Merge branch 'master' of http://git.yn-ce.com/git/fujun/dxCard-service

fujun / dxCard-service

Browse code Merge branch 'master' of http://git.yn-ce.com/git/fujun/dxCard-service master
commit d591b8e583a0cc775ff3de93d56ee38f00949103 2 parents 0993a19 + 3769982 jiangqihao authored 28 days ago

Patch

Showing 4 changed files

Ignore Space Show notes View jeecg-boot-base-core/src/main/java/org/jeecg/config/shiro/ShiroConfig.java
package org.jeecg.config.shiro; import jakarta.annotation.Resource; import jakarta.servlet.DispatcherType; import jakarta.servlet.Filter; import lombok.extern.slf4j.Slf4j; import org.apache.commons.pool2.impl.GenericObjectPoolConfig; import org.apache.shiro.mgt.DefaultSessionStorageEvaluator; import org.apache.shiro.mgt.DefaultSubjectDAO; import org.apache.shiro.mgt.SecurityManager; import org.apache.shiro.spring.LifecycleBeanPostProcessor; import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor; import org.apache.shiro.spring.web.ShiroFilterFactoryBean; import org.apache.shiro.spring.web.ShiroUrlPathHelper; import org.apache.shiro.web.mgt.DefaultWebSecurityManager; import org.crazycake.shiro.; import org.jeecg.common.constant.CommonConstant; import org.jeecg.common.util.oConvertUtils; import org.jeecg.config.JeecgBaseConfig; import org.jeecg.config.shiro.filters.CustomShiroFilterFactoryBean; import org.jeecg.config.shiro.filters.JwtFilter; import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Qualifier; import org.springframework.beans.factory.config.BeanDefinition; import org.springframework.boot.autoconfigure.data.redis.RedisProperties; import org.springframework.boot.web.servlet.FilterRegistrationBean; import org.springframework.context.annotation.; import org.springframework.core.env.Environment; import org.springframework.data.redis.connection.lettuce.LettuceConnectionFactory; import org.springframework.util.CollectionUtils; import org.springframework.util.StringUtils; import org.springframework.web.filter.DelegatingFilterProxy; import org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerMapping; import redis.clients.jedis.HostAndPort; import redis.clients.jedis.JedisCluster; import java.util.; /* * @author: Scott * @date: 2018/2/7 * @description: shiro 配置类 / @Slf4j @Configuration @Role(BeanDefinition.ROLE_INFRASTRUCTURE) public class ShiroConfig { @Resource private LettuceConnectionFactory lettuceConnectionFactory; @Autowired private Environment env; @Resource private JeecgBaseConfig jeecgBaseConfig; @Autowired(required = false) private RedisProperties redisProperties; /* * Filter Chain定义说明 * * 1、一个URL可以配置多个Filter，使用逗号分隔 * 2、当设置多个过滤器时，全部验证通过，才视为通过 * 3、部分过滤器可指定参数，如perms，roles / @Bean("shiroFilterFactoryBean") public ShiroFilterFactoryBean shiroFilter(SecurityManager securityManager) { CustomShiroFilterFactoryBean shiroFilterFactoryBean = new CustomShiroFilterFactoryBean(); shiroFilterFactoryBean.setSecurityManager(securityManager); // 拦截器 Map<String, String> filterChainDefinitionMap = new LinkedHashMap<String, String>(); //支持yml方式，配置拦截排除 if(jeecgBaseConfig!=null && jeecgBaseConfig.getShiro()!=null){ String shiroExcludeUrls = jeecgBaseConfig.getShiro().getExcludeUrls(); if(oConvertUtils.isNotEmpty(shiroExcludeUrls)){ String[] permissionUrl = shiroExcludeUrls.split(","); for(String url : permissionUrl){ filterChainDefinitionMap.put(url,"anon"); } } } // 配置不会被拦截的链接顺序判断 filterChainDefinitionMap.put("/wx/thirdLogin/", "anon"); filterChainDefinitionMap.put("/service/", "anon"); filterChainDefinitionMap.put("/sys/common/upload", "anon"); //上传图片接口排除 filterChainDefinitionMap.put("/sys/cas/client/validateLogin", "anon"); //cas验证登录 filterChainDefinitionMap.put("/sys/randomImage/", "anon"); //登录验证码接口排除 filterChainDefinitionMap.put("/sys/checkCaptcha", "anon"); //登录验证码接口排除 filterChainDefinitionMap.put("/sys/smsCheckCaptcha", "anon"); //短信次数发送太多验证码排除 filterChainDefinitionMap.put("/sys/login", "anon"); //登录接口排除 filterChainDefinitionMap.put("/sys/mLogin", "anon"); //登录接口排除 filterChainDefinitionMap.put("/sys/logout", "anon"); //登出接口排除 filterChainDefinitionMap.put("/sys/thirdLogin/", "anon"); //第三方登录 filterChainDefinitionMap.put("/sys/getEncryptedString", "anon"); //获取加密串 filterChainDefinitionMap.put("/sys/sms", "anon");//短信验证码 filterChainDefinitionMap.put("/sys/phoneLogin", "anon");//手机登录 filterChainDefinitionMap.put("/sys/user/checkOnlyUser", "anon");//校验用户是否存在 filterChainDefinitionMap.put("/sys/user/register", "anon");//用户注册 filterChainDefinitionMap.put("/sys/user/phoneVerification", "anon");//用户忘记密码验证手机号 filterChainDefinitionMap.put("/sys/user/passwordChange", "anon");//用户更改密码 filterChainDefinitionMap.put("/auth/2step-code", "anon");//登录验证码 filterChainDefinitionMap.put("/sys/common/static/", "anon");//图片预览 &下载文件不限制token filterChainDefinitionMap.put("/sys/common/pdf/", "anon");//pdf预览 //filterChainDefinitionMap.put("/sys/common/view/", "anon");//图片预览不限制token //filterChainDefinitionMap.put("/sys/common/download/", "anon");//文件下载不限制token filterChainDefinitionMap.put("/generic/", "anon");//pdf预览需要文件 filterChainDefinitionMap.put("/sys/getLoginQrcode/", "anon"); //登录二维码 filterChainDefinitionMap.put("/sys/getQrcodeToken/", "anon"); //监听扫码 filterChainDefinitionMap.put("/sys/checkAuth", "anon"); //授权接口排除 filterChainDefinitionMap.put("/openapi/call/", "anon"); // 开放平台接口排除 //update-begin--Author:scott Date:20221116 for：排除静态资源后缀 filterChainDefinitionMap.put("/", "anon"); filterChainDefinitionMap.put("/doc.html", "anon"); filterChainDefinitionMap.put("//.js", "anon"); filterChainDefinitionMap.put("/*/.css", "anon"); filterChainDefinitionMap.put("/*/.html", "anon"); filterChainDefinitionMap.put("/*/.svg", "anon"); filterChainDefinitionMap.put("/*/.pdf", "anon"); filterChainDefinitionMap.put("/*/.jpg", "anon"); filterChainDefinitionMap.put("/*/.png", "anon"); filterChainDefinitionMap.put("/*/.gif", "anon"); filterChainDefinitionMap.put("/*/.ico", "anon"); filterChainDefinitionMap.put("/*/.ttf", "anon"); filterChainDefinitionMap.put("/*/.woff", "anon"); filterChainDefinitionMap.put("/*/.woff2", "anon"); filterChainDefinitionMap.put("/*/.glb", "anon"); filterChainDefinitionMap.put("/*/.wasm", "anon"); //update-end--Author:scott Date:20221116 for：排除静态资源后缀 filterChainDefinitionMap.put("/druid/", "anon"); filterChainDefinitionMap.put("/swagger-ui.html", "anon"); filterChainDefinitionMap.put("/swagger/", "anon"); filterChainDefinitionMap.put("/webjars/", "anon"); filterChainDefinitionMap.put("/v3/", "anon"); // update-begin--Author:sunjianlei Date:20210510 for：排除消息通告查看详情页面（用于第三方APP） filterChainDefinitionMap.put("/sys/annountCement/show/", "anon"); // update-end--Author:sunjianlei Date:20210510 for：排除消息通告查看详情页面（用于第三方APP） //积木报表排除 filterChainDefinitionMap.put("/jmreport/", "anon"); filterChainDefinitionMap.put("//.js.map", "anon"); filterChainDefinitionMap.put("//.css.map", "anon"); //积木BI大屏和仪表盘排除 filterChainDefinitionMap.put("/drag/view", "anon"); filterChainDefinitionMap.put("/drag/page/queryById", "anon"); filterChainDefinitionMap.put("/drag/page/addVisitsNumber", "anon"); filterChainDefinitionMap.put("/drag/page/queryTemplateList", "anon"); filterChainDefinitionMap.put("/drag/share/view/", "anon"); filterChainDefinitionMap.put("/drag/onlDragDatasetHead/getAllChartData", "anon"); filterChainDefinitionMap.put("/drag/onlDragDatasetHead/getTotalData", "anon"); filterChainDefinitionMap.put("/drag/onlDragDatasetHead/getMapDataByCode", "anon"); filterChainDefinitionMap.put("/drag/onlDragDatasetHead/getTotalDataByCompId", "anon"); filterChainDefinitionMap.put("/drag/mock/json/", "anon"); filterChainDefinitionMap.put("/drag/onlDragDatasetHead/getDictByCodes", "anon"); filterChainDefinitionMap.put("/jimubi/view", "anon"); filterChainDefinitionMap.put("/jimubi/share/view/", "anon"); //大屏模板例子 filterChainDefinitionMap.put("/test/bigScreen/", "anon"); filterChainDefinitionMap.put("/bigscreen/template1/", "anon"); filterChainDefinitionMap.put("/bigscreen/template2/", "anon"); //filterChainDefinitionMap.put("/test/jeecgDemo/rabbitMqClientTest/", "anon"); //MQ测试 //filterChainDefinitionMap.put("/test/jeecgDemo/html", "anon"); //模板页面 //filterChainDefinitionMap.put("/test/jeecgDemo/redis/", "anon"); //redis测试 //websocket排除 filterChainDefinitionMap.put("/websocket/", "anon");//系统通知和公告 filterChainDefinitionMap.put("/newsWebsocket/", "anon");//CMS模块 filterChainDefinitionMap.put("/vxeSocket/", "anon");//JVxeTable无痕刷新示例 //App vue3版本查询版本接口 filterChainDefinitionMap.put("/sys/version/app3version", "anon"); //仪表盘（按钮通信） filterChainDefinitionMap.put("/dragChannelSocket/","anon"); //性能监控——安全隐患泄露TOEKN（durid连接池也有） //filterChainDefinitionMap.put("/actuator/", "anon"); //测试模块排除 filterChainDefinitionMap.put("/test/seata/", "anon"); //错误路径排除 filterChainDefinitionMap.put("/error", "anon"); // 企业微信证书排除 filterChainDefinitionMap.put("/WW_verify", "anon"); // 添加自己的过滤器并且取名为jwt Map<String, Filter> filterMap = new HashMap<String, Filter>(1); //如果cloudServer为空则说明是单体需要加载跨域配置【微服务跨域切换】 Object cloudServer = env.getProperty(CommonConstant.CLOUD_SERVER_KEY); filterMap.put("jwt", new JwtFilter(cloudServer==null)); shiroFilterFactoryBean.setFilters(filterMap); // <!-- 过滤链定义，从上向下顺序执行，一般将/放在最为下边 filterChainDefinitionMap.put("/", "jwt"); // 未授权界面返回JSON shiroFilterFactoryBean.setUnauthorizedUrl("/sys/common/403"); shiroFilterFactoryBean.setLoginUrl("/sys/common/403"); shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap); return shiroFilterFactoryBean; } //update-begin---author:chenrui ---date:20240126 for：【QQYUN-7932】AI助手------------ /* * spring过滤装饰器 <br/> * 因为shiro的filter不支持异步请求,导致所有的异步请求都会报错. <br/> * 所以需要用spring的FilterRegistrationBean再代理一下shiro的filter.