package com.xmomen.module.wb.controller;
import java.util.ArrayList;
import java.util.Date;
import java.util.HashMap;
import java.util.Map;
import javax.servlet.http.HttpServletRequest;
import javax.validation.Valid;
import org.apache.commons.lang3.StringUtils;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.DisabledAccountException;
import org.apache.shiro.authc.IncorrectCredentialsException;
import org.apache.shiro.authc.UnknownAccountException;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.http.HttpStatus;
import org.springframework.http.ResponseEntity;
import org.springframework.ui.Model;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.RequestParam;
import org.springframework.web.bind.annotation.RestController;
import com.xmomen.framework.exception.BusinessException;
import com.xmomen.framework.web.rest.RestError;
import com.xmomen.module.base.entity.CdMember;
import com.xmomen.module.base.model.CreateMember;
import com.xmomen.module.base.service.MemberService;
import com.xmomen.module.core.web.filter.FormAuthenticationFilterExt;
import com.xmomen.module.member.model.MemberAddressCreate;
import com.xmomen.module.sms.api.SmsMessageService;
import com.xmomen.module.sms.api.SmsResponse;
import com.xmomen.module.sms.model.IdentifyCodeModel;
import com.xmomen.module.sms.util.GlobalIdentifyCodeManager;
import com.xmomen.module.wb.model.PcMember;
import com.xmomen.module.wb.model.PcUpdatePasswordModel;
import com.xmomen.module.wx.pay.common.RandomStringGenerator;
@RestController
public class CommonMemberController extends PcBaseController{
@Autowired
MemberService memberService;
@Autowired
SmsMessageService smsMessageService;
/**
* 普通用户注册
*/
@RequestMapping(value = "/member/register", method = RequestMethod.POST)
public CdMember register(@RequestBody @Valid PcMember createPcMember) throws BusinessException {
CreateMember createMember = new CreateMember();
createMember.setPhoneNumber(createPcMember.getPhoneNumber());
createMember.setPassword(createPcMember.getPassword());
createMember.setMemberAddressList(new ArrayList<MemberAddressCreate>());
createMember.setEmail(createPcMember.getEmail());
String phoneNumber = createPcMember.getPhoneNumber();
if(!StringUtils.isNumeric(phoneNumber) || phoneNumber.length() != 11) {
throw new BusinessException("不合法的手机号码");
}
String identifyCodeKey = createPcMember.getPhoneNumber();
IdentifyCodeModel identifyCodeModel = GlobalIdentifyCodeManager.getIdentifyCode(identifyCodeKey);
if(identifyCodeModel == null || identifyCodeModel.isExpired()) {
throw new BusinessException("验证码未生成或者已过期");
}
if(!createPcMember.getPhoneIdentifyCode().equals(identifyCodeModel.getIdentifyCode())) {
throw new BusinessException("验证码不正确");
}
CdMember memberQuery = new CdMember();
memberQuery.setPhoneNumber(phoneNumber);
CdMember cdMember = memberService.findMember(memberQuery);
if(cdMember == null) {
cdMember = memberService.createMember(createMember);
} else if(StringUtils.isEmpty(cdMember.getPassword())) {
memberService.updatePassword(cdMember.getId(), createPcMember.getPassword(), "");
} else {
throw new BusinessException("用户已被注册");
}
cdMember.setPassword("");
return cdMember;
}
@RequestMapping(value = "/member/login", method = RequestMethod.POST)
public ResponseEntity login(HttpServletRequest request, Model model){
Map<String, Object> result = new HashMap<>();
if(SecurityUtils.getSubject().isAuthenticated()){
String username = (String) SecurityUtils.getSubject().getPrincipal();
result.put("status", 200);
result.put("username", username);
return new ResponseEntity(result, HttpStatus.OK);
}
String exceptionClassName = (String) request.getAttribute(FormAuthenticationFilterExt.DEFAULT_ERROR_KEY_ATTRIBUTE_NAME);
String error = null;
RestError restError = new RestError();
restError.setTimestamp(new Date());
if(DisabledAccountException.class.getName().equals(exceptionClassName)){
restError.setMessage("该账号已被锁定，请联系客服。");
}else if(UnknownAccountException.class.getName().equals(exceptionClassName)) {
restError.setMessage("用户名不存在");
} else if(IncorrectCredentialsException.class.getName().equals(exceptionClassName)) {
restError.setMessage("用户名或密码错误");
} else if(exceptionClassName != null) {
restError.setMessage( "登录失败：" + exceptionClassName);
}
restError.setStatus(401);
return new ResponseEntity(restError, HttpStatus.UNAUTHORIZED);
}
/**
* 会员账号
* @return
*/
@RequestMapping(value = "/member/account", method = RequestMethod.GET)
public CdMember accountSetting(){
Integer memberId = getCurrentMemberId();
CdMember memberModel = memberService.getOneMemberModel(String.valueOf(memberId));
return memberModel;
}
@RequestMapping(value = "/member/logout")
public ResponseEntity logout(HttpServletRequest request){
String message = "登出成功";
try {
SecurityUtils.getSubject().logout();
} catch (Exception e) {
message = "登出失败";
}
return new ResponseEntity(message, HttpStatus.UNAUTHORIZED);
}
@RequestMapping(value = "/member/phonecode")
