package com.yc.action.login; import com.google.gson.Gson; import com.yc.action.BaseAction; import com.yc.action.grid.GridUtils; import com.yc.api.bean.Gfrom; import com.yc.api.bean.QrScanType; import com.yc.api.bean.attendance.AppSalesSetting; import com.yc.api.controller.QrCodeController; import com.yc.api.service.QrServiceIfc; import com.yc.api.utils.VersionUtils; import com.yc.entity.*; import com.yc.entity.attachment.AttachmentEntity; import com.yc.exception.ApplicationException; import com.yc.exception.CallBackMessage; import com.yc.factory.FactoryBean; import com.yc.factory.InitSystem; import com.yc.listener.SessionListener; import com.yc.multiData.MultiDataSource; import com.yc.multiData.SpObserver; import com.yc.sdk.password.action.ChangePassword; import com.yc.sdk.shopping.action.api.InvitationCode; import com.yc.sdk.shopping.util.SettingKey; import com.yc.sdk.weixinopen.entity.OpenComponentAppSetting; import com.yc.service.BaseService; import com.yc.service.demo.DemoIfc; import com.yc.service.role.RoleIfc; import com.yc.service.upload.AttachmentIfc; import com.yc.service.user.LoginRecordIfc; import com.yc.service.user.UserAccountServiceIfc; import com.yc.utils.*; import me.chanjar.weixin.common.util.http.URIUtil; import org.apache.commons.lang.StringUtils; import org.slf4j.Logger; import org.slf4j.LoggerFactory; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.dao.DataAccessException; import org.springframework.dao.EmptyResultDataAccessException; import org.springframework.data.redis.core.RedisTemplate; import org.springframework.jdbc.core.BeanPropertyRowMapper; import org.springframework.stereotype.Controller; import org.springframework.web.bind.annotation.RequestMapping; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; import java.io.File; import java.io.IOException; import java.io.PrintWriter; import java.text.SimpleDateFormat; import java.util.*; import java.util.concurrent.TimeUnit; //@Scope("request") @Controller public class LoginAction extends BaseAction { @Autowired private UserAccountServiceIfc userAccountService; @Autowired private LoginRecordIfc record; @Autowired private RoleIfc rIfc; @Autowired private DemoIfc demoIfc; //@Autowired //RedisClusterClient redisClusterClient; final Logger log = LoggerFactory.getLogger(this.getClass()); private static String attachment_server = AttachmentConfig.get("attachment.server"); ; private int prossSN(String cltsn) { List> list = new ArrayList>(); try { SpObserver.setDBtoDemo(); list = demoIfc.getInfoByCltSn(cltsn); } finally { SpObserver.setDBtoInstance(); } int r = 0; if (list != null && list.size() > 0) { r = 1; } return r; } @RequestMapping("/login.do") public String login(HttpServletRequest request, HttpServletResponse response) { String userCode = request.getParameter("account"); if (userCode == null || "".equals(userCode)) { userCode = (request.getAttribute("account") == null ? "" : (String) request.getAttribute("account")); } String password = request.getParameter("pwd"); if (password == null || "".equals(password)) { password = (request.getAttribute("pwd") == null ? "" : (String) request.getAttribute("pwd")); } if (password != null && !"".equals(password)) { password = EncodeUtil.replaceUrlChar(password); } String code = request.getParameter("code"); if (code == null || "".equals(code)) { code = (request.getAttribute("code") == null ? "" : (String) request.getAttribute("code")); } boolean ch_userid = (request.getAttribute("isch_userid") == null ? false : (Boolean) request.getAttribute("isch_userid")); if (ch_userid) password = "***";// 避开与密码相关 String dbId = ""; String dataBaseDis = ""; String isone = ""; Boolean isApp = false; CallBackMessage callBackMessage = new CallBackMessage(); if (request.getParameter("isApp") != null || request.getAttribute("isApp") != null) { isApp = true;// 手机app传过来 ; } String redirect = request.getParameter("redirect"); // 登录后重定向页面，Added by Johns Wang, 2016-02-17 // 处理通行证的情况 StringBuilder sb = new StringBuilder(); String cltsn = request.getParameter("cltsn"); if (cltsn == null) cltsn = (String) request.getAttribute("cltsn"); // Added by Johns Wang, 2015-12-06。。……。。……..…… if (cltsn != null && !"".equalsIgnoreCase(cltsn)) { int k = this.prossSN(cltsn); if (k == 0) { callBackMessage.setError("通行证已失效，请联络服务提供商！"); this.printJson(response, callBackMessage.toString()); return null;// 验证出错返回' } } else { dbId = request.getParameter("dataName");// 数据源id dataBaseDis = request.getParameter(SessionKey.DATABASE_DIS); isone = request.getParameter("isone");// 只有一个数据源的情况 if (dbId == null) dbId = (String) request.getAttribute("dataName"); // Added by Johns Wang, 2015-12-06 if (dataBaseDis == null) dataBaseDis = (String) request.getAttribute(SessionKey.DATABASE_DIS); // Added by Johns Wang, 2015-12-06 // 从数据源取 系统名称 dataBaseDis ,added by Johns Wang, 2017-07-02 if (dataBaseDis == null) { DataSourceEntity dataSourceEntity = MultiDataSource.getDataSourceMap(dbId); if (dataSourceEntity != null) { dataBaseDis = dataSourceEntity.getSystemID(); } } if (isone == null) isone = (String) request.getAttribute("isone"); // Added by Johns Wang, 2015-12-06 } if (userCode != null && userCode.length() > 30) {//解密为明文 try { userCode = ChangePassword.getDecryptPassword(EncodeUtil.replaceUrlChar(userCode)); } catch (Exception e) { e.printStackTrace(); print2(response, this.getErrorMsg(e), redirect, isApp); return null;// 验证出错返回' } } HttpSession session = request.getSession(); String domain = request.getParameter("domain") != null ? request.getParameter("domain") : (String) request.getAttribute("domain"); UserAccountEntity userAccount = null; // -------处理原生APP登录,通过手机号，注册时的密码 by danaus 2018-8-24 // 1---有dbid的情况表明是通过选择一个数据源进行登录操作 if (VersionUtils.getAPPTypeName(request) != null) {// ios,adnroid调用 try { InvitationCode invitationCode = (InvitationCode) FactoryBean.getBean("invitationCode"); // userCode代表手机号 (在方法 invitationCode.getDbList() 切换数据源 ) invitationCode.checkPasswordByTelephone(userCode, password, dbId); // 通过数据源id和手机号取得用户usercode进行登录，这时候不需要密码验证 SpObserver.setDBtoInstance("_" + dbId); userAccount = userAccountService.getUserInfoByTelephone(userCode);//userCode 手机号 if (userAccount != null) { userAccount.setApp_userCode(userCode); userAccount.setApp_Password(password); userCode = userAccount.getUserCode();//转成ERP的usercode进行登陆 password = userAccount.getPassword();//转成ERP的密码进行登陆 ch_userid = true; } else { print2(response, "【" + userCode + "】手机号码在ERP系统没有对应的用户信息或已停用", redirect, isApp); return null;// 验证出错返回' } } catch (DataAccessException e) { e.printStackTrace(); print2(response, e.getCause() != null ? e.getCause().getMessage() : e.getMessage(), redirect, isApp); return null; } catch (Exception e) { e.printStackTrace(); print2(response, e.getCause() != null ? e.getCause().getMessage() : e.getMessage(), redirect, isApp); return null; } finally { SpObserver.setDBtoInstance(); } } //这里是短信登录 xin 2020-8-20 11:25:59 String phone=request.getParameter("telephone"); phone=(phone==null?"":phone); String phoneCode=request.getParameter("phoneCode"); phoneCode=(phoneCode==null?"":phoneCode); if(StringUtils.isBlank(userCode) && !StringUtils.isBlank(phone) && !StringUtils.isBlank(phoneCode)) { try { @SuppressWarnings("rawtypes") RedisTemplate redisTemplate = (RedisTemplate) FactoryBean.getBean("redisTemplate"); if(!redisTemplate.hasKey("CODE:" + phone + ":" + dbId)) { print2(response, "验证码已失效,请重新获取验证码。", redirect, isApp); return null; } if(!phoneCode.equals(redisTemplate.opsForValue().get("CODE:" + phone + ":" + dbId)+"")) { print2(response, "验证码错误,请输入正确的验证码", redirect, isApp); return null; } redisTemplate.delete("CODE:" + phone + ":" + dbId);//删除 SpObserver.setDBtoInstance("_" + dbId); userAccount = userAccountService.getUserInfoByTelephone(phone);//phone 手机号 if (userAccount != null) { userCode = userAccount.getUserCode();//转成ERP的usercode进行登陆 password = userAccount.getPassword();//转成ERP的密码进行登陆 }else { print2(response, "【" + phone + "】手机号码在ERP系统没有对应的用户信息或已停用", redirect, isApp); return null;// 验证出错返回' } } catch (Exception e) { print2(response, "【" + phone + "】手机号码在ERP系统没有对应的用户信息或已停用", redirect, isApp); return null;// 验证出错返回' }finally { SpObserver.setDBtoInstance(); } } //---------------- // -------- if (StringUtils.isBlank(dbId) && StringUtils.isBlank(isone)) { sb.append("请选择一个系统！\\n"); } else { if (!StringUtils.isBlank(isone)) dbId = isone; session.setAttribute(SessionKey.DATA_BASE_ID, dbId); session.setAttribute(SessionKey.DATABASE_DIS, dataBaseDis); // 如果domain为空，则取默认的域名 by danaus 2021/4/12 11:18 if(org.apache.commons.lang3.StringUtils.isBlank(domain)){ domain= SettingKey.getHostUrl(request); } session.setAttribute(SessionKey.DOMAIN, domain); } if (StringUtils.isBlank(userCode)) { sb.append("账号不能为空\\n"); } if (StringUtils.isBlank(password)) { sb.append("密码不能为空\\n"); } // 判断进行验证码校验********************* boolean isValidateLogin = "true".equals(SystemConfig.getInstanse().get("isEnableValidateCode")); ; if (isValidateLogin) {// 是否进行验证码验证 if (StringUtils.isBlank(code)) { sb.append("验证码不能为空\\n"); } else { String rand = (String) session.getAttribute("rand");// 对照验证码 if (!code.equalsIgnoreCase(rand)) { sb.append("验证码不相符\\n"); } } } // 判断进行验证码校验********************* if (sb.length() > 0) { print2(response, sb.toString(), redirect, isApp); return null;// 验证出错返回' } try { // -------------------- // 判断是否超出人数限制 if (SessionListener.checkUserLimit(request, dbId)) { String s = "当前登录人数已超过系统最大登录人数，如有需要增加登录人数，请联系软件公司"; print2(response, s, redirect, isApp); session.invalidate(); return null;// 验证出错返回' } // *** start ******* 读取加密锁的授权店铺数 // int scount=0; // if(session.getAttribute(SessionKey.HAsP_sHOPCOUNT)!=null) // scount=(Integer)session.getAttribute(SessionKey.HAsP_sHOPCOUNT); // if(scount>0){ // // by danaus 13-5-4 // int shop=record.getShopCount(); // if(shop>scount){ // this.print(response, ""); // return null;//验证出错返回' // } // } // *** end *********** int recordeCount = 0; try { SpObserver.setDBtoInstance("_" + dbId); recordeCount = record.getRecordCountIn10min(userCode); // 10分钟内不能登录 } finally { SpObserver.setDBtoInstance(); } String ip = IPUtil.getIpAddr(request); if (recordeCount >= 5) { try { SpObserver.setDBtoInstance("_" + dbId); record.loginRecord(userCode, password, ip);// 登录次数过多再行登陆作为登录失败处理 } finally { SpObserver.setDBtoInstance(); } print2(response, userCode + "在短时间内登录错误次数过多！请耐心的等10分钟后再登录！", redirect, isApp); return null;// 验证出错返回 } // 检查限制用户登录时间和登录IP int s = 0; try { SpObserver.setDBtoInstance("_" + dbId); s = userAccountService.checkUserLoginTimeAndIp(userCode, ip); } finally { SpObserver.setDBtoInstance(); } if (s == 0) { print2(response, "该用户只能在工作时间或固定场所使用本系统[" + ip + "]", redirect, isApp); return null; } // // 设置session try { if (userAccount == null) { SpObserver.setDBtoInstance("_" + dbId); userAccount = userAccountService.getUserInfoByUserCode(userCode); if (userAccount == null) { userAccount = userAccountService.getUserInfoByTelephone(userCode); //允许电话登录 } if (userAccount == null) { userAccount = userAccountService.getUserInfoByEmail(userCode); //允许邮箱号登录 } } } finally { SpObserver.setDBtoInstance(); } if (userAccount == null) { try { SpObserver.setDBtoInstance("_" + dbId); record.loginRecord(userCode, password, IPUtil.getIpAddr(request));// 记录登录登录失败的信息 } finally { SpObserver.setDBtoInstance(); } if (ch_userid) { return "{\"ch_error\":\"ch_user_error\",\"info\":\"用户账号不存在！