234 lines
7.9 KiB
C#
234 lines
7.9 KiB
C#
/*******************************************************************************
|
||
* Copyright © 2020 HT.Cloud.Framework 版权所有
|
||
* Author: HT.Cloud
|
||
* Description: WaterCloud快速开发平台
|
||
* Website：
|
||
*********************************************************************************/
|
||
|
||
using Jaina;
|
||
using Microsoft.AspNetCore.Mvc;
|
||
using SqlSugar;
|
||
using System;
|
||
using System.Linq;
|
||
using System.Threading.Tasks;
|
||
using HT.Cloud.Code;
|
||
using HT.Cloud.Domain.SystemOrganize;
|
||
using HT.Cloud.Domain.SystemSecurity;
|
||
using HT.Cloud.Service.Event;
|
||
using HT.Cloud.Service.SystemOrganize;
|
||
using HT.Cloud.Service.SystemSecurity;
|
||
|
||
namespace HT.Cloud.Web.Controllers
|
||
{
|
||
public class LoginController : Controller
|
||
{
|
||
public UserService _userService { get; set; }
|
||
public LogService _logService { get; set; }
|
||
public SystemSetService _setService { get; set; }
|
||
public RoleAuthorizeService _roleAuthServuce { get; set; }
|
||
public ISqlSugarClient _context { get; set; }
|
||
|
||
[HttpGet]
|
||
public virtual async Task<ActionResult> Index()
|
||
{
|
||
//登录页获取logo和项目名称
|
||
try
|
||
{
|
||
var systemset = await _setService.GetFormByHost("");
|
||
if (GlobalContext.SystemConfig.Demo)
|
||
{
|
||
ViewBag.UserName = systemset.F_AdminAccount;
|
||
ViewBag.Password = systemset.F_AdminPassword;
|
||
}
|
||
ViewBag.SqlMode = GlobalContext.SystemConfig.SqlMode;
|
||
ViewBag.ProjectName = systemset.F_ProjectName;
|
||
ViewBag.LogoIcon = ".." + systemset.F_Logo;
|
||
return View();
|
||
}
|
||
catch (Exception)
|
||
{
|
||
ViewBag.ProjectName = "恒拓信息系统";
|
||
ViewBag.LogoIcon = "../icon/hengtuo.ico";
|
||
return View();
|
||
}
|
||
}
|
||
|
||
[HttpGet]
|
||
[HandlerAjaxOnly]
|
||
public async Task<ActionResult> GetListJsonByLogin(string keyword)
|
||
{
|
||
var data = await _setService.GetList(keyword);
|
||
data = data.OrderBy(a => a.F_DbNumber).ToList();
|
||
foreach (var item in data)
|
||
{
|
||
item.F_AdminAccount = null;
|
||
item.F_AdminPassword = null;
|
||
item.F_DBProvider = null;
|
||
item.F_DbString = null;
|
||
item.F_PrincipalMan = null;
|
||
item.F_MobilePhone = null;
|
||
item.F_CompanyName = null;
|
||
item.F_LogoCode = null;
|
||
}
|
||
return Content(data.ToJson());
|
||
}
|
||
|
||
/// <summary>
|
||
/// 验证码获取（此接口已弃用）
|
||
/// </summary>
|
||
/// <returns></returns>
|
||
[HttpGet]
|
||
public ActionResult GetAuthCode()
|
||
{
|
||
return File(new VerifyCodeHelper().GetVerifyCode(), @"image/Gif");
|
||
}
|
||
|
||
[HttpGet]
|
||
public async Task<ActionResult> OutLogin()
|
||
{
|
||
var logEntity = new LogEntity
|
||
{
|
||
F_ModuleName = "系统登录",
|
||
F_Type = DbLogType.Exit.ToString(),
|
||
F_Account = _setService.currentuser.UserCode,
|
||
F_NickName = _setService.currentuser.UserName,
|
||
F_Result = true,
|
||
F_Description = "安全退出系统",
|
||
};
|
||
await GlobalContext.GetService<IEventPublisher>().PublishAsync(new BaseEventSource("Log:create", logEntity, _userService.currentuser));
|
||
await OperatorProvider.Provider.EmptyCurrent("pc_");
|
||
return Content(new AlwaysResult { state = ResultType.success.ToString() }.ToJson());
|
||
}
|
||
|
||
/// <summary>
|
||
/// 验证登录状态请求接口
|
||
/// </summary>
|
||
/// <returns></returns>
|
||
[HttpPost]
|
||
[HandlerAjaxOnly]
|
||
[IgnoreAntiforgeryToken]
|
||
public async Task<ActionResult> CheckLoginState()
|
||
{
|
||
try
|
||
{
|
||
if (_setService.currentuser.UserId == null)
|
||
{
|
||
return Content(new AlwaysResult { state = ResultType.error.ToString() }.ToJson());
|
||
}
|
||
//登录检测
|
||
if ((await OperatorProvider.Provider.IsOnLine("pc_")).stateCode <= 0)
|
||
{
|
||
await OperatorProvider.Provider.EmptyCurrent("pc_");
|
||
return Content(new AlwaysResult { state = ResultType.error.ToString() }.ToJson());
|
||
}
|
||
else
|
||
{
|
||
//验证回退路由是否有权限，没有就删除
|
||
await CheckReturnUrl(_setService.currentuser.UserId);
|
||
return Content(new AlwaysResult { state = ResultType.success.ToString() }.ToJson());
|
||
}
|
||
}
|
||
catch (Exception)
|
||
{
|
||
