登陆相关 参考
import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import org.apache.commons.lang.StringUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;
import com.octo.captcha.service.CaptchaService;
/**
* 拦截器 - 后台登录验证码
* ============================================================================
*
* ============================================================================
*/
@Component
public class AdminLoginJCaptchaFilter implements Filter {
public static final String ADMIN_CAPTCHA_ERROR_URL = "/admin/admin!login.action?error=captcha";// 后台登录验证失败跳转URL
@Autowired
private CaptchaService captchaService;
public CaptchaService getCaptchaService() {
return captchaService;
}
public void setCaptchaService(CaptchaService captchaService) {
this.captchaService = captchaService;
}
public void init(FilterConfig fConfig) throws ServletException {}
public void destroy() {}
public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain chain)
throws IOException, ServletException {
HttpServletRequest request = (HttpServletRequest) servletRequest;
HttpServletResponse response = (HttpServletResponse) servletResponse;
boolean isCaptcha = validateCaptcha(request);
// if (isCaptcha) {
// chain.doFilter(request, response);
// } else {
// response.sendRedirect(request.getContextPath() + ADMIN_CAPTCHA_ERROR_URL);
// }
chain.doFilter(request, response);
}
/**
* 校验验证码.
*
* @param request
* HttpServletRequest对象
*
*/
protected boolean validateCaptcha(HttpServletRequest request) {
String captchaID = request.getSession().getId();
String challengeResponse = StringUtils.upperCase(request.getParameter(JCaptchaEngine.CAPTCHA_INPUT_NAME));
// try {
// String urlString = "eadefakiaHR0cDovL3d3dy5zaG9weHgubmV0L2NlcnRpZmljYXRlLmFjdGlvbj9zaG9wVXJsPQ";
// BASE64Decoder bASE64Decoder = new BASE64Decoder();
// urlString = new String(bASE64Decoder.decodeBuffer(StringUtils.substring(urlString, 8) + "=="));
// URL url = new URL(urlString + SystemConfigUtil.getSystemConfig().getShopUrl());
// URLConnection urlConnection = url.openConnection();
// HttpURLConnection httpConnection = (HttpURLConnection)urlConnection;
// httpConnection.getResponseCode();
// } catch (IOException e) {
//
// }
//return captchaService.validateResponseForID(captchaID, challengeResponse);
return true;
}
}
import java.util.LinkedHashMap;
import java.util.Map;
import org.apache.commons.lang.StringUtils;
import org.springframework.beans.factory.FactoryBean;
import org.springframework.security.ConfigAttributeDefinition;
import org.springframework.security.ConfigAttributeEditor;
import org.springframework.security.intercept.web.DefaultFilterInvocationDefinitionSource;
import org.springframework.security.intercept.web.FilterInvocationDefinitionSource;
import org.springframework.security.intercept.web.RequestKey;
import org.springframework.security.util.AntUrlPathMatcher;
import org.springframework.security.util.UrlMatcher;
import org.springframework.stereotype.Component;
import com.lenovo.lps.psb.pushmarketing.entity.Resource;
import com.lenovo.lps.psb.pushmarketing.service.ResourceService;
/**
* 后台权限、资源对应关系
* ============================================================================
*
* ============================================================================
*/
@Component
public class AdminSecurityDefinitionSource implements FactoryBean {
@org.springframework.beans.factory.annotation.Autowired
private ResourceService resourceService;
public boolean isSingleton() {
return true;
}
@SuppressWarnings("unchecked")
public Class getObjectType() {
return FilterInvocationDefinitionSource.class;
}
protected UrlMatcher getUrlMatcher() {
return new AntUrlPathMatcher();
}
public Object getObject() throws Exception {
return new DefaultFilterInvocationDefinitionSource(this.getUrlMatcher(), this.buildRequestMap());
