[ { "path": ".github/ISSUE_TEMPLATE/bug-report.md", "content": "---\nname: 提交Bug\nabout: 提交bug,帮助我们更好完善项目.\ntitle: \"[BUG]\"\nlabels: bug\nassignees: zhou-hao\n\n---\n\n# BUG 说明\n简要说明bug情况\n\n# 运行环境\njava: 1.8.0_131\nmaven: 3.3.9\nhsweb: 3.0.5\n \n# 复现步骤\n\n# 期望结果\n此功能期望的执行结果\n\n# 截图说明\n" }, { "path": ".github/ISSUE_TEMPLATE/future.md", "content": "---\nname: 需求特性\nabout: 提出你想要的,帮助完善hsweb\ntitle: \"[需求]\"\nlabels: 需求\nassignees: zhou-hao\n\n---\n\n# 场景\n\n# 需求说明\n" }, { "path": ".github/ISSUE_TEMPLATE/qa.md", "content": "---\nname: 疑问帮助\nabout: 有任何疑问尽管提\ntitle: \"[疑问]\"\nlabels: 帮助\nassignees: zhou-hao\n\n---\n\n# 环境\njava: 1.8.0_131\nhsweb: 3.0.5\n\n# 问题说明\n" }, { "path": ".github/workflows/maven-publish-4x.yml", "content": "name: Auto Deploy 4.x to the Maven Repository\non:\n push:\n branches: [\"master\"]\n\njobs:\n publish:\n runs-on: ubuntu-latest\n strategy:\n matrix:\n node_version: [ 18.x ]\n # os: [ubuntu-latest, windows-latest, macOS-latest]\n os: [ ubuntu-latest ]\n steps:\n - uses: actions/checkout@v4\n with:\n fetch-depth: '2'\n - run: echo ${{github.ref}}\n - name: Set up Repository info\n uses: actions/setup-java@v4\n with:\n java-version: '8'\n distribution: 'temurin'\n - name: Cache Maven Repository\n uses: actions/cache@v3\n with:\n path: ~/.m2\n key: ${{ runner.os }}-${{ hashFiles('**/pom.xml') }}\n - name: Create Maven settings.xml\n #uses: actions/cache@v3\n env:\n MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}\n MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}\n run: |\n mkdir -p ~/.m2\n echo \"\n \n \n snapshots\n ${MAVEN_USERNAME}\n ${MAVEN_PASSWORD}\n \n \n \" > ~/.m2/settings.xml\n\n # Step 4: 构建并发布到 Maven 私有仓库\n - name: Build and Deploy to Maven\n run: mvn clean deploy -q -DskipTests -pl \"$(./changes.sh)\"\n" }, { "path": ".github/workflows/maven-publish-5x.yml", "content": "name: Auto Deploy 5.x to the Maven Repository\non:\n push:\n branches: [\"5.0.x\"]\n\njobs:\n publish:\n runs-on: ubuntu-latest\n strategy:\n matrix:\n node_version: [ 18.x ]\n # os: [ubuntu-latest, windows-latest, macOS-latest]\n os: [ ubuntu-latest ]\n steps:\n - uses: actions/checkout@v4\n with:\n fetch-depth: '2'\n - run: echo ${{github.ref}}\n - name: Set up Repository info\n uses: actions/setup-java@v4\n with:\n java-version: '17'\n distribution: 'temurin'\n - name: Cache Maven Repository\n uses: actions/cache@v3\n with:\n path: ~/.m2\n key: ${{ runner.os }}-${{ hashFiles('**/pom.xml') }}\n - name: Create Maven settings.xml\n #uses: actions/cache@v3\n env:\n MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}\n MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}\n run: |\n mkdir -p ~/.m2\n echo \"\n \n \n snapshots\n ${MAVEN_USERNAME}\n ${MAVEN_PASSWORD}\n \n \n \" > ~/.m2/settings.xml\n\n # Step 4: 构建并发布到 Maven 私有仓库\n - name: Build and Deploy to Maven\n run: mvn clean deploy -DskipTests -pl \"$(./changes.sh)\"\n" }, { "path": ".github/workflows/pull_request.yml", "content": "name: Pull Request test master\n\non:\n pull_request:\n branches: [ master ]\n\njobs:\n build:\n\n runs-on: ubuntu-latest\n\n steps:\n - uses: actions/checkout@v1\n - name: Set up JDK 1.8\n uses: actions/setup-java@v1\n with:\n java-version: 1.8\n - name: Cache Maven Repository\n uses: actions/cache@v4.2.3\n with:\n path: ~/.m2\n key: ${{ runner.os }}-${{ hashFiles('**/pom.xml') }}\n - name: Build with Maven\n run: ./mvnw test -q\n" }, { "path": ".github/workflows/pull_request_5x.yml", "content": "name: Pull Request test 5.0.x\n\non:\n pull_request:\n branches: [ 5.0.x ]\n\njobs:\n build:\n\n runs-on: ubuntu-latest\n\n steps:\n - uses: actions/checkout@v1\n - name: Set up JDK 17\n uses: actions/setup-java@v1\n with:\n java-version: 17\n - name: Cache Maven Repository\n uses: actions/cache@v4.2.3\n with:\n path: ~/.m2\n key: ${{ runner.os }}-${{ hashFiles('**/pom.xml') }}\n - name: Build with Maven\n run: ./mvnw test -q\n" }, { "path": ".gitignore", "content": "**/pom.xml.versionsBackup\n**/target/\n**/out/\n**/log/\n*.class\n# Mobile Tools for Java (J2ME)\n.mtj.tmp/\n.idea/\n/nbproject\n*.ipr\n*.iws\n*.iml\n\n# Package Files #\n*.jar\n*.war\n*.ear\n*.log\n# virtual machine crash logs, see http://www.java.com/en/download/help/error_hotspot.xml\nhs_err_pid*\n**/transaction-logs/\npom.xml.versionsBackup\nbuild/\n!maven-wrapper.jar\n.java-version" }, { "path": ".mvn/wrapper/maven-wrapper.properties", "content": "distributionUrl=https://archive.apache.org/dist/maven/maven-3/3.9.3/binaries/apache-maven-3.9.3-bin.zip" }, { "path": "CODE_OF_CONDUCT.md", "content": "# Contributor Covenant Code of Conduct\n\n## Our Pledge\n\nIn the interest of fostering an open and welcoming environment, we as contributors and maintainers pledge to making participation in our project and our community a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, gender identity and expression, level of experience, nationality, personal appearance, race, religion, or sexual identity and orientation.\n\n## Our Standards\n\nExamples of behavior that contributes to creating a positive environment include:\n\n* Using welcoming and inclusive language\n* Being respectful of differing viewpoints and experiences\n* Gracefully accepting constructive criticism\n* Focusing on what is best for the community\n* Showing empathy towards other community members\n\nExamples of unacceptable behavior by participants include:\n\n* The use of sexualized language or imagery and unwelcome sexual attention or advances\n* Trolling, insulting/derogatory comments, and personal or political attacks\n* Public or private harassment\n* Publishing others' private information, such as a physical or electronic address, without explicit permission\n* Other conduct which could reasonably be considered inappropriate in a professional setting\n\n## Our Responsibilities\n\nProject maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior.