新增鉴权模块

webapidemo-api/src/main/java/com/example/filter/AuthenticationInterceptor.java

@@ -1,8 +1,14 @@
 package com.example.filter;
 
 import com.alibaba.fastjson2.JSON;
-import com.example.service.system.IUserService;
+import com.example.entity.database.system.User;
+import com.example.entity.view.system.UserView;
+import com.example.model.AjaxResult;
+import com.example.service.system.*;
 import com.example.util.annotation.Anonymous;
+import com.example.util.helper.JwtHelper;
+import com.example.util.helper.StringHelper;
+import io.jsonwebtoken.Claims;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.http.HttpHeaders;
@@ -16,8 +22,8 @@ import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;
 import java.io.PrintWriter;
 import java.lang.reflect.Method;
-import java.util.HashMap;
-import java.util.Map;
+import java.util.*;
+import java.util.stream.Collectors;
 
 @Slf4j
 @Component
@@ -25,6 +31,12 @@ public class AuthenticationInterceptor implements HandlerInterceptor {
 
     @Autowired
     private IUserService userService;
+    @Autowired
+    private IUserRoleService userRoleService;
+    @Autowired
+    private IRoleMenuService roleMenuService;
+    @Autowired
+    private IMenuService menuService;
 
     @Override
     public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
@@ -34,9 +46,9 @@ public class AuthenticationInterceptor implements HandlerInterceptor {
         response.setCharacterEncoding("UTF-8");
         response.setContentType("application/json; charset=utf-8");
 
-        Map map = new HashMap();
-        boolean isAuth = false;
 
+        boolean isAuth = false;
+        AjaxResult result=new AjaxResult();
         try {
             // 如果不是映射到方法直接通过
             if (!(handler instanceof HandlerMethod)) {
@@ -44,7 +56,7 @@ public class AuthenticationInterceptor implements HandlerInterceptor {
             }
             HandlerMethod handlerMethod = (HandlerMethod) handler;
             //检查控制器是否有Anonymous注释，有则跳过认证
-            String name=handlerMethod.getBeanType().getName();
+
             if (handlerMethod.getBeanType().isAnnotationPresent(Anonymous.class)) {
                 return true;
             }
@@ -53,23 +65,55 @@ public class AuthenticationInterceptor implements HandlerInterceptor {
             if (method.isAnnotationPresent(Anonymous.class)) {
                 return true;
             }
-            return true;
-//            if(!StringHelper.isEmpty(token) ) {
-//                // 执行认证
-//                token = token.substring(7);
-//                Claims cls = JwtHelper.parseToken(token);
-//                if (cls != null) {
-//                    Long userId = (Long) cls.get("UserId");
-//                    if (userId > 0) {
-//                        //判断用户信息
-//                        User user = userService.getEntity(userId);
-//                        if (user != null) {
-//                            request.setAttribute("CurrentUser", user);
-//                            isAuth = true;
-//                        }
-//                    }
-//                }
-//            }
+
+            if(!StringHelper.isEmpty(token) ) {
+                // 执行认证
+                token = token.substring(7);
+                Claims cls = JwtHelper.parseToken(token);
+                if (cls != null) {
+                    Long userId = Long.parseLong(cls.get("UserId").toString()) ;
+                    if (userId > 0) {
+                        //判断用户信息
+                        List<User> users = userService.getList().stream().filter(p->p.getUser_id()==userId && Objects.equals(p.getStatus(), "0") && Objects.equals(p.getDel_flag(), "0")).collect(Collectors.toList());
+                        if (users != null && users.size()>0) {
+                            User user = users.get(0);
+                            List<Long> croleids = (List<Long>)cls.get("RoleIds");
+                            List<Long> roleids=userRoleService.getList().stream().filter(p->p.getUser_id()==userId).map(p->p.getRole_id()).sorted().collect(Collectors.toList());
+
+                            if(Objects.equals(JSON.toJSONString(croleids), JSON.toJSONString(roleids))) {
+                                String className = handlerMethod.getBeanType().getName();
+                                className = className.substring(className.lastIndexOf(".") + 1)
+                                        .replace("Controller", "");
+                                String methodName = handlerMethod.getMethod().getName();
+                                String permission = (className + "/" + methodName).toLowerCase();
+                                List<Long> mids = menuService.getList().stream().filter(p -> Objects.equals(p.getPerms(), permission)).map(p -> p.getMenu_id()).collect(Collectors.toList());
+                                if (mids != null && mids.size() > 0) {
+                                    Long n = roleMenuService.getList().stream().filter(p -> roleids.contains(p.getRole_id()) && mids.contains(p.getMenu_id())).count();
+                                    if (n > 0) {
+                                        isAuth = true;
+                                    } else {
+                                        result.setState("error");
+                                        result.setMessage("你没有此权限");
+                                        PrintWriter out = response.getWriter();
+                                        out.write(JSON.toJSONString(result));
+                                        out.flush();
+                                        out.close();
+                                        return false;
+                                    }
+                                } else {
+                                    isAuth = true;
+                                }
+                            }
+
+                            if(isAuth) {
+                                UserView uv = JSON.parseObject(JSON.toJSONString(user), UserView.class);
+                                uv.setRoleIds(roleids);
+                                request.setAttribute("CurrentUser", uv);
+                            }
+                        }
+                    }
+                }
+            }
         } catch (Exception e) {
             String requestURI = request.getRequestURL().toString();
             String methodType = request.getMethod();
@@ -82,10 +126,10 @@ public class AuthenticationInterceptor implements HandlerInterceptor {
             }
         }
         if (!isAuth) {
+            result.setState("notoken");
+            result.setMessage("token无效,请重新登录");
             PrintWriter out = response.getWriter();
-            map.put("state", "notoken");
-            map.put("message", "token无效,请重新登录");
-            out.write(JSON.toJSONString(map));
+            out.write(JSON.toJSONString(result));
             out.flush();
             out.close();
         }