* public Mono<User> getUser(){ * return Authentication.currentReactive() * .switchIfEmpty(Mono.error(new UnAuthorizedException())) * .flatMap(autz->findUserByUserId(autz.getUser().getId())); * } *
* * Authentication auth= Authentication.current().get(); * //如果权限信息不存在将抛出{@link NoSuchElementException}建议使用下面的方式获取 * Authentication auth=Authentication.current().orElse(null); * //或者 * Authentication auth=Authentication.current().orElseThrow(UnAuthorizedException::new); *
* @RequestMapping("/example") * public ResponseMessage example(){ * Authorization auth = AuthorizationHolder.get(); * return ResponseMessage.ok(); * } *
* ⚠️:任何时候都不应该对返回的Set进行写操作 * * @return 如果没有配置返回空{@link Collections#emptySet()},不会返回null. */ Set getActions(); /** * 用户对此权限持有的数据权限信息, 用于数据级别的控制 * * ⚠️:任何时候都不应该对返回的Set进行写操作 * * @return 如果没有配置返回空{@link Collections#emptySet()},不会返回null. * @see DataAccessConfig * @see org.hswebframework.web.authorization.access.DataAccessController */ @Deprecated Set getDataAccesses(); default Set getDataAccesses(String action) { return getDataAccesses() .stream() .filter(conf -> conf.getAction().equals(action)) .collect(Collectors.toSet()); } /** * 查找数据权限配置 * * @param configPredicate 数据权限配置匹配规则 * @param 数据权限配置类型 * @return {@link Optional} * @see this#scope(String, String, String) */ @SuppressWarnings("all") default Optional findDataAccess(DataAccessPredicate configPredicate) { return (Optional) getDataAccesses().stream() .filter(configPredicate) .findFirst(); } /** * 查找字段过滤的数据权限配置(列级数据权限),比如:不查询某些字段 * * @param action 权限操作类型 {@link Permission#ACTION_QUERY} * @return {@link Optional} * @see FieldFilterDataAccessConfig * @see FieldFilterDataAccessConfig#getFields() */ default Optional findFieldFilter(String action) { return findDataAccess(conf -> conf instanceof FieldFilterDataAccessConfig && conf.getAction().equals(action)); } /** * 获取不能执行操作的字段 * * @param action 权限操作 * @return 未配置时返回空set, 不会返回null */ default Set findDenyFields(String action) { return findFieldFilter(action) .filter(conf -> DENY_FIELDS.equals(conf.getType().getId())) .map(FieldFilterDataAccessConfig::getFields) .orElseGet(Collections::emptySet); } /** * 查找数据范围权限控制配置(行级数据权限),比如: 只能查询本机构的数据 * * @param type 范围类型标识,由具体的实现定义,如: 机构范围 * @param scopeType 范围类型,由具体的实现定义,如: 只能查看自己所在机构 * @param action 权限操作 {@link Permission#ACTION_QUERY} * @return 未配置时返回空set, 不会返回null */ default Set findScope(String action, String type, String scopeType) { return findScope(scope(action, type, scopeType)); } default Set findScope(Permission.DataAccessPredicate predicate) { return findDataAccess(predicate) .map(ScopeDataAccessConfig::getScope) .orElseGet(Collections::emptySet); } /** * 构造一个数据范围权限控制配置查找逻辑 * * @param type 范围类型标识,由具体的实现定义,如: 机构范围 * @param scopeType 范围类型,由具体的实现定义,如: 只能查看自己所在机构 * @param action 权限操作 {@link Permission#ACTION_QUERY} * @return {@link DataAccessPredicate} */ static Permission.DataAccessPredicate scope(String action, String type, String scopeType) { Objects.requireNonNull(action, "action can not be null"); Objects.requireNonNull(type, "type can not be null"); Objects.requireNonNull(scopeType, "scopeType can not be null"); return config -> config instanceof ScopeDataAccessConfig && action.equals(config.getAction()) && type.equals(config.getType()) && scopeType.equals(((ScopeDataAccessConfig) config).getScopeType()); } Permission copy(); Permission copy(Predicate actionFilter,Predicate dataAccessFilter); /** * 数据权限查找判断逻辑接口 * * @param */ interface DataAccessPredicate extends Predicate { boolean test(DataAccessConfig config); @Override default DataAccessPredicate and(Predicate other) { return (t) -> test(t) && other.test(t); } @Override default DataAccessPredicate or(Predicate other) { return (t) -> test(t) || other.test(t); } } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/ReactiveAuthenticationHolder.java ================================================ /* * Copyright 2019 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization; import com.google.common.collect.Lists; import reactor.core.publisher.Flux; import reactor.core.publisher.Mono; import reactor.util.context.Context; import java.util.List; import java.util.concurrent.CopyOnWriteArrayList; import java.util.function.Function; /** * 响应式权限保持器,用于响应式方式获取当前登录用户的权限信息. * 例如: * {@code * @RequestMapping("/example") * public Mono example(){ * return ReactiveAuthenticationHolder.get(); * } * } * * * @author zhouhao * @see ReactiveAuthenticationSupplier * @since 4.0 */ public final class ReactiveAuthenticationHolder { private static final List suppliers = new CopyOnWriteArrayList<>(); public static final String IGNORE_AUTH_KEY = ".auth.ignore"; static final Context IGNORE_AUTH_CONTEXT_Y = Context.of(IGNORE_AUTH_KEY, true); static final Context IGNORE_AUTH_CONTEXT_N = Context.of(IGNORE_AUTH_KEY, false); private static Mono get(Function> function) { return AuthenticationUtils .merge(Flux.merge(Lists.transform(suppliers, function::apply))); } /** * @return 当前登录的用户权限信息 */ public static Mono get() { return Mono.deferContextual(ctx -> { if (Boolean.TRUE.equals(ctx.getOrDefault(IGNORE_AUTH_KEY, false))) { return Mono.empty(); } return get(ReactiveAuthenticationSupplier::get); }); } /** * 获取指定用户的权限信息 * * @param userId 用户ID * @return 权限信息 */ public static Mono get(String userId) { return get(supplier -> supplier.get(userId)); } /** * 初始化 {@link ReactiveAuthenticationSupplier} * * @param supplier */ public static void addSupplier(ReactiveAuthenticationSupplier supplier) { suppliers.add(supplier); } public static void setSupplier(ReactiveAuthenticationSupplier supplier) { suppliers.clear(); suppliers.add(supplier); } public static Context ignoreContext(boolean ignore) { return ignore ? IGNORE_AUTH_CONTEXT_Y : IGNORE_AUTH_CONTEXT_N; } public static Function ignoreIfAbsent(boolean ignore) { return ctx -> ctx.hasKey(IGNORE_AUTH_KEY) ? ctx : ctx.put(IGNORE_AUTH_KEY, ignore); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/ReactiveAuthenticationInitializeService.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization; import org.hswebframework.web.authorization.events.AuthorizationInitializeEvent; import reactor.core.publisher.Mono; /** * 授权信息初始化服务接口,使用该接口初始化用的权限信息 * * @author zhouhao * @since 4.0 */ public interface ReactiveAuthenticationInitializeService { /** * 根据用户ID初始化权限信息 * * @param userId 用户ID * @return 权限信息 * @see AuthorizationInitializeEvent */ Mono initUserAuthorization(String userId); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/ReactiveAuthenticationManager.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization; import reactor.core.publisher.Mono; /** * 授权信息管理器,用于获取用户授权和同步授权信息 * * @author zhouhao * @see 3.0 */ public interface ReactiveAuthenticationManager { /** * 进行授权操作 * * @param request 授权请求 * @return 授权成功则返回用户权限信息 */ Mono authenticate(Mono request); /** * 根据用户ID获取权限信息 * * @param userId 用户ID * @return 权限信息 */ Mono getByUserId(String userId); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/ReactiveAuthenticationManagerProvider.java ================================================ package org.hswebframework.web.authorization; import reactor.core.publisher.Mono; public interface ReactiveAuthenticationManagerProvider { /** * 进行授权操作 * * @param request 授权请求 * @return 授权成功则返回用户权限信息 */ Mono authenticate(Mono request); /** * 根据用户ID获取权限信息 * * @param userId 用户ID * @return 权限信息 */ Mono getByUserId(String userId); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/ReactiveAuthenticationSupplier.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.hswebframework.web.authorization; import reactor.core.publisher.Mono; import java.util.function.Supplier; /** * @author zhouhao * @see Supplier * @see Authentication * @see ReactiveAuthenticationHolder * @since 4.0 */ public interface ReactiveAuthenticationSupplier extends Supplier> { Mono get(String userId); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/Role.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.hswebframework.web.authorization; import org.hswebframework.web.authorization.simple.SimpleRole; /** * 角色信息 * * @author zhouhao * @since 3.0 */ public interface Role extends Dimension { /** * @return 角色ID */ String getId(); /** * @return 角色名 */ String getName(); @Override default DimensionType getType() { return DefaultDimensionType.role; } static Role fromDimension(Dimension dimension){ return SimpleRole.of(dimension); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/User.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.hswebframework.web.authorization; /** * 用户信息 * * @author zhouhao * @since 3.0 */ public interface User extends Dimension { /** * @return 用户ID */ String getId(); /** * @return 用户名 */ String getUsername(); /** * @return 姓名 */ String getName(); /** * @return 用户类型 */ String getUserType(); @Override default DimensionType getType() { return DefaultDimensionType.user; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/DataAccessConfig.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.access; import org.hswebframework.web.authorization.Permission; import java.io.Serializable; /** * 数据级的权限控制,此接口为控制方式配置 * 具体的控制逻辑由控制器{@link DataAccessController}实现 * * @author zhouhao * @see OwnCreatedDataAccessConfig */ public interface DataAccessConfig extends Serializable { /** * 对数据的操作事件 * * @return 操作时间 * @see Permission#ACTION_ADD * @see Permission#ACTION_DELETE * @see Permission#ACTION_GET * @see Permission#ACTION_QUERY * @see Permission#ACTION_UPDATE */ String getAction(); /** * 控制方式标识 * * @return 控制方式 * @see DefaultType */ DataAccessType getType(); /** * 内置的控制方式 */ interface DefaultType { /** * 自己创建的数据 * * @see OwnCreatedDataAccessConfig#getType() */ String OWN_CREATED = "OWN_CREATED"; /** * 禁止操作字段 * * @see FieldFilterDataAccessConfig#getType() */ String DENY_FIELDS = "DENY_FIELDS"; /** * 禁止操作字段 * * @see org.hswebframework.web.authorization.simple.DimensionDataAccessConfig#getType() */ String DIMENSION_SCOPE = "DIMENSION_SCOPE"; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/DataAccessConfiguration.java ================================================ package org.hswebframework.web.authorization.access; public interface DataAccessConfiguration { } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/DataAccessController.java ================================================ package org.hswebframework.web.authorization.access; import org.hswebframework.web.authorization.define.AuthorizingContext; /** * 数据级别权限控制器,通过此控制器对当前登录用户进行的操作进行数据级别的权限控制。 * 如：A用户只能查询自己创建的B数据,A用户只能修改自己创建的B数据 * * @author zhouhao * @since 3.0 */ @Deprecated public interface DataAccessController { /** * 执行权限控制 * @param access 控制方式以及配置 * @param context 权限验证上下文，用于传递验证过程用到的参数 * @return 授权是否通过 */ boolean doAccess(DataAccessConfig access, AuthorizingContext context); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/DataAccessHandler.java ================================================ package org.hswebframework.web.authorization.access; import org.hswebframework.web.authorization.define.AuthorizingContext; /** * 数据级别权限控制处理器接口,负责处理支持的权限控制配置 * * @author zhouhao */ public interface DataAccessHandler { /** * 是否支持处理此配置 * * @param access 控制配置 * @return 是否支持 */ boolean isSupport(DataAccessConfig access); /** * 执行处理,返回处理结果 * * @param access 控制配置 * @param context 参数上下文 * @return 处理结果 */ boolean handle(DataAccessConfig access, AuthorizingContext context); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/DataAccessType.java ================================================ package org.hswebframework.web.authorization.access; public interface DataAccessType { String getId(); String getName(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/DefaultDataAccessType.java ================================================ package org.hswebframework.web.authorization.access; import lombok.AllArgsConstructor; import lombok.Getter; import org.hswebframework.web.dict.Dict; import org.hswebframework.web.dict.EnumDict; @Getter @AllArgsConstructor public enum DefaultDataAccessType implements DataAccessType, EnumDict { USER_OWN_DATA("自己的数据"), FIELD_DENY("禁止操作字段"), DIMENSION_SCOPE("维度范围"); private final String name; @Override public String getText() { return name; } @Override public String getValue() { return getId(); } @Override public String getId() { return name().toLowerCase(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/DimensionHelper.java ================================================ package org.hswebframework.web.authorization.access; import lombok.AccessLevel; import lombok.NoArgsConstructor; import org.apache.commons.collections4.CollectionUtils; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.authorization.Dimension; import org.hswebframework.web.authorization.DimensionType; import org.hswebframework.web.authorization.Permission; import org.hswebframework.web.authorization.simple.DimensionDataAccessConfig; import java.util.Collections; import java.util.Set; import java.util.stream.Collectors; @NoArgsConstructor(access = AccessLevel.PRIVATE) public abstract class DimensionHelper { public static Set getDimensionDataAccessScope(Authentication atz, Permission permission, String action, String dimensionType) { return permission .getDataAccesses(action) .stream() .filter(DimensionDataAccessConfig.class::isInstance) .map(DimensionDataAccessConfig.class::cast) .filter(conf -> dimensionType.equals(conf.getScopeType())) .flatMap(conf -> { if (CollectionUtils.isEmpty(conf.getScope())) { return atz.getDimensions(dimensionType) .stream() .map(Dimension::getId); } return conf.getScope().stream(); }).collect(Collectors.toSet()); } public static Set getDimensionDataAccessScope(Authentication atz, Permission permission, String action, DimensionType dimensionType) { return getDimensionDataAccessScope(atz, permission, action, dimensionType.getId()); } public static Set getDimensionDataAccessScope(Authentication atz, String permission, String action, String dimensionType) { return atz .getPermission(permission) .map(per -> getDimensionDataAccessScope(atz, per, action, dimensionType)).orElseGet(Collections::emptySet); } public static Set getDimensionDataAccessScope(Authentication atz, String permission, String action, DimensionType dimensionType) { return atz .getPermission(permission) .map(per -> getDimensionDataAccessScope(atz, per, action, dimensionType)) .orElseGet(Collections::emptySet); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/FieldFilterDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.access; import java.util.Set; /** * 对字段进行过滤操作配置,实现字段级别的权限控制 * * @author zhouhao * @see DataAccessConfig * @see org.hswebframework.web.authorization.simple.SimpleFieldFilterDataAccessConfig */ public interface FieldFilterDataAccessConfig extends DataAccessConfig { Set getFields(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/OwnCreatedDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.access; /** * 只能操作由自己创建的数据 * * @author zhouhao */ public interface OwnCreatedDataAccessConfig extends DataAccessConfig { @Override default DataAccessType getType() { return DefaultDataAccessType.USER_OWN_DATA; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/ScopeDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.access; import java.util.Set; /** * 范围数据权限控制配置 * * @author zhouhao * @see DataAccessConfig * @since 3.0 */ public interface ScopeDataAccessConfig extends DataAccessConfig { /** * @return 范围类型 */ String getScopeType(); /** * @return 自定义的控制范围 */ Set getScope(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/UserAttachEntity.java ================================================ package org.hswebframework.web.authorization.access; /** * 和user关联的实体 * * @author zhouhao * @since 3.0.6 */ public interface UserAttachEntity { String userId = "userId"; String getUserId(); void setUserId(String userId); default String getUserIdProperty() { return userId; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/Authorize.java ================================================ /* * * * Copyright 2020 http://www.hswebframework.org * * * * Licensed under the Apache License, Version 2.0 (the "License"); * * you may not use this file except in compliance with the License. * * You may obtain a copy of the License at * * * * http://www.apache.org/licenses/LICENSE-2.0 * * * * Unless required by applicable law or agreed to in writing, software * * distributed under the License is distributed on an "AS IS" BASIS, * * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * * See the License for the specific language governing permissions and * * limitations under the License. * */ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.define.Phased; import java.lang.annotation.*; /** * 基础权限控制注解,提供基本的控制配置 * * @author zhouhao * @see org.hswebframework.web.authorization.Authentication * @see org.hswebframework.web.authorization.define.AuthorizeDefinition * @see Resource * @see ResourceAction * @see Dimension * @see DataAccess * @since 3.0 */ @Target({ElementType.TYPE, ElementType.METHOD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented public @interface Authorize { Resource[] resources() default {}; Dimension[] dimension() default {}; /** * 是否运行匿名访问,匿名访问时,直接允许执行,否则将进行权限验证. * * @return 是否允许匿名访问 * @since 4.0.19 */ boolean anonymous() default false; /** * 验证失败时返回的消息 * * @return 验证失败提示的消息 */ String message() default "无访问权限"; /** * 是否合并类上的注解 * * @return 是否合并类上的注解 */ boolean merge() default true; /** * 验证模式，在使用多个验证条件时有效 * * @return logical */ Logical logical() default Logical.DEFAULT; /** * @return 验证时机，在方法调用前还是调用后 */ Phased phased() default Phased.before; /** * @return 是否忽略, 忽略后将不进行权限控制 */ boolean ignore() default false; String[] description() default {}; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/CreateAction.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.Permission; import org.springframework.core.annotation.AliasFor; import java.lang.annotation.*; @Target({ElementType.METHOD,ElementType.FIELD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @ResourceAction(id = Permission.ACTION_ADD, name = "新增") public @interface CreateAction { } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/DataAccess.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.access.DataAccessController; import java.lang.annotation.*; /** * 数据级权限控制注解,用于进行需要数据级别权限控制的声明. * * 此注解仅用于声明此方法需要进行数据级权限控制,具体权限控制方式由控制器实{@link DataAccessController}现 * * * @author zhouhao * @see DataAccessController * @see ResourceAction#dataAccess() * @since 3.0 * @deprecated 已弃用, 4.1中移除 */ @Target({ElementType.ANNOTATION_TYPE, ElementType.METHOD}) @Retention(RetentionPolicy.RUNTIME) @Documented @Deprecated public @interface DataAccess { DataAccessType[] type() default {}; /** * @return logical */ Logical logical() default Logical.AND; /** * @return 是否忽略, 忽略后将不进行权限控制 */ boolean ignore() default false; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/DataAccessType.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.access.DataAccessConfiguration; import org.hswebframework.web.authorization.access.DataAccessController; import java.lang.annotation.*; @Target({ElementType.ANNOTATION_TYPE, ElementType.METHOD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @Deprecated public @interface DataAccessType { String id(); //标识 String name(); //名称 String[] description() default {}; /** * @see DataAccessController */ Class controller() default DataAccessController.class; Class configuration() default DataAccessConfiguration.class; boolean ignore() default false; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/DeleteAction.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.Permission; import org.springframework.core.annotation.AliasFor; import java.lang.annotation.*; @Target({ElementType.METHOD,ElementType.FIELD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @ResourceAction(id = Permission.ACTION_DELETE, name = "删除") public @interface DeleteAction { } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/Dimension.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.DimensionType; import java.lang.annotation.*; import static java.lang.annotation.ElementType.*; import static java.lang.annotation.RetentionPolicy.RUNTIME; /** * 请使用注解继承方式使用此注解 * * @author zhouhao * @see RequiresRoles * @since 4.0 */ @Target({ElementType.ANNOTATION_TYPE}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @Repeatable(value = Dimension.List.class) public @interface Dimension { /** * 维度类型标识,如: role,org * * @return 维度类型 * @see org.hswebframework.web.authorization.Dimension#getType() * @see DimensionType#getId() * @see org.hswebframework.web.authorization.Authentication#hasDimension(String, String...) */ String type(); /** * 具体的维度ID,如: 角色ID,组织ID * * @return 维度ID * @see org.hswebframework.web.authorization.Dimension#getId() * @see org.hswebframework.web.authorization.Authentication#hasDimension(String, String...) */ String[] id() default {}; /** * 配置了多个ID时的判断逻辑,默认为任意满足则认为有权限. * * @return Logical */ Logical logical() default Logical.DEFAULT; /** * @return 说明 */ String[] description() default {}; /** * @return 是否忽略 */ boolean ignore() default false; @Target({ANNOTATION_TYPE}) @Retention(RUNTIME) @Documented @Inherited @interface List { Dimension[] value() default {}; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/DimensionDataAccess.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.define.Phased; import org.springframework.core.annotation.AliasFor; import java.lang.annotation.*; @DataAccessType(id = "dimension", name = "维度数据权限") @Retention(RetentionPolicy.RUNTIME) @Documented @Target({ElementType.ANNOTATION_TYPE, ElementType.METHOD}) @Authorize @Deprecated public @interface DimensionDataAccess { Mapping[] mapping() default {}; @AliasFor(annotation = Authorize.class) Phased phased() default Phased.before; @AliasFor(annotation = DataAccessType.class) boolean ignore() default false; @Retention(RetentionPolicy.RUNTIME) @Documented @Target({ElementType.ANNOTATION_TYPE, ElementType.METHOD}) @interface Mapping { String dimensionType(); String property(); int idParamIndex() default -1; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/Dimensions.java ================================================ package org.hswebframework.web.authorization.annotation; import java.lang.annotation.*; import static java.lang.annotation.ElementType.*; import static java.lang.annotation.RetentionPolicy.RUNTIME; /** * 标记多个维度的权限控制相关配置 * * @author zhouhao * @since 5.0.1 */ @Target({ElementType.METHOD, TYPE, ANNOTATION_TYPE, FIELD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented public @interface Dimensions { /** * 存在多个维度时的判断逻辑,默认任意一个满足则认为有权限 * * @return Logical */ Logical logical() default Logical.DEFAULT; /** * @return 针对当前配置的说明信息 */ String[] description() default {}; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/FieldDataAccess.java ================================================ package org.hswebframework.web.authorization.annotation; import org.springframework.core.annotation.AliasFor; import java.lang.annotation.*; /** * @deprecated 已弃用 */ @DataAccessType(id = "FIELD_DENY", name = "字段权限") @Retention(RetentionPolicy.RUNTIME) @Documented @Target({ElementType.ANNOTATION_TYPE, ElementType.METHOD}) @Deprecated public @interface FieldDataAccess { @AliasFor(annotation = DataAccessType.class) boolean ignore() default false; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/Logical.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.hswebframework.web.authorization.annotation; public enum Logical { AND, OR, DEFAULT } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/QueryAction.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.Permission; import org.springframework.core.annotation.AliasFor; import java.lang.annotation.*; @Target({ElementType.METHOD,ElementType.FIELD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @ResourceAction(id = Permission.ACTION_QUERY, name = "查询") public @interface QueryAction { } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/RequiresRoles.java ================================================ package org.hswebframework.web.authorization.annotation; import org.springframework.core.annotation.AliasFor; import java.lang.annotation.*; import static java.lang.annotation.RetentionPolicy.RUNTIME; /** * 注解根据角色维度进行权限控制,具有权限的用户才可访问对应的方法. * * {@code * @RequiresRoles("admin") * public Mono handleRequest(){ * * } * } * * @author zhouhao * @see Dimension * @since 4.0 */ @Target({ElementType.METHOD, ElementType.TYPE, ElementType.FIELD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @Dimension(type = "role") @Repeatable(RequiresRoles.List.class) public @interface RequiresRoles { /** * @return 角色ID */ @AliasFor(annotation = Dimension.class, attribute = "id") String[] value() default {}; /** * 多个角色时的判断逻辑 * @return Logical */ @AliasFor(annotation = Dimension.class, attribute = "logical") Logical logical() default Logical.DEFAULT; @Target({ElementType.METHOD, ElementType.TYPE, ElementType.FIELD}) @Retention(RUNTIME) @Documented @Inherited @Dimension.List() @interface List { RequiresRoles[] value(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/Resource.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.Permission; import org.hswebframework.web.authorization.define.Phased; import java.lang.annotation.*; import static java.lang.annotation.ElementType.ANNOTATION_TYPE; import static java.lang.annotation.RetentionPolicy.RUNTIME; /** * 接口资源声明注解,声明Controller的资源相关信息,用于进行权限控制。 * * 在Controller进行注解,表示此接口需要有对应的权限{@link Permission#getId()}才能进行访问. * 具体的操作权限控制,需要在方法上注解{@link ResourceAction}. * * * * {@code * @RestController * //声明资源 * @Resource(id = "test", name = "测试功能") * public class TestController implements ReactiveCrudController { * * //声明操作,需要有 test:query 权限才能访问此接口 * @QueryAction * public Mono getUser() { * return Authentication.currentReactive() * .switchIfEmpty(Mono.error(new UnAuthorizedException())) * .map(Authentication::getUser); * } * * } * } * * 如果接口不需要进行权限控制,可注解{@link Authorize#ignore()}来标识此接口不需要权限控制. * 或者通过监听 {@link org.hswebframework.web.authorization.events.AuthorizingHandleBeforeEvent}来进行自定义处理 * {@code * @EventListener * public void handleAuthEvent(AuthorizingHandleBeforeEvent e) { * //admin用户可以访问全部操作 * if ("admin".equals(e.getContext().getAuthentication().getUser().getUsername())) { * e.setAllow(true); * } * } * } * * @author zhouhao * @see ResourceAction * @see Authorize * @see org.hswebframework.web.authorization.events.AuthorizingHandleBeforeEvent * @since 4.0 */ @Target({ElementType.ANNOTATION_TYPE, ElementType.METHOD,ElementType.FIELD, ElementType.TYPE}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @Repeatable(Resource.List.class) public @interface Resource { /** * 资源ID * * @return 资源ID */ String id(); /** * @return 资源名称 */ String name(); /** * @return 资源操作定义 */ ResourceAction[] actions() default {}; /** * @return 多个操作控制逻辑 */ Logical logical() default Logical.DEFAULT; /** * @return 权限控制阶段 */ Phased phased() default Phased.before; /** * @return 资源描述 */ String[] description() default {}; /** * @return 资源分组 */ String[] group() default {}; /** * 如果在方法上设置此属性，表示是否合并类上注解的属性 * * @return 是否合并 */ boolean merge() default true; @Target({ANNOTATION_TYPE}) @Retention(RUNTIME) @Documented @Inherited @interface List { Resource[] value(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/ResourceAction.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.Permission; import java.lang.annotation.*; import static java.lang.annotation.ElementType.*; import static java.lang.annotation.RetentionPolicy.RUNTIME; /** * 对资源操作的描述,通常用来进行权限控制. * * 在Controller方法上添加此注解,来声明根据权限操作{@link Permission#getActions()}进行权限控制. * * 可以使用注解继承的方式来统一定义操作: * {@code * @Target(ElementType.METHOD) * @Retention(RetentionPolicy.RUNTIME) * @Inherited * @Documented * @ResourceAction(id = "create", name = "新增") * public @interface CreateAction { * * } * } * * * @see CreateAction * @see DeleteAction * @see SaveAction * @see org.hswebframework.web.authorization.Authentication * @see Permission#getActions() */ @Target({ANNOTATION_TYPE, FIELD, METHOD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @Repeatable(ResourceAction.List.class) public @interface ResourceAction { /** * 操作标识 * * @return 操作标识 * @see Permission#getActions() */ String id(); /** * @return 操作名称 */ String name(); /** * @return 操作说明 */ String[] description() default {}; /** * @return 多个操作时的判断逻辑 */ Logical logical() default Logical.DEFAULT; @Target({ANNOTATION_TYPE, FIELD, METHOD}) @Retention(RUNTIME) @Documented @Inherited @interface List { ResourceAction[] value(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/SaveAction.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.Permission; import java.lang.annotation.*; /** * 继承{@link ResourceAction},提供统一的id定义 * * @author zhouhao * @since 4.0 */ @Target({ElementType.METHOD,ElementType.FIELD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @ResourceAction(id = Permission.ACTION_SAVE, name = "保存") public @interface SaveAction { } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/TwoFactor.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.twofactor.TwoFactorValidator; import java.lang.annotation.*; /** * 开启2FA双重验证 * * @see org.hswebframework.web.authorization.twofactor.TwoFactorValidatorManager * @see org.hswebframework.web.authorization.twofactor.TwoFactorValidatorProvider * @see org.hswebframework.web.authorization.twofactor.TwoFactorValidator * @since 3.0.4 */ @Target({ElementType.TYPE, ElementType.METHOD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented public @interface TwoFactor { /** * @return 接口的标识, 用于实现不同的操作, 可能会配置不同的验证规则 */ String value(); /** * @return 验证有效期, 超过有效期后需要重新进行验证 */ long timeout() default 10 * 60 * 1000L; /** * 验证器供应商,如: totp,sms,email,由{@link org.hswebframework.web.authorization.twofactor.TwoFactorValidatorProvider}进行自定义. * * 可通过配置项: hsweb.authorize.two-factor.default-provider 来修改默认配置 * * @return provider * @see TwoFactorValidator#getProvider() */ String provider() default "default"; /** * 验证码的http参数名,在进行验证的时候需要传入此参数 * * @return 验证码的参数名 */ String parameter() default "verifyCode"; /** * @return 关闭验证 */ boolean ignore() default false; /** * * @return 错误提示 * @since 3.0.6 */ String message() default "validation.verify_code_error"; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/UserOwnData.java ================================================ package org.hswebframework.web.authorization.annotation; import java.lang.annotation.*; /** * 声明某个操作支持用户查看自己的数据 * * @deprecated 已弃用 */ @Target({ElementType.ANNOTATION_TYPE, ElementType.METHOD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @DataAccessType(id = "user_own_data", name = "用户自己的数据") @Deprecated public @interface UserOwnData { } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/builder/AuthenticationBuilder.