\n\nProject maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, or to ban temporarily or permanently any contributor for other behaviors that they deem inappropriate, threatening, offensive, or harmful.\n\n## Scope\n\nThis Code of Conduct applies both within project spaces and in public spaces when an individual is representing the project or its community. Examples of representing a project or community include using an official project e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event. Representation of a project may be further defined and clarified by project maintainers.\n\n## Enforcement\n\nInstances of abusive, harassing, or otherwise unacceptable behavior may be reported by contacting the project team at admin@hsweb.me. The project team will review and investigate all complaints, and will respond in a way that it deems appropriate to the circumstances. The project team is obligated to maintain confidentiality with regard to the reporter of an incident. Further details of specific enforcement policies may be posted separately.\n\nProject maintainers who do not follow or enforce the Code of Conduct in good faith may face temporary or permanent repercussions as determined by other members of the project's leadership.\n\n## Attribution\n\nThis Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4, available at [http://contributor-covenant.org/version/1/4][version]\n\n[homepage]: http://contributor-covenant.org\n[version]: http://contributor-covenant.org/version/1/4/\n" }, { "path": "CONTRIBUTING.md", "content": "# 贡献你的代码\n1. fork 本仓库\n2. 修改,增加代码\n3. 执行`mvn test`通过\n4. 提交`pull request`\n5. 坐等审查\n6. 合并\n\n# BUG\n如果知道导致bug的位置,你可以直接修改后`pull request`,也可以提交[issues](https://github.com/hs-web/hsweb-framework/issues/new).我们会尽快解决.\n\n# 需求&优化\n你可以通过issues提交你希望`hsweb`增加的特性以及功能优化,并可以在 [projects](https://github.com/hs-web/hsweb-framework/projects)中查看`hsweb`的开发进展以及计划.\n\n# 社区&交流\n你可以通过提交`issues`或者加入官方QQ群:[515649185](http://shang.qq.com/wpa/qunwpa?idkey=3d66b5dd14991d7645af694e7649b373f3a9ce1216131094c78cb2348d542c41)\n以及发送邮件和我们取得联系.\n" }, { "path": "ISSUE_TEMPLATE.md", "content": "1. 问题描述:\n2. 复现步骤:\n3. 日志内容:" }, { "path": "LICENSE", "content": " Apache License\n Version 2.0, January 2004\n http://www.apache.org/licenses/\n\n TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n 1. Definitions.\n\n \"License\" shall mean the terms and conditions for use, reproduction,\n and distribution as defined by Sections 1 through 9 of this document.\n\n \"Licensor\" shall mean the copyright owner or entity authorized by\n the copyright owner that is granting the License.\n\n \"Legal Entity\" shall mean the union of the acting entity and all\n other entities that control, are controlled by, or are under common\n control with that entity. For the purposes of this definition,\n \"control\" means (i) the power, direct or indirect, to cause the\n direction or management of such entity, whether by contract or\n otherwise, or (ii) ownership of fifty percent (50%) or more of the\n outstanding shares, or (iii) beneficial ownership of such entity.\n\n \"You\" (or \"Your\") shall mean an individual or Legal Entity\n exercising permissions granted by this License.\n\n \"Source\" form shall mean the preferred form for making modifications,\n including but not limited to software source code, documentation\n source, and configuration files.\n\n \"Object\" form shall mean any form resulting from mechanical\n transformation or translation of a Source form, including but\n not limited to compiled object code, generated documentation,\n and conversions to other media types.\n\n \"Work\" shall mean the work of authorship, whether in Source or\n Object form, made available under the License, as indicated by a\n copyright notice that is included in or attached to the work\n (an example is provided in the Appendix below).\n\n \"Derivative Works\" shall mean any work, whether in Source or Object\n form, that is based on (or derived from) the Work and for which the\n editorial revisions, annotations, elaborations, or other modifications\n represent, as a whole, an original work of authorship. For the purposes\n of this License, Derivative Works shall not include works that remain\n separable from, or merely link (or bind by name) to the interfaces of,\n the Work and Derivative Works thereof.\n\n \"Contribution\" shall mean any work of authorship, including\n the original version of the Work and any modifications or additions\n to that Work or Derivative Works thereof, that is intentionally\n submitted to Licensor for inclusion in the Work by the copyright owner\n or by an individual or Legal Entity authorized to submit on behalf of\n the copyright owner. For the purposes of this definition, \"submitted\"\n means any form of electronic, verbal, or written communication sent\n to the Licensor or its representatives, including but not limited to\n communication on electronic mailing lists, source code control systems,\n and issue tracking systems that are managed by, or on behalf of, the\n Licensor for the purpose of discussing and improving the Work, but\n excluding communication that is conspicuously marked or otherwise\n designated in writing by the copyright owner as \"Not a Contribution.