| | |
| | | package com.ruoyi.auth.controller;
|
| | |
|
| | | import jakarta.servlet.http.HttpServletRequest;
|
| | | import org.springframework.beans.factory.annotation.Autowired;
|
| | | import org.springframework.http.HttpHeaders;
|
| | | import org.springframework.security.oauth2.common.OAuth2AccessToken;
|
| | | import org.springframework.security.oauth2.common.OAuth2RefreshToken;
|
| | | import org.springframework.security.oauth2.provider.token.TokenStore;
|
| | | import org.springframework.web.bind.annotation.DeleteMapping;
|
| | | import org.springframework.web.bind.annotation.RequestHeader;
|
| | | import org.springframework.web.bind.annotation.RequestMapping;
|
| | | import org.springframework.web.bind.annotation.PostMapping;
|
| | | import org.springframework.web.bind.annotation.RequestBody;
|
| | | import org.springframework.web.bind.annotation.RestController;
|
| | | import com.ruoyi.auth.form.LoginBody;
|
| | | import com.ruoyi.auth.form.RegisterBody;
|
| | | import com.ruoyi.auth.service.SysLoginService;
|
| | | import com.ruoyi.common.core.domain.R;
|
| | | import com.ruoyi.common.core.utils.JwtUtils;
|
| | | import com.ruoyi.common.core.utils.StringUtils;
|
| | | import com.ruoyi.common.security.auth.AuthUtil;
|
| | | import com.ruoyi.common.security.service.TokenService;
|
| | | import com.ruoyi.common.security.utils.SecurityUtils;
|
| | | import com.ruoyi.system.api.model.LoginUser;
|
| | |
|
| | | /**
|
| | | * token 控制
|
| | |
| | | * @author ruoyi
|
| | | */
|
| | | @RestController
|
| | | @RequestMapping("/token")
|
| | | public class TokenController
|
| | | {
|
| | | @Autowired
|
| | | private TokenStore tokenStore;
|
| | | private TokenService tokenService;
|
| | |
|
| | | @DeleteMapping("/logout")
|
| | | public R<?> logout(@RequestHeader(value = HttpHeaders.AUTHORIZATION, required = false) String authHeader)
|
| | | @Autowired
|
| | | private SysLoginService sysLoginService;
|
| | |
|
| | | @PostMapping("login")
|
| | | public R<?> login(@RequestBody LoginBody form)
|
| | | {
|
| | | if (StringUtils.isEmpty(authHeader))
|
| | | // 用户登录
|
| | | LoginUser userInfo = sysLoginService.login(form.getUsername(), form.getPassword());
|
| | | // 获取登录token
|
| | | return R.ok(tokenService.createToken(userInfo));
|
| | | }
|
| | |
|
| | | @DeleteMapping("logout")
|
| | | public R<?> logout(HttpServletRequest request)
|
| | | {
|
| | | String token = SecurityUtils.getToken(request);
|
| | | if (StringUtils.isNotEmpty(token))
|
| | | {
|
| | | String username = JwtUtils.getUserName(token);
|
| | | // 删除用户缓存记录
|
| | | AuthUtil.logoutByToken(token);
|
| | | // 记录用户退出日志
|
| | | sysLoginService.logout(username);
|
| | | }
|
| | | return R.ok();
|
| | | }
|
| | |
|
| | | @PostMapping("refresh")
|
| | | public R<?> refresh(HttpServletRequest request)
|
| | | {
|
| | | LoginUser loginUser = tokenService.getLoginUser(request);
|
| | | if (StringUtils.isNotNull(loginUser))
|
| | | {
|
| | | // 刷新令牌有效期
|
| | | tokenService.refreshToken(loginUser);
|
| | | return R.ok();
|
| | | }
|
| | | return R.ok();
|
| | | }
|
| | |
|
| | | String tokenValue = authHeader.replace(OAuth2AccessToken.BEARER_TYPE, StringUtils.EMPTY).trim();
|
| | | OAuth2AccessToken accessToken = tokenStore.readAccessToken(tokenValue);
|
| | | if (accessToken == null || StringUtils.isEmpty(accessToken.getValue()))
|
| | | {
|
| | | return R.ok();
|
| | | }
|
| | |
|
| | | // 清空 access token
|
| | | tokenStore.removeAccessToken(accessToken);
|
| | |
|
| | | // 清空 refresh token
|
| | | OAuth2RefreshToken refreshToken = accessToken.getRefreshToken();
|
| | | tokenStore.removeRefreshToken(refreshToken);
|
| | | @PostMapping("register")
|
| | | public R<?> register(@RequestBody RegisterBody registerBody)
|
| | | {
|
| | | // 用户注册
|
| | | sysLoginService.register(registerBody.getUsername(), registerBody.getPassword());
|
| | | return R.ok();
|
| | | }
|
| | | }
|