JustAuth-第三方登录组件

1、新增依赖

<dependency>
   <groupId>me.zhyd.oauth</groupId>
   <artifactId>JustAuth</artifactId>
   <version>1.16.5</version>
</dependency>

2、前端示例

<template>
  <div class="social-signup-container">
    <div class="sign-btn" @click="thirdLoginClick('wechat')">
      <span class="wx-svg-container"><svg-icon icon-class="wechat" class="icon"/></span>
      微信
    </div>
    <div class="sign-btn" @click="thirdLoginClick('qq')">
      <span class="qq-svg-container"><svg-icon icon-class="qq" class="icon"/></span>
      QQ
    </div>
    <div class="sign-btn" @click="thirdLoginClick('gitee')">
      <span class="gitee-svg-container"><svg-icon icon-class="gitee" class="icon"/></span>
      Gitee
    </div>
  </div>
</template>

<script>
export default {
  name: 'SocialSignin',
  methods: {
　　 // 请求后台获取跳转路径
    thirdLoginClick(source) {
      this.$store.dispatch('user/thirdLogin', {source: source}).then(() => {
      }).catch(() => {
      })
    }
  }
}
</script>

  // 第三方登录
  thirdLogin({commit}, userInfo) {
    const {source} = userInfo
    return new Promise((resolve, reject) => {
      thirdLogin({source: source.trim()}).then(response => {
        console.log("第三方登录返回", response)
        if (response.data.code === "200") {
          window.location.href = response.data.url
        } else {
          Message.warning(response.data.msg);
        }
        resolve()
      }).catch(error => {
        reject(error)
      })
    })
  }

export function thirdLogin(data) {
  return request({
    url: '/login/render',
    method: 'post',
    params: {source: data.source}
  })
}

3、后端示例

获取跳转路径

import com.mxy.common.core.utils.ServiceResult;
import io.swagger.annotations.Api;
import io.swagger.annotations.ApiOperation;
import lombok.extern.slf4j.Slf4j;
import me.zhyd.oauth.request.AuthRequest;
import me.zhyd.oauth.utils.AuthStateUtils;
import org.springframework.web.bind.annotation.*;

import javax.annotation.Resource;
import java.util.*;

/**
 * 第三方登录认证
 */
@RestController
@RequestMapping("/api/login")
@Api(value = "第三方登录相关接口", tags = {"第三方登录相关接口"})
@Slf4j
public class AuthRestApi {

    @Resource
    private AuthUtil authUtil;

    @ApiOperation(value = "系统认证", notes = "系统认证")
    @RequestMapping("/render")
    public String renderAuth(String source) {
        log.info("进入第三方认证:" + source);
        Map<String, String> map = new HashMap<>();
        AuthRequest authRequest = authUtil.getAuthRequest(source);
        if (authRequest == null) {
            map.put("code", "201");
            map.put("msg", "系统未开启该登录方式");
            return ServiceResult.success(map);
        }
        String token = AuthStateUtils.createState();
        String authorizeUrl = authRequest.authorize(token);
        log.info("获取返回url:" + authorizeUrl);
        map.put("code", "200");
        map.put("url", authorizeUrl);
        return ServiceResult.success(map);
    }

}

拦截登录回调接口（ThirdPartyAuthenticationFilter）

import me.zhyd.oauth.model.AuthCallback;
import org.springframework.security.authentication.AuthenticationServiceException;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter;
import org.springframework.security.web.util.matcher.AntPathRequestMatcher;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

/**
 * 第三方登录-拦截器
 * 拼接入参
 */
public class ThirdPartyAuthenticationFilter extends AbstractAuthenticationProcessingFilter {

    public static String EXTEND_LOGIN_URL = "/api/login/callback/**";

    private boolean getOnly = true;

    /**
     * 表示这个 Filter 拦截 /api/login/callback/** 接口
     */
    private static final AntPathRequestMatcher DEFAULT_ANT_PATH_REQUEST_MATCHER = new AntPathRequestMatcher(EXTEND_LOGIN_URL, "GET");

    public ThirdPartyAuthenticationFilter() {
        super(DEFAULT_ANT_PATH_REQUEST_MATCHER);
    }

    @Override
    public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response) throws AuthenticationException {
        if (this.getOnly && !"GET".equals(request.getMethod())) {
            throw new AuthenticationServiceException("Authentication method not supported: " + request.getMethod());
        } else {
            ThirdPartyAuthenticationToken authRequest = new ThirdPartyAuthenticationToken(getSourceType(request), getCallback(request));
            this.setDetails(request, authRequest);
            return this.getAuthenticationManager().authenticate(authRequest);
        }
    }

    protected void setDetails(HttpServletRequest request, ThirdPartyAuthenticationToken authRequest) {
        authRequest.setDetails(this.authenticationDetailsSource.buildDetails(request));
    }