\"\n\n \"Contributor\" shall mean Licensor and any individual or Legal Entity\n on behalf of whom a Contribution has been received by Licensor and\n subsequently incorporated within the Work.\n\n 2. Grant of Copyright License. Subject to the terms and conditions of\n this License, each Contributor hereby grants to You a perpetual,\n worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n copyright license to reproduce, prepare Derivative Works of,\n publicly display, publicly perform, sublicense, and distribute the\n Work and such Derivative Works in Source or Object form.\n\n 3. Grant of Patent License. Subject to the terms and conditions of\n this License, each Contributor hereby grants to You a perpetual,\n worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n (except as stated in this section) patent license to make, have made,\n use, offer to sell, sell, import, and otherwise transfer the Work,\n where such license applies only to those patent claims licensable\n by such Contributor that are necessarily infringed by their\n Contribution(s) alone or by combination of their Contribution(s)\n with the Work to which such Contribution(s) was submitted. If You\n institute patent litigation against any entity (including a\n cross-claim or counterclaim in a lawsuit) alleging that the Work\n or a Contribution incorporated within the Work constitutes direct\n or contributory patent infringement, then any patent licenses\n granted to You under this License for that Work shall terminate\n as of the date such litigation is filed.\n\n 4. Redistribution. You may reproduce and distribute copies of the\n Work or Derivative Works thereof in any medium, with or without\n modifications, and in Source or Object form, provided that You\n meet the following conditions:\n\n (a) You must give any other recipients of the Work or\n Derivative Works a copy of this License; and\n\n (b) You must cause any modified files to carry prominent notices\n stating that You changed the files; and\n\n (c) You must retain, in the Source form of any Derivative Works\n that You distribute, all copyright, patent, trademark, and\n attribution notices from the Source form of the Work,\n excluding those notices that do not pertain to any part of\n the Derivative Works; and\n\n (d) If the Work includes a \"NOTICE\" text file as part of its\n distribution, then any Derivative Works that You distribute must\n include a readable copy of the attribution notices contained\n within such NOTICE file, excluding those notices that do not\n pertain to any part of the Derivative Works, in at least one\n of the following places: within a NOTICE text file distributed\n as part of the Derivative Works; within the Source form or\n documentation, if provided along with the Derivative Works; or,\n within a display generated by the Derivative Works, if and\n wherever such third-party notices normally appear. The contents\n of the NOTICE file are for informational purposes only and\n do not modify the License. You may add Your own attribution\n notices within Derivative Works that You distribute, alongside\n or as an addendum to the NOTICE text from the Work, provided\n that such additional attribution notices cannot be construed\n as modifying the License.\n\n You may add Your own copyright statement to Your modifications and\n may provide additional or different license terms and conditions\n for use, reproduction, or distribution of Your modifications, or\n for any such Derivative Works as a whole, provided Your use,\n reproduction, and distribution of the Work otherwise complies with\n the conditions stated in this License.\n\n 5. Submission of Contributions. Unless You explicitly state otherwise,\n any Contribution intentionally submitted for inclusion in the Work\n by You to the Licensor shall be under the terms and conditions of\n this License, without any additional terms or conditions.\n Notwithstanding the above, nothing herein shall supersede or modify\n the terms of any separate license agreement you may have executed\n with Licensor regarding such Contributions.\n\n 6. Trademarks. This License does not grant permission to use the trade\n names, trademarks, service marks, or product names of the Licensor,\n except as required for reasonable and customary use in describing the\n origin of the Work and reproducing the content of the NOTICE file.\n\n 7. Disclaimer of Warranty. Unless required by applicable law or\n agreed to in writing, Licensor provides the Work (and each\n Contributor provides its Contributions) on an \"AS IS\" BASIS,\n WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n implied, including, without limitation, any warranties or conditions\n of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n PARTICULAR PURPOSE. You are solely responsible for determining the\n appropriateness of using or redistributing the Work and assume any\n risks associated with Your exercise of permissions under this License.\n\n 8. Limitation of Liability. In no event and under no legal theory,\n whether in tort (including negligence), contract, or otherwise,\n unless required by applicable law (such as deliberate and grossly\n negligent acts) or agreed to in writing, shall any Contributor be\n liable to You for damages, including any direct, indirect, special,\n incidental, or consequential damages of any character arising as a\n result of this License or out of the use or inability to use the\n Work (including but not limited to damages for loss of goodwill,\n work stoppage, computer failure or malfunction, or any and all\n other commercial damages or losses), even if such Contributor\n has been advised of the possibility of such damages.