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.hswebframework.web.authorization.builder; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.authorization.Permission; import org.hswebframework.web.authorization.Role; import org.hswebframework.web.authorization.User; import java.io.Serializable; import java.util.List; import java.util.Map; public interface AuthenticationBuilder extends Serializable { AuthenticationBuilder user(User user); AuthenticationBuilder user(String user); AuthenticationBuilder user(Map user); AuthenticationBuilder role(List role); AuthenticationBuilder role(String role); AuthenticationBuilder permission(List permission); AuthenticationBuilder permission(String permission); AuthenticationBuilder attributes(String attributes); AuthenticationBuilder attributes(Map permission); AuthenticationBuilder json(String json); Authentication build(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/builder/AuthenticationBuilderFactory.java ================================================ package org.hswebframework.web.authorization.builder; /** * 权限构造器工厂 * * @author zhouhao */ public interface AuthenticationBuilderFactory { /** * @return 新建一个权限构造器 */ AuthenticationBuilder create(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/builder/DataAccessConfigBuilder.java ================================================ package org.hswebframework.web.authorization.builder; import org.hswebframework.web.authorization.access.DataAccessConfig; import java.util.Map; /** * * @author zhouhao */ public interface DataAccessConfigBuilder { DataAccessConfigBuilder fromJson(String json); DataAccessConfigBuilder fromMap(Map json); DataAccessConfig build(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/builder/DataAccessConfigBuilderFactory.java ================================================ package org.hswebframework.web.authorization.builder; /** * 数据权限配置构造器工厂 * * @author zhouhao */ public interface DataAccessConfigBuilderFactory { /** * @return 新建一个数据权限配置构造器工厂 */ DataAccessConfigBuilder create(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/context/AuthenticationThreadLocalAccessor.java ================================================ package org.hswebframework.web.authorization.context; import io.micrometer.context.ThreadLocalAccessor; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.authorization.AuthenticationHolder; import org.hswebframework.web.authorization.ReactiveAuthenticationHolder; import javax.annotation.Nonnull; public class AuthenticationThreadLocalAccessor implements ThreadLocalAccessor { static final Object KEY = Authentication.class; static { ReactiveAuthenticationHolder.addSupplier( new ThreadLocalReactiveAuthenticationSupplier() ); } @Override @Nonnull public Object key() { return KEY; } @Override public Authentication getValue() { return AuthenticationHolder.get().orElse(null); } @Override public void setValue() { AuthenticationHolder.resetCurrent(); } @Override public void setValue(@Nonnull Authentication value) { AuthenticationHolder.makeCurrent(value); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/context/ThreadLocalReactiveAuthenticationSupplier.java ================================================ package org.hswebframework.web.authorization.context; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.authorization.AuthenticationHolder; import org.hswebframework.web.authorization.ReactiveAuthenticationSupplier; import reactor.core.publisher.Mono; class ThreadLocalReactiveAuthenticationSupplier implements ReactiveAuthenticationSupplier { @Override public Mono get(String userId) { return Mono.empty(); } @Override public Mono get() { return Mono.justOrEmpty(AuthenticationHolder.get()); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AopAuthorizeDefinition.java ================================================ package org.hswebframework.web.authorization.define; import java.lang.reflect.Method; /** * @author zhouhao * @since 1.0 */ public interface AopAuthorizeDefinition extends AuthorizeDefinition { Class getTargetClass(); Method getTargetMethod(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AuthorizeDefinition.java ================================================ package org.hswebframework.web.authorization.define; import java.util.StringJoiner; /** * 权限控制定义,定义权限控制的方式 * * @author zhouhao * @since 3.0 */ public interface AuthorizeDefinition { ResourcesDefinition getResources(); DimensionsDefinition getDimensions(); String getMessage(); Phased getPhased(); boolean isEmpty(); default boolean allowAnonymous() { return false; } default String getDescription() { ResourcesDefinition res = getResources(); StringJoiner joiner = new StringJoiner(";"); for (ResourceDefinition resource : res.getResources()) { joiner.add(resource.getId() + ":" + String.join(",", resource.getActionIds())); } return joiner.toString(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AuthorizeDefinitionContext.java ================================================ package org.hswebframework.web.authorization.define; public interface AuthorizeDefinitionContext { void addResource(ResourceDefinition def); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AuthorizeDefinitionCustomizer.java ================================================ package org.hswebframework.web.authorization.define; public interface AuthorizeDefinitionCustomizer { void custom(AuthorizeDefinitionContext context); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AuthorizeDefinitionInitializedEvent.java ================================================ package org.hswebframework.web.authorization.define; import org.hswebframework.web.authorization.events.AuthorizationEvent; import org.springframework.context.ApplicationEvent; import java.util.List; public class AuthorizeDefinitionInitializedEvent extends ApplicationEvent implements AuthorizationEvent { private static final long serialVersionUID = -8185138454949381441L; public AuthorizeDefinitionInitializedEvent(List all) { super(all); } @SuppressWarnings("unchecked") public List getAllDefinition() { return ((List) getSource()); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AuthorizingContext.java ================================================ package org.hswebframework.web.authorization.define; import lombok.AllArgsConstructor; import lombok.Getter; import lombok.NoArgsConstructor; import lombok.Setter; import org.hswebframework.web.aop.MethodInterceptorContext; import org.hswebframework.web.authorization.Authentication; /** * 权限控制上下文 */ @Getter @Setter @NoArgsConstructor @AllArgsConstructor public class AuthorizingContext { private AuthorizeDefinition definition; private Authentication authentication; private MethodInterceptorContext paramContext; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/CompositeAuthorizeDefinitionCustomizer.java ================================================ package org.hswebframework.web.authorization.define; import lombok.AllArgsConstructor; import java.util.List; import java.util.stream.Collectors; import java.util.stream.StreamSupport; @AllArgsConstructor public class CompositeAuthorizeDefinitionCustomizer implements AuthorizeDefinitionCustomizer{ private final List customizers; public CompositeAuthorizeDefinitionCustomizer(Iterable customizers){ this(StreamSupport.stream(customizers.spliterator(),false).collect(Collectors.toList())); } @Override public void custom(AuthorizeDefinitionContext context) { for (AuthorizeDefinitionCustomizer customizer : customizers) { customizer.custom(context); } } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/DataAccessDefinition.java ================================================ package org.hswebframework.web.authorization.define; import lombok.Getter; import lombok.Setter; import java.util.*; @Getter @Setter public class DataAccessDefinition { Set dataAccessTypes = new HashSet<>(); public Optional getType(String typeId) { return dataAccessTypes .stream() .filter(type -> type.getId() != null && type.getId().equalsIgnoreCase(typeId)) .findAny(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/DataAccessTypeDefinition.java ================================================ package org.hswebframework.web.authorization.define; import lombok.EqualsAndHashCode; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.authorization.access.DataAccessController; import org.hswebframework.web.authorization.access.DataAccessType; import org.hswebframework.web.authorization.access.DataAccessConfiguration; import org.hswebframework.web.bean.FastBeanCopier; @Getter @Setter @EqualsAndHashCode(of = "id") public class DataAccessTypeDefinition implements DataAccessType { private String id; private String name; private String description; private Class controller; private Class configuration; public DataAccessTypeDefinition copy(){ return FastBeanCopier.copy(this,DataAccessTypeDefinition::new); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/DimensionDefinition.java ================================================ package org.hswebframework.web.authorization.define; import lombok.EqualsAndHashCode; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.authorization.DimensionType; import org.hswebframework.web.authorization.annotation.Logical; import org.hswebframework.web.bean.FastBeanCopier; import reactor.function.Predicate3; import java.util.Collection; import java.util.Collections; import java.util.HashSet; import java.util.Set; import java.util.function.BiPredicate; import java.util.function.Predicate; @Getter @Setter @EqualsAndHashCode(of = "typeId") public class DimensionDefinition { private String typeId; private String typeName; private Set dimensionId = new HashSet<>(); private Logical logical = Logical.DEFAULT; public boolean hasDimension(Predicate3> filter) { return filter.test(typeId,logical, Collections.unmodifiableSet(dimensionId)); } public boolean hasDimension(Set dimensionIdPredicate) { if (logical == Logical.AND) { return dimensionIdPredicate.containsAll(dimensionId); } return dimensionId .stream() .anyMatch(dimensionIdPredicate::contains); } public boolean hasDimension(String id) { return dimensionId.contains(id); } public void addDimensionI(Set id) { dimensionId.addAll(id); } public DimensionDefinition copy() { return FastBeanCopier.copy(this, DimensionDefinition::new); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/DimensionsDefinition.java ================================================ package org.hswebframework.web.authorization.define; import lombok.Getter; import lombok.Setter; import org.apache.commons.collections4.CollectionUtils; import org.apache.commons.collections4.MapUtils; import org.apache.commons.collections4.Predicate; import org.hswebframework.web.authorization.Dimension; import org.hswebframework.web.authorization.annotation.Logical; import reactor.function.Predicate3; import java.util.*; import java.util.concurrent.ConcurrentHashMap; import java.util.function.BiPredicate; import java.util.stream.Collectors; @Getter @Setter public class DimensionsDefinition { private Map dimensionsMapping = new ConcurrentHashMap<>(); private Logical logical = Logical.DEFAULT; private String description; public Set getDimensions() { return new HashSet<>(dimensionsMapping.values()); } public void clear() { dimensionsMapping.clear(); } public void addDimension(DimensionDefinition definition) { DimensionDefinition old = dimensionsMapping.putIfAbsent(definition.getTypeId(), definition); if (old != null) { old.addDimensionI(definition.getDimensionId()); } } public boolean isEmpty() { return MapUtils.isEmpty(this.dimensionsMapping); } public boolean hasDimension(Dimension dimension) { DimensionDefinition def = dimensionsMapping.get(dimension.getType().getId()); return def != null && def.hasDimension(dimension.getId()); } public boolean hasDimension(Predicate3> filter) { if (logical == Logical.AND) { return dimensionsMapping .values() .stream() .allMatch(e -> e.hasDimension(filter)); } else { return dimensionsMapping .values() .stream() .anyMatch(e -> e.hasDimension(filter)); } } public boolean hasDimension(List dimensions) { if (logical == Logical.AND) { return dimensions.stream().allMatch(this::hasDimension); } return dimensions.stream().anyMatch(this::hasDimension); } @Override public String toString() { return dimensionsMapping .values() .stream() .map(d -> String.join(",", d.getDimensionId()) + "@" + d.getTypeId()) .collect(Collectors.joining(";")); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/HandleType.java ================================================ package org.hswebframework.web.authorization.define; public enum HandleType{ RBAC,DATA } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/MergedAuthorizeDefinition.java ================================================ package org.hswebframework.web.authorization.define; import java.util.List; import java.util.Set; public class MergedAuthorizeDefinition implements AuthorizeDefinitionContext { private final ResourcesDefinition resources = new ResourcesDefinition(); private final DimensionsDefinition dimensions = new DimensionsDefinition(); public Set getResources() { return resources.getResources(); } public Set getDimensions() { return dimensions.getDimensions(); } public void addResource(ResourceDefinition resource) { resources.addResource(resource, true); } public void addDimension(DimensionDefinition resource) { dimensions.addDimension(resource); } public void merge(List definitions) { for (AuthorizeDefinition definition : definitions) { definition.getResources().getResources().forEach(this::addResource); definition.getDimensions().getDimensions().forEach(this::addDimension); } } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/Phased.java ================================================ package org.hswebframework.web.authorization.define; public enum Phased { before, after } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/ResourceActionDefinition.java ================================================ package org.hswebframework.web.authorization.define; import lombok.EqualsAndHashCode; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.bean.FastBeanCopier; import org.hswebframework.web.i18n.I18nSupportUtils; import org.hswebframework.web.i18n.MultipleI18nSupportEntity; import java.util.Collection; import java.util.HashMap; import java.util.Locale; import java.util.Map; import static org.hswebframework.web.authorization.define.ResourceDefinition.supportLocale; @Getter @Setter @EqualsAndHashCode(of = "id") public class ResourceActionDefinition implements MultipleI18nSupportEntity { private String id; private String name; private String description; private Map> i18nMessages; @Deprecated private DataAccessDefinition dataAccess = new DataAccessDefinition(); private final static String resolveActionPrefix = "hswebframework.web.system.action."; public ResourceActionDefinition copy() { return FastBeanCopier.copy(this, ResourceActionDefinition::new); } public Map> getI18nMessages() { if (org.springframework.util.CollectionUtils.isEmpty(i18nMessages)) { this.i18nMessages = I18nSupportUtils .putI18nMessages( resolveActionPrefix + this.id, "name", supportLocale, null, this.i18nMessages ); } return i18nMessages; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/ResourceDefinition.java ================================================ package org.hswebframework.web.authorization.define; import com.fasterxml.jackson.annotation.JsonIgnore; import lombok.AccessLevel; import lombok.EqualsAndHashCode; import lombok.Getter; import lombok.Setter; import org.apache.commons.collections4.CollectionUtils; import org.hswebframework.web.authorization.annotation.Logical; import org.hswebframework.web.bean.FastBeanCopier; import org.hswebframework.web.i18n.I18nSupportUtils; import org.hswebframework.web.i18n.MultipleI18nSupportEntity; import java.util.*; import java.util.stream.Collectors; @Getter @Setter @EqualsAndHashCode(of = "id") public class ResourceDefinition implements MultipleI18nSupportEntity { private String id; private String name; private String description; private Set actions = new HashSet<>(); private List group; private Map> i18nMessages; @Setter(value = AccessLevel.PRIVATE) @JsonIgnore private volatile Set actionIds; private Logical logical = Logical.DEFAULT; private Phased phased = Phased.before; public final static List supportLocale = new ArrayList<>(); static { supportLocale.add(Locale.CHINESE); supportLocale.add(Locale.ENGLISH); } private final static String resolvePermissionPrefix = "hswebframework.web.system.permission."; public static ResourceDefinition of(String id, String name) { ResourceDefinition definition = new ResourceDefinition(); definition.setId(id); definition.setName(name); return definition; } public Map> getI18nMessages() { if (org.springframework.util.CollectionUtils.isEmpty(i18nMessages)) { this.i18nMessages = I18nSupportUtils .putI18nMessages( resolvePermissionPrefix + this.id, "name", supportLocale, null, this.i18nMessages ); } return i18nMessages; } public ResourceDefinition copy() { ResourceDefinition definition = FastBeanCopier.copy(this, ResourceDefinition::new); definition.setActions(actions.stream().map(ResourceActionDefinition::copy).collect(Collectors.toSet())); return definition; } public ResourceDefinition addAction(String id, String name) { ResourceActionDefinition action = new ResourceActionDefinition(); action.setId(id); action.setName(name); return addAction(action); } public synchronized ResourceDefinition addAction(ResourceActionDefinition action) { actionIds = null; actions.add(action); return this; } public Optional getAction(String action) { return actions.stream() .filter(act -> act.getId().equalsIgnoreCase(action)) .findAny(); } public Set getActionIds() { if (actionIds == null) { actionIds = this.actions .stream() .map(ResourceActionDefinition::getId) .collect(Collectors.toSet()); } return actionIds; } @JsonIgnore public List getDataAccessAction() { return actions.stream() .filter(act -> CollectionUtils.isNotEmpty(act.getDataAccess().getDataAccessTypes())) .collect(Collectors.toList()); } public boolean hasDataAccessAction() { return actions.stream() .anyMatch(act -> CollectionUtils.isNotEmpty(act.getDataAccess().getDataAccessTypes())); } public boolean hasAction(Collection actions) { if (CollectionUtils.isEmpty(this.actions)) { return true; } if (CollectionUtils.isEmpty(actions)) { return false; } if (logical == Logical.AND) { return getActionIds().containsAll(actions); } return getActionIds().stream().anyMatch(actions::contains); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/ResourcesDefinition.java ================================================ package org.hswebframework.web.authorization.define; import com.fasterxml.jackson.annotation.JsonIgnore; import lombok.Getter; import lombok.Setter; import org.apache.commons.collections4.CollectionUtils; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.authorization.Permission; import org.hswebframework.web.authorization.annotation.Logical; import java.util.*; import java.util.concurrent.ConcurrentHashMap; import java.util.stream.Collectors; @Getter @Setter public class ResourcesDefinition { private final Set resources = ConcurrentHashMap.newKeySet(); private Logical logical = Logical.DEFAULT; private Phased phased = Phased.before; public void clear() { resources.clear(); } public void addResource(ResourceDefinition resource, boolean merge) { ResourceDefinition definition = getResource(resource.getId()).orElse(null); if (definition != null) { if (merge) { resource.getActions() .stream() .map(ResourceActionDefinition::copy) .forEach(definition::addAction); } else { resources.remove(definition); } } resources.add(resource.copy()); } public Optional getResource(String id) { return resources .stream() .filter(resource -> resource.getId().equals(id)) .findAny(); } @JsonIgnore public List getDataAccessResources() { return resources .stream() .filter(ResourceDefinition::hasDataAccessAction) .collect(Collectors.toList()); } public boolean hasPermission(Permission permission) { if (CollectionUtils.isEmpty(resources)) { return true; } return getResource(permission.getId()) .filter(resource -> resource.hasAction(permission.getActions())) .isPresent(); } public boolean isEmpty() { return resources.isEmpty(); } public boolean hasPermission(Authentication authentication) { int size = resources.size(); if (size == 0) { return true; } if (size == 1) { for (ResourceDefinition resource : resources) { if (authentication.hasPermission(resource.getId(), resource.getActionIds())) { return true; } } return false; } if (logical == Logical.AND) { return resources .stream() .allMatch(resource -> authentication.hasPermission(resource.getId(), resource.getActionIds())); } return resources .stream() .anyMatch(resource -> authentication.hasPermission(resource.getId(), resource.getActionIds())); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/dimension/DimensionManager.java ================================================ package org.hswebframework.web.authorization.dimension; import reactor.core.publisher.Flux; import java.util.Collection; /** * 维度管理器 * * @author zhouhao * @since 4.0.12 */ public interface DimensionManager { /** * 获取用户维度 * * @param userId 用户ID * @return 用户维度信息 */ Flux getUserDimension(Collection userId); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/dimension/DimensionUserBind.java ================================================ package org.hswebframework.web.authorization.dimension; import lombok.AllArgsConstructor; import lombok.Getter; import lombok.NoArgsConstructor; import lombok.Setter; import java.io.Externalizable; import java.io.IOException; import java.io.ObjectInput; import java.io.ObjectOutput; @Getter @Setter @AllArgsConstructor(staticName = "of") @NoArgsConstructor public class DimensionUserBind implements Externalizable { private static final long serialVersionUID = -6849794470754667710L; private String userId; private String dimensionType; private String dimensionId; @Override public void writeExternal(ObjectOutput out) throws IOException { out.writeUTF(userId); out.writeUTF(dimensionType); out.writeUTF(dimensionId); } @Override public void readExternal(ObjectInput in) throws IOException, ClassNotFoundException { userId = in.readUTF(); dimensionType = in.readUTF(); dimensionId = in.readUTF(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/dimension/DimensionUserBindProvider.java ================================================ package org.hswebframework.web.authorization.dimension; import reactor.core.publisher.Flux; import java.util.Collection; public interface DimensionUserBindProvider { Flux getDimensionBindInfo(Collection userIdList); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/dimension/DimensionUserDetail.java ================================================ package org.hswebframework.web.authorization.dimension; import lombok.AllArgsConstructor; import lombok.Getter; import lombok.NoArgsConstructor; import lombok.Setter; import org.hswebframework.web.authorization.Dimension; import java.io.Serializable; import java.util.ArrayList; import java.util.List; @Getter @Setter @AllArgsConstructor(staticName = "of") @NoArgsConstructor public class DimensionUserDetail implements Serializable { private static final long serialVersionUID = -6849794470754667710L; private String userId; private List dimensions; public DimensionUserDetail merge(DimensionUserDetail detail) { DimensionUserDetail newDetail = new DimensionUserDetail(); newDetail.setUserId(userId); newDetail.setDimensions(new ArrayList<>()); if (null != dimensions) { newDetail.dimensions.addAll(dimensions); } if (null != detail.getDimensions()) { newDetail.dimensions.addAll(detail.getDimensions()); } return newDetail; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AbstractAuthorizationEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import org.hswebframework.web.event.DefaultAsyncEvent; import java.util.Optional; import java.util.function.Function; /** * 抽象授权事件,保存事件常用的数据 * * @author zhouhao * @since 3.0 */ public abstract class AbstractAuthorizationEvent extends DefaultAsyncEvent implements AuthorizationEvent { private static final long serialVersionUID = -3027505108916079214L; protected String username; protected String password; private final transient Function parameterGetter; /** * 所有参数不能为null * * @param username 用户名 * @param password 密码 * @param parameterGetter 参数获取函数,用户获取授权时传入的参数 */ public AbstractAuthorizationEvent(String username, String password, Function parameterGetter) { if (username == null || password == null || parameterGetter == null) { throw new NullPointerException(); } this.username = username; this.password = password; this.parameterGetter = parameterGetter; } @SuppressWarnings("unchecked") public Optional getParameter(String name) { return Optional.ofNullable((T) parameterGetter.apply(name)); } public String getUsername() { return username; } public String getPassword() { return password; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationBeforeEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import lombok.Getter; import org.hswebframework.web.authorization.Authentication; import java.util.function.Function; /** * 授权前事件 * * @author zhouhao * @since 3.0 */ @Getter public class AuthorizationBeforeEvent extends AbstractAuthorizationEvent { private static final long serialVersionUID = 5948747533500518524L; private String userId; private Authentication authentication; public AuthorizationBeforeEvent(String username, String password, Function parameterGetter) { super(username, password, parameterGetter); } public void setAuthorized(String userId) { this.userId = userId; } public void setAuthorized(Authentication authentication) { this.authentication = authentication; } public boolean isAuthorized() { return userId != null || authentication != null; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationDecodeEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import java.util.function.Function; /** * 在进行授权时的最开始,触发此事件进行用户名密码解码,解码后请调用{@link #setUsername(String)} {@link #setPassword(String)}重新设置用户名密码 * * @author zhouhao * @since 3.0 */ public class AuthorizationDecodeEvent extends AbstractAuthorizationEvent { private static final long serialVersionUID = 5418501934490174251L; public AuthorizationDecodeEvent(String username, String password, Function parameterGetter) { super(username, password, parameterGetter); } public void setUsername(String username) { super.username = username; } public void setPassword(String password) { super.password = password; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; /** * 授权事件 * * @author zhouhao * @see AuthorizationSuccessEvent * @see AuthorizationFailedEvent * @see AuthorizationBeforeEvent * @see AuthorizationDecodeEvent * @see AuthorizationExitEvent * @see org.springframework.context.ApplicationEvent * @since 3.0 */ public interface AuthorizationEvent { } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationExitEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.event.DefaultAsyncEvent; import org.springframework.context.ApplicationEvent; /** * 退出登录事件 * * @author zhouhao */ public class AuthorizationExitEvent extends DefaultAsyncEvent implements AuthorizationEvent { private static final long serialVersionUID = -4590245933665047280L; private final Authentication authentication; public AuthorizationExitEvent(Authentication authentication) { this.authentication = authentication; } public Authentication getAuthentication() { return authentication; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationFailedEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import java.util.function.Function; /** * 授权失败时触发 * * @author zhouhao */ public class AuthorizationFailedEvent extends AbstractAuthorizationEvent { private static final long serialVersionUID = -101792832265740828L; /** * 异常信息 */ private Throwable exception; public AuthorizationFailedEvent(String username, String password, Function parameterGetter) { super(username, password, parameterGetter); } public Throwable getException() { return exception; } public void setException(Throwable exception) { this.exception = exception; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationInitializeEvent.java ================================================ package org.hswebframework.web.authorization.events; import lombok.AllArgsConstructor; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.event.DefaultAsyncEvent; @Getter @Setter @AllArgsConstructor public class AuthorizationInitializeEvent extends DefaultAsyncEvent { private Authentication authentication; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationSuccessEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.event.DefaultAsyncEvent; import java.util.HashMap; import java.util.Map; import java.util.Optional; import java.util.function.Function; /** * 授权成功事件,当授权成功时,触发此事件,并传入授权的信息 * * @author zhouhao * @see Authentication * @since 3.0 */ public class AuthorizationSuccessEvent extends DefaultAsyncEvent implements AuthorizationEvent { private static final long serialVersionUID = -2452116314154155058L; private final Authentication authentication; private final transient Function parameterGetter; private Map result = new HashMap<>(); public AuthorizationSuccessEvent(Authentication authentication, Function parameterGetter) { this.authentication = authentication; this.parameterGetter = parameterGetter; } public Authentication getAuthentication() { return authentication; } @SuppressWarnings("unchecked") public Optional getParameter(String name) { return Optional.ofNullable((T) parameterGetter.apply(name)); } public Map getResult() { return result; } public void setResult(Map result) { this.result = result; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizingHandleBeforeEvent.java ================================================ package org.hswebframework.web.authorization.events; import org.hswebframework.web.authorization.define.AuthorizingContext; import org.hswebframework.web.authorization.define.HandleType; import org.hswebframework.web.event.DefaultAsyncEvent; import org.springframework.context.ApplicationEvent; /** * 权限控制事件,在进行权限控制之前会推送此事件，用于自定义权限控制结果: * {@code * @EventListener * public void handleAuthEvent(AuthorizingHandleBeforeEvent e) { * //admin用户可以访问全部操作 * if ("admin".equals(e.getContext().getAuthentication().getUser().getUsername())) { * e.setAllow(true); * } * } * } * * @author zhouhao * @since 4.0 */ public class AuthorizingHandleBeforeEvent extends DefaultAsyncEvent implements AuthorizationEvent { private boolean allow = false; private boolean execute = true; private String message; private final AuthorizingContext context; /** * @deprecated 数据权限控制已取消,4.1版本后移除 */ @Deprecated private final HandleType handleType; public AuthorizingHandleBeforeEvent(AuthorizingContext context, HandleType handleType) { this.context = context; this.handleType = handleType; } public AuthorizingContext getContext() { return context; } public boolean isExecute() { return execute; } public boolean isAllow() { return allow; } /** * 设置通过当前请求 * * @param allow allow */ public void setAllow(boolean allow) { execute = false; this.allow = allow; } public String getMessage() { return message; } /** * 设置错误提示消息 * * @param message 消息 */ public void setMessage(String message) { this.message = message; } /** * @return 权限控制类型 */ public HandleType getHandleType() { return handleType; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/exception/AccessDenyException.java ================================================ package org.hswebframework.web.authorization.exception; import lombok.Getter; import org.hswebframework.web.exception.I18nSupportException; import org.springframework.http.HttpStatus; import org.springframework.web.bind.annotation.ResponseStatus; import java.util.Set; /** * 权限验证异常 * * @author zhouhao * @since 3.0 */ @ResponseStatus(HttpStatus.FORBIDDEN) @Getter public class AccessDenyException extends I18nSupportException { private static final long serialVersionUID = -5135300127303801430L; private String code; public AccessDenyException() { this("error.access_denied"); } public AccessDenyException(String message) { super(message); } public AccessDenyException(String permission, Set actions) { super("error.permission_denied", permission, actions); } public AccessDenyException(String message, String code) { this(message, code, null); } public AccessDenyException(String message, Throwable cause) { this(message, "access_denied", cause); } public AccessDenyException(String message, String code, Throwable cause) { super(message, cause, code); this.code = code; } /** * 不填充线程栈的异常，在一些对线程栈不敏感，且对异常不可控（如: 来自未认证请求产生的异常）的情况下不填充线程栈对性能有利。 */ public static class NoStackTrace extends AccessDenyException { public NoStackTrace() { super(); } public NoStackTrace(String message) { super(message); } public NoStackTrace(String permission, Set actions) { super(permission, actions); } public NoStackTrace(String message, String code) { super(message, code); } public NoStackTrace(String message, Throwable cause) { super(message, cause); } public NoStackTrace(String message, String code, Throwable cause) { super(message, code, cause); } @Override public final synchronized Throwable fillInStackTrace() { return this; } } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/exception/AuthenticationException.java ================================================ package org.hswebframework.web.authorization.exception; import lombok.Getter; import org.hswebframework.web.exception.I18nSupportException; @Getter public class AuthenticationException extends I18nSupportException { public static String ILLEGAL_PASSWORD = "illegal_password"; public static String USER_DISABLED = "user_disabled"; private final String code; public AuthenticationException(String code) { this(code, "error." + code); } public AuthenticationException(String code, String message) { super(message); this.code = code; } public AuthenticationException(String code, String message, Throwable cause) { super(message, cause); this.code = code; } /** * 不填充线程栈的异常，在一些对线程栈不敏感，且对异常不可控（如: 来自未认证请求产生的异常）的情况下不填充线程栈对性能有利。 */ public static class NoStackTrace extends AuthenticationException { public NoStackTrace(String code) { super(code); } public NoStackTrace(String code, String message) { super(code, message); } public NoStackTrace(String code, String message, Throwable cause) { super(code, message, cause); } @Override public final synchronized Throwable fillInStackTrace() { return this; } } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/exception/NeedTwoFactorException.java ================================================ package org.hswebframework.web.authorization.exception; import lombok.Getter; /** * @author zhouhao * @since 3.0.4 */ @Getter public class NeedTwoFactorException extends RuntimeException { private static final long serialVersionUID = 3655980280834947633L; private String provider; public NeedTwoFactorException(String message, String provider) { super(message); this.provider = provider; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/exception/UnAuthorizedException.java ================================================ /* * * * Copyright 2020 http://www.hswebframework.org * * * * Licensed under the Apache License, Version 2.0 (the "License"); * * you may not use this file except in compliance with the License. * * You may obtain a copy of the License at * * * * http://www.apache.org/licenses/LICENSE-2.0 * * * * Unless required by applicable law or agreed to in writing, software * * distributed under the License is distributed on an "AS IS" BASIS, * * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * * See the License for the specific language governing permissions and * * limitations under the License. * */ package org.hswebframework.web.authorization.exception; import lombok.Getter; import org.hswebframework.web.authorization.token.TokenState; import org.hswebframework.web.exception.I18nSupportException; import org.springframework.http.HttpStatus; import org.springframework.web.bind.annotation.ResponseStatus; /** * 未授权异常 * * @author zhouhao * @since 3.0 */ @Getter @ResponseStatus(HttpStatus.UNAUTHORIZED) public class UnAuthorizedException extends I18nSupportException { private static final long serialVersionUID = 2422918455013900645L; private final TokenState state; public UnAuthorizedException() { this(TokenState.expired); } public UnAuthorizedException(TokenState state) { this(state.getText(), state); } public UnAuthorizedException(String message, TokenState state) { super(message); this.state = state; } public UnAuthorizedException(String message, TokenState state, Throwable cause) { super(message, cause); this.state = state; } /** * 不填充线程栈的异常，在一些对线程栈不敏感，且对异常不可控（如: 来自未认证请求产生的异常）的情况下不填充线程栈对性能有利。 */ public static class NoStackTrace extends UnAuthorizedException { public NoStackTrace() { super(); } public NoStackTrace(TokenState state) { super(state); } public NoStackTrace(String message, TokenState state) { super(message, state); } public NoStackTrace(String message, TokenState state, Throwable cause) { super(message, state, cause); } @Override public final synchronized Throwable fillInStackTrace() { return this; } } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/setting/SettingNullValueHolder.java ================================================ package org.hswebframework.web.authorization.setting; import java.util.List; import java.util.Optional; /** * @author zhouhao * @since 1.0.0 */ public class SettingNullValueHolder implements SettingValueHolder { public static final SettingNullValueHolder INSTANCE = new SettingNullValueHolder(); private SettingNullValueHolder() { } @Override public Optional> asList(Class t) { return Optional.empty(); } @Override public Optional as(Class t) { return Optional.empty(); } @Override public Optional asString() { return Optional.empty(); } @Override public Optional asLong() { return Optional.empty(); } @Override public Optional asInt() { return Optional.empty(); } @Override public Optional asDouble() { return Optional.empty(); } @Override public Optional getValue() { return Optional.empty(); } @Override public UserSettingPermission getPermission() { return UserSettingPermission.NONE; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/setting/SettingValueHolder.java ================================================ package org.hswebframework.web.authorization.setting; import java.util.List; import java.util.Optional; public interface SettingValueHolder { SettingValueHolder NULL = SettingNullValueHolder.INSTANCE; Optional> asList(Class t); Optional as(Class t); Optional asString(); Optional asLong(); Optional asInt(); Optional asDouble(); Optional getValue(); UserSettingPermission getPermission(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/setting/StringSourceSettingHolder.java ================================================ package org.hswebframework.web.authorization.setting; import com.alibaba.fastjson.JSON; import lombok.AllArgsConstructor; import lombok.Getter; import org.hswebframework.utils.StringUtils; import org.hswebframework.web.dict.EnumDict; import java.util.List; import java.util.Optional; /** * @author zhouhao * @since 3.0.4 */ @AllArgsConstructor @Getter public class StringSourceSettingHolder implements SettingValueHolder { private String value; private UserSettingPermission permission; public static SettingValueHolder of(String value, UserSettingPermission permission) { if (value == null) { return SettingValueHolder.NULL; } return new StringSourceSettingHolder(value, permission); } @Override public Optional> asList(Class t) { return getNativeValue() .map(v -> JSON.parseArray(v, t)); } protected T convert(String value, Class t) { if (t.isEnum()) { if (EnumDict.class.isAssignableFrom(t)) { T val = (T) EnumDict.find((Class) t, value).orElse(null); if (null != val) { return val; } } for (T enumConstant : t.getEnumConstants()) { if (((Enum) enumConstant).name().equalsIgnoreCase(value)) { return enumConstant; } } } return JSON.parseObject(value, t); } @Override @SuppressWarnings("all") public Optional as(Class t) { if (t == String.class) { return (Optional) asString(); } else if (Long.class == t || long.class == t) { return (Optional) asLong(); } else if (Integer.class == t || int.class == t) { return (Optional) asInt(); } else if (Double.class == t || double.class == t) { return (Optional) asDouble(); } return getNativeValue().map(v -> convert(v, t)); } @Override public Optional asString() { return getNativeValue(); } @Override public Optional asLong() { return getNativeValue().map(StringUtils::toLong); } @Override public Optional asInt() { return getNativeValue().map(StringUtils::toInt); } @Override public Optional asDouble() { return getNativeValue().map(StringUtils::toDouble); } private Optional getNativeValue() { return Optional.ofNullable(value); } @Override public Optional getValue() { return Optional.ofNullable(value); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/setting/UserSettingManager.java ================================================ package org.hswebframework.web.authorization.setting; /** * @author zhouhao * @since 3.0.4 */ public interface UserSettingManager { SettingValueHolder getSetting(String userId, String key); void saveSetting(String userId, String key, String value, UserSettingPermission permission); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/setting/UserSettingPermission.java ================================================ package org.hswebframework.web.authorization.setting; import lombok.AllArgsConstructor; import lombok.Getter; import org.hswebframework.web.dict.Dict; import org.hswebframework.web.dict.EnumDict; /** * @author zhouhao * @since 3.0.4 */ @AllArgsConstructor @Getter @Dict("user-setting-permission") public enum UserSettingPermission implements EnumDict { NONE("无"), R("读"), W("写"), RW("读写"); private String text; @Override public String getValue() { return name(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/AbstractDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.simple; import org.hswebframework.web.authorization.access.DataAccessConfig; /** * @author zhouhao * @see DataAccessConfig * @since 3.0 */ public abstract class AbstractDataAccessConfig implements DataAccessConfig { private static final long serialVersionUID = -9025349704771557106L; private String action; @Override public String getAction() { return action; } public void setAction(String action) { this.action = action; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/CompositeReactiveAuthenticationManager.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.AllArgsConstructor; import lombok.extern.slf4j.Slf4j; import org.hswebframework.web.authorization.*; import reactor.core.publisher.Flux; import reactor.core.publisher.Mono; import java.util.List; import java.util.function.Function; import java.util.stream.Collectors; @AllArgsConstructor @Slf4j public class CompositeReactiveAuthenticationManager implements ReactiveAuthenticationManager { private final List providers; @Override public Mono authenticate(Mono request) { return Flux .concat( providers .stream() .map(manager -> manager .authenticate(request) .onErrorResume((err) -> { log.warn("get user authenticate error", err); return Mono.empty(); })) .collect(Collectors.toList())) .take(1) .next(); } @Override public Mono getByUserId(String userId) { if (providers.size() == 1) { return providers.get(0).getByUserId(userId); } return Flux .fromStream(providers .stream() .map(manager -> manager .getByUserId(userId) .onErrorResume((err) -> { log.warn("get user [{}] authentication error", userId, err); return Mono.empty(); }) )) .flatMap(Function.identity()) .as(AuthenticationUtils::merge); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/DefaultAuthorizationAutoConfiguration.java ================================================ package org.hswebframework.web.authorization.simple; import org.hswebframework.web.authorization.*; import org.hswebframework.web.authorization.builder.AuthenticationBuilderFactory; import org.hswebframework.web.authorization.builder.DataAccessConfigBuilderFactory; import org.hswebframework.web.authorization.dimension.DimensionManager; import org.hswebframework.web.authorization.dimension.DimensionUserBindProvider; import org.hswebframework.web.authorization.simple.builder.DataAccessConfigConverter; import org.hswebframework.web.authorization.simple.builder.SimpleAuthenticationBuilderFactory; import org.hswebframework.web.authorization.simple.builder.SimpleDataAccessConfigBuilderFactory; import org.hswebframework.web.authorization.token.*; import org.hswebframework.web.authorization.twofactor.TwoFactorValidatorManager; import org.hswebframework.web.authorization.twofactor.defaults.DefaultTwoFactorValidatorManager; import org.hswebframework.web.convert.CustomMessageConverter; import org.springframework.beans.factory.ObjectProvider; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.boot.autoconfigure.AutoConfiguration; import org.springframework.boot.autoconfigure.condition.ConditionalOnBean; import org.springframework.boot.autoconfigure.condition.ConditionalOnMissingBean; import org.springframework.boot.context.properties.ConfigurationProperties; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; import java.util.List; /** * @author zhouhao */ @AutoConfiguration public class DefaultAuthorizationAutoConfiguration { @Bean @ConditionalOnMissingBean(UserTokenManager.class) @ConfigurationProperties(prefix = "hsweb.user-token") public UserTokenManager userTokenManager() { return new DefaultUserTokenManager(); } @Bean @ConditionalOnMissingBean // @ConditionalOnBean(ReactiveAuthenticationManagerProvider.class) public ReactiveAuthenticationManager reactiveAuthenticationManager(List providers) { return new CompositeReactiveAuthenticationManager(providers); } @Bean @ConditionalOnBean(ReactiveAuthenticationManager.class) public UserTokenReactiveAuthenticationSupplier userTokenReactiveAuthenticationSupplier(UserTokenManager userTokenManager, ReactiveAuthenticationManager authenticationManager) { UserTokenReactiveAuthenticationSupplier supplier = new UserTokenReactiveAuthenticationSupplier(userTokenManager, authenticationManager); ReactiveAuthenticationHolder.addSupplier(supplier); return supplier; } @Bean @ConditionalOnBean(AuthenticationManager.class) public UserTokenAuthenticationSupplier userTokenAuthenticationSupplier(UserTokenManager userTokenManager, AuthenticationManager authenticationManager) { UserTokenAuthenticationSupplier supplier = new UserTokenAuthenticationSupplier(userTokenManager, authenticationManager); AuthenticationHolder.addSupplier(supplier); return supplier; } @Bean @ConditionalOnMissingBean(DataAccessConfigBuilderFactory.class) @ConfigurationProperties(prefix = "hsweb.authorization.data-access", ignoreInvalidFields = true) public SimpleDataAccessConfigBuilderFactory dataAccessConfigBuilderFactory() { return new SimpleDataAccessConfigBuilderFactory(); } @Bean @ConditionalOnMissingBean(AuthenticationBuilderFactory.class) public AuthenticationBuilderFactory authenticationBuilderFactory(DataAccessConfigBuilderFactory dataAccessConfigBuilderFactory) { return new SimpleAuthenticationBuilderFactory(dataAccessConfigBuilderFactory); } @Bean public CustomMessageConverter authenticationCustomMessageConverter(AuthenticationBuilderFactory factory) { return new CustomMessageConverter() { @Override public boolean support(Class clazz) { return clazz == Authentication.class; } @Override public Object convert(Class clazz, byte[] message) { String json = new String(message); return factory.create().json(json).build(); } }; } @Bean @ConditionalOnMissingBean(DimensionManager.class) public DimensionManager defaultDimensionManager(ObjectProviderbindProviders, ObjectProvider providers){ DefaultDimensionManager manager = new DefaultDimensionManager(); bindProviders.forEach(manager::addBindProvider); providers.forEach(manager::addProvider); return manager; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/DefaultDimensionManager.java ================================================ package org.hswebframework.web.authorization.simple; import org.hswebframework.web.authorization.Dimension; import org.hswebframework.web.authorization.DimensionProvider; import org.hswebframework.web.authorization.dimension.DimensionManager; import org.hswebframework.web.authorization.dimension.DimensionUserBind; import org.hswebframework.web.authorization.dimension.DimensionUserBindProvider; import org.hswebframework.web.authorization.dimension.DimensionUserDetail; import reactor.core.publisher.Flux; import reactor.core.publisher.Mono; import reactor.util.function.Tuple2; import reactor.util.function.Tuples; import java.util.*; import java.util.concurrent.CopyOnWriteArrayList; import java.util.function.Function; import java.util.stream.Collectors; public class DefaultDimensionManager implements DimensionManager { private final List dimensionProviders = new CopyOnWriteArrayList<>(); private final List bindProviders = new CopyOnWriteArrayList<>(); private final Mono> providerMapping = Flux .defer(() -> Flux.fromIterable(dimensionProviders)) .flatMap(provider -> provider .getAllType() .map(type -> Tuples.of(type.getId(), provider))) .collectMap(Tuple2::getT1, Tuple2::getT2); public DefaultDimensionManager() { } public void addProvider(DimensionProvider provider) { dimensionProviders.add(provider); } public void addBindProvider(DimensionUserBindProvider bindProvider) { bindProviders.add(bindProvider); } private Mono> providerMapping() { return providerMapping; } @Override public Flux getUserDimension(Collection userId) { return this .providerMapping() .flatMapMany(providerMapping -> Flux .fromIterable(bindProviders) //获取绑定信息 .flatMap(provider -> provider.getDimensionBindInfo(userId)) .groupBy(DimensionUserBind::getDimensionType) .flatMap(group -> { String type = group.key(); Flux binds = group.cache(); DimensionProvider provider = providerMapping.get(type); if (null == provider) { return Mono.empty(); } //获取维度信息 return binds .map(DimensionUserBind::getDimensionId) .collect(Collectors.toSet()) .flatMapMany(idList -> provider.getDimensionsById(SimpleDimensionType.of(type), idList)) .collectMap(Dimension::getId, Function.identity()) .flatMapMany(mapping -> binds .groupBy(DimensionUserBind::getUserId) .flatMap(userGroup -> Mono .zip( Mono.just(userGroup.key()), userGroup .handle((bind, sink) -> { Dimension dimension = mapping.get(bind.getDimensionId()); if (dimension != null) { sink.next(dimension); } }) .collectList(), DimensionUserDetail::of )) ); }) ) .groupBy(DimensionUserDetail::getUserId) .flatMap(group->group.reduce(DimensionUserDetail::merge)); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/DimensionDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.EqualsAndHashCode; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.authorization.DimensionType; import org.hswebframework.web.authorization.access.DataAccessType; import org.hswebframework.web.authorization.access.DefaultDataAccessType; import org.hswebframework.web.authorization.access.ScopeDataAccessConfig; import org.hswebframework.web.authorization.simple.AbstractDataAccessConfig; import java.util.Set; @Getter @Setter @EqualsAndHashCode(callSuper = true) public class DimensionDataAccessConfig extends AbstractDataAccessConfig implements ScopeDataAccessConfig { private Set scope; private boolean children; /** * @see DimensionType#getId() */ private String scopeType; @Override public DefaultDataAccessType getType() { return DefaultDataAccessType.DIMENSION_SCOPE; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/PlainTextUsernamePasswordAuthenticationRequest.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.AllArgsConstructor; import lombok.Getter; import lombok.NoArgsConstructor; import lombok.Setter; import org.hswebframework.web.authorization.AuthenticationRequest; /** * @author zhouhao * @since 3.0.0-RC */ @Getter @Setter @AllArgsConstructor @NoArgsConstructor public class PlainTextUsernamePasswordAuthenticationRequest implements AuthenticationRequest { private String username; private String password; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleAuthentication.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.hswebframework.web.authorization.simple; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.authorization.*; import java.io.Serial; import java.io.Serializable; import java.util.*; import java.util.concurrent.atomic.AtomicLongFieldUpdater; import java.util.function.BiPredicate; import java.util.function.Function; import java.util.function.Predicate; import java.util.stream.Collectors; public class SimpleAuthentication implements Authentication { static final AtomicLongFieldUpdater ACCESS_COUNT_UPDATER = AtomicLongFieldUpdater.newUpdater(SimpleAuthentication.class, "accessCount"); @Serial private static final long serialVersionUID = -2898863220255336528L; @Getter private User user; @Setter private List permissions = new ArrayList<>(); private List dimensions = new ArrayList<>(); @Setter private Map attributes = new HashMap<>(); public static Authentication of() { return new SimpleAuthentication(); } @Override @SuppressWarnings("unchecked") public Optional getAttribute(String name) { return Optional.ofNullable((T) attributes.get(name)); } public List getDimensions() { return dimensions == null ? Collections.emptyList() : dimensions; } public List getPermissions() { return permissions == null ? Collections.emptyList() : permissions; } @Override public Map getAttributes() { return attributes == null ? Collections.emptyMap() : attributes; } public SimpleAuthentication merge(Authentication authentication) { Map mePermissionGroup = permissions .stream() .collect(Collectors.toMap(Permission::getId, Function.identity())); if (authentication.getUser() != null) { user = authentication.getUser(); } this.attributes = new HashMap<>(getAttributes()); this.attributes.putAll(authentication.getAttributes()); this.permissions = new ArrayList<>(this.getPermissions()); for (Permission permission : authentication.getPermissions()) { Permission me = mePermissionGroup.get(permission.getId()); if (me == null) { permissions.add(permission.copy()); continue; } me.getActions().addAll(permission.getActions()); } this.dimensions = new ArrayList<>(this.getDimensions()); for (Dimension dimension : authentication.getDimensions()) { if (getDimension(dimension.getType(), dimension.getId()).isEmpty()) { dimensions.add(dimension); } } return this; } protected SimpleAuthentication newInstance() { return new SimpleAuthentication(); } @Override public Authentication copy(BiPredicate permissionFilter, Predicate dimension) { SimpleAuthentication authentication = newInstance(); authentication.setDimensions(dimensions .stream() .filter(dimension) .collect(Collectors.toList())); authentication.setPermissions(permissions .stream() .map(permission -> permission.copy(action -> permissionFilter.test(permission, action), conf -> true)) .filter(per -> !per.getActions().isEmpty()) .collect(Collectors.toList()) ); if (user != null) { authentication.setUser0(user); } authentication.setAttributes(new HashMap<>(attributes)); return authentication; } public void setUser(User user) { this.user = user; dimensions.add(user); } protected void setUser0(User user) { this.user = user; } public void setDimensions(List dimensions) { this.dimensions.addAll(dimensions); } public void setDimensions(Collection dimensions) { this.dimensions.addAll(dimensions); } public void addDimension(Dimension dimension) { this.dimensions.add(dimension); } private transient volatile Map> dimensionMapping; private transient volatile Map permissionMapping; private transient volatile long accessCount; protected boolean fastPath() { // 总共访问超过8次,则进行初始化缓存. if (ACCESS_COUNT_UPDATER.incrementAndGet(this) == 8) { if (permissionMapping == null) { permissionMapping = permissions == null ? Collections.emptyMap() : permissions .stream() .collect(Collectors .toMap(Permission::getId, Function.identity(), (a, b) -> b)); dimensionMapping = dimensions == null ? Collections.emptyMap() : dimensions .stream() .collect(Collectors .groupingBy(d -> d.getType().getId(), Collectors.toMap( Dimension::getId, Function.identity(), (a, b) -> a))); } } return permissionMapping != null; } @Override public boolean hasPermission(String permissionId, Collection actions) { Map permissionMapping = this.permissionMapping; if (fastPath() && permissionMapping != null) { Permission permission = permissionMapping.get(permissionId); if (permission == null) { permission = permissionMapping.get("*"); } if (permission == null) { return false; } return actions.isEmpty() || permission.getActions().containsAll(actions) || permission.getActions().contains("*"); } return Authentication.super.hasPermission(permissionId, actions); } @Override public Optional getDimension(String type, String id) { Map> dimensionMapping = this.dimensionMapping; if (fastPath() && dimensionMapping != null) { Map mapping = dimensionMapping.get(type); if (mapping == null) { return Optional.empty(); } return Optional.ofNullable(mapping.get(id)); } return Authentication.super.getDimension(type, id); } @Override public Optional getDimension(DimensionType type, String id) { return getDimension(type.getId(), id); } @Override public List getDimensions(DimensionType type) { return this.getDimensions(type.getId()); } @Override public List getDimensions(String type) { Map> dimensionMapping = this.dimensionMapping; if (fastPath() && dimensionMapping != null) { Map mapping = dimensionMapping.get(type); if (mapping == null) { return List.of(); } return new ArrayList<>(mapping.values()); } return Authentication.super.getDimensions(type); } @Override public Optional getPermission(String id) { Map permissionMapping = this.permissionMapping; if (fastPath() && permissionMapping != null) { return Optional.ofNullable(permissionMapping.get(id)); } return Authentication.super.getPermission(id); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleDimension.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.*; import org.hswebframework.web.authorization.Dimension; import org.hswebframework.web.authorization.DimensionType; import java.util.Map; @Getter @Setter @AllArgsConstructor(staticName = "of") @NoArgsConstructor @EqualsAndHashCode public class SimpleDimension implements Dimension { private String id; private String name; private DimensionType type; private Map options; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleDimensionType.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.*; import org.hswebframework.web.authorization.DimensionType; import java.io.Serializable; @Getter @Setter @AllArgsConstructor(staticName = "of") @NoArgsConstructor @EqualsAndHashCode public class SimpleDimensionType implements DimensionType, Serializable { private static final long serialVersionUID = -6849794470754667710L; private String id; private String name; public static SimpleDimensionType of(String id) { return of(id, id); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleFieldFilterDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.simple; import org.hswebframework.web.authorization.access.DataAccessType; import org.hswebframework.web.authorization.access.DefaultDataAccessType; import org.hswebframework.web.authorization.access.FieldFilterDataAccessConfig; import java.util.Arrays; import java.util.HashSet; import java.util.Set; import static org.hswebframework.web.authorization.access.DataAccessConfig.DefaultType.DENY_FIELDS; /** * 默认配置实现 * * @author zhouhao * @see FieldFilterDataAccessConfig * @since 3.0 */ public class SimpleFieldFilterDataAccessConfig extends AbstractDataAccessConfig implements FieldFilterDataAccessConfig { private static final long serialVersionUID = 8080660575093151866L; private Set fields; public SimpleFieldFilterDataAccessConfig() { } public SimpleFieldFilterDataAccessConfig(String... fields) { this.fields = new HashSet<>(Arrays.asList(fields)); } @Override public Set getFields() { return fields; } public void setFields(Set fields) { this.fields = fields; } @Override public DataAccessType getType() { return DefaultDataAccessType.FIELD_DENY; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleOwnCreatedDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.simple; import org.hswebframework.web.authorization.access.OwnCreatedDataAccessConfig; /** * @author zhouhao * @since 3.0 */ public class SimpleOwnCreatedDataAccessConfig extends AbstractDataAccessConfig implements OwnCreatedDataAccessConfig { private static final long serialVersionUID = -6059330812806119730L; public SimpleOwnCreatedDataAccessConfig() { } public SimpleOwnCreatedDataAccessConfig(String action) { setAction(action); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimplePermission.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.*; import org.apache.commons.collections4.CollectionUtils; import org.hswebframework.web.authorization.Permission; import org.hswebframework.web.authorization.access.DataAccessConfig; import java.util.*; import java.util.function.Predicate; import java.util.stream.Collectors; /** * @author zhouhao */ @Getter @Setter @Builder @NoArgsConstructor @AllArgsConstructor @EqualsAndHashCode(exclude = "dataAccesses") public class SimplePermission implements Permission { private static final long serialVersionUID = 7587266693680162184L; private String id; private String name; private Set actions; private Set dataAccesses; private Map options; public Set getActions() { if (actions == null) { actions = new java.util.HashSet<>(); } return actions; } public Set getDataAccesses() { if (dataAccesses == null) { dataAccesses = new java.util.HashSet<>(); } return dataAccesses; } @Override public Permission copy(Predicate actionFilter, Predicate dataAccessFilter) { SimplePermission permission = new SimplePermission(); permission.setId(id); permission.setName(name); permission.setActions(getActions().stream().filter(actionFilter).collect(Collectors.toSet())); permission.setDataAccesses(getDataAccesses().stream().filter(dataAccessFilter).collect(Collectors.toSet())); if (options != null) { permission.setOptions(new HashMap<>(options)); } return permission; } public Permission copy() { return copy(action -> true, conf -> true); } @Override public String toString() { return id + (CollectionUtils.isNotEmpty(actions) ? ":" + String.join(",", actions) : ""); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleRole.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.*; import org.hswebframework.web.authorization.Dimension; import org.hswebframework.web.authorization.Role; import java.io.Serializable; import java.util.Map; /** * @author zhouhao */ @Getter @Setter @Builder @NoArgsConstructor @AllArgsConstructor @EqualsAndHashCode public class SimpleRole implements Role { private static final long serialVersionUID = 7460859165231311347L; private String id; private String name; private Map options; public static Role of(Dimension dimension) { return SimpleRole.builder() .name(dimension.getName()) .id(dimension.getId()) .options(dimension.getOptions()) .build(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleUser.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.*; import org.hswebframework.web.authorization.User; import java.io.Serial; import java.io.Serializable; import java.util.Map; /** * @author zhouhao */ @Getter @Setter @NoArgsConstructor @AllArgsConstructor @Builder @EqualsAndHashCode public class SimpleUser implements User { @Serial private static final long serialVersionUID = 2194541828191869091L; private String id; private String username; private String name; private String userType; private Map options; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/builder/DataAccessConfigConverter.java ================================================ package org.hswebframework.web.authorization.simple.builder; import org.hswebframework.web.authorization.access.DataAccessConfig; /** * @author zhouhao */ public interface DataAccessConfigConverter { boolean isSupport(String type, String action, String config); DataAccessConfig convert(String type, String action, String config); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/builder/SimpleAuthenticationBuilder.java ================================================ package org.hswebframework.web.authorization.simple.builder; import com.alibaba.fastjson.JSON; import com.alibaba.fastjson.JSONArray; import com.alibaba.fastjson.JSONObject; import com.google.common.collect.Maps; import org.hswebframework.web.authorization.*; import org.hswebframework.web.authorization.builder.AuthenticationBuilder; import org.hswebframework.web.authorization.builder.DataAccessConfigBuilderFactory; import org.hswebframework.web.authorization.simple.*; import java.io.Serializable; import java.util.*; import java.util.stream.Collectors; /** * @author zhouhao */ public class SimpleAuthenticationBuilder implements AuthenticationBuilder { private SimpleAuthentication authentication = new SimpleAuthentication(); private DataAccessConfigBuilderFactory dataBuilderFactory; public SimpleAuthenticationBuilder(DataAccessConfigBuilderFactory dataBuilderFactory) { this.dataBuilderFactory = dataBuilderFactory; } public void setDataBuilderFactory(DataAccessConfigBuilderFactory dataBuilderFactory) { this.dataBuilderFactory = dataBuilderFactory; } @Override public AuthenticationBuilder user(User user) { Objects.requireNonNull(user); authentication.setUser(user); return this; } @Override public AuthenticationBuilder user(String user) { return user(JSON.parseObject(user, SimpleUser.class)); } @Override public AuthenticationBuilder user(Map user) { Objects.requireNonNull(user.get("id")); user(SimpleUser.builder() .id(user.get("id")) .username(user.get("username")) .name(user.get("name")) .userType(user.get("type")) .build()); return this; } @Override public AuthenticationBuilder role(List role) { authentication.getDimensions().addAll(role); return this; } @Override @SuppressWarnings("unchecked") public AuthenticationBuilder role(String role) { return role((List) JSON.parseArray(role, SimpleRole.class)); } @Override public AuthenticationBuilder permission(List permission) { authentication.setPermissions(permission); return this; } public AuthenticationBuilder permission(JSONArray jsonArray) { List permissions = new ArrayList<>(); for (int i = 0; i < jsonArray.size(); i++) { JSONObject jsonObject = jsonArray.getJSONObject(i); SimplePermission permission = new SimplePermission(); permission.setId(jsonObject.getString("id")); permission.setName(jsonObject.getString("name")); permission.setOptions(jsonObject.getJSONObject("options")); JSONArray actions = jsonObject.getJSONArray("actions"); if (actions != null) { permission.setActions(new HashSet<>(actions.toJavaList(String.class))); } JSONArray dataAccess = jsonObject.getJSONArray("dataAccesses"); if (null != dataAccess) { permission.setDataAccesses(dataAccess.stream().map(JSONObject.class::cast) .map(dataJson -> dataBuilderFactory .create() .fromJson(dataJson.toJSONString()) .build()) .filter(Objects::nonNull) .collect(Collectors.toSet())); } permissions.add(permission); } authentication.setPermissions(permissions); return this; } @Override public AuthenticationBuilder permission(String permissionJson) { return permission(JSON.parseArray(permissionJson)); } @Override public AuthenticationBuilder attributes(String attributes) { authentication.getAttributes().putAll(JSON.>parseObject(attributes, Map.class)); return this; } @Override public AuthenticationBuilder attributes(Map permission) { authentication.getAttributes().putAll(permission); return this; } public AuthenticationBuilder dimension(JSONArray json) { if (json == null) { return this; } List dimensions = new ArrayList<>(); for (int i = 0; i < json.size(); i++) { JSONObject jsonObject = json.getJSONObject(i); Object type = jsonObject.get("type"); Map