为他扩展异步支持. <br/> * 后续所有异步的接口都需要再这里增加registration.addUrlPatterns("/xxx/xxx"); * @return * @author chenrui * @date 2024/12/3 19:49 / @Bean public FilterRegistrationBean shiroFilterRegistration() { FilterRegistrationBean registration = new FilterRegistrationBean(); registration.setFilter(new DelegatingFilterProxy("shiroFilterFactoryBean")); registration.setEnabled(true); //update-begin---author:chenrui ---date:20241202 for：[issues/7491]运行时间好长，效率慢 ------------ registration.addUrlPatterns("/test/ai/chat/send"); //update-end---author:chenrui ---date:20241202 for：[issues/7491]运行时间好长，效率慢 ------------ registration.addUrlPatterns("/airag/flow/run"); registration.addUrlPatterns("/airag/flow/debug"); registration.addUrlPatterns("/airag/chat/send"); registration.addUrlPatterns("/airag/app/debug"); registration.addUrlPatterns("/airag/app/prompt/generate"); //支持异步 registration.setAsyncSupported(true); registration.setDispatcherTypes(DispatcherType.REQUEST, DispatcherType.ASYNC); return registration; } //update-end---author:chenrui ---date:20240126 for：【QQYUN-7932】AI助手------------ @Bean("securityManager") public DefaultWebSecurityManager securityManager(ShiroRealm myRealm) { DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager(); securityManager.setRealm(myRealm); / * 关闭shiro自带的session，详情见文档 * http://shiro.apache.org/session-management.html#SessionManagement- * StatelessApplications%28Sessionless%29 / DefaultSubjectDAO subjectDAO = new DefaultSubjectDAO(); DefaultSessionStorageEvaluator defaultSessionStorageEvaluator = new DefaultSessionStorageEvaluator(); defaultSessionStorageEvaluator.setSessionStorageEnabled(false); subjectDAO.setSessionStorageEvaluator(defaultSessionStorageEvaluator); securityManager.setSubjectDAO(subjectDAO); //自定义缓存实现,使用redis securityManager.setCacheManager(redisCacheManager()); return securityManager; } /* * 下面的代码是添加注解支持 * @return / @Bean @DependsOn("lifecycleBeanPostProcessor") public DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator() { DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator = new DefaultAdvisorAutoProxyCreator(); defaultAdvisorAutoProxyCreator.setProxyTargetClass(true); /* * 解决重复代理问题 github#994 * 添加前缀判断不匹配任何Advisor / defaultAdvisorAutoProxyCreator.setUsePrefix(true); defaultAdvisorAutoProxyCreator.setAdvisorBeanNamePrefix("_no_advisor"); return defaultAdvisorAutoProxyCreator; } @Bean public static LifecycleBeanPostProcessor lifecycleBeanPostProcessor() { return new LifecycleBeanPostProcessor(); } @Bean public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(DefaultWebSecurityManager securityManager) { AuthorizationAttributeSourceAdvisor advisor = new AuthorizationAttributeSourceAdvisor(); advisor.setSecurityManager(securityManager); return advisor; } /* * cacheManager 缓存 redis实现 * 使用的是shiro-redis开源插件 * * @return / public RedisCacheManager redisCacheManager() { log.info("===============(1)创建缓存管理器RedisCacheManager"); RedisCacheManager redisCacheManager = new RedisCacheManager(); redisCacheManager.setRedisManager(redisManager()); //redis中针对不同用户缓存(此处的id需要对应user实体中的id字段,用于唯一标识) redisCacheManager.setPrincipalIdFieldName("id"); //用户权限信息缓存时间 redisCacheManager.setExpire(200000); return redisCacheManager; } /* * RedisConfig在项目starter项目中 * jeecg-boot-starter-github\jeecg-boot-common\src\main\java\org\jeecg\common\modules\redis\config\RedisConfig.java * * 配置shiro redisManager * 使用的是shiro-redis开源插件 * * @return / @Bean public IRedisManager redisManager() { log.info("===============(2)创建RedisManager,连接Redis.."); IRedisManager manager; // sentinel cluster redis（【issues/5569】shiro集成 redis 不支持 sentinel 方式部署的redis集群 #5569） if (Objects.nonNull(redisProperties) && Objects.nonNull(redisProperties.getSentinel()) && !CollectionUtils.isEmpty(redisProperties.getSentinel().getNodes())) { RedisSentinelManager sentinelManager = new RedisSentinelManager(); sentinelManager.setMasterName(redisProperties.getSentinel().getMaster()); sentinelManager.setHost(String.join(",", redisProperties.getSentinel().getNodes())); sentinelManager.setPassword(redisProperties.getPassword()); sentinelManager.setDatabase(redisProperties.getDatabase()); return sentinelManager; } // redis 单机支持，在集群为空，或者集群无机器时候使用 add by jzyadmin@163.com if (lettuceConnectionFactory.getClusterConfiguration() == null \|\| lettuceConnectionFactory.getClusterConfiguration().getClusterNodes().isEmpty()) { RedisManager redisManager = new RedisManager(); redisManager.setHost(lettuceConnectionFactory.getHostName() + ":" + lettuceConnectionFactory.getPort()); //(lettuceConnectionFactory.getPort()); redisManager.setDatabase(lettuceConnectionFactory.getDatabase()); redisManager.setTimeout(0); if (!StringUtils.isEmpty(lettuceConnectionFactory.getPassword())) { redisManager.setPassword(lettuceConnectionFactory.getPassword()); } manager = redisManager; }else{ // redis集群支持，优先使用集群配置 RedisClusterManager redisManager = new RedisClusterManager(); Set<HostAndPort> portSet = new HashSet<>(); lettuceConnectionFactory.getClusterConfiguration().getClusterNodes().forEach(node -> portSet.add(new HostAndPort(node.getHost() , node.getPort()))); //update-begin--Author:scott Date:20210531 for：修改集群模式下未设置redis密码的bug issues/I3QNIC if (oConvertUtils.isNotEmpty(lettuceConnectionFactory.getPassword())) { JedisCluster jedisCluster = new JedisCluster(portSet, 2000, 2000, 5, lettuceConnectionFactory.getPassword(), new GenericObjectPoolConfig()); redisManager.setPassword(lettuceConnectionFactory.getPassword()); redisManager.setJedisCluster(jedisCluster); } else { JedisCluster jedisCluster = new JedisCluster(portSet); redisManager.setJedisCluster(jedisCluster); } //update-end--Author:scott Date:20210531 for：修改集群模式下未设置redis密码的bug issues/I3QNIC manager = redisManager; } return manager; } /* * 解决 ShiroRequestMappingConfig 获取 requestMappingHandlerMapping Bean 冲突 * spring-boot-autoconfigure:3.4.5 和 spring-boot-actuator-autoconfigure:3.4.5 / @Primary @Bean public RequestMappingHandlerMapping overridedRequestMappingHandlerMapping() { RequestMappingHandlerMapping mapping = new RequestMappingHandlerMapping(); mapping.setUrlPathHelper(new ShiroUrlPathHelper()); return mapping; } private List<String> rebuildUrl(String[] bases, String[] uris) { List<String> urls = new ArrayList<>(); for (String base : bases) { for (String uri : uris) { urls.add(prefix(base)+prefix(uri)); } } return urls; } private String prefix(String seg) { return seg.startsWith("/") ? seg : "/"+seg; } } package org.jeecg.config.shiro; import jakarta.annotation.Resource; import jakarta.servlet.DispatcherType; import jakarta.servlet.Filter; import lombok.extern.slf4j.Slf4j; import org.apache.commons.pool2.impl.GenericObjectPoolConfig; import org.apache.shiro.mgt.DefaultSessionStorageEvaluator; import org.apache.shiro.mgt.DefaultSubjectDAO; import org.apache.shiro.mgt.SecurityManager; import org.apache.shiro.spring.LifecycleBeanPostProcessor; import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor; import org.apache.shiro.spring.web.ShiroFilterFactoryBean; import org.apache.shiro.spring.web.ShiroUrlPathHelper; import org.apache.shiro.web.mgt.DefaultWebSecurityManager; import org.crazycake.shiro.; import org.jeecg.common.constant.CommonConstant; import org.jeecg.common.util.oConvertUtils; import org.jeecg.config.JeecgBaseConfig; import org.jeecg.config.shiro.filters.CustomShiroFilterFactoryBean; import org.jeecg.config.shiro.filters.JwtFilter; import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Qualifier; import org.springframework.beans.factory.config.BeanDefinition; import org.springframework.boot.autoconfigure.data.redis.RedisProperties; import org.springframework.boot.web.servlet.FilterRegistrationBean; import org.springframework.context.annotation.; import org.springframework.core.env.Environment; import org.springframework.data.redis.connection.lettuce.LettuceConnectionFactory; import org.springframework.util.CollectionUtils; import org.springframework.util.StringUtils; import org.springframework.web.filter.DelegatingFilterProxy; import org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerMapping; import redis.clients.jedis.HostAndPort; import redis.clients.jedis.JedisCluster; import java.util.; /** * @author: Scott * @date: 2018/2/7 * @description: shiro 配置类 / @Slf4j @Configuration @Role(BeanDefinition.ROLE_INFRASTRUCTURE) public class ShiroConfig { @Resource private LettuceConnectionFactory lettuceConnectionFactory; @Autowired private Environment env; @Resource private JeecgBaseConfig jeecgBaseConfig; @Autowired(required = false) private RedisProperties redisProperties; /* * Filter Chain定义说明 * * 1、一个URL可以配置多个Filter，使用逗号分隔 * 2、当设置多个过滤器时，全部验证通过，才视为通过 * 3、部分过滤器可指定参数，如perms，roles / @Bean("shiroFilterFactoryBean") public ShiroFilterFactoryBean shiroFilter(SecurityManager securityManager) { CustomShiroFilterFactoryBean shiroFilterFactoryBean = new CustomShiroFilterFactoryBean(); shiroFilterFactoryBean.setSecurityManager(securityManager); // 拦截器 Map<String, String> filterChainDefinitionMap = new LinkedHashMap<String, String>(); //支持yml方式，配置拦截排除 if(jeecgBaseConfig!=null && jeecgBaseConfig.getShiro()!=null){ String shiroExcludeUrls = jeecgBaseConfig.getShiro().getExcludeUrls(); if(oConvertUtils.isNotEmpty(shiroExcludeUrls)){ String[] permissionUrl = shiroExcludeUrls.split(","); for(String url : permissionUrl){ filterChainDefinitionMap.put(url,"anon"); } } } // 配置不会被拦截的链接顺序判断 filterChainDefinitionMap.put("/wx/thirdLogin/", "anon"); filterChainDefinitionMap.put("/service/", "anon"); filterChainDefinitionMap.put("/sys/cas/client/validateLogin", "anon"); //cas验证登录 filterChainDefinitionMap.put("/sys/randomImage/", "anon"); //登录验证码接口排除 filterChainDefinitionMap.put("/sys/checkCaptcha", "anon"); //登录验证码接口排除 filterChainDefinitionMap.put("/sys/smsCheckCaptcha", "anon"); //短信次数发送太多验证码排除 filterChainDefinitionMap.put("/sys/login", "anon"); //登录接口排除 filterChainDefinitionMap.put("/sys/mLogin", "anon"); //登录接口排除 filterChainDefinitionMap.put("/sys/logout", "anon"); //登出接口排除 filterChainDefinitionMap.put("/sys/thirdLogin/", "anon"); //第三方登录 filterChainDefinitionMap.put("/sys/getEncryptedString", "anon"); //获取加密串 filterChainDefinitionMap.put("/sys/sms", "anon");//短信验证码 filterChainDefinitionMap.put("/sys/phoneLogin", "anon");//手机登录 filterChainDefinitionMap.put("/sys/user/checkOnlyUser", "anon");//校验用户是否存在 filterChainDefinitionMap.put("/sys/user/register", "anon");//用户注册 filterChainDefinitionMap.put("/sys/user/phoneVerification", "anon");//用户忘记密码验证手机号 filterChainDefinitionMap.put("/sys/user/passwordChange", "anon");//用户更改密码 filterChainDefinitionMap.put("/auth/2step-code", "anon");//登录验证码 filterChainDefinitionMap.put("/sys/common/static/", "anon");//图片预览 &下载文件不限制token filterChainDefinitionMap.put("/sys/common/pdf/", "anon");//pdf预览 //filterChainDefinitionMap.put("/sys/common/view/", "anon");//图片预览不限制token //filterChainDefinitionMap.put("/sys/common/download/", "anon");//文件下载不限制token filterChainDefinitionMap.put("/generic/", "anon");//pdf预览需要文件 filterChainDefinitionMap.put("/sys/getLoginQrcode/", "anon"); //登录二维码 filterChainDefinitionMap.put("/sys/getQrcodeToken/", "anon"); //监听扫码 filterChainDefinitionMap.put("/sys/checkAuth", "anon"); //授权接口排除 filterChainDefinitionMap.put("/openapi/call/", "anon"); // 开放平台接口排除 //update-begin--Author:scott Date:20221116 for：排除静态资源后缀 