package com.norteksoft.product.util;
import java.util.ArrayList;
import java.util.List;
import javax.servlet.http.HttpServletRequest;
import org.apache.commons.lang.StringUtils;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.springframework.context.ApplicationContext;
import org.springframework.security.Authentication;
import org.springframework.security.GrantedAuthority;
import org.springframework.security.GrantedAuthorityImpl;
import org.springframework.security.context.SecurityContextHolder;
import org.springframework.security.providers.anonymous.AnonymousAuthenticationToken;
import org.springframework.web.context.ContextLoader;
import com.norteksoft.acs.base.enumeration.SecretGrade;
import com.norteksoft.acs.entity.authorization.BusinessSystem;
import com.norteksoft.acs.entity.authorization.Function;
import com.norteksoft.acs.entity.security.User;
import com.norteksoft.acs.service.authorization.AcsApiManager;
import com.norteksoft.acs.service.authorization.BusinessSystemManager;
import com.norteksoft.acs.service.authorization.FunctionManager;
import com.norteksoft.acs.service.organization.UserManager;
import com.norteksoft.acs.service.security.SecurityResourceCache;
import com.norteksoft.product.api.ApiFactory;
import com.norteksoft.product.api.utils.BeanUtil;
import com.norteksoft.product.web.struts2.Struts2Utils;
import com.norteksoft.wf.base.enumeration.CommonStrings;
/**
* 获取当前登陆用户的用户信息及其公司信息、当前业务系统信息
* 获取指定名称的bean
*/
public class ContextUtils {
private static final String COMPANY_ID = "companyId";
private static final String USER_ID = "userId";
private static final String LOGIN_NAME = "loginName";
private static final String COMPANY_CODE = "companyCode";
private static final String COMPANY_NAME = "companyName";
private static final String USER_NAME = "userName";
private static final String DEPARTMENT_ID= "departmentId";
private static final String SUB_COMPANY_ID= "subCompanyId";
private static final String SUB_COMPANY_CODE = "subCompanyCode";
private static final String SUB_COMPANY_NAME = "subCompanyName";
private static final String SUB_COMPANY_SHORT_TITLE = "subCompanyShortTitle";
protected static Log logger = LogFactory.getLog(ContextUtils.class);
private static String anonymous = "roleAnonymous";
private static String anonymousRole = "ROLE_ANONYMOUS";
private ContextUtils(){}
/**
* 获取公司ID
* @return
*/
public static Long getCompanyId(){
Long id = getCurrentUser().getCompanyId();
if(id==null){
id=ParameterUtils.getCompanyId();
}
if(id == null){
id = getLongParameter(COMPANY_ID);
}
return id;
}
/**
* 获取公司名称编码
* @return
*/
public static String getCompanyCode(){
String companyCode = getCurrentUser().getCompanyCode();
if(companyCode==null){
companyCode= ParameterUtils.getCompanyCode();
}
if(companyCode == null){
companyCode = getParameter(COMPANY_CODE);
}
return companyCode;
}
/**
* 获取公司名称
* @return
*/
public static String getCompanyName(){
String companyName = getCurrentUser().getCompanyName();
if(companyName == null){
companyName=ParameterUtils.getCompanyName();
}
if(companyName == null){
companyName = getParameter(COMPANY_NAME);
}
return companyName;
}
/**
* 获取当前用户ID
* @return
*/
public static Long getUserId(){
Long id = getCurrentUser().getUserId();
if(id == null){
id=ParameterUtils.getUserId();
}
if(id == null){
id = getLongParameter(USER_ID);
}
return id;
}
/**
* 获取当前用户的登录名
* @return
*/
public static String getLoginName(){
String loginName = getCurrentUser().getLoginName();
if(loginName==null || "roleAnonymous".equals(loginName)){
loginName=ParameterUtils.getLoginName();
}
if(loginName == null || "roleAnonymous".equals(loginName)){
loginName = getParameter(LOGIN_NAME);
}
return loginName;
}
/**
* 获取当前用户的用户名
* @return
*/
public static String getUserName(){
String userName = getCurrentUser().getTrueName();
if(userName == null){
userName=ParameterUtils.getUserName();
}
if(userName == null){
userName = getParameter(USER_NAME);
}
return userName;
}
/**
* 获取系统ID（要求当前线程的context classloader为web应用的classloader）
* @return
*/
public static Long getSystemId(){
Long id =null;
id=ParameterUtils.getSystemId();
if(id == null){
BusinessSystemManager bsm=(BusinessSystemManager)getBean("businessSystemManager");
BusinessSystem system=bsm.getSystemBySystemCode(getSystemCode());
if(system!=null){
id = system.getId();
}
}
