|  |  | 
 |  |  | package com.genersoft.iot.vmp.vmanager.user; | 
 |  |  |  | 
 |  |  | import com.genersoft.iot.vmp.gb28181.bean.GbStream; | 
 |  |  | import com.genersoft.iot.vmp.conf.security.SecurityUtils; | 
 |  |  | import com.genersoft.iot.vmp.conf.security.dto.LoginUser; | 
 |  |  | import com.genersoft.iot.vmp.service.IRoleService; | 
 |  |  | import com.genersoft.iot.vmp.service.IUserService; | 
 |  |  | import com.genersoft.iot.vmp.storager.dao.dto.Role; | 
 |  |  | import com.genersoft.iot.vmp.storager.dao.dto.User; | 
 |  |  | import com.genersoft.iot.vmp.utils.DateUtil; | 
 |  |  | import com.genersoft.iot.vmp.vmanager.bean.WVPResult; | 
 |  |  | import io.swagger.annotations.Api; | 
 |  |  | import io.swagger.annotations.ApiImplicitParam; | 
 |  |  | import io.swagger.annotations.ApiImplicitParams; | 
 |  |  | import io.swagger.annotations.ApiOperation; | 
 |  |  | import org.springframework.beans.factory.annotation.Value; | 
 |  |  | import org.springframework.beans.factory.annotation.Autowired; | 
 |  |  | import org.springframework.http.HttpStatus; | 
 |  |  | import org.springframework.http.ResponseEntity; | 
 |  |  | import org.springframework.security.authentication.AuthenticationManager; | 
 |  |  | import org.springframework.util.DigestUtils; | 
 |  |  | import org.springframework.util.StringUtils; | 
 |  |  | import org.springframework.web.bind.annotation.CrossOrigin; | 
 |  |  | import org.springframework.web.bind.annotation.GetMapping; | 
 |  |  | import org.springframework.web.bind.annotation.RequestMapping; | 
 |  |  | import org.springframework.web.bind.annotation.RestController; | 
 |  |  | import org.springframework.web.bind.annotation.*; | 
 |  |  |  | 
 |  |  | import javax.security.sasl.AuthenticationException; | 
 |  |  | import java.util.List; | 
 |  |  |  | 
 |  |  | @Api(tags = "用户管理") | 
 |  |  | @CrossOrigin | 
 |  |  | 
 |  |  | @RequestMapping("/api/user") | 
 |  |  | public class UserController { | 
 |  |  |  | 
 |  |  |     @Value("${auth.username}") | 
 |  |  |     private String usernameConfig; | 
 |  |  |     @Autowired | 
 |  |  |     private AuthenticationManager authenticationManager; | 
 |  |  |  | 
 |  |  |     @Value("${auth.password}") | 
 |  |  |     private String passwordConfig; | 
 |  |  |     @Autowired | 
 |  |  |     private IUserService userService; | 
 |  |  |  | 
 |  |  |     @Autowired | 
 |  |  |     private IRoleService roleService; | 
 |  |  |  | 
 |  |  |     @ApiOperation("登录") | 
 |  |  |     @ApiImplicitParams({ | 
 |  |  |             @ApiImplicitParam(name = "username", value = "用户名", dataTypeClass = String.class), | 
 |  |  |             @ApiImplicitParam(name = "password", value = "密码(32未md5加密)", dataTypeClass = String.class), | 
 |  |  |             @ApiImplicitParam(name = "username", required = true, value = "用户名", dataTypeClass = String.class), | 
 |  |  |             @ApiImplicitParam(name = "password", required = true, value = "密码(32位md5加密)", dataTypeClass = String.class), | 
 |  |  |     }) | 
 |  |  |     @GetMapping("/login") | 
 |  |  |     public String login(String username, String password){ | 
 |  |  |         if (!StringUtils.isEmpty(username) && username.equals(usernameConfig) | 
 |  |  |                 && !StringUtils.isEmpty(password) && password.equals(passwordConfig)) { | 
 |  |  |             return "success"; | 
 |  |  |     public WVPResult<LoginUser> login(@RequestParam String username, @RequestParam String password){ | 