filterChainDefinitionMap.put("/", "anon"); filterChainDefinitionMap.put("/doc.html", "anon"); filterChainDefinitionMap.put("//.js", "anon"); filterChainDefinitionMap.put("/*/.css", "anon"); filterChainDefinitionMap.put("/*/.html", "anon"); filterChainDefinitionMap.put("/*/.svg", "anon"); filterChainDefinitionMap.put("/*/.pdf", "anon"); filterChainDefinitionMap.put("/*/.jpg", "anon"); filterChainDefinitionMap.put("/*/.png", "anon"); filterChainDefinitionMap.put("/*/.gif", "anon"); filterChainDefinitionMap.put("/*/.ico", "anon"); filterChainDefinitionMap.put("/*/.ttf", "anon"); filterChainDefinitionMap.put("/*/.woff", "anon"); filterChainDefinitionMap.put("/*/.woff2", "anon"); filterChainDefinitionMap.put("/*/.glb", "anon"); filterChainDefinitionMap.put("/*/.wasm", "anon"); //update-end--Author:scott Date:20221116 for：排除静态资源后缀 filterChainDefinitionMap.put("/druid/", "anon"); filterChainDefinitionMap.put("/swagger-ui.html", "anon"); filterChainDefinitionMap.put("/swagger/", "anon"); filterChainDefinitionMap.put("/webjars/", "anon"); filterChainDefinitionMap.put("/v3/", "anon"); // update-begin--Author:sunjianlei Date:20210510 for：排除消息通告查看详情页面（用于第三方APP） filterChainDefinitionMap.put("/sys/annountCement/show/", "anon"); // update-end--Author:sunjianlei Date:20210510 for：排除消息通告查看详情页面（用于第三方APP） //积木报表排除 filterChainDefinitionMap.put("/jmreport/", "anon"); filterChainDefinitionMap.put("//.js.map", "anon"); filterChainDefinitionMap.put("//.css.map", "anon"); //积木BI大屏和仪表盘排除 filterChainDefinitionMap.put("/drag/view", "anon"); filterChainDefinitionMap.put("/drag/page/queryById", "anon"); filterChainDefinitionMap.put("/drag/page/addVisitsNumber", "anon"); filterChainDefinitionMap.put("/drag/page/queryTemplateList", "anon"); filterChainDefinitionMap.put("/drag/share/view/", "anon"); filterChainDefinitionMap.put("/drag/onlDragDatasetHead/getAllChartData", "anon"); filterChainDefinitionMap.put("/drag/onlDragDatasetHead/getTotalData", "anon"); filterChainDefinitionMap.put("/drag/onlDragDatasetHead/getMapDataByCode", "anon"); filterChainDefinitionMap.put("/drag/onlDragDatasetHead/getTotalDataByCompId", "anon"); filterChainDefinitionMap.put("/drag/mock/json/", "anon"); filterChainDefinitionMap.put("/drag/onlDragDatasetHead/getDictByCodes", "anon"); filterChainDefinitionMap.put("/jimubi/view", "anon"); filterChainDefinitionMap.put("/jimubi/share/view/", "anon"); //大屏模板例子 filterChainDefinitionMap.put("/test/bigScreen/", "anon"); filterChainDefinitionMap.put("/bigscreen/template1/", "anon"); filterChainDefinitionMap.put("/bigscreen/template2/", "anon"); //filterChainDefinitionMap.put("/test/jeecgDemo/rabbitMqClientTest/", "anon"); //MQ测试 //filterChainDefinitionMap.put("/test/jeecgDemo/html", "anon"); //模板页面 //filterChainDefinitionMap.put("/test/jeecgDemo/redis/", "anon"); //redis测试 //websocket排除 filterChainDefinitionMap.put("/websocket/", "anon");//系统通知和公告 filterChainDefinitionMap.put("/newsWebsocket/", "anon");//CMS模块 filterChainDefinitionMap.put("/vxeSocket/", "anon");//JVxeTable无痕刷新示例 //App vue3版本查询版本接口 filterChainDefinitionMap.put("/sys/version/app3version", "anon"); //仪表盘（按钮通信） filterChainDefinitionMap.put("/dragChannelSocket/","anon"); //性能监控——安全隐患泄露TOEKN（durid连接池也有） //filterChainDefinitionMap.put("/actuator/", "anon"); //测试模块排除 filterChainDefinitionMap.put("/test/seata/", "anon"); //错误路径排除 filterChainDefinitionMap.put("/error", "anon"); // 企业微信证书排除 filterChainDefinitionMap.put("/WW_verify", "anon"); // 添加自己的过滤器并且取名为jwt Map<String, Filter> filterMap = new HashMap<String, Filter>(1); //如果cloudServer为空则说明是单体需要加载跨域配置【微服务跨域切换】 Object cloudServer = env.getProperty(CommonConstant.CLOUD_SERVER_KEY); filterMap.put("jwt", new JwtFilter(cloudServer==null)); shiroFilterFactoryBean.setFilters(filterMap); // <!-- 过滤链定义，从上向下顺序执行，一般将/放在最为下边 filterChainDefinitionMap.put("/", "jwt"); // 未授权界面返回JSON shiroFilterFactoryBean.setUnauthorizedUrl("/sys/common/403"); shiroFilterFactoryBean.setLoginUrl("/sys/common/403"); shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap); return shiroFilterFactoryBean; } //update-begin---author:chenrui ---date:20240126 for：【QQYUN-7932】AI助手------------ /* * spring过滤装饰器 <br/> * 因为shiro的filter不支持异步请求,导致所有的异步请求都会报错. <br/> * 所以需要用spring的FilterRegistrationBean再代理一下shiro的filter.为他扩展异步支持. <br/> * 后续所有异步的接口都需要再这里增加registration.addUrlPatterns("/xxx/xxx"); * @return * @author chenrui * @date 2024/12/3 19:49 / @Bean public FilterRegistrationBean shiroFilterRegistration() { FilterRegistrationBean registration = new FilterRegistrationBean(); registration.setFilter(new DelegatingFilterProxy("shiroFilterFactoryBean")); registration.setEnabled(true); //update-begin---author:chenrui ---date:20241202 for：[issues/7491]运行时间好长，效率慢 ------------ registration.addUrlPatterns("/test/ai/chat/send"); //update-end---author:chenrui ---date:20241202 for：[issues/7491]运行时间好长，效率慢 ------------ registration.addUrlPatterns("/airag/flow/run"); registration.addUrlPatterns("/airag/flow/debug"); registration.addUrlPatterns("/airag/chat/send"); registration.addUrlPatterns("/airag/app/debug"); registration.addUrlPatterns("/airag/app/prompt/generate"); //支持异步 registration.setAsyncSupported(true); registration.setDispatcherTypes(DispatcherType.REQUEST, DispatcherType.ASYNC); return registration; } //update-end---author:chenrui ---date:20240126 for：【QQYUN-7932】AI助手------------ @Bean("securityManager") public DefaultWebSecurityManager securityManager(ShiroRealm myRealm) { DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager(); securityManager.setRealm(myRealm); / * 关闭shiro自带的session，详情见文档 * http://shiro.apache.org/session-management.html#SessionManagement- * StatelessApplications%28Sessionless%29 / DefaultSubjectDAO subjectDAO = new DefaultSubjectDAO(); DefaultSessionStorageEvaluator defaultSessionStorageEvaluator = new DefaultSessionStorageEvaluator(); defaultSessionStorageEvaluator.setSessionStorageEnabled(false); subjectDAO.setSessionStorageEvaluator(defaultSessionStorageEvaluator); securityManager.setSubjectDAO(subjectDAO); //自定义缓存实现,使用redis securityManager.setCacheManager(redisCacheManager()); return securityManager; } /* * 下面的代码是添加注解支持 * @return / @Bean @DependsOn("lifecycleBeanPostProcessor") public DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator() { DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator = new DefaultAdvisorAutoProxyCreator(); defaultAdvisorAutoProxyCreator.setProxyTargetClass(true); /* * 解决重复代理问题 github#994 * 添加前缀判断不匹配任何Advisor / defaultAdvisorAutoProxyCreator.setUsePrefix(true); defaultAdvisorAutoProxyCreator.setAdvisorBeanNamePrefix("_no_advisor"); return defaultAdvisorAutoProxyCreator; } @Bean public static LifecycleBeanPostProcessor lifecycleBeanPostProcessor() { return new LifecycleBeanPostProcessor(); } @Bean public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(DefaultWebSecurityManager securityManager) { AuthorizationAttributeSourceAdvisor advisor = new AuthorizationAttributeSourceAdvisor(); advisor.setSecurityManager(securityManager); return advisor; } /* * cacheManager 缓存 redis实现 * 使用的是shiro-redis开源插件 * * @return / public RedisCacheManager redisCacheManager() { log.info("===============(1)创建缓存管理器RedisCacheManager"); RedisCacheManager redisCacheManager = new RedisCacheManager(); redisCacheManager.setRedisManager(redisManager()); //redis中针对不同用户缓存(此处的id需要对应user实体中的id字段,用于唯一标识) redisCacheManager.setPrincipalIdFieldName("id"); //用户权限信息缓存时间 redisCacheManager.setExpire(200000); return redisCacheManager; } /* * RedisConfig在项目starter项目中 * jeecg-boot-starter-github\jeecg-boot-common\src\main\java\org\jeecg\common\modules\redis\config\RedisConfig.java * * 配置shiro redisManager * 使用的是shiro-redis开源插件 * * @return / @Bean public IRedisManager redisManager() { log.info("===============(2)创建RedisManager,连接Redis.."); IRedisManager manager; // sentinel cluster redis（【issues/5569】shiro集成 redis 不支持 sentinel 方式部署的redis集群 #5569） if (Objects.nonNull(redisProperties) && Objects.nonNull(redisProperties.getSentinel()) && !CollectionUtils.isEmpty(redisProperties.getSentinel().getNodes())) { RedisSentinelManager sentinelManager = new RedisSentinelManager(); sentinelManager.setMasterName(redisProperties.getSentinel().getMaster()); sentinelManager.setHost(String.join(",", redisProperties.getSentinel().getNodes())); sentinelManager.setPassword(redisProperties.getPassword()); sentinelManager.setDatabase(redisProperties.getDatabase()); return sentinelManager; } // redis 单机支持，在集群为空，或者集群无机器时候使用 add by jzyadmin@163.com if (lettuceConnectionFactory.getClusterConfiguration() == null \|\| lettuceConnectionFactory.getClusterConfiguration().getClusterNodes().isEmpty()) { RedisManager redisManager = new RedisManager(); redisManager.setHost(lettuceConnectionFactory.getHostName() + ":" + lettuceConnectionFactory.getPort()); //(lettuceConnectionFactory.getPort()); redisManager.setDatabase(lettuceConnectionFactory.getDatabase()); redisManager.setTimeout(0); if (!StringUtils.isEmpty(lettuceConnectionFactory.getPassword())) { redisManager.setPassword(lettuceConnectionFactory.getPassword()); } manager = redisManager; }else{ // redis集群支持，优先使用集群配置 RedisClusterManager redisManager = new RedisClusterManager(); Set<HostAndPort> portSet = new HashSet<>(); lettuceConnectionFactory.getClusterConfiguration().getClusterNodes().forEach(node -> portSet.add(new HostAndPort(node.getHost() , node.getPort()))); //update-begin--Author:scott Date:20210531 for：修改集群模式下未设置redis密码的bug issues/I3QNIC if (oConvertUtils.isNotEmpty(lettuceConnectionFactory.getPassword())) { JedisCluster jedisCluster = new JedisCluster(portSet, 2000, 2000, 5, lettuceConnectionFactory.getPassword(), new GenericObjectPoolConfig()); redisManager.setPassword(lettuceConnectionFactory.getPassword()); redisManager.setJedisCluster(jedisCluster); } else { JedisCluster jedisCluster = new JedisCluster(portSet); redisManager.setJedisCluster(jedisCluster); } //update-end--Author:scott Date:20210531 for：修改集群模式下未设置redis密码的bug issues/I3QNIC manager = redisManager; } return manager; } /* * 解决 ShiroRequestMappingConfig 获取 requestMappingHandlerMapping Bean 冲突 * spring-boot-autoconfigure:3.4.5 和 spring-boot-actuator-autoconfigure:3.4.5 */ @Primary @Bean public RequestMappingHandlerMapping overridedRequestMappingHandlerMapping() { RequestMappingHandlerMapping mapping = new RequestMappingHandlerMapping(); mapping.setUrlPathHelper(new ShiroUrlPathHelper()); return mapping; } private List<String> rebuildUrl(String[] bases, String[] uris) { List<String> urls = new ArrayList<>(); for (String base : bases) { for (String uri : uris) { urls.add(prefix(base)+prefix(uri)); } } return urls; } private String prefix(String seg) { return seg.startsWith("/") ? seg : "/"+seg; } }