    /**
     * 组装请求
     */
    private AuthCallback getCallback(HttpServletRequest request) {
        return AuthCallback.builder()
                .code(request.getParameter("code"))
                .auth_code(request.getParameter("auth_code"))
                .authorization_code(request.getParameter("authorization_code"))
                .oauth_token(request.getParameter("oauth_token"))
                .state(request.getParameter("state"))
                .oauth_verifier(request.getParameter("oauth_verifier"))
                .build();
    }

    /**
     * 判断-登录系统类型
     */
    private String getSourceType(HttpServletRequest request) {
        String uri = request.getRequestURI();
        int common = EXTEND_LOGIN_URL.length() - 2;
        int start = uri.indexOf(EXTEND_LOGIN_URL.substring(0, common));
        return uri.substring(start + common);
    }

}

封装用户信息（ThirdPartyAuthenticationToken）

import me.zhyd.oauth.model.AuthCallback;
import org.springframework.security.authentication.AbstractAuthenticationToken;
import org.springframework.security.core.GrantedAuthority;

import java.util.Collection;

/**
 * 模仿 UsernamePasswordAuthenticationToken
 * 封装用户信息
 */
public class ThirdPartyAuthenticationToken extends AbstractAuthenticationToken {

    /**
     * 认证返回
     */
    private AuthCallback callback;
    /**
     * 登录类型
     */
    private String source;
    /**
     * 用户实体
     */
    private Object principal;
    /**
     * 用户id
     */
    private Object credentials;

    public ThirdPartyAuthenticationToken(String source, AuthCallback callback) {
        super(null);
        this.source = source;
        this.callback = callback;
        setAuthenticated(false);
    }

    public ThirdPartyAuthenticationToken(Object principal, Object credentials, Collection<? extends GrantedAuthority> authorities) {
        super(authorities);
        this.principal = principal;
        this.credentials = credentials;
        super.setAuthenticated(true);
    }

    @Override
    public Object getPrincipal() {
        return principal;
    }

    @Override
    public Object getCredentials() {
        return credentials;
    }

    public Object getCallback() {
        return callback;
    }

    public Object getSource() {
        return source;
    }
}

第三方统一登录认证逻辑（ThirdPartyAuthenticationProvider）

package com.mxy.security.justauth;

import com.alibaba.fastjson.JSONObject;
import com.mxy.common.core.constant.Constants;
import com.mxy.common.core.entity.SelfUserEntity;
import com.mxy.common.core.entity.SysRole;
import com.mxy.common.core.entity.SysUser;
import com.mxy.common.core.entity.SysUserRole;
import com.mxy.common.core.utils.IPUtils;
import com.mxy.common.core.utils.RedisUtil;
import com.mxy.common.core.utils.ServletUtils;
import com.mxy.common.log.enums.OperType;
import com.mxy.security.security.service.SelfUserDetailsService;
import com.mxy.system.service.SysUserService;
import com.mxy.system.utils.LogUtil;
import lombok.extern.slf4j.Slf4j;
import me.zhyd.oauth.model.AuthCallback;
import me.zhyd.oauth.model.AuthResponse;
import me.zhyd.oauth.model.AuthUser;
import me.zhyd.oauth.request.AuthRequest;
import org.springframework.beans.BeanUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.authentication.AuthenticationProvider;
import org.springframework.security.authentication.BadCredentialsException;
import org.springframework.security.authentication.LockedException;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.authority.SimpleGrantedAuthority;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.stereotype.Component;

import javax.annotation.Resource;
import java.util.*;

/**
 * 第三方统一登录认证逻辑
 */
@Slf4j
@Component
public class ThirdPartyAuthenticationProvider implements AuthenticationProvider {

    @Autowired
    private SelfUserDetailsService selfUserDetailsService;
    @Autowired
    private SysUserService sysUserService;
    @Autowired
    private RedisUtil redisUtil;
    @Resource
    private AuthUtil authUtil;

    @Resource
    private BCryptPasswordEncoder bCryptPasswordEncoder;

    private Random random = new Random();

    /**
     * 第三方统一登录认证逻辑
     */
    @Override
    public Authentication authenticate(Authentication authentication) throws AuthenticationException {
        ThirdPartyAuthenticationToken token = (ThirdPartyAuthenticationToken) authentication;
        String source = (String) token.getSource();
        AuthCallback callback = (AuthCallback) token.getCallback();
        log.info("------------进入" + source + "认证逻辑， callback params：" + JSONObject.toJSONString(callback));
        AuthRequest authRequest = authUtil.getAuthRequest(source);
        AuthResponse response = authRequest.login(callback);
        if (response.getCode() == 5000) {
            // 认证失败
            throw new BadCredentialsException(source + "认证失败");
        }
        AuthUser authUser = (AuthUser) response.getData();
        log.info("------------认证用户：{}", authUser);
        // 根据 uuid 查询用户信息
        SelfUserEntity userInfo = selfUserDetailsService.getUserInfoByUuid(authUser.getUuid());
        if (userInfo == null) {
            // 自动注册
            userInfo = doRegister(authUser);
        }
        if (Constants.USER_STATE_TWO.equals(userInfo.getStatus())) {
            LogUtil.saveLog("该账号已冻结[" + userInfo.getRelName() + "]", 99);
            throw new LockedException("该账号已冻结");
        }
        // 角色集合
        Set<GrantedAuthority> authorities = new HashSet<>();
        // 查询用户角色
        List<SysRole> sysRoleList = sysUserService.selectSysRoleByUserId(userInfo.getUserId());
        for (SysRole sysRole : sysRoleList) {
            authorities.add(new SimpleGrantedAuthority(sysRole.getRoleKey()));
        }
        userInfo.setAuthorities(authorities);
        ThirdPartyAuthenticationToken authenticationResult = new ThirdPartyAuthenticationToken(userInfo, userInfo.getUserId(), userInfo.getAuthorities());
        authenticationResult.setDetails(token.getDetails());
        return authenticationResult;
    }