\"}"; } else { this.print2(response, "用户账号不存在！", request.getParameter("redirect"), isApp); return null; } } try { if (!ch_userid && !userAccount.checkPassword(password)) { try { SpObserver.setDBtoInstance("_" + dbId); record.loginRecord(userCode, password, IPUtil.getIpAddr(request));// 记录登录登录失败的信息 } finally { SpObserver.setDBtoInstance(); } this.print2(response, "用户密码不正确！", request.getParameter("redirect"), isApp); return null; } } catch (Exception ex) { this.print2(response, ex.getMessage(), request.getParameter("redirect"), isApp); return null; } // 判断用户APP登录时是否禁用 if (isApp && userAccount.getActiveApp() == 1) { this.print2(response, "用户APP端禁止登录！如有问题,请联系管理员", request.getParameter("redirect"), isApp); return null; } processLoginUserToSession(ip, dbId, session, userAccount); // -------------- // String ucode = account + Math.random();// 是为了区分用户重复问题，同一用户可以多人使用。 // session.setAttribute(SessionKey.SAIL_USERCODE, ucode); // OnLineUser.setOnlineUser(dataString, ucode, session); /* * WebApplicationContext webApplicationContext = * ContextLoader.getCurrentWebApplicationContext(); ServletContext * servletContext = * webApplicationContext.getServletContext();//取得ServletContext对象实例 * if((OnLineUser)servletContext.getAttribute("onlineuserlistener")==null) { * OnLineUser onuser=new * OnLineUser();//只设置一次，不同于上面日志文件的记录每次会话均设置。即当第一个客户连接到服务器时启动一个全局变量， * 此后所有的客户将使用相同的上下文。 servletContext.setAttribute("onlineuserlistener",onuser);// * 将监听器对象设置成ServletContext的属性，具有全局范围有效性，即所有的客户均可以取得它的实例。 } * session.setAttribute("onlineuserlistener",(OnLineUser)servletContext. * getAttribute("onlineuserlistener"));//取出此全局对象，并且将此对象绑定到某个会话中， * 此举将促使监听器调用valueBound，计数器加一。 */ // session.setAttribute(SessionKey.ONLINE_USERS, new OnLineUser());// 在线人数统计 // ------------------ if (isApp) { QrServiceIfc qrServiceIfc= (QrServiceIfc) FactoryBean.getBean("qrService"); try { SpObserver.setDBtoInstance("_" + dbId); AppSalesSetting appSalesSetting=qrServiceIfc.getAppSalesOrderStyle(); //加到会话 session.setAttribute(SessionKey.APP_SALESORDER_MATCODE_LIST,appSalesSetting.getAppSalesOrderMatCodeList()); session.setAttribute(SessionKey.APP_SALESORDER_STYLE,appSalesSetting.getAppSalesOrderStyle()); }catch (Exception e){ e.printStackTrace(); throw new ApplicationException(e.getMessage()); }finally { SpObserver.setDBtoInstance(); } Map map = new HashMap(); map.put("success", "ok"); map.put("sessionid", session.getId()); map.put("userName", userAccount.getUserName()); String avatarUnid = ""; if (userAccount.getAvatarUnid() != null && !"".equals(userAccount.getAvatarUnid())) { try { SpObserver.setDBtoInstance("_" + dbId); AttachmentIfc attachmentIfc = (AttachmentIfc) FactoryBean.getBean("AttachmentImpl"); String[] unids = userAccount.getAvatarUnid().split(";"); final AttachmentEntity attachmentEntity = attachmentIfc.getAttachmentEntity(unids[0], unids[1]); avatarUnid = userAccount.getAvatarUnid() + ";" + attachmentEntity.getFileType(); } catch (Exception ex) { callBackMessage.sendErrorMessage(ex.getMessage()); this.printJson(response, callBackMessage.toString()); return null; } finally { SpObserver.setDBtoInstance(); } } map.put("avatarUnid", avatarUnid); map.put("attachment_server", attachment_server); map.put("url", domain == null ? "" : domain); if (request.getAttribute("postTokenV2") == null) { map.put("token", genToken(userAccount.getApp_Password(), userAccount.getApp_userCode(), Integer.parseInt(dbId))); } //---增加扫码显示方式 QrScanType qrScanType=null; //显示下单图标 int appSalesMenuIcon=0; try { SpObserver.setDBtoInstance("_" + dbId); qrScanType= qrServiceIfc.getQrScanType(userAccount.getUserCode(), userAccount.getUserName()); }catch (EmptyResultDataAccessException e){ //不处理，合理存在的情况 qrScanType=new QrScanType(); }catch (Exception e){ e.printStackTrace(); throw new ApplicationException(e.getMessage()); }finally { SpObserver.setDBtoInstance(); } //---增加是否可以显示下单图标 try{ SpObserver.setDBtoInstance("_" + dbId); BaseService baseService= (BaseService) FactoryBean.getBean("BaseService"); List list = baseService.getJdbcTemplate().query("select a.formid,a.formname from gform a where exists(select 1 from gfield b where a.formid = b.formid and b.fieldid in ( 'matcode','barcode','qrcode') and b.ScanCodeField = 1 )",new BeanPropertyRowMapper<>(Gfrom.class)); if(list!=null&&list.size()>0){ QrCodeController qrCodeController= (QrCodeController) FactoryBean.getBean("qrCodeController"); List tempList= qrCodeController.procFormLimit(request,list); if(tempList!=null&&tempList.size()>0){ appSalesMenuIcon=1; } } }catch (Exception e){ e.printStackTrace(); throw new ApplicationException(e.getMessage()); }finally { SpObserver.setDBtoInstance(); } map.put("sessionInfo", getSessionInfo(session)); map.put("isAdmin", session.getAttribute(SessionKey.SUPPER_USER)); final DataSourceEntity dataSourceMap = MultiDataSource.getDataSourceMap(dbId); map.put("isShowAttendance", dataSourceMap.isShowAttendanceButton()?1:0);//打卡 map.put("qrDisplayType", qrScanType.getScanMeterialAction());//扫码显示方式 map.put("appSalesMenuIcon", appSalesMenuIcon);//是否显示下单图标，0不显示，1显示 map.put("isRelatingMaterialWhenNewCustomer", qrScanType.getIsRelatingMaterialWhenNewCustomer());//是否关联客户 OpenComponentAppSetting openComponentAppSetting=OpenComponentAppSetting.defaultSettings(); map.put("mobileAppId", openComponentAppSetting==null?null:openComponentAppSetting.getMobileAppId());//小程序id map.put("mobileAppSecret", openComponentAppSetting==null?null:openComponentAppSetting.getMobileAppSecret());//小程序MobileAppSecret