal = (Principal)subject.getPrincipal();
|
||
|
||
if (principal != null){
|
||
return principal;
|
||
}
|
||
// subject.logout();
|
||
}catch (UnavailableSecurityManagerException e) {
|
||
|
||
}catch (InvalidSessionException e){
|
||
|
||
}
|
||
return null;
|
||
}
|
||
|
||
public static Session getSession(){
|
||
try{
|
||
Subject subject = SecurityUtils.getSubject();
|
||
Session session = subject.getSession(false);
|
||
if (session == null){
|
||
session = subject.getSession();
|
||
}
|
||
if (session != null){
|
||
return session;
|
||
}
|
||
// subject.logout();
|
||
}catch (InvalidSessionException e){
|
||
|
||
}
|
||
return null;
|
||
}
|
||
|
||
// ============== User Cache ==============
|
||
|
||
public static Object getCache(String key) {
|
||
return getCache(key, null);
|
||
}
|
||
|
||
public static Object getCache(String key, Object defaultValue) {
|
||
// Object obj = getCacheMap().get(key);
|
||
Object obj = getSession().getAttribute(key);
|
||
return obj==null?defaultValue:obj;
|
||
}
|
||
|
||
public static void putCache(String key, Object value) {
|
||
// getCacheMap().put(key, value);
|
||
getSession().setAttribute(key, value);
|
||
}
|
||
|
||
public static void removeCache(String key) {
|
||
// getCacheMap().remove(key);
|
||
getSession().removeAttribute(key);
|
||
}
|
||
|
||
|
||
|
||
/**
|
||
* 是否是验证码登录
|
||
* @param useruame 用户名
|
||
* @param isFail 计数加1
|
||
* @param clean 计数清零
|
||
* @return
|
||
*/
|
||
@SuppressWarnings("unchecked")
|
||
public static boolean isValidateCodeLogin(String useruame, boolean isFail, boolean clean){
|
||
Map<String, Integer> loginFailMap = (Map<String, Integer>)CacheUtils.get("loginFailMap");
|
||
if (loginFailMap==null){
|
||
loginFailMap = Maps.newHashMap();
|
||
CacheUtils.put("loginFailMap", loginFailMap);
|
||
}
|
||
Integer loginFailNum = loginFailMap.get(useruame);
|
||
if (loginFailNum==null){
|
||
loginFailNum = 0;
|
||
}
|
||
if (isFail){
|
||
loginFailNum++;
|
||
loginFailMap.put(useruame, loginFailNum);
|
||
}
|
||
if (clean){
|
||
loginFailMap.remove(useruame);
|
||
}
|
||
return loginFailNum >= 3;
|
||
}
|
||
}
|