UserAccountServiceImpl.java 17.4 KB
Newer Older
eddie.woo's avatar
eddie.woo committed
1 2 3 4 5 6 7 8 9 10
package pwc.taxtech.atms.service.impl;

import org.apache.commons.lang3.BooleanUtils;
import org.apache.ibatis.session.RowBounds;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;
import org.springframework.util.Assert;
import org.springframework.util.StringUtils;
11
import pwc.taxtech.atms.common.*;
eddie.woo's avatar
eddie.woo committed
12 13 14
import pwc.taxtech.atms.common.message.UserMessage;
import pwc.taxtech.atms.dao.UserHistoricalPasswordMapper;
import pwc.taxtech.atms.dao.UserMapper;
15
import pwc.taxtech.atms.data.RoleData;
eddie.woo's avatar
eddie.woo committed
16 17 18 19 20 21 22
import pwc.taxtech.atms.dto.ForgetPasswordDto;
import pwc.taxtech.atms.dto.LoginOutputDto;
import pwc.taxtech.atms.dto.MailMto;
import pwc.taxtech.atms.dto.OperationResultDto;
import pwc.taxtech.atms.dto.UpdateLogParams;
import pwc.taxtech.atms.dto.user.UserAndUserRoleSaveDto;
import pwc.taxtech.atms.dto.user.UserPasswordDto;
23 24 25 26 27 28 29
import pwc.taxtech.atms.entity.Role;
import pwc.taxtech.atms.entity.User;
import pwc.taxtech.atms.entity.UserHistoricalPassword;
import pwc.taxtech.atms.entity.UserHistoricalPasswordExample;
import pwc.taxtech.atms.entity.UserHistoricalPasswordExample.Criteria;
import pwc.taxtech.atms.entity.UserOrganization;
import pwc.taxtech.atms.entity.UserRole;
eddie.woo's avatar
eddie.woo committed
30
import pwc.taxtech.atms.security.AtmsPasswordEncoder;
31 32 33 34 35

import java.util.ArrayList;
import java.util.Date;
import java.util.List;
import java.util.Objects;
eddie.woo's avatar
eddie.woo committed
36 37

@Service
38
public class UserAccountServiceImpl extends AbstractService {
eddie.woo's avatar
eddie.woo committed
39 40 41 42 43 44 45 46 47 48 49 50
    // TODO Move it to constants file
    private static final String MAIL_TEMPLATE_PATH = "mailTemplate/";

    private static final Logger logger = LoggerFactory.getLogger(UserAccountServiceImpl.class);

    @Autowired
    private UserMapper userMapper;
    @Autowired
    private StringHelper stringHelper;
    @Autowired
    private UserHistoricalPasswordMapper userHistoricalPasswordMapper;
    @Autowired
51
    private UserServiceImpl userService;
eddie.woo's avatar
eddie.woo committed
52
    @Autowired
53
    private CommonServiceImpl commonService;
eddie.woo's avatar
eddie.woo committed
54 55 56 57 58 59 60

    @Autowired
    private AtmsPasswordEncoder atmsPasswordEncoder;
    @Autowired
    private AuthUserHelper authUserHelper;
    @Autowired
    private AtmsApiSettings atmsApiSettings;
61 62
    @Autowired
    private RoleData roleData;
eddie.woo's avatar
eddie.woo committed
63 64 65

    public OperationResultDto<LoginOutputDto> changeExternalUserPassword(UserPasswordDto userPasswordDto) {
        logger.debug("修改密码 Start");
66
        final String userName = authUserHelper.getCurrentAuditor().get();
eddie.woo's avatar
eddie.woo committed
67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102

        // find exist user
        User tempUser = userMapper.selectByUserNameIgnoreCase(userName);
        // verify old password