map.put("miniAppOrgId", dataSourceMap.getMiniAppOrgId());//小程序miniAppOrgId map.put("isModifyPriceWhenScanQrCode", session.getAttribute(SessionKey.ISMODIFYPRICEWHENSCANQRCODE)); map.put("isModifyPriceWhenSalesOrder", session.getAttribute(SessionKey.ISMODIFYPRICEWHENSALESORDER)); map.put("isModifyPriceWhenPurchaseOrder", session.getAttribute(SessionKey.ISMODIFYPRICEWHENPURCHASEORDER)); map.put("perssion", session.getAttribute(SessionKey.PERSSION)); this.printJson(response, GridUtils.toJson(map)); session.setAttribute(SessionKey.USER_LOGIN_TYPE, SessionKey.USER_LOGIN_TYPE_APP);//app 类型 return null; } else if (redirect != null && !"".equals(redirect)) { // 增加登录后重定向页面功能，added by Johns Wang, 2016-02-17 //return "redirect:" + redirect; callBackMessage.sendSuccessMessage("登录成功"); callBackMessage.setData("{\"redirect\":\"" + redirect + "\"}"); session.setAttribute(SessionKey.USER_LOGIN_TYPE, SessionKey.USER_LOGIN_TYPE_MINIAPP);//miniapp 类型 this.printJson(response, callBackMessage.toString()); return null; } else { session.setAttribute(SessionKey.USER_LOGIN_TYPE, SessionKey.USER_LOGIN_TYPE_WEB);//web 类型 if (ch_userid) return "{\"ok\":\"ch_user_ok\",\"info\":\"" + userCode + "\"}"; else { callBackMessage.sendSuccessMessage("登录成功"); this.printJson(response, callBackMessage.toString()); return null; } } } catch (IllegalStateException e) { e.printStackTrace(); if (e.getMessage().contains("Session already invalidated")) { sb.append("会话已过期，请关闭浏览器再重新登录系统\\n"); print2(response, sb.toString(), redirect, isApp); System.out.println(this.getClass() + " sessionid:" + session.getId()); return null;// 会话已过期返回 } else { e.printStackTrace(); print2(response, this.getErrorMsg(e), redirect, isApp); return null; } } catch (DataAccessException e) { e.printStackTrace(); //SQLException sql = (SQLException) e.getCause(); //return "/403.jsp?info=" + sql.getMessage(); this.print2(response, e.getCause() != null ? e.getCause().getMessage() : e.getMessage(), request.getParameter("redirect"), isApp); return null; } catch (NullPointerException e) {// 不存在此账号 e.printStackTrace(); proccError(userCode, password, request, response); return null; } catch (RuntimeException e) { e.printStackTrace(); if (e.getMessage().equals(SessionKey.DEMO_REF)) { session.setAttribute(SessionKey.DEMO_REF, SessionKey.DEMO_REF); this.print(response, ""); } return null; } catch (Exception e) {// 不存在此账号 e.printStackTrace(); proccError(userCode, password, request, response); return null; } } private String genToken(String pwd, String usercode, int dbid) { TokenInfo tokenInfo = new TokenInfo(); tokenInfo.setUsercode(usercode); tokenInfo.setDbid(dbid); try { String key = "Lg_Token:" + tokenInfo.getDbid() + ":" + tokenInfo.getUsercode(); RedisTemplate redisTemplate = (RedisTemplate) FactoryBean.getBean("redisTemplate"); Object object = redisTemplate.opsForValue().get(key); //if (object == null) { //不存在则加到redis里，过期时间设置为12小时 final int OVERTIME = 12; redisTemplate.opsForValue().set(key, pwd, OVERTIME, TimeUnit.HOURS); //} String token = AESUtils.encrypt(GridUtils.toJson(tokenInfo));//dbid+usercode加密返回给APP客户端保存 return token; } catch (Exception ex) { ex.printStackTrace(); return ""; } } public boolean processLoginUserToSession(String ip, String dbId, HttpSession session, UserAccountEntity userAccount) throws Exception { // 设置权限 PerssionEntity perssionEntity = new PerssionEntity(); try { SpObserver.setDBtoInstance("_" + dbId); perssionEntity.setRole(rIfc.getRole(userAccount.getUserCode())); } finally { SpObserver.setDBtoInstance(); } try { SpObserver.setDBtoInstance("_" + dbId); perssionEntity.setPerssion(userAccountService.getUserProfiles(userAccount.getUserCode())); // 保存会话 session信息 setSessionValues(dbId, userAccount, session, perssionEntity); // 登录成功清除登录错误信息 record.clearLoginRecord(userAccount.getUserCode()); // 记录登录信息 userAccountService.loginLog(userAccount.getUserCode(), userAccount.getUserName(), ip, session.getId()); } finally { SpObserver.setDBtoInstance(); } if (userAccount.getDefaultSet() != null && !"".equals(userAccount.getDefaultSet())) { try { SpObserver.setDBtoInstance("_" + dbId); perssionEntity.setDefaultSet(userAccountService.getDefaultSet(userAccount.getDefaultSet())); } finally { SpObserver.setDBtoInstance(); } } return true; } /** * APP 自动登录接口 * * @param request * @param response */ @RequestMapping("/autoLogin.do") public String autoLogin(String token, HttpServletRequest request, HttpServletResponse response) { if (token == null || "".equalsIgnoreCase(token)) { this.printJson(response, "{\"error\":\"token不能为空\"}"); return ""; } try { String value = AESUtils.decrypt(EncodeUtil.replaceUrlChar(token));//解密 Gson gson = new Gson(); TokenInfo tokenInfo = gson.fromJson(value, new com.google.gson.reflect.TypeToken() { }.getType()); RedisTemplate redisTemplate = (RedisTemplate) FactoryBean.getBean("redisTemplate"); Object object = redisTemplate.opsForValue().get("Lg_Token:" + tokenInfo.getDbid() + ":" + tokenInfo.getUsercode()); if (object == null) { this.printJson(response, "{\"error\":\"token已失效，请重新登录\"}"); return ""; } String[] tokenStr = ((String) object).split("#");//0是密码，1是随机数 //进行登录操作 tokenInfo.setPwd(tokenStr[0]); request.setAttribute("account", tokenInfo.getUsercode()); request.setAttribute("pwd", tokenInfo.getPwd()); request.setAttribute("isApp", "1"); request.setAttribute("dataName", tokenInfo.getDbid() + ""); request.setAttribute("isone", tokenInfo.getDbid() + ""); } catch (Exception ex) { this.printJson(response, "{\"error\":\"" + this.getErrorMsg(ex) + "\"}"); return ""; } return login(request, response); } @RequestMapping("/autoLoginV2.do") /** * by danaus 