    /**
     * 账号注册
     **/
    public SelfUserEntity doRegister(AuthUser authUser) {
        SelfUserEntity selfUser = new SelfUserEntity();
        SysUser sysUser = new SysUser();
        sysUser.setNickName(authUser.getNickname());
        sysUser.setUsername(authUser.getSource() + (random.nextInt(89999999) + 10000000));
        String password = String.valueOf(random.nextInt(899999) + 100000);
        sysUser.setPassword(bCryptPasswordEncoder.encode(password));
        sysUser.setAvatar(authUser.getAvatar());
        sysUser.setRegistrationType(authUser.getSource());
        sysUser.setUuid(authUser.getUuid());
        sysUser.setLoginCount(0);
        sysUser.setIpSource(IPUtils.getClientIp(Objects.requireNonNull(ServletUtils.getRequest())));
        // 2-男
        sysUser.setSex("2".equals(authUser.getRawUserInfo().getString("gender_type")) ? "0" : "1");
        sysUser.setCreateUser("system");
        sysUser.setRemark(authUser.getSource() + "首次注册默认密码为：" + password);
        sysUser.setLoginDate(new Date());
        sysUser.setUserType("2");
        sysUser.insert();

        // 新增用户角色关系
        SysUserRole sysUserRole = new SysUserRole();
        sysUserRole.setUserId(sysUser.getUserId());
        // 游客
        sysUserRole.setRoleId("2");
        sysUserRole.insert();
        BeanUtils.copyProperties(sysUser, selfUser);
        selfUser.setRelName(sysUser.getNickName());
        LogUtil.saveNoLoginLog("账号注册（" + authUser.getSource() + "）", JSONObject.toJSONString(sysUser), OperType.REGISTRATION.ordinal());
        return selfUser;
    }

    /**
     * 判断是上面 authenticate 方法的 authentication 参数，是哪种类型
     * Authentication 是个接口，实现类有很多，目前我们最熟悉的就是 ThirdPartyAuthenticationToken、UsernamePasswordAuthenticationToken
     * 很明显，我们只支持 ThirdPartyAuthenticationToken，因为它封装的是TOKEN OPENID
     *
     * @param authentication
     * @return
     */
    @Override
    public boolean supports(Class<?> authentication) {
        return (ThirdPartyAuthenticationToken.class.isAssignableFrom(authentication));
    }
}

工具类

import lombok.extern.slf4j.Slf4j;
import me.zhyd.oauth.config.AuthConfig;
import me.zhyd.oauth.request.AuthGiteeRequest;
import me.zhyd.oauth.request.AuthQqRequest;
import me.zhyd.oauth.request.AuthRequest;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.stereotype.Component;

@Slf4j
@Component
public class AuthUtil {

    @Value("${justauth.qq.clientId}")
    private String qqClientId;

    @Value("${justauth.qq.clientSecret}")
    private String qqClientSecret;

    @Value("${justauth.qq.redirectUri}")
    private String qqRedirectUri;

    @Value("${justauth.gitee.clientId}")
    private String giteeClientId;

    @Value("${justauth.gitee.clientSecret}")
    private String giteeClientSecret;

    @Value("${justauth.gitee.redirectUri}")
    private String giteeRedirectUri;

    /**
     * 鉴权
     */
    public AuthRequest getAuthRequest(String source) {
        AuthRequest authRequest = null;
        switch (source) {
            case "qq":
                authRequest = new AuthQqRequest(AuthConfig.builder()
                        .clientId(qqClientId)
                        .clientSecret(qqClientSecret)
                        .redirectUri(qqRedirectUri)
                        .build());
                break;
            case "gitee":
                authRequest = new AuthGiteeRequest(AuthConfig.builder()
                        .clientId(giteeClientId)
                        .clientSecret(giteeClientSecret)
                        .redirectUri(giteeRedirectUri)
                        .build());
                break;
            default:
                break;
        }
        return authRequest;
    }

}

# 第三方登录秘钥
justauth:
  qq:
    clientId: xxxxxxxxxx
    clientSecret: xxxxxxxxxxxx
    redirectUri: http://xxxxxxxxxx/api/login/callback/qq
  gitee:
    clientId: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
    clientSecret: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
    redirectUri: http://xxxxxxxxxx/api/login/callback/gitee