init

src/main/java/com/newyetai/security/ssb/SsbAuthenticationProvider.java

@@ -0,0 +1,71 @@
+package com.newyetai.security.ssb;
+
+import java.util.HashSet;
+import java.util.Set;
+
+import org.springframework.security.authentication.AuthenticationProvider;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.userdetails.UserDetails;
+
+import com.newyetai.common.exception.util.Assert;
+import com.newyetai.common.util.JsonUtils;
+import com.newyetai.common.validation.util.ValidateUtils;
+import com.newyetai.security.dto.SecurityUserDTO;
+import com.newyetai.security.expection.BadLoginException;
+import com.newyetai.security.mapstruct.UserMapMapper;
+import com.newyetai.usercenter.user.login.dto.LoginUsernamePasswordDTO;
+import com.newyetai.usercenter.user.login.dto.UserDetailDTO;
+import com.newyetai.usercenter.user.login.service.UserLoginService;
+
+import lombok.extern.slf4j.Slf4j;
+
+/**
+ * 账号密码认证provider，比对信息是否匹配
+ * 
+ * @author sr on 2021-06-21 
+ */
+@Slf4j
+public class SsbAuthenticationProvider implements AuthenticationProvider {
+
+  private UserLoginService userLoginService;
+
+  public SsbAuthenticationProvider(UserLoginService userLoginService) {
+    this.userLoginService = userLoginService;
+  }
+
+  @Override
+  public Authentication authenticate(Authentication authentication) throws AuthenticationException {
+    SsbLoginDTO ssbLoginDTO =
+        (SsbLoginDTO) authentication.getPrincipal();
+    log.info("ssb login req:{}", JsonUtils.toJsonString(ssbLoginDTO));
+    String errMsg = ValidateUtils.validate(ssbLoginDTO);
+    Assert.isTrue(errMsg == null, new BadLoginException(errMsg));
+    SecurityUserDTO loadedUser = null;
+    try {
+      UserDetailDTO userDetailDTO = this.userLoginService.loadUser(ssbLoginDTO);
+      loadedUser = UserMapMapper.INSTANCE.dtoToDto(userDetailDTO);
+    } catch (BadLoginException be) {
+      throw be;
+    } catch (Exception e) {
+      throw new BadLoginException(e.getMessage(), e);
+    }
+
+    SsbAuthenticationToken result =
+        new SsbAuthenticationToken(loadedUser, listUserGrantedAuthorities(loadedUser));
+    result.setDetails(authentication.getDetails());
+    return result;
+  }
+
+  @Override
+  public boolean supports(Class<?> authentication) {
+    return (SsbAuthenticationToken.class.isAssignableFrom(authentication));
+  }
+
+  private Set<GrantedAuthority> listUserGrantedAuthorities(UserDetails userDetails) {
+    // 什么都不用做，访问资源鉴权的时会拿userDetail去缓存获取对应权限
+    return new HashSet<GrantedAuthority>();
+  }
+
+}