2020/1/13 9:59 */ public String autoLoginV2(String token, HttpServletRequest request, HttpServletResponse response) { CallBackMessage callBackMessage = new CallBackMessage(); if (token == null || "".equalsIgnoreCase(token)) { this.printJson(response, callBackMessage.sendErrorMessage("token不能为空", -1)); return ""; } try { String value = AESUtils.decrypt(EncodeUtil.replaceUrlChar(token));//解密 Gson gson = new Gson(); TokenInfo tokenInfo = gson.fromJson(value, new com.google.gson.reflect.TypeToken() { }.getType()); RedisTemplate redisTemplate = (RedisTemplate) FactoryBean.getBean("redisTemplate"); //System.out.println("aaaaaa>>>>"+value); //System.out.println("bbbbb>>>>"+InvitationCode.TOKEN_STR + tokenInfo.getDbid() + ":" + tokenInfo.getUsercode()); Object object = redisTemplate.opsForValue().get(InvitationCode.TOKEN_STR + tokenInfo.getDbid() + ":" + tokenInfo.getUsercode()); //System.out.println("cccc>>>>"+object); if (object == null) { //设置会话失效 request.getSession().invalidate(); this.printJson(response, callBackMessage.sendErrorMessage("token已失效，请重新登录", -1002)); return ""; } //405调用需要刷新过期时间 if(request.getParameter("refresh")!=null&&"1".equalsIgnoreCase(request.getParameter("refresh"))) { //刷新key过期时间 redisTemplate.opsForValue().getOperations().expire(InvitationCode.TOKEN_STR + tokenInfo.getDbid() + ":" + tokenInfo.getUsercode(), 12, TimeUnit.HOURS); } //验证token合法性,对比随机数 String[] tokenStr = ((String) object).split("#");//0是密码，1是随机数 by danaus 2020/9/24 10:18 // if (tokenStr[1] == null || "".equals(tokenStr[1]) || tokenInfo.getRand() != Double.parseDouble(tokenStr[1])) { // this.printJson(response, callBackMessage.sendErrorMessage("不是合法的token", -1001)); // return null; // } //进行登录操作 tokenInfo.setPwd(tokenStr[0]); request.setAttribute("account", tokenInfo.getUsercode()); request.setAttribute("pwd", tokenInfo.getPwd()); request.setAttribute("isApp", "1"); request.setAttribute("dataName", tokenInfo.getDbid() + ""); request.setAttribute("isone", tokenInfo.getDbid() + ""); request.setAttribute("postTokenV2", "1");//说明是通过V2版提交，之后在登录成功后就不返回token。 } catch (Exception ex) { this.printJson(response, callBackMessage.sendErrorMessage(this.getErrorMsg(ex), -1)); return ""; } return login(request, response); } private void print2(HttpServletResponse response, String sb, String redirect, Boolean isApp) { CallBackMessage callBackMessage = new CallBackMessage(); // redirect Added by Johns Wang, 2016-03-06 if (redirect != null && !"".equals(redirect)) { redirect = URIUtil.encodeURIComponent(redirect); callBackMessage.setData("{\"redirect\":\"" + redirect + "\"}"); } callBackMessage.sendErrorMessage(sb); if (isApp != null && isApp) { if("密码错误".equalsIgnoreCase(sb)){ //密码不正确 以状态码为-1004返回给app，弹出登录界面 callBackMessage.sendErrorMessage(sb,-1004); } this.print(response, callBackMessage.toString()); } else { this.print(response, callBackMessage.toString()); } // // this.print(response, ""); // if (redirect == null || redirect.equals("")) // this.print(response, ""); // else // this.print(response, ""); // } } private Map getSessionInfo(HttpSession session) { Map map = new HashMap(); map.put(SessionKey.HRCODE.replace("@", ""), session.getAttribute(SessionKey.HRCODE)); map.put(SessionKey.HRNAME.replace("@", ""), session.getAttribute(SessionKey.HRNAME)); map.put(SessionKey.USERNAME.replace("@", ""), session.getAttribute(SessionKey.USERNAME)); map.put(SessionKey.USER_NAME.replace("@", ""), session.getAttribute(SessionKey.USER_NAME)); map.put(SessionKey.ORIGINAL_USERNAME.replace("@", ""), session.getAttribute(SessionKey.ORIGINAL_USERNAME)); map.put(SessionKey.USER.replace("@", ""), session.getAttribute(SessionKey.USER)); map.put(SessionKey.ORIGINAL_USERCODE.replace("@", ""), session.getAttribute(SessionKey.ORIGINAL_USERCODE)); map.put(SessionKey.USERCODE.replace("@", ""), session.getAttribute(SessionKey.USERCODE)); map.put(SessionKey.COMPANY_ID.replace("@", ""), session.getAttribute(SessionKey.COMPANY_ID)); map.put(SessionKey.COMPANY_NAME.replace("@", ""), session.getAttribute(SessionKey.COMPANY_NAME)); map.put(SessionKey.COMPANYMEMO.replace("@", ""), session.getAttribute(SessionKey.COMPANYMEMO)); map.put(SessionKey.VERSION_ID.replace("@", ""), session.getAttribute(SessionKey.VERSION_ID)); map.put(SessionKey.DEPARTMENT.replace("@", ""), session.getAttribute(SessionKey.DEPARTMENT)); map.put(SessionKey.CCCODE.replace("@", ""), session.getAttribute(SessionKey.CCCODE)); map.put(SessionKey.CCNAME.replace("@", ""), session.getAttribute(SessionKey.CCNAME)); map.put(SessionKey.SUPPER_USER.replace("@", ""), session.getAttribute(SessionKey.SUPPER_USER)); map.put(SessionKey.ROLE_NAME.replace("@", ""), session.getAttribute(SessionKey.ROLE_NAME)); map.put(SessionKey.DEFAULT_SET.replace("@", ""), session.getAttribute(SessionKey.DEFAULT_SET)); map.put(SessionKey.LOGIN_TYPE.replace("@", ""), session.getAttribute(SessionKey.LOGIN_TYPE)); map.put(SessionKey.isStopSystem.replace("@", ""), session.getAttribute(SessionKey.isStopSystem)); map.put(SessionKey.OPEN_ID.replace("@", ""), session.getAttribute(SessionKey.OPEN_ID)); map.put(SessionKey.CURRENCY.replace("@", ""), session.getAttribute(SessionKey.CURRENCY)); map.put(SessionKey.SHOP_CCCDOE.replace("@", ""), session.getAttribute(SessionKey.SHOP_CCCDOE)); ; map.put(SessionKey.SYSTEM_LANGUAGE.replace("@", ""), session.getAttribute(SessionKey.SYSTEM_LANGUAGE)); map.put(SessionKey.DEFAULT_STCODE.replace("@", ""), session.getAttribute(SessionKey.DEFAULT_STCODE)); map.put(SessionKey.DEFAULT_ACCTCODE.replace("@", ""), session.getAttribute(SessionKey.DEFAULT_ACCTCODE)); map.put(SessionKey.UserCodePermission.replace("