return id;
}
/**
* 获取系统编号（要求当前线程的context classloader为web应用的classloader）
* @return
*/
public static String getSystemCode(){
String systemCode =null;
systemCode=ParameterUtils.getSystemCode();
if(StringUtils.isEmpty(systemCode)){
/**
* struts2的ServletActionContext.getServletContext()要求当前线程必须经过了struts2的filter的处理，
* 所以在某些情况下是取不到ServletContext的。比如在自己创建的线程中或定时器的任务中
* ContextLoader.getCurrentWebApplicationContext()是从静态的map中取得WebApplicationContext，
* 这个map中的值是在ContextLoaderListner中赋值的，所以在这个web应用中的任何地方都可以取到值（只要是web应用的classloader加载的类）
* 如果在代码中用了自定义的classloader加载了某个类，在这个类中调用这个方法就会取不到值了（目前是不会出现这种情况的）
*/
systemCode = ContextLoader.getCurrentWebApplicationContext().getServletContext().getInitParameter("systemCode");
}
return systemCode;
}
/**
* 获取系统名称（要求当前线程的context classloader为web应用的classloader）
* @return
*/
public static String getSystemName(){
BusinessSystemManager bsm=(BusinessSystemManager)getBean("businessSystemManager");
return bsm.getSystemBySystemCode(getSystemCode()).getName();
}
public static boolean isSystemAdmin(){
String codes = getRoleCodesStartComma();
return codes != null && codes.contains(",acsSystemAdmin,");
}
public static boolean isAuditAdmin(){
String codes = getRoleCodesStartComma();
return codes != null && codes.contains(",acsAuditAdmin,");
}
public static boolean isSecurityAdmin(){
String codes = getRoleCodesStartComma();
return codes != null && codes.contains(",acsSecurityAdmin,");
}
private static Long getLongParameter(String name){
String property = getParameter(name);
Long value = null;
if(property != null){
value = Long.valueOf(property);
}
return value;
}
private static String getParameter(String name){
HttpServletRequest request = Struts2Utils.getRequest();
if(request==null){
return null;
}
String property = request.getParameter(name);
if(StringUtils.isBlank(property)){
property = null;
}
return property;
}
private static ApplicationContext context;
public static void setContext(ApplicationContext applicationContext){
context = applicationContext;
}
public static Object getBean(String beanName){
if(ContextLoader.getCurrentWebApplicationContext()==null){
return context.getBean(beanName);
}
return ContextLoader.getCurrentWebApplicationContext().getBean(beanName);
}
private static User getCurrentUser(){
Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
if(authentication != null){
if(authentication instanceof AnonymousAuthenticationToken){
Object obj = authentication.getDetails();
if(obj instanceof User){
return (User)obj;
}
}
Object obj = authentication.getPrincipal();
if(obj instanceof User) {
return (User)obj;
}
}
User user = new User(anonymous, anonymous, false, false, false, false,
new GrantedAuthority[]{new GrantedAuthorityImpl(anonymousRole)});
authentication = new AnonymousAuthenticationToken(anonymous, user, user.getAuthorities());
SecurityContextHolder.getContext().setAuthentication(authentication);
return user;
}
/**
* 对于该资源判断当前用户是否有权限
* @param urlKey
* @return
*/
public static boolean isAuthority(String urlKey){
GrantedAuthority[] autorities = getCurrentUser().getAuthorities();
for(GrantedAuthority autority : autorities){
if(urlKey.equals(autority.getAuthority())){
return true;
}
}
return false;
}
/**
* 对于该资源判断当前用户是否有权限
* @param urlKey
* @return
*/
public static boolean isAuthority(String url,String systemCode){
String urlKey = url;
BusinessSystemManager bsm=(BusinessSystemManager)getBean("businessSystemManager");
BusinessSystem system=null;
if(StringUtils.isNotEmpty(systemCode)){
system=bsm.getSystemBySystemCode(systemCode);
if(system==null)return false;
}
return isAuthority(urlKey,system);
}
public static boolean isAuthority(String url,Long systemId){
String urlKey = url;
BusinessSystemManager bsm=(BusinessSystemManager)getBean("businessSystemManager");
BusinessSystem system=null;
if(systemId!=null){
system=bsm.getBusiness(systemId);
if(system==null)return false;
}
return isAuthority(urlKey,system);
}
private static boolean isAuthority(String url,BusinessSystem system){
// FunctionManager funM=(FunctionManager)getBean("functionManager");
if(system!=null){
String parentBusinessCode = system.getParentCode();
if(StringUtils.isNotEmpty(parentBusinessCode)){//如果是子系统，则在url前加上当前系统的编码
//url:/form/list-data.htm,属于mms子系统，则新url应为/mms/form/list-data.htm
url="/"+system.getCode()+url;
}
}
