MrShi
2025-08-19 ff087240b3dee29ce4e14ad0836e76b9fdf312cf
server/src/main/java/com/doumee/api/web/WebMemberController.java
@@ -3,12 +3,16 @@
import com.doumee.biz.system.SystemDictDataBiz;
import com.doumee.config.Jwt.JwtProperties;
import com.doumee.config.Jwt.JwtTokenUtil;
import com.doumee.config.annotation.EncryptionReq;
import com.doumee.config.annotation.EncryptionResp;
import com.doumee.config.annotation.LoginRequired;
import com.doumee.core.annotation.pr.PreventRepeat;
import com.doumee.core.constants.Constants;
import com.doumee.core.constants.ResponseStatus;
import com.doumee.core.exception.BusinessException;
import com.doumee.core.model.ApiResponse;
import com.doumee.core.model.PageData;
import com.doumee.core.model.PageWrap;
import com.doumee.dao.business.dto.WebQwSingatureDto;
import com.doumee.dao.business.model.Member;
import com.doumee.dao.business.vo.WebQwSingatureVO;
@@ -18,6 +22,7 @@
import io.swagger.annotations.Api;
import io.swagger.annotations.ApiOperation;
import lombok.extern.slf4j.Slf4j;
import org.apache.shiro.authz.annotation.RequiresPermissions;
import org.springframework.http.server.reactive.ServerHttpRequest;
import org.springframework.validation.annotation.Validated;
import org.springframework.web.bind.annotation.*;
@@ -41,16 +46,16 @@
public class WebMemberController {
    @Resource
    private JwtTokenUtil jwtTokenUtil;
    @Resource
    private MemberService memberService;
    @Resource
    private SystemDictDataBiz systemDictDataBiz;
    @PreventRepeat(limit = 10, lockTime = 10000)
    @ApiOperation("H5业务登录")
    @PostMapping("/loginH5")
    @EncryptionReq
    @EncryptionResp
    public ApiResponse<Member> loginH5 (@RequestBody LoginH5DTO dto) {
        try {
            //拿CODE换qwid,先查下本系统是否存在,存在直接返回member,否则用qwid查询企业用户数据,插入数据库(member)
@@ -69,6 +74,8 @@
    @LoginRequired
    @ApiOperation("更新用户邮箱信息")
    @PostMapping("/upateInfo")
    @EncryptionReq
    @EncryptionResp
    public ApiResponse upateInfo (@RequestBody UpdEmailDTO updEmailDTO ,@RequestHeader(JwtTokenUtil.HEADER_KEY) String token) {
        try {
            Member user =  jwtTokenUtil.getUserInfoByToken(token);
@@ -107,23 +114,25 @@
    @ApiOperation("获取企业微信JS签名")
    @PostMapping("/getQwSignature")
    @ResponseBody
    @EncryptionReq
    @EncryptionResp
    public ApiResponse<WebQwSingatureVO> getQwSignature(@RequestBody WebQwSingatureDto param) {
        try {
            String jsapiTicket = systemDictDataBiz.queryByCode(Constants.QYWX,Constants.QYWX_JS_API_TICKET).getCode();
            String noncestr = UUID.randomUUID().toString();
            Long timestamp = System.currentTimeMillis() / 1000;
            String jsapiTicketStr = jsapiTicket + "&noncestr=" + noncestr + "&timestamp=" + timestamp + "&url=" + param.getUrl();
            MessageDigest instance = MessageDigest.getInstance("SHA-1");
            instance.update(jsapiTicketStr.getBytes());
            byte[] digest = instance.digest();
            BigInteger bigInteger = new BigInteger(1, digest);
            String string = bigInteger.toString();
            String jsapiTicketStr = "jsapi_ticket="+jsapiTicket + "&noncestr=" + noncestr + "&timestamp=" + timestamp + "&url=" + param.getUrl();
//            MessageDigest instance = MessageDigest.getInstance("SHA-1");
//            instance.update(jsapiTicketStr.getBytes());
//            byte[] digest = instance.digest();
//            BigInteger bigInteger = new BigInteger(1, digest);
//            String string = bigInteger.toString();
            WebQwSingatureVO result = new WebQwSingatureVO();
            result.setNoncestr(  noncestr);
            result.setSignature(  string);
            result.setSignature(  getSHA1(jsapiTicketStr));
            result.setTimestamp( timestamp);
            result.setUrl( param.getUrl());
//            result.put("ticket", jsapiTicket);
            result.setTicket(jsapiTicket);
            return ApiResponse.success( result);
        } catch ( Exception e) {
            e.printStackTrace();
@@ -132,4 +141,43 @@
        return ApiResponse.failed("获取签名失败");
    }
    @LoginRequired
    @ApiOperation("查询可被抄送人分页")
    @PostMapping("/getCopySendUserPage")
    @EncryptionReq
    @EncryptionResp
    public ApiResponse<PageData<Member>> getCopySendUserPage (@RequestBody PageWrap<Member> pageWrap) {
        pageWrap.getModel().setIsSendCopy(Constants.ONE);
        return ApiResponse.success(memberService.findPage(pageWrap));
    }
    public static String getSHA1(String input) {
        try {
            // 获取MessageDigest类的实例,指定使用SHA-1算法
            MessageDigest md = MessageDigest.getInstance("SHA-1");
            // 使用指定的字节更新摘要
            md.update(input.getBytes());
            // 获取密文(哈希值)
            byte[] digest = md.digest();
            // 将字节数组转换为十六进制字符串
            StringBuilder hexString = new StringBuilder();
            for (byte b : digest) {
                String hex = Integer.toHexString(0xff & b);
                if (hex.length() == 1) hexString.append('0');
                hexString.append(hex);
            }
            return hexString.toString();
        } catch (NoSuchAlgorithmException e) {
            throw new RuntimeException(e);
        }
    }
}