From bdd8c18b46cc31c0c381bec62fc9df7936337139 Mon Sep 17 00:00:00 2001
From: xieb <vip_xiaobin810@163.com>
Date: Tue, 05 Sep 2023 11:16:52 +0800
Subject: [PATCH] 蓝证用户推送接收接口

---
 skjcmanager/skjcmanager-service/skjcmanager-user/src/main/java/cn/gistack/system/user/sync/controller/UserPushController.java |   58 ++++++++++++++++++++++++++++++++++++++++++++++++----------
 1 files changed, 48 insertions(+), 10 deletions(-)

diff --git a/skjcmanager/skjcmanager-service/skjcmanager-user/src/main/java/cn/gistack/system/user/sync/controller/UserPushController.java b/skjcmanager/skjcmanager-service/skjcmanager-user/src/main/java/cn/gistack/system/user/sync/controller/UserPushController.java
index 3313694..c5c9fee 100644
--- a/skjcmanager/skjcmanager-service/skjcmanager-user/src/main/java/cn/gistack/system/user/sync/controller/UserPushController.java
+++ b/skjcmanager/skjcmanager-service/skjcmanager-user/src/main/java/cn/gistack/system/user/sync/controller/UserPushController.java
@@ -4,18 +4,22 @@
 import cn.gistack.system.user.service.IUserService;
 import cn.gistack.system.user.sync.dto.AccountBean;
 import cn.gistack.system.user.sync.dto.ApiPushDTO;
-import cn.gistack.system.user.sync.util.GenerateUtil;
-import cn.gistack.system.user.sync.util.SecurityUtil;
+import cn.gistack.system.user.sync.exception.ErrorCode;
+import cn.gistack.system.user.sync.util.*;
 import com.alibaba.fastjson.JSONArray;
 import lombok.AllArgsConstructor;
 import org.springblade.core.mp.support.Condition;
 import org.springblade.core.tenant.annotation.NonDS;
-import org.springblade.core.tool.api.R;
+import org.springframework.scheduling.annotation.Async;
 import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
 
+import javax.servlet.http.HttpServletRequest;
+import java.util.HashMap;
 import java.util.List;
+import java.util.Map;
 
 /**
  * @PROJECT_NAME: skjcmanager
@@ -37,10 +41,44 @@
 	private final static String method = "post";
 
 	@PostMapping("/userpush")
-	public R userPush(ApiPushDTO apiPushDTO) {
-		String syncData = SecurityUtil.decryptAES(apiPushDTO.getSyncData(), appSecret);
+	public Object userPush(@RequestBody ApiPushDTO apiPushDTO, HttpServletRequest request) {
+		Map<String, Object> ret = new HashMap<>();
+
+		String clientId = request.getParameter("clientId");
+		String timestamp = request.getParameter("timestamp");
+		String sign = request.getParameter("sign");
+		String salt = request.getParameter("salt");
+
+		// 校验签名防止篡改参数
+		String sign2 = SignBuilder.create(appId, MD5Util.getMD5String(appSecret))
+			.requestPath("/api/blade-user/sync/userpush")
+			.requestMethod("POST")
+			.salt(salt)
+			.timestamp(Long.valueOf(timestamp))
+			.sign();
+
+		if (!clientId.equals(appId) || !sign.equals(sign2)) {
+			ret.put("code", ErrorCode.SIGN_CHECK_ERROR.getCode());
+			ret.put("msg", ErrorCode.SIGN_CHECK_ERROR.getMsg());
+			ret.put("data", "");
+			return ret;
+		}
+
+		// 解密syncData
+		String syncData = SecurityUtil.decryptAES(apiPushDTO.getSyncData(), MD5Util.getMD5String(appSecret));
 		List<AccountBean> accountBeanList = JSONArray.parseArray(syncData, AccountBean.class);
 
+		// 异步执行用户处理
+		asyncUserGo(accountBeanList);
+
+		ret.put("code", 1000);
+		ret.put("msg", "成功");
+		ret.put("data", apiPushDTO.getSign());
+		return ret;
+	}
+
+	@Async
+	public void asyncUserGo(List<AccountBean> accountBeanList) {
 		//循环list
 		accountBeanList.forEach(accountBean -> {
 			//判断手机号是否在库中
@@ -48,9 +86,9 @@
 			params.setPhone(accountBean.getPrincipalId());
 			User one = userService.getOne(Condition.getQueryWrapper(params));
 
-			if (one == null){
+			if (one == null) {
 				//不在,看status状态,若为1则不操作。0添加进库
-				if (accountBean.getStatus().equals("0")){
+				if (accountBean.getStatus().equals("0")) {
 
 					User saveUser = new User();
 					//设置id为手机号
@@ -68,9 +106,9 @@
 					saveUser.setTenantId("000000");
 					userService.save(saveUser);
 				}
-			}else {
+			} else {
 				//在,看status状态,若为1则删除用户。0更新?
-				if (accountBean.getStatus().equals("1")){
+				if (accountBean.getStatus().equals("1")) {
 					userService.removeUser(accountBean.getPrincipalId());
 				} else { //更新
 					//设置姓名
@@ -79,7 +117,7 @@
 				}
 			}
 		});
-		return R.data(apiPushDTO.getTimestamp());
+
 	}
 
 }

--
Gitblit v1.9.3