package com.kidgrow.zuul.filter;
|
|
import com.alibaba.fastjson.JSON;
|
import com.kidgrow.common.model.ResultBody;
|
import com.kidgrow.common.model.SysOrganization;
|
import com.kidgrow.common.model.SysUser;
|
import com.kidgrow.common.model.SysUserOrg;
|
import com.kidgrow.redis.util.RedisConstant;
|
import com.kidgrow.redis.util.RedisUtils;
|
import com.kidgrow.zuul.feign.SysOrganizationService;
|
import com.kidgrow.zuul.feign.SysUserOrgService;
|
import com.kidgrow.zuul.service.TokenService;
|
import com.netflix.zuul.ZuulFilter;
|
import com.netflix.zuul.context.RequestContext;
|
import lombok.SneakyThrows;
|
import lombok.extern.slf4j.Slf4j;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.cloud.netflix.zuul.filters.support.FilterConstants;
|
import org.springframework.security.authentication.AnonymousAuthenticationToken;
|
import org.springframework.security.core.Authentication;
|
import org.springframework.security.core.context.SecurityContextHolder;
|
import org.springframework.security.core.context.SecurityContextImpl;
|
import org.springframework.security.oauth2.provider.OAuth2Authentication;
|
import org.springframework.stereotype.Component;
|
|
import javax.servlet.http.HttpServletRequest;
|
import java.util.*;
|
|
import static org.springframework.cloud.netflix.zuul.filters.support.FilterConstants.PRE_DECORATION_FILTER_ORDER;
|
|
/**
|
* 石家庄喜高科技有限责任公司 版权所有 © Copyright 2020<br>
|
*
|
* @Description: 将认证用户的相关信息放入header中, 后端服务可以直接读取使用 包含了----组织的拦截--- 如果被拦截，将清除token<br>
|
* @Project: <br>
|
* @CreateDate: Created in 2020/2/21 10:12 <br>
|
* @Author: <a href="4345453@kidgrow.com">liuke</a>
|
*/
|
@Slf4j
|
@Component
|
public class OrganizationFilter extends ZuulFilter {
|
@Override
|
public String filterType() {
|
return FilterConstants.PRE_TYPE;
|
}
|
|
@Override
|
public int filterOrder() {
|
return PRE_DECORATION_FILTER_ORDER;
|
}
|
|
@Override
|
public boolean shouldFilter() {
|
return true;
|
}
|
|
@Autowired
|
RedisUtils redisUtils;
|
@Autowired
|
private SysUserOrgService sysUserOrgService;
|
@Autowired
|
private SysOrganizationService sysOrganizationService;
|
@Autowired
|
private TokenService tokenService;
|
|
@SneakyThrows
|
@Override
|
public Object run() {
|
Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
|
|
if (authentication != null && !(authentication instanceof AnonymousAuthenticationToken)) {
|
RequestContext currentContext = RequestContext.getCurrentContext();
|
// 获取request对象
|
HttpServletRequest request = currentContext.getRequest();
|
//security会把一个SecurityContextImpl对象存储到session中，此对象中有当前用户的各种资料
|
SecurityContextImpl securityContextImpl = (SecurityContextImpl) request
|
.getSession().getAttribute("SPRING_SECURITY_CONTEXT");
|
authentication = securityContextImpl.getAuthentication();
|
Object principal = authentication.getPrincipal();
|
RequestContext ctx = RequestContext.getCurrentContext();
|
if (principal instanceof SysUser) {
|
//运营端进行
|
OAuth2Authentication oauth2Authentication = (OAuth2Authentication) authentication;
|
SysUser user = (SysUser) authentication.getPrincipal();
|
/**
|
* 将组织中为空的拦截
|
*/
|
List<SysUserOrg> sysUserOrgs = this.getSysUserOrg(user.getId());
|
if (sysUserOrgs == null || sysUserOrgs.isEmpty()) {
|
//退出的操作
|
this.tokenService.logout(request);
|
ctx.setSendZuulResponse(false);
