mirror of
https://github.com/ZSCNetSupportDept/WechatTicketSystem.git
synced 2025-10-29 08:05:04 +08:00
92 lines
3.2 KiB
Java
92 lines
3.2 KiB
Java
package love.sola.netsupport.api;
|
|
|
|
import com.google.gson.Gson;
|
|
import love.sola.netsupport.enums.Access;
|
|
import love.sola.netsupport.enums.Attribute;
|
|
import love.sola.netsupport.pojo.Operator;
|
|
import love.sola.netsupport.pojo.User;
|
|
import love.sola.netsupport.sql.SQLCore;
|
|
import love.sola.netsupport.sql.TableOperator;
|
|
import love.sola.netsupport.sql.TableUser;
|
|
import love.sola.netsupport.util.Crypto;
|
|
import love.sola.netsupport.util.ParseUtil;
|
|
import love.sola.netsupport.util.RSAUtil;
|
|
import love.sola.netsupport.wechat.Command;
|
|
import love.sola.netsupport.wechat.WechatSession;
|
|
import me.chanjar.weixin.common.session.WxSession;
|
|
|
|
import javax.servlet.ServletException;
|
|
import javax.servlet.annotation.WebServlet;
|
|
import javax.servlet.http.HttpServlet;
|
|
import javax.servlet.http.HttpServletRequest;
|
|
import javax.servlet.http.HttpServletResponse;
|
|
import java.io.IOException;
|
|
import java.io.PrintWriter;
|
|
|
|
/**
|
|
* ***********************************************
|
|
* Created by Sola on 2015/12/12.
|
|
* Don't modify this source without my agreement
|
|
* ***********************************************
|
|
*/
|
|
|
|
@WebServlet(name = "Login", urlPatterns = "/api/admin/login", loadOnStartup = 12)
|
|
public class Login extends HttpServlet {
|
|
|
|
private Gson gson = SQLCore.gson;
|
|
|
|
protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
|
|
doGet(request, response);
|
|
}
|
|
|
|
protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
|
|
request.setCharacterEncoding("utf-8");
|
|
response.setCharacterEncoding("utf-8");
|
|
response.addHeader("Content-type", "application/json;charset=utf-8");
|
|
PrintWriter out = response.getWriter();
|
|
String json = gson.toJson(login(request));
|
|
out.println(ParseUtil.parseJsonP(request, json));
|
|
out.close();
|
|
}
|
|
|
|
private Object login(HttpServletRequest request) {
|
|
try {
|
|
int oid = Integer.parseInt(request.getParameter("id"));
|
|
String password = request.getParameter("pass");
|
|
boolean bypass = request.getParameter("bypass") != null;
|
|
Operator op = TableOperator.get(oid);
|
|
if (op == null)
|
|
return Error.OPERATOR_NOT_FOUND;
|
|
else if (op.getAccess() >= Access.NO_LOGIN)
|
|
return Error.PERMISSION_DENIED;
|
|
|
|
if (!Crypto.check(bypass ? password : RSAUtil.decrypt(password), op.getPassword())) {
|
|
return Error.WRONG_PASSWORD;
|
|
}
|
|
|
|
String sid = WechatSession.genId();
|
|
WxSession session = WechatSession.get(sid, true);
|
|
if (bypass) {
|
|
session.setAttribute(Attribute.AUTHORIZED, Command.fromId(Integer.parseInt(request.getParameter("bypass"))));
|
|
} else {
|
|
session.setAttribute(Attribute.AUTHORIZED, Command.LOGIN);
|
|
}
|
|
|
|
session.setAttribute(Attribute.WECHAT, op.getWechat());
|
|
session.setAttribute(Attribute.OPERATOR, op);
|
|
|
|
if (request.getParameter("bypassuser") != null) {
|
|
User u = TableUser.getById(Long.parseLong(request.getParameter("bypassuser")));
|
|
session.setAttribute(Attribute.USER, u);
|
|
session.setAttribute(Attribute.WECHAT, u.getWechatId());
|
|
}
|
|
if (request.getParameter("bypasswechat") != null) {
|
|
session.setAttribute(Attribute.WECHAT, request.getParameter("bypasswechat"));
|
|
}
|
|
return sid;
|
|
} catch (Exception e) {
|
|
e.printStackTrace();
|
|
return Error.INTERNAL_ERROR;
|
|
}
|
|
}
|
|
} |