\n\n 9. Accepting Warranty or Additional Liability. While redistributing\n the Work or Derivative Works thereof, You may choose to offer,\n and charge a fee for, acceptance of support, warranty, indemnity,\n or other liability obligations and/or rights consistent with this\n License. However, in accepting such obligations, You may act only\n on Your own behalf and on Your sole responsibility, not on behalf\n of any other Contributor, and only if You agree to indemnify,\n defend, and hold each Contributor harmless for any liability\n incurred by, or claims asserted against, such Contributor by reason\n of your accepting any such warranty or additional liability.\n\n END OF TERMS AND CONDITIONS\n\n APPENDIX: How to apply the Apache License to your work.\n\n To apply the Apache License to your work, attach the following\n boilerplate notice, with the fields enclosed by brackets \"{}\"\n replaced with your own identifying information. (Don't include\n the brackets!) The text should be enclosed in the appropriate\n comment syntax for the file format. We also recommend that a\n file or class name and description of purpose be included on the\n same \"printed page\" as the copyright notice for easier\n identification within third-party archives.\n\n Copyright 2020 http://hsweb.me\n\n Licensed under the Apache License, Version 2.0 (the \"License\");\n you may not use this file except in compliance with the License.\n You may obtain a copy of the License at\n\n http://www.apache.org/licenses/LICENSE-2.0\n\n Unless required by applicable law or agreed to in writing, software\n distributed under the License is distributed on an \"AS IS\" BASIS,\n WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n See the License for the specific language governing permissions and\n limitations under the License.\n \n" }, { "path": "README.md", "content": "# hsweb4 基于spring-boot2,全响应式的后台管理框架\n\n[![Codecov](https://codecov.io/gh/hs-web/hsweb-framework/branch/4.0.x/graph/badge.svg)](https://codecov.io/gh/hs-web/hsweb-framework/branch/master)\n[![Build Status](https://api.travis-ci.com/hs-web/hsweb-framework.svg?branch=4.0.x)](https://travis-ci.com/hs-web/hsweb-framework)\n[![License](https://img.shields.io/badge/license-Apache%202-4EB1BA.svg?style=flat-square)](https://www.apache.org/licenses/LICENSE-2.0.html)\n\n# 功能,特性\n\n- [x] 基于[r2dbc](https://github.com/r2dbc) ,[easy-orm](https://github.com/hs-web/hsweb-easy-orm/tree/4.0.x) 的通用响应式CRUD\n - [x] H2,Mysql,SqlServer,PostgreSQL\n- [x] 响应式r2dbc事务控制\n- [x] 响应式权限控制,以及权限信息获取\n - [x] RBAC权限控制\n - [x] 数据权限控制\n - [ ] 双因子验证\n- [x] 多维度权限管理功能\n- [x] 响应式缓存\n- [ ] 非响应式支持(mvc,jdbc)\n- [ ] 内置业务功能\n - [x] 权限管理\n - [x] 用户管理\n - [x] 权限设置\n - [x] 权限分配\n - [ ] 文件上传\n - [x] 静态文件上传\n - [ ] 文件秒传\n - [x] 数据字典\n\n# 示例\n\nhttps://github.com/zhou-hao/hsweb4-examples\n\n## 应用场景\n\n1. 完全开源的后台管理系统.\n2. 模块化的后台管理系统.\n3. 功能可拓展的后台管理系统.\n4. 集成各种常用功能的后台管理系统.\n5. 前后分离的后台管理系统.\n\n注意:\n项目主要基于`spring-boot`,`spring-webflux`. 在使用`hsweb`之前,你应该对 [project-reactor](https://projectreactor.io/) ,\n[spring-boot](https://github.com/spring-projects/spring-boot) 有一定的了解.\n\n项目模块太多?不要被吓到.我们不推荐将本项目直接`clone`后修改,运行.而是使用maven依赖的方式使用`hsweb`. 选择自己需要的模块进行依赖,正式版发布后,所有模块都将发布到maven中央仓库.\n\n## 文档\n\n各个模块的使用方式查看对应模块下的 `README.md`,在使用之前, 你可以先粗略浏览一下各个模块,对每个模块的作用有大致的了解.\n\n## 核心技术选型\n\n1. Java 8\n2. Maven3\n3. Spring Boot 2.x\n4. Project Reactor 响应式编程框架\n5. hsweb easy orm 对r2dbc的orm封装\n\n## 模块简介\n\n| 模块 | 说明 | \n| ------------- |:----------:| \n|[hsweb-authorization](hsweb-authorization)| 权限控制 |\n|[hsweb-commons](hsweb-commons) | 基础通用功能 | \n|[hsweb-concurrent](hsweb-concurrent)| 并发包,缓存,等 | \n|[hsweb-core](hsweb-core)| 框架核心,基础工具类 | \n|[hsweb-datasource](hsweb-datasource)| 数据源 | \n|[hsweb-logging](hsweb-logging)| 日志 | \n|[hsweb-starter](hsweb-starter)| 模块启动器 | \n|[hsweb-system](hsweb-system)| **系统常用功能** |\n\n## 核心特性\n\n1. 响应式,首个基于spring-webflux,r2dbc,从头到位的响应式.\n2. DSL风格,可拓展的通用curd,支持前端直接传参数,无需担心任何sql注入.\n\n```java\n //where name = #{name}\n createQuery()\n .where(\"name\",name)\n .fetch();\n\n //update s_user set name = #{user.name} where id = #{user.id}\n createUpdate()\n .set(user::getName)\n .where(user::getId)\n .execute();\n\n```\n\n3. 类JPA增删改\n\n```java\n\n@Table(name = \"s_entity\")\npublic class MyEntity {\n \n @Id\n private String id;\n \n @Column\n private String name;\n\n @Column\n private Long createTime;\n}\n\n```\n\n直接注入即可实现增删改查\n\n```java\n\n@Autowire\nprivate ReactiveRepository repository;\n\n```\n\n2. 灵活的权限控制\n\n```java\n\n@PostMapping(\"/account\")\n@SaveAction\npublic Mono addAccount(@RequestBody Mono account){\n return accountService.doSave(account);\n}\n\n```\n\n## License\n\n[Apache 2.0](https://github.com/spring-projects/spring-boot/blob/main/LICENSE.txt)\n\n\n[![Stargazers over time](https://starchart.cc/hs-web/hsweb-framework.svg?variant=adaptive)](https://starchart.cc/hs-web/hsweb-framework)\n" }, { "path": "build.sh", "content": "#!/usr/bin/env bash\n./mvnw install -Dgit.commit.hash=$(git rev-parse HEAD) -DskipTests=true" }, { "path": "changes.sh", "content": "#!/usr/bin/env bash\n\n# 收集变更模块\nmodules=$(git diff --name-only HEAD~1 HEAD | \\\nwhile read file; do\n dir=$(dirname \"$file\")\n while [ \"$dir\" != \".\" ] && [ \"$dir\" != \"/\" ]; do\n if [ -f \"$dir/pom.xml\" ]; then echo \"$dir\"; break; fi\n dir=$(dirname \"$dir\")\n done\ndone | sort -u | tr '\\n' ',' | sed 's/,$//')\n\n# 如果为空，则使用默认值 '.'