return Content(new AlwaysResult { state = ResultType.error.ToString() }.ToJson());
|
||
}
|
||
}
|
||
|
||
/// <summary>
|
||
/// 登录验证
|
||
/// </summary>
|
||
/// <param name="username">用户</param>
|
||
/// <param name="password">密码</param>
|
||
/// <param name="localurl">域名</param>
|
||
/// <returns></returns>
|
||
[HttpPost]
|
||
[HandlerAjaxOnly]
|
||
[IgnoreAntiforgeryToken]
|
||
public async Task<ActionResult> CheckLogin(string username, string password, string localurl)
|
||
{
|
||
//根据域名判断租户
|
||
LogEntity logEntity = new LogEntity();
|
||
logEntity.F_ModuleName = "系统登录";
|
||
logEntity.F_Type = DbLogType.Login.ToString();
|
||
if (GlobalContext.SystemConfig.SqlMode == Define.SQL_MORE)
|
||
{
|
||
localurl = "";
|
||
}
|
||
try
|
||
{
|
||
UserEntity userEntity = await _userService.CheckLogin(username, password, localurl);
|
||
OperatorModel operatorModel = new OperatorModel();
|
||
operatorModel.UserId = userEntity.F_Id;
|
||
operatorModel.UserCode = userEntity.F_Account;
|
||
operatorModel.UserName = userEntity.F_RealName;
|
||
operatorModel.CompanyId = userEntity.F_CompanyId;
|
||
operatorModel.OrganizeId = userEntity.F_OrganizeId;
|
||
operatorModel.RoleId = userEntity.F_RoleId;
|
||
operatorModel.LoginIPAddress = WebHelper.Ip;
|
||
if (GlobalContext.SystemConfig.LocalLAN != false)
|
||
{
|
||
operatorModel.LoginIPAddressName = "本地局域网";
|
||
}
|
||
else
|
||
{
|
||
operatorModel.LoginIPAddressName = WebHelper.GetIpLocation(operatorModel.LoginIPAddress);
|
||
}
|
||
operatorModel.LoginTime = DateTime.Now;
|
||
operatorModel.DdUserId = userEntity.F_DingTalkUserId;
|
||
operatorModel.WxOpenId = userEntity.F_WxOpenId;
|
||
//各租户的管理员也是当前数据库的全部权限
|
||
operatorModel.IsSuperAdmin = userEntity.F_IsAdmin.Value;
|
||
operatorModel.IsAdmin = userEntity.F_IsAdmin.Value;
|
||
operatorModel.IsBoss = userEntity.F_IsBoss.Value;
|
||
operatorModel.IsSenior = userEntity.F_IsSenior.Value;
|
||
SystemSetEntity setEntity = await _setService.GetForm(userEntity.F_CompanyId);
|
||
operatorModel.DbNumber = setEntity.F_DbNumber;
|
||
if (operatorModel.IsAdmin && operatorModel.DbNumber == GlobalContext.SystemConfig.MainDbNumber)
|
||
{
|
||
operatorModel.IsSuperAdmin = true;
|
||
}
|
||
else
|
||
{
|
||
operatorModel.IsSuperAdmin = false;
|
||
}
|
||
//缓存保存用户信息
|
||
await OperatorProvider.Provider.AddLoginUser(operatorModel, "", "pc_");
|
||
//防重复token
|
||
string token = Utils.GuId();
|
||
HttpContext.Response.Cookies.Append("pc_" + GlobalContext.SystemConfig.TokenName, token);
|
||
await CacheHelper.SetAsync("pc_" + GlobalContext.SystemConfig.TokenName + "_" + operatorModel.UserId + "_" + operatorModel.LoginTime, token, GlobalContext.SystemConfig.LoginExpire, true);
|
||
logEntity.F_Account = userEntity.F_Account;
|
||
logEntity.F_NickName = userEntity.F_RealName;
|
||
logEntity.F_Result = true;
|
||
logEntity.F_Description = "登录成功";
|
||
await GlobalContext.GetService<IEventPublisher>().PublishAsync(new BaseEventSource("Log:create", logEntity, operatorModel));
|
||
//验证回退路由是否有权限，没有就删除
|
||
await CheckReturnUrl(operatorModel.UserId);
|
||
return Content(new AlwaysResult { state = ResultType.success.ToString(), message = "登录成功。" }.ToJson());
|
||
}
|
||
catch (Exception ex)
|
||
{
|
||
logEntity.F_Account = username;
|
||
logEntity.F_NickName = username;
|
||
logEntity.F_Result = false;
|
||
logEntity.F_Description = "登录失败，" + ex.Message;
|
||
await GlobalContext.GetService<IEventPublisher>().PublishAsync(new BaseEventSource("Log:create", logEntity));
|
||
return Content(new AlwaysResult { state = ResultType.error.ToString(), message = ex.Message }.ToJson());
|
||
}
|
||
}
|
||
|
||
private async Task CheckReturnUrl(string userId)
|
||
{
|
||
var realurl = WebHelper.GetCookie("wc_realreturnurl");
|
||
var url = WebHelper.GetCookie("wc_returnurl");
|
||
if (!string.IsNullOrEmpty(realurl) && !await _roleAuthServuce.CheckReturnUrl(userId, realurl))
|
||
{
|
||
WebHelper.RemoveCookie("wc_realreturnurl");
|
||
}
|
||
if (!string.IsNullOrEmpty(url) && !await _roleAuthServuce.CheckReturnUrl(userId, url))
|
||
{
|
||
WebHelper.RemoveCookie("wc_returnurl");
|
||
}
|
||
}
|
||
}
|
||
} |