* ⚠️:任何时候都不应该对返回的Set进行写操作 * * @return 如果没有配置返回空{@link Collections#emptySet()},不会返回null. * @see DataAccessConfig * @see org.hswebframework.web.authorization.access.DataAccessController */ @Deprecated Set getDataAccesses(); default Set getDataAccesses(String action) { return getDataAccesses() .stream() .filter(conf -> conf.getAction().equals(action)) .collect(Collectors.toSet()); } /** * 查找数据权限配置 * * @param configPredicate 数据权限配置匹配规则 * @param 数据权限配置类型 * @return {@link Optional} * @see this#scope(String, String, String) */ @SuppressWarnings("all") default Optional findDataAccess(DataAccessPredicate configPredicate) { return (Optional) getDataAccesses().stream() .filter(configPredicate) .findFirst(); } /** * 查找字段过滤的数据权限配置(列级数据权限),比如:不查询某些字段 * * @param action 权限操作类型 {@link Permission#ACTION_QUERY} * @return {@link Optional} * @see FieldFilterDataAccessConfig * @see FieldFilterDataAccessConfig#getFields() */ default Optional findFieldFilter(String action) { return findDataAccess(conf -> conf instanceof FieldFilterDataAccessConfig && conf.getAction().equals(action)); } /** * 获取不能执行操作的字段 * * @param action 权限操作 * @return 未配置时返回空set, 不会返回null */ default Set findDenyFields(String action) { return findFieldFilter(action) .filter(conf -> DENY_FIELDS.equals(conf.getType().getId())) .map(FieldFilterDataAccessConfig::getFields) .orElseGet(Collections::emptySet); } /** * 查找数据范围权限控制配置(行级数据权限),比如: 只能查询本机构的数据 * * @param type 范围类型标识,由具体的实现定义,如: 机构范围 * @param scopeType 范围类型,由具体的实现定义,如: 只能查看自己所在机构 * @param action 权限操作 {@link Permission#ACTION_QUERY} * @return 未配置时返回空set, 不会返回null */ default Set findScope(String action, String type, String scopeType) { return findScope(scope(action, type, scopeType)); } default Set findScope(Permission.DataAccessPredicate predicate) { return findDataAccess(predicate) .map(ScopeDataAccessConfig::getScope) .orElseGet(Collections::emptySet); } /** * 构造一个数据范围权限控制配置查找逻辑 * * @param type 范围类型标识,由具体的实现定义,如: 机构范围 * @param scopeType 范围类型,由具体的实现定义,如: 只能查看自己所在机构 * @param action 权限操作 {@link Permission#ACTION_QUERY} * @return {@link DataAccessPredicate} */ static Permission.DataAccessPredicate scope(String action, String type, String scopeType) { Objects.requireNonNull(action, "action can not be null"); Objects.requireNonNull(type, "type can not be null"); Objects.requireNonNull(scopeType, "scopeType can not be null"); return config -> config instanceof ScopeDataAccessConfig && action.equals(config.getAction()) && type.equals(config.getType()) && scopeType.equals(((ScopeDataAccessConfig) config).getScopeType()); } Permission copy(); Permission copy(Predicate actionFilter,Predicate dataAccessFilter); /** * 数据权限查找判断逻辑接口 * * @param */ interface DataAccessPredicate extends Predicate { boolean test(DataAccessConfig config); @Override default DataAccessPredicate and(Predicate other) { return (t) -> test(t) && other.test(t); } @Override default DataAccessPredicate or(Predicate other) { return (t) -> test(t) || other.test(t); } } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/ReactiveAuthenticationHolder.java ================================================ /* * Copyright 2019 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization; import com.google.common.collect.Lists; import reactor.core.publisher.Flux; import reactor.core.publisher.Mono; import reactor.util.context.Context; import java.util.List; import java.util.concurrent.CopyOnWriteArrayList; import java.util.function.Function; /** * 响应式权限保持器,用于响应式方式获取当前登录用户的权限信息. * 例如: * {@code * @RequestMapping("/example") * public Mono example(){ * return ReactiveAuthenticationHolder.get(); * } * } * * * @author zhouhao * @see ReactiveAuthenticationSupplier * @since 4.0 */ public final class ReactiveAuthenticationHolder { private static final List suppliers = new CopyOnWriteArrayList<>(); public static final String IGNORE_AUTH_KEY = ".auth.ignore"; static final Context IGNORE_AUTH_CONTEXT_Y = Context.of(IGNORE_AUTH_KEY, true); static final Context IGNORE_AUTH_CONTEXT_N = Context.of(IGNORE_AUTH_KEY, false); private static Mono get(Function> function) { return AuthenticationUtils .merge(Flux.merge(Lists.transform(suppliers, function::apply))); } /** * @return 当前登录的用户权限信息 */ public static Mono get() { return Mono.deferContextual(ctx -> { if (Boolean.TRUE.equals(ctx.getOrDefault(IGNORE_AUTH_KEY, false))) { return Mono.empty(); } return get(ReactiveAuthenticationSupplier::get); }); } /** * 获取指定用户的权限信息 * * @param userId 用户ID * @return 权限信息 */ public static Mono get(String userId) { return get(supplier -> supplier.get(userId)); } /** * 初始化 {@link ReactiveAuthenticationSupplier} * * @param supplier */ public static void addSupplier(ReactiveAuthenticationSupplier supplier) { suppliers.add(supplier); } public static void setSupplier(ReactiveAuthenticationSupplier supplier) { suppliers.clear(); suppliers.add(supplier); } public static Context ignoreContext(boolean ignore) { return ignore ? IGNORE_AUTH_CONTEXT_Y : IGNORE_AUTH_CONTEXT_N; } public static Function ignoreIfAbsent(boolean ignore) { return ctx -> ctx.hasKey(IGNORE_AUTH_KEY) ? ctx : ctx.put(IGNORE_AUTH_KEY, ignore); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/ReactiveAuthenticationInitializeService.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization; import org.hswebframework.web.authorization.events.AuthorizationInitializeEvent; import reactor.core.publisher.Mono; /** * 授权信息初始化服务接口,使用该接口初始化用的权限信息 * * @author zhouhao * @since 4.0 */ public interface ReactiveAuthenticationInitializeService { /** * 根据用户ID初始化权限信息 * * @param userId 用户ID * @return 权限信息 * @see AuthorizationInitializeEvent */ Mono initUserAuthorization(String userId); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/ReactiveAuthenticationManager.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization; import reactor.core.publisher.Mono; /** * 授权信息管理器,用于获取用户授权和同步授权信息 * * @author zhouhao * @see 3.0 */ public interface ReactiveAuthenticationManager { /** * 进行授权操作 * * @param request 授权请求 * @return 授权成功则返回用户权限信息 */ Mono authenticate(Mono request); /** * 根据用户ID获取权限信息 * * @param userId 用户ID * @return 权限信息 */ Mono getByUserId(String userId); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/ReactiveAuthenticationManagerProvider.java ================================================ package org.hswebframework.web.authorization; import reactor.core.publisher.Mono; public interface ReactiveAuthenticationManagerProvider { /** * 进行授权操作 * * @param request 授权请求 * @return 授权成功则返回用户权限信息 */ Mono authenticate(Mono request); /** * 根据用户ID获取权限信息 * * @param userId 用户ID * @return 权限信息 */ Mono getByUserId(String userId); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/ReactiveAuthenticationSupplier.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.hswebframework.web.authorization; import reactor.core.publisher.Mono; import java.util.function.Supplier; /** * @author zhouhao * @see Supplier * @see Authentication * @see ReactiveAuthenticationHolder * @since 4.0 */ public interface ReactiveAuthenticationSupplier extends Supplier> { Mono get(String userId); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/Role.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.hswebframework.web.authorization; import org.hswebframework.web.authorization.simple.SimpleRole; /** * 角色信息 * * @author zhouhao * @since 3.0 */ public interface Role extends Dimension { /** * @return 角色ID */ String getId(); /** * @return 角色名 */ String getName(); @Override default DimensionType getType() { return DefaultDimensionType.role; } static Role fromDimension(Dimension dimension){ return SimpleRole.of(dimension); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/User.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.hswebframework.web.authorization; /** * 用户信息 * * @author zhouhao * @since 3.0 */ public interface User extends Dimension { /** * @return 用户ID */ String getId(); /** * @return 用户名 */ String getUsername(); /** * @return 姓名 */ String getName(); /** * @return 用户类型 */ String getUserType(); @Override default DimensionType getType() { return DefaultDimensionType.user; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/DataAccessConfig.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.access; import org.hswebframework.web.authorization.Permission; import java.io.Serializable; /** * 数据级的权限控制,此接口为控制方式配置 * 具体的控制逻辑由控制器{@link DataAccessController}实现 * * @author zhouhao * @see OwnCreatedDataAccessConfig */ public interface DataAccessConfig extends Serializable { /** * 对数据的操作事件 * * @return 操作时间 * @see Permission#ACTION_ADD * @see Permission#ACTION_DELETE * @see Permission#ACTION_GET * @see Permission#ACTION_QUERY * @see Permission#ACTION_UPDATE */ String getAction(); /** * 控制方式标识 * * @return 控制方式 * @see DefaultType */ DataAccessType getType(); /** * 内置的控制方式 */ interface DefaultType { /** * 自己创建的数据 * * @see OwnCreatedDataAccessConfig#getType() */ String OWN_CREATED = "OWN_CREATED"; /** * 禁止操作字段 * * @see FieldFilterDataAccessConfig#getType() */ String DENY_FIELDS = "DENY_FIELDS"; /** * 禁止操作字段 * * @see org.hswebframework.web.authorization.simple.DimensionDataAccessConfig#getType() */ String DIMENSION_SCOPE = "DIMENSION_SCOPE"; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/DataAccessConfiguration.java ================================================ package org.hswebframework.web.authorization.access; public interface DataAccessConfiguration { } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/DataAccessController.java ================================================ package org.hswebframework.web.authorization.access; import org.hswebframework.web.authorization.define.AuthorizingContext; /** * 数据级别权限控制器,通过此控制器对当前登录用户进行的操作进行数据级别的权限控制。 * 如：A用户只能查询自己创建的B数据,A用户只能修改自己创建的B数据 * * @author zhouhao * @since 3.0 */ @Deprecated public interface DataAccessController { /** * 执行权限控制 * @param access 控制方式以及配置 * @param context 权限验证上下文，用于传递验证过程用到的参数 * @return 授权是否通过 */ boolean doAccess(DataAccessConfig access, AuthorizingContext context); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/DataAccessHandler.java ================================================ package org.hswebframework.web.authorization.access; import org.hswebframework.web.authorization.define.AuthorizingContext; /** * 数据级别权限控制处理器接口,负责处理支持的权限控制配置 * * @author zhouhao */ public interface DataAccessHandler { /** * 是否支持处理此配置 * * @param access 控制配置 * @return 是否支持 */ boolean isSupport(DataAccessConfig access); /** * 执行处理,返回处理结果 * * @param access 控制配置 * @param context 参数上下文 * @return 处理结果 */ boolean handle(DataAccessConfig access, AuthorizingContext context); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/DataAccessType.java ================================================ package org.hswebframework.web.authorization.access; public interface DataAccessType { String getId(); String getName(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/DefaultDataAccessType.java ================================================ package org.hswebframework.web.authorization.access; import lombok.AllArgsConstructor; import lombok.Getter; import org.hswebframework.web.dict.Dict; import org.hswebframework.web.dict.EnumDict; @Getter @AllArgsConstructor public enum DefaultDataAccessType implements DataAccessType, EnumDict { USER_OWN_DATA("自己的数据"), FIELD_DENY("禁止操作字段"), DIMENSION_SCOPE("维度范围"); private final String name; @Override public String getText() { return name; } @Override public String getValue() { return getId(); } @Override public String getId() { return name().toLowerCase(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/DimensionHelper.java ================================================ package org.hswebframework.web.authorization.access; import lombok.AccessLevel; import lombok.NoArgsConstructor; import org.apache.commons.collections4.CollectionUtils; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.authorization.Dimension; import org.hswebframework.web.authorization.DimensionType; import org.hswebframework.web.authorization.Permission; import org.hswebframework.web.authorization.simple.DimensionDataAccessConfig; import java.util.Collections; import java.util.Set; import java.util.stream.Collectors; @NoArgsConstructor(access = AccessLevel.PRIVATE) public abstract class DimensionHelper { public static Set getDimensionDataAccessScope(Authentication atz, Permission permission, String action, String dimensionType) { return permission .getDataAccesses(action) .stream() .filter(DimensionDataAccessConfig.class::isInstance) .map(DimensionDataAccessConfig.class::cast) .filter(conf -> dimensionType.equals(conf.getScopeType())) .flatMap(conf -> { if (CollectionUtils.isEmpty(conf.getScope())) { return atz.getDimensions(dimensionType) .stream() .map(Dimension::getId); } return conf.getScope().stream(); }).collect(Collectors.toSet()); } public static Set getDimensionDataAccessScope(Authentication atz, Permission permission, String action, DimensionType dimensionType) { return getDimensionDataAccessScope(atz, permission, action, dimensionType.getId()); } public static Set getDimensionDataAccessScope(Authentication atz, String permission, String action, String dimensionType) { return atz .getPermission(permission) .map(per -> getDimensionDataAccessScope(atz, per, action, dimensionType)).orElseGet(Collections::emptySet); } public static Set getDimensionDataAccessScope(Authentication atz, String permission, String action, DimensionType dimensionType) { return atz .getPermission(permission) .map(per -> getDimensionDataAccessScope(atz, per, action, dimensionType)) .orElseGet(Collections::emptySet); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/FieldFilterDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.access; import java.util.Set; /** * 对字段进行过滤操作配置,实现字段级别的权限控制 * * @author zhouhao * @see DataAccessConfig * @see org.hswebframework.web.authorization.simple.SimpleFieldFilterDataAccessConfig */ public interface FieldFilterDataAccessConfig extends DataAccessConfig { Set getFields(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/OwnCreatedDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.access; /** * 只能操作由自己创建的数据 * * @author zhouhao */ public interface OwnCreatedDataAccessConfig extends DataAccessConfig { @Override default DataAccessType getType() { return DefaultDataAccessType.USER_OWN_DATA; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/ScopeDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.access; import java.util.Set; /** * 范围数据权限控制配置 * * @author zhouhao * @see DataAccessConfig * @since 3.0 */ public interface ScopeDataAccessConfig extends DataAccessConfig { /** * @return 范围类型 */ String getScopeType(); /** * @return 自定义的控制范围 */ Set getScope(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/access/UserAttachEntity.java ================================================ package org.hswebframework.web.authorization.access; /** * 和user关联的实体 * * @author zhouhao * @since 3.0.6 */ public interface UserAttachEntity { String userId = "userId"; String getUserId(); void setUserId(String userId); default String getUserIdProperty() { return userId; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/Authorize.java ================================================ /* * * * Copyright 2020 http://www.hswebframework.org * * * * Licensed under the Apache License, Version 2.0 (the "License"); * * you may not use this file except in compliance with the License. * * You may obtain a copy of the License at * * * * http://www.apache.org/licenses/LICENSE-2.0 * * * * Unless required by applicable law or agreed to in writing, software * * distributed under the License is distributed on an "AS IS" BASIS, * * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * * See the License for the specific language governing permissions and * * limitations under the License. * */ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.define.Phased; import java.lang.annotation.*; /** * 基础权限控制注解,提供基本的控制配置 * * @author zhouhao * @see org.hswebframework.web.authorization.Authentication * @see org.hswebframework.web.authorization.define.AuthorizeDefinition * @see Resource * @see ResourceAction * @see Dimension * @see DataAccess * @since 3.0 */ @Target({ElementType.TYPE, ElementType.METHOD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented public @interface Authorize { Resource[] resources() default {}; Dimension[] dimension() default {}; /** * 是否运行匿名访问,匿名访问时,直接允许执行,否则将进行权限验证. * * @return 是否允许匿名访问 * @since 4.0.19 */ boolean anonymous() default false; /** * 验证失败时返回的消息 * * @return 验证失败提示的消息 */ String message() default "无访问权限"; /** * 是否合并类上的注解 * * @return 是否合并类上的注解 */ boolean merge() default true; /** * 验证模式，在使用多个验证条件时有效 * * @return logical */ Logical logical() default Logical.DEFAULT; /** * @return 验证时机，在方法调用前还是调用后 */ Phased phased() default Phased.before; /** * @return 是否忽略, 忽略后将不进行权限控制 */ boolean ignore() default false; String[] description() default {}; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/CreateAction.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.Permission; import org.springframework.core.annotation.AliasFor; import java.lang.annotation.*; @Target({ElementType.METHOD,ElementType.FIELD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @ResourceAction(id = Permission.ACTION_ADD, name = "新增") public @interface CreateAction { } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/DataAccess.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.access.DataAccessController; import java.lang.annotation.*; /** * 数据级权限控制注解,用于进行需要数据级别权限控制的声明. * * 此注解仅用于声明此方法需要进行数据级权限控制,具体权限控制方式由控制器实{@link DataAccessController}现 * * * @author zhouhao * @see DataAccessController * @see ResourceAction#dataAccess() * @since 3.0 * @deprecated 已弃用, 4.1中移除 */ @Target({ElementType.ANNOTATION_TYPE, ElementType.METHOD}) @Retention(RetentionPolicy.RUNTIME) @Documented @Deprecated public @interface DataAccess { DataAccessType[] type() default {}; /** * @return logical */ Logical logical() default Logical.AND; /** * @return 是否忽略, 忽略后将不进行权限控制 */ boolean ignore() default false; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/DataAccessType.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.access.DataAccessConfiguration; import org.hswebframework.web.authorization.access.DataAccessController; import java.lang.annotation.*; @Target({ElementType.ANNOTATION_TYPE, ElementType.METHOD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @Deprecated public @interface DataAccessType { String id(); //标识 String name(); //名称 String[] description() default {}; /** * @see DataAccessController */ Class controller() default DataAccessController.class; Class configuration() default DataAccessConfiguration.class; boolean ignore() default false; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/DeleteAction.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.Permission; import org.springframework.core.annotation.AliasFor; import java.lang.annotation.*; @Target({ElementType.METHOD,ElementType.FIELD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @ResourceAction(id = Permission.ACTION_DELETE, name = "删除") public @interface DeleteAction { } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/Dimension.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.DimensionType; import java.lang.annotation.*; import static java.lang.annotation.ElementType.*; import static java.lang.annotation.RetentionPolicy.RUNTIME; /** * 请使用注解继承方式使用此注解 * * @author zhouhao * @see RequiresRoles * @since 4.0 */ @Target({ElementType.ANNOTATION_TYPE}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @Repeatable(value = Dimension.List.class) public @interface Dimension { /** * 维度类型标识,如: role,org * * @return 维度类型 * @see org.hswebframework.web.authorization.Dimension#getType() * @see DimensionType#getId() * @see org.hswebframework.web.authorization.Authentication#hasDimension(String, String...) */ String type(); /** * 具体的维度ID,如: 角色ID,组织ID * * @return 维度ID * @see org.hswebframework.web.authorization.Dimension#getId() * @see org.hswebframework.web.authorization.Authentication#hasDimension(String, String...) */ String[] id() default {}; /** * 配置了多个ID时的判断逻辑,默认为任意满足则认为有权限. * * @return Logical */ Logical logical() default Logical.DEFAULT; /** * @return 说明 */ String[] description() default {}; /** * @return 是否忽略 */ boolean ignore() default false; @Target({ANNOTATION_TYPE}) @Retention(RUNTIME) @Documented @Inherited @interface List { Dimension[] value() default {}; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/DimensionDataAccess.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.define.Phased; import org.springframework.core.annotation.AliasFor; import java.lang.annotation.*; @DataAccessType(id = "dimension", name = "维度数据权限") @Retention(RetentionPolicy.RUNTIME) @Documented @Target({ElementType.ANNOTATION_TYPE, ElementType.METHOD}) @Authorize @Deprecated public @interface DimensionDataAccess { Mapping[] mapping() default {}; @AliasFor(annotation = Authorize.class) Phased phased() default Phased.before; @AliasFor(annotation = DataAccessType.class) boolean ignore() default false; @Retention(RetentionPolicy.RUNTIME) @Documented @Target({ElementType.ANNOTATION_TYPE, ElementType.METHOD}) @interface Mapping { String dimensionType(); String property(); int idParamIndex() default -1; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/Dimensions.java ================================================ package org.hswebframework.web.authorization.annotation; import java.lang.annotation.*; import static java.lang.annotation.ElementType.*; import static java.lang.annotation.RetentionPolicy.RUNTIME; /** * 标记多个维度的权限控制相关配置 * * @author zhouhao * @since 5.0.1 */ @Target({ElementType.METHOD, TYPE, ANNOTATION_TYPE, FIELD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented public @interface Dimensions { /** * 存在多个维度时的判断逻辑,默认任意一个满足则认为有权限 * * @return Logical */ Logical logical() default Logical.DEFAULT; /** * @return 针对当前配置的说明信息 */ String[] description() default {}; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/FieldDataAccess.java ================================================ package org.hswebframework.web.authorization.annotation; import org.springframework.core.annotation.AliasFor; import java.lang.annotation.*; /** * @deprecated 已弃用 */ @DataAccessType(id = "FIELD_DENY", name = "字段权限") @Retention(RetentionPolicy.RUNTIME) @Documented @Target({ElementType.ANNOTATION_TYPE, ElementType.METHOD}) @Deprecated public @interface FieldDataAccess { @AliasFor(annotation = DataAccessType.class) boolean ignore() default false; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/Logical.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.hswebframework.web.authorization.annotation; public enum Logical { AND, OR, DEFAULT } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/QueryAction.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.Permission; import org.springframework.core.annotation.AliasFor; import java.lang.annotation.*; @Target({ElementType.METHOD,ElementType.FIELD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @ResourceAction(id = Permission.ACTION_QUERY, name = "查询") public @interface QueryAction { } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/RequiresRoles.java ================================================ package org.hswebframework.web.authorization.annotation; import org.springframework.core.annotation.AliasFor; import java.lang.annotation.*; import static java.lang.annotation.RetentionPolicy.RUNTIME; /** * 注解根据角色维度进行权限控制,具有权限的用户才可访问对应的方法. * * {@code * @RequiresRoles("admin") * public Mono handleRequest(){ * * } * } * * @author zhouhao * @see Dimension * @since 4.0 */ @Target({ElementType.METHOD, ElementType.TYPE, ElementType.FIELD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @Dimension(type = "role") @Repeatable(RequiresRoles.List.class) public @interface RequiresRoles { /** * @return 角色ID */ @AliasFor(annotation = Dimension.class, attribute = "id") String[] value() default {}; /** * 多个角色时的判断逻辑 * @return Logical */ @AliasFor(annotation = Dimension.class, attribute = "logical") Logical logical() default Logical.DEFAULT; @Target({ElementType.METHOD, ElementType.TYPE, ElementType.FIELD}) @Retention(RUNTIME) @Documented @Inherited @Dimension.List() @interface List { RequiresRoles[] value(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/Resource.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.Permission; import org.hswebframework.web.authorization.define.Phased; import java.lang.annotation.*; import static java.lang.annotation.ElementType.ANNOTATION_TYPE; import static java.lang.annotation.RetentionPolicy.RUNTIME; /** * 接口资源声明注解,声明Controller的资源相关信息,用于进行权限控制。 * * 在Controller进行注解,表示此接口需要有对应的权限{@link Permission#getId()}才能进行访问. * 具体的操作权限控制,需要在方法上注解{@link ResourceAction}. * * * * {@code * @RestController * //声明资源 * @Resource(id = "test", name = "测试功能") * public class TestController implements ReactiveCrudController { * * //声明操作,需要有 test:query 权限才能访问此接口 * @QueryAction * public Mono getUser() { * return Authentication.currentReactive() * .switchIfEmpty(Mono.error(new UnAuthorizedException())) * .map(Authentication::getUser); * } * * } * } * * 如果接口不需要进行权限控制,可注解{@link Authorize#ignore()}来标识此接口不需要权限控制. * 或者通过监听 {@link org.hswebframework.web.authorization.events.AuthorizingHandleBeforeEvent}来进行自定义处理 * {@code * @EventListener * public void handleAuthEvent(AuthorizingHandleBeforeEvent e) { * //admin用户可以访问全部操作 * if ("admin".equals(e.getContext().getAuthentication().getUser().getUsername())) { * e.setAllow(true); * } * } * } * * @author zhouhao * @see ResourceAction * @see Authorize * @see org.hswebframework.web.authorization.events.AuthorizingHandleBeforeEvent * @since 4.0 */ @Target({ElementType.ANNOTATION_TYPE, ElementType.METHOD,ElementType.FIELD, ElementType.TYPE}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @Repeatable(Resource.List.class) public @interface Resource { /** * 资源ID * * @return 资源ID */ String id(); /** * @return 资源名称 */ String name(); /** * @return 资源操作定义 */ ResourceAction[] actions() default {}; /** * @return 多个操作控制逻辑 */ Logical logical() default Logical.DEFAULT; /** * @return 权限控制阶段 */ Phased phased() default Phased.before; /** * @return 资源描述 */ String[] description() default {}; /** * @return 资源分组 */ String[] group() default {}; /** * 如果在方法上设置此属性，表示是否合并类上注解的属性 * * @return 是否合并 */ boolean merge() default true; @Target({ANNOTATION_TYPE}) @Retention(RUNTIME) @Documented @Inherited @interface List { Resource[] value(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/ResourceAction.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.Permission; import java.lang.annotation.*; import static java.lang.annotation.ElementType.*; import static java.lang.annotation.RetentionPolicy.RUNTIME; /** * 对资源操作的描述,通常用来进行权限控制. * * 在Controller方法上添加此注解,来声明根据权限操作{@link Permission#getActions()}进行权限控制. * * 可以使用注解继承的方式来统一定义操作: * {@code * @Target(ElementType.METHOD) * @Retention(RetentionPolicy.RUNTIME) * @Inherited * @Documented * @ResourceAction(id = "create", name = "新增") * public @interface CreateAction { * * } * } * * * @see CreateAction * @see DeleteAction * @see SaveAction * @see org.hswebframework.web.authorization.Authentication * @see Permission#getActions() */ @Target({ANNOTATION_TYPE, FIELD, METHOD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @Repeatable(ResourceAction.List.class) public @interface ResourceAction { /** * 操作标识 * * @return 操作标识 * @see Permission#getActions() */ String id(); /** * @return 操作名称 */ String name(); /** * @return 操作说明 */ String[] description() default {}; /** * @return 多个操作时的判断逻辑 */ Logical logical() default Logical.DEFAULT; @Target({ANNOTATION_TYPE, FIELD, METHOD}) @Retention(RUNTIME) @Documented @Inherited @interface List { ResourceAction[] value(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/SaveAction.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.Permission; import java.lang.annotation.*; /** * 继承{@link ResourceAction},提供统一的id定义 * * @author zhouhao * @since 4.0 */ @Target({ElementType.METHOD,ElementType.FIELD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @ResourceAction(id = Permission.ACTION_SAVE, name = "保存") public @interface SaveAction { } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/TwoFactor.java ================================================ package org.hswebframework.web.authorization.annotation; import org.hswebframework.web.authorization.twofactor.TwoFactorValidator; import java.lang.annotation.*; /** * 开启2FA双重验证 * * @see org.hswebframework.web.authorization.twofactor.TwoFactorValidatorManager * @see org.hswebframework.web.authorization.twofactor.TwoFactorValidatorProvider * @see org.hswebframework.web.authorization.twofactor.TwoFactorValidator * @since 3.0.4 */ @Target({ElementType.TYPE, ElementType.METHOD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented public @interface TwoFactor { /** * @return 接口的标识, 用于实现不同的操作, 可能会配置不同的验证规则 */ String value(); /** * @return 验证有效期, 超过有效期后需要重新进行验证 */ long timeout() default 10 * 60 * 1000L; /** * 验证器供应商,如: totp,sms,email,由{@link org.hswebframework.web.authorization.twofactor.TwoFactorValidatorProvider}进行自定义. * * 可通过配置项: hsweb.authorize.two-factor.default-provider 来修改默认配置 * * @return provider * @see TwoFactorValidator#getProvider() */ String provider() default "default"; /** * 验证码的http参数名,在进行验证的时候需要传入此参数 * * @return 验证码的参数名 */ String parameter() default "verifyCode"; /** * @return 关闭验证 */ boolean ignore() default false; /** * * @return 错误提示 * @since 3.0.6 */ String message() default "validation.verify_code_error"; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/UserOwnData.java ================================================ package org.hswebframework.web.authorization.annotation; import java.lang.annotation.*; /** * 声明某个操作支持用户查看自己的数据 * * @deprecated 已弃用 */ @Target({ElementType.ANNOTATION_TYPE, ElementType.METHOD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @DataAccessType(id = "user_own_data", name = "用户自己的数据") @Deprecated public @interface UserOwnData { } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/builder/AuthenticationBuilder.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.hswebframework.web.authorization.builder; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.authorization.Permission; import org.hswebframework.web.authorization.Role; import org.hswebframework.web.authorization.User; import java.io.Serializable; import java.util.List; import java.util.Map; public interface AuthenticationBuilder extends Serializable { AuthenticationBuilder user(User user); AuthenticationBuilder user(String user); AuthenticationBuilder user(Map user); AuthenticationBuilder role(List role); AuthenticationBuilder role(String role); AuthenticationBuilder permission(List permission); AuthenticationBuilder permission(String permission); AuthenticationBuilder attributes(String attributes); AuthenticationBuilder attributes(Map permission); AuthenticationBuilder json(String json); Authentication build(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/builder/AuthenticationBuilderFactory.java ================================================ package org.hswebframework.web.authorization.builder; /** * 权限构造器工厂 * * @author zhouhao */ public interface AuthenticationBuilderFactory { /** * @return 新建一个权限构造器 */ AuthenticationBuilder create(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/builder/DataAccessConfigBuilder.java ================================================ package org.hswebframework.web.authorization.builder; import org.hswebframework.web.authorization.access.DataAccessConfig; import java.util.Map; /** * * @author zhouhao */ public interface DataAccessConfigBuilder { DataAccessConfigBuilder fromJson(String json); DataAccessConfigBuilder fromMap(Map json); DataAccessConfig build(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/builder/DataAccessConfigBuilderFactory.java ================================================ package org.hswebframework.web.authorization.builder; /** * 数据权限配置构造器工厂 * * @author zhouhao */ public interface DataAccessConfigBuilderFactory { /** * @return 新建一个数据权限配置构造器工厂 */ DataAccessConfigBuilder create(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/context/AuthenticationThreadLocalAccessor.java ================================================ package org.hswebframework.web.authorization.context; import io.micrometer.context.ThreadLocalAccessor; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.authorization.AuthenticationHolder; import org.hswebframework.web.authorization.ReactiveAuthenticationHolder; import javax.annotation.Nonnull; public class AuthenticationThreadLocalAccessor implements ThreadLocalAccessor { static final Object KEY = Authentication.class; static { ReactiveAuthenticationHolder.addSupplier( new ThreadLocalReactiveAuthenticationSupplier() ); } @Override @Nonnull public Object key() { return KEY; } @Override public Authentication getValue() { return AuthenticationHolder.get().orElse(null); } @Override public void setValue() { AuthenticationHolder.resetCurrent(); } @Override public void setValue(@Nonnull Authentication value) { AuthenticationHolder.makeCurrent(value); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/context/ThreadLocalReactiveAuthenticationSupplier.java ================================================ package org.hswebframework.web.authorization.context; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.authorization.AuthenticationHolder; import org.hswebframework.web.authorization.ReactiveAuthenticationSupplier; import reactor.core.publisher.Mono; class ThreadLocalReactiveAuthenticationSupplier implements ReactiveAuthenticationSupplier { @Override public Mono get(String userId) { return Mono.empty(); } @Override public Mono get() { return Mono.justOrEmpty(AuthenticationHolder.get()); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AopAuthorizeDefinition.java ================================================ package org.hswebframework.web.authorization.define; import java.lang.reflect.Method; /** * @author zhouhao * @since 1.0 */ public interface AopAuthorizeDefinition extends AuthorizeDefinition { Class getTargetClass(); Method getTargetMethod(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AuthorizeDefinition.java ================================================ package org.hswebframework.web.authorization.define; import java.util.StringJoiner; /** * 权限控制定义,定义权限控制的方式 * * @author zhouhao * @since 3.0 */ public interface AuthorizeDefinition { ResourcesDefinition getResources(); DimensionsDefinition getDimensions(); String getMessage(); Phased getPhased(); boolean isEmpty(); default boolean allowAnonymous() { return false; } default String getDescription() { ResourcesDefinition res = getResources(); StringJoiner joiner = new StringJoiner(";"); for (ResourceDefinition resource : res.getResources()) { joiner.add(resource.getId() + ":" + String.join(",", resource.getActionIds())); } return joiner.toString(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AuthorizeDefinitionContext.java ================================================ package org.hswebframework.web.authorization.define; public interface AuthorizeDefinitionContext { void addResource(ResourceDefinition def); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AuthorizeDefinitionCustomizer.java ================================================ package org.hswebframework.web.authorization.define; public interface AuthorizeDefinitionCustomizer { void custom(AuthorizeDefinitionContext context); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AuthorizeDefinitionInitializedEvent.java ================================================ package org.hswebframework.web.authorization.define; import org.hswebframework.web.authorization.events.AuthorizationEvent; import org.springframework.context.ApplicationEvent; import java.util.List; public class AuthorizeDefinitionInitializedEvent extends ApplicationEvent implements AuthorizationEvent { private static final long serialVersionUID = -8185138454949381441L; public AuthorizeDefinitionInitializedEvent(List all) { super(all); } @SuppressWarnings("unchecked") public List getAllDefinition() { return ((List) getSource()); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AuthorizingContext.java ================================================ package org.hswebframework.web.authorization.define; import lombok.AllArgsConstructor; import lombok.Getter; import lombok.NoArgsConstructor; import lombok.Setter; import org.hswebframework.web.aop.MethodInterceptorContext; import org.hswebframework.web.authorization.Authentication; /** * 权限控制上下文 */ @Getter @Setter @NoArgsConstructor @AllArgsConstructor public class AuthorizingContext { private AuthorizeDefinition definition; private Authentication authentication; private MethodInterceptorContext paramContext; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/CompositeAuthorizeDefinitionCustomizer.java ================================================ package org.hswebframework.web.authorization.define; import lombok.AllArgsConstructor; import java.util.List; import java.util.stream.Collectors; import java.util.stream.StreamSupport; @AllArgsConstructor public class CompositeAuthorizeDefinitionCustomizer implements AuthorizeDefinitionCustomizer{ private final List customizers; public CompositeAuthorizeDefinitionCustomizer(Iterable customizers){ this(StreamSupport.stream(customizers.spliterator(),false).collect(Collectors.toList())); } @Override public void custom(AuthorizeDefinitionContext context) { for (AuthorizeDefinitionCustomizer customizer : customizers) { customizer.custom(context); } } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/DataAccessDefinition.java ================================================ package org.hswebframework.web.authorization.define; import lombok.Getter; import lombok.Setter; import java.util.