power_fs3/power-admin/src/main/java/com/manage/controller/SsoLogin.java

package com.manage.controller;


import com.alibaba.fastjson.JSONObject;
import com.manage.encrypt.Base64;
import com.manage.encrypt.MD5;
import com.manage.entity.Power_Dept;
import com.manage.entity.Power_Menu;
import com.manage.service.Power_DeptService;
import com.manage.service.Power_MenuService;
import com.manage.service.Power_UserService;
import com.manage.service.cache.Cache;
import com.manage.service.cache.CacheManager;
import com.manage.util.ActionScopeUtils;
import com.manage.util.DateUtils;
import com.manage.util.Msg;
import com.manage.vo.Power_UserVo;
import com.manage.vo.User_Dept_Menu;
import org.apache.commons.lang3.StringUtils;
import org.apache.cxf.endpoint.Client;
import org.apache.cxf.jaxws.endpoint.dynamic.JaxWsDynamicClientFactory;
import org.apache.http.HttpEntity;
import org.apache.http.NameValuePair;
import org.apache.http.client.ClientProtocolException;
import org.apache.http.client.config.RequestConfig;
import org.apache.http.client.entity.UrlEncodedFormEntity;
import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.client.methods.HttpGet;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.client.utils.HttpClientUtils;
import org.apache.http.entity.StringEntity;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.message.BasicNameValuePair;
import org.apache.http.util.EntityUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.BeanUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.ResponseBody;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.io.UnsupportedEncodingException;
import java.net.URLEncoder;
import java.util.*;

/**
 * Author xuhx
 * Date 2021/7/1
 * Time 16:39
 * Description 供无纸化归档使用的接口
 * Description 建党100周年纪念日
 */
@Controller
@RequestMapping("ssoLogin/")
public class SsoLogin {
    private static Logger logger = LoggerFactory.getLogger(HttpClientUtils.class); // 日志记录

    private static RequestConfig requestConfig = null;

    static {
        // 设置请求和传输超时时间
        requestConfig = RequestConfig.custom().setSocketTimeout(600000).setConnectTimeout(600000).build();
    }

    @Autowired
    Power_UserService powerUserService;

    @Autowired
    private Power_MenuService powerMenuService;

    @Autowired
    private Power_DeptService power_deptService;

    @Value("${EMRMEDICALRECORD_IP}")
    private String ip;

    @Value("${EMRMEDICALRECORD_PORT}")
    private String port;

    @Value("${TOKEN_EXPIRE_TIME}")
    private long TOKEN_EXPIRE_TIME;

    @Value("${oidc_address}")
    private String oidcAddress;

    @Value("${token_endpoint}")
    private String tokenEendpoint;

    @Value("${client_id}")
    private String clientId;

    @Value("${client_secret}")
    private String clientSecret;

    @Value("${userinfo_endpoint}")
    private String userinfoEndpoint;

    @Value("${authorization_endpoint}")
    private String authorizationEndpoint;

    @Value("${URL_ADDRESS}")
    private String urlAddress;