Ignore Space Show notes View

jeecg-boot-base-core/src/main/java/org/jeecg/config/shiro/ShiroConfig.java

package org.jeecg.config.shiro;

import jakarta.annotation.Resource;
import jakarta.servlet.DispatcherType;
import jakarta.servlet.Filter;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.pool2.impl.GenericObjectPoolConfig;
import org.apache.shiro.mgt.DefaultSessionStorageEvaluator;
import org.apache.shiro.mgt.DefaultSubjectDAO;
import org.apache.shiro.mgt.SecurityManager;
import org.apache.shiro.spring.LifecycleBeanPostProcessor;
import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
import org.apache.shiro.spring.web.ShiroUrlPathHelper;
import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
import org.crazycake.shiro.*;
import org.jeecg.common.constant.CommonConstant;
import org.jeecg.common.util.oConvertUtils;
import org.jeecg.config.JeecgBaseConfig;
import org.jeecg.config.shiro.filters.CustomShiroFilterFactoryBean;
import org.jeecg.config.shiro.filters.JwtFilter;
import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.annotation.Qualifier;
import org.springframework.beans.factory.config.BeanDefinition;
import org.springframework.boot.autoconfigure.data.redis.RedisProperties;
import org.springframework.boot.web.servlet.FilterRegistrationBean;
import org.springframework.context.annotation.*;
import org.springframework.core.env.Environment;
import org.springframework.data.redis.connection.lettuce.LettuceConnectionFactory;
import org.springframework.util.CollectionUtils;
import org.springframework.util.StringUtils;
import org.springframework.web.filter.DelegatingFilterProxy;
import org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerMapping;
import redis.clients.jedis.HostAndPort;
import redis.clients.jedis.JedisCluster;

import java.util.*;

/**
 * @author: Scott
 * @date: 2018/2/7
 * @description: shiro 配置类
 */

@Slf4j
@Configuration
@Role(BeanDefinition.ROLE_INFRASTRUCTURE)
public class ShiroConfig {

@Resource
    private LettuceConnectionFactory lettuceConnectionFactory;
    @Autowired
    private Environment env;
    @Resource
    private JeecgBaseConfig jeecgBaseConfig;
    @Autowired(required = false)
    private RedisProperties redisProperties;

/**
     * Filter Chain定义说明
     *
     * 1、一个URL可以配置多个Filter，使用逗号分隔
     * 2、当设置多个过滤器时，全部验证通过，才视为通过
     * 3、部分过滤器可指定参数，如perms，roles
     */
    @Bean("shiroFilterFactoryBean")
    public ShiroFilterFactoryBean shiroFilter(SecurityManager securityManager) {
        CustomShiroFilterFactoryBean shiroFilterFactoryBean = new CustomShiroFilterFactoryBean();
        shiroFilterFactoryBean.setSecurityManager(securityManager);
        // 拦截器
        Map<String, String> filterChainDefinitionMap = new LinkedHashMap<String, String>();

//支持yml方式，配置拦截排除
        if(jeecgBaseConfig!=null && jeecgBaseConfig.getShiro()!=null){
            String shiroExcludeUrls = jeecgBaseConfig.getShiro().getExcludeUrls();
            if(oConvertUtils.isNotEmpty(shiroExcludeUrls)){
                String[] permissionUrl = shiroExcludeUrls.split(",");
                for(String url : permissionUrl){
                    filterChainDefinitionMap.put(url,"anon");
                }
            }
        }

// 配置不会被拦截的链接 顺序判断
        filterChainDefinitionMap.put("/wx/thirdLogin/**", "anon");
        filterChainDefinitionMap.put("/service/**", "anon");
        filterChainDefinitionMap.put("/sys/common/upload", "anon"); //上传图片接口排除
        filterChainDefinitionMap.put("/sys/cas/client/validateLogin", "anon"); //cas验证登录
        filterChainDefinitionMap.put("/sys/randomImage/**", "anon"); //登录验证码接口排除
        filterChainDefinitionMap.put("/sys/checkCaptcha", "anon"); //登录验证码接口排除
        filterChainDefinitionMap.put("/sys/smsCheckCaptcha", "anon"); //短信次数发送太多验证码排除
        filterChainDefinitionMap.put("/sys/login", "anon"); //登录接口排除
        filterChainDefinitionMap.put("/sys/mLogin", "anon"); //登录接口排除
        filterChainDefinitionMap.put("/sys/logout", "anon"); //登出接口排除
        filterChainDefinitionMap.put("/sys/thirdLogin/**", "anon"); //第三方登录
        filterChainDefinitionMap.put("/sys/getEncryptedString", "anon"); //获取加密串
        filterChainDefinitionMap.put("/sys/sms", "anon");//短信验证码
        filterChainDefinitionMap.put("/sys/phoneLogin", "anon");//手机登录
        filterChainDefinitionMap.put("/sys/user/checkOnlyUser", "anon");//校验用户是否存在
        filterChainDefinitionMap.put("/sys/user/register", "anon");//用户注册
        filterChainDefinitionMap.put("/sys/user/phoneVerification", "anon");//用户忘记密码验证手机号
        filterChainDefinitionMap.put("/sys/user/passwordChange", "anon");//用户更改密码
        filterChainDefinitionMap.put("/auth/2step-code", "anon");//登录验证码
        filterChainDefinitionMap.put("/sys/common/static/**", "anon");//图片预览 &下载文件不限制token
        filterChainDefinitionMap.put("/sys/common/pdf/**", "anon");//pdf预览

//filterChainDefinitionMap.put("/sys/common/view/**", "anon");//图片预览不限制token
        //filterChainDefinitionMap.put("/sys/common/download/**", "anon");//文件下载不限制token
        filterChainDefinitionMap.put("/generic/**", "anon");//pdf预览需要文件

filterChainDefinitionMap.put("/sys/getLoginQrcode/**", "anon"); //登录二维码
        filterChainDefinitionMap.put("/sys/getQrcodeToken/**", "anon"); //监听扫码
        filterChainDefinitionMap.put("/sys/checkAuth", "anon"); //授权接口排除
        filterChainDefinitionMap.put("/openapi/call/**", "anon"); // 开放平台接口排除

//update-begin--Author:scott Date:20221116 for：排除静态资源后缀
        filterChainDefinitionMap.put("/", "anon");
        filterChainDefinitionMap.put("/doc.html", "anon");
        filterChainDefinitionMap.put("/**/*.js", "anon");
        filterChainDefinitionMap.put("/**/*.css", "anon");
        filterChainDefinitionMap.put("/**/*.html", "anon");
        filterChainDefinitionMap.put("/**/*.svg", "anon");
        filterChainDefinitionMap.put("/**/*.pdf", "anon");
        filterChainDefinitionMap.put("/**/*.jpg", "anon");
        filterChainDefinitionMap.put("/**/*.png", "anon");
        filterChainDefinitionMap.put("/**/*.gif", "anon");
        filterChainDefinitionMap.put("/**/*.ico", "anon");
        filterChainDefinitionMap.put("/**/*.ttf", "anon");
        filterChainDefinitionMap.put("/**/*.woff", "anon");
        filterChainDefinitionMap.put("/**/*.woff2", "anon");
        filterChainDefinitionMap.put("/**/*.glb", "anon");
        filterChainDefinitionMap.put("/**/*.wasm", "anon");
        //update-end--Author:scott Date:20221116 for：排除静态资源后缀

filterChainDefinitionMap.put("/druid/**", "anon");
        filterChainDefinitionMap.put("/swagger-ui.html", "anon");
        filterChainDefinitionMap.put("/swagger**/**", "anon");
        filterChainDefinitionMap.put("/webjars/**", "anon");
        filterChainDefinitionMap.put("/v3/**", "anon");

// update-begin--Author:sunjianlei Date:20210510 for：排除消息通告查看详情页面（用于第三方APP）
        filterChainDefinitionMap.put("/sys/annountCement/show/**", "anon");
        // update-end--Author:sunjianlei Date:20210510 for：排除消息通告查看详情页面（用于第三方APP）

//积木报表排除
        filterChainDefinitionMap.put("/jmreport/**", "anon");
        filterChainDefinitionMap.put("/**/*.js.map", "anon");
        filterChainDefinitionMap.put("/**/*.css.map", "anon");

//积木BI大屏和仪表盘排除
        filterChainDefinitionMap.put("/drag/view", "anon");
        filterChainDefinitionMap.put("/drag/page/queryById", "anon");
        filterChainDefinitionMap.put("/drag/page/addVisitsNumber", "anon");
        filterChainDefinitionMap.put("/drag/page/queryTemplateList", "anon");
        filterChainDefinitionMap.put("/drag/share/view/**", "anon");
        filterChainDefinitionMap.put("/drag/onlDragDatasetHead/getAllChartData", "anon");
        filterChainDefinitionMap.put("/drag/onlDragDatasetHead/getTotalData", "anon");
        filterChainDefinitionMap.put("/drag/onlDragDatasetHead/getMapDataByCode", "anon");
        filterChainDefinitionMap.put("/drag/onlDragDatasetHead/getTotalDataByCompId", "anon");
        filterChainDefinitionMap.put("/drag/mock/json/**", "anon");
        filterChainDefinitionMap.put("/drag/onlDragDatasetHead/getDictByCodes", "anon");

filterChainDefinitionMap.put("/jimubi/view", "anon");
        filterChainDefinitionMap.put("/jimubi/share/view/**", "anon");