*; @Getter @Setter public class DataAccessDefinition { Set dataAccessTypes = new HashSet<>(); public Optional getType(String typeId) { return dataAccessTypes .stream() .filter(type -> type.getId() != null && type.getId().equalsIgnoreCase(typeId)) .findAny(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/DataAccessTypeDefinition.java ================================================ package org.hswebframework.web.authorization.define; import lombok.EqualsAndHashCode; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.authorization.access.DataAccessController; import org.hswebframework.web.authorization.access.DataAccessType; import org.hswebframework.web.authorization.access.DataAccessConfiguration; import org.hswebframework.web.bean.FastBeanCopier; @Getter @Setter @EqualsAndHashCode(of = "id") public class DataAccessTypeDefinition implements DataAccessType { private String id; private String name; private String description; private Class controller; private Class configuration; public DataAccessTypeDefinition copy(){ return FastBeanCopier.copy(this,DataAccessTypeDefinition::new); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/DimensionDefinition.java ================================================ package org.hswebframework.web.authorization.define; import lombok.EqualsAndHashCode; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.authorization.DimensionType; import org.hswebframework.web.authorization.annotation.Logical; import org.hswebframework.web.bean.FastBeanCopier; import reactor.function.Predicate3; import java.util.Collection; import java.util.Collections; import java.util.HashSet; import java.util.Set; import java.util.function.BiPredicate; import java.util.function.Predicate; @Getter @Setter @EqualsAndHashCode(of = "typeId") public class DimensionDefinition { private String typeId; private String typeName; private Set dimensionId = new HashSet<>(); private Logical logical = Logical.DEFAULT; public boolean hasDimension(Predicate3> filter) { return filter.test(typeId,logical, Collections.unmodifiableSet(dimensionId)); } public boolean hasDimension(Set dimensionIdPredicate) { if (logical == Logical.AND) { return dimensionIdPredicate.containsAll(dimensionId); } return dimensionId .stream() .anyMatch(dimensionIdPredicate::contains); } public boolean hasDimension(String id) { return dimensionId.contains(id); } public void addDimensionI(Set id) { dimensionId.addAll(id); } public DimensionDefinition copy() { return FastBeanCopier.copy(this, DimensionDefinition::new); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/DimensionsDefinition.java ================================================ package org.hswebframework.web.authorization.define; import lombok.Getter; import lombok.Setter; import org.apache.commons.collections4.CollectionUtils; import org.apache.commons.collections4.MapUtils; import org.apache.commons.collections4.Predicate; import org.hswebframework.web.authorization.Dimension; import org.hswebframework.web.authorization.annotation.Logical; import reactor.function.Predicate3; import java.util.*; import java.util.concurrent.ConcurrentHashMap; import java.util.function.BiPredicate; import java.util.stream.Collectors; @Getter @Setter public class DimensionsDefinition { private Map dimensionsMapping = new ConcurrentHashMap<>(); private Logical logical = Logical.DEFAULT; private String description; public Set getDimensions() { return new HashSet<>(dimensionsMapping.values()); } public void clear() { dimensionsMapping.clear(); } public void addDimension(DimensionDefinition definition) { DimensionDefinition old = dimensionsMapping.putIfAbsent(definition.getTypeId(), definition); if (old != null) { old.addDimensionI(definition.getDimensionId()); } } public boolean isEmpty() { return MapUtils.isEmpty(this.dimensionsMapping); } public boolean hasDimension(Dimension dimension) { DimensionDefinition def = dimensionsMapping.get(dimension.getType().getId()); return def != null && def.hasDimension(dimension.getId()); } public boolean hasDimension(Predicate3> filter) { if (logical == Logical.AND) { return dimensionsMapping .values() .stream() .allMatch(e -> e.hasDimension(filter)); } else { return dimensionsMapping .values() .stream() .anyMatch(e -> e.hasDimension(filter)); } } public boolean hasDimension(List dimensions) { if (logical == Logical.AND) { return dimensions.stream().allMatch(this::hasDimension); } return dimensions.stream().anyMatch(this::hasDimension); } @Override public String toString() { return dimensionsMapping .values() .stream() .map(d -> String.join(",", d.getDimensionId()) + "@" + d.getTypeId()) .collect(Collectors.joining(";")); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/HandleType.java ================================================ package org.hswebframework.web.authorization.define; public enum HandleType{ RBAC,DATA } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/MergedAuthorizeDefinition.java ================================================ package org.hswebframework.web.authorization.define; import java.util.List; import java.util.Set; public class MergedAuthorizeDefinition implements AuthorizeDefinitionContext { private final ResourcesDefinition resources = new ResourcesDefinition(); private final DimensionsDefinition dimensions = new DimensionsDefinition(); public Set getResources() { return resources.getResources(); } public Set getDimensions() { return dimensions.getDimensions(); } public void addResource(ResourceDefinition resource) { resources.addResource(resource, true); } public void addDimension(DimensionDefinition resource) { dimensions.addDimension(resource); } public void merge(List definitions) { for (AuthorizeDefinition definition : definitions) { definition.getResources().getResources().forEach(this::addResource); definition.getDimensions().getDimensions().forEach(this::addDimension); } } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/Phased.java ================================================ package org.hswebframework.web.authorization.define; public enum Phased { before, after } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/ResourceActionDefinition.java ================================================ package org.hswebframework.web.authorization.define; import lombok.EqualsAndHashCode; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.bean.FastBeanCopier; import org.hswebframework.web.i18n.I18nSupportUtils; import org.hswebframework.web.i18n.MultipleI18nSupportEntity; import java.util.Collection; import java.util.HashMap; import java.util.Locale; import java.util.Map; import static org.hswebframework.web.authorization.define.ResourceDefinition.supportLocale; @Getter @Setter @EqualsAndHashCode(of = "id") public class ResourceActionDefinition implements MultipleI18nSupportEntity { private String id; private String name; private String description; private Map> i18nMessages; @Deprecated private DataAccessDefinition dataAccess = new DataAccessDefinition(); private final static String resolveActionPrefix = "hswebframework.web.system.action."; public ResourceActionDefinition copy() { return FastBeanCopier.copy(this, ResourceActionDefinition::new); } public Map> getI18nMessages() { if (org.springframework.util.CollectionUtils.isEmpty(i18nMessages)) { this.i18nMessages = I18nSupportUtils .putI18nMessages( resolveActionPrefix + this.id, "name", supportLocale, null, this.i18nMessages ); } return i18nMessages; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/ResourceDefinition.java ================================================ package org.hswebframework.web.authorization.define; import com.fasterxml.jackson.annotation.JsonIgnore; import lombok.AccessLevel; import lombok.EqualsAndHashCode; import lombok.Getter; import lombok.Setter; import org.apache.commons.collections4.CollectionUtils; import org.hswebframework.web.authorization.annotation.Logical; import org.hswebframework.web.bean.FastBeanCopier; import org.hswebframework.web.i18n.I18nSupportUtils; import org.hswebframework.web.i18n.MultipleI18nSupportEntity; import java.util.*; import java.util.stream.Collectors; @Getter @Setter @EqualsAndHashCode(of = "id") public class ResourceDefinition implements MultipleI18nSupportEntity { private String id; private String name; private String description; private Set actions = new HashSet<>(); private List group; private Map> i18nMessages; @Setter(value = AccessLevel.PRIVATE) @JsonIgnore private volatile Set actionIds; private Logical logical = Logical.DEFAULT; private Phased phased = Phased.before; public final static List supportLocale = new ArrayList<>(); static { supportLocale.add(Locale.CHINESE); supportLocale.add(Locale.ENGLISH); } private final static String resolvePermissionPrefix = "hswebframework.web.system.permission."; public static ResourceDefinition of(String id, String name) { ResourceDefinition definition = new ResourceDefinition(); definition.setId(id); definition.setName(name); return definition; } public Map> getI18nMessages() { if (org.springframework.util.CollectionUtils.isEmpty(i18nMessages)) { this.i18nMessages = I18nSupportUtils .putI18nMessages( resolvePermissionPrefix + this.id, "name", supportLocale, null, this.i18nMessages ); } return i18nMessages; } public ResourceDefinition copy() { ResourceDefinition definition = FastBeanCopier.copy(this, ResourceDefinition::new); definition.setActions(actions.stream().map(ResourceActionDefinition::copy).collect(Collectors.toSet())); return definition; } public ResourceDefinition addAction(String id, String name) { ResourceActionDefinition action = new ResourceActionDefinition(); action.setId(id); action.setName(name); return addAction(action); } public synchronized ResourceDefinition addAction(ResourceActionDefinition action) { actionIds = null; actions.add(action); return this; } public Optional getAction(String action) { return actions.stream() .filter(act -> act.getId().equalsIgnoreCase(action)) .findAny(); } public Set getActionIds() { if (actionIds == null) { actionIds = this.actions .stream() .map(ResourceActionDefinition::getId) .collect(Collectors.toSet()); } return actionIds; } @JsonIgnore public List getDataAccessAction() { return actions.stream() .filter(act -> CollectionUtils.isNotEmpty(act.getDataAccess().getDataAccessTypes())) .collect(Collectors.toList()); } public boolean hasDataAccessAction() { return actions.stream() .anyMatch(act -> CollectionUtils.isNotEmpty(act.getDataAccess().getDataAccessTypes())); } public boolean hasAction(Collection actions) { if (CollectionUtils.isEmpty(this.actions)) { return true; } if (CollectionUtils.isEmpty(actions)) { return false; } if (logical == Logical.AND) { return getActionIds().containsAll(actions); } return getActionIds().stream().anyMatch(actions::contains); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/ResourcesDefinition.java ================================================ package org.hswebframework.web.authorization.define; import com.fasterxml.jackson.annotation.JsonIgnore; import lombok.Getter; import lombok.Setter; import org.apache.commons.collections4.CollectionUtils; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.authorization.Permission; import org.hswebframework.web.authorization.annotation.Logical; import java.util.*; import java.util.concurrent.ConcurrentHashMap; import java.util.stream.Collectors; @Getter @Setter public class ResourcesDefinition { private final Set resources = ConcurrentHashMap.newKeySet(); private Logical logical = Logical.DEFAULT; private Phased phased = Phased.before; public void clear() { resources.clear(); } public void addResource(ResourceDefinition resource, boolean merge) { ResourceDefinition definition = getResource(resource.getId()).orElse(null); if (definition != null) { if (merge) { resource.getActions() .stream() .map(ResourceActionDefinition::copy) .forEach(definition::addAction); } else { resources.remove(definition); } } resources.add(resource.copy()); } public Optional getResource(String id) { return resources .stream() .filter(resource -> resource.getId().equals(id)) .findAny(); } @JsonIgnore public List getDataAccessResources() { return resources .stream() .filter(ResourceDefinition::hasDataAccessAction) .collect(Collectors.toList()); } public boolean hasPermission(Permission permission) { if (CollectionUtils.isEmpty(resources)) { return true; } return getResource(permission.getId()) .filter(resource -> resource.hasAction(permission.getActions())) .isPresent(); } public boolean isEmpty() { return resources.isEmpty(); } public boolean hasPermission(Authentication authentication) { int size = resources.size(); if (size == 0) { return true; } if (size == 1) { for (ResourceDefinition resource : resources) { if (authentication.hasPermission(resource.getId(), resource.getActionIds())) { return true; } } return false; } if (logical == Logical.AND) { return resources .stream() .allMatch(resource -> authentication.hasPermission(resource.getId(), resource.getActionIds())); } return resources .stream() .anyMatch(resource -> authentication.hasPermission(resource.getId(), resource.getActionIds())); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/dimension/DimensionManager.java ================================================ package org.hswebframework.web.authorization.dimension; import reactor.core.publisher.Flux; import java.util.Collection; /** * 维度管理器 * * @author zhouhao * @since 4.0.12 */ public interface DimensionManager { /** * 获取用户维度 * * @param userId 用户ID * @return 用户维度信息 */ Flux getUserDimension(Collection userId); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/dimension/DimensionUserBind.java ================================================ package org.hswebframework.web.authorization.dimension; import lombok.AllArgsConstructor; import lombok.Getter; import lombok.NoArgsConstructor; import lombok.Setter; import java.io.Externalizable; import java.io.IOException; import java.io.ObjectInput; import java.io.ObjectOutput; @Getter @Setter @AllArgsConstructor(staticName = "of") @NoArgsConstructor public class DimensionUserBind implements Externalizable { private static final long serialVersionUID = -6849794470754667710L; private String userId; private String dimensionType; private String dimensionId; @Override public void writeExternal(ObjectOutput out) throws IOException { out.writeUTF(userId); out.writeUTF(dimensionType); out.writeUTF(dimensionId); } @Override public void readExternal(ObjectInput in) throws IOException, ClassNotFoundException { userId = in.readUTF(); dimensionType = in.readUTF(); dimensionId = in.readUTF(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/dimension/DimensionUserBindProvider.java ================================================ package org.hswebframework.web.authorization.dimension; import reactor.core.publisher.Flux; import java.util.Collection; public interface DimensionUserBindProvider { Flux getDimensionBindInfo(Collection userIdList); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/dimension/DimensionUserDetail.java ================================================ package org.hswebframework.web.authorization.dimension; import lombok.AllArgsConstructor; import lombok.Getter; import lombok.NoArgsConstructor; import lombok.Setter; import org.hswebframework.web.authorization.Dimension; import java.io.Serializable; import java.util.ArrayList; import java.util.List; @Getter @Setter @AllArgsConstructor(staticName = "of") @NoArgsConstructor public class DimensionUserDetail implements Serializable { private static final long serialVersionUID = -6849794470754667710L; private String userId; private List dimensions; public DimensionUserDetail merge(DimensionUserDetail detail) { DimensionUserDetail newDetail = new DimensionUserDetail(); newDetail.setUserId(userId); newDetail.setDimensions(new ArrayList<>()); if (null != dimensions) { newDetail.dimensions.addAll(dimensions); } if (null != detail.getDimensions()) { newDetail.dimensions.addAll(detail.getDimensions()); } return newDetail; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AbstractAuthorizationEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import org.hswebframework.web.event.DefaultAsyncEvent; import java.util.Optional; import java.util.function.Function; /** * 抽象授权事件,保存事件常用的数据 * * @author zhouhao * @since 3.0 */ public abstract class AbstractAuthorizationEvent extends DefaultAsyncEvent implements AuthorizationEvent { private static final long serialVersionUID = -3027505108916079214L; protected String username; protected String password; private final transient Function parameterGetter; /** * 所有参数不能为null * * @param username 用户名 * @param password 密码 * @param parameterGetter 参数获取函数,用户获取授权时传入的参数 */ public AbstractAuthorizationEvent(String username, String password, Function parameterGetter) { if (username == null || password == null || parameterGetter == null) { throw new NullPointerException(); } this.username = username; this.password = password; this.parameterGetter = parameterGetter; } @SuppressWarnings("unchecked") public Optional getParameter(String name) { return Optional.ofNullable((T) parameterGetter.apply(name)); } public String getUsername() { return username; } public String getPassword() { return password; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationBeforeEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import lombok.Getter; import org.hswebframework.web.authorization.Authentication; import java.util.function.Function; /** * 授权前事件 * * @author zhouhao * @since 3.0 */ @Getter public class AuthorizationBeforeEvent extends AbstractAuthorizationEvent { private static final long serialVersionUID = 5948747533500518524L; private String userId; private Authentication authentication; public AuthorizationBeforeEvent(String username, String password, Function parameterGetter) { super(username, password, parameterGetter); } public void setAuthorized(String userId) { this.userId = userId; } public void setAuthorized(Authentication authentication) { this.authentication = authentication; } public boolean isAuthorized() { return userId != null || authentication != null; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationDecodeEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import java.util.function.Function; /** * 在进行授权时的最开始,触发此事件进行用户名密码解码,解码后请调用{@link #setUsername(String)} {@link #setPassword(String)}重新设置用户名密码 * * @author zhouhao * @since 3.0 */ public class AuthorizationDecodeEvent extends AbstractAuthorizationEvent { private static final long serialVersionUID = 5418501934490174251L; public AuthorizationDecodeEvent(String username, String password, Function parameterGetter) { super(username, password, parameterGetter); } public void setUsername(String username) { super.username = username; } public void setPassword(String password) { super.password = password; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; /** * 授权事件 * * @author zhouhao * @see AuthorizationSuccessEvent * @see AuthorizationFailedEvent * @see AuthorizationBeforeEvent * @see AuthorizationDecodeEvent * @see AuthorizationExitEvent * @see org.springframework.context.ApplicationEvent * @since 3.0 */ public interface AuthorizationEvent { } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationExitEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.event.DefaultAsyncEvent; import org.springframework.context.ApplicationEvent; /** * 退出登录事件 * * @author zhouhao */ public class AuthorizationExitEvent extends DefaultAsyncEvent implements AuthorizationEvent { private static final long serialVersionUID = -4590245933665047280L; private final Authentication authentication; public AuthorizationExitEvent(Authentication authentication) { this.authentication = authentication; } public Authentication getAuthentication() { return authentication; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationFailedEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import java.util.function.Function; /** * 授权失败时触发 * * @author zhouhao */ public class AuthorizationFailedEvent extends AbstractAuthorizationEvent { private static final long serialVersionUID = -101792832265740828L; /** * 异常信息 */ private Throwable exception; public AuthorizationFailedEvent(String username, String password, Function parameterGetter) { super(username, password, parameterGetter); } public Throwable getException() { return exception; } public void setException(Throwable exception) { this.exception = exception; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationInitializeEvent.java ================================================ package org.hswebframework.web.authorization.events; import lombok.AllArgsConstructor; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.event.DefaultAsyncEvent; @Getter @Setter @AllArgsConstructor public class AuthorizationInitializeEvent extends DefaultAsyncEvent { private Authentication authentication; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationSuccessEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.event.DefaultAsyncEvent; import java.util.HashMap; import java.util.Map; import java.util.Optional; import java.util.function.Function; /** * 授权成功事件,当授权成功时,触发此事件,并传入授权的信息 * * @author zhouhao * @see Authentication * @since 3.0 */ public class AuthorizationSuccessEvent extends DefaultAsyncEvent implements AuthorizationEvent { private static final long serialVersionUID = -2452116314154155058L; private final Authentication authentication; private final transient Function parameterGetter; private Map result = new HashMap<>(); public AuthorizationSuccessEvent(Authentication authentication, Function parameterGetter) { this.authentication = authentication; this.parameterGetter = parameterGetter; } public Authentication getAuthentication() { return authentication; } @SuppressWarnings("unchecked") public Optional getParameter(String name) { return Optional.ofNullable((T) parameterGetter.apply(name)); } public Map getResult() { return result; } public void setResult(Map result) { this.result = result; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizingHandleBeforeEvent.java ================================================ package org.hswebframework.web.authorization.events; import org.hswebframework.web.authorization.define.AuthorizingContext; import org.hswebframework.web.authorization.define.HandleType; import org.hswebframework.web.event.DefaultAsyncEvent; import org.springframework.context.ApplicationEvent; /** * 权限控制事件,在进行权限控制之前会推送此事件，用于自定义权限控制结果: * {@code * @EventListener * public void handleAuthEvent(AuthorizingHandleBeforeEvent e) { * //admin用户可以访问全部操作 * if ("admin".equals(e.getContext().getAuthentication().getUser().getUsername())) { * e.setAllow(true); * } * } * } * * @author zhouhao * @since 4.0 */ public class AuthorizingHandleBeforeEvent extends DefaultAsyncEvent implements AuthorizationEvent { private boolean allow = false; private boolean execute = true; private String message; private final AuthorizingContext context; /** * @deprecated 数据权限控制已取消,4.1版本后移除 */ @Deprecated private final HandleType handleType; public AuthorizingHandleBeforeEvent(AuthorizingContext context, HandleType handleType) { this.context = context; this.handleType = handleType; } public AuthorizingContext getContext() { return context; } public boolean isExecute() { return execute; } public boolean isAllow() { return allow; } /** * 设置通过当前请求 * * @param allow allow */ public void setAllow(boolean allow) { execute = false; this.allow = allow; } public String getMessage() { return message; } /** * 设置错误提示消息 * * @param message 消息 */ public void setMessage(String message) { this.message = message; } /** * @return 权限控制类型 */ public HandleType getHandleType() { return handleType; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/exception/AccessDenyException.java ================================================ package org.hswebframework.web.authorization.exception; import lombok.Getter; import org.hswebframework.web.exception.I18nSupportException; import org.springframework.http.HttpStatus; import org.springframework.web.bind.annotation.ResponseStatus; import java.util.Set; /** * 权限验证异常 * * @author zhouhao * @since 3.0 */ @ResponseStatus(HttpStatus.FORBIDDEN) @Getter public class AccessDenyException extends I18nSupportException { private static final long serialVersionUID = -5135300127303801430L; private String code; public AccessDenyException() { this("error.access_denied"); } public AccessDenyException(String message) { super(message); } public AccessDenyException(String permission, Set actions) { super("error.permission_denied", permission, actions); } public AccessDenyException(String message, String code) { this(message, code, null); } public AccessDenyException(String message, Throwable cause) { this(message, "access_denied", cause); } public AccessDenyException(String message, String code, Throwable cause) { super(message, cause, code); this.code = code; } /** * 不填充线程栈的异常，在一些对线程栈不敏感，且对异常不可控（如: 来自未认证请求产生的异常）的情况下不填充线程栈对性能有利。 */ public static class NoStackTrace extends AccessDenyException { public NoStackTrace() { super(); } public NoStackTrace(String message) { super(message); } public NoStackTrace(String permission, Set actions) { super(permission, actions); } public NoStackTrace(String message, String code) { super(message, code); } public NoStackTrace(String message, Throwable cause) { super(message, cause); } public NoStackTrace(String message, String code, Throwable cause) { super(message, code, cause); } @Override public final synchronized Throwable fillInStackTrace() { return this; } } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/exception/AuthenticationException.java ================================================ package org.hswebframework.web.authorization.exception; import lombok.Getter; import org.hswebframework.web.exception.I18nSupportException; @Getter public class AuthenticationException extends I18nSupportException { public static String ILLEGAL_PASSWORD = "illegal_password"; public static String USER_DISABLED = "user_disabled"; private final String code; public AuthenticationException(String code) { this(code, "error." + code); } public AuthenticationException(String code, String message) { super(message); this.code = code; } public AuthenticationException(String code, String message, Throwable cause) { super(message, cause); this.code = code; } /** * 不填充线程栈的异常，在一些对线程栈不敏感，且对异常不可控（如: 来自未认证请求产生的异常）的情况下不填充线程栈对性能有利。 */ public static class NoStackTrace extends AuthenticationException { public NoStackTrace(String code) { super(code); } public NoStackTrace(String code, String message) { super(code, message); } public NoStackTrace(String code, String message, Throwable cause) { super(code, message, cause); } @Override public final synchronized Throwable fillInStackTrace() { return this; } } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/exception/NeedTwoFactorException.java ================================================ package org.hswebframework.web.authorization.exception; import lombok.Getter; /** * @author zhouhao * @since 3.0.4 */ @Getter public class NeedTwoFactorException extends RuntimeException { private static final long serialVersionUID = 3655980280834947633L; private String provider; public NeedTwoFactorException(String message, String provider) { super(message); this.provider = provider; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/exception/UnAuthorizedException.java ================================================ /* * * * Copyright 2020 http://www.hswebframework.org * * * * Licensed under the Apache License, Version 2.0 (the "License"); * * you may not use this file except in compliance with the License. * * You may obtain a copy of the License at * * * * http://www.apache.org/licenses/LICENSE-2.0 * * * * Unless required by applicable law or agreed to in writing, software * * distributed under the License is distributed on an "AS IS" BASIS, * * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * * See the License for the specific language governing permissions and * * limitations under the License. * */ package org.hswebframework.web.authorization.exception; import lombok.Getter; import org.hswebframework.web.authorization.token.TokenState; import org.hswebframework.web.exception.I18nSupportException; import org.springframework.http.HttpStatus; import org.springframework.web.bind.annotation.ResponseStatus; /** * 未授权异常 * * @author zhouhao * @since 3.0 */ @Getter @ResponseStatus(HttpStatus.UNAUTHORIZED) public class UnAuthorizedException extends I18nSupportException { private static final long serialVersionUID = 2422918455013900645L; private final TokenState state; public UnAuthorizedException() { this(TokenState.expired); } public UnAuthorizedException(TokenState state) { this(state.getText(), state); } public UnAuthorizedException(String message, TokenState state) { super(message); this.state = state; } public UnAuthorizedException(String message, TokenState state, Throwable cause) { super(message, cause); this.state = state; } /** * 不填充线程栈的异常，在一些对线程栈不敏感，且对异常不可控（如: 来自未认证请求产生的异常）的情况下不填充线程栈对性能有利。 */ public static class NoStackTrace extends UnAuthorizedException { public NoStackTrace() { super(); } public NoStackTrace(TokenState state) { super(state); } public NoStackTrace(String message, TokenState state) { super(message, state); } public NoStackTrace(String message, TokenState state, Throwable cause) { super(message, state, cause); } @Override public final synchronized Throwable fillInStackTrace() { return this; } } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/setting/SettingNullValueHolder.java ================================================ package org.hswebframework.web.authorization.setting; import java.util.List; import java.util.Optional; /** * @author zhouhao * @since 1.0.0 */ public class SettingNullValueHolder implements SettingValueHolder { public static final SettingNullValueHolder INSTANCE = new SettingNullValueHolder(); private SettingNullValueHolder() { } @Override public Optional> asList(Class t) { return Optional.empty(); } @Override public Optional as(Class t) { return Optional.empty(); } @Override public Optional asString() { return Optional.empty(); } @Override public Optional asLong() { return Optional.empty(); } @Override public Optional asInt() { return Optional.empty(); } @Override public Optional asDouble() { return Optional.empty(); } @Override public Optional getValue() { return Optional.empty(); } @Override public UserSettingPermission getPermission() { return UserSettingPermission.NONE; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/setting/SettingValueHolder.java ================================================ package org.hswebframework.web.authorization.setting; import java.util.List; import java.util.Optional; public interface SettingValueHolder { SettingValueHolder NULL = SettingNullValueHolder.INSTANCE; Optional> asList(Class t); Optional as(Class t); Optional asString(); Optional asLong(); Optional asInt(); Optional asDouble(); Optional getValue(); UserSettingPermission getPermission(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/setting/StringSourceSettingHolder.java ================================================ package org.hswebframework.web.authorization.setting; import com.alibaba.fastjson.JSON; import lombok.AllArgsConstructor; import lombok.Getter; import org.hswebframework.utils.StringUtils; import org.hswebframework.web.dict.EnumDict; import java.util.List; import java.util.Optional; /** * @author zhouhao * @since 3.0.4 */ @AllArgsConstructor @Getter public class StringSourceSettingHolder implements SettingValueHolder { private String value; private UserSettingPermission permission; public static SettingValueHolder of(String value, UserSettingPermission permission) { if (value == null) { return SettingValueHolder.NULL; } return new StringSourceSettingHolder(value, permission); } @Override public Optional> asList(Class t) { return getNativeValue() .map(v -> JSON.parseArray(v, t)); } protected T convert(String value, Class t) { if (t.isEnum()) { if (EnumDict.class.isAssignableFrom(t)) { T val = (T) EnumDict.find((Class) t, value).orElse(null); if (null != val) { return val; } } for (T enumConstant : t.getEnumConstants()) { if (((Enum) enumConstant).name().equalsIgnoreCase(value)) { return enumConstant; } } } return JSON.parseObject(value, t); } @Override @SuppressWarnings("all") public Optional as(Class t) { if (t == String.class) { return (Optional) asString(); } else if (Long.class == t || long.class == t) { return (Optional) asLong(); } else if (Integer.class == t || int.class == t) { return (Optional) asInt(); } else if (Double.class == t || double.class == t) { return (Optional) asDouble(); } return getNativeValue().map(v -> convert(v, t)); } @Override public Optional asString() { return getNativeValue(); } @Override public Optional asLong() { return getNativeValue().map(StringUtils::toLong); } @Override public Optional asInt() { return getNativeValue().map(StringUtils::toInt); } @Override public Optional asDouble() { return getNativeValue().map(StringUtils::toDouble); } private Optional getNativeValue() { return Optional.ofNullable(value); } @Override public Optional getValue() { return Optional.ofNullable(value); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/setting/UserSettingManager.java ================================================ package org.hswebframework.web.authorization.setting; /** * @author zhouhao * @since 3.0.4 */ public interface UserSettingManager { SettingValueHolder getSetting(String userId, String key); void saveSetting(String userId, String key, String value, UserSettingPermission permission); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/setting/UserSettingPermission.java ================================================ package org.hswebframework.web.authorization.setting; import lombok.AllArgsConstructor; import lombok.Getter; import org.hswebframework.web.dict.Dict; import org.hswebframework.web.dict.EnumDict; /** * @author zhouhao * @since 3.0.4 */ @AllArgsConstructor @Getter @Dict("user-setting-permission") public enum UserSettingPermission implements EnumDict { NONE("无"), R("读"), W("写"), RW("读写"); private String text; @Override public String getValue() { return name(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/AbstractDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.simple; import org.hswebframework.web.authorization.access.DataAccessConfig; /** * @author zhouhao * @see DataAccessConfig * @since 3.0 */ public abstract class AbstractDataAccessConfig implements DataAccessConfig { private static final long serialVersionUID = -9025349704771557106L; private String action; @Override public String getAction() { return action; } public void setAction(String action) { this.action = action; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/CompositeReactiveAuthenticationManager.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.AllArgsConstructor; import lombok.extern.slf4j.Slf4j; import org.hswebframework.web.authorization.*; import reactor.core.publisher.Flux; import reactor.core.publisher.Mono; import java.util.List; import java.util.function.Function; import java.util.stream.Collectors; @AllArgsConstructor @Slf4j public class CompositeReactiveAuthenticationManager implements ReactiveAuthenticationManager { private final List providers; @Override public Mono authenticate(Mono request) { return Flux .concat( providers .stream() .map(manager -> manager .authenticate(request) .onErrorResume((err) -> { log.warn("get user authenticate error", err); return Mono.empty(); })) .collect(Collectors.toList())) .take(1) .next(); } @Override public Mono getByUserId(String userId) { if (providers.size() == 1) { return providers.get(0).getByUserId(userId); } return Flux .fromStream(providers .stream() .map(manager -> manager .getByUserId(userId) .onErrorResume((err) -> { log.warn("get user [{}] authentication error", userId, err); return Mono.empty(); }) )) .flatMap(Function.identity()) .as(AuthenticationUtils::merge); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/DefaultAuthorizationAutoConfiguration.java ================================================ package org.hswebframework.web.authorization.simple; import org.hswebframework.web.authorization.*; import org.hswebframework.web.authorization.builder.AuthenticationBuilderFactory; import org.hswebframework.web.authorization.builder.DataAccessConfigBuilderFactory; import org.hswebframework.web.authorization.dimension.DimensionManager; import org.hswebframework.web.authorization.dimension.DimensionUserBindProvider; import org.hswebframework.web.authorization.simple.builder.DataAccessConfigConverter; import org.hswebframework.web.authorization.simple.builder.SimpleAuthenticationBuilderFactory; import org.hswebframework.web.authorization.simple.builder.SimpleDataAccessConfigBuilderFactory; import org.hswebframework.web.authorization.token.*; import org.hswebframework.web.authorization.twofactor.TwoFactorValidatorManager; import org.hswebframework.web.authorization.twofactor.defaults.DefaultTwoFactorValidatorManager; import org.hswebframework.web.convert.CustomMessageConverter; import org.springframework.beans.factory.ObjectProvider; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.boot.autoconfigure.AutoConfiguration; import org.springframework.boot.autoconfigure.condition.ConditionalOnBean; import org.springframework.boot.autoconfigure.condition.ConditionalOnMissingBean; import org.springframework.boot.context.properties.ConfigurationProperties; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; import java.util.List; /** * @author zhouhao */ @AutoConfiguration public class DefaultAuthorizationAutoConfiguration { @Bean @ConditionalOnMissingBean(UserTokenManager.class) @ConfigurationProperties(prefix = "hsweb.user-token") public UserTokenManager userTokenManager() { return new DefaultUserTokenManager(); } @Bean @ConditionalOnMissingBean // @ConditionalOnBean(ReactiveAuthenticationManagerProvider.class) public ReactiveAuthenticationManager reactiveAuthenticationManager(List providers) { return new CompositeReactiveAuthenticationManager(providers); } @Bean @ConditionalOnBean(ReactiveAuthenticationManager.class) public UserTokenReactiveAuthenticationSupplier userTokenReactiveAuthenticationSupplier(UserTokenManager userTokenManager, ReactiveAuthenticationManager authenticationManager) { UserTokenReactiveAuthenticationSupplier supplier = new UserTokenReactiveAuthenticationSupplier(userTokenManager, authenticationManager); ReactiveAuthenticationHolder.addSupplier(supplier); return supplier; } @Bean @ConditionalOnBean(AuthenticationManager.class) public UserTokenAuthenticationSupplier userTokenAuthenticationSupplier(UserTokenManager userTokenManager, AuthenticationManager authenticationManager) { UserTokenAuthenticationSupplier supplier = new UserTokenAuthenticationSupplier(userTokenManager, authenticationManager); AuthenticationHolder.addSupplier(supplier); return supplier; } @Bean @ConditionalOnMissingBean(DataAccessConfigBuilderFactory.class) @ConfigurationProperties(prefix = "hsweb.authorization.data-access", ignoreInvalidFields = true) public SimpleDataAccessConfigBuilderFactory dataAccessConfigBuilderFactory() { return new SimpleDataAccessConfigBuilderFactory(); } @Bean @ConditionalOnMissingBean(AuthenticationBuilderFactory.class) public AuthenticationBuilderFactory authenticationBuilderFactory(DataAccessConfigBuilderFactory dataAccessConfigBuilderFactory) { return new SimpleAuthenticationBuilderFactory(dataAccessConfigBuilderFactory); } @Bean public CustomMessageConverter authenticationCustomMessageConverter(AuthenticationBuilderFactory factory) { return new CustomMessageConverter() { @Override public boolean support(Class clazz) { return clazz == Authentication.class; } @Override public Object convert(Class clazz, byte[] message) { String json = new String(message); return factory.create().json(json).build(); } }; } @Bean @ConditionalOnMissingBean(DimensionManager.class) public DimensionManager defaultDimensionManager(ObjectProviderbindProviders, ObjectProvider providers){ DefaultDimensionManager manager = new DefaultDimensionManager(); bindProviders.forEach(manager::addBindProvider); providers.forEach(manager::addProvider); return manager; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/DefaultDimensionManager.java ================================================ package org.hswebframework.web.authorization.simple; import org.hswebframework.web.authorization.Dimension; import org.hswebframework.web.authorization.DimensionProvider; import org.hswebframework.web.authorization.dimension.DimensionManager; import org.hswebframework.web.authorization.dimension.DimensionUserBind; import org.hswebframework.web.authorization.dimension.DimensionUserBindProvider; import org.hswebframework.web.authorization.dimension.DimensionUserDetail; import reactor.core.publisher.Flux; import reactor.core.publisher.Mono; import reactor.util.function.Tuple2; import reactor.util.function.Tuples; import java.util.*; import java.util.concurrent.CopyOnWriteArrayList; import java.util.function.Function; import java.util.stream.Collectors; public class DefaultDimensionManager implements DimensionManager { private final List dimensionProviders = new CopyOnWriteArrayList<>(); private final List bindProviders = new CopyOnWriteArrayList<>(); private final Mono> providerMapping = Flux .defer(() -> Flux.fromIterable(dimensionProviders)) .flatMap(provider -> provider .getAllType() .map(type -> Tuples.of(type.getId(), provider))) .collectMap(Tuple2::getT1, Tuple2::getT2); public DefaultDimensionManager() { } public void addProvider(DimensionProvider provider) { dimensionProviders.add(provider); } public void addBindProvider(DimensionUserBindProvider bindProvider) { bindProviders.add(bindProvider); } private Mono> providerMapping() { return providerMapping; } @Override public Flux getUserDimension(Collection userId) { return this .providerMapping() .flatMapMany(providerMapping -> Flux .fromIterable(bindProviders) //获取绑定信息 .flatMap(provider -> provider.getDimensionBindInfo(userId)) .groupBy(DimensionUserBind::getDimensionType) .flatMap(group -> { String type = group.key(); Flux binds = group.cache(); DimensionProvider provider = providerMapping.get(type); if (null == provider) { return Mono.empty(); } //获取维度信息 return binds .map(DimensionUserBind::getDimensionId) .collect(Collectors.toSet()) .flatMapMany(idList -> provider.getDimensionsById(SimpleDimensionType.of(type), idList)) .collectMap(Dimension::getId, Function.identity()) .flatMapMany(mapping -> binds .groupBy(DimensionUserBind::getUserId) .flatMap(userGroup -> Mono .zip( Mono.just(userGroup.key()), userGroup .handle((bind, sink) -> { Dimension dimension = mapping.get(bind.getDimensionId()); if (dimension != null) { sink.next(dimension); } }) .collectList(), DimensionUserDetail::of )) ); }) ) .groupBy(DimensionUserDetail::getUserId) .flatMap(group->group.reduce(DimensionUserDetail::merge)); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/DimensionDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.EqualsAndHashCode; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.authorization.DimensionType; import org.hswebframework.web.authorization.access.DataAccessType; import org.hswebframework.web.authorization.access.DefaultDataAccessType; import org.hswebframework.web.authorization.access.ScopeDataAccessConfig; import org.hswebframework.web.authorization.simple.AbstractDataAccessConfig; import java.util.Set; @Getter @Setter @EqualsAndHashCode(callSuper = true) public class DimensionDataAccessConfig extends AbstractDataAccessConfig implements ScopeDataAccessConfig { private Set scope; private boolean children; /** * @see DimensionType#getId() */ private String scopeType; @Override public DefaultDataAccessType getType() { return DefaultDataAccessType.DIMENSION_SCOPE; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/PlainTextUsernamePasswordAuthenticationRequest.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.AllArgsConstructor; import lombok.Getter; import lombok.NoArgsConstructor; import lombok.Setter; import org.hswebframework.web.authorization.AuthenticationRequest; /** * @author zhouhao * @since 3.0.0-RC */ @Getter @Setter @AllArgsConstructor @NoArgsConstructor public class PlainTextUsernamePasswordAuthenticationRequest implements AuthenticationRequest { private String username; private String password; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleAuthentication.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.hswebframework.web.authorization.simple; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.authorization.*; import java.io.Serial; import java.io.Serializable; import java.util.*; import java.util.concurrent.atomic.AtomicLongFieldUpdater; import java.util.function.BiPredicate; import java.util.function.Function; import java.util.function.Predicate; import java.util.stream.Collectors; public class SimpleAuthentication implements Authentication { static final AtomicLongFieldUpdater ACCESS_COUNT_UPDATER = AtomicLongFieldUpdater.newUpdater(SimpleAuthentication.class, "accessCount"); @Serial private static final long serialVersionUID = -2898863220255336528L; @Getter private User user; @Setter private List permissions = new ArrayList<>(); private List dimensions = new ArrayList<>(); @Setter private Map attributes = new HashMap<>(); public static Authentication of() { return new SimpleAuthentication(); } @Override @SuppressWarnings("unchecked") public Optional getAttribute(String name) { return Optional.ofNullable((T) attributes.get(name)); } public List getDimensions() { return dimensions == null ? Collections.emptyList() : dimensions; } public List getPermissions() { return permissions == null ? Collections.emptyList() : permissions; } @Override public Map getAttributes() { return attributes == null ? Collections.emptyMap() : attributes; } public SimpleAuthentication merge(Authentication authentication) { Map mePermissionGroup = permissions .stream() .collect(Collectors.toMap(Permission::getId, Function.identity())); if (authentication.getUser() != null) { user = authentication.getUser(); } this.attributes = new HashMap<>(getAttributes()); this.attributes.putAll(authentication.getAttributes()); this.permissions = new ArrayList<>(this.getPermissions()); for (Permission permission : authentication.getPermissions()) { Permission me = mePermissionGroup.get(permission.getId()); if (me == null) { permissions.add(permission.copy()); continue; } me.getActions().addAll(permission.getActions()); } this.dimensions = new ArrayList<>(this.getDimensions()); for (Dimension dimension : authentication.getDimensions()) { if (getDimension(dimension.getType(), dimension.getId()).isEmpty()) { dimensions.add(dimension); } } return this; } protected SimpleAuthentication newInstance() { return new SimpleAuthentication(); } @Override public Authentication copy(BiPredicate permissionFilter, Predicate dimension) { SimpleAuthentication authentication = newInstance(); authentication.setDimensions(dimensions .stream() .filter(dimension) .collect(Collectors.toList())); authentication.setPermissions(permissions .stream() .map(permission -> permission.copy(action -> permissionFilter.test(permission, action), conf -> true)) .filter(per -> !per.getActions().isEmpty()) .collect(Collectors.toList()) ); if (user != null) { authentication.setUser0(user); } authentication.setAttributes(new HashMap<>(attributes)); return authentication; } public void setUser(User user) { this.user = user; dimensions.add(user); } protected void setUser0(User user) { this.user = user; } public void setDimensions(List dimensions) { this.dimensions.addAll(dimensions); } public void setDimensions(Collection dimensions) { this.dimensions.addAll(dimensions); } public void addDimension(Dimension dimension) { this.dimensions.add(dimension); } private transient volatile Map> dimensionMapping; private transient volatile Map permissionMapping; private transient volatile long accessCount; protected boolean fastPath() { // 总共访问超过8次,则进行初始化缓存. if (ACCESS_COUNT_UPDATER.incrementAndGet(this) == 8) { if (permissionMapping == null) { permissionMapping = permissions == null ? Collections.emptyMap() : permissions .stream() .collect(Collectors .toMap(Permission::getId, Function.identity(), (a, b) -> b)); dimensionMapping = dimensions == null ? Collections.emptyMap() : dimensions .stream() .collect(Collectors .groupingBy(d -> d.getType().getId(), Collectors.toMap( Dimension::getId, Function.identity(), (a, b) -> a))); } } return permissionMapping != null; } @Override public boolean hasPermission(String permissionId, Collection actions) { Map permissionMapping = this.permissionMapping; if (fastPath() && permissionMapping != null) { Permission permission = permissionMapping.get(permissionId); if (permission == null) { permission = permissionMapping.get("*"); } if (permission == null) { return false; } return actions.isEmpty() || permission.getActions().containsAll(actions) || permission.getActions().contains("*"); } return Authentication.super.hasPermission(permissionId, actions); } @Override public Optional getDimension(String type, String id) { Map> dimensionMapping = this.dimensionMapping; if (fastPath() && dimensionMapping != null) { Map mapping = dimensionMapping.get(type); if (mapping == null) { return Optional.empty(); } return Optional.ofNullable(mapping.get(id)); } return Authentication.super.getDimension(type, id); } @Override public Optional getDimension(DimensionType type, String id) { return getDimension(type.getId(), id); } @Override public List getDimensions(DimensionType type) { return this.getDimensions(type.getId()); } @Override public List getDimensions(String type) { Map> dimensionMapping = this.dimensionMapping; if (fastPath() && dimensionMapping != null) { Map mapping = dimensionMapping.get(type); if (mapping == null) { return List.of(); } return new ArrayList<>(mapping.values()); } return Authentication.super.getDimensions(type); } @Override public Optional getPermission(String id) { Map permissionMapping = this.permissionMapping; if (fastPath() && permissionMapping != null) { return Optional.ofNullable(permissionMapping.get(id)); } return Authentication.super.getPermission(id); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleDimension.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.*; import org.hswebframework.web.authorization.Dimension; import org.hswebframework.web.authorization.DimensionType; import java.util.Map; @Getter @Setter @AllArgsConstructor(staticName = "of") @NoArgsConstructor @EqualsAndHashCode public class SimpleDimension implements Dimension { private String id; private String name; private DimensionType type; private Map options; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleDimensionType.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.*; import org.hswebframework.web.authorization.DimensionType; import java.io.Serializable; @Getter @Setter @AllArgsConstructor(staticName = "of") @NoArgsConstructor @EqualsAndHashCode public class SimpleDimensionType implements DimensionType, Serializable { private static final long serialVersionUID = -6849794470754667710L; private String id; private String name; public static SimpleDimensionType of(String id) { return of(id, id); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleFieldFilterDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.simple; import org.hswebframework.web.authorization.access.DataAccessType; import org.hswebframework.web.authorization.access.DefaultDataAccessType; import org.hswebframework.web.authorization.access.FieldFilterDataAccessConfig; import java.util.Arrays; import java.util.HashSet; import java.util.Set; import static org.hswebframework.web.authorization.access.DataAccessConfig.DefaultType.DENY_FIELDS; /** * 默认配置实现 * * @author zhouhao * @see FieldFilterDataAccessConfig * @since 3.0 */ public class SimpleFieldFilterDataAccessConfig extends AbstractDataAccessConfig implements FieldFilterDataAccessConfig { private static final long serialVersionUID = 8080660575093151866L; private Set fields; public SimpleFieldFilterDataAccessConfig() { } public SimpleFieldFilterDataAccessConfig(String... fields) { this.fields = new HashSet<>(Arrays.asList(fields)); } @Override public Set getFields() { return fields; } public void setFields(Set fields) { this.fields = fields; } @Override public DataAccessType getType() { return DefaultDataAccessType.FIELD_DENY; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleOwnCreatedDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.simple; import org.hswebframework.web.authorization.access.OwnCreatedDataAccessConfig; /** * @author zhouhao * @since 3.0 */ public class SimpleOwnCreatedDataAccessConfig extends AbstractDataAccessConfig implements OwnCreatedDataAccessConfig { private static final long serialVersionUID = -6059330812806119730L; public SimpleOwnCreatedDataAccessConfig() { } public SimpleOwnCreatedDataAccessConfig(String action) { setAction(action); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimplePermission.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.*; import org.apache.commons.collections4.CollectionUtils; import org.hswebframework.web.authorization.Permission; import org.hswebframework.web.authorization.access.DataAccessConfig; import java.util.*; import java.util.function.Predicate; import java.util.stream.Collectors; /** * @author zhouhao */ @Getter @Setter @Builder @NoArgsConstructor @AllArgsConstructor @EqualsAndHashCode(exclude = "dataAccesses") public class SimplePermission implements Permission { private static final long serialVersionUID = 7587266693680162184L; private String id; private String name; private Set actions; private Set dataAccesses; private Map options; public Set getActions() { if (actions == null) { actions = new java.util.HashSet<>(); } return actions; } public Set getDataAccesses() { if (dataAccesses == null) { dataAccesses = new java.util.HashSet<>(); } return dataAccesses; } @Override public Permission copy(Predicate actionFilter, Predicate dataAccessFilter) { SimplePermission permission = new SimplePermission(); permission.setId(id); permission.setName(name); permission.setActions(getActions().stream().filter(actionFilter).collect(Collectors.toSet())); permission.setDataAccesses(getDataAccesses().stream().filter(dataAccessFilter).collect(Collectors.toSet())); if (options != null) { permission.setOptions(new HashMap<>(options)); } return permission; } public Permission copy() { return copy(action -> true, conf -> true); } @Override public String toString() { return id + (CollectionUtils.isNotEmpty(actions) ? ":" + String.join(",", actions) : ""); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleRole.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.*; import org.hswebframework.web.authorization.Dimension; import org.hswebframework.web.authorization.Role; import java.io.Serializable; import java.util.Map; /** * @author zhouhao */ @Getter @Setter @Builder @NoArgsConstructor @AllArgsConstructor @EqualsAndHashCode public class SimpleRole implements Role { private static final long serialVersionUID = 7460859165231311347L; private String id; private String name; private Map options; public static Role of(Dimension dimension) { return SimpleRole.builder() .name(dimension.getName()) .id(dimension.getId()) .options(dimension.getOptions()) .build(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleUser.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.*; import org.hswebframework.web.authorization.User; import java.io.Serial; import java.io.Serializable; import java.util.Map; /** * @author zhouhao */ @Getter @Setter @NoArgsConstructor @AllArgsConstructor @Builder @EqualsAndHashCode public class SimpleUser implements User { @Serial private static final long serialVersionUID = 2194541828191869091L; private String id; private String username; private String name; private String userType; private Map options; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/builder/DataAccessConfigConverter.java ================================================ package org.hswebframework.web.authorization.simple.builder; import org.hswebframework.web.authorization.access.DataAccessConfig; /** * @author zhouhao */ public interface DataAccessConfigConverter { boolean isSupport(String type, String action, String config); DataAccessConfig convert(String type, String action, String config); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/builder/SimpleAuthenticationBuilder.java ================================================ package org.hswebframework.web.authorization.simple.builder; import com.alibaba.fastjson.JSON; import com.alibaba.fastjson.JSONArray; import com.alibaba.fastjson.JSONObject; import com.google.common.collect.Maps; import org.hswebframework.web.authorization.*; import org.hswebframework.web.authorization.builder.AuthenticationBuilder; import org.hswebframework.web.authorization.builder.DataAccessConfigBuilderFactory; import org.hswebframework.web.authorization.simple.*; import java.io.Serializable; import java.util.*; import java.util.stream.Collectors; /** * @author zhouhao */ public class SimpleAuthenticationBuilder implements AuthenticationBuilder { private SimpleAuthentication authentication = new SimpleAuthentication(); private DataAccessConfigBuilderFactory dataBuilderFactory; public SimpleAuthenticationBuilder(DataAccessConfigBuilderFactory dataBuilderFactory) { this.dataBuilderFactory = dataBuilderFactory; } public void setDataBuilderFactory(DataAccessConfigBuilderFactory dataBuilderFactory) { this.dataBuilderFactory = dataBuilderFactory; } @Override public AuthenticationBuilder user(User user) { Objects.requireNonNull(user); authentication.setUser(user); return this; } @Override public AuthenticationBuilder user(String user) { return user(JSON.parseObject(user, SimpleUser.class)); } @Override public AuthenticationBuilder user(Map user) { Objects.requireNonNull(user.get("id")); user(SimpleUser.builder() .id(user.get("id")) .username(user.get("username")) .name(user.get("name")) .userType(user.get("type")) .build()); return this; } @Override public AuthenticationBuilder role(List role) { authentication.getDimensions().addAll(role); return this; } @Override @SuppressWarnings("unchecked") public AuthenticationBuilder role(String role) { return role((List) JSON.parseArray(role, SimpleRole.class)); } @Override public AuthenticationBuilder permission(List permission) { authentication.setPermissions(permission); return this; } public AuthenticationBuilder permission(JSONArray jsonArray) { List permissions = new ArrayList<>(); for (int i = 0; i < jsonArray.size(); i++) { JSONObject jsonObject = jsonArray.getJSONObject(i); SimplePermission permission = new SimplePermission(); permission.setId(jsonObject.getString("id")); permission.setName(jsonObject.getString("name")); permission.setOptions(jsonObject.getJSONObject("options")); JSONArray actions = jsonObject.getJSONArray("actions"); if (actions != null) { permission.setActions(new HashSet<>(actions.toJavaList(String.class))); } JSONArray dataAccess = jsonObject.getJSONArray("dataAccesses"); if (null != dataAccess) { permission.setDataAccesses(dataAccess.stream().map(JSONObject.class::cast) .map(dataJson -> dataBuilderFactory .create() .fromJson(dataJson.toJSONString()) .build()) .filter(Objects::nonNull) .collect(Collectors.toSet())); } permissions.add(permission); } authentication.setPermissions(permissions); return this; } @Override public AuthenticationBuilder permission(String permissionJson) { return permission(JSON.parseArray(permissionJson)); } @Override public AuthenticationBuilder attributes(String attributes) { authentication.getAttributes().putAll(JSON.>parseObject(attributes, Map.class)); return this; } @Override public AuthenticationBuilder attributes(Map permission) { authentication.getAttributes().putAll(permission); return this; } public AuthenticationBuilder dimension(JSONArray json) { if (json == null) { return this; } List dimensions = new ArrayList<>(); for (int i = 0; i < json.size(); i++) { JSONObject jsonObject = json.getJSONObject(i); Object type = jsonObject.get("type"); Map
{@code * @RequestMapping("/example") * public Mono example(){ * return ReactiveAuthenticationHolder.get(); * } * } *
* 此注解仅用于声明此方法需要进行数据级权限控制,具体权限控制方式由控制器实{@link DataAccessController}现 *
{@code * @RequiresRoles("admin") * public Mono handleRequest(){ * * } * }
{@code * @RestController * //声明资源 * @Resource(id = "test", name = "测试功能") * public class TestController implements ReactiveCrudController { * * //声明操作,需要有 test:query 权限才能访问此接口 * @QueryAction * public Mono getUser() { * return Authentication.currentReactive() * .switchIfEmpty(Mono.error(new UnAuthorizedException())) * .map(Authentication::getUser); * } * * } * } *
{@code * @EventListener * public void handleAuthEvent(AuthorizingHandleBeforeEvent e) { * //admin用户可以访问全部操作 * if ("admin".equals(e.getContext().getAuthentication().getUser().getUsername())) { * e.setAllow(true); * } * } * }
* 在Controller方法上添加此注解,来声明根据权限操作{@link Permission#getActions()}进行权限控制. *
* 可以使用注解继承的方式来统一定义操作: *
{@code * @Target(ElementType.METHOD) * @Retention(RetentionPolicy.RUNTIME) * @Inherited * @Documented * @ResourceAction(id = "create", name = "新增") * public @interface CreateAction { * * } * } *
