旗开得胜

pom.xml

@@ -143,6 +143,41 @@
         </dependency>
 
 
+        <!--短信发送-->
+        <dependency>
+            <groupId>com.aliyun</groupId>
+            <artifactId>aliyun-java-sdk-core</artifactId>
+            <version>4.5.16</version>
+        </dependency>
+
+        <dependency>
+            <groupId>com.aliyun</groupId>
+            <artifactId>aliyun-java-sdk-dysmsapi</artifactId>
+            <version>2.1.0</version>
+        </dependency>
+
+
+        <!-- HttpClient 依赖 -->
+        <dependency>
+            <groupId>org.apache.httpcomponents</groupId>
+            <artifactId>httpclient</artifactId>
+            <version>4.5.13</version>
+        </dependency>
+
+        <!-- DOM4J 依赖 -->
+        <dependency>
+            <groupId>org.dom4j</groupId>
+            <artifactId>dom4j</artifactId>
+            <version>2.1.3</version>
+        </dependency>
+
+        <!-- jwt-->
+        <dependency>
+            <groupId>com.auth0</groupId>
+            <artifactId>java-jwt</artifactId>
+            <version>3.14.0</version>
+        </dependency>
+
 
 
 

src/main/java/com/greenorange/promotion/annotation/RequiresPermission.java

@@ -0,0 +1,15 @@
+package com.greenorange.promotion.annotation;
+ 
+import java.lang.annotation.*;
+ 
+/**
+ *  JWT 权限注解
+ **/
+ 
+@Target({ElementType.TYPE, ElementType.METHOD})
+@Retention(RetentionPolicy.RUNTIME)
+@Documented
+public @interface RequiresPermission {
+     String roles() default " ";
+     String permissions() default " ";
+}