@", ""), session.getAttribute(SessionKey.UserCodePermission)); map.put(SessionKey.COMPANY_PERMISSION.replace("@", ""), session.getAttribute(SessionKey.COMPANY_PERMISSION)); map.put(SessionKey.AT_TODAY.replace("@", ""), session.getAttribute(SessionKey.AT_TODAY)); map.put(SessionKey.AT_NOW.replace("@", ""), session.getAttribute(SessionKey.AT_NOW)); map.put(SessionKey.DEFAULT_BRAND.replace("@", ""), session.getAttribute(SessionKey.DEFAULT_BRAND)); map.put(SessionKey.CCCODEPERMISSION.replace("@", ""), session.getAttribute(SessionKey.CCCODEPERMISSION)); map.put(SessionKey.USERTYPE.replace("@", ""), session.getAttribute(SessionKey.USERTYPE)); map.put(SessionKey.ISMODIFYPRICEWHENSCANQRCODE, session.getAttribute(SessionKey.ISMODIFYPRICEWHENSCANQRCODE)); map.put(SessionKey.ISMODIFYPRICEWHENSALESORDER, session.getAttribute(SessionKey.ISMODIFYPRICEWHENSALESORDER)); map.put(SessionKey.ISMODIFYPRICEWHENPURCHASEORDER, session.getAttribute(SessionKey.ISMODIFYPRICEWHENPURCHASEORDER)); map.put("day", DateUtil.getDay(0)); map.put("month", DateUtil.getMonth(0)); map.put("year", DateUtil.getYear(0)); return map; } private void proccError(String account, String pwd, HttpServletRequest request, HttpServletResponse response) { Boolean isApp = Boolean.valueOf(request.getParameter("isApp") == null ? false : true);// 手机app传过来 try { SpObserver.setDBtoInstance("_" + request.getSession().getAttribute(SessionKey.DATA_BASE_ID)); record.loginRecord(account, pwd, IPUtil.getIpAddr(request));// 记录登录登录失败的信息 } catch (Exception e2) { this.print2(response, e2.getMessage().replace("\"", ""), request.getParameter("redirect"), isApp); } finally { SpObserver.setDBtoInstance(); } this.print2(response, "用户账号或密码错误！", request.getParameter("redirect"), isApp); } @RequestMapping("/logout.do") public void logout(HttpServletRequest request, HttpServletResponse response) { try { HttpSession session = request.getSession(); session.invalidate(); this.printJson(response, "{\"success\":\"ok\"}"); } catch (Exception e) { e.printStackTrace(); this.printJson(response, "{\"error\":\"" + e.getMessage() + "\"}"); } } @RequestMapping("/GetLoginUser.do") public void getLoginUser(HttpServletRequest request, HttpServletResponse response) { int pageSize = 0; int curPage = 0; int total = 0; List> list = null; try { pageSize = Integer.parseInt(request.getParameter("rows"));// 每页大小 curPage = Integer.parseInt(request.getParameter("page")); // 当前页 } catch (Exception e) { return; } // 搜索条件 String companyname = request.getParameter("companyname"); String usercode = request.getParameter("usercode"); String username = request.getParameter("username"); try { SpObserver.setDBtoInstance("_" + request.getSession().getAttribute(SessionKey.DATA_BASE_ID)); if (StringUtils.isBlank(companyname) && StringUtils.isBlank(usercode) && StringUtils.isBlank(username)) { total = userAccountService.getUserTotal(); list = userAccountService.getLoginUser(curPage, pageSize); } else { total = userAccountService.getUserTotal(companyname, usercode, username); list = userAccountService.getLoginUser(curPage, pageSize, companyname, usercode, username); } } finally { SpObserver.setDBtoInstance(); } Gson gson = new Gson(); String data = gson.toJson(list); StringBuilder sb = new StringBuilder(); sb.append("{\"total\":").append(total).append(",\"rows\":").append(data).append("}"); try { printText(response, sb.toString()); } catch (IOException e) { e.printStackTrace(); } data = null; sb = null; list = null; gson = null; } /** * 输出信息到客户端 * * @param response * @param str * @throws IOException */ public void printText(HttpServletResponse response, String str) throws IOException { response.setCharacterEncoding("utf-8"); PrintWriter out = response.getWriter(); out.write(str); out.flush(); out.close(); } /** * 设置session 相关值（添加新的session标识符时应在切换用户功能添加相应的session标识符com.yc.action.login.SwitchUserCodeAction） * * @param dbId * @param userAccount * @param session * @return * @throws Exception */ public static String setSessionValues(String dbId, UserAccountEntity userAccount, HttpSession session, PerssionEntity perssionEntity) throws Exception { // ------------用SessionKey类来存储session标识符 避免大小写或者忘记session标识符的情况------- Map role = perssionEntity.getRole(); // rIfc.getRole(userAccount.getUserCode()); String userCode = (String) userAccount.getUserCode(); session.setAttribute(SessionKey.HRCODE, ((String) userAccount.getHrCode()).replaceAll("\\s", ""));// 用户ID session.setAttribute(SessionKey.HRNAME, ((String) userAccount.getHrName()).replaceAll("\\s", ""));// 用户ID String userName = (String) userAccount.getUserName();// 用户名 session.setAttribute(SessionKey.USERNAME, userName.replaceAll("\\s", "")); session.setAttribute(SessionKey.USER_NAME, userName.replaceAll("\\s", "")); session.setAttribute(SessionKey.PASSWORD, userAccount.getPassword()); session.setAttribute(SessionKey.ORIGINAL_USERNAME, userName.replaceAll("\\s", "")); session.setAttribute(SessionKey.USER, userCode.replaceAll("\\s", ""));// 用户ID session.setAttribute(SessionKey.ORIGINAL_USERCODE, userCode.replaceAll("\\s", "")); session.setAttribute(SessionKey.USERCODE, userCode.replaceAll("\\s", ""));// 用户ID session.setAttribute(SessionKey.COMPANY_ID, userAccount.getCompanyId());// 公司代码 session.setAttribute(SessionKey.COMPANY_NAME, userAccount.getCompanyName());// 公司代码 session.setAttribute(SessionKey.COMPANYMEMO, userAccount.getCompanyMemo());// 适合于多公司 session.setAttribute(SessionKey.VERSION_ID, 0);// 版本号 session.setAttribute(SessionKey.DEPARTMENT, userAccount.getCcName()); session.setAttribute(SessionKey.CCCODE, userAccount.getCcCode()); session.setAttribute(SessionKey.CCNAME, userAccount.getCcName()); session.setAttribute(SessionKey.SUPPER_USER, "superuser".equalsIgnoreCase((userAccount.getUserType())) ? "1" : "0");// 