    /*
     * 单点登录
     * author xuhx
     * */
    @RequestMapping(value = "login",method = RequestMethod.GET,produces = "text/html;charset=utf-8")
    @ResponseBody
    public String login(HttpServletRequest request,HttpServletResponse response,String code,String state) throws Exception {
        String result = "";
        CloseableHttpResponse responseNew = null;
        CloseableHttpClient httpClient = null;
        JSONObject jsonResultToken = null;
        String url=oidcAddress+tokenEendpoint;
        String StringUrl = URLEncoder.encode(urlAddress, "GBK");
        Map paramMap = new HashMap();
        paramMap.put("client_id",clientId);
        paramMap.put("client_secret",clientSecret);
        paramMap.put("code",code);
        paramMap.put("grant_type","authorization_code");
        paramMap.put("redirect_uri",urlAddress);
        String param="client_id="+clientId+"&client_secret="+clientSecret+"&code="+code+"&grant_type=authorization_code&redirect_uri="+StringUrl;
        String returnObject =doPost(url,paramMap,null);
        String userName=null;
        if(returnObject!=null){
            // 把json字符串转换成json对象
            jsonResultToken = JSONObject.parseObject(returnObject);
            String accessToken=jsonResultToken.getString("access_token");
                    // 通过址默认配置创建一个httpClient实例
                    httpClient = HttpClients.createDefault();
                    // 创建httpGet远程连接实例
                    String userUrl=oidcAddress+userinfoEndpoint;
                    HttpGet httpGet = new HttpGet(userUrl);
                    // 设置请求头信息，鉴权
                    httpGet.setHeader("Authorization", "Bearer "+accessToken);
                    httpGet.setConfig(requestConfig);
                    // 执行get请求得到返回对象
                    responseNew = httpClient.execute(httpGet);
                    // 通过返回对象获取返回数据
                    HttpEntity entity = responseNew.getEntity();
                    // 通过EntityUtils中的toString方法将结果转换为字符串
                    String returnResult = EntityUtils.toString(entity);
                    // 把json字符串转换成json对象
                    JSONObject jsonResult = JSONObject.parseObject(returnResult);
                    if(jsonResult!=null){
                        /*if((jsonResult.getString("username"))!=null&&!"".equals(jsonResult.getString("username"))) {
                            userName=jsonResult.getString("username");
                        }*/
                        if((jsonResult.getString("name"))!=null&&!"".equals(jsonResult.getString("name"))) {
                            userName=jsonResult.getString("name");
                            //根据登录名获取用户（需要确保用户登录名唯一）
                            Power_UserVo user = powerUserService.selectByUserName(userName);
                            if (user != null) {
                                String password = MD5.JM(Base64.decode(user.getUserPwd()));
                                if (password != null && !"".equals(password)) {
                                    //加密（此部分代码来自FontController的getToken方法，用来获取token及相关操作）
                                    String token = UUID.randomUUID().toString();
                                    List<Power_Menu> list = null;
                                    List<User_Dept_Menu> menuList = new ArrayList<>();
                                    Set<String> menus = new TreeSet<>();
                                    if (user.getRoleId().equals(0) || user.getRoleId().equals(-100)) {
                                        list = powerMenuService.queryAllPowerMenu(null,user.getRoleId());
                                    } else {
                                        list = powerMenuService.selectUserAndRoleMenuListPower(user.getUserId(),null);
                                    }
                                    if(null != list && !list.isEmpty()){
                                        for (Power_Menu power_menu : list) {
                                            User_Dept_Menu deptMenu = new User_Dept_Menu();
                                            String menuUrl = power_menu.getMenuUrl();
                                            if (StringUtils.isNotBlank(menuUrl)) {
                                                BeanUtils.copyProperties(power_menu, deptMenu);
                                                deptMenu.setMethodParent(power_menu.getParentId());
                                                menuList.add(deptMenu);
                                            }
                                            if (StringUtils.isNotBlank(power_menu.getMethod())) {
                                                menus.add(power_menu.getMenuUrl());
                                            }
                                        }
                                    }
                                    user.setMenuList(menuList);
                                    user.setMenus(menus);

                                    //设置科室
                                    StringBuilder powerDepts = new StringBuilder();
                                    List<Power_Dept> powerDeptsList = power_deptService.selectByPrimaryKeys(user.getDeptId());
                                    for(int j=0;j<powerDeptsList.size();j++){
                                        if(j<powerDeptsList.size()-1){
                                            powerDepts.append(powerDeptsList.get(j).getDeptName()).append(",");
                                        }else{
                                            powerDepts.append(powerDeptsList.get(j).getDeptName());
                                        }
                                    }
                                    user.setRemark(powerDepts.toString());
                            //移除缓存
                            /*CacheManager.removeCacheByObject(user);
                            CacheManager.putCache(date,new Cache(date,user,TOKEN_EXPIRE_TIME));*/
                                    ActionScopeUtils.setSessionAttribute("token",token,Integer.valueOf(String.valueOf(TOKEN_EXPIRE_TIME)));
                                    ActionScopeUtils.setSessionAttribute("CURRENT_USER",user,Integer.valueOf(String.valueOf(TOKEN_EXPIRE_TIME)));
                                    CacheManager.putCache(token,new Cache(user,System.currentTimeMillis(),TOKEN_EXPIRE_TIME*1000));