src/main/java/com/greenorange/promotion/aop/PermissionCheck.java

@@ -0,0 +1,132 @@
+package com.greenorange.promotion.aop;
+ 
+import cn.hutool.core.util.StrUtil;
+import com.auth0.jwt.JWT;
+import com.auth0.jwt.exceptions.JWTDecodeException;
+
+import com.baomidou.mybatisplus.annotation.InterceptorIgnore;
+import com.greenorange.promotion.annotation.RequiresPermission;
+import com.greenorange.promotion.model.entity.User;
+import com.greenorange.promotion.service.user.UserService;
+import com.wechat.pay.java.core.exception.ServiceException;
+import jakarta.annotation.Resource;
+import jakarta.servlet.http.HttpServletRequest;
+import lombok.extern.slf4j.Slf4j;
+import org.aspectj.lang.ProceedingJoinPoint;
+import org.aspectj.lang.Signature;
+import org.aspectj.lang.annotation.Around;
+import org.aspectj.lang.annotation.Aspect;
+import org.aspectj.lang.annotation.Pointcut;
+import org.aspectj.lang.reflect.MethodSignature;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.stereotype.Component;
+import org.springframework.web.context.request.RequestContextHolder;
+import org.springframework.web.context.request.ServletRequestAttributes;
+
+import java.lang.reflect.Method;
+import java.util.Arrays;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Objects;
+import java.util.stream.Collectors;
+
+
+/**
+ * 权限校验AOP
+ */
+
+@Slf4j
+@Aspect
+@Component
+public class PermissionCheck {
+
+
+    @Resource
+    private UserService userService;
+ 
+ 
+    /***
+     * @MethodName: permissionCheckPointCut
+     * @description: 定义一个切点
+     * @Author: LiuTao
+     * @UpdateTime: 2023/6/20 19:34
+     **/
+    @Pointcut("@annotation(com.greenorange.promotion.annotation.RequiresPermission)")
+    public void permissionCheckPointCut() {
+ 
+    }
+ 
+    /***
+     * @MethodName: check
+     * @description: 环绕通知
+     * @Author: LiuTao
+     * @Param: [pjp]
+     * @UpdateTime: 2023/6/20 19:34
+     * @Return: java.lang.Object
+     * @Throw: Throwable
+     **/
+    @Around("permissionCheckPointCut()")
+    public Object check(ProceedingJoinPoint pjp) throws Throwable {
+        // 获取请求对象
+        HttpServletRequest request = ((ServletRequestAttributes) Objects.requireNonNull(RequestContextHolder.getRequestAttributes())).getRequest();
+        // 记录日志
+        log.info("===============系统操作日志===============");
+        Signature signature = pjp.getSignature();
+        // 请求的类
+        String className = pjp.getTarget().getClass().getName();
+        String methodName = signature.getName();
+        log.info("请求类：{}", className);
+        log.info("请求方法：{}", methodName);
+        log.info("请求方式：{}", request.getMethod());
+        log.info("请求ip：{}", request.getRemoteAddr());
+        log.info("请求类方法：{}", signature);
+        log.info("请求参数：{}", Arrays.toString(pjp.getArgs()));
+        // 权限注解校验
+        MethodSignature handlerMethod = (MethodSignature) signature;
+        Method method = handlerMethod.getMethod();
+        System.out.println("method:" + method);
+        System.out.println("-------------------------------------------");
+        // 判断当前方法上有没有注解
+        System.out.println(method.isAnnotationPresent(RequiresPermission.class));
+        System.out.println("-------------------------------------------");
+
+        if (method.isAnnotationPresent(RequiresPermission.class)) {
+            RequiresPermission auth = method.getAnnotation(RequiresPermission.class);
+            System.out.println("++++++++++++++++++++++++++++auth:" + auth);
+            String roles = auth.roles();
+            String permissions = auth.permissions();
+ 
+            String token = request.getHeader("token");
+            // 认证
+            if (StrUtil.isBlank(token)) {
+//                throw new ServiceException(Constants.CODE_401, "请登录!!!");
+            }
+            String id = null;
+//            try {
+//                id = JWT.decode(token).getAudience().get(0);
+//            } catch (JWTDecodeException jwtDecodeException) {
+////                throw new ServiceException(Constants.CODE_401, "token验证失败，请重新登录");
+//            }
+//            User user = userService.getById(id);
+            // 校验角色
+//            if (StrUtil.isNotBlank(roles)) {
+//                if (!Arrays.asList(roles.split(",")).contains(user.getRole())) {
+////                    throw new ServiceException(Constants.CODE_403, "当前角色权限不足");
+//                }
+//            }
+            // 校验权限
+//            if (StrUtil.isNotBlank(permissions)) {
+//                List<String> userPermissions = menuUtil
+//                        .getPermissions(user.getRole())
+//                        .stream()
+//                        .map(BtnVo::getPermission)
+//                        .collect(Collectors.toList());
+//                if (!new HashSet<>(userPermissions).containsAll(Arrays.asList(permissions.split(",")))) {
+//                    throw new ServiceException(Constants.CODE_401, "无权限访问资源");
+//                }
+//            }
+        }
+        return pjp.proceed();
+    }
+ 
+}

src/main/java/com/greenorange/promotion/controller/user/UserController.java

@@ -1,7 +1,7 @@
 package com.greenorange.promotion.controller.user;
 
-import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
 import com.greenorange.promotion.annotation.AuthCheck;
+import com.greenorange.promotion.annotation.RequiresPermission;
 import com.greenorange.promotion.common.BaseResponse;
 import com.greenorange.promotion.common.ResultUtils;
 import com.greenorange.promotion.constant.UserConstant;
@@ -42,7 +42,7 @@ public class UserController {
      */
     @PostMapping("add")
     @Operation(summary = "web端管理员添加用户", description = "参数：用户表添加请求体，权限：管理员（boss, admin)，方法名：addUser")
-    @AuthCheck(mustRole = UserConstant.ADMIN_ROLE)
+    @RequiresPermission(roles = UserConstant.ADMIN_ROLE)
     public BaseResponse<Long> addUser(@RequestBody UserAddRequest userAddRequest) {
         return ResultUtils.success(userService.addUser(userAddRequest));
     }
@@ -81,8 +81,9 @@ public class UserController {
      */
     @PostMapping("page")
     @Operation(summary = "Web端管理员分页查看用户表", description = "参数：用户表查询请求体，权限：管理员（boss, admin)，方法名:listUserByPage")
-    public BaseResponse<Page<UserVO>> listUserByPage(@RequestBody UserQueryRequest userQueryRequest) {
-        return ResultUtils.success(userService.listUserByPage(userQueryRequest));
+    @RequiresPermission(roles = UserConstant.ADMIN_ROLE)
+    public BaseResponse<Boolean> listUserByPage(@RequestBody UserQueryRequest userQueryRequest) {
+        return ResultUtils.success(true);
     }
 