\nif [ -z \"$modules\" ]; then\n echo \".\"\nelse\n echo \"$modules\"\nfi" }, { "path": "hsweb-authorization/README.md", "content": "# 授权认证模块\n用于整个系统的授权认证管理\n\n# 目录介绍\n1. [hsweb-authorization-api](hsweb-authorization-api):权限控制API\n3. [hsweb-authorization-basic](hsweb-authorization-basic):权限控制基础实现\n\n" }, { "path": "hsweb-authorization/hsweb-authorization-api/README.md", "content": "# 权限控制API\n用于权限控制的API接口,支持RBAC权限控制,支持数据级（控制到行,列）权限控制.\n\n[用户令牌管理](token.md)\n\n[权限控制配置](define.md)\n\n# 介绍\n\n以下讲到的类都是基于包:org.hswebframework.web.authorization\n\n### 常用注解:\n_点击名称,查看源代码注释获得使用说明_\n\n| 注解名称 | 说明 | \n| ------------- |:-------------:| \n| [`@Authorize`](src/main/java/org/hswebframework/web/authorization/annotation/Authorize.java) | RBAC方式权限控制注解 | \n| [`@RequiresExpression`](src/main/java/org/hswebframework/web/authorization/annotation/RequiresExpression.java) | 表达式方式验证 | \n| [`@RequiresDataAccess`](src/main/java/org/hswebframework/web/authorization/annotation/RequiresDataAccess.java) | 数据权限控制 | \n\n[自定义数据权限控制](custom-data-access.md)\n\n### 常用类\n_点击名称,查看源代码注释获得使用说明_\n\n\n| 类名 | 说明 | \n| ------------- |:-------------:| \n| [`Authentication`](src/main/java/org/hswebframework/web/authorization/Authentication.java) | 用户的认证信息 | \n| [`AuthenticationHolder`](src/main/java/org/hswebframework/web/authorization/AuthenticationHolder.java) | 用于获取当前登录用户的认证信息 | \n\n\n### Listener\napi提供[AuthorizationListener](src/main/java/org/hswebframework/web/authorization/listener/AuthorizationListener.java)\n来进行授权逻辑拓展，在授权前后执行可自定义的操作.如rsa解密帐号密码,验证码判断等。\n\n默认事件列表():\n\n| 类名 | 说明 | \n| ------------- |:-------------:| \n| [`AuthorizationDecodeEvent`](src/main/java/org/hswebframework/web/authorization/listener/event/AuthorizationDecodeEvent.java) | 接收到请求参数时 | \n| [`AuthorizationBeforeEvent`](src/main/java/org/hswebframework/web/authorization/listener/event/AuthorizationBeforeEvent.java) | 验证密码前触发 | \n| [`AuthorizationFailedEvent`](src/main/java/org/hswebframework/web/authorization/listener/event/AuthorizationFailedEvent.java) | 授权验证失败时触发 | \n| [`AuthorizationSuccessEvent`](src/main/java/org/hswebframework/web/authorization/listener/event/AuthorizationSuccessEvent.java) | 授权成功时触发 | \n| [`AuthorizationExitEvent`](src/main/java/org/hswebframework/web/authorization/listener/event/AuthorizationExitEvent.java) | 用户注销时触发 | \n\n例子:\n\n```java\n@Component\npublic class CustomAuthorizationSuccessListener implements AuthorizationListener{\n @Override\n public void on(AuthorizationSuccessEvent event) {\n Authentication authentication=event.getAuthentication();\n //....\n System.out.println(authentication.getUser().getName()+\"登录啦\");\n }\n}\n```\n\n" }, { "path": "hsweb-authorization/hsweb-authorization-api/custom-data-access.md", "content": "# 自定义拓展数据权限控制\n\n1. 编写配置转换器,将在前端配置的内容转换为api需要的配置信息\n\n实现 ``DataAccessConfigConvert``接口\n```java\n@org.springframework.stereotype.Component\npublic class MyDataAccessConfigConvert implements DataAccessConfigConvert {\n\n @Override\n public boolean isSupport(String type, String action, String config) {\n return \"custom_type\".equals(type);\n }\n\n @Override\n public DataAccessConfig convert(String type, String action, String config) {\n MyDataAccessConfig accessConfig = JSON.parseObject(config, MyDataAccessConfig.class);\n accessConfig.setAction(action);\n accessConfig.setType(type);\n return accessConfig;\n }\n}\n```\n\n\n2. 实现 ``DataAccessHandler``接口\n```java\n@org.springframework.stereotype.Component //提供给Spring才会生效\npublic class MyDataAccessHandler implements org.hswebframework.web.authorization.access.DataAccessHandler{\n \n @Override\n public boolean isSupport(DataAccessConfig access) {\n //DataAccessConfig 在用户登录的时候,初始化\n //DataAccessConfig 由\n //支持的配置类型\n return \"custom_type\".equals(access.getType());\n }\n \n //处理请求,返回true表示授权通过\n @Override\n public boolean handle(DataAccessConfig access, MethodInterceptorParamContext context) {\n //被拦截的方法参数\n Map param= context.getNamedArguments();\n // 判断逻辑\n //...\n return true;\n }\n}\n```" }, { "path": "hsweb-authorization/hsweb-authorization-api/define.md", "content": "# 权限配置定义\n\n用于告诉权限框架哪些请求需要进行权限控制,怎么控制." }, { "path": "hsweb-authorization/hsweb-authorization-api/pom.xml", "content": "\n\n \n hsweb-authorization\n org.hswebframework.web\n 5.0.2-SNAPSHOT\n \n 4.0.0\n\n ${project.artifactId}\n 授权,权限管理API\n hsweb-authorization-api\n \n \n org.hswebframework.web\n hsweb-core\n ${project.version}\n \n\n \n org.springframework.data\n spring-data-redis\n true\n \n\n \n io.lettuce\n lettuce-core\n test\n \n\n \n com.alibaba\n fastjson\n \n\n \n org.springframework.boot\n spring-boot-starter\n true\n \n\n \n io.swagger.core.v3\n swagger-annotations\n \n\n \n jakarta.servlet\n jakarta.servlet-api\n true\n \n\n \n io.micrometer\n context-propagation\n true\n \n \n" }, { "path": "hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/Authentication.java", "content": "/*\n * Copyright 2020 http://www.hswebframework.org\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n *\n */\n\npackage org.hswebframework.web.authorization;\n\nimport org.springframework.util.StringUtils;\nimport reactor.core.publisher.Mono;\n\nimport java.io.Serializable;\nimport java.util.*;\nimport java.util.function.BiPredicate;\nimport java.util.function.Predicate;\nimport java.util.stream.Collectors;\n\n/**\n * 用户授权信息,当前登录用户的权限信息,包括用户的基本信息,角色,权限集合等常用信息
\n * 获取方式:\n *

springmvc 入参方式: ResponseMessage myTest(Authorization auth){}
静态方法方式:AuthorizationHolder.get();
响应式方式: return Authentication.currentReactive().map(auth->....)

