Browse Source

feat: 新增getToken接口,用于第三方调用接口鉴权

yanyuan
yinhuaiwei 4 weeks ago
parent
commit
7bc91a250c
2 changed files with 19 additions and 0 deletions
  1. +17
    -0
      inspect-admin/src/main/java/com/inspect/admin/controller/TokenController.java
  2. +2
    -0
      inspect-admin/src/main/java/com/inspect/admin/service/SysLoginService.java

+ 17
- 0
inspect-admin/src/main/java/com/inspect/admin/controller/TokenController.java View File

@ -14,11 +14,16 @@ import com.inspect.system.base.model.LoginUser;
import java.util.HashMap;
import java.util.Map;
import javax.servlet.http.HttpServletRequest;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.codec.digest.DigestUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RestController;
@Slf4j
@RestController
public class TokenController {
@Autowired
@ -76,4 +81,16 @@ public class TokenController {
mapApi.put("value", "Bearer " + map.get(TokenConst.ACCESS_TOKEN));
return Response.ok(mapApi, "操作成功");
}
@GetMapping({"/getToken"})
public Response<?> getToken(String username, String password, HttpServletRequest request) {
log.info("getToken username: {}, password: {}", username, password);
String md5Hex = DigestUtils.md5Hex(password);
LoginUser userInfo = this.sysLoginService.login(username, md5Hex, request);
Map<String, Object> map = this.tokenService.createToken(userInfo);
Map<String, Object> mapApi = new HashMap();
mapApi.put("key", "Authorization");
mapApi.put("value", "Bearer " + map.get(TokenConst.ACCESS_TOKEN));
return Response.ok(mapApi, "操作成功");
}
}

+ 2
- 0
inspect-admin/src/main/java/com/inspect/admin/service/SysLoginService.java View File

@ -127,6 +127,8 @@ public class SysLoginService {
String aollowIp = userInfo.getSysUser().getAollowIp();
if(StringUtils.isBlank(aollowIp)) {
throw new ServiceException("用户未绑定登录ip,不允许登录");
} else if (StringUtils.equals("*",aollowIp)) {
logger.info("允许用户任意ip登录");
} else if(!StringUtils.equals(requestIp, aollowIp)) {
try {
SysWarning sysWarning = this.generateLoginErrorLogVo("用户登录ip与绑定ip不同,已禁止登录", Integer.valueOf(2), username);


Loading…
Cancel
Save