|
@@ -1,33 +1,29 @@
|
|
|
package com.ym.mec.auth.core.filter;
|
|
|
|
|
|
-import java.io.IOException;
|
|
|
-
|
|
|
-import javax.servlet.FilterChain;
|
|
|
-import javax.servlet.ServletException;
|
|
|
-import javax.servlet.http.HttpServletRequest;
|
|
|
-import javax.servlet.http.HttpServletResponse;
|
|
|
-
|
|
|
+import com.ym.mec.auth.api.dto.SysUserInfo;
|
|
|
+import com.ym.mec.auth.api.enums.SysUserType;
|
|
|
+import com.ym.mec.auth.config.token.PhoneAuthenticationToken;
|
|
|
+import com.ym.mec.auth.service.SysUserService;
|
|
|
+import com.ym.mec.common.security.SecurityConstants;
|
|
|
import org.apache.commons.lang3.StringUtils;
|
|
|
import org.springframework.security.authentication.AbstractAuthenticationToken;
|
|
|
import org.springframework.security.authentication.AuthenticationServiceException;
|
|
|
import org.springframework.security.authentication.LockedException;
|
|
|
import org.springframework.security.core.Authentication;
|
|
|
import org.springframework.security.core.AuthenticationException;
|
|
|
-import org.springframework.security.core.userdetails.UsernameNotFoundException;
|
|
|
import org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter;
|
|
|
import org.springframework.security.web.util.matcher.AntPathRequestMatcher;
|
|
|
|
|
|
-import com.ym.mec.auth.api.dto.SysUserInfo;
|
|
|
-import com.ym.mec.auth.api.enums.SysUserType;
|
|
|
-import com.ym.mec.auth.config.token.PhoneAuthenticationToken;
|
|
|
-import com.ym.mec.auth.service.SysUserService;
|
|
|
-import com.ym.mec.common.security.SecurityConstants;
|
|
|
+import javax.servlet.FilterChain;
|
|
|
+import javax.servlet.ServletException;
|
|
|
+import javax.servlet.http.HttpServletRequest;
|
|
|
+import javax.servlet.http.HttpServletResponse;
|
|
|
+import java.io.IOException;
|
|
|
|
|
|
public class PhoneLoginAuthenticationFilter extends AbstractAuthenticationProcessingFilter {
|
|
|
|
|
|
private static final String SPRING_SECURITY_RESTFUL_PHONE_KEY = "phone";
|
|
|
private static final String SPRING_SECURITY_RESTFUL_VERIFY_CODE_KEY = "smsCode";
|
|
|
- private static final String SPRING_SECURITY_RESTFUL_CHANNEL_KEY = "channel";
|
|
|
private static final String clientIdParameter = "clientId";
|
|
|
|
|
|
private static final String SPRING_SECURITY_RESTFUL_LOGIN_URL = "/smsLogin";
|
|
@@ -49,12 +45,11 @@ public class PhoneLoginAuthenticationFilter extends AbstractAuthenticationProces
|
|
|
// 手机验证码登陆
|
|
|
String principal = obtainParameter(request, SPRING_SECURITY_RESTFUL_PHONE_KEY);
|
|
|
String credentials = obtainParameter(request, SPRING_SECURITY_RESTFUL_VERIFY_CODE_KEY);
|
|
|
- String channel = obtainParameter(request, SPRING_SECURITY_RESTFUL_CHANNEL_KEY);
|
|
|
|
|
|
SysUserInfo userInfo = sysUserService.queryUserInfoByPhone(principal);
|
|
|
|
|
|
String clientId = request.getParameter(clientIdParameter);
|
|
|
- if ("H5".equals(channel) && userInfo == null) {
|
|
|
+ if (userInfo == null) {
|
|
|
userInfo = sysUserService.initUser(principal,clientId);
|
|
|
}
|
|
|
|