|
|
@ -1,9 +1,15 @@ |
|
|
|
package com.ruoyi.common.utils; |
|
|
|
|
|
|
|
import java.util.Collection; |
|
|
|
import java.util.List; |
|
|
|
import java.util.stream.Collectors; |
|
|
|
import org.springframework.security.core.Authentication; |
|
|
|
import org.springframework.security.core.context.SecurityContextHolder; |
|
|
|
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; |
|
|
|
import org.springframework.util.PatternMatchUtils; |
|
|
|
import com.ruoyi.common.constant.Constants; |
|
|
|
import com.ruoyi.common.constant.HttpStatus; |
|
|
|
import com.ruoyi.common.core.domain.entity.SysRole; |
|
|
|
import com.ruoyi.common.core.domain.model.LoginUser; |
|
|
|
import com.ruoyi.common.exception.ServiceException; |
|
|
|
|
|
|
@ -14,6 +20,7 @@ import com.ruoyi.common.exception.ServiceException; |
|
|
|
*/ |
|
|
|
public class SecurityUtils |
|
|
|
{ |
|
|
|
|
|
|
|
/** |
|
|
|
* 用户ID |
|
|
|
**/ |
|
|
@ -43,7 +50,7 @@ public class SecurityUtils |
|
|
|
throw new ServiceException("获取部门ID异常", HttpStatus.UNAUTHORIZED); |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
/** |
|
|
|
* 获取用户账户 |
|
|
|
**/ |
|
|
@ -117,4 +124,55 @@ public class SecurityUtils |
|
|
|
{ |
|
|
|
return userId != null && 1L == userId; |
|
|
|
} |
|
|
|
|
|
|
|
/** |
|
|
|
* 验证用户是否具备某权限 |
|
|
|
* |
|
|
|
* @param permission 权限字符串 |
|
|
|
* @return 用户是否具备某权限 |
|
|
|
*/ |
|
|
|
public static boolean hasPermi(String permission) |
|
|
|
{ |
|
|
|
return hasPermi(getLoginUser().getPermissions(), permission); |
|
|
|
} |
|
|
|
|
|
|
|
/** |
|
|
|
* 判断是否包含权限 |
|
|
|
* |
|
|
|
* @param authorities 权限列表 |
|
|
|
* @param permission 权限字符串 |
|
|
|
* @return 用户是否具备某权限 |
|
|
|
*/ |
|
|
|
public static boolean hasPermi(Collection<String> authorities, String permission) |
|
|
|
{ |
|
|
|
return authorities.stream().filter(StringUtils::hasText) |
|
|
|
.anyMatch(x -> Constants.ALL_PERMISSION.equals(x) || PatternMatchUtils.simpleMatch(x, permission)); |
|
|
|
} |
|
|
|
|
|
|
|
/** |
|
|
|
* 验证用户是否拥有某个角色 |
|
|
|
* |
|
|
|
* @param role 角色标识 |
|
|
|
* @return 用户是否具备某角色 |
|
|
|
*/ |
|
|
|
public static boolean hasRole(String role) |
|
|
|
{ |
|
|
|
List<SysRole> roleList = getLoginUser().getUser().getRoles(); |
|
|
|
Collection<String> roles = roleList.stream().map(SysRole::getRoleKey).collect(Collectors.toSet()); |
|
|
|
return hasRole(roles, role); |
|
|
|
} |
|
|
|
|
|
|
|
/** |
|
|
|
* 判断是否包含角色 |
|
|
|
* |
|
|
|
* @param roles 角色列表 |
|
|
|
* @param role 角色 |
|
|
|
* @return 用户是否具备某角色权限 |
|
|
|
*/ |
|
|
|
public static boolean hasRole(Collection<String> roles, String role) |
|
|
|
{ |
|
|
|
return roles.stream().filter(StringUtils::hasText) |
|
|
|
.anyMatch(x -> Constants.SUPER_ADMIN.equals(x) || PatternMatchUtils.simpleMatch(x, role)); |
|
|
|
} |
|
|
|
|
|
|
|
} |
|
|
|