package com.wgcloud.controller;
|
|
import com.wgcloud.config.CommonConfig;
|
import com.wgcloud.entity.AccountInfo;
|
import com.wgcloud.service.AccountInfoService;
|
import com.wgcloud.service.LogInfoService;
|
import com.wgcloud.util.IpUtil;
|
import com.wgcloud.util.MD5Utils;
|
import com.wgcloud.util.ThreadPoolUtil;
|
import com.wgcloud.util.msg.WarnMailUtil;
|
import com.wgcloud.util.staticvar.StaticKeys;
|
import org.apache.commons.lang3.StringUtils;
|
import org.slf4j.Logger;
|
import org.slf4j.LoggerFactory;
|
import org.springframework.stereotype.Controller;
|
import org.springframework.ui.Model;
|
import org.springframework.web.bind.annotation.RequestMapping;
|
|
import javax.annotation.Resource;
|
import javax.servlet.http.HttpServletRequest;
|
import javax.servlet.http.HttpSession;
|
import java.util.HashMap;
|
import java.util.List;
|
import java.util.Map;
|
|
/**
|
* @version v3.3
|
* @ClassName:LoginController.java
|
* @author: http://www.wgstart.com
|
* @date: 2021年1月16日
|
* @Description: 登陆处理
|
* @Copyright: 2019-2021 wgcloud. All rights reserved.
|
*/
|
@Controller
|
@RequestMapping(value = "/login")
|
public class LoginController {
|
|
private static final Logger logger = LoggerFactory.getLogger(LoginController.class);
|
|
|
//禁止登录标识
|
private static final String USER_BLOCK = "block";
|
|
@Resource
|
private LogInfoService logInfoService;
|
@Resource
|
private AccountInfoService accountInfoService;
|
@Resource
|
private CommonConfig commonConfig;
|
|
private void testThread() {
|
Runnable runnable = () -> {
|
logger.info("LoginCotroller----------testThread");
|
};
|
ThreadPoolUtil.executor.execute(runnable);
|
}
|
|
|
/**
|
* 转向到登录页面
|
*
|
* @param model
|
* @param request
|
* @return
|
*/
|
@RequestMapping("toLogin")
|
public String toLogin(Model model, HttpServletRequest request) {
|
return "login/login";
|
}
|
|
/**
|
* 登出系统
|
*
|
* @param model
|
* @param request
|
* @return
|
*/
|
@RequestMapping("loginOut")
|
public String loginOut(Model model, HttpServletRequest request) {
|
HttpSession session = request.getSession();
|
session.invalidate();
|
return "redirect:/login/toLogin";
|
}
|
|
/**
|
* 管理员登录验证
|
*
|
* @param model
|
* @param request
|
* @return
|
*/
|
@RequestMapping(value = "login")
|
public String login(Model model, HttpServletRequest request) {
|
String userName = request.getParameter("userName");
|
String userBlock = StaticKeys.LOGIN_BLOCK_MAP.get(userName);
|
if (USER_BLOCK.equals(userBlock)) {
|
model.addAttribute("error", "请10分钟后登录该账号或者联系管理员");
|
return "login/login";
|
}
|
|
String passwd = request.getParameter("md5pwd");
|
HttpSession session = request.getSession();
|
try {
|
if (!StringUtils.isEmpty(userName) && !StringUtils.isEmpty(passwd)) {
|
passwd = passwd.toLowerCase();
|
AccountInfo accountInfo = new AccountInfo();
|
//管理员账号登陆 begin
|
if (MD5Utils.GetMD5Code(commonConfig.getAccountPwd()).equals(passwd) && commonConfig.getAccount().equals(userName)) {
|
accountInfo.setAccount(userName);
|
accountInfo.setId(userName);
|
accountInfo.setRole(StaticKeys.ROLE_ADMIN);
|
request.getSession().setAttribute(StaticKeys.LOGIN_KEY, accountInfo);
|
return "redirect:/dash/main";
|
}
|
//管理员账号登陆 end
|
|
//只读账号登陆，专业版功能 begin
|
if (MD5Utils.GetMD5Code(commonConfig.getGuestAccountPwd()).equals(passwd) && commonConfig.getGuestAccount().equals(userName)) {
|
accountInfo.setAccount(userName);
|
accountInfo.setId(userName);
|
accountInfo.setRole(StaticKeys.ROLE_GUEST);
|
request.getSession().setAttribute(StaticKeys.LOGIN_KEY, accountInfo);
|
return "redirect:/dash/main";
|
}
|
//只读账号登陆 end
|
|
//普通账号登陆，专业版功能 begin
|
if (StaticKeys.TRUE_VAL.equals(commonConfig.getUserInfoManage())) {
|
Map<String, Object> params = new HashMap<String, Object>();
|
params.put("account", userName);
|
params.put("passwd", passwd);
|
List<AccountInfo> userList = accountInfoService.selectAllByParams(params);
|
if (userList.size() > 0) {
|
accountInfo.setAccount(userName);
|
accountInfo.setId(userName);
|
accountInfo.setRole(StaticKeys.ROLE_USER);
|
request.getSession().setAttribute(StaticKeys.LOGIN_KEY, accountInfo);
|
return "redirect:/dash/main";
|
}
|
}
|
//普通账号登陆 end
|
}
|
} catch (Exception e) {
|
logger.error("登录异常", e);
|
}
|
model.addAttribute("error", "账号或者密码错误");
|
|
//处理连续5次输入错误密码，10分钟内禁止登录
|
loginErrorHandle(request, model);
|
|
return "login/login";
|
}
|
|
/**
|
* 处理连续5次输入错误密码，10分钟内禁止登录
|
*
|
* @param request
|
*/
|
private void loginErrorHandle(HttpServletRequest request, Model model) {
|
String requestIp = IpUtil.getIpAddr(request);
|
String userName = request.getParameter("userName");
|
Integer errorCount = StaticKeys.LOGIN_ERROR_MAP.get(userName);
|
if (errorCount != null) {
|
StaticKeys.LOGIN_ERROR_MAP.put(userName, errorCount + 1);
|
} else {
|
errorCount = 1;
|
StaticKeys.LOGIN_ERROR_MAP.put(userName, errorCount);
|
}
|
if (errorCount >= 2) {
|
//输入密码3次错误提示
|
model.addAttribute("error", "账号或密码错误，若连续5次输入错误，需等10分钟后才能再登录该账号");
|
}
|
if (errorCount >= 5) {
|
//输入密码6次错误提示和处理，10分钟内禁止登录
|
StaticKeys.LOGIN_BLOCK_MAP.put(userName, USER_BLOCK);
|
String errMsg = userName + "密码已连续5次输入错误，10分钟内禁止登录，登录IP：" + requestIp;
|
//发送告警
|
Runnable runnable = () -> {
|
try {
|
WarnMailUtil.sendUtil(errMsg, errMsg, userName, userName + "_longError", true);
|
} catch (Exception e) {
|
e.printStackTrace();
|
}
|
};
|
ThreadPoolUtil.executor.execute(runnable);
|
|
model.addAttribute("error", "密码已连续5次输入错误，请10分钟后再登录该账号");
|
logger.error(errMsg);
|
}
|
|
}
|
|
}
|