|
ctx.addZuulResponseHeader("Content-Type", "application/json;charset=UTF-8");
|
// String str = new String("您的组织已经被禁用，请联系管理员".getBytes("utf-8"), "utf-8");
|
ctx.setResponseBody(JSON.toJSONString(ResultBody.fail(1000, "您的组织已经被禁用，请联系管理员")));
|
} else {
|
// List<Long> collect = sysUserOrgs.stream().map(e -> e.getOrgId()).collect(Collectors.toList());
|
// List<SysOrganization> sysOrganizations = getSysOrganization();
|
// List<Long> orgIds = sysOrganizations.stream().filter(e -> e.getEnabled() == true && collect.contains(e.getId())).map(e -> e.getId()).collect(Collectors.toList());
|
// if (orgIds == null || orgIds.size() <= 0) {
|
// ctx.setSendZuulResponse(false);
|
// ctx.setResponseBody(JSON.toJSONString(ResultBody.fail(1000, "您的组织已经被禁用，请联系管理员")));
|
// }
|
if (!request.getRequestURI().contains("ReportRecord/getImg")) {
|
//根据fegin客户端查询状态
|
Map<String, Object> map;
|
for (SysUserOrg sysUserOrg : sysUserOrgs) {
|
map = new HashMap<>();
|
map.put("id", sysUserOrg.getOrgId());
|
List<SysOrganization> sysOrganizations = JSON.parseArray(JSON.toJSONString(sysOrganizationService.getListByMap(map).getData()), SysOrganization.class);
|
if (sysOrganizations == null || sysOrganizations.size() <= 0) {
|
//退出的操作
|
this.tokenService.logout(request);
|
ctx.setSendZuulResponse(false);
|
ctx.addZuulResponseHeader("Content-Type", "application/json;charset=UTF-8");
|
ctx.setResponseBody(JSON.toJSONString(ResultBody.fail(1000, "您的组织已经被禁用，请联系管理员")));
|
} else {
|
for (SysOrganization sysOrganization : sysOrganizations) {
|
if (!sysOrganization.getEnabled() || sysOrganization.getIsDel()) {
|
//退出的操作
|
this.tokenService.logout(request);
|
ctx.setSendZuulResponse(false);
|
ctx.addZuulResponseHeader("Content-Type", "application/json;charset=UTF-8");
|
ctx.setResponseBody(JSON.toJSONString(ResultBody.fail(1000, "您的组织已经被禁用，请联系管理员")));
|
}
|
}
|
}
|
}
|
}
|
}
|
}
|
}
|
return null;
|
}
|
|
|
|
/**
|
* 通过userID 获取组织的关系
|
*
|
* @param str
|
* @return
|
*/
|
public List<SysUserOrg> getSysUserOrg(Long str) {
|
//获取组织 Redis中获取
|
List<SysUserOrg> sysUserOrgs = JSON.parseArray(JSON.toJSONString(redisUtils.hget(RedisConstant.USER_ORGANIZATION, str.toString())), SysUserOrg.class);
|
if (sysUserOrgs == null || sysUserOrgs.size() <= 0) {
|
//在数据库查询
|
Map<String, Object> map = new HashMap<>();
|
map.put("user_id", str);
|
sysUserOrgs = sysUserOrgService.getListByMap(map);
|
redisUtils.hset(RedisConstant.USER_ORGANIZATION, str.toString(), sysUserOrgs);
|
}
|
return sysUserOrgs;
|
}
|
|
public List<SysOrganization> getSysOrganization() {
|
Map<Object, Object> hmget = redisUtils.hmget(RedisConstant.ORGANIZATION);
|
List<SysOrganization> sysOrganizations = new ArrayList<>();
|
if (hmget == null || hmget.size() <= 0) {
|
Map<String, Object> map = new HashMap<>();
|
map.put("is_del", 0);
|
sysOrganizations = JSON.parseArray(JSON.toJSONString(sysOrganizationService.getListByMap(map).getData()), SysOrganization.class);
|
sysOrganizations.forEach(e -> {
|
redisUtils.hset(RedisConstant.ORGANIZATION, e.getId().toString(), e);
|
});
|
|
} else {
|
Set<Object> objects = hmget.keySet();
|
Iterator<Object> iterator = objects.iterator();
|
while (iterator.hasNext()) {
|
sysOrganizations.add((SysOrganization) hmget.get(iterator.next()));
|
}
|
}
|
return sysOrganizations;
|
}
|
}
|