\n *\n * @author zhouhao\n * @see ReactiveAuthenticationHolder\n * @see AuthenticationManager\n * @since 3.0\n */\npublic interface Authentication extends Serializable {\n\n /**\n * 获取当前登录的用户权限信息\n *

\n     *     public Mono<User> getUser(){\n     *         return Authentication.currentReactive()\n     *                 .switchIfEmpty(Mono.error(new UnAuthorizedException()))\n     *                 .flatMap(autz->findUserByUserId(autz.getUser().getId()));\n     *     }\n     *

\n *\n * @return 当前用户权限信息\n * @see ReactiveAuthenticationHolder\n * @since 4.0\n */\n static Mono currentReactive() {\n return ReactiveAuthenticationHolder.get();\n }\n\n /**\n * 非响应式环境适用\n *

\n     *\n     *   Authentication auth= Authentication.current().get();\n     *   //如果权限信息不存在将抛出{@link NoSuchElementException}建议使用下面的方式获取\n     *   Authentication auth=Authentication.current().orElse(null);\n     *   //或者\n     *   Authentication auth=Authentication.current().orElseThrow(UnAuthorizedException::new);\n     *

\n *\n * @return 当前用户权限信息\n * @see Optional\n */\n static Optional current() {\n return AuthenticationHolder.get();\n }\n\n /**\n * @return 用户信息\n */\n User getUser();\n\n /**\n * @return 用户所有维度\n * @since 4.0\n */\n List getDimensions();\n\n /**\n * @return 用户持有的权限集合\n */\n List getPermissions();\n\n default boolean hasDimension(String type, String... id) {\n return hasAnyDimension(type, Arrays.asList(id));\n }\n\n default boolean hasAllDimension(String type, Collection id) {\n if (id.isEmpty()) {\n return !getDimensions(type).isEmpty();\n }\n return getDimensions(type)\n .stream()\n .allMatch(p -> id.contains(p.getId()));\n }\n\n default boolean hasAnyDimension(String type, Collection id) {\n if (id.isEmpty()) {\n return !getDimensions(type).isEmpty();\n }\n return getDimensions(type)\n .stream()\n .anyMatch(p -> id.contains(p.getId()));\n }\n\n @Deprecated\n default boolean hasDimension(String type, Collection id) {\n if (id.isEmpty()) {\n return !getDimensions(type).isEmpty();\n }\n return getDimensions(type)\n .stream()\n .anyMatch(p -> id.contains(p.getId()));\n }\n\n default boolean hasDimension(DimensionType type, String id) {\n return getDimension(type, id).isPresent();\n }\n\n default Optional getDimension(String type, String id) {\n if (!StringUtils.hasText(type)) {\n return Optional.empty();\n }\n return getDimensions()\n .stream()\n .filter(dimension -> dimension.getId().equals(id) && type.equalsIgnoreCase(dimension.getType().getId()))\n .findFirst();\n }\n\n default Optional getDimension(DimensionType type, String id) {\n if (type == null) {\n return Optional.empty();\n }\n return getDimensions()\n .stream()\n .filter(dimension -> dimension.getId().equals(id) && type.isSameType(dimension.getType()))\n .findFirst();\n }\n\n\n default List getDimensions(String type) {\n if (!StringUtils.hasText(type)) {\n return Collections.emptyList();\n }\n return getDimensions()\n .stream()\n .filter(dimension -> dimension.getType().isSameType(type))\n .collect(Collectors.toList());\n }\n\n default List getDimensions(DimensionType type) {\n if (type == null) {\n return Collections.emptyList();\n }\n return getDimensions()\n .stream()\n .filter(dimension -> dimension.getType().isSameType(type))\n .collect(Collectors.toList());\n }\n\n\n /**\n * 根据权限id获取权限信息,权限不存在则返回null\n *\n * @param id 权限id\n * @return 权限信息\n */\n default Optional getPermission(String id) {\n if (null == id) {\n return Optional.empty();\n }\n return getPermissions()\n .stream()\n .filter(permission -> permission.getId().equals(id))\n .findAny();\n }\n\n /**\n * 判断是否持有某权限以及对权限的可操作事件\n *\n * @param permissionId 权限id {@link Permission#getId()}\n * @param actions 可操作动作 {@link Permission#getActions()} 如果为空,则不判断action,只判断permissionId\n * @return 是否持有权限\n */\n default boolean hasPermission(String permissionId, String... actions) {\n return hasPermission(permissionId,\n actions.length == 0\n ? Collections.emptyList()\n : Arrays.asList(actions));\n }\n\n default boolean hasPermission(String permissionId, Collection actions) {\n for (Permission permission : getPermissions()) {\n if (Objects.equals(permission.getId(), \"*\") ||\n Objects.equals(permissionId, permission.getId())) {\n return actions.isEmpty()\n || permission.getActions().containsAll(actions)\n || permission.getActions().contains(\"*\");\n }\n }\n return false;\n }\n\n /**\n * 根据属性名获取属性值,返回一个{@link Optional}对象。
\n * 此方法可用于获取自定义的属性信息\n *\n * @param name 属性名\n * @param 属性值类型\n * @return Optional属性值\n */\n Optional getAttribute(String name);\n\n /**\n * @return 全部属性集合\n */\n Map getAttributes();\n\n /**\n * 设置属性,注意: 此属性可能并不会被持久化,仅用于临时传递信息.\n *\n * @param key key\n * @param value value\n */\n default void setAttribute(String key, Serializable value) {\n getAttributes().put(key, value);\n }\n\n /**\n * 合并权限\n *\n * @param source 源权限信息\n * @return 合并后的信息\n */\n Authentication merge(Authentication source);\n\n /**\n * copy为新的权限信息\n *\n * @param permissionFilter 权限过滤\n * @param dimension 维度过滤\n * @return 新的权限信息\n */\n Authentication copy(BiPredicate permissionFilter,\n Predicate dimension);\n}\n" }, { "path": "hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/AuthenticationHolder.java", "content": "/*\n * Copyright 2020 http://www.hswebframework.org\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n *\n *\n */\n\npackage org.hswebframework.web.authorization;\n\nimport io.netty.util.concurrent.FastThreadLocal;\nimport lombok.SneakyThrows;\nimport org.hswebframework.web.authorization.simple.SimpleAuthentication;\nimport reactor.core.Disposable;\nimport reactor.core.publisher.Flux;\nimport reactor.core.publisher.Mono;\n\nimport java.util.ArrayList;\nimport java.util.List;\nimport java.util.Optional;\nimport java.util.concurrent.Callable;\nimport java.util.concurrent.locks.ReadWriteLock;\nimport java.util.concurrent.locks.ReentrantReadWriteLock;\nimport java.util.function.Function;\nimport java.util.stream.Collectors;\n\n/**\n * 权限获取器,用于静态方式获取当前登录用户的权限信息.\n * 例如:\n *

\n *     @RequestMapping(\"/example\")\n *     public ResponseMessage example(){\n *         Authorization auth = AuthorizationHolder.get();\n *         return ResponseMessage.ok();\n *     }\n *