                                    if (!"".equals(token)&&token!=null) {
                                        //返回跳转url
                                        result="http://"+ip+":"+port+"/emr_medical_record/login?token=" + token + "&userName="+userName;
                                        //request.getRequestDispatcher(result).forward(request, response);
                                        response.sendRedirect(result);
                                    } else {
                                        result = "获取登录token失败，请检查数据!!";
                                    }
                                } else {
                                    result = "无法获取用户密码!!";
                                }
                            } else {
                                result = "登录用户不存在!!";
                            }
                        }
                        }else{
                        result = "SSO平台未成功返回用户信息!!";
                    }
            }
            return result;
        }
    @RequestMapping(value = "into",method = RequestMethod.GET,produces = "text/html;charset=utf-8")
    @ResponseBody
   public void in(HttpServletRequest request, HttpServletResponse response){
    //本项目中接收返回数据的地址
       String StringUrl = null;
       try {
           StringUrl = URLEncoder.encode(urlAddress, "GBK");
           try {
               response.sendRedirect(oidcAddress+authorizationEndpoint+"?client_id="+clientId+"&redirect_uri="+StringUrl+"&response_type=code&state="+1+"&scope=openid%20profile");
           } catch (IOException e) {
               e.printStackTrace();
           }
       } catch (UnsupportedEncodingException e) {
           e.printStackTrace();
       }

   }

    public static String doPost(String url, Map<String, Object> paramMap, Map<String, String> headerMap) {

        CloseableHttpClient httpClient = null;
        CloseableHttpResponse httpResponse = null;
        String result = "";
        // 创建httpClient实例
        httpClient = HttpClients.createDefault();

        // 创建httpPost远程连接实例
        HttpPost httpPost = new HttpPost(url);
        RequestConfig requestConfig = null;
        // 配置请求参数实例
        requestConfig = RequestConfig.custom().setConnectTimeout(35000)// 设置连接主机服务超时时间
                .setConnectionRequestTimeout(35000)// 设置连接请求超时时间
                .setSocketTimeout(60000)// 设置读取数据连接超时时间
                .build();

        // 为httpPost实例设置配置
        //httpPost.setConfig(requestConfig);
        // 设置请求头
        if (headerMap == null){
            httpPost.addHeader("Content-Type", "application/x-www-form-urlencoded");// "application/json"
        } else {
            for (String key : headerMap.keySet()) {
                httpPost.addHeader(key, headerMap.get(key));
            }
        }

        // 封装post请求参数
        if (null != paramMap && paramMap.size() > 0) {
            List<NameValuePair> nvps = new ArrayList<>();
            // 通过map集成entrySet方法获取entity
            Set<Map.Entry<String, Object>> entrySet = paramMap.entrySet();
            // 循环遍历，获取迭代器
            Iterator<Map.Entry<String, Object>> iterator = entrySet.iterator();
            while (iterator.hasNext()) {
                Map.Entry<String, Object> mapEntry = iterator.next();
                nvps.add(new BasicNameValuePair(mapEntry.getKey(), mapEntry.getValue().toString()));
            }

            // 为httpPost设置封装好的请求参数
            try {
                httpPost.setEntity(new UrlEncodedFormEntity(nvps, "UTF-8"));
            } catch (UnsupportedEncodingException e) {
                e.printStackTrace();
            }
        }
        try {
            // httpClient对象执行post请求,并返回响应参数对象
            httpResponse = httpClient.execute(httpPost);
            // 从响应对象中获取响应内容
            HttpEntity entity = httpResponse.getEntity();
            result = EntityUtils.toString(entity);
        } catch (ClientProtocolException e) {
            e.printStackTrace();
        } catch (IOException e) {
            e.printStackTrace();
        } finally {
            // 关闭资源
            if (null != httpResponse) {
                try {
                    httpResponse.close();
                } catch (IOException e) {
                    e.printStackTrace();
                }
            }
            if (null != httpClient) {
                try {
                    httpClient.close();
                } catch (IOException e) {
                    e.printStackTrace();
                }
            }
        }
        return result;
    }

}