//大屏模板例子
        filterChainDefinitionMap.put("/test/bigScreen/**", "anon");
        filterChainDefinitionMap.put("/bigscreen/template1/**", "anon");
        filterChainDefinitionMap.put("/bigscreen/template2/**", "anon");
        //filterChainDefinitionMap.put("/test/jeecgDemo/rabbitMqClientTest/**", "anon"); //MQ测试
        //filterChainDefinitionMap.put("/test/jeecgDemo/html", "anon"); //模板页面
        //filterChainDefinitionMap.put("/test/jeecgDemo/redis/**", "anon"); //redis测试

//websocket排除
        filterChainDefinitionMap.put("/websocket/**", "anon");//系统通知和公告
        filterChainDefinitionMap.put("/newsWebsocket/**", "anon");//CMS模块
        filterChainDefinitionMap.put("/vxeSocket/**", "anon");//JVxeTable无痕刷新示例
        //App vue3版本查询版本接口
        filterChainDefinitionMap.put("/sys/version/app3version", "anon");
        //仪表盘（按钮通信）
        filterChainDefinitionMap.put("/dragChannelSocket/**","anon");

//性能监控——安全隐患泄露TOEKN（durid连接池也有）
        //filterChainDefinitionMap.put("/actuator/**", "anon");
        //测试模块排除
        filterChainDefinitionMap.put("/test/seata/**", "anon");

//错误路径排除
        filterChainDefinitionMap.put("/error", "anon");
        // 企业微信证书排除
        filterChainDefinitionMap.put("/WW_verify*", "anon");

// 添加自己的过滤器并且取名为jwt
        Map<String, Filter> filterMap = new HashMap<String, Filter>(1);
        //如果cloudServer为空 则说明是单体 需要加载跨域配置【微服务跨域切换】
        Object cloudServer = env.getProperty(CommonConstant.CLOUD_SERVER_KEY);
        filterMap.put("jwt", new JwtFilter(cloudServer==null));
        shiroFilterFactoryBean.setFilters(filterMap);
        // <!-- 过滤链定义，从上向下顺序执行，一般将/**放在最为下边
        filterChainDefinitionMap.put("/**", "jwt");

// 未授权界面返回JSON
        shiroFilterFactoryBean.setUnauthorizedUrl("/sys/common/403");
        shiroFilterFactoryBean.setLoginUrl("/sys/common/403");
        shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);
        return shiroFilterFactoryBean;
    }

//update-begin---author:chenrui ---date:20240126  for：【QQYUN-7932】AI助手------------

/**
     * spring过滤装饰器 <br/>
     * 因为shiro的filter不支持异步请求,导致所有的异步请求都会报错. <br/>
     * 所以需要用spring的FilterRegistrationBean再代理一下shiro的filter.为他扩展异步支持. <br/>
     * 后续所有异步的接口都需要再这里增加registration.addUrlPatterns("/xxx/xxx");
     * @return
     * @author chenrui
     * @date 2024/12/3 19:49
     */
    @Bean
    public FilterRegistrationBean shiroFilterRegistration() {
        FilterRegistrationBean registration = new FilterRegistrationBean();
        registration.setFilter(new DelegatingFilterProxy("shiroFilterFactoryBean"));
        registration.setEnabled(true);
        //update-begin---author:chenrui ---date:20241202  for：[issues/7491]运行时间好长，效率慢 ------------
        registration.addUrlPatterns("/test/ai/chat/send");
        //update-end---author:chenrui ---date:20241202  for：[issues/7491]运行时间好长，效率慢 ------------
        registration.addUrlPatterns("/airag/flow/run");
        registration.addUrlPatterns("/airag/flow/debug");
        registration.addUrlPatterns("/airag/chat/send");
        registration.addUrlPatterns("/airag/app/debug");
        registration.addUrlPatterns("/airag/app/prompt/generate");
        //支持异步
        registration.setAsyncSupported(true);
        registration.setDispatcherTypes(DispatcherType.REQUEST, DispatcherType.ASYNC);
        return registration;
    }
    //update-end---author:chenrui ---date:20240126  for：【QQYUN-7932】AI助手------------

@Bean("securityManager")
    public DefaultWebSecurityManager securityManager(ShiroRealm myRealm) {
        DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
        securityManager.setRealm(myRealm);

/*
         * 关闭shiro自带的session，详情见文档
         * http://shiro.apache.org/session-management.html#SessionManagement-
         * StatelessApplications%28Sessionless%29
         */
        DefaultSubjectDAO subjectDAO = new DefaultSubjectDAO();
        DefaultSessionStorageEvaluator defaultSessionStorageEvaluator = new DefaultSessionStorageEvaluator();
        defaultSessionStorageEvaluator.setSessionStorageEnabled(false);
        subjectDAO.setSessionStorageEvaluator(defaultSessionStorageEvaluator);
        securityManager.setSubjectDAO(subjectDAO);
        //自定义缓存实现,使用redis
        securityManager.setCacheManager(redisCacheManager());
        return securityManager;
    }

/**
     * 下面的代码是添加注解支持
     * @return
     */
    @Bean
    @DependsOn("lifecycleBeanPostProcessor")
    public DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator() {
        DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator = new DefaultAdvisorAutoProxyCreator();
        defaultAdvisorAutoProxyCreator.setProxyTargetClass(true);
        /**
         * 解决重复代理问题 github#994
         * 添加前缀判断 不匹配 任何Advisor
         */
        defaultAdvisorAutoProxyCreator.setUsePrefix(true);
        defaultAdvisorAutoProxyCreator.setAdvisorBeanNamePrefix("_no_advisor");
        return defaultAdvisorAutoProxyCreator;
    }

@Bean
    public static LifecycleBeanPostProcessor lifecycleBeanPostProcessor() {
        return new LifecycleBeanPostProcessor();
    }

@Bean
    public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(DefaultWebSecurityManager securityManager) {
        AuthorizationAttributeSourceAdvisor advisor = new AuthorizationAttributeSourceAdvisor();
        advisor.setSecurityManager(securityManager);
        return advisor;
    }

/**
     * cacheManager 缓存 redis实现
     * 使用的是shiro-redis开源插件
     *
     * @return
     */
    public RedisCacheManager redisCacheManager() {
        log.info("===============(1)创建缓存管理器RedisCacheManager");
        RedisCacheManager redisCacheManager = new RedisCacheManager();
        redisCacheManager.setRedisManager(redisManager());
        //redis中针对不同用户缓存(此处的id需要对应user实体中的id字段,用于唯一标识)
        redisCacheManager.setPrincipalIdFieldName("id");
        //用户权限信息缓存时间
        redisCacheManager.setExpire(200000);
        return redisCacheManager;
    }

/**
     * RedisConfig在项目starter项目中
     * jeecg-boot-starter-github\jeecg-boot-common\src\main\java\org\jeecg\common\modules\redis\config\RedisConfig.java
     *
     * 配置shiro redisManager
     * 使用的是shiro-redis开源插件
     *
     * @return
     */
    @Bean
    public IRedisManager redisManager() {
        log.info("===============(2)创建RedisManager,连接Redis..");
        IRedisManager manager;
        // sentinel cluster redis（【issues/5569】shiro集成 redis 不支持 sentinel 方式部署的redis集群 #5569）
        if (Objects.nonNull(redisProperties)
                && Objects.nonNull(redisProperties.getSentinel())
                && !CollectionUtils.isEmpty(redisProperties.getSentinel().getNodes())) {
            RedisSentinelManager sentinelManager = new RedisSentinelManager();
            sentinelManager.setMasterName(redisProperties.getSentinel().getMaster());
            sentinelManager.setHost(String.join(",", redisProperties.getSentinel().getNodes()));
            sentinelManager.setPassword(redisProperties.getPassword());
            sentinelManager.setDatabase(redisProperties.getDatabase());

return sentinelManager;
        }

// redis 单机支持，在集群为空，或者集群无机器时候使用 add by jzyadmin@163.com
        if (lettuceConnectionFactory.getClusterConfiguration() == null || lettuceConnectionFactory.getClusterConfiguration().getClusterNodes().isEmpty()) {
            RedisManager redisManager = new RedisManager();
            redisManager.setHost(lettuceConnectionFactory.getHostName() + ":" + lettuceConnectionFactory.getPort());
            //(lettuceConnectionFactory.getPort());
            redisManager.setDatabase(lettuceConnectionFactory.getDatabase());
            redisManager.setTimeout(0);
            if (!StringUtils.isEmpty(lettuceConnectionFactory.getPassword())) {
                redisManager.setPassword(lettuceConnectionFactory.getPassword());
            }
            manager = redisManager;
        }else{
            // redis集群支持，优先使用集群配置
            RedisClusterManager redisManager = new RedisClusterManager();
            Set<HostAndPort> portSet = new HashSet<>();
            lettuceConnectionFactory.getClusterConfiguration().getClusterNodes().forEach(node -> portSet.add(new HostAndPort(node.getHost() , node.getPort())));
            //update-begin--Author:scott Date:20210531 for：修改集群模式下未设置redis密码的bug issues/I3QNIC
            if (oConvertUtils.isNotEmpty(lettuceConnectionFactory.getPassword())) {
                JedisCluster jedisCluster = new JedisCluster(portSet, 2000, 2000, 5,
                    lettuceConnectionFactory.getPassword(), new GenericObjectPoolConfig());
                redisManager.setPassword(lettuceConnectionFactory.getPassword());
                redisManager.setJedisCluster(jedisCluster);
            } else {
                JedisCluster jedisCluster = new JedisCluster(portSet);
                redisManager.setJedisCluster(jedisCluster);
            }
            //update-end--Author:scott Date:20210531 for：修改集群模式下未设置redis密码的bug issues/I3QNIC
            manager = redisManager;
        }
        return manager;
    }

/**
     * 解决 ShiroRequestMappingConfig 获取 requestMappingHandlerMapping Bean 冲突
     * spring-boot-autoconfigure:3.4.5 和 spring-boot-actuator-autoconfigure:3.4.5
     */
    @Primary
    @Bean
    public RequestMappingHandlerMapping overridedRequestMappingHandlerMapping() {
        RequestMappingHandlerMapping mapping = new RequestMappingHandlerMapping();
        mapping.setUrlPathHelper(new ShiroUrlPathHelper());
        return mapping;
    }

private List<String> rebuildUrl(String[] bases, String[] uris) {
        List<String> urls = new ArrayList<>();
        for (String base : bases) {
            for (String uri : uris) {
                urls.add(prefix(base)+prefix(uri));
            }
        }
        return urls;
    }

private String prefix(String seg) {
        return seg.startsWith("/") ? seg : "/"+seg;
    }

}

package org.jeecg.config.shiro;

import java.util.*;

/**
 * @author: Scott
 * @date: 2018/2/7
 * @description: shiro 配置类
 */

@Slf4j
@Configuration
@Role(BeanDefinition.ROLE_INFRASTRUCTURE)
public class ShiroConfig {

