用户登录实现

package nexus.io.mosskb.controller;

import com.jfinal.kit.Kv;

import nexus.io.annotation.RequestPath;
import nexus.io.model.result.ResultVo;

@RequestPath("/api/profile")
public class ApiProfileController {

  @RequestPath
  public ResultVo index() {
    Kv data = Kv.by("version", "v1.5.1 (build at 2024-08-29T17:29, commit: 30b1bdfe)");
    // 将IS_XPACK和XPACK_LICENSE_IS_VALID设置为true,前端将不在提示 创建应用的是的数量限制
    data.set("IS_XPACK", false).set("XPACK_LICENSE_IS_VALID", false).set("captcha_enabled", false);
    return ResultVo.ok(data);
  }
}

String secretKey = TioAdminEnvUtils.getAdminSecretKey();

package nexus.io.mosskb.controller;

import java.util.ArrayList;
import java.util.List;

import com.jfinal.kit.Kv;

import nexus.io.annotation.Get;
import nexus.io.annotation.RequestPath;
import nexus.io.jfinal.aop.Aop;
import nexus.io.mosskb.service.KbUserService;
import nexus.io.mosskb.vo.UserLoginReqVo;
import nexus.io.model.result.ResultVo;
import nexus.io.tio.boot.http.TioRequestContext;

@RequestPath("/api/user")
public class ApiUserController {

  @RequestPath
  public ResultVo index() {
    Long id = TioRequestContext.getUserIdLong();
    return Aop.get(KbUserService.class).index(id);
  }

  public ResultVo login(UserLoginReqVo vo) {
    return Aop.get(KbUserService.class).login(vo);
  }

  public ResultVo logout() {
    Long userId = TioRequestContext.getUserIdLong();
    return Aop.get(KbUserService.class).logout(userId);
  }

  @Get("/list/APPLICATION")
  public ResultVo listApplication() {
    List<Kv> kvs = new ArrayList<>();
//    kvs.add(Kv.by("username", "all").set("id", "1"));
//    kvs.add(Kv.by("username", "type").set("id", "2"));
    return ResultVo.ok(kvs);
  }

  @Get("/list/DATASET")
  public ResultVo listDATASET() {
    List<Kv> kvs = new ArrayList<>();
    return ResultVo.ok(kvs);
  }

  @Get("/list/FUNCTION")
  public ResultVo listFUNCTION() {
    List<Kv> kvs = new ArrayList<>();
    return ResultVo.ok(kvs);
  }
}

package nexus.io.mosskb.service;

import java.util.List;

import com.jfinal.kit.Kv;

import nexus.io.db.TableInput;
import nexus.io.db.TableResult;
import nexus.io.db.activerecord.Db;
import nexus.io.db.activerecord.Row;
import nexus.io.jfinal.aop.Aop;
import nexus.io.kit.RowUtils;
import nexus.io.mosskb.constant.MossKbTableNames;
import nexus.io.mosskb.vo.ResultPage;
import nexus.io.mosskb.vo.UserLoginReqVo;
import nexus.io.model.page.Page;
import nexus.io.model.result.ResultVo;
import nexus.io.table.services.ApiTable;
import nexus.io.tio.boot.admin.utils.TioAdminEnvUtils;
import nexus.io.tio.utils.crypto.Md5Utils;
import nexus.io.tio.utils.jwt.JwtUtils;
import nexus.io.tio.utils.token.TokenManager;

public class KbUserService {

  public ResultVo login(UserLoginReqVo vo) {
    if (vo == null || vo.getUsername() == null || vo.getPassword() == null) {
      return ResultVo.fail("用户名或者密码不正确");
    }
    Row account = Db.findFirst("select id,password,token_version from moss_kb_user where username=? and is_active=true and deleted=0", vo.getUsername());
    if (account == null || !UserPassword.matches(vo.getPassword(), account.getStr("password"))) {
      return ResultVo.fail("用户名或者密码不正确");
    }
    Long userId = account.getLong("id");
    String SECRET_KEY = TioAdminEnvUtils.getAdminSecretKey();
    String token = JwtUtils.createToken(SECRET_KEY, java.util.Map.of("userId", userId, "exp", System.currentTimeMillis() / 1000 + 3600, "token_version", account.getLong("token_version")));
    TokenManager.login(userId, token);
    return ResultVo.ok("成功", token);
  }

