通用后台管理系统(8)-编写登入控制器

控制器

package com.sundablog.controller.backend.login;

import java.io.IOException;

import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.authc.DisabledAccountException;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.session.Session;
import org.apache.shiro.subject.Subject;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.ResponseBody;

import com.sundablog.pojo.AdminUser;
import com.sundablog.result.BaseResult;
import com.sundablog.service.backend.system.upms.user.UserService;
import com.sundablog.utlis.CaptchaUtil;

import com.sundablog.utlis.RedisUtil;

import cn.hutool.core.util.StrUtil;
import cn.hutool.crypto.digest.DigestUtil;

/**
 * 登录控制器
 * @ClassName:  LoginController   
 * @Description:登录控制器  
 * @author: 哒哒 
 * @date:   2018年3月18日 下午12:45:41   
 *     
 * @Copyright: 2018 www.sundablog.com Inc. All rights reserved.
 */
@Controller
public class LoginController {
	
	@Autowired
	private UserService userService;
	
	/**
	 * 登入界面显示
	 * @Title: login   
	 * @Description: TODO(这里用一句话描述这个方法的作用)   
	 * @param: @return      
	 * @return: String      
	 * @throws
	 */
	@RequestMapping(value= {"/","/login"})
	public String login() {
		return "/login/login";
	}
	
	/**
	 * 验证码   
	 * @Title: code   
	 * @Description: TODO(这里用一句话描述这个方法的作用)   
	 * @param: @param request
	 * @param: @param response
	 * @param: @param session
	 * @param: @throws IOException      
	 * @return: void      
	 * @throws
	 */
	@RequestMapping("/captcha")
	public void code(HttpServletRequest request, HttpServletResponse response) throws IOException {

		// 设置响应的类型格式为图片格式
		response.setContentType("image/jpeg");
		response.setHeader("Pragma", "no-cache");
		response.setHeader("Cache-Control", "no-cache");
		response.setDateHeader("Expires", 0);
		// 自定义参数
		CaptchaUtil code = new CaptchaUtil(156, 38, 4, 4);
		request.getSession().setAttribute("validateCode", code.getCode());
		code.write(response.getOutputStream());
		System.err.println(request);
	
	}
	
	/**
	 * 登录
	 * @Title: loginClick   
	 * @Description: TODO(这里用一句话描述这个方法的作用)   
	 * @param: @param userName
	 * @param: @param password
	 * @param: @param verificationCode
	 * @param: @return
	 * @param: @throws DisabledAccountException      
	 * @return: BaseResult      
	 * @throws
	 */
	@RequestMapping("/loginClick")
	@ResponseBody
	public BaseResult loginClick(String userName, String password, String verificationCode,HttpServletRequest request)
			throws DisabledAccountException {
		String captcha = (String)request.getSession().getAttribute("validateCode");
		if (StrUtil.isEmpty(verificationCode)) {
			return BaseResult.build(209, "验证码错误");
		} else {
			if (captcha.equals(verificationCode)) {
				/**
				 * 获得当前用户对象,状态为“未认证”
				 */
				Subject subject = SecurityUtils.getSubject();
				AdminUser adminUser = userService.selectAdminUserByUserName(userName);
				if (1 == adminUser.getLocked().intValue()) {
					return BaseResult.build(202, "账户以及被锁定");
				}
				AuthenticationToken token = new UsernamePasswordToken(userName,
						DigestUtil.md5Hex(password + adminUser.getSalt()));// 创建用户名密码令牌对象
				
				try {
					subject.login(token);
					return BaseResult.ok();
				} catch (AuthenticationException e) {
					return BaseResult.build(203, "用户名密码错误");
				}
				
			} else {
				//验证码错误
				return BaseResult.build(204, "验证码错误");
			}
		}
	}
	
	
	
	
	/**
	 * 退出
	 * @Title: quit   
	 * @Description: TODO(这里用一句话描述这个方法的作用)   
	 * @param: @return      
	 * @return: BaseResult      
	 * @throws
	 */
	@RequestMapping("/quit")
	@ResponseBody
	public BaseResult quit() {
		Subject subject = SecurityUtils.getSubject();
		try {
			subject.logout();
			return BaseResult.ok();
		} catch (Exception e) {
			return BaseResult.build(201, "退出失败");
		}
	}
	
}