// 配置不会被拦截的链接 顺序判断
        filterChainDefinitionMap.put("/wx/thirdLogin/**", "anon");
        filterChainDefinitionMap.put("/service/**", "anon");
        filterChainDefinitionMap.put("/sys/cas/client/validateLogin", "anon"); //cas验证登录
        filterChainDefinitionMap.put("/sys/randomImage/**", "anon"); //登录验证码接口排除
        filterChainDefinitionMap.put("/sys/checkCaptcha", "anon"); //登录验证码接口排除
        filterChainDefinitionMap.put("/sys/smsCheckCaptcha", "anon"); //短信次数发送太多验证码排除
        filterChainDefinitionMap.put("/sys/login", "anon"); //登录接口排除
        filterChainDefinitionMap.put("/sys/mLogin", "anon"); //登录接口排除
        filterChainDefinitionMap.put("/sys/logout", "anon"); //登出接口排除
        filterChainDefinitionMap.put("/sys/thirdLogin/**", "anon"); //第三方登录
        filterChainDefinitionMap.put("/sys/getEncryptedString", "anon"); //获取加密串
        filterChainDefinitionMap.put("/sys/sms", "anon");//短信验证码
        filterChainDefinitionMap.put("/sys/phoneLogin", "anon");//手机登录
        filterChainDefinitionMap.put("/sys/user/checkOnlyUser", "anon");//校验用户是否存在
        filterChainDefinitionMap.put("/sys/user/register", "anon");//用户注册
        filterChainDefinitionMap.put("/sys/user/phoneVerification", "anon");//用户忘记密码验证手机号
        filterChainDefinitionMap.put("/sys/user/passwordChange", "anon");//用户更改密码
        filterChainDefinitionMap.put("/auth/2step-code", "anon");//登录验证码
        filterChainDefinitionMap.put("/sys/common/static/**", "anon");//图片预览 &下载文件不限制token
        filterChainDefinitionMap.put("/sys/common/pdf/**", "anon");//pdf预览

filterChainDefinitionMap.put("/jimubi/view", "anon");
        filterChainDefinitionMap.put("/jimubi/share/view/**", "anon");

//错误路径排除
        filterChainDefinitionMap.put("/error", "anon");
        // 企业微信证书排除
        filterChainDefinitionMap.put("/WW_verify*", "anon");

//update-begin---author:chenrui ---date:20240126  for：【QQYUN-7932】AI助手------------

@Bean
    public static LifecycleBeanPostProcessor lifecycleBeanPostProcessor() {
        return new LifecycleBeanPostProcessor();
    }

return sentinelManager;
        }

private String prefix(String seg) {
        return seg.startsWith("/") ? seg : "/"+seg;
    }

}

Ignore Space Show notes View jeecg-boot-module/jeecg-module-service/src/main/java/org/jeecg/modules/service/controller/GroupRecordController.java
package org.jeecg.modules.service.controller; import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper; import com.baomidou.mybatisplus.core.metadata.IPage; import com.baomidou.mybatisplus.extension.plugins.pagination.Page; import io.swagger.v3.oas.annotations.Operation; import io.swagger.v3.oas.annotations.tags.Tag; import jakarta.servlet.http.HttpServletRequest; import jakarta.servlet.http.HttpServletResponse; import lombok.extern.slf4j.Slf4j; import org.apache.commons.lang3.StringUtils; import org.apache.shiro.authz.annotation.RequiresPermissions; import org.jeecg.common.api.vo.Result; import org.jeecg.common.aspect.annotation.AutoLog; import org.jeecg.common.exception.JeecgBootException; import org.jeecg.common.system.base.controller.JeecgController; import org.jeecg.common.system.query.QueryGenerator; import org.jeecg.modules.service.dto.ReservationTimeDTO; import org.jeecg.modules.service.dto.SubmitReservationDTO; import org.jeecg.modules.service.entity.GroupRecord; import org.jeecg.modules.service.service.IGroupRecordService; import org.jeecg.modules.service.vo.CardApplicationVO; import org.jeecg.modules.service.vo.GroupRecordVO; import org.jeecg.modules.service.vo.ReservationSuccessVO; import org.jeecg.modules.system.entity.CardApplicationCustomers; import org.jeecg.modules.system.service.ICardApplicationCustomersService; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.web.bind.annotation.; import org.springframework.web.servlet.ModelAndView; import java.util.Arrays; import java.util.Date; import java.util.List; /* * @Description: 成团记录 * @Author: jeecg-boot * @Date: 2025-09-26 * @Version: V1.0 / @Tag(name="成团记录") @RestController @RequestMapping("/service/groupRecord") @Slf4j public class GroupRecordController extends JeecgController<GroupRecord, IGroupRecordService> { @Autowired private IGroupRecordService groupRecordService; @Autowired private ICardApplicationCustomersService cardApplicationCustomersService; /* * 获取当前操作人成团记录 * @param userId 操作人 * @return / @RequestMapping(value = "/getGroupRecordVO", method = RequestMethod.GET) public Result<GroupRecordVO> getGroupRecordVO(@RequestParam("userId") String userId){ if (StringUtils.isBlank(userId)){ throw new JeecgBootException("稍后重试"); } GroupRecordVO vo = groupRecordService.getGroupRecordVO(userId); return Result.OK(vo); } /* * 提交预约 * @return / @RequestMapping(value = "/submitReservation", method = RequestMethod.POST) public Result<ReservationSuccessVO> submitReservation(@RequestBody SubmitReservationDTO dto){ if (StringUtils.isBlank(dto.getType())){ return Result.error("预约类型不能为空"); } if (dto.getType().equals("0") && StringUtils.isBlank(dto.getDistributionCustomersId())){ return Result.error("分销客户id不能为空"); } if (dto.getType().equals("1") && StringUtils.isBlank(dto.getGroupId())){ return Result.error("成团id不能为空"); } if (StringUtils.isBlank(dto.getCardApplicationId())){ return Result.error("办卡客户id不能为空"); } ReservationSuccessVO vo = groupRecordService.submitReservation(dto); return Result.OK(vo); } /* * 修改预约时间 * @return / @RequestMapping(value = "/updateTime", method = RequestMethod.POST) public Result<String> updateTime(@RequestBody ReservationTimeDTO dto){ if (StringUtils.isBlank(dto.getId())){ return Result.error("预约id不能为空"); } if (dto.getReservationTime() == null){ return Result.error("预约时间不能为空"); } CardApplicationCustomers entry = cardApplicationCustomersService.getById(dto.getId()); if (entry == null){ return Result.error("预约单不存在"); } if (entry.getStatus().equals("2")){ return Result.error("该预约单已办卡"); } entry.setCardApplicationName(dto.getCardApplicationName()); entry.setCardApplicationPhone(dto.getCardApplicationPhone()); entry.setProvince(dto.getProvince()); entry.setCity(dto.getCity()); entry.setArea(dto.getArea()); entry.setAddress(dto.getAddress()); entry.setReservationTime(new Date(dto.getReservationTime())); cardApplicationCustomersService.updateById(entry); return Result.OK("预约时间修改成功！"); } /* * 获取成团预约列表 * 办卡晒单 * @return / @RequestMapping(value = "/cardApplicationList", method = RequestMethod.GET) public Result<List<CardApplicationVO>> cardApplicationList(@RequestParam("groupId") String groupId){ if (StringUtils.isBlank(groupId)){ return Result.error("团id不能为空"); } List<CardApplicationVO> list = groupRecordService.cardApplicationList(groupId); return Result.OK(list); } } package org.jeecg.modules.service.controller; import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper; import com.baomidou.mybatisplus.core.metadata.IPage; import com.baomidou.mybatisplus.extension.plugins.pagination.Page; import io.swagger.v3.oas.annotations.Operation; import io.swagger.v3.oas.annotations.tags.Tag; import jakarta.servlet.http.HttpServletRequest; import jakarta.servlet.http.HttpServletResponse; import lombok.extern.slf4j.Slf4j; import org.apache.commons.lang3.StringUtils; import org.apache.shiro.authz.annotation.RequiresPermissions; import org.jeecg.common.api.vo.Result; import org.jeecg.common.aspect.annotation.AutoLog; import org.jeecg.common.exception.JeecgBootException; import org.jeecg.common.system.base.controller.JeecgController; import org.jeecg.common.system.query.QueryGenerator; import org.jeecg.modules.service.dto.ReservationTimeDTO; import org.jeecg.modules.service.dto.SubmitReservationDTO; import org.jeecg.modules.service.entity.GroupRecord; import org.jeecg.modules.service.service.IGroupRecordService; import org.jeecg.modules.service.vo.CardApplicationVO; import org.jeecg.modules.service.vo.GroupRecordVO; import org.jeecg.modules.service.vo.ReservationSuccessVO; import org.jeecg.modules.system.entity.CardApplicationCustomers; import org.jeecg.modules.system.service.ICardApplicationCustomersService; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.web.bind.annotation.; import org.springframework.web.servlet.ModelAndView; import java.util.Arrays; import java.util.Date; import java.util.List; /** * @Description: 成团记录 * @Author: jeecg-boot * @Date: 2025-09-26 * @Version: V1.0 / @Tag(name="成团记录") @RestController @RequestMapping("/service/groupRecord") @Slf4j public class GroupRecordController extends JeecgController<GroupRecord, IGroupRecordService> { @Autowired private IGroupRecordService groupRecordService; @Autowired private ICardApplicationCustomersService cardApplicationCustomersService; /* * 获取当前操作人成团记录 * @param userId 操作人 * @return / @RequestMapping(value = "/getGroupRecordVO", method = RequestMethod.GET) public Result<GroupRecordVO> getGroupRecordVO(@RequestParam("userId") String userId){ if (StringUtils.isBlank(userId)){ throw new JeecgBootException("稍后重试"); } GroupRecordVO vo = groupRecordService.getGroupRecordVO(userId); return Result.OK(vo); } /* * 提交预约 * @return / @RequestMapping(value = "/submitReservation", method = RequestMethod.POST) public Result<ReservationSuccessVO> submitReservation(@RequestBody SubmitReservationDTO dto){ if (StringUtils.isBlank(dto.getType())){ return Result.error("预约类型不能为空"); } if (dto.getType().equals("0") && StringUtils.isBlank(dto.getDistributionCustomersId())){ return Result.error("分销客户id不能为空"); } if (dto.getType().equals("1") && StringUtils.isBlank(dto.getGroupId())){ return Result.error("成团id不能为空"); } if (StringUtils.isBlank(dto.getCardApplicationId())){ return Result.error("办卡客户id不能为空"); } ReservationSuccessVO vo = groupRecordService.submitReservation(dto); return Result.OK(vo); } /* * 修改预约时间 * @return / @RequestMapping(value = "/updateTime", method = RequestMethod.POST) public Result<String> updateTime(@RequestBody ReservationTimeDTO dto){ if (StringUtils.isBlank(dto.getId())){ return Result.error("预约id不能为空"); } if (dto.getReservationTime() == null){ return Result.error("预约时间不能为空"); } CardApplicationCustomers entry = cardApplicationCustomersService.getById(dto.getId()); if (entry == null){ return Result.error("预约单不存在"); } entry.setReservationTime(new Date(dto.getReservationTime())); cardApplicationCustomersService.updateById(entry); return Result.OK("预约时间修改成功！"); } /* * 获取成团预约列表 * 办卡晒单 * @return */ @RequestMapping(value = "/cardApplicationList", method = RequestMethod.GET) public Result<List<CardApplicationVO>> cardApplicationList(@RequestParam("groupId") String groupId){ if (StringUtils.isBlank(groupId)){ return Result.error("团id不能为空"); } List<CardApplicationVO> list = groupRecordService.cardApplicationList(groupId); return Result.OK(list); } }