String grantedAuthorities = SecurityResourceCache.getAuthoritysInCache(url);
if(grantedAuthorities!=null){
if(ContextUtils.isAuthority(grantedAuthorities)){
return true;
}
}else{
if(system!=null&&"ems".equals(system.getCode())){//当前系统如果是平台提供的“开发案例”系统，且用户有该系统的ems角色，则所有菜单均默认有权限
GrantedAuthority[] autorities = getCurrentUser().getAuthorities();
for(GrantedAuthority autority : autorities){
if(url.equals(autority.getAuthority())){
return true;
}
if("DEMO-ALL".equals(autority.getAuthority())){
return true;
}
}
}
}
return false;
}
public static String getTrueName(){
return getCurrentUser().getTrueName();
}
/**
* 获取当前用户的Password
* @return
*/
public static String getPassword(){
return getCurrentUser().getPassword();
}
public static String getHonorificTitle(){
if(StringUtils.isEmpty(getCurrentUser().getHonorificTitle())){
return getTrueName()==null?"":getTrueName();
}else{
return getCurrentUser().getHonorificTitle();
}
}
/**
* 获取当前用户的Email
* @return
*/
public static String getEmail(){
return getCurrentUser().getEmail();
}
public static SecretGrade getSecretGrade(){
return getCurrentUser().getSecretGrade();
}
public static String getRoleCodes(){
String codes = getCurrentUser().getRoleCodes();
if(StringUtils.isEmpty(codes)){
com.norteksoft.acs.entity.organization.User user = BeanUtil.turnToUser(ApiFactory.getAcsService().getUserByLoginName(getLoginName()));
codes = ApiFactory.getAcsService().getRolesExcludeTrustedRole(BeanUtil.turnToModelUser(user));
}
return codes;
}
public static String getTheme(){
return getCurrentUser().getTheme();
}
public static void setTheme(String theme){
getCurrentUser().setTheme(theme);
}
private static String getRoleCodesStartComma(){
String roleCode = getRoleCodes();
if(!roleCode.startsWith(",")) roleCode=","+roleCode+",";
return roleCode;
}
public static boolean isAdmin(){
String roleCode = getRoleCodesStartComma();
if(roleCode != null && (roleCode.contains(",acsSystemAdmin,") || roleCode.contains(",acsSecurityAdmin,") || roleCode.contains(",acsAuditAdmin,"))){
return true;
}
return false;
}
/**
* 根据系统编码获得系统ID
* @param code
* @return
*/
public static Long getSystemId(String code){
return ApiFactory.getAcsService().getSystemByCode(code)==null?null:ApiFactory.getAcsService().getSystemByCode(code).getId();
}
/**
* 获得当前用户所在正职部门id
* @return
*/
public static Long getDepartmentId(){
Long departmentId = getCurrentUser().getDepartmentId();
if(departmentId==null){
departmentId= ParameterUtils.getDepartmentId();
}
if(departmentId == null){
departmentId = getLongParameter(DEPARTMENT_ID);
}
return departmentId;
}
/**
* 获得当前用户所在分支机构id
* @return
*/
public static Long getSubCompanyId(){
Long subCompanyId = getCurrentUser().getSubCompanyId();
if(subCompanyId==null){
subCompanyId= ParameterUtils.getSubCompanyId();
}
if(subCompanyId == null){
subCompanyId = getLongParameter(SUB_COMPANY_ID);
}
return subCompanyId;
}
/**
* 获得当前用户所在分支机构名称
* @return
*/
public static String getSubCompanyName(){
String subCompanyName = getCurrentUser().getSubCompanyName();
if(subCompanyName==null){
subCompanyName= ParameterUtils.getSubCompanyName();
}
if(subCompanyName == null){
subCompanyName = getParameter(SUB_COMPANY_NAME);
}
return subCompanyName;
}
/**
* 获得当前用户所在分支机构编码
* @return
*/
public static String getSubCompanyCode(){
String subCompanyCode= getCurrentUser().getSubCompanyCode();
if(subCompanyCode==null){
subCompanyCode= ParameterUtils.getSubCompanyCode();
}
if(subCompanyCode == null){
subCompanyCode = getParameter(SUB_COMPANY_CODE);
}
return subCompanyCode;
}
/**
* 获得当前用户所在分支机构简称
* @return
*/
public static String getSubCompanyShortTitle(){
String subCompanyShortTitle= getCurrentUser().getSubCompanyShortTitle();
if(subCompanyShortTitle==null){
subCompanyShortTitle= ParameterUtils.getSubCompanyShortTitle();
}
if(subCompanyShortTitle == null){
subCompanyShortTitle = getParameter(SUB_COMPANY_SHORT_TITLE);
}
return subCompanyShortTitle;
}
public static boolean hasSameLoginName(String loginName){
UserManager userManager=(UserManager)getBean("userManager");
if(CommonStrings.ALL_USER.equals(loginName)){//表示是所有人
return false;
}else{
return userManager.hasSameLoginNameUser(loginName);
}
}
public static boolean hasBranch(){
AcsApiManager acsApiManager = (AcsApiManager)ContextUtils.getBean("acsApiManager");
return acsApiManager.hasBranch(getCompanyId());
}
}