李进 2 жил өмнө
parent
commit
eab60c7fe4

+ 0 - 117
authorize-api-service/src/main/java/com/xy/satoken/SaTokenAuthorize.java

@@ -1,117 +0,0 @@
-package com.xy.satoken;
-
-import cn.dev33.satoken.exception.NotLoginException;
-import cn.dev33.satoken.exception.NotPermissionException;
-import cn.dev33.satoken.exception.NotRoleException;
-import cn.dev33.satoken.stp.StpInterface;
-import cn.dev33.satoken.stp.StpUtil;
-import com.xy.utils.R;
-import lombok.AllArgsConstructor;
-import org.springframework.stereotype.Service;
-import org.springframework.util.StringUtils;
-import org.springframework.web.bind.annotation.ExceptionHandler;
-import org.springframework.web.bind.annotation.RestControllerAdvice;
-
-import java.util.ArrayList;
-import java.util.List;
-
-/**
- * 权限校验
- */
-@Service
-@AllArgsConstructor
-@RestControllerAdvice
-public class SaTokenAuthorize implements StpInterface {
-
-    private SaTokenAuthorizeConfig saTokenAuthorizeConfig;
-
-    /**
-     * 校验权限
-     *
-     * @param satoken    token值
-     * @param permission 菜单权限标识
-     * @return
-     */
-    public boolean check(String satoken, String permission) {
-        //校验登录
-        if (StringUtils.isEmpty(satoken)) {
-            throw new NotLoginException(null, null, null);
-        }
-        Object byId = StpUtil.getLoginIdByToken(satoken);
-        if (byId == null) {
-            throw new NotLoginException(null, null, null);
-        }
-        //菜单权限
-        if (saTokenAuthorizeConfig.getEnablePermission() != null && saTokenAuthorizeConfig.getEnablePermission()) {
-            List<String> permissionList = StpUtil.getPermissionList(byId);
-            if (!permissionList.contains(permission.substring(1).replaceAll("/", "."))) {
-                throw new NotPermissionException(null);
-            }
-        }
-        //角色权限
-        if (saTokenAuthorizeConfig.getEnableRole() != null && saTokenAuthorizeConfig.getEnableRole()) {
-
-        }
-        return true;
-    }
-
-    /**
-     * 给予用户菜单权限
-     *
-     * @param loginId
-     * @param loginType
-     * @return
-     */
-    @Override
-    public List<String> getPermissionList(Object loginId, String loginType) {
-        List<String> list = new ArrayList<>();
-        return list;
-    }
-
-    /**
-     * 给予用户角色权限
-     *
-     * @param loginId
-     * @param loginType
-     * @return
-     */
-    @Override
-    public List<String> getRoleList(Object loginId, String loginType) {
-        List<String> list = new ArrayList<>();
-        return list;
-    }
-
-
-    /**
-     * 无token异常
-     *
-     * @param e
-     * @return
-     */
-    @ExceptionHandler(NotLoginException.class)
-    public R notLoginException(NotLoginException e) {
-        return R.fail(501, "未登录");
-    }
-
-    /**
-     * 无菜单权限异常
-     *
-     * @param e
-     * @return
-     */
-    @ExceptionHandler(NotPermissionException.class)
-    public R notPermissionException(NotPermissionException e) {
-        return R.fail(502, "无权限");
-    }
-
-    /**
-     * 无角色权限异常
-     *
-     * @param e
-     * @return
-     */
-    @ExceptionHandler(NotRoleException.class)
-    public R notRoleException(NotRoleException e) {
-        return R.fail(502, "无权限");
-    }
-}

+ 0 - 34
authorize-api-service/src/main/java/com/xy/satoken/SaTokenAuthorizeConfig.java

@@ -1,34 +0,0 @@
-package com.xy.satoken;
-
-import lombok.Data;
-import org.springframework.boot.context.properties.ConfigurationProperties;
-import org.springframework.stereotype.Component;
-
-import java.util.List;
-
-@Data
-@Component
-@ConfigurationProperties(prefix = "sa-token")
-public class SaTokenAuthorizeConfig {
-
-    /**
-     * token名称
-     */
-    private String tokenName;
-
-    /**
-     * 需要过滤的url
-     */
-    private List<String> excludePaths;
-
-    /**
-     * 开启菜单权限
-     */
-    private Boolean enablePermission;
-
-    /**
-     * 开启角色权限
-     */
-    private Boolean enableRole;
-
-}