Ignore Space Show notes View

jeecg-boot-module/jeecg-module-service/src/main/java/org/jeecg/modules/service/controller/GroupRecordController.java

package org.jeecg.modules.service.controller;

import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
import com.baomidou.mybatisplus.core.metadata.IPage;
import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
import io.swagger.v3.oas.annotations.Operation;
import io.swagger.v3.oas.annotations.tags.Tag;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang3.StringUtils;
import org.apache.shiro.authz.annotation.RequiresPermissions;
import org.jeecg.common.api.vo.Result;
import org.jeecg.common.aspect.annotation.AutoLog;
import org.jeecg.common.exception.JeecgBootException;
import org.jeecg.common.system.base.controller.JeecgController;
import org.jeecg.common.system.query.QueryGenerator;
import org.jeecg.modules.service.dto.ReservationTimeDTO;
import org.jeecg.modules.service.dto.SubmitReservationDTO;
import org.jeecg.modules.service.entity.GroupRecord;
import org.jeecg.modules.service.service.IGroupRecordService;
import org.jeecg.modules.service.vo.CardApplicationVO;
import org.jeecg.modules.service.vo.GroupRecordVO;
import org.jeecg.modules.service.vo.ReservationSuccessVO;
import org.jeecg.modules.system.entity.CardApplicationCustomers;
import org.jeecg.modules.system.service.ICardApplicationCustomersService;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.*;
import org.springframework.web.servlet.ModelAndView;

import java.util.Arrays;
import java.util.Date;
import java.util.List;

/**
 * @Description: 成团记录
 * @Author: jeecg-boot
 * @Date:   2025-09-26
 * @Version: V1.0
 */
@Tag(name="成团记录")
@RestController
@RequestMapping("/service/groupRecord")
@Slf4j
public class GroupRecordController extends JeecgController<GroupRecord, IGroupRecordService> {
    @Autowired
    private IGroupRecordService groupRecordService;
    @Autowired
    private ICardApplicationCustomersService cardApplicationCustomersService;

/**
     * 获取当前操作人成团记录
     * @param userId 操作人
     * @return
     */
    @RequestMapping(value = "/getGroupRecordVO", method = RequestMethod.GET)
    public Result<GroupRecordVO> getGroupRecordVO(@RequestParam("userId") String userId){
        if (StringUtils.isBlank(userId)){
            throw new JeecgBootException("稍后重试");
        }
        GroupRecordVO vo = groupRecordService.getGroupRecordVO(userId);
        return Result.OK(vo);
    }

/**
     * 提交预约
     * @return
     */
    @RequestMapping(value = "/submitReservation", method = RequestMethod.POST)
    public Result<ReservationSuccessVO> submitReservation(@RequestBody SubmitReservationDTO dto){
        if (StringUtils.isBlank(dto.getType())){
            return Result.error("预约类型不能为空");
        }
        if (dto.getType().equals("0") && StringUtils.isBlank(dto.getDistributionCustomersId())){
            return Result.error("分销客户id不能为空");
        }
        if (dto.getType().equals("1") && StringUtils.isBlank(dto.getGroupId())){
            return Result.error("成团id不能为空");
        }
        if (StringUtils.isBlank(dto.getCardApplicationId())){
            return Result.error("办卡客户id不能为空");
        }
        ReservationSuccessVO vo = groupRecordService.submitReservation(dto);
        return Result.OK(vo);
    }

/**
     * 修改预约时间
     * @return
     */
    @RequestMapping(value = "/updateTime", method = RequestMethod.POST)
    public Result<String> updateTime(@RequestBody ReservationTimeDTO dto){
        if (StringUtils.isBlank(dto.getId())){
            return Result.error("预约id不能为空");
        }
        if (dto.getReservationTime() == null){
            return Result.error("预约时间不能为空");
        }
        CardApplicationCustomers entry = cardApplicationCustomersService.getById(dto.getId());
        if (entry == null){
            return Result.error("预约单不存在");
        }
        if (entry.getStatus().equals("2")){
            return Result.error("该预约单已办卡");
        }
        entry.setCardApplicationName(dto.getCardApplicationName());
        entry.setCardApplicationPhone(dto.getCardApplicationPhone());
        entry.setProvince(dto.getProvince());
        entry.setCity(dto.getCity());
        entry.setArea(dto.getArea());
        entry.setAddress(dto.getAddress());
        entry.setReservationTime(new Date(dto.getReservationTime()));
        cardApplicationCustomersService.updateById(entry);
        return Result.OK("预约时间修改成功！");
    }

/**
     * 获取成团预约列表
     * 办卡晒单
     * @return
     */
    @RequestMapping(value = "/cardApplicationList", method = RequestMethod.GET)
    public Result<List<CardApplicationVO>> cardApplicationList(@RequestParam("groupId") String groupId){
        if (StringUtils.isBlank(groupId)){
            return Result.error("团id不能为空");
        }
        List<CardApplicationVO> list = groupRecordService.cardApplicationList(groupId);
        return Result.OK(list);
    }
}

package org.jeecg.modules.service.controller;

import java.util.Arrays;
import java.util.Date;
import java.util.List;

Ignore Space Show notes View jeecg-boot-module/jeecg-module-service/src/main/java/org/jeecg/modules/service/dto/ReservationTimeDTO.java
package org.jeecg.modules.service.dto; import lombok.Data; import java.io.Serializable; /** * @program: jeecg-boot * @description: * @author: Mr.Yang * @create: 2025-09-28 10:56 / @Data public class ReservationTimeDTO implements Serializable { / * 预约单id / private String id; /* * 预约时间 / private Long reservationTime; /* * 办卡客户姓名 / private String cardApplicationName; /* * 办卡客户手机号 / private String cardApplicationPhone; /* * 省 / private String province; /* * 市 / private String city; /* * 区 / private String area; /* * 详细地址 / private String address; } package org.jeecg.modules.service.dto; import lombok.Data; import java.io.Serializable; /* * @program: jeecg-boot * @description: * @author: Mr.Yang * @create: 2025-09-28 10:56 / @Data public class ReservationTimeDTO implements Serializable { / * 预约单id / private String id; /* * 预约时间 */ private Long reservationTime; }

Ignore Space Show notes View

jeecg-boot-module/jeecg-module-service/src/main/java/org/jeecg/modules/service/dto/ReservationTimeDTO.java

Ignore Space Show notes View jeecg-boot-module/jeecg-module-service/src/main/java/org/jeecg/modules/system/controller/CommissionRefundController.java
package org.jeecg.modules.system.controller; import cn.hutool.core.date.DateUtil; import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper; import com.baomidou.mybatisplus.core.metadata.IPage; import com.baomidou.mybatisplus.extension.plugins.pagination.Page; import io.swagger.v3.oas.annotations.Operation; import io.swagger.v3.oas.annotations.tags.Tag; import jakarta.servlet.http.HttpServletRequest; import jakarta.servlet.http.HttpServletResponse; import lombok.extern.slf4j.Slf4j; import org.apache.commons.lang3.StringUtils; import org.apache.shiro.authz.annotation.RequiresPermissions; import org.jeecg.common.api.vo.Result; import org.jeecg.common.aspect.annotation.AutoLog; import org.jeecg.common.system.base.controller.JeecgController; import org.jeecg.common.system.query.QueryGenerator; import org.jeecg.modules.system.dto.CommissionRefundUpdateDTO; import org.jeecg.modules.system.entity.CardDeliveryPerson; import org.jeecg.modules.system.entity.CommissionRefund; import org.jeecg.modules.system.service.ICommissionRefundService; import org.jeecg.modules.system.vo.CardDeliveryPersonVO; import org.jeecg.modules.system.vo.CommissionRefundVO; import org.springframework.beans.BeanUtils; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.web.bind.annotation.; import org.springframework.web.servlet.ModelAndView; import java.math.BigDecimal; import java.util.Arrays; import java.util.List; import java.util.stream.Collectors; /* * @Description: 佣金返还 * @Author: jeecg-boot * @Date: 2025-09-26 * @Version: V1.0 / @Tag(name="佣金返还") @RestController @RequestMapping("/system/commissionRefund") @Slf4j public class CommissionRefundController extends JeecgController<CommissionRefund, ICommissionRefundService> { @Autowired private ICommissionRefundService commissionRefundService; /* * 分页列表查询 * * @param commissionRefund * @param pageNo * @param pageSize * @param req * @return / // @Operation(summary="佣金返还-分页列表查询") @GetMapping(value = "/list") public Result<IPage<CommissionRefundVO>> queryPageList(CommissionRefund commissionRefund, @RequestParam(name="pageNo", defaultValue="1") Integer pageNo, @RequestParam(name="pageSize", defaultValue="10") Integer pageSize, HttpServletRequest req) { // 参数校验 if (pageNo <= 0) { pageNo = 1; } if (pageSize <= 0 \|\| pageSize > 100) { pageSize = 10; } try { // 构建查询条件 QueryWrapper<CommissionRefund> queryWrapper = QueryGenerator.initQueryWrapper(commissionRefund, req.getParameterMap()); // 分页查询 Page<CommissionRefund> page = new Page<>(pageNo, pageSize); IPage<CommissionRefund> pageList = commissionRefundService.page(page, queryWrapper); // 转换为VO对象 Page<CommissionRefundVO> voPage = new Page<>(pageList.getCurrent(), pageList.getSize(), pageList.getTotal()); List<CommissionRefundVO> voList = pageList.getRecords().stream().map(record -> { CommissionRefundVO vo = new CommissionRefundVO(); BeanUtils.copyProperties(record, vo); //处理时间 if (record.getRefundableTime() != null){ vo.setRefundableTime(DateUtil.format(record.getRefundableTime(), "yyyy-MM-dd HH:mm:ss")); } if (record.getCardAmountTime() != null){ vo.setCardAmountTime(DateUtil.format(record.getCardAmountTime(), "yyyy-MM-dd HH:mm:ss")); } if (record.getCardApplicationTime() != null){ vo.setCardApplicationTime(DateUtil.format(record.getCardApplicationTime(), "yyyy-MM-dd HH:mm:ss")); } if (record.getReservationTime() != null){ vo.setReservationTime(DateUtil.format(record.getReservationTime(), "yyyy-MM-dd HH:mm:ss")); } return vo; }).collect(Collectors.toList()); voPage.setRecords(voList); return Result.OK(voPage); } catch (Exception e) { log.error("查询佣金返还列表失败", e); return Result.error("查询失败：" + e.getMessage()); } } /* * 通过id查询 * * @param id * @return / //@AutoLog(value = "佣金返还-通过id查询") @Operation(summary="佣金返还-通过id查询") @GetMapping(value = "/queryById") public Result<CommissionRefund> queryById(@RequestParam(name="id",required=true) String id) { CommissionRefund commissionRefund = commissionRefundService.getById(id); if(commissionRefund==null) { return Result.error("未找到对应数据"); } return Result.OK(commissionRefund); } /* * 导出excel * * @param request * @param commissionRefund / @RequestMapping(value = "/exportXls") public ModelAndView exportXls(HttpServletRequest request, CommissionRefund commissionRefund) { return super.exportXls(request, commissionRefund, CommissionRefund.class, "佣金返还"); } /* * 更新各操作返利 * * @param dto * @return / @RequestMapping(value = "/updateAmount", method = RequestMethod.POST) public Result<String> updateAmount(@RequestBody CommissionRefundUpdateDTO dto) { if (StringUtils.isBlank(dto.getId())){ return Result.error("ID不能为空"); } if (dto.getAmount() == null){ return Result.error("金额不能为空"); } if (StringUtils.isBlank(dto.getOperationType())){ return Result.error("操作类型不能为空"); } commissionRefundService.updateAmount(dto); return Result.OK("操作成功"); } } package org.jeecg.modules.system.controller; import cn.hutool.core.date.DateUtil; import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper; import com.baomidou.mybatisplus.core.metadata.IPage; import com.baomidou.mybatisplus.extension.plugins.pagination.Page; import io.swagger.v3.oas.annotations.Operation; import io.swagger.v3.oas.annotations.tags.Tag; import jakarta.servlet.http.HttpServletRequest; import jakarta.servlet.http.HttpServletResponse; import lombok.extern.slf4j.Slf4j; import org.apache.commons.lang3.StringUtils; import org.apache.shiro.authz.annotation.RequiresPermissions; import org.jeecg.common.api.vo.Result; import org.jeecg.common.aspect.annotation.AutoLog; import org.jeecg.common.system.base.controller.JeecgController; import org.jeecg.common.system.query.QueryGenerator; import org.jeecg.modules.system.dto.CommissionRefundUpdateDTO; import org.jeecg.modules.system.entity.CardDeliveryPerson; import org.jeecg.modules.system.entity.CommissionRefund; import org.jeecg.modules.system.service.ICommissionRefundService; import org.jeecg.modules.system.vo.CardDeliveryPersonVO; import org.jeecg.modules.system.vo.CommissionRefundVO; import org.springframework.beans.BeanUtils; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.web.bind.annotation.; import org.springframework.web.servlet.ModelAndView; import java.math.BigDecimal; import java.util.Arrays; import java.util.List; import java.util.stream.Collectors; /** * @Description: 佣金返还 * @Author: jeecg-boot * @Date: 2025-09-26 * @Version: V1.0 / @Tag(name="佣金返还") @RestController @RequestMapping("/system/commissionRefund") @Slf4j public class CommissionRefundController extends JeecgController<CommissionRefund, ICommissionRefundService> { @Autowired private ICommissionRefundService commissionRefundService; /* * 分页列表查询 * * @param commissionRefund * @param pageNo * @param pageSize * @param req * @return / //@AutoLog(value = "佣金返还-分页列表查询") @Operation(summary="佣金返还-分页列表查询") @GetMapping(value = "/list") public Result<IPage<CommissionRefundVO>> queryPageList(CommissionRefund commissionRefund, @RequestParam(name="pageNo", defaultValue="1") Integer pageNo, @RequestParam(name="pageSize", defaultValue="10") Integer pageSize, HttpServletRequest req) { // 参数校验 if (pageNo <= 0) { pageNo = 1; } if (pageSize <= 0 \|\| pageSize > 100) { pageSize = 10; } try { // 构建查询条件 QueryWrapper<CommissionRefund> queryWrapper = QueryGenerator.initQueryWrapper(commissionRefund, req.getParameterMap()); // 分页查询 Page<CommissionRefund> page = new Page<>(pageNo, pageSize); IPage<CommissionRefund> pageList = commissionRefundService.page(page, queryWrapper); // 转换为VO对象 Page<CommissionRefundVO> voPage = new Page<>(pageList.getCurrent(), pageList.getSize(), pageList.getTotal()); List<CommissionRefundVO> voList = pageList.getRecords().stream().map(record -> { CommissionRefundVO vo = new CommissionRefundVO(); BeanUtils.copyProperties(record, vo); //处理时间 if (record.getRefundableTime() != null){ vo.setRefundableTime(DateUtil.format(record.getRefundableTime(), "yyyy-MM-dd HH:mm:ss")); } if (record.getCardAmountTime() != null){ vo.setCardAmountTime(DateUtil.format(record.getCardAmountTime(), "yyyy-MM-dd HH:mm:ss")); } if (record.getCardApplicationTime() != null){ vo.setCardApplicationTime(DateUtil.format(record.getCardApplicationTime(), "yyyy-MM-dd HH:mm:ss")); } if (record.getReservationTime() != null){ vo.setReservationTime(DateUtil.format(record.getReservationTime(), "yyyy-MM-dd HH:mm:ss")); } return vo; }).collect(Collectors.toList()); voPage.setRecords(voList); return Result.OK(voPage); } catch (Exception e) { log.error("查询佣金返还列表失败", e); return Result.error("查询失败：" + e.getMessage()); } } /* * 通过id查询 * * @param id * @return / //@AutoLog(value = "佣金返还-通过id查询") @Operation(summary="佣金返还-通过id查询") @GetMapping(value = "/queryById") public Result<CommissionRefund> queryById(@RequestParam(name="id",required=true) String id) { CommissionRefund commissionRefund = commissionRefundService.getById(id); if(commissionRefund==null) { return Result.error("未找到对应数据"); } return Result.OK(commissionRefund); } /* * 导出excel * * @param request * @param commissionRefund / @RequestMapping(value = "/exportXls") public ModelAndView exportXls(HttpServletRequest request, CommissionRefund commissionRefund) { return super.exportXls(request, commissionRefund, CommissionRefund.class, "佣金返还"); } /* * 更新各操作返利 * * @param dto * @return */ @RequestMapping(value = "/updateAmount", method = RequestMethod.POST) public Result<String> updateAmount(@RequestBody CommissionRefundUpdateDTO dto) { if (StringUtils.isBlank(dto.getId())){ return Result.error("ID不能为空"); } if (dto.getAmount() == null){ return Result.error("金额不能为空"); } if (StringUtils.isBlank(dto.getOperationType())){ return Result.error("操作类型不能为空"); } commissionRefundService.updateAmount(dto); return Result.OK("操作成功"); } }