 |  |  |         LoginUser user = null; | 
 |  |  |         WVPResult<LoginUser> result = new WVPResult<>(); | 
 |  |  |         try { | 
 |  |  |             user = SecurityUtils.login(username, password, authenticationManager); | 
 |  |  |         } catch (AuthenticationException e) { | 
 |  |  |             e.printStackTrace(); | 
 |  |  |             result.setCode(-1); | 
 |  |  |             result.setMsg("fail"); | 
 |  |  |         } | 
 |  |  |         if (user != null) { | 
 |  |  |             result.setCode(0); | 
 |  |  |             result.setMsg("success"); | 
 |  |  |             result.setData(user); | 
 |  |  |         }else { | 
 |  |  |             result.setCode(-1); | 
 |  |  |             result.setMsg("fail"); | 
 |  |  |         } | 
 |  |  |         return result; | 
 |  |  |     } | 
 |  |  |  | 
 |  |  |     @ApiOperation("修改密码") | 
 |  |  |     @ApiImplicitParams({ | 
 |  |  |             @ApiImplicitParam(name = "username", required = true, value = "用户名", dataTypeClass = String.class), | 
 |  |  |             @ApiImplicitParam(name = "oldpassword", required = true, value = "旧密码(已md5加密的密码)", dataTypeClass = String.class), | 
 |  |  |             @ApiImplicitParam(name = "password", required = true, value = "新密码(未md5加密的密码)", dataTypeClass = String.class), | 
 |  |  |     }) | 
 |  |  |     @PostMapping("/changePassword") | 
 |  |  |     public String changePassword(@RequestParam String oldPassword, @RequestParam String password){ | 
 |  |  |         // 获取当前登录用户id | 
 |  |  |         LoginUser userInfo = SecurityUtils.getUserInfo(); | 
 |  |  |         if (userInfo== null) { | 
 |  |  |             return "fail"; | 
 |  |  |         } | 
 |  |  |         String username = userInfo.getUsername(); | 
 |  |  |         LoginUser user = null; | 
 |  |  |         try { | 
 |  |  |             user = SecurityUtils.login(username, oldPassword, authenticationManager); | 
 |  |  |             if (user != null) { | 
 |  |  |                 int userId = SecurityUtils.getUserId(); | 
 |  |  |                 boolean result = userService.changePassword(userId, DigestUtils.md5DigestAsHex(password.getBytes())); | 
 |  |  |                 if (result) { | 
 |  |  |                     return "success"; | 
 |  |  |                 } | 
 |  |  |             } | 
 |  |  |         } catch (AuthenticationException e) { | 
 |  |  |             e.printStackTrace(); | 
 |  |  |         } | 
 |  |  |         return "fail"; | 
 |  |  |     } | 
 |  |  |  | 
 |  |  |  | 
 |  |  |     @ApiOperation("添加用户") | 
 |  |  |     @ApiImplicitParams({ | 
 |  |  |             @ApiImplicitParam(name = "username", required = true, value = "用户名", dataTypeClass = String.class), | 
 |  |  |             @ApiImplicitParam(name = "password", required = true, value = "密码(未md5加密的密码)", dataTypeClass = String.class), | 
 |  |  |             @ApiImplicitParam(name = "roleId", required = true, value = "角色ID", dataTypeClass = String.class), | 
 |  |  |     }) | 
 |  |  |     @PostMapping("/add") | 
 |  |  |     public ResponseEntity<WVPResult<Integer>> add(@RequestParam String username, | 
 |  |  |                                                  @RequestParam String password, | 
 |  |  |                                                  @RequestParam Integer roleId){ | 
 |  |  |         WVPResult<Integer> result = new WVPResult<>(); | 