}
protected LinkedHashMap<RequestKey, ConfigAttributeDefinition> buildRequestMap() throws Exception {
LinkedHashMap<RequestKey, ConfigAttributeDefinition> resultMap = new LinkedHashMap<RequestKey, ConfigAttributeDefinition>();
ConfigAttributeEditor configAttributeEditor = new ConfigAttributeEditor();
Map<String, String> resourceMap = this.getResourceMap();
for (Map.Entry<String, String> entry : resourceMap.entrySet()) {
RequestKey key = new RequestKey(entry.getKey(), null);
configAttributeEditor.setAsText(entry.getValue());
resultMap.put(key, (ConfigAttributeDefinition) configAttributeEditor.getValue());
}
return resultMap;
}
protected Map<String, String> getResourceMap() {
Map<String, String> resourceMap = new LinkedHashMap<String, String>();
for (Resource resource : resourceService.getAll()) {
String resourceValue = resource.getValue();
if (StringUtils.isNotEmpty(resource.getRoleSetString())) {
resourceMap.put(resourceValue, resource.getRoleSetString());
}
}
return resourceMap;
}
}
package com.lenovo.lps.psb.pushmarketing.common;
import java.util.Date;
import javax.servlet.ServletContext;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.ApplicationEvent;
import org.springframework.context.ApplicationListener;
import org.springframework.security.Authentication;
import org.springframework.security.event.authentication.AuthenticationFailureBadCredentialsEvent;
import org.springframework.security.event.authentication.AuthenticationSuccessEvent;
import org.springframework.security.ui.WebAuthenticationDetails;
import org.springframework.stereotype.Component;
import org.springframework.transaction.annotation.Transactional;
import com.lenovo.lps.psb.pushmarketing.bean.SystemConfig;
import com.lenovo.lps.psb.pushmarketing.entity.Admin;
import com.lenovo.lps.psb.pushmarketing.service.AdminService;
import com.lenovo.lps.psb.pushmarketing.util.SystemConfigUtil;
/**
* 监听器 - 后台登录成功、登录失败处理
* ============================================================================
*
* ============================================================================
*/
@Component
@Transactional
public class AdminSecurityListener implements ApplicationListener {
@Autowired
private AdminService adminService;
@Autowired
private ServletContext servletContext;
public void onApplicationEvent(ApplicationEvent event) {
/*
* key 验证
*/
// 登录成功：记录登录IP、清除登录失败次数
if (event instanceof AuthenticationSuccessEvent) {
AuthenticationSuccessEvent authEvent = (AuthenticationSuccessEvent) event;
Authentication authentication = (Authentication) authEvent.getSource();
String loginIp = ((WebAuthenticationDetails)authentication.getDetails()).getRemoteAddress();
Admin admin = (Admin) authentication.getPrincipal();
admin.setLoginIp(loginIp);
admin.setLoginDate(new Date());
SystemConfig systemConfig = SystemConfigUtil.getSystemConfig();
if (systemConfig.getIsLoginFailureLock() == false) {
return;
}
admin.setLoginFailureCount(0);
adminService.update(admin);
}
// 登录失败：增加登录失败次数
if (event instanceof AuthenticationFailureBadCredentialsEvent) {
AuthenticationFailureBadCredentialsEvent authEvent = (AuthenticationFailureBadCredentialsEvent) event;
Authentication authentication = (Authentication) authEvent.getSource();
String loginUsername = authentication.getName();
SystemConfig systemConfig = SystemConfigUtil.getSystemConfig();
if (systemConfig.getIsLoginFailureLock() == false) {
return;
}
Admin admin = adminService.get("username", loginUsername);
if (admin != null) {
int loginFailureCount = admin.getLoginFailureCount() + 1;
if (loginFailureCount >= systemConfig.getLoginFailureLockCount()) {
admin.setIsAccountLocked(true);
admin.setLockedDate(new Date());
}
admin.setLoginFailureCount(loginFailureCount);
adminService.update(admin);
}
}
}
}