        OperationResultDto<LoginOutputDto> loginResult = userService.activeCheck(tempUser);
        if (loginResult.getResult() != null && loginResult.getResult()) {
            logger.debug("result is true after activeCheck");
            loginResult = userService.externalUserLogin(tempUser, userName, userPasswordDto.getOldPassword());
        } else {
            logger.debug("result is false after activeCheck");
        }

        if (loginResult.getResult() != null && loginResult.getResult()) {
            logger.debug("result is true after externalUserLogin");
            if (tempUser.getAttemptTimes() != null && tempUser.getAttemptTimes() != 0) {
                logger.debug("call method resetAttemptTimes");
                resetAttemptTimes(tempUser);
            }
        } else {
            logger.debug("result is false after externalUserLogin");
            if (loginResult.getData() != null
                    && CheckState.WrongPassword.value().equals(loginResult.getData().getCheckState())) {
                logger.debug("ready to call dealWithWrongPassword");
                dealWithWrongPassword(tempUser);
            }
            if (loginResult.getData() != null && loginResult.getData().getCheckState() != null) {
                String msg = CheckState.int2str(loginResult.getData().getCheckState());
                logger.debug("set setResultMsg to:{}", msg);
                loginResult.setResultMsg(msg);
                return loginResult;
            }
        }
        String newEncodedPassword = atmsPasswordEncoder.encode(userPasswordDto.getNewPassword());

        // check history
103
        if (checkHistoricalPassword(tempUser.getId(), newEncodedPassword)) {
eddie.woo's avatar
eddie.woo committed
104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125
            logger.debug("历史密码验证失败:密码已被使用");
            loginResult.setResult(false);
            loginResult.setResultMsg(UserMessage.UsedPassword);
        } else {
            logger.debug("历史密码验证通过");
        }
        if (loginResult.getResult() != null && loginResult.getResult()) {
            // set new password
            setNewPassword(tempUser, newEncodedPassword);
            logger.debug("设置新密码成功");
        } else {
            logger.debug("loginResult.result is false");
        }
        return loginResult;
    }

    private void setNewPassword(User tempUser, String newEncodedPassword) {
        // 因为C#的创建UserHistoricalPassword的代码被注释了,所以跳过创建UserHistoricalPassword
        tempUser.setPassword(newEncodedPassword);
        User userTarget = new User();
        userTarget.setPassword(tempUser.getPassword());
        userTarget.setUpdateTime(new Date());
126
        userTarget.setId(tempUser.getId());
eddie.woo's avatar
eddie.woo committed
127 128 129 130 131 132 133 134 135
        int resultCount = userMapper.updateByPrimaryKeySelective(userTarget);
        Assert.state(resultCount > 0, "Zero update count");
    }

    private boolean checkHistoricalPassword(String id, String newEncodedPassword) {
        UserHistoricalPasswordExample example = new UserHistoricalPasswordExample();
        example.setOrderByClause("UpdateTime desc");
        Criteria criteria = example.createCriteria();
        // criteria.andPasswordEqualTo(newEncodedPassword);
136
        criteria.andIdEqualTo(id);
eddie.woo's avatar
eddie.woo committed
137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152
        RowBounds rowBounds = new RowBounds(0, CommonConstants.MaxSamePasswordNumber);
        List<UserHistoricalPassword> list = userHistoricalPasswordMapper.selectByExampleWithRowbounds(example,
                rowBounds);
        boolean containsOldPassword = false;
        for (UserHistoricalPassword item : list) {
            if (item.getPassword() != null && item.getPassword().equals(newEncodedPassword)) {
                containsOldPassword = true;
                break;
            }
        }
        return containsOldPassword;
    }

    public void resetAttemptTimes(User tempUser) {
        User userTarget = new User();
        userTarget.setAttemptTimes(0);
153
        userTarget.setId(tempUser.getId());
eddie.woo's avatar
eddie.woo committed
154 155 156 157 158
        userMapper.updateByPrimaryKeySelective(userTarget);
    }

    public void dealWithWrongPassword(User tempUser) {
        User userTarget = new User();
159
        userTarget.setId(tempUser.getId());
eddie.woo's avatar
eddie.woo committed
160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253

        tempUser.setAttemptTimes(tempUser.getAttemptTimes() == null ? 0 : tempUser.getAttemptTimes() + 1);
        userTarget.setAttemptTimes(tempUser.getAttemptTimes());