public SmsResponse sendSms(@RequestParam(value="phone") String phoneNumber) throws Exception {
if(!StringUtils.isNumeric(phoneNumber) || phoneNumber.length() != 11) {
throw new BusinessException("不合法的手机号码");
}
CdMember memberQuery = new CdMember();
memberQuery.setPhoneNumber(phoneNumber);
CdMember cdMember = memberService.findMember(memberQuery);
if(cdMember != null){
throw new BusinessException("该手机号码已注册");
}
SmsResponse smsResponse = smsMessageService.sendSingleRequest(phoneNumber);
if(smsResponse == null) {
throw new Exception("调用SMS接口失败");
}
return smsResponse;
}
/**
* 发送验证码到用户手机，用户找回密码(密码重置)操作
* @param phoneNumber
* @return
* @throws Exception
*/
@RequestMapping(value = "/member/operationcode")
public SmsResponse getOperationCode(@RequestParam(value="phone") String phoneNumber) throws Exception {
if(!StringUtils.isNumeric(phoneNumber) || phoneNumber.length() != 11) {
throw new BusinessException("不合法的手机号码");
}
CdMember memberQuery = new CdMember();
memberQuery.setPhoneNumber(phoneNumber);
CdMember cdMember = memberService.findMember(memberQuery);
if(cdMember == null){
throw new BusinessException("该用户不存在");
}
/*String operationCode = RandomStringGenerator.getRandomNumberStrByLength(6);
SmsResponse smsResponse = smsMessageService.sendPasswordInfo(phoneNumber, operationCode);
if(smsResponse == null) {
throw new Exception("调用SMS接口失败");
} else {
GlobalIdentifyCodeManager.updateOperationCode(phoneNumber, operationCode);
}
return smsResponse;*/
SmsResponse smsResponse = smsMessageService.sendSingleRequest(phoneNumber);
if(smsResponse == null) {
throw new Exception("调用SMS接口失败");
}
return smsResponse;
}
/**
* 根据发送到手机的验证码，手动输入密码达到重置密码的目的
* @param pcMember
* @return
* @throws Exception
*/
@RequestMapping(value = "/member/resetpassword", method = RequestMethod.POST)
public CdMember resetPassword(@RequestBody @Valid PcMember pcMember) throws Exception {
String phoneNumber = pcMember.getPhoneNumber();
if(!StringUtils.isNumeric(phoneNumber) || phoneNumber.length() != 11) {
throw new BusinessException("不合法的手机号码");
}
String identifyCodeKey = pcMember.getPhoneNumber();
//IdentifyCodeModel identifyCodeModel = GlobalIdentifyCodeManager.getOperationCode(identifyCodeKey);
IdentifyCodeModel identifyCodeModel = GlobalIdentifyCodeManager.getIdentifyCode(identifyCodeKey);
if(identifyCodeModel == null || identifyCodeModel.isExpired()) {
throw new BusinessException("验证码未生成或者已过期");
}
if(!pcMember.getPhoneIdentifyCode().equals(identifyCodeModel.getIdentifyCode())) {
throw new BusinessException("验证码不正确");
}
CdMember memberQuery = new CdMember();
memberQuery.setPhoneNumber(phoneNumber);
CdMember cdMember = memberService.findMember(memberQuery);
if(cdMember == null) {
throw new BusinessException("该用户不存在");
}
boolean success = memberService.resetPassword(cdMember.getId(), pcMember.getPassword());
if(!success) {
throw new BusinessException("密码重置失败");
}
cdMember.setPassword("");
return cdMember;
}
/**
* 直接发送随机生成的6位数密码到手机，达到重置密码的目的
* @param phoneNumber
* @return
* @throws Exception
*/
@RequestMapping(value = "/member/resetpassword", method = RequestMethod.GET)
public SmsResponse resetPassword(@RequestParam(value="phone") String phoneNumber) throws Exception {
if(!StringUtils.isNumeric(phoneNumber) || phoneNumber.length() != 11) {
throw new BusinessException("不合法的手机号码");
}
CdMember memberQuery = new CdMember();
memberQuery.setPhoneNumber(phoneNumber);
CdMember cdMember = memberService.findMember(memberQuery);
if(cdMember == null) {
throw new BusinessException("该用户不存在");
}
String newPassword = RandomStringGenerator.getRandomNumberStrByLength(6);
String oldPassword = cdMember.getPassword();
if(oldPassword == null) {
oldPassword = "";
}
boolean success = memberService.updatePassword(cdMember.getId(), newPassword, oldPassword);
if(success) {
SmsResponse smsResponse = smsMessageService.sendPasswordInfo(phoneNumber, newPassword);
if(smsResponse == null) {
//如果未成功发送短信，密码回滚
cdMember.setPassword(oldPassword);
memberService.updateMember(cdMember);
throw new Exception("调用SMS接口失败");
}
return smsResponse;
} else {
throw new BusinessException("密码重置失败");
}
}
/**
* 更新密码
* @param updatePasswordModel
* @return
* @throws BusinessException
*/
@RequestMapping(value = "/member/changepassword", method = RequestMethod.POST)
public CdMember changePassword(@RequestBody @Valid PcUpdatePasswordModel updatePasswordModel) throws BusinessException {
String phoneNumber = updatePasswordModel.getPhoneNumber();
CdMember memberQuery = new CdMember();
memberQuery.setPhoneNumber(phoneNumber);
CdMember cdMember = memberService.findMember(memberQuery);
if(cdMember == null) {
throw new BusinessException("当前用户不存在");
} else {
boolean success = memberService.updatePassword(cdMember.getId(), updatePasswordModel.getPassword(), updatePasswordModel.getOldPassword());
if(!success) {
throw new BusinessException("密码不正确");
}
}
cdMember.setPassword("");
return cdMember;
}
}