 
@@ -110,4 +111,5 @@ public class UserController {
     public BaseResponse<Boolean> delBatchUser(@RequestBody CommonBatchRequest commonBatchRequest) {
        return ResultUtils.success(userService.delBatchUser(commonBatchRequest));
     }
+
 }

src/main/java/com/greenorange/promotion/controller/wechat/WechatGetQrcodeController.java

@@ -75,7 +75,7 @@ public class WechatGetQrcodeController {
      */
     @PostMapping("/get/qrcode")
     @Operation(summary = "微信小程序获取二维码", description = "参数：无, 权限：所有人, 方法名：getQrcode")
-    public BaseResponse<String> getQrcode(HttpServletRequest request) throws IOException {
+    public BaseResponse<String> getQrcode() throws IOException {
         String accessToken = (String) redisTemplate.opsForValue().get(ACCESS_TOKEN_KEY);
         if (accessToken == null) {
             accessToken = wechatGetQrcodeService.getAccessToken().getAccess_token();

src/main/java/com/greenorange/promotion/utils/JWTUtils.java

@@ -0,0 +1,40 @@
+package com.greenorange.promotion.utils;
+
+import com.auth0.jwt.JWT;
+import com.auth0.jwt.JWTCreator;
+import com.auth0.jwt.algorithms.Algorithm;
+import com.auth0.jwt.interfaces.DecodedJWT;
+
+import java.util.Calendar;
+import java.util.Map;
+
+public class JWTUtils {
+
+    /**
+     * 生成token  header.payload.signature
+     */
+    private static final String SECRET = "qingcheng";
+
+    public static String getToken(Map<String, String> map) {
+
+        Calendar instance = Calendar.getInstance();
+        // 默认7天过期
+        instance.add(Calendar.DATE, 7);
+
+        //创建jwt builder
+        JWTCreator.Builder builder = JWT.create();
+
+        // payload
+        map.forEach(builder::withClaim);
+        return builder.withExpiresAt(instance.getTime())  //指定令牌过期时间
+                .sign(Algorithm.HMAC256(SECRET));
+    }
+
+    /**
+     * 验证token  合法性
+     */
+    public static DecodedJWT verify(String token) {
+        return JWT.require(Algorithm.HMAC256(SECRET)).build().verify(token);
+    }
+}
+

src/main/java/com/greenorange/promotion/utils/codec/sendsms.java

@@ -0,0 +1,72 @@
+package com.greenorange.promotion.utils.codec;
+
+import org.apache.http.HttpEntity;
+import org.apache.http.NameValuePair;
+import org.apache.http.client.entity.UrlEncodedFormEntity;
+import org.apache.http.client.methods.HttpPost;
+import org.apache.http.impl.client.CloseableHttpClient;
+import org.apache.http.impl.client.HttpClients;
+import org.apache.http.message.BasicNameValuePair;
+import org.apache.http.util.EntityUtils;
+import org.dom4j.Document;
+import org.dom4j.DocumentHelper;
+import org.dom4j.Element;
+
+import java.util.ArrayList;
+import java.util.List;
+
+public class sendsms {
+
+	private static String Url = "http://106.ihuyi.com/webservice/sms.php?method=Submit";
+
+	public static void main(String[] args) {
+
+		// 创建 HttpClient
+		try (CloseableHttpClient client = HttpClients.createDefault()) {
+			// 创建 POST 请求
+			HttpPost post = new HttpPost(Url);
+			post.setHeader("Content-Type", "application/x-www-form-urlencoded;charset=GBK");
+
+			// 生成验证码
+//			int mobile_code = (int) ((Math.random() * 9 + 1) * 100000);
+			int mobile_code = 114514;
+			String content = "您的验证码是：" + mobile_code + "。请不要把验证码泄露给其他人。";
+
+			// 设置请求参数
+			List<NameValuePair> data = new ArrayList<>();
+			data.add(new BasicNameValuePair("account", "C08121984"));
+			data.add(new BasicNameValuePair("password", "84a27a879413ec629bf26c5d84a25271"));
+			data.add(new BasicNameValuePair("mobile", "19804561639"));
+			data.add(new BasicNameValuePair("content", content));
+
+			// 设置请求体
+			UrlEncodedFormEntity entity = new UrlEncodedFormEntity(data, "GBK");
+			post.setEntity(entity);
+
+			// 执行请求
+			String response = client.execute(post, httpResponse -> {
+				HttpEntity entity1 = httpResponse.getEntity();
+				return EntityUtils.toString(entity1, "GBK");
+			});
+
+			// 解析返回的 XML 响应
+			Document doc = DocumentHelper.parseText(response);
+			Element root = doc.getRootElement();
+
+			String code = root.elementText("code");
+			String msg = root.elementText("msg");
+			String smsid = root.elementText("smsid");
+
+			System.out.println(code);
+			System.out.println(msg);
+			System.out.println(smsid);
+
+			if ("2".equals(code)) {
+				System.out.println("短信提交成功");
+			}
+
+		} catch (Exception e) {
+			e.printStackTrace();
+		}
+	}
+}