\n *\n * @author zhouhao\n * @see AuthenticationSupplier\n * @since 3.0\n */\npublic final class AuthenticationHolder {\n private static final List suppliers = new ArrayList<>();\n\n private static final ReadWriteLock lock = new ReentrantReadWriteLock();\n\n private static final FastThreadLocal CURRENT = new FastThreadLocal<>();\n\n\n private static Optional get(Function> function) {\n int size = suppliers.size();\n if (size == 0) {\n return Optional.empty();\n }\n if (size == 1) {\n return function.apply(suppliers.get(0));\n }\n AuthenticationUtils.AuthenticationMerging merging\n = new AuthenticationUtils.AuthenticationMerging();\n for (AuthenticationSupplier supplier : suppliers) {\n function.apply(supplier).ifPresent(merging::merge);\n }\n return Optional.ofNullable(merging.get());\n }\n\n\n /**\n * @return 当前登录的用户权限信息\n */\n public static Optional get() {\n Authentication current = CURRENT.getIfExists();\n if (current != null) {\n return Optional.of(current);\n }\n return get(AuthenticationSupplier::get);\n }\n\n /**\n * 获取指定用户的权限信息\n *\n * @param userId 用户ID\n * @return 权限信息\n */\n public static Optional get(String userId) {\n return get(supplier -> supplier.get(userId));\n }\n\n /**\n * 初始化 {@link AuthenticationSupplier}\n *\n * @param supplier 认证信息提供者\n */\n public static void addSupplier(AuthenticationSupplier supplier) {\n lock.writeLock().lock();\n try {\n suppliers.add(supplier);\n } finally {\n lock.writeLock().unlock();\n }\n }\n\n public static void resetCurrent() {\n CURRENT.remove();\n }\n\n public static void makeCurrent(Authentication authentication) {\n if (authentication == null) {\n resetCurrent();\n } else {\n CURRENT.set(authentication);\n }\n }\n\n /**\n * 指定用户权限，执行一个任务。任务执行过程中可通过 {@link Authentication#current()}获取到当前权限.\n *\n * @param current 当前用户权限信息\n * @param callable 任务执行器\n * @param 任务执行结果类型\n * @return 任务执行结果\n */\n @SneakyThrows\n public static T executeWith(Authentication current, Callable callable) {\n Authentication previous = CURRENT.getIfExists();\n try {\n CURRENT.set(current);\n return callable.call();\n } finally {\n CURRENT.set(previous);\n }\n }\n\n}\n" }, { "path": "hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/AuthenticationManager.java", "content": "/*\n * Copyright 2020 http://www.hswebframework.org\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n *\n *\n */\n\npackage org.hswebframework.web.authorization;\n\nimport java.util.Optional;\n\n/**\n * 授权信息管理器,用于获取用户授权和同步授权信息\n *\n * @author zhouhao\n * @see 3.0\n */\npublic interface AuthenticationManager {\n\n /**\n * 进行授权操作\n *\n * @param request 授权请求\n * @return 授权成功则返回用户权限信息\n */\n Authentication authenticate(AuthenticationRequest request);\n\n /**\n * 根据用户ID获取权限信息\n *\n * @param userId 用户ID\n * @return 权限信息\n */\n Optional getByUserId(String userId);\n\n\n}\n" }, { "path": "hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/AuthenticationPredicate.java", "content": "package org.hswebframework.web.authorization;\n\nimport org.hswebframework.web.authorization.exception.AccessDenyException;\n\nimport java.util.Arrays;\nimport java.util.Objects;\nimport java.util.function.Predicate;\n\n/**\n * @author zhouhao\n * @since 3.0\n */\n@FunctionalInterface\npublic interface AuthenticationPredicate extends Predicate {\n\n static AuthenticationPredicate has(String permissionString) {\n return AuthenticationUtils.createPredicate(permissionString);\n }\n\n static AuthenticationPredicate dimension(String dimension, String... id) {\n return autz -> autz.hasAnyDimension(dimension, Arrays.asList(id));\n }\n\n static AuthenticationPredicate permission(String permissionId, String... actions) {\n return autz -> autz.hasPermission(permissionId, actions);\n }\n\n default AuthenticationPredicate and(String permissionString) {\n return and(has(permissionString));\n }\n\n default AuthenticationPredicate or(String permissionString) {\n return or(has(permissionString));\n }\n\n @Override\n default AuthenticationPredicate and(Predicate other) {\n Objects.requireNonNull(other);\n return (t) -> test(t) && other.test(t);\n }\n\n @Override\n default AuthenticationPredicate or(Predicate other) {\n Objects.requireNonNull(other);\n return (t) -> test(t) || other.test(t);\n }\n\n\n default void assertHas(Authentication authentication) {\n if (!test(authentication)) {\n throw new AccessDenyException();\n }\n }\n\n}\n" }, { "path": "hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/AuthenticationRequest.java", "content": "package org.hswebframework.web.authorization;\n\nimport java.io.Serializable;\n\n/**\n * @author zhouhao\n * @since 3.0.0-RC\n */\npublic interface AuthenticationRequest extends Serializable {\n}\n" }, { "path": "hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/AuthenticationSupplier.java", "content": "/*\n * Copyright 2020 http://www.hswebframework.org\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n *\n */\n\npackage org.hswebframework.web.authorization;\n\n\nimport java.util.Optional;\nimport java.util.function.Supplier;\n\n/**\n * @author zhouhao\n * @see Supplier\n * @see Authentication\n * @see ReactiveAuthenticationHolder\n */\npublic interface AuthenticationSupplier extends Supplier> {\n\n Optional get(String userId);\n}\n" }, { "path": "hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/AuthenticationUtils.java", "content": "package org.hswebframework.web.authorization;\n\nimport org.hswebframework.web.authorization.simple.SimpleAuthentication;\nimport org.springframework.util.ObjectUtils;\nimport org.springframework.util.StringUtils;\nimport reactor.core.publisher.Flux;\nimport reactor.core.publisher.Mono;\n\n/**\n * @author zhouhao\n * @since 3.0\n */\npublic class AuthenticationUtils {\n\n\n public static Mono merge(Flux authenticationFlux){\n return authenticationFlux\n .collect(AuthenticationMerging::new, AuthenticationMerging::merge)\n .mapNotNull(AuthenticationMerging::get);\n }\n\n static class AuthenticationMerging {\n\n private Authentication auth;\n private int count;\n\n public synchronized void merge(Authentication auth) {\n if (this.auth == null || this.auth == auth) {\n this.auth = auth;\n } else {\n if (count++ == 0) {\n SimpleAuthentication newAuth = new SimpleAuthentication();\n newAuth.merge(this.auth);\n this.auth = newAuth;\n }\n this.auth.merge(auth);\n }\n }\n\n Authentication get() {\n return auth;\n }\n }\n\n\n public static AuthenticationPredicate createPredicate(String expression) {\n if (ObjectUtils.isEmpty(expression)) {\n return (authentication -> false);\n }\n AuthenticationPredicate main = null;\n // resource:user:add or update\n AuthenticationPredicate temp = null;\n boolean lastAnd = true;\n for (String conf : expression.split(\"[ ]\")) {\n if (conf.startsWith(\"resource:\")||conf.startsWith(\"permission:\")) {\n String[] permissionAndActions = conf.split(\"[:]\", 2);\n if (permissionAndActions.length < 2) {\n temp = authentication -> !authentication.getPermissions().isEmpty();\n } else {\n String[] real = permissionAndActions[1].split(\"[:]\");\n temp = real.length > 1 ?