        logger.debug("print attemptimes [{}]", tempUser.getAttemptTimes());

        if (tempUser.getAttemptTimes() >= CommonConstants.MaxAttemptTimes) {
            logger.warn("Lock user [{}] due to attemptimes is [{}]", tempUser.getUserName(),
                    tempUser.getAttemptTimes());

            tempUser.setStatus(UserStatus.Locked.value());
            userTarget.setStatus(tempUser.getStatus());

            tempUser.setLockedTime(new Date());
            userTarget.setLockedTime(tempUser.getLockedTime());
        } else {
            logger.debug("update user [{}] attemptTimes to [{}]", tempUser.getUserName(), tempUser.getAttemptTimes());
        }
        userMapper.updateByPrimaryKeySelective(userTarget);

    }

    public OperationResultDto<Object> forgetPassword(final String mail) {
        OperationResultDto<ForgetPasswordDto> result = forgetPasswordForUser(mail);
        if (result == null || result.getResult() == null || !result.getResult()) {
            logger.info("the result is false by calling forgetPasswordForUser");
            // 如果失败,直接返回,跳过发邮件
            return new OperationResultDto<>(true);
        }
        logger.info("the result is true by calling forgetPasswordForUser");
        ForgetPasswordDto forgetPasswordDto = result.getData();
        Assert.notNull(forgetPasswordDto, "Null data");

        // 发邮件
        String path = MAIL_TEMPLATE_PATH + "WebAdminResetPasswordLetter.html";
        String text = CommonUtils.readClasspathFileToString(path);

        text = text.replaceAll("\\{Password\\}", forgetPasswordDto.getNewPassword());
        text = text.replaceAll("\\{\\[Env\\]link\\}", atmsApiSettings.getWebUrl());
        text = text.replaceAll("\\{UserName\\}", forgetPasswordDto.getUserName());

        String subject = readHtmlTitle(text);

        MailMto mailmto = new MailMto();
        mailmto.setContent(text);
        mailmto.setTo(mail);
        mailmto.setSubject(subject);
        commonService.sendMail(mailmto);

        return new OperationResultDto<>(true);
    }

    public String readHtmlTitle(String text) {
        try {
            String beginTag = "<title>";
            String endTag = "</title>";
            int beginIndex = text.indexOf(beginTag);
            int endIndex = text.indexOf(endTag);
            // String subject = text.substring(beginTag.length() + beginIndex, endIndex -
            // beginIndex - endTag.length());
            String subject = text.substring(beginTag.length() + beginIndex, endIndex);
            subject = subject.trim();
            return subject;
        } catch (Exception e) {
            logger.error("Cannot get subject:" + e, e);
            return "NA";
        }
    }

    private OperationResultDto<ForgetPasswordDto> forgetPasswordForUser(String mail) {
        if (!StringUtils.hasText(mail) || !mail.contains("@")) {
            return new OperationResultDto<>(false);
        }
        User tempUser = userMapper.selectByUserNameIgnoreCase(mail);
        if (tempUser == null) {
            return new OperationResultDto<>(false);
        }
        final String newPassword = stringHelper.generateRandomPassword();
        String encodedPassword = atmsPasswordEncoder.encode(newPassword);
        tempUser.setPasswordUpdateTime(new Date());
        tempUser.setStatus(UserStatus.InActive.value());
        tempUser.setPassword(encodedPassword);
        userMapper.updateByPrimaryKey(tempUser);