 |  |  |         if (StringUtils.isEmpty(username) || StringUtils.isEmpty(password) || roleId == null) { | 
 |  |  |             result.setCode(-1); | 
 |  |  |             result.setMsg("参数不可为空"); | 
 |  |  |             return new ResponseEntity<>(null, HttpStatus.BAD_REQUEST); | 
 |  |  |         } | 
 |  |  |         // 获取当前登录用户id | 
 |  |  |         int currenRoleId = SecurityUtils.getUserInfo().getRole().getId(); | 
 |  |  |         if (currenRoleId != 1) { | 
 |  |  |             // 只用角色id为1才可以删除和添加用户 | 
 |  |  |             result.setCode(-1); | 
 |  |  |             result.setMsg("用户无权限"); | 
 |  |  |             return new ResponseEntity<>(result, HttpStatus.FORBIDDEN); | 
 |  |  |         } | 
 |  |  |         User user = new User(); | 
 |  |  |         user.setUsername(username); | 
 |  |  |         user.setPassword(DigestUtils.md5DigestAsHex(password.getBytes())); | 
 |  |  |  | 
 |  |  |         Role role = roleService.getRoleById(roleId); | 
 |  |  |  | 
 |  |  |         if (role == null) { | 
 |  |  |             result.setCode(-1); | 
 |  |  |             result.setMsg("roleId is not found"); | 
 |  |  |             // 角色不存在 | 
 |  |  |             return new ResponseEntity<>(result, HttpStatus.OK); | 
 |  |  |         } | 
 |  |  |         user.setRole(role); | 
 |  |  |         user.setCreateTime(DateUtil.getNow()); | 
 |  |  |         user.setUpdateTime(DateUtil.getNow()); | 
 |  |  |         int addResult = userService.addUser(user); | 
 |  |  |  | 
 |  |  |         result.setCode(addResult > 0 ? 0 : -1); | 
 |  |  |         result.setMsg(addResult > 0 ? "success" : "fail"); | 
 |  |  |         result.setData(addResult); | 
 |  |  |         return new ResponseEntity<>(result, HttpStatus.OK); | 
 |  |  |     } | 
 |  |  |  | 
 |  |  |     @ApiOperation("删除用户") | 
 |  |  |     @ApiImplicitParams({ | 
 |  |  |             @ApiImplicitParam(name = "id", required = true, value = "用户Id", dataTypeClass = Integer.class), | 
 |  |  |     }) | 
 |  |  |     @DeleteMapping("/delete") | 
 |  |  |     public ResponseEntity<WVPResult<String>> delete(@RequestParam Integer id){ | 
 |  |  |         // 获取当前登录用户id | 
 |  |  |         int currenRoleId = SecurityUtils.getUserInfo().getRole().getId(); | 
 |  |  |         WVPResult<String> result = new WVPResult<>(); | 
 |  |  |         if (currenRoleId != 1) { | 
 |  |  |             // 只用角色id为0才可以删除和添加用户 | 
 |  |  |             result.setCode(-1); | 
 |  |  |             result.setMsg("用户无权限"); | 
 |  |  |             return new ResponseEntity<>(result, HttpStatus.FORBIDDEN); | 
 |  |  |         } | 
 |  |  |         int deleteResult = userService.deleteUser(id); | 
 |  |  |  | 
 |  |  |         result.setCode(deleteResult>0? 0 : -1); | 
 |  |  |         result.setMsg(deleteResult>0? "success" : "fail"); | 
 |  |  |         return new ResponseEntity<>(result, HttpStatus.OK); | 
 |  |  |     } | 
 |  |  |  | 
 |  |  |     @ApiOperation("查询用户") | 
 |  |  |     @ApiImplicitParams({}) | 
 |  |  |     @GetMapping("/all") | 
 |  |  |     public ResponseEntity<WVPResult<List<User>>> all(){ | 
 |  |  |         // 获取当前登录用户id | 
 |  |  |         List<User> allUsers = userService.getAllUsers(); | 
 |  |  |         WVPResult<List<User>> result = new WVPResult<>(); | 
 |  |  |         result.setCode(0); | 
 |  |  |         result.setMsg("success"); | 
 |  |  |         result.setData(allUsers); | 
 |  |  |         return new ResponseEntity<>(result, HttpStatus.OK); | 
 |  |  |     } | 
 |  |  | } |