\n AuthenticationPredicate.permission(real[0], real[1].split(\"[,]\"))\n : AuthenticationPredicate.permission(real[0]);\n }\n } else if (main != null && conf.equalsIgnoreCase(\"and\")) {\n lastAnd = true;\n main = main.and(temp);\n } else if (main != null && conf.equalsIgnoreCase(\"or\")) {\n main = main.or(temp);\n lastAnd = false;\n } else {\n String[] real = conf.split(\"[:]\", 2);\n if (real.length < 2) {\n temp = AuthenticationPredicate.dimension(real[0]);\n } else {\n temp = AuthenticationPredicate.dimension(real[0], real[1].split(\",\"));\n }\n }\n if (main == null) {\n main = temp;\n }\n }\n return main == null ? a -> false : (lastAnd ? main.and(temp) : main.or(temp));\n }\n}\n" }, { "path": "hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/DefaultDimensionType.java", "content": "package org.hswebframework.web.authorization;\n\nimport lombok.AllArgsConstructor;\nimport lombok.Getter;\n\n@Getter\n@AllArgsConstructor\npublic enum DefaultDimensionType implements DimensionType {\n user(\"用户\"),\n role(\"角色\");\n\n private String name;\n\n @Override\n public String getId() {\n return name();\n }\n}\n" }, { "path": "hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/Dimension.java", "content": "package org.hswebframework.web.authorization;\n\nimport org.hswebframework.web.authorization.simple.SimpleDimension;\n\nimport java.io.Serializable;\nimport java.util.Map;\nimport java.util.Optional;\n\npublic interface Dimension extends Serializable {\n String getId();\n\n String getName();\n\n DimensionType getType();\n\n Map getOptions();\n\n default Optional getOption(String key) {\n return Optional.ofNullable(getOptions())\n .map(ops -> ops.get(key))\n .map(o -> (T) o);\n }\n\n default boolean typeIs(DimensionType type) {\n return this.getType() == type || this.getType().getId().equals(type.getId());\n }\n\n default boolean typeIs(String type) {\n return this.getType().getId().equals(type);\n }\n\n static Dimension of(String id, String name, DimensionType type) {\n return of(id, name, type, null);\n }\n\n static Dimension of(String id, String name, DimensionType type, Map options) {\n return SimpleDimension.of(id, name, type, options);\n }\n}\n" }, { "path": "hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/DimensionProvider.java", "content": "package org.hswebframework.web.authorization;\n\nimport reactor.core.publisher.Flux;\nimport reactor.core.publisher.Mono;\n\nimport java.util.Collection;\n\n/**\n * 维度提供商,用户管理维度信息\n *\n * @author zhouhao\n * @since 4.0\n */\npublic interface DimensionProvider {\n\n /**\n * 获取全部支持的维度\n *\n * @return 全部支持的维度\n */\n Flux getAllType();\n\n /**\n * 获取用户获取维度信息\n *\n * @param userId 用户ID\n * @return 维度列表\n */\n Flux getDimensionByUserId(String userId);\n\n /**\n * 根据维度类型和ID获取维度信息\n *\n * @param type 类型\n * @param id ID\n * @return 维度信息\n */\n Mono getDimensionById(DimensionType type, String id);\n\n /**\n * 根据维度类型和Id获取多个维度\n * @param type 类型\n * @param idList ID\n * @return 维度信息\n */\n default Flux getDimensionsById(DimensionType type, Collection idList){\n return Flux\n .fromIterable(idList)\n .flatMap(id->this.getDimensionById(type,id));\n }\n\n /**\n * 根据维度ID获取用户ID\n *\n * @param dimensionId 维度ID\n * @return 用户ID\n */\n Flux getUserIdByDimensionId(String dimensionId);\n}\n" }, { "path": "hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/DimensionType.java", "content": "package org.hswebframework.web.authorization;\n\npublic interface DimensionType {\n String getId();\n\n String getName();\n\n default boolean isSameType(DimensionType another) {\n return this == another || isSameType(another.getId());\n }\n\n default boolean isSameType(String anotherId) {\n return this.getId().equals(anotherId);\n }\n}\n" }, { "path": "hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/Permission.java", "content": "/*\n * Copyright 2020 http://www.hswebframework.org\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n *\n */\n\npackage org.hswebframework.web.authorization;\n\nimport org.hswebframework.web.authorization.access.DataAccessConfig;\nimport org.hswebframework.web.authorization.access.FieldFilterDataAccessConfig;\nimport org.hswebframework.web.authorization.access.ScopeDataAccessConfig;\n\nimport java.io.Serializable;\nimport java.util.*;\nimport java.util.function.Predicate;\nimport java.util.stream.Collectors;\n\nimport static org.hswebframework.web.authorization.access.DataAccessConfig.DefaultType.DENY_FIELDS;\n\n/**\n * 用户持有的权限信息,包含了权限基本信息、可操作范围(action)、行,列级权限控制规则。\n * 是用户权限的重要接口。\n *\n * @author zhouhao\n * @see Authentication\n * @since 3.0\n */\npublic interface Permission extends Serializable {\n /**\n * 查询\n */\n String ACTION_QUERY = \"query\";\n /**\n * 获取明细\n */\n String ACTION_GET = \"get\";\n /**\n * 新增\n */\n String ACTION_ADD = \"add\";\n /**\n * 保存\n */\n String ACTION_SAVE = \"save\";\n /**\n * 更新\n */\n String ACTION_UPDATE = \"update\";\n\n /**\n * 删除\n */\n String ACTION_DELETE = \"delete\";\n /**\n * 导入\n */\n String ACTION_IMPORT = \"import\";\n /**\n * 导出\n */\n String ACTION_EXPORT = \"export\";\n\n /**\n * 禁用\n */\n String ACTION_DISABLE = \"disable\";\n\n /**\n * 启用\n */\n String ACTION_ENABLE = \"enable\";\n\n /**\n * @return 权限ID，权限的唯一标识\n */\n String getId();\n\n /**\n * @return 权限名称\n */\n String getName();\n\n /**\n * @return 其他拓展字段\n */\n Map getOptions();\n\n default Optional