        ForgetPasswordDto forgetPasswordDto = new ForgetPasswordDto();
        forgetPasswordDto.setNewPassword(newPassword);
        // 因为C#代码没有设置changeResult, 所以这里不设置changeResult
        forgetPasswordDto.setUserName(tempUser.getUserName());

        return new OperationResultDto<>(true, null, forgetPasswordDto);
    }

    public OperationResultDto<User> addNewUser(UserAndUserRoleSaveDto userAndUserRoleSaveDto) {
        OperationResultDto<User> user = addUser(userAndUserRoleSaveDto);
eddie.woo's avatar
eddie.woo committed
254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271
        //todo send mail
//        if (BooleanUtils.isTrue(user.getResult())) {
//            MailMto mailMto = new MailMto();
//            String path = MAIL_TEMPLATE_PATH + "WebAdminWelcomeLetter.html";
//            String content = CommonUtils.readClasspathFileToString(path);
//            content = content.replaceAll("\\{Password\\}", user.getResultMsg());
//            content = content.replaceAll("\\{\\[Env\\]link\\}", atmsApiSettings.getWebUrl());
//            content = content.replaceAll("\\{UserName\\}", user.getData().getUserName());
//            mailMto.setContent(content);
//            // Get Subject Avoid Multi-language
//            String beginTag = "<title>";
//            int beginIndex = content.indexOf(beginTag);
//            int endIndex = content.indexOf("</title>");
//            String subject = content.substring(beginIndex + beginTag.length(), endIndex);
//            mailMto.setSubject(subject);
//            mailMto.setTo(user.getData().getEmail());
//            commonService.sendMail(mailMto);
//        }
eddie.woo's avatar
eddie.woo committed
272 273 274 275
        return user;
    }

    public OperationResultDto<User> addUser(UserAndUserRoleSaveDto userAndUserRoleSaveDto) {
276
        String userName = authUserHelper.getCurrentAuditor().get();
eddie.woo's avatar
eddie.woo committed
277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298
        OperationResultDto<User> operationResultDto = new OperationResultDto<>();
        OperationResultDto<User> result = userService.checkUserExist(userAndUserRoleSaveDto.getUserName(),
                CommonConstants.EMPTY_UUID);
        if (result != null && BooleanUtils.isFalse(result.getResult())) {
            return result;
        }