系统管理员 session.setAttribute(SessionKey.isStopSystem, userAccount.isStopSystem() ? "1" : "0"); session.setAttribute(SessionKey.OPEN_ID, userAccount.getOpenId());// openid号 session.setAttribute(SessionKey.CURRENCY, userAccount.getCurrency()); session.setAttribute(SessionKey.SHOP_CCCDOE, userAccount.getShopCcCode());// shopcccode session.setAttribute(SessionKey.COMPANY_PERMISSION, userAccount.getCompanyPermission());// CompanyPermission session.setAttribute(SessionKey.ROLE_NAME, role == null ? "未设置" : role.get("RoleName") == null ? "" : role.get("RoleName"));// 如超级用户 // 根据账号获取相关权限集合 Map> perssion = perssionEntity.getPerssion(); // userAccountService.getUserProfiles(userCode); // 获得缺省集合 if (userAccount.getDefaultSet() != null && !"".equals(userAccount.getDefaultSet())) { // DefaultSet.defaultSet2Session(userAccountService.getDefaultSet(userAccount.getDefaultSet()), // session); DefaultSet.defaultSet2Session(perssionEntity.getDefaultSet(), session); } // 构建账号对应的系统菜单 session.setAttribute(SessionKey.PERSSION, perssion);// 权限集合 session.setAttribute(SessionKey.LOGIN_TYPE, userAccount.getLogonType() + ""); session.setAttribute(SessionKey.SYSTEM_LANGUAGE, "cnzh");// 设置语言 session.setAttribute(SessionKey.DIBANG, userAccount.isEnableLoadCollection() ? "1" : "0");// 设置地磅权限 // 添加地磅需要信息 默认先给空白 session.setAttribute(SessionKey.LOADER_NAME, ""); session.setAttribute(SessionKey.IP_ADDRESS, ""); session.setAttribute(SessionKey.HOSTNAME, ""); session.setAttribute(SessionKey.MAC_ADDRESS, ""); session.setAttribute(SessionKey.AT_TODAY, DateUtil.toDayDate()); session.setAttribute(SessionKey.AT_NOW, DateUtil.toDay()); session.setAttribute(SessionKey.DEFAULT_STCODE, userAccount.getDefaultStcode()); session.setAttribute(SessionKey.DEFAULT_ACCTCODE, userAccount.getDefaultAcctCode()); session.setAttribute(SessionKey.UserCodePermission, userAccount.getUserCodePermission()); session.setAttribute(SessionKey.DEFAULT_BRAND, userAccount.getDefaultBrand()); session.setAttribute(SessionKey.CCCODEPERMISSION, userAccount.getCcCodePermission()); session.setAttribute(SessionKey.ISMODIFYPRICEWHENSCANQRCODE, userAccount.getIsModifyPriceWhenScanQrCode()); session.setAttribute(SessionKey.ISMODIFYPRICEWHENSALESORDER, userAccount.getIsModifyPriceWhenSalesOrder()); session.setAttribute(SessionKey.ISMODIFYPRICEWHENPURCHASEORDER, userAccount.getIsModifyPriceWhenPurchaseOrder()); session.setAttribute(SessionKey.USERTYPE,userAccount.getUserType() ); session.setAttribute(SessionKey.PAGE_PATH, File.separator + "app" + File.separator + session.getAttribute(SessionKey.DATA_BASE_ID) + File.separator + session.getAttribute(SessionKey.VERSION_ID) + File.separator + session.getAttribute(SessionKey.SYSTEM_LANGUAGE)); String realpath = session.getServletContext().getRealPath("/") + session.getAttribute(SessionKey.PAGE_PATH); session.setAttribute(SessionKey.REAL_PATH, realpath.replaceAll("\\\\", "/")); session.setAttribute(SessionKey.DATA_PATH, File.separator + "app" + File.separator + session.getAttribute(SessionKey.DATA_BASE_ID) + File.separator + session.getAttribute(SessionKey.VERSION_ID) + File.separator + session.getAttribute(SessionKey.SYSTEM_LANGUAGE)); InitSystem.getInstance().setMailSavePath(session.getServletContext() .getRealPath(File.separator + "WEB-INF" + File.separator + "MAIL" + File.separator)); // 结束地磅所需信息 // 增加读取授权门店数 DataSourceEntity dataSourceEntity = MultiDataSource.getDataSourceMap(dbId); if (dataSourceEntity != null) { session.setAttribute(SessionKey.LimitDepartmentNumber, dataSourceEntity.getLimitDepartmentNumber()); session.setAttribute(SessionKey.DATACHECK_PAGENUM, dataSourceEntity.getDataCheckPageNum()); } SimpleDateFormat df = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss");//设置日期格式 session.setAttribute(SessionKey.LOGIN_TIME, df.format(new Date()));//登录时间 xin 2020-8-31 11:35:22 return userName; } public void setRecord(LoginRecordIfc record) { this.record = record; } // 检查session是否失效 @RequestMapping("/checkSession.do") public void sessionCheck(HttpServletRequest request, HttpServletResponse response) throws IOException { HttpSession session = request.getSession(); String result = ""; if (session.getAttribute(SessionKey.HRCODE) == null) { // userAccountService.doQuitLog(request.getParameter("usercode")); by 2014-8-5 // danaus 会话失效写插进数据无意义且会出错 result = "fail"; } else { result = "success"; } printText(response, "{\"status\":\"" + result + "\"}"); } /** * session失效后弹出登录框登录 * * @param request * @param response 2012-09-20 */ @RequestMapping("/againLogin.do") public String againLogin(String usercode, String password, String dbid, String dbstr, String domain, HttpServletRequest request, HttpServletResponse response) { // System.out.println("againLogin..."