  public ResultVo index(Long userId) {
    String sql = String.format("select id,username,email,phone,nick_name,role from %s where id=?", MossKbTableNames.moss_kb_user);
    Row record = Db.findFirst(sql, userId);
    Kv kv = record.toKv();
    List<String> permissions = Aop.get(PermissionsService.class).getPermissionsByRole(kv.getStr("role"), userId);
    kv.set("permissions", permissions);
    return ResultVo.ok(kv);
  }

  public ResultVo logout(Long userId) {
    TokenManager.logout(userId);
    return ResultVo.ok();
  }

  public ResultVo page(Integer pageNo, Integer pageSize) {
    return page(pageNo, pageSize, null);
  }

  public ResultVo page(Integer pageNo, Integer pageSize, String search) {
    pageNo = Math.max(1, pageNo == null ? 1 : pageNo);
    pageSize = Math.max(1, Math.min(100, pageSize == null ? 20 : pageSize));
    String term = "%" + (search == null ? "" : search) + "%";
    String where = " where deleted=0 and (username ilike ? or email ilike ?)";
    long total = Db.queryLong("select count(*) from moss_kb_user" + where, term, term);
    List<Row> rows = Db.find("select id,username,email,phone,is_active,role,nick_name,create_time,update_time,source from moss_kb_user" + where + " order by create_time desc limit ? offset ?", term, term, pageSize, (long) (pageNo - 1) * pageSize);
    return ResultVo.ok(new ResultPage<Kv>(pageNo, pageSize, (int) total, RowUtils.toKv(rows, false)));
  }
}

package nexus.io.mosskb.service;

import java.security.MessageDigest;
import java.security.SecureRandom;
import java.util.Base64;
import javax.crypto.SecretKeyFactory;
import javax.crypto.spec.PBEKeySpec;
import nexus.io.tio.utils.crypto.Md5Utils;

public final class UserPassword {
  private UserPassword() { }
  public static String hash(String password) {
    byte[] salt = new byte[16];
    new SecureRandom().nextBytes(salt);
    return "pbkdf2$210000$" + Base64.getEncoder().encodeToString(salt) + "$"
        + Base64.getEncoder().encodeToString(derive(password, salt, 210000));
  }
  public static boolean matches(String password, String stored) {
    if (password == null || stored == null) {
      return false;
    }
    try {
      if (!stored.startsWith("pbkdf2$")) {
        return MessageDigest.isEqual(Md5Utils.md5Hex(password).getBytes(java.nio.charset.StandardCharsets.UTF_8), stored.getBytes(java.nio.charset.StandardCharsets.UTF_8));
      }
      String[] parts = stored.split("\\$");
      int rounds = Integer.parseInt(parts[1]);
      if (parts.length != 4 || rounds < 10000 || rounds > 1000000) {
        return false;
      }
      return MessageDigest.isEqual(derive(password, Base64.getDecoder().decode(parts[2]), rounds), Base64.getDecoder().decode(parts[3]));
    } catch (RuntimeException e) {
      return false;
    }
  }
  private static byte[] derive(String password, byte[] salt, int rounds) {
    PBEKeySpec spec = new PBEKeySpec(password.toCharArray(), salt, rounds, 256);
    try {
      return SecretKeyFactory.getInstance("PBKDF2WithHmacSHA256").generateSecret(spec).getEncoded();
    } catch (java.security.GeneralSecurityException e) {
      throw new IllegalStateException("Password hashing unavailable", e);
    } finally {
      spec.clearPassword();
    }
  }
}