        result = userService.checkEmailExist(userAndUserRoleSaveDto.getEmail(), CommonConstants.EMPTY_UUID);
        if (result != null && BooleanUtils.isFalse(result.getResult())) {
            return result;
        }
        if (BooleanUtils.isTrue(userAndUserRoleSaveDto.getIsAdmin())) {
            User operateUser = userMapper.selectByUserNameIgnoreCase(userName);
            // cs代码逻辑微调, 如果正在执行操作的用户不是admin(isAdmin:0)或者没有设置admin权限(isAdmin:null), 则不执行操作
            if (operateUser != null && !BooleanUtils.isTrue(operateUser.getIsAdmin())) {
                operationResultDto.setResult(false);
                operationResultDto.setResultMsg(UserMessage.HasNoPermission);
            }
        }
        User user = CommonUtils.copyProperties(userAndUserRoleSaveDto, new User());
        // 根据cs代码的mapper方法初始化user的isAdmin值
        user.setIsAdmin(BooleanUtils.isTrue(userAndUserRoleSaveDto.getIsAdmin()));
299
        user.setId(CommonUtils.getUUID());
eddie.woo's avatar
eddie.woo committed
300 301 302 303 304
        user.setStatus(UserStatus.Active.value());
        // loginType:{1:AD认证,2:用户名密码登录验证,3:外部用户登录,使用Email和密码登录,因为目前没有选择登录类型,所以直接设置为3,全部使用密码验证,以后根据需求变更}
        user.setLoginType(UserLoginType.ExternalUser);
        List<UserRole> userRoleList = new ArrayList<>();
        // new password
eddie.woo's avatar
eddie.woo committed
305 306
//        String newPwd = stringHelper.generateRandomPassword();
        String newPwd = "12345678";//todo 没有发邮件,先默认这个
eddie.woo's avatar
eddie.woo committed
307 308 309 310 311 312 313 314
        user.setPassword(atmsPasswordEncoder.encode(newPwd));
        user.setCreateTime(
                userAndUserRoleSaveDto.getCreateTime() == null ? new Date() : userAndUserRoleSaveDto.getCreateTime());
        user.setUpdateTime(
                userAndUserRoleSaveDto.getUpdateTime() == null ? new Date() : userAndUserRoleSaveDto.getUpdateTime());
        user.setAttemptTimes(
                userAndUserRoleSaveDto.getAttemptTimes() == null ? 0 : userAndUserRoleSaveDto.getAttemptTimes());
        user.setIsSuperAdmin(false);
315
        logger.debug("Start to insert new user [ {} ]", user.getId());
eddie.woo's avatar
eddie.woo committed
316
        userMapper.insert(user);
317
        List<String> arrRoles = userAndUserRoleSaveDto.getRoleIds();
318
//        List<Role> roleQuery = roleMapper.selectByExample(new RoleExample());
gary's avatar
gary committed
319
        List<Role> roleQuery = roleData.selectByServiceTypeId("All");
eddie.woo's avatar
eddie.woo committed
320 321 322
        if (arrRoles != null && !arrRoles.isEmpty()) {
            for (String role : arrRoles) {
                UserRole userRole = new UserRole();
323 324 325 326 327
                userRole.setId(CommonUtils.getUUID());
                userRole.setUserId(user.getId());
                userRole.setRoleId(role);
                userRole.setServiceTypeId(roleQuery.stream().filter(p -> Objects.equals(p.getId(), role)).findFirst()
                        .orElse(new Role()).getServiceTypeId());
eddie.woo's avatar
eddie.woo committed
328
                userRoleList.add(userRole);
329
                logger.debug("Start to insert user role [ {} ]", userRole.getId());
eddie.woo's avatar
eddie.woo committed
330
                userRoleMapper.insertSelective(userRole);
eddie.woo's avatar
eddie.woo committed
331 332 333 334
            }
        }
        // 默认添加机构可访问权限
        UserOrganization userOrganization = new UserOrganization();
335
        userOrganization.setUserId(user.getId());
eddie.woo's avatar
eddie.woo committed
336
        userOrganization.setHasOriginalRole(CommonConstants.HasOriginalRole);
337 338
        userOrganization.setOrganizationId(user.getOrganizationId());
        userOrganization.setId(CommonUtils.getUUID());
eddie.woo's avatar
eddie.woo committed
339
        userOrganization.setIsAccessible(CommonConstants.IsAccessible);
340
        logger.debug("Start to insert user organization [ {} ]", userOrganization.getId());
eddie.woo's avatar
eddie.woo committed
341 342 343 344 345
        userOrganizationMapper.insert(userOrganization);
        operationLogService.addOrDeleteDataAddLog(generateUpdateLogParams(OperationModule.User.value(),
                user.getUserName(), user.getUserName(), OperationAction.AddNewUser.value()));
        List<UpdateLogParams> userRoleLogs = new ArrayList<>();
        for (UserRole userRole : userRoleList) {
346
            Role role = roleQuery.stream().filter(sa -> Objects.equals(sa.getId(), userRole.getRoleId())).findFirst()
eddie.woo's avatar
eddie.woo committed
347 348 349 350 351 352 353 354 355 356 357 358 359
                    .orElse(null);
            userRoleLogs.add(generateUpdateLogParams(OperationModule.UserRole.value(),
                    role == null ? "" : role.getName(), user.getUserName(), OperationAction.AddNewPermission.value()));

        }
        operationLogService.addOrDeleteDataAddLog(userRoleLogs);
        operationResultDto.setResult(true);
        operationResultDto.setData(user);
        operationResultDto.setResultMsg(newPwd);
        return operationResultDto;
    }

    private UpdateLogParams generateUpdateLogParams(Integer module, String operationContent, String operateObject,
360
                                                    Integer action) {
eddie.woo's avatar
eddie.woo committed
361 362 363 364 365 366 367 368 369 370
        UpdateLogParams updateLogParams = new UpdateLogParams();
        updateLogParams.setOperationModule(module);
        updateLogParams.setOperationContent(operationContent);
        updateLogParams.setOperationObject(operateObject);
        updateLogParams.setOperationAction(action);
        updateLogParams.setOperateLogType(OperateLogType.OperationLogUser.value());
        return updateLogParams;
    }

}