src/main/resources/application.yml

@@ -1,9 +1,9 @@
 spring:
   datasource:
     driver-class-name: com.mysql.cj.jdbc.Driver
-    url: jdbc:mysql://8.130.119.119:3306/qingcheng?serverTimezone=Asia/Shanghai
+    url: jdbc:mysql://1.94.237.210:3306/qingcheng?serverTimezone=Asia/Shanghai
     username: qingcheng
-    password: qingcheng
+    password: Qc@123456
     hikari:
       maximum-pool-size: 20
       max-lifetime: 120000
@@ -14,9 +14,11 @@ spring:
   data:
     redis:
       port: 6379
-      host: 123.249.108.160
-      database: 0
-      password: yuanteng
+      host: 154.8.193.216
+      database: 9
+      password: Cksys6509
+
+
   servlet:
     multipart:
       max-file-size: 20MB

src/test/java/com/greenorange/promotion/GreenOrangeApplicationTests.java

@@ -1,13 +1,20 @@
 package com.greenorange.promotion;
 
+import com.auth0.jwt.JWT;
+import com.auth0.jwt.algorithms.Algorithm;
 import org.junit.jupiter.api.Test;
 import org.springframework.boot.test.context.SpringBootTest;
 
+import java.util.Calendar;
+import java.util.HashMap;
+
 @SpringBootTest
 class GreenOrangeApplicationTests {
 
     @Test
     void contextLoads() {
+
+
     }
 
 }

src/test/java/com/greenorange/promotion/JwtDemo.java

@@ -0,0 +1,47 @@
+package com.greenorange.promotion;
+
+import com.auth0.jwt.JWT;
+import com.auth0.jwt.algorithms.Algorithm;
+import com.auth0.jwt.interfaces.DecodedJWT;
+
+import com.auth0.jwt.interfaces.JWTVerifier;
+import org.junit.jupiter.api.Test;
+
+import java.util.Calendar;
+import java.util.HashMap;
+
+public class JwtDemo {
+
+    @Test
+    public void test() {
+
+        HashMap<String, Object> map = new HashMap<>();
+
+        Calendar instance = Calendar.getInstance();
+        // 20秒后令牌token失效
+        instance.add(Calendar.HOUR,1);
+
+        String token = JWT.create()
+                .withHeader(map) // header可以不写，因为默认值就是它
+                .withClaim("userId", 21)  //payload
+                .withClaim("username", "xiaoshuang")
+                .withExpiresAt(instance.getTime()) // 指定令牌的过期时间
+                .sign(Algorithm.HMAC256("XIAOSHUANG"));//签名
+
+        System.out.println(token);
+    }
+
+    @Test
+    public void testVerifier(){
+        // 通过签名生成验证对象
+        JWTVerifier jwtVerifier = JWT.require(Algorithm.HMAC256("XIAOSHUANG")).build();
+
+        DecodedJWT verify = jwtVerifier.verify("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjE3NDU0NjE4NDYsInVzZXJJZCI6MjEsInVzZXJuYW1lIjoieGlhb3NodWFuZyJ9.oN1KdeASH4yqjJBn4hb9jux_VWXWXRz9DSE81RML9Ak");
+        System.out.println(verify.getClaim("userId"));
+        System.out.println(verify.getClaim("username"));
+        System.out.println("令牌过期时间："+verify.getExpiresAt());
+
+    }
+
+
+}