Ignore Space Show notes View

jeecg-boot-module/jeecg-module-service/src/main/java/org/jeecg/modules/system/controller/CommissionRefundController.java

package org.jeecg.modules.system.controller;

import cn.hutool.core.date.DateUtil;
import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
import com.baomidou.mybatisplus.core.metadata.IPage;
import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
import io.swagger.v3.oas.annotations.Operation;
import io.swagger.v3.oas.annotations.tags.Tag;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang3.StringUtils;
import org.apache.shiro.authz.annotation.RequiresPermissions;
import org.jeecg.common.api.vo.Result;
import org.jeecg.common.aspect.annotation.AutoLog;
import org.jeecg.common.system.base.controller.JeecgController;
import org.jeecg.common.system.query.QueryGenerator;
import org.jeecg.modules.system.dto.CommissionRefundUpdateDTO;
import org.jeecg.modules.system.entity.CardDeliveryPerson;
import org.jeecg.modules.system.entity.CommissionRefund;
import org.jeecg.modules.system.service.ICommissionRefundService;
import org.jeecg.modules.system.vo.CardDeliveryPersonVO;
import org.jeecg.modules.system.vo.CommissionRefundVO;
import org.springframework.beans.BeanUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.*;
import org.springframework.web.servlet.ModelAndView;

import java.math.BigDecimal;
import java.util.Arrays;
import java.util.List;
import java.util.stream.Collectors;

/**
 * @Description: 佣金返还
 * @Author: jeecg-boot
 * @Date:   2025-09-26
 * @Version: V1.0
 */
@Tag(name="佣金返还")
@RestController
@RequestMapping("/system/commissionRefund")
@Slf4j
public class CommissionRefundController extends JeecgController<CommissionRefund, ICommissionRefundService> {
    @Autowired
    private ICommissionRefundService commissionRefundService;

/**
     * 分页列表查询
     *
     * @param commissionRefund
     * @param pageNo
     * @param pageSize
     * @param req
     * @return
     */
    //
    @Operation(summary="佣金返还-分页列表查询")
    @GetMapping(value = "/list")
    public Result<IPage<CommissionRefundVO>> queryPageList(CommissionRefund commissionRefund,
                                                           @RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
                                                           @RequestParam(name="pageSize", defaultValue="10") Integer pageSize,
                                                           HttpServletRequest req) {

// 参数校验
        if (pageNo <= 0) {
            pageNo = 1;
        }
        if (pageSize <= 0 || pageSize > 100) {
            pageSize = 10;
        }

try {
            // 构建查询条件
            QueryWrapper<CommissionRefund> queryWrapper = QueryGenerator.initQueryWrapper(commissionRefund, req.getParameterMap());

// 分页查询
            Page<CommissionRefund> page = new Page<>(pageNo, pageSize);
            IPage<CommissionRefund> pageList = commissionRefundService.page(page, queryWrapper);

// 转换为VO对象
            Page<CommissionRefundVO> voPage = new Page<>(pageList.getCurrent(), pageList.getSize(), pageList.getTotal());
            List<CommissionRefundVO> voList = pageList.getRecords().stream().map(record -> {
                CommissionRefundVO vo = new CommissionRefundVO();
                BeanUtils.copyProperties(record, vo);
                //处理时间
                if (record.getRefundableTime() != null){
                    vo.setRefundableTime(DateUtil.format(record.getRefundableTime(), "yyyy-MM-dd HH:mm:ss"));
                }
                if (record.getCardAmountTime() != null){
                    vo.setCardAmountTime(DateUtil.format(record.getCardAmountTime(), "yyyy-MM-dd HH:mm:ss"));
                }
                if (record.getCardApplicationTime() != null){
                    vo.setCardApplicationTime(DateUtil.format(record.getCardApplicationTime(), "yyyy-MM-dd HH:mm:ss"));
                }
                if (record.getReservationTime() != null){
                    vo.setReservationTime(DateUtil.format(record.getReservationTime(), "yyyy-MM-dd HH:mm:ss"));
                }
                return vo;
            }).collect(Collectors.toList());

voPage.setRecords(voList);

return Result.OK(voPage);
        } catch (Exception e) {
            log.error("查询佣金返还列表失败", e);
            return Result.error("查询失败：" + e.getMessage());
        }
    }

/**
     * 通过id查询
     *
     * @param id
     * @return
     */
    //@AutoLog(value = "佣金返还-通过id查询")
    @Operation(summary="佣金返还-通过id查询")
    @GetMapping(value = "/queryById")
    public Result<CommissionRefund> queryById(@RequestParam(name="id",required=true) String id) {
        CommissionRefund commissionRefund = commissionRefundService.getById(id);
        if(commissionRefund==null) {
            return Result.error("未找到对应数据");
        }
        return Result.OK(commissionRefund);
    }

/**
     * 导出excel
     *
     * @param request
     * @param commissionRefund
     */
    @RequestMapping(value = "/exportXls")
    public ModelAndView exportXls(HttpServletRequest request, CommissionRefund commissionRefund) {
        return super.exportXls(request, commissionRefund, CommissionRefund.class, "佣金返还");
    }

/**
     * 更新各操作返利
     *
     * @param dto
     * @return
     */
    @RequestMapping(value = "/updateAmount", method = RequestMethod.POST)
    public Result<String> updateAmount(@RequestBody CommissionRefundUpdateDTO dto) {
        if (StringUtils.isBlank(dto.getId())){
            return Result.error("ID不能为空");
        }
        if (dto.getAmount() == null){
            return Result.error("金额不能为空");
        }
        if (StringUtils.isBlank(dto.getOperationType())){
            return Result.error("操作类型不能为空");
        }
        commissionRefundService.updateAmount(dto);
        return Result.OK("操作成功");
    }
}

package org.jeecg.modules.system.controller;

import java.math.BigDecimal;
import java.util.Arrays;
import java.util.List;
import java.util.stream.Collectors;

/**
     * 分页列表查询
     *
     * @param commissionRefund
     * @param pageNo
     * @param pageSize
     * @param req
     * @return
     */
    //@AutoLog(value = "佣金返还-分页列表查询")
    @Operation(summary="佣金返还-分页列表查询")
    @GetMapping(value = "/list")
    public Result<IPage<CommissionRefundVO>> queryPageList(CommissionRefund commissionRefund,
                                                           @RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
                                                           @RequestParam(name="pageSize", defaultValue="10") Integer pageSize,
                                                           HttpServletRequest req) {

// 参数校验
        if (pageNo <= 0) {
            pageNo = 1;
        }
        if (pageSize <= 0 || pageSize > 100) {
            pageSize = 10;
        }

try {
            // 构建查询条件
            QueryWrapper<CommissionRefund> queryWrapper = QueryGenerator.initQueryWrapper(commissionRefund, req.getParameterMap());

// 分页查询
            Page<CommissionRefund> page = new Page<>(pageNo, pageSize);
            IPage<CommissionRefund> pageList = commissionRefundService.page(page, queryWrapper);

voPage.setRecords(voList);

Show line notes below