|
@@ -14,18 +14,6 @@ import javax.servlet.http.HttpServletResponse;
|
|
|
public class XjtuAuthenticationService implements AuthorizationService {
|
|
|
private final static Logger log = LoggerFactory.getLogger(XjtuAuthenticationService.class);
|
|
|
|
|
|
-// @Resource
|
|
|
-// CommonCacheService commonCacheService;
|
|
|
-//
|
|
|
-// @Resource
|
|
|
-// RedisUtil redisUtil;
|
|
|
-//
|
|
|
-// @Resource
|
|
|
-// DictionaryConfig dictionaryConfig;
|
|
|
-//
|
|
|
-// @Resource
|
|
|
-// AuthInfoService authInfoService;
|
|
|
-
|
|
|
@Override
|
|
|
public AccessEntity findByIdentity(String identity, SignatureType signatureType, String path) {
|
|
|
return new XjuSession(identity, SignatureType.TOKEN);
|
|
@@ -33,47 +21,7 @@ public class XjtuAuthenticationService implements AuthorizationService {
|
|
|
|
|
|
@Override
|
|
|
public boolean hasPermission(AccessEntity accessEntity, String path) {
|
|
|
-// if (Objects.nonNull(accessEntity) && Objects.nonNull(accessEntity.getIdentity())) {
|
|
|
-// TBSession tbSession = (TBSession) redisUtil.getUserSession(accessEntity.getIdentity());
|
|
|
-// if (Objects.isNull(tbSession)) {
|
|
|
-// log.warn("Authorization faile: session id not exists: {}", accessEntity.getIdentity());
|
|
|
-// throw ExceptionResultEnum.NOT_LOGIN.exception();
|
|
|
-// }
|
|
|
-// if (tbSession.getExpireTime() <= System.currentTimeMillis()) {
|
|
|
-// log.warn("Authorization faile: session has expired, expire time={}", tbSession.getExpireTime());
|
|
|
-// throw ExceptionResultEnum.NOT_LOGIN.exception();
|
|
|
-// }
|
|
|
-// Platform platform = ServletUtil.getRequestPlatform();
|
|
|
-// String deviceId = ServletUtil.getRequestDeviceId();
|
|
|
-// if (!tbSession.getPlatform().equalsIgnoreCase(platform.name())) {
|
|
|
-// log.warn("Authorization faile: platform invalid, session platform is {}", tbSession.getPlatform());
|
|
|
-// throw ExceptionResultEnum.AUTHORIZATION_ERROR.exception();
|
|
|
-// }
|
|
|
-// if (!tbSession.getDeviceId().equalsIgnoreCase(deviceId)) {
|
|
|
-// log.warn("Authorization faile: deviceId invalid, session deviceId is {} ", tbSession.getDeviceId());
|
|
|
-// throw ExceptionResultEnum.AUTHORIZATION_ERROR.exception();
|
|
|
-// }
|
|
|
-// Long userId = Long.parseLong(tbSession.getIdentity());
|
|
|
-// SysUser sysUser = commonCacheService.userCache(userId);
|
|
|
-// HttpServletRequest request = ServletUtil.getRequest();
|
|
|
-// HttpServletResponse response = ServletUtil.getResponse();
|
|
|
-// request.setAttribute(SystemConstant.SESSION, tbSession);
|
|
|
-// request.setAttribute(SystemConstant.USER, sysUser);
|
|
|
-// boolean auth = authFootCommon(userId, SystemConstant.USER_OAUTH_CACHE, path, request, response);
|
|
|
-// if (auth) {
|
|
|
-// Long expireTime = redisUtil.getUserSessionExpire(accessEntity.getIdentity());
|
|
|
-// if (Objects.nonNull(expireTime) && expireTime.longValue() > -1L) {
|
|
|
-// if (Objects.nonNull(tbSession.getLastAccessTime()) && (System.currentTimeMillis() - tbSession.getLastAccessTime()) / 1000 > dictionaryConfig.sysDomain().getSessionActive().getSeconds()) {
|
|
|
-// log.warn("Authorization faile: session active, session active is {}", dictionaryConfig.sysDomain().getSessionActive().getSeconds());
|
|
|
-// throw ExceptionResultEnum.NOT_LOGIN.exception();
|
|
|
-// }
|
|
|
-// tbSession.setLastInfo();
|
|
|
-// redisUtil.setUserSession(accessEntity.getIdentity(), tbSession, expireTime);
|
|
|
-// }
|
|
|
-// }
|
|
|
-// return auth;
|
|
|
-// }
|
|
|
- return false;
|
|
|
+ return true;
|
|
|
}
|
|
|
|
|
|
/**
|
|
@@ -91,35 +39,10 @@ public class XjtuAuthenticationService implements AuthorizationService {
|
|
|
String path,
|
|
|
HttpServletRequest request,
|
|
|
HttpServletResponse response) {
|
|
|
- //验证权限
|
|
|
-// AuthBean authBean = type.contains(SystemConstant.USER_OAUTH_CACHE) ? authBean = commonCacheService.userAuthCache(userId) : null;
|
|
|
-// if (Objects.isNull(authBean)) {
|
|
|
-// throw ExceptionResultEnum.ROLE_ENABLE_AUTHORIZATION.exception();
|
|
|
-// }
|
|
|
-// request.setAttribute(SystemConstant.SCHOOL, authBean.getSchool());
|
|
|
-// request.setAttribute(SystemConstant.ORG, authBean.getOrg());
|
|
|
-//
|
|
|
-// //超级系统管理员拥有所有权限
|
|
|
-// int count = Objects.nonNull(authBean) ? (int) authBean.getRoleList().stream().filter(s -> Objects.equals(s.getName(), RoleTypeEnum.ADMIN.getDesc())).count() : 0;
|
|
|
-// if (count > 0) {
|
|
|
-// return true;
|
|
|
-// }
|
|
|
+
|
|
|
// if (Objects.nonNull(authBean.getSchool())) {
|
|
|
// authInfoService.appHasExpired(authBean.getSchool().getCode());
|
|
|
// }
|
|
|
-// //系统公用接口不拦截
|
|
|
-// Set<String> sysUrls = commonCacheService.privilegeUrlCache(PrivilegePropertyEnum.SYS, SystemConstant.getHeadOrUserSchoolId());
|
|
|
-// int sysCount = Objects.nonNull(sysUrls) ? (int) sysUrls.stream().filter(s -> s.equalsIgnoreCase(path)).count() : 0;
|
|
|
-// if (sysCount > 0) {
|
|
|
-// return true;
|
|
|
-// }
|
|
|
-// Set<String> urls = authBean.getUrls();
|
|
|
-// int privilegeCount = Objects.nonNull(urls) ? (int) urls.stream().filter(s -> s.equalsIgnoreCase(path)).count() : 0;
|
|
|
-// if (privilegeCount == 0) {
|
|
|
-// log.warn("Authorization faile: url cannot access");
|
|
|
-// throw ExceptionResultEnum.UN_AUTHORIZATION.exception();
|
|
|
-// }
|
|
|
-// response.setStatus(ExceptionResultEnum.SUCCESS.getCode());
|
|
|
return true;
|
|
|
}
|
|
|
}
|