+request.getSession().getId()+"，时间："+request.getSession().getCreationTime()); StringBuilder sb = new StringBuilder(); HttpSession session = request.getSession(); CallBackMessage callBackMessage = new CallBackMessage(); if (dbid == null || "".equals(dbid)) { List dataSourceList = MultiDataSource.getDataSourceMapsByDomain(domain); if (dataSourceList != null && dataSourceList.size() > 0) { dbid = dataSourceList.get(0).getDbId() + ""; } } try { if (dbid == null || "".equals(dbid)) { sb.append("数据库ID不能为空\\n"); } if (StringUtils.isBlank(usercode)) { sb.append("账号不能为空\\n"); } if (StringUtils.isBlank(password)) { sb.append("密码不能为空\\n"); } if (sb.length() > 0) { callBackMessage.sendErrorMessage(sb.toString()); this.printJson(response, callBackMessage.toString()); return null;// 验证出错返回' } session.setAttribute(SessionKey.DATA_BASE_ID, dbid); session.setAttribute(SessionKey.DATABASE_DIS, dbstr); session.setAttribute(SessionKey.DOMAIN, request.getParameter("domain")); // -------------------- // 判断是否超出人数限制 if (SessionListener.checkUserLimit(request, dbid)) { String s = "当前登录人数已超过系统最大登录人数，如有需要增加登录人数，请联系软件公司"; this.print2(response, s, null, null); session.invalidate(); return null;// 验证出错返回' } Boolean isApp = Boolean.valueOf(request.getParameter("isApp") == null ? false : true);// 手机app传过来 if (usercode != null && usercode.length() > 30) {//解密为明文 try { usercode = ChangePassword.getDecryptPassword(usercode); } catch (Exception e) { e.printStackTrace(); print2(response, this.getErrorMsg(e), null, isApp); return null;// 验证出错返回' } } // ---------------- // String dbid=session.getAttribute(SessionKey.DATA_BASE_ID)+""; int recordeCount = 0; try { SpObserver.setDBtoInstance("_" + dbid); recordeCount = record.getRecordCountIn10min(usercode); } finally { SpObserver.setDBtoInstance(); } if (recordeCount >= 5) { try { SpObserver.setDBtoInstance("_" + dbid); record.loginRecord(usercode, password, IPUtil.getIpAddr(request));// 登录次数过多再行登陆作为登录失败处理 } finally { SpObserver.setDBtoInstance(); } this.print2(response, usercode + "在短时间内登录错误次数过多！请耐心的等10分钟后再登录！", null, null); return null;// 验证出错返回 } // session.setAttribute(SessionKey.ONLINE_USERS, new // OnLineUser(usercode,userName,dbid,request.getParameter("domain")));//在线人数统计 // 设置session String ip = IPUtil.getIpAddr(request); // 检查限制用户登录时间和登录IP int s = 0; try { SpObserver.setDBtoInstance("_" + dbid); s = userAccountService.checkUserLoginTimeAndIp(usercode, ip); } finally { SpObserver.setDBtoInstance(); } if (s == 0) { print2(response, "该用户只能在工作时间或固定场所使用本系统[" + ip + "]", null, isApp); return null; } // // -------------- // String ucode = usercode + Math.random();// 是为了区分用户重复问题，同一用户可以多人使用。 // session.setAttribute(SessionKey.SAIL_USERCODE, ucode); // OnLineUser.setOnlineUser(dataString, ucode, session); // session.setAttribute(SessionKey.ONLINE_USERS, new OnLineUser());// 在线人数统计 // ------------------ UserAccountEntity userAccount = null; try { SpObserver.setDBtoInstance("_" + dbid); userAccount = userAccountService.getUserInfoByUserCode(usercode); if (userAccount == null) { userAccount = userAccountService.getUserInfoByTelephone(usercode); //允许电话登录 } if (userAccount == null) { userAccount = userAccountService.getUserInfoByEmail(usercode); //允许邮箱号登录 } } finally { SpObserver.setDBtoInstance(); } if (userAccount == null) { try { SpObserver.setDBtoInstance("_" + dbid); record.loginRecord(usercode, password, IPUtil.getIpAddr(request));// 记录登录登录失败的信息 } finally { SpObserver.setDBtoInstance(); } this.print2(response, "用户账号不存在！", request.getParameter("redirect"), isApp); return null; } try { if (!userAccount.checkPassword(password)) { try { SpObserver.setDBtoInstance("_" + dbid); record.loginRecord(usercode, password, IPUtil.getIpAddr(request));// 记录登录登录失败的信息 } finally { SpObserver.setDBtoInstance(); } this.print2(response, "用户密码不正确！", request.getParameter("redirect"), isApp); return null; } } catch (Exception ex) { this.print2(response, ex.getMessage(), request.getParameter("redirect"), isApp); } // 设置权限 processLoginUserToSession(ip, dbid, session, userAccount); callBackMessage.sendSuccessMessage("登录成功"); this.printJson(response, callBackMessage.toString()); return null; } catch (NullPointerException e) {// 不存在此账号 e.printStackTrace(); proccError(usercode, password, request, response); return null; } catch (RuntimeException e) { e.printStackTrace(); if (e.getMessage().equals(SessionKey.DEMO_REF)) { session.setAttribute(SessionKey.DEMO_REF, SessionKey.DEMO_REF); this.print(response, ""); } return null; } catch (Exception e) {// 不存在此账号 e.printStackTrace(); proccError(usercode, password, request, response); return null; } } private class AppJsonObject { private boolean myResult; private HttpServletResponse mResponse; private String mUserCode; private String mPassword; private Boolean mIsApp; private String mRedirect; private List> mList; private boolean mCh_userid; private String mDbId; private String mDataBaseDis; private String mDomain; private UserAccountEntity mUserAccount; public AppJsonObject(HttpServletResponse response, String userCode, String password, Boolean isApp, String redirect, List> list) { mResponse = response; mUserCode = userCode; mPassword = password; mIsApp = isApp; mRedirect = redirect; mList = list; } boolean is() { return myResult; } public String getUserCode() { return mUserCode; } public String getPassword() { return mPassword; } public boolean isCh_userid() { return mCh_userid; } public String getDbId() { return mDbId; } public String getDataBaseDis() { return mDataBaseDis; } public String getDomain() { return mDomain; } public UserAccountEntity getUserAccount() { return mUserAccount; } public AppJsonObject invoke() { Map map = mList.get(0); mDbId = map.get("id") + ""; mDataBaseDis = (String) map.get("systemid"); mDomain = (String) map.get("domain"); // 通过数据源id和手机号取得用户usercode进行登录，这时候不需要密码验证 try { SpObserver.setDBtoInstance("_" + mDbId); mUserAccount = userAccountService.getUserInfoByTelephone(mUserCode); if (mUserAccount != null) { mUserAccount.setApp_userCode(mUserCode); mUserAccount.setApp_Password(mPassword); mUserCode = mUserAccount.getUserCode();//转成ERP的usercode进行登陆 mPassword = mUserAccount.getPassword();//转成ERP的密码进行登陆 mCh_userid = true; } else { print2(mResponse, "该手机号码没有对应用户信息", mRedirect, mIsApp); myResult = true; return this; } } finally { SpObserver.setDBtoInstance(); } myResult = false; return this; } } }