+ 0 - 67
authorize-api-service/src/main/java/com/xy/satoken/SaTokenWebMvcConfigurer.java

@@ -1,67 +0,0 @@
-package com.xy.satoken;
-
-import cn.hutool.json.JSONObject;
-import cn.hutool.json.JSONUtil;
-import com.xy.swagger.Knife4jConfig;
-import lombok.AllArgsConstructor;
-import lombok.SneakyThrows;
-import org.springframework.stereotype.Component;
-import org.springframework.web.servlet.config.annotation.InterceptorRegistration;
-import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
-import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
-import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;
-
-import javax.servlet.http.HttpServletRequest;
-import javax.servlet.http.HttpServletResponse;
-import java.io.BufferedReader;
-import java.io.InputStreamReader;
-import java.util.List;
-
-/**
- * 单体boot鉴权
- */
-@Component
-@AllArgsConstructor
-public class SaTokenWebMvcConfigurer extends HandlerInterceptorAdapter implements WebMvcConfigurer {
-
-    private SaTokenAuthorizeConfig saTokenAuthorizeConfig;
-
-    private SaTokenAuthorize saTokenAuthorize;
-
-    @Override
-    @SneakyThrows
-    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) {
-        String permission;
-        String satoken;
-        if ("/authorize/satokenAuthorize".equals(request.getRequestURI())) {
-            //接口形式鉴权(如网关调用),从请求参数获取权限信息
-            BufferedReader streamReader = new BufferedReader(new InputStreamReader(request.getInputStream(), "UTF-8"));
-            StringBuilder sb = new StringBuilder();
-            String inputStr;
-            while ((inputStr = streamReader.readLine()) != null) {
-                sb.append(inputStr);
-            }
-            JSONObject jsonObject = JSONUtil.parseObj(sb);
-            permission = jsonObject.getStr("permission");
-            satoken = jsonObject.getStr("satoken");
-        } else {
-            //其他调用,从请求地址和请求头获取权限信息
-            permission = request.getRequestURI();
-            satoken = request.getHeader(saTokenAuthorizeConfig.getTokenName());
-        }
-        return saTokenAuthorize.check(satoken, permission);
-    }
-
-
-    @Override
-    public void addInterceptors(InterceptorRegistry registry) {
-        InterceptorRegistration interceptorRegistration = registry.addInterceptor(this)
-                .excludePathPatterns(Knife4jConfig.swaggerExcludes)
-                .addPathPatterns("/**");
-        List<String> excludePaths = saTokenAuthorizeConfig.getExcludePaths();
-        if (excludePaths != null) {
-            excludePaths.forEach(excludePath -> interceptorRegistration.excludePathPatterns("/**" + excludePath));
-        }
-    }
-
-}

+ 0 - 19
authorize-api/src/main/java/com/xy/dto/SatokenAuthorizeDto.java

@@ -1,19 +0,0 @@
-package com.xy.dto;
-
-import io.swagger.annotations.ApiModel;
-import io.swagger.annotations.ApiModelProperty;
-import lombok.Data;
-import lombok.experimental.Accessors;
-
-@Data
-@Accessors(chain = true)
-@ApiModel("权限校验交互类")
-public class SatokenAuthorizeDto {
-
-    @ApiModelProperty("token值")
-    private String satoken;
-
-    @ApiModelProperty("菜单权限标志")
-    private String permission;
-
-}

+ 0 - 9
authorize-api/src/main/java/com/xy/service/AuthorizeService.java

@@ -2,7 +2,6 @@ package com.xy.service;
 
 import com.xy.annotate.RestMappingController;
 import com.xy.dto.LoginDto;
-import com.xy.dto.SatokenAuthorizeDto;
 import com.xy.utils.R;
 import org.springframework.web.bind.annotation.PostMapping;
 
@@ -12,14 +11,6 @@ import org.springframework.web.bind.annotation.PostMapping;
 @RestMappingController("authorize")
 public interface AuthorizeService {
 
-    /**
-     * 接口形式鉴权
-     *
-     * @return
-     */
-    @PostMapping("satokenAuthorize")
-    R<Boolean> satokenAuthorize(SatokenAuthorizeDto satokenAuthorizeDto);
-
     /**
      * 登录
      *