* 可通过配置项: hsweb.authorize.two-factor.default-provider 来修改默认配置 * * @return provider * @see TwoFactorValidator#getProvider() */ String provider() default "default"; /** * 验证码的http参数名,在进行验证的时候需要传入此参数 * * @return 验证码的参数名 */ String parameter() default "verifyCode"; /** * @return 关闭验证 */ boolean ignore() default false; /** * * @return 错误提示 * @since 3.0.6 */ String message() default "validation.verify_code_error"; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/annotation/UserOwnData.java ================================================ package org.hswebframework.web.authorization.annotation; import java.lang.annotation.*; /** * 声明某个操作支持用户查看自己的数据 * * @deprecated 已弃用 */ @Target({ElementType.ANNOTATION_TYPE, ElementType.METHOD}) @Retention(RetentionPolicy.RUNTIME) @Inherited @Documented @DataAccessType(id = "user_own_data", name = "用户自己的数据") @Deprecated public @interface UserOwnData { } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/builder/AuthenticationBuilder.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.hswebframework.web.authorization.builder; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.authorization.Permission; import org.hswebframework.web.authorization.Role; import org.hswebframework.web.authorization.User; import java.io.Serializable; import java.util.List; import java.util.Map; public interface AuthenticationBuilder extends Serializable { AuthenticationBuilder user(User user); AuthenticationBuilder user(String user); AuthenticationBuilder user(Map user); AuthenticationBuilder role(List role); AuthenticationBuilder role(String role); AuthenticationBuilder permission(List permission); AuthenticationBuilder permission(String permission); AuthenticationBuilder attributes(String attributes); AuthenticationBuilder attributes(Map permission); AuthenticationBuilder json(String json); Authentication build(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/builder/AuthenticationBuilderFactory.java ================================================ package org.hswebframework.web.authorization.builder; /** * 权限构造器工厂 * * @author zhouhao */ public interface AuthenticationBuilderFactory { /** * @return 新建一个权限构造器 */ AuthenticationBuilder create(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/builder/DataAccessConfigBuilder.java ================================================ package org.hswebframework.web.authorization.builder; import org.hswebframework.web.authorization.access.DataAccessConfig; import java.util.Map; /** * * @author zhouhao */ public interface DataAccessConfigBuilder { DataAccessConfigBuilder fromJson(String json); DataAccessConfigBuilder fromMap(Map json); DataAccessConfig build(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/builder/DataAccessConfigBuilderFactory.java ================================================ package org.hswebframework.web.authorization.builder; /** * 数据权限配置构造器工厂 * * @author zhouhao */ public interface DataAccessConfigBuilderFactory { /** * @return 新建一个数据权限配置构造器工厂 */ DataAccessConfigBuilder create(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/context/AuthenticationThreadLocalAccessor.java ================================================ package org.hswebframework.web.authorization.context; import io.micrometer.context.ThreadLocalAccessor; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.authorization.AuthenticationHolder; import org.hswebframework.web.authorization.ReactiveAuthenticationHolder; import javax.annotation.Nonnull; public class AuthenticationThreadLocalAccessor implements ThreadLocalAccessor { static final Object KEY = Authentication.class; static { ReactiveAuthenticationHolder.addSupplier( new ThreadLocalReactiveAuthenticationSupplier() ); } @Override @Nonnull public Object key() { return KEY; } @Override public Authentication getValue() { return AuthenticationHolder.get().orElse(null); } @Override public void setValue() { AuthenticationHolder.resetCurrent(); } @Override public void setValue(@Nonnull Authentication value) { AuthenticationHolder.makeCurrent(value); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/context/ThreadLocalReactiveAuthenticationSupplier.java ================================================ package org.hswebframework.web.authorization.context; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.authorization.AuthenticationHolder; import org.hswebframework.web.authorization.ReactiveAuthenticationSupplier; import reactor.core.publisher.Mono; class ThreadLocalReactiveAuthenticationSupplier implements ReactiveAuthenticationSupplier { @Override public Mono get(String userId) { return Mono.empty(); } @Override public Mono get() { return Mono.justOrEmpty(AuthenticationHolder.get()); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AopAuthorizeDefinition.java ================================================ package org.hswebframework.web.authorization.define; import java.lang.reflect.Method; /** * @author zhouhao * @since 1.0 */ public interface AopAuthorizeDefinition extends AuthorizeDefinition { Class getTargetClass(); Method getTargetMethod(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AuthorizeDefinition.java ================================================ package org.hswebframework.web.authorization.define; import java.util.StringJoiner; /** * 权限控制定义,定义权限控制的方式 * * @author zhouhao * @since 3.0 */ public interface AuthorizeDefinition { ResourcesDefinition getResources(); DimensionsDefinition getDimensions(); String getMessage(); Phased getPhased(); boolean isEmpty(); default boolean allowAnonymous() { return false; } default String getDescription() { ResourcesDefinition res = getResources(); StringJoiner joiner = new StringJoiner(";"); for (ResourceDefinition resource : res.getResources()) { joiner.add(resource.getId() + ":" + String.join(",", resource.getActionIds())); } return joiner.toString(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AuthorizeDefinitionContext.java ================================================ package org.hswebframework.web.authorization.define; public interface AuthorizeDefinitionContext { void addResource(ResourceDefinition def); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AuthorizeDefinitionCustomizer.java ================================================ package org.hswebframework.web.authorization.define; public interface AuthorizeDefinitionCustomizer { void custom(AuthorizeDefinitionContext context); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AuthorizeDefinitionInitializedEvent.java ================================================ package org.hswebframework.web.authorization.define; import org.hswebframework.web.authorization.events.AuthorizationEvent; import org.springframework.context.ApplicationEvent; import java.util.List; public class AuthorizeDefinitionInitializedEvent extends ApplicationEvent implements AuthorizationEvent { private static final long serialVersionUID = -8185138454949381441L; public AuthorizeDefinitionInitializedEvent(List all) { super(all); } @SuppressWarnings("unchecked") public List getAllDefinition() { return ((List) getSource()); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/AuthorizingContext.java ================================================ package org.hswebframework.web.authorization.define; import lombok.AllArgsConstructor; import lombok.Getter; import lombok.NoArgsConstructor; import lombok.Setter; import org.hswebframework.web.aop.MethodInterceptorContext; import org.hswebframework.web.authorization.Authentication; /** * 权限控制上下文 */ @Getter @Setter @NoArgsConstructor @AllArgsConstructor public class AuthorizingContext { private AuthorizeDefinition definition; private Authentication authentication; private MethodInterceptorContext paramContext; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/CompositeAuthorizeDefinitionCustomizer.java ================================================ package org.hswebframework.web.authorization.define; import lombok.AllArgsConstructor; import java.util.List; import java.util.stream.Collectors; import java.util.stream.StreamSupport; @AllArgsConstructor public class CompositeAuthorizeDefinitionCustomizer implements AuthorizeDefinitionCustomizer{ private final List customizers; public CompositeAuthorizeDefinitionCustomizer(Iterable customizers){ this(StreamSupport.stream(customizers.spliterator(),false).collect(Collectors.toList())); } @Override public void custom(AuthorizeDefinitionContext context) { for (AuthorizeDefinitionCustomizer customizer : customizers) { customizer.custom(context); } } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/DataAccessDefinition.java ================================================ package org.hswebframework.web.authorization.define; import lombok.Getter; import lombok.Setter; import java.util.*; @Getter @Setter public class DataAccessDefinition { Set dataAccessTypes = new HashSet<>(); public Optional getType(String typeId) { return dataAccessTypes .stream() .filter(type -> type.getId() != null && type.getId().equalsIgnoreCase(typeId)) .findAny(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/DataAccessTypeDefinition.java ================================================ package org.hswebframework.web.authorization.define; import lombok.EqualsAndHashCode; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.authorization.access.DataAccessController; import org.hswebframework.web.authorization.access.DataAccessType; import org.hswebframework.web.authorization.access.DataAccessConfiguration; import org.hswebframework.web.bean.FastBeanCopier; @Getter @Setter @EqualsAndHashCode(of = "id") public class DataAccessTypeDefinition implements DataAccessType { private String id; private String name; private String description; private Class controller; private Class configuration; public DataAccessTypeDefinition copy(){ return FastBeanCopier.copy(this,DataAccessTypeDefinition::new); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/DimensionDefinition.java ================================================ package org.hswebframework.web.authorization.define; import lombok.EqualsAndHashCode; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.authorization.DimensionType; import org.hswebframework.web.authorization.annotation.Logical; import org.hswebframework.web.bean.FastBeanCopier; import reactor.function.Predicate3; import java.util.Collection; import java.util.Collections; import java.util.HashSet; import java.util.Set; import java.util.function.BiPredicate; import java.util.function.Predicate; @Getter @Setter @EqualsAndHashCode(of = "typeId") public class DimensionDefinition { private String typeId; private String typeName; private Set dimensionId = new HashSet<>(); private Logical logical = Logical.DEFAULT; public boolean hasDimension(Predicate3> filter) { return filter.test(typeId,logical, Collections.unmodifiableSet(dimensionId)); } public boolean hasDimension(Set dimensionIdPredicate) { if (logical == Logical.AND) { return dimensionIdPredicate.containsAll(dimensionId); } return dimensionId .stream() .anyMatch(dimensionIdPredicate::contains); } public boolean hasDimension(String id) { return dimensionId.contains(id); } public void addDimensionI(Set id) { dimensionId.addAll(id); } public DimensionDefinition copy() { return FastBeanCopier.copy(this, DimensionDefinition::new); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/DimensionsDefinition.java ================================================ package org.hswebframework.web.authorization.define; import lombok.Getter; import lombok.Setter; import org.apache.commons.collections4.CollectionUtils; import org.apache.commons.collections4.MapUtils; import org.apache.commons.collections4.Predicate; import org.hswebframework.web.authorization.Dimension; import org.hswebframework.web.authorization.annotation.Logical; import reactor.function.Predicate3; import java.util.*; import java.util.concurrent.ConcurrentHashMap; import java.util.function.BiPredicate; import java.util.stream.Collectors; @Getter @Setter public class DimensionsDefinition { private Map dimensionsMapping = new ConcurrentHashMap<>(); private Logical logical = Logical.DEFAULT; private String description; public Set getDimensions() { return new HashSet<>(dimensionsMapping.values()); } public void clear() { dimensionsMapping.clear(); } public void addDimension(DimensionDefinition definition) { DimensionDefinition old = dimensionsMapping.putIfAbsent(definition.getTypeId(), definition); if (old != null) { old.addDimensionI(definition.getDimensionId()); } } public boolean isEmpty() { return MapUtils.isEmpty(this.dimensionsMapping); } public boolean hasDimension(Dimension dimension) { DimensionDefinition def = dimensionsMapping.get(dimension.getType().getId()); return def != null && def.hasDimension(dimension.getId()); } public boolean hasDimension(Predicate3> filter) { if (logical == Logical.AND) { return dimensionsMapping .values() .stream() .allMatch(e -> e.hasDimension(filter)); } else { return dimensionsMapping .values() .stream() .anyMatch(e -> e.hasDimension(filter)); } } public boolean hasDimension(List dimensions) { if (logical == Logical.AND) { return dimensions.stream().allMatch(this::hasDimension); } return dimensions.stream().anyMatch(this::hasDimension); } @Override public String toString() { return dimensionsMapping .values() .stream() .map(d -> String.join(",", d.getDimensionId()) + "@" + d.getTypeId()) .collect(Collectors.joining(";")); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/HandleType.java ================================================ package org.hswebframework.web.authorization.define; public enum HandleType{ RBAC,DATA } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/MergedAuthorizeDefinition.java ================================================ package org.hswebframework.web.authorization.define; import java.util.List; import java.util.Set; public class MergedAuthorizeDefinition implements AuthorizeDefinitionContext { private final ResourcesDefinition resources = new ResourcesDefinition(); private final DimensionsDefinition dimensions = new DimensionsDefinition(); public Set getResources() { return resources.getResources(); } public Set getDimensions() { return dimensions.getDimensions(); } public void addResource(ResourceDefinition resource) { resources.addResource(resource, true); } public void addDimension(DimensionDefinition resource) { dimensions.addDimension(resource); } public void merge(List definitions) { for (AuthorizeDefinition definition : definitions) { definition.getResources().getResources().forEach(this::addResource); definition.getDimensions().getDimensions().forEach(this::addDimension); } } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/Phased.java ================================================ package org.hswebframework.web.authorization.define; public enum Phased { before, after } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/ResourceActionDefinition.java ================================================ package org.hswebframework.web.authorization.define; import lombok.EqualsAndHashCode; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.bean.FastBeanCopier; import org.hswebframework.web.i18n.I18nSupportUtils; import org.hswebframework.web.i18n.MultipleI18nSupportEntity; import java.util.Collection; import java.util.HashMap; import java.util.Locale; import java.util.Map; import static org.hswebframework.web.authorization.define.ResourceDefinition.supportLocale; @Getter @Setter @EqualsAndHashCode(of = "id") public class ResourceActionDefinition implements MultipleI18nSupportEntity { private String id; private String name; private String description; private Map> i18nMessages; @Deprecated private DataAccessDefinition dataAccess = new DataAccessDefinition(); private final static String resolveActionPrefix = "hswebframework.web.system.action."; public ResourceActionDefinition copy() { return FastBeanCopier.copy(this, ResourceActionDefinition::new); } public Map> getI18nMessages() { if (org.springframework.util.CollectionUtils.isEmpty(i18nMessages)) { this.i18nMessages = I18nSupportUtils .putI18nMessages( resolveActionPrefix + this.id, "name", supportLocale, null, this.i18nMessages ); } return i18nMessages; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/ResourceDefinition.java ================================================ package org.hswebframework.web.authorization.define; import com.fasterxml.jackson.annotation.JsonIgnore; import lombok.AccessLevel; import lombok.EqualsAndHashCode; import lombok.Getter; import lombok.Setter; import org.apache.commons.collections4.CollectionUtils; import org.hswebframework.web.authorization.annotation.Logical; import org.hswebframework.web.bean.FastBeanCopier; import org.hswebframework.web.i18n.I18nSupportUtils; import org.hswebframework.web.i18n.MultipleI18nSupportEntity; import java.util.*; import java.util.stream.Collectors; @Getter @Setter @EqualsAndHashCode(of = "id") public class ResourceDefinition implements MultipleI18nSupportEntity { private String id; private String name; private String description; private Set actions = new HashSet<>(); private List group; private Map> i18nMessages; @Setter(value = AccessLevel.PRIVATE) @JsonIgnore private volatile Set actionIds; private Logical logical = Logical.DEFAULT; private Phased phased = Phased.before; public final static List supportLocale = new ArrayList<>(); static { supportLocale.add(Locale.CHINESE); supportLocale.add(Locale.ENGLISH); } private final static String resolvePermissionPrefix = "hswebframework.web.system.permission."; public static ResourceDefinition of(String id, String name) { ResourceDefinition definition = new ResourceDefinition(); definition.setId(id); definition.setName(name); return definition; } public Map> getI18nMessages() { if (org.springframework.util.CollectionUtils.isEmpty(i18nMessages)) { this.i18nMessages = I18nSupportUtils .putI18nMessages( resolvePermissionPrefix + this.id, "name", supportLocale, null, this.i18nMessages ); } return i18nMessages; } public ResourceDefinition copy() { ResourceDefinition definition = FastBeanCopier.copy(this, ResourceDefinition::new); definition.setActions(actions.stream().map(ResourceActionDefinition::copy).collect(Collectors.toSet())); return definition; } public ResourceDefinition addAction(String id, String name) { ResourceActionDefinition action = new ResourceActionDefinition(); action.setId(id); action.setName(name); return addAction(action); } public synchronized ResourceDefinition addAction(ResourceActionDefinition action) { actionIds = null; actions.add(action); return this; } public Optional getAction(String action) { return actions.stream() .filter(act -> act.getId().equalsIgnoreCase(action)) .findAny(); } public Set getActionIds() { if (actionIds == null) { actionIds = this.actions .stream() .map(ResourceActionDefinition::getId) .collect(Collectors.toSet()); } return actionIds; } @JsonIgnore public List getDataAccessAction() { return actions.stream() .filter(act -> CollectionUtils.isNotEmpty(act.getDataAccess().getDataAccessTypes())) .collect(Collectors.toList()); } public boolean hasDataAccessAction() { return actions.stream() .anyMatch(act -> CollectionUtils.isNotEmpty(act.getDataAccess().getDataAccessTypes())); } public boolean hasAction(Collection actions) { if (CollectionUtils.isEmpty(this.actions)) { return true; } if (CollectionUtils.isEmpty(actions)) { return false; } if (logical == Logical.AND) { return getActionIds().containsAll(actions); } return getActionIds().stream().anyMatch(actions::contains); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/define/ResourcesDefinition.java ================================================ package org.hswebframework.web.authorization.define; import com.fasterxml.jackson.annotation.JsonIgnore; import lombok.Getter; import lombok.Setter; import org.apache.commons.collections4.CollectionUtils; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.authorization.Permission; import org.hswebframework.web.authorization.annotation.Logical; import java.util.*; import java.util.concurrent.ConcurrentHashMap; import java.util.stream.Collectors; @Getter @Setter public class ResourcesDefinition { private final Set resources = ConcurrentHashMap.newKeySet(); private Logical logical = Logical.DEFAULT; private Phased phased = Phased.before; public void clear() { resources.clear(); } public void addResource(ResourceDefinition resource, boolean merge) { ResourceDefinition definition = getResource(resource.getId()).orElse(null); if (definition != null) { if (merge) { resource.getActions() .stream() .map(ResourceActionDefinition::copy) .forEach(definition::addAction); } else { resources.remove(definition); } } resources.add(resource.copy()); } public Optional getResource(String id) { return resources .stream() .filter(resource -> resource.getId().equals(id)) .findAny(); } @JsonIgnore public List getDataAccessResources() { return resources .stream() .filter(ResourceDefinition::hasDataAccessAction) .collect(Collectors.toList()); } public boolean hasPermission(Permission permission) { if (CollectionUtils.isEmpty(resources)) { return true; } return getResource(permission.getId()) .filter(resource -> resource.hasAction(permission.getActions())) .isPresent(); } public boolean isEmpty() { return resources.isEmpty(); } public boolean hasPermission(Authentication authentication) { int size = resources.size(); if (size == 0) { return true; } if (size == 1) { for (ResourceDefinition resource : resources) { if (authentication.hasPermission(resource.getId(), resource.getActionIds())) { return true; } } return false; } if (logical == Logical.AND) { return resources .stream() .allMatch(resource -> authentication.hasPermission(resource.getId(), resource.getActionIds())); } return resources .stream() .anyMatch(resource -> authentication.hasPermission(resource.getId(), resource.getActionIds())); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/dimension/DimensionManager.java ================================================ package org.hswebframework.web.authorization.dimension; import reactor.core.publisher.Flux; import java.util.Collection; /** * 维度管理器 * * @author zhouhao * @since 4.0.12 */ public interface DimensionManager { /** * 获取用户维度 * * @param userId 用户ID * @return 用户维度信息 */ Flux getUserDimension(Collection userId); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/dimension/DimensionUserBind.java ================================================ package org.hswebframework.web.authorization.dimension; import lombok.AllArgsConstructor; import lombok.Getter; import lombok.NoArgsConstructor; import lombok.Setter; import java.io.Externalizable; import java.io.IOException; import java.io.ObjectInput; import java.io.ObjectOutput; @Getter @Setter @AllArgsConstructor(staticName = "of") @NoArgsConstructor public class DimensionUserBind implements Externalizable { private static final long serialVersionUID = -6849794470754667710L; private String userId; private String dimensionType; private String dimensionId; @Override public void writeExternal(ObjectOutput out) throws IOException { out.writeUTF(userId); out.writeUTF(dimensionType); out.writeUTF(dimensionId); } @Override public void readExternal(ObjectInput in) throws IOException, ClassNotFoundException { userId = in.readUTF(); dimensionType = in.readUTF(); dimensionId = in.readUTF(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/dimension/DimensionUserBindProvider.java ================================================ package org.hswebframework.web.authorization.dimension; import reactor.core.publisher.Flux; import java.util.Collection; public interface DimensionUserBindProvider { Flux getDimensionBindInfo(Collection userIdList); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/dimension/DimensionUserDetail.java ================================================ package org.hswebframework.web.authorization.dimension; import lombok.AllArgsConstructor; import lombok.Getter; import lombok.NoArgsConstructor; import lombok.Setter; import org.hswebframework.web.authorization.Dimension; import java.io.Serializable; import java.util.ArrayList; import java.util.List; @Getter @Setter @AllArgsConstructor(staticName = "of") @NoArgsConstructor public class DimensionUserDetail implements Serializable { private static final long serialVersionUID = -6849794470754667710L; private String userId; private List dimensions; public DimensionUserDetail merge(DimensionUserDetail detail) { DimensionUserDetail newDetail = new DimensionUserDetail(); newDetail.setUserId(userId); newDetail.setDimensions(new ArrayList<>()); if (null != dimensions) { newDetail.dimensions.addAll(dimensions); } if (null != detail.getDimensions()) { newDetail.dimensions.addAll(detail.getDimensions()); } return newDetail; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AbstractAuthorizationEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import org.hswebframework.web.event.DefaultAsyncEvent; import java.util.Optional; import java.util.function.Function; /** * 抽象授权事件,保存事件常用的数据 * * @author zhouhao * @since 3.0 */ public abstract class AbstractAuthorizationEvent extends DefaultAsyncEvent implements AuthorizationEvent { private static final long serialVersionUID = -3027505108916079214L; protected String username; protected String password; private final transient Function parameterGetter; /** * 所有参数不能为null * * @param username 用户名 * @param password 密码 * @param parameterGetter 参数获取函数,用户获取授权时传入的参数 */ public AbstractAuthorizationEvent(String username, String password, Function parameterGetter) { if (username == null || password == null || parameterGetter == null) { throw new NullPointerException(); } this.username = username; this.password = password; this.parameterGetter = parameterGetter; } @SuppressWarnings("unchecked") public Optional getParameter(String name) { return Optional.ofNullable((T) parameterGetter.apply(name)); } public String getUsername() { return username; } public String getPassword() { return password; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationBeforeEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import lombok.Getter; import org.hswebframework.web.authorization.Authentication; import java.util.function.Function; /** * 授权前事件 * * @author zhouhao * @since 3.0 */ @Getter public class AuthorizationBeforeEvent extends AbstractAuthorizationEvent { private static final long serialVersionUID = 5948747533500518524L; private String userId; private Authentication authentication; public AuthorizationBeforeEvent(String username, String password, Function parameterGetter) { super(username, password, parameterGetter); } public void setAuthorized(String userId) { this.userId = userId; } public void setAuthorized(Authentication authentication) { this.authentication = authentication; } public boolean isAuthorized() { return userId != null || authentication != null; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationDecodeEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import java.util.function.Function; /** * 在进行授权时的最开始,触发此事件进行用户名密码解码,解码后请调用{@link #setUsername(String)} {@link #setPassword(String)}重新设置用户名密码 * * @author zhouhao * @since 3.0 */ public class AuthorizationDecodeEvent extends AbstractAuthorizationEvent { private static final long serialVersionUID = 5418501934490174251L; public AuthorizationDecodeEvent(String username, String password, Function parameterGetter) { super(username, password, parameterGetter); } public void setUsername(String username) { super.username = username; } public void setPassword(String password) { super.password = password; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; /** * 授权事件 * * @author zhouhao * @see AuthorizationSuccessEvent * @see AuthorizationFailedEvent * @see AuthorizationBeforeEvent * @see AuthorizationDecodeEvent * @see AuthorizationExitEvent * @see org.springframework.context.ApplicationEvent * @since 3.0 */ public interface AuthorizationEvent { } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationExitEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.event.DefaultAsyncEvent; import org.springframework.context.ApplicationEvent; /** * 退出登录事件 * * @author zhouhao */ public class AuthorizationExitEvent extends DefaultAsyncEvent implements AuthorizationEvent { private static final long serialVersionUID = -4590245933665047280L; private final Authentication authentication; public AuthorizationExitEvent(Authentication authentication) { this.authentication = authentication; } public Authentication getAuthentication() { return authentication; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationFailedEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import java.util.function.Function; /** * 授权失败时触发 * * @author zhouhao */ public class AuthorizationFailedEvent extends AbstractAuthorizationEvent { private static final long serialVersionUID = -101792832265740828L; /** * 异常信息 */ private Throwable exception; public AuthorizationFailedEvent(String username, String password, Function parameterGetter) { super(username, password, parameterGetter); } public Throwable getException() { return exception; } public void setException(Throwable exception) { this.exception = exception; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationInitializeEvent.java ================================================ package org.hswebframework.web.authorization.events; import lombok.AllArgsConstructor; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.event.DefaultAsyncEvent; @Getter @Setter @AllArgsConstructor public class AuthorizationInitializeEvent extends DefaultAsyncEvent { private Authentication authentication; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizationSuccessEvent.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * */ package org.hswebframework.web.authorization.events; import org.hswebframework.web.authorization.Authentication; import org.hswebframework.web.event.DefaultAsyncEvent; import java.util.HashMap; import java.util.Map; import java.util.Optional; import java.util.function.Function; /** * 授权成功事件,当授权成功时,触发此事件,并传入授权的信息 * * @author zhouhao * @see Authentication * @since 3.0 */ public class AuthorizationSuccessEvent extends DefaultAsyncEvent implements AuthorizationEvent { private static final long serialVersionUID = -2452116314154155058L; private final Authentication authentication; private final transient Function parameterGetter; private Map result = new HashMap<>(); public AuthorizationSuccessEvent(Authentication authentication, Function parameterGetter) { this.authentication = authentication; this.parameterGetter = parameterGetter; } public Authentication getAuthentication() { return authentication; } @SuppressWarnings("unchecked") public Optional getParameter(String name) { return Optional.ofNullable((T) parameterGetter.apply(name)); } public Map getResult() { return result; } public void setResult(Map result) { this.result = result; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/events/AuthorizingHandleBeforeEvent.java ================================================ package org.hswebframework.web.authorization.events; import org.hswebframework.web.authorization.define.AuthorizingContext; import org.hswebframework.web.authorization.define.HandleType; import org.hswebframework.web.event.DefaultAsyncEvent; import org.springframework.context.ApplicationEvent; /** * 权限控制事件,在进行权限控制之前会推送此事件，用于自定义权限控制结果: * {@code * @EventListener * public void handleAuthEvent(AuthorizingHandleBeforeEvent e) { * //admin用户可以访问全部操作 * if ("admin".equals(e.getContext().getAuthentication().getUser().getUsername())) { * e.setAllow(true); * } * } * } * * @author zhouhao * @since 4.0 */ public class AuthorizingHandleBeforeEvent extends DefaultAsyncEvent implements AuthorizationEvent { private boolean allow = false; private boolean execute = true; private String message; private final AuthorizingContext context; /** * @deprecated 数据权限控制已取消,4.1版本后移除 */ @Deprecated private final HandleType handleType; public AuthorizingHandleBeforeEvent(AuthorizingContext context, HandleType handleType) { this.context = context; this.handleType = handleType; } public AuthorizingContext getContext() { return context; } public boolean isExecute() { return execute; } public boolean isAllow() { return allow; } /** * 设置通过当前请求 * * @param allow allow */ public void setAllow(boolean allow) { execute = false; this.allow = allow; } public String getMessage() { return message; } /** * 设置错误提示消息 * * @param message 消息 */ public void setMessage(String message) { this.message = message; } /** * @return 权限控制类型 */ public HandleType getHandleType() { return handleType; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/exception/AccessDenyException.java ================================================ package org.hswebframework.web.authorization.exception; import lombok.Getter; import org.hswebframework.web.exception.I18nSupportException; import org.springframework.http.HttpStatus; import org.springframework.web.bind.annotation.ResponseStatus; import java.util.Set; /** * 权限验证异常 * * @author zhouhao * @since 3.0 */ @ResponseStatus(HttpStatus.FORBIDDEN) @Getter public class AccessDenyException extends I18nSupportException { private static final long serialVersionUID = -5135300127303801430L; private String code; public AccessDenyException() { this("error.access_denied"); } public AccessDenyException(String message) { super(message); } public AccessDenyException(String permission, Set actions) { super("error.permission_denied", permission, actions); } public AccessDenyException(String message, String code) { this(message, code, null); } public AccessDenyException(String message, Throwable cause) { this(message, "access_denied", cause); } public AccessDenyException(String message, String code, Throwable cause) { super(message, cause, code); this.code = code; } /** * 不填充线程栈的异常，在一些对线程栈不敏感，且对异常不可控（如: 来自未认证请求产生的异常）的情况下不填充线程栈对性能有利。 */ public static class NoStackTrace extends AccessDenyException { public NoStackTrace() { super(); } public NoStackTrace(String message) { super(message); } public NoStackTrace(String permission, Set actions) { super(permission, actions); } public NoStackTrace(String message, String code) { super(message, code); } public NoStackTrace(String message, Throwable cause) { super(message, cause); } public NoStackTrace(String message, String code, Throwable cause) { super(message, code, cause); } @Override public final synchronized Throwable fillInStackTrace() { return this; } } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/exception/AuthenticationException.java ================================================ package org.hswebframework.web.authorization.exception; import lombok.Getter; import org.hswebframework.web.exception.I18nSupportException; @Getter public class AuthenticationException extends I18nSupportException { public static String ILLEGAL_PASSWORD = "illegal_password"; public static String USER_DISABLED = "user_disabled"; private final String code; public AuthenticationException(String code) { this(code, "error." + code); } public AuthenticationException(String code, String message) { super(message); this.code = code; } public AuthenticationException(String code, String message, Throwable cause) { super(message, cause); this.code = code; } /** * 不填充线程栈的异常，在一些对线程栈不敏感，且对异常不可控（如: 来自未认证请求产生的异常）的情况下不填充线程栈对性能有利。 */ public static class NoStackTrace extends AuthenticationException { public NoStackTrace(String code) { super(code); } public NoStackTrace(String code, String message) { super(code, message); } public NoStackTrace(String code, String message, Throwable cause) { super(code, message, cause); } @Override public final synchronized Throwable fillInStackTrace() { return this; } } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/exception/NeedTwoFactorException.java ================================================ package org.hswebframework.web.authorization.exception; import lombok.Getter; /** * @author zhouhao * @since 3.0.4 */ @Getter public class NeedTwoFactorException extends RuntimeException { private static final long serialVersionUID = 3655980280834947633L; private String provider; public NeedTwoFactorException(String message, String provider) { super(message); this.provider = provider; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/exception/UnAuthorizedException.java ================================================ /* * * * Copyright 2020 http://www.hswebframework.org * * * * Licensed under the Apache License, Version 2.0 (the "License"); * * you may not use this file except in compliance with the License. * * You may obtain a copy of the License at * * * * http://www.apache.org/licenses/LICENSE-2.0 * * * * Unless required by applicable law or agreed to in writing, software * * distributed under the License is distributed on an "AS IS" BASIS, * * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * * See the License for the specific language governing permissions and * * limitations under the License. * */ package org.hswebframework.web.authorization.exception; import lombok.Getter; import org.hswebframework.web.authorization.token.TokenState; import org.hswebframework.web.exception.I18nSupportException; import org.springframework.http.HttpStatus; import org.springframework.web.bind.annotation.ResponseStatus; /** * 未授权异常 * * @author zhouhao * @since 3.0 */ @Getter @ResponseStatus(HttpStatus.UNAUTHORIZED) public class UnAuthorizedException extends I18nSupportException { private static final long serialVersionUID = 2422918455013900645L; private final TokenState state; public UnAuthorizedException() { this(TokenState.expired); } public UnAuthorizedException(TokenState state) { this(state.getText(), state); } public UnAuthorizedException(String message, TokenState state) { super(message); this.state = state; } public UnAuthorizedException(String message, TokenState state, Throwable cause) { super(message, cause); this.state = state; } /** * 不填充线程栈的异常，在一些对线程栈不敏感，且对异常不可控（如: 来自未认证请求产生的异常）的情况下不填充线程栈对性能有利。 */ public static class NoStackTrace extends UnAuthorizedException { public NoStackTrace() { super(); } public NoStackTrace(TokenState state) { super(state); } public NoStackTrace(String message, TokenState state) { super(message, state); } public NoStackTrace(String message, TokenState state, Throwable cause) { super(message, state, cause); } @Override public final synchronized Throwable fillInStackTrace() { return this; } } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/setting/SettingNullValueHolder.java ================================================ package org.hswebframework.web.authorization.setting; import java.util.List; import java.util.Optional; /** * @author zhouhao * @since 1.0.0 */ public class SettingNullValueHolder implements SettingValueHolder { public static final SettingNullValueHolder INSTANCE = new SettingNullValueHolder(); private SettingNullValueHolder() { } @Override public Optional> asList(Class t) { return Optional.empty(); } @Override public Optional as(Class t) { return Optional.empty(); } @Override public Optional asString() { return Optional.empty(); } @Override public Optional asLong() { return Optional.empty(); } @Override public Optional asInt() { return Optional.empty(); } @Override public Optional asDouble() { return Optional.empty(); } @Override public Optional getValue() { return Optional.empty(); } @Override public UserSettingPermission getPermission() { return UserSettingPermission.NONE; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/setting/SettingValueHolder.java ================================================ package org.hswebframework.web.authorization.setting; import java.util.List; import java.util.Optional; public interface SettingValueHolder { SettingValueHolder NULL = SettingNullValueHolder.INSTANCE; Optional> asList(Class t); Optional as(Class t); Optional asString(); Optional asLong(); Optional asInt(); Optional asDouble(); Optional getValue(); UserSettingPermission getPermission(); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/setting/StringSourceSettingHolder.java ================================================ package org.hswebframework.web.authorization.setting; import com.alibaba.fastjson.JSON; import lombok.AllArgsConstructor; import lombok.Getter; import org.hswebframework.utils.StringUtils; import org.hswebframework.web.dict.EnumDict; import java.util.List; import java.util.Optional; /** * @author zhouhao * @since 3.0.4 */ @AllArgsConstructor @Getter public class StringSourceSettingHolder implements SettingValueHolder { private String value; private UserSettingPermission permission; public static SettingValueHolder of(String value, UserSettingPermission permission) { if (value == null) { return SettingValueHolder.NULL; } return new StringSourceSettingHolder(value, permission); } @Override public Optional> asList(Class t) { return getNativeValue() .map(v -> JSON.parseArray(v, t)); } protected T convert(String value, Class t) { if (t.isEnum()) { if (EnumDict.class.isAssignableFrom(t)) { T val = (T) EnumDict.find((Class) t, value).orElse(null); if (null != val) { return val; } } for (T enumConstant : t.getEnumConstants()) { if (((Enum) enumConstant).name().equalsIgnoreCase(value)) { return enumConstant; } } } return JSON.parseObject(value, t); } @Override @SuppressWarnings("all") public Optional as(Class t) { if (t == String.class) { return (Optional) asString(); } else if (Long.class == t || long.class == t) { return (Optional) asLong(); } else if (Integer.class == t || int.class == t) { return (Optional) asInt(); } else if (Double.class == t || double.class == t) { return (Optional) asDouble(); } return getNativeValue().map(v -> convert(v, t)); } @Override public Optional asString() { return getNativeValue(); } @Override public Optional asLong() { return getNativeValue().map(StringUtils::toLong); } @Override public Optional asInt() { return getNativeValue().map(StringUtils::toInt); } @Override public Optional asDouble() { return getNativeValue().map(StringUtils::toDouble); } private Optional getNativeValue() { return Optional.ofNullable(value); } @Override public Optional getValue() { return Optional.ofNullable(value); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/setting/UserSettingManager.java ================================================ package org.hswebframework.web.authorization.setting; /** * @author zhouhao * @since 3.0.4 */ public interface UserSettingManager { SettingValueHolder getSetting(String userId, String key); void saveSetting(String userId, String key, String value, UserSettingPermission permission); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/setting/UserSettingPermission.java ================================================ package org.hswebframework.web.authorization.setting; import lombok.AllArgsConstructor; import lombok.Getter; import org.hswebframework.web.dict.Dict; import org.hswebframework.web.dict.EnumDict; /** * @author zhouhao * @since 3.0.4 */ @AllArgsConstructor @Getter @Dict("user-setting-permission") public enum UserSettingPermission implements EnumDict { NONE("无"), R("读"), W("写"), RW("读写"); private String text; @Override public String getValue() { return name(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/AbstractDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.simple; import org.hswebframework.web.authorization.access.DataAccessConfig; /** * @author zhouhao * @see DataAccessConfig * @since 3.0 */ public abstract class AbstractDataAccessConfig implements DataAccessConfig { private static final long serialVersionUID = -9025349704771557106L; private String action; @Override public String getAction() { return action; } public void setAction(String action) { this.action = action; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/CompositeReactiveAuthenticationManager.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.AllArgsConstructor; import lombok.extern.slf4j.Slf4j; import org.hswebframework.web.authorization.*; import reactor.core.publisher.Flux; import reactor.core.publisher.Mono; import java.util.List; import java.util.function.Function; import java.util.stream.Collectors; @AllArgsConstructor @Slf4j public class CompositeReactiveAuthenticationManager implements ReactiveAuthenticationManager { private final List providers; @Override public Mono authenticate(Mono request) { return Flux .concat( providers .stream() .map(manager -> manager .authenticate(request) .onErrorResume((err) -> { log.warn("get user authenticate error", err); return Mono.empty(); })) .collect(Collectors.toList())) .take(1) .next(); } @Override public Mono getByUserId(String userId) { if (providers.size() == 1) { return providers.get(0).getByUserId(userId); } return Flux .fromStream(providers .stream() .map(manager -> manager .getByUserId(userId) .onErrorResume((err) -> { log.warn("get user [{}] authentication error", userId, err); return Mono.empty(); }) )) .flatMap(Function.identity()) .as(AuthenticationUtils::merge); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/DefaultAuthorizationAutoConfiguration.java ================================================ package org.hswebframework.web.authorization.simple; import org.hswebframework.web.authorization.*; import org.hswebframework.web.authorization.builder.AuthenticationBuilderFactory; import org.hswebframework.web.authorization.builder.DataAccessConfigBuilderFactory; import org.hswebframework.web.authorization.dimension.DimensionManager; import org.hswebframework.web.authorization.dimension.DimensionUserBindProvider; import org.hswebframework.web.authorization.simple.builder.DataAccessConfigConverter; import org.hswebframework.web.authorization.simple.builder.SimpleAuthenticationBuilderFactory; import org.hswebframework.web.authorization.simple.builder.SimpleDataAccessConfigBuilderFactory; import org.hswebframework.web.authorization.token.*; import org.hswebframework.web.authorization.twofactor.TwoFactorValidatorManager; import org.hswebframework.web.authorization.twofactor.defaults.DefaultTwoFactorValidatorManager; import org.hswebframework.web.convert.CustomMessageConverter; import org.springframework.beans.factory.ObjectProvider; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.boot.autoconfigure.AutoConfiguration; import org.springframework.boot.autoconfigure.condition.ConditionalOnBean; import org.springframework.boot.autoconfigure.condition.ConditionalOnMissingBean; import org.springframework.boot.context.properties.ConfigurationProperties; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; import java.util.List; /** * @author zhouhao */ @AutoConfiguration public class DefaultAuthorizationAutoConfiguration { @Bean @ConditionalOnMissingBean(UserTokenManager.class) @ConfigurationProperties(prefix = "hsweb.user-token") public UserTokenManager userTokenManager() { return new DefaultUserTokenManager(); } @Bean @ConditionalOnMissingBean // @ConditionalOnBean(ReactiveAuthenticationManagerProvider.class) public ReactiveAuthenticationManager reactiveAuthenticationManager(List providers) { return new CompositeReactiveAuthenticationManager(providers); } @Bean @ConditionalOnBean(ReactiveAuthenticationManager.class) public UserTokenReactiveAuthenticationSupplier userTokenReactiveAuthenticationSupplier(UserTokenManager userTokenManager, ReactiveAuthenticationManager authenticationManager) { UserTokenReactiveAuthenticationSupplier supplier = new UserTokenReactiveAuthenticationSupplier(userTokenManager, authenticationManager); ReactiveAuthenticationHolder.addSupplier(supplier); return supplier; } @Bean @ConditionalOnBean(AuthenticationManager.class) public UserTokenAuthenticationSupplier userTokenAuthenticationSupplier(UserTokenManager userTokenManager, AuthenticationManager authenticationManager) { UserTokenAuthenticationSupplier supplier = new UserTokenAuthenticationSupplier(userTokenManager, authenticationManager); AuthenticationHolder.addSupplier(supplier); return supplier; } @Bean @ConditionalOnMissingBean(DataAccessConfigBuilderFactory.class) @ConfigurationProperties(prefix = "hsweb.authorization.data-access", ignoreInvalidFields = true) public SimpleDataAccessConfigBuilderFactory dataAccessConfigBuilderFactory() { return new SimpleDataAccessConfigBuilderFactory(); } @Bean @ConditionalOnMissingBean(AuthenticationBuilderFactory.class) public AuthenticationBuilderFactory authenticationBuilderFactory(DataAccessConfigBuilderFactory dataAccessConfigBuilderFactory) { return new SimpleAuthenticationBuilderFactory(dataAccessConfigBuilderFactory); } @Bean public CustomMessageConverter authenticationCustomMessageConverter(AuthenticationBuilderFactory factory) { return new CustomMessageConverter() { @Override public boolean support(Class clazz) { return clazz == Authentication.class; } @Override public Object convert(Class clazz, byte[] message) { String json = new String(message); return factory.create().json(json).build(); } }; } @Bean @ConditionalOnMissingBean(DimensionManager.class) public DimensionManager defaultDimensionManager(ObjectProviderbindProviders, ObjectProvider providers){ DefaultDimensionManager manager = new DefaultDimensionManager(); bindProviders.forEach(manager::addBindProvider); providers.forEach(manager::addProvider); return manager; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/DefaultDimensionManager.java ================================================ package org.hswebframework.web.authorization.simple; import org.hswebframework.web.authorization.Dimension; import org.hswebframework.web.authorization.DimensionProvider; import org.hswebframework.web.authorization.dimension.DimensionManager; import org.hswebframework.web.authorization.dimension.DimensionUserBind; import org.hswebframework.web.authorization.dimension.DimensionUserBindProvider; import org.hswebframework.web.authorization.dimension.DimensionUserDetail; import reactor.core.publisher.Flux; import reactor.core.publisher.Mono; import reactor.util.function.Tuple2; import reactor.util.function.Tuples; import java.util.*; import java.util.concurrent.CopyOnWriteArrayList; import java.util.function.Function; import java.util.stream.Collectors; public class DefaultDimensionManager implements DimensionManager { private final List dimensionProviders = new CopyOnWriteArrayList<>(); private final List bindProviders = new CopyOnWriteArrayList<>(); private final Mono> providerMapping = Flux .defer(() -> Flux.fromIterable(dimensionProviders)) .flatMap(provider -> provider .getAllType() .map(type -> Tuples.of(type.getId(), provider))) .collectMap(Tuple2::getT1, Tuple2::getT2); public DefaultDimensionManager() { } public void addProvider(DimensionProvider provider) { dimensionProviders.add(provider); } public void addBindProvider(DimensionUserBindProvider bindProvider) { bindProviders.add(bindProvider); } private Mono> providerMapping() { return providerMapping; } @Override public Flux getUserDimension(Collection userId) { return this .providerMapping() .flatMapMany(providerMapping -> Flux .fromIterable(bindProviders) //获取绑定信息 .flatMap(provider -> provider.getDimensionBindInfo(userId)) .groupBy(DimensionUserBind::getDimensionType) .flatMap(group -> { String type = group.key(); Flux binds = group.cache(); DimensionProvider provider = providerMapping.get(type); if (null == provider) { return Mono.empty(); } //获取维度信息 return binds .map(DimensionUserBind::getDimensionId) .collect(Collectors.toSet()) .flatMapMany(idList -> provider.getDimensionsById(SimpleDimensionType.of(type), idList)) .collectMap(Dimension::getId, Function.identity()) .flatMapMany(mapping -> binds .groupBy(DimensionUserBind::getUserId) .flatMap(userGroup -> Mono .zip( Mono.just(userGroup.key()), userGroup .handle((bind, sink) -> { Dimension dimension = mapping.get(bind.getDimensionId()); if (dimension != null) { sink.next(dimension); } }) .collectList(), DimensionUserDetail::of )) ); }) ) .groupBy(DimensionUserDetail::getUserId) .flatMap(group->group.reduce(DimensionUserDetail::merge)); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/DimensionDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.EqualsAndHashCode; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.authorization.DimensionType; import org.hswebframework.web.authorization.access.DataAccessType; import org.hswebframework.web.authorization.access.DefaultDataAccessType; import org.hswebframework.web.authorization.access.ScopeDataAccessConfig; import org.hswebframework.web.authorization.simple.AbstractDataAccessConfig; import java.util.Set; @Getter @Setter @EqualsAndHashCode(callSuper = true) public class DimensionDataAccessConfig extends AbstractDataAccessConfig implements ScopeDataAccessConfig { private Set scope; private boolean children; /** * @see DimensionType#getId() */ private String scopeType; @Override public DefaultDataAccessType getType() { return DefaultDataAccessType.DIMENSION_SCOPE; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/PlainTextUsernamePasswordAuthenticationRequest.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.AllArgsConstructor; import lombok.Getter; import lombok.NoArgsConstructor; import lombok.Setter; import org.hswebframework.web.authorization.AuthenticationRequest; /** * @author zhouhao * @since 3.0.0-RC */ @Getter @Setter @AllArgsConstructor @NoArgsConstructor public class PlainTextUsernamePasswordAuthenticationRequest implements AuthenticationRequest { private String username; private String password; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleAuthentication.java ================================================ /* * Copyright 2020 http://www.hswebframework.org * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.hswebframework.web.authorization.simple; import lombok.Getter; import lombok.Setter; import org.hswebframework.web.authorization.*; import java.io.Serial; import java.io.Serializable; import java.util.*; import java.util.concurrent.atomic.AtomicLongFieldUpdater; import java.util.function.BiPredicate; import java.util.function.Function; import java.util.function.Predicate; import java.util.stream.Collectors; public class SimpleAuthentication implements Authentication { static final AtomicLongFieldUpdater ACCESS_COUNT_UPDATER = AtomicLongFieldUpdater.newUpdater(SimpleAuthentication.class, "accessCount"); @Serial private static final long serialVersionUID = -2898863220255336528L; @Getter private User user; @Setter private List permissions = new ArrayList<>(); private List dimensions = new ArrayList<>(); @Setter private Map attributes = new HashMap<>(); public static Authentication of() { return new SimpleAuthentication(); } @Override @SuppressWarnings("unchecked") public Optional getAttribute(String name) { return Optional.ofNullable((T) attributes.get(name)); } public List getDimensions() { return dimensions == null ? Collections.emptyList() : dimensions; } public List getPermissions() { return permissions == null ? Collections.emptyList() : permissions; } @Override public Map getAttributes() { return attributes == null ? Collections.emptyMap() : attributes; } public SimpleAuthentication merge(Authentication authentication) { Map mePermissionGroup = permissions .stream() .collect(Collectors.toMap(Permission::getId, Function.identity())); if (authentication.getUser() != null) { user = authentication.getUser(); } this.attributes = new HashMap<>(getAttributes()); this.attributes.putAll(authentication.getAttributes()); this.permissions = new ArrayList<>(this.getPermissions()); for (Permission permission : authentication.getPermissions()) { Permission me = mePermissionGroup.get(permission.getId()); if (me == null) { permissions.add(permission.copy()); continue; } me.getActions().addAll(permission.getActions()); } this.dimensions = new ArrayList<>(this.getDimensions()); for (Dimension dimension : authentication.getDimensions()) { if (getDimension(dimension.getType(), dimension.getId()).isEmpty()) { dimensions.add(dimension); } } return this; } protected SimpleAuthentication newInstance() { return new SimpleAuthentication(); } @Override public Authentication copy(BiPredicate permissionFilter, Predicate dimension) { SimpleAuthentication authentication = newInstance(); authentication.setDimensions(dimensions .stream() .filter(dimension) .collect(Collectors.toList())); authentication.setPermissions(permissions .stream() .map(permission -> permission.copy(action -> permissionFilter.test(permission, action), conf -> true)) .filter(per -> !per.getActions().isEmpty()) .collect(Collectors.toList()) ); if (user != null) { authentication.setUser0(user); } authentication.setAttributes(new HashMap<>(attributes)); return authentication; } public void setUser(User user) { this.user = user; dimensions.add(user); } protected void setUser0(User user) { this.user = user; } public void setDimensions(List dimensions) { this.dimensions.addAll(dimensions); } public void setDimensions(Collection dimensions) { this.dimensions.addAll(dimensions); } public void addDimension(Dimension dimension) { this.dimensions.add(dimension); } private transient volatile Map> dimensionMapping; private transient volatile Map permissionMapping; private transient volatile long accessCount; protected boolean fastPath() { // 总共访问超过8次,则进行初始化缓存. if (ACCESS_COUNT_UPDATER.incrementAndGet(this) == 8) { if (permissionMapping == null) { permissionMapping = permissions == null ? Collections.emptyMap() : permissions .stream() .collect(Collectors .toMap(Permission::getId, Function.identity(), (a, b) -> b)); dimensionMapping = dimensions == null ? Collections.emptyMap() : dimensions .stream() .collect(Collectors .groupingBy(d -> d.getType().getId(), Collectors.toMap( Dimension::getId, Function.identity(), (a, b) -> a))); } } return permissionMapping != null; } @Override public boolean hasPermission(String permissionId, Collection actions) { Map permissionMapping = this.permissionMapping; if (fastPath() && permissionMapping != null) { Permission permission = permissionMapping.get(permissionId); if (permission == null) { permission = permissionMapping.get("*"); } if (permission == null) { return false; } return actions.isEmpty() || permission.getActions().containsAll(actions) || permission.getActions().contains("*"); } return Authentication.super.hasPermission(permissionId, actions); } @Override public Optional getDimension(String type, String id) { Map> dimensionMapping = this.dimensionMapping; if (fastPath() && dimensionMapping != null) { Map mapping = dimensionMapping.get(type); if (mapping == null) { return Optional.empty(); } return Optional.ofNullable(mapping.get(id)); } return Authentication.super.getDimension(type, id); } @Override public Optional getDimension(DimensionType type, String id) { return getDimension(type.getId(), id); } @Override public List getDimensions(DimensionType type) { return this.getDimensions(type.getId()); } @Override public List getDimensions(String type) { Map> dimensionMapping = this.dimensionMapping; if (fastPath() && dimensionMapping != null) { Map mapping = dimensionMapping.get(type); if (mapping == null) { return List.of(); } return new ArrayList<>(mapping.values()); } return Authentication.super.getDimensions(type); } @Override public Optional getPermission(String id) { Map permissionMapping = this.permissionMapping; if (fastPath() && permissionMapping != null) { return Optional.ofNullable(permissionMapping.get(id)); } return Authentication.super.getPermission(id); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleDimension.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.*; import org.hswebframework.web.authorization.Dimension; import org.hswebframework.web.authorization.DimensionType; import java.util.Map; @Getter @Setter @AllArgsConstructor(staticName = "of") @NoArgsConstructor @EqualsAndHashCode public class SimpleDimension implements Dimension { private String id; private String name; private DimensionType type; private Map options; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleDimensionType.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.*; import org.hswebframework.web.authorization.DimensionType; import java.io.Serializable; @Getter @Setter @AllArgsConstructor(staticName = "of") @NoArgsConstructor @EqualsAndHashCode public class SimpleDimensionType implements DimensionType, Serializable { private static final long serialVersionUID = -6849794470754667710L; private String id; private String name; public static SimpleDimensionType of(String id) { return of(id, id); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleFieldFilterDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.simple; import org.hswebframework.web.authorization.access.DataAccessType; import org.hswebframework.web.authorization.access.DefaultDataAccessType; import org.hswebframework.web.authorization.access.FieldFilterDataAccessConfig; import java.util.Arrays; import java.util.HashSet; import java.util.Set; import static org.hswebframework.web.authorization.access.DataAccessConfig.DefaultType.DENY_FIELDS; /** * 默认配置实现 * * @author zhouhao * @see FieldFilterDataAccessConfig * @since 3.0 */ public class SimpleFieldFilterDataAccessConfig extends AbstractDataAccessConfig implements FieldFilterDataAccessConfig { private static final long serialVersionUID = 8080660575093151866L; private Set fields; public SimpleFieldFilterDataAccessConfig() { } public SimpleFieldFilterDataAccessConfig(String... fields) { this.fields = new HashSet<>(Arrays.asList(fields)); } @Override public Set getFields() { return fields; } public void setFields(Set fields) { this.fields = fields; } @Override public DataAccessType getType() { return DefaultDataAccessType.FIELD_DENY; } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleOwnCreatedDataAccessConfig.java ================================================ package org.hswebframework.web.authorization.simple; import org.hswebframework.web.authorization.access.OwnCreatedDataAccessConfig; /** * @author zhouhao * @since 3.0 */ public class SimpleOwnCreatedDataAccessConfig extends AbstractDataAccessConfig implements OwnCreatedDataAccessConfig { private static final long serialVersionUID = -6059330812806119730L; public SimpleOwnCreatedDataAccessConfig() { } public SimpleOwnCreatedDataAccessConfig(String action) { setAction(action); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimplePermission.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.*; import org.apache.commons.collections4.CollectionUtils; import org.hswebframework.web.authorization.Permission; import org.hswebframework.web.authorization.access.DataAccessConfig; import java.util.*; import java.util.function.Predicate; import java.util.stream.Collectors; /** * @author zhouhao */ @Getter @Setter @Builder @NoArgsConstructor @AllArgsConstructor @EqualsAndHashCode(exclude = "dataAccesses") public class SimplePermission implements Permission { private static final long serialVersionUID = 7587266693680162184L; private String id; private String name; private Set actions; private Set dataAccesses; private Map options; public Set getActions() { if (actions == null) { actions = new java.util.HashSet<>(); } return actions; } public Set getDataAccesses() { if (dataAccesses == null) { dataAccesses = new java.util.HashSet<>(); } return dataAccesses; } @Override public Permission copy(Predicate actionFilter, Predicate dataAccessFilter) { SimplePermission permission = new SimplePermission(); permission.setId(id); permission.setName(name); permission.setActions(getActions().stream().filter(actionFilter).collect(Collectors.toSet())); permission.setDataAccesses(getDataAccesses().stream().filter(dataAccessFilter).collect(Collectors.toSet())); if (options != null) { permission.setOptions(new HashMap<>(options)); } return permission; } public Permission copy() { return copy(action -> true, conf -> true); } @Override public String toString() { return id + (CollectionUtils.isNotEmpty(actions) ? ":" + String.join(",", actions) : ""); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleRole.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.*; import org.hswebframework.web.authorization.Dimension; import org.hswebframework.web.authorization.Role; import java.io.Serializable; import java.util.Map; /** * @author zhouhao */ @Getter @Setter @Builder @NoArgsConstructor @AllArgsConstructor @EqualsAndHashCode public class SimpleRole implements Role { private static final long serialVersionUID = 7460859165231311347L; private String id; private String name; private Map options; public static Role of(Dimension dimension) { return SimpleRole.builder() .name(dimension.getName()) .id(dimension.getId()) .options(dimension.getOptions()) .build(); } } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/SimpleUser.java ================================================ package org.hswebframework.web.authorization.simple; import lombok.*; import org.hswebframework.web.authorization.User; import java.io.Serial; import java.io.Serializable; import java.util.Map; /** * @author zhouhao */ @Getter @Setter @NoArgsConstructor @AllArgsConstructor @Builder @EqualsAndHashCode public class SimpleUser implements User { @Serial private static final long serialVersionUID = 2194541828191869091L; private String id; private String username; private String name; private String userType; private Map options; } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/builder/DataAccessConfigConverter.java ================================================ package org.hswebframework.web.authorization.simple.builder; import org.hswebframework.web.authorization.access.DataAccessConfig; /** * @author zhouhao */ public interface DataAccessConfigConverter { boolean isSupport(String type, String action, String config); DataAccessConfig convert(String type, String action, String config); } ================================================ FILE: hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/simple/builder/SimpleAuthenticationBuilder.java ================================================ package org.hswebframework.web.authorization.simple.builder; import com.alibaba.fastjson.JSON; import com.alibaba.fastjson.JSONArray; import com.alibaba.fastjson.JSONObject; import com.google.common.collect.Maps; import org.hswebframework.web.authorization.*; import org.hswebframework.web.authorization.builder.AuthenticationBuilder; import org.hswebframework.web.authorization.builder.DataAccessConfigBuilderFactory; import org.hswebframework.web.authorization.simple.*; import java.io.Serializable; import java.util.*; import java.util.stream.Collectors; /** * @author zhouhao */ public class SimpleAuthenticationBuilder implements AuthenticationBuilder { private SimpleAuthentication authentication = new SimpleAuthentication(); private DataAccessConfigBuilderFactory dataBuilderFactory; public SimpleAuthenticationBuilder(DataAccessConfigBuilderFactory dataBuilderFactory) { this.dataBuilderFactory = dataBuilderFactory; } public void setDataBuilderFactory(DataAccessConfigBuilderFactory dataBuilderFactory) { this.dataBuilderFactory = dataBuilderFactory; } @Override public AuthenticationBuilder user(User user) { Objects.requireNonNull(user); authentication.setUser(user); return this; } @Override public AuthenticationBuilder user(String user) { return user(JSON.parseObject(user, SimpleUser.class)); } @Override public AuthenticationBuilder user(Map user) { Objects.requireNonNull(user.get("id")); user(SimpleUser.builder() .id(user.get("id")) .username(user.get("username")) .name(user.get("name")) .userType(user.get("type")) .build()); return this; } @Override public AuthenticationBuilder role(List role) { authentication.getDimensions().addAll(role); return this; } @Override @SuppressWarnings("unchecked") public AuthenticationBuilder role(String role) { return role((List) JSON.parseArray(role, SimpleRole.class)); } @Override public AuthenticationBuilder permission(List permission) { authentication.setPermissions(permission); return this; } public AuthenticationBuilder permission(JSONArray jsonArray) { List permissions = new ArrayList<>(); for (int i = 0; i < jsonArray.size(); i++) { JSONObject jsonObject = jsonArray.getJSONObject(i); SimplePermission permission = new SimplePermission(); permission.setId(jsonObject.getString("id")); permission.setName(jsonObject.getString("name")); permission.setOptions(jsonObject.getJSONObject("options")); JSONArray actions = jsonObject.getJSONArray("actions"); if (actions != null) { permission.setActions(new HashSet<>(actions.toJavaList(String.class))); } JSONArray dataAccess = jsonObject.getJSONArray("dataAccesses"); if (null != dataAccess) { permission.setDataAccesses(dataAccess.stream().map(JSONObject.class::cast) .map(dataJson -> dataBuilderFactory .create() .fromJson(dataJson.toJSONString()) .build()) .filter(Objects::nonNull) .collect(Collectors.toSet())); } permissions.add(permission); } authentication.setPermissions(permissions); return this; } @Override public AuthenticationBuilder permission(String permissionJson) { return permission(JSON.parseArray(permissionJson)); } @Override public AuthenticationBuilder attributes(String attributes) { authentication.getAttributes().putAll(JSON.>parseObject(attributes, Map.class)); return this; } @Override public AuthenticationBuilder attributes(Map permission) { authentication.getAttributes().putAll(permission); return this; } public AuthenticationBuilder dimension(JSONArray json) { if (json == null) { return this; } List dimensions = new ArrayList<>(); for (int i = 0; i < json.size(); i++) { JSONObject jsonObject = json.getJSONObject(i); Object type = jsonObject.get("type"); Map