package com.liusuyun.flowersay.gateway.services;

import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
import com.fujieid.jap.ids.model.ClientDetail;
import com.fujieid.jap.ids.model.enums.GrantType;
import com.fujieid.jap.ids.model.enums.ResponseType;
import com.fujieid.jap.ids.service.IdsClientDetailService;
import com.liusuyun.flowersay.gateway.entities.OAuthClient;
import com.liusuyun.flowersay.gateway.mappers.OAuthClientMapper;
import org.apache.ibatis.ext.solon.Db;
import org.noear.solon.annotation.Component;
import org.noear.solon.annotation.Inject;

import java.util.List;
import java.util.stream.Collectors;

/**
 * @author 颖
 * @version 1.0.0
 * @date 2021-04-14 10:27
 * @since 1.0.0
 */
public class IdsClientDetailServiceImpl implements IdsClientDetailService {

    @Db
    OAuthClientMapper oAuthClientMapper;

    /**
     * 通过 client_id 查询客户端信息
     *
     * @param clientId 客户端应用id
     * @return AppOauthClientDetails
     */
    @Override
    public ClientDetail getByClientId(String clientId) {
        QueryWrapper<OAuthClient> queryWrapper = new QueryWrapper<>();
        queryWrapper.eq("client_id", clientId);

        return this.convert(
                this.oAuthClientMapper.selectOne(queryWrapper)
        );
    }

    /**
     * Add client
     *
     * @param clientDetail Client application details
     * @return ClientDetail
     */
    @Override
    public ClientDetail add(ClientDetail clientDetail) {
        return IdsClientDetailService.super.add(clientDetail);
    }

    /**
     * Modify the client
     *
     * @param clientDetail Client application details
     * @return ClientDetail
     */
    @Override
    public ClientDetail update(ClientDetail clientDetail) {
        return IdsClientDetailService.super.update(clientDetail);
    }

    /**
     * Delete client by primary key
     *
     * @param id Primary key of the client application
     * @return boolean
     */
    @Override
    public boolean removeById(String id) {
        this.oAuthClientMapper.deleteById(Long.parseLong(id));
        return true;
    }

    /**
     * Delete client by client id
     *
     * @param clientId Client application id
     * @return ClientDetail
     */
    @Override
    public boolean removeByClientId(String clientId) {
        QueryWrapper<OAuthClient> queryWrapper = new QueryWrapper<>();
        queryWrapper.eq("client_id", clientId);

        this.oAuthClientMapper.delete(queryWrapper);
        return true;
    }

    /**
     * 获取所有 client detail
     *
     * @return List
     */
    @Override
    public List<ClientDetail> getAllClientDetail() {
        return this.oAuthClientMapper.selectList(new QueryWrapper<>())
                .stream()
                .map(this::convert)
                .collect(Collectors.toList());
    }

    private ClientDetail convert(OAuthClient client) {
        if(client == null) {
            return null;
        }
        return new ClientDetail()
                .setId(String.valueOf(client.getId()))
                .setAppName(client.getName())
                .setClientId(client.getClientId())
                .setClientSecret(client.getClientSecret())
                .setSiteDomain(client.getSiteDomain())
                .setRedirectUri(client.getRedirectUri())
                .setLogoutRedirectUri(client.getLogoutUri())
                .setLogo(client.getLogo())
                .setAvailable(client.isAvailable())
                .setDescription(client.getDescription())
                .setScopes(client.getScopes())
                .setGrantTypes(GrantType.values()[client.getGrantTypes()].getType())
                .setResponseTypes(ResponseType.values()[client.getResponseTypes()].getType())
                .setCodeExpiresIn(client.getCodeExpiresIn())
                .setIdTokenExpiresIn(client.getIdTokenExpiresIn())
                .setAccessTokenExpiresIn(client.getAccessTokenExpiresIn())
                .setRefreshTokenExpiresIn(client.getRefreshTokenExpiresIn())
                .setAutoApprove(client.getAutoApprove())
                .setEnablePkce(client.getEnablePkce())
                .setCodeChallengeMethod(client.getCodeChallengeMethod());
    }

}

package com.liusuyun.flowersay.gateway.services;

import com.fujieid.jap.ids.config.JwtConfig;
import com.fujieid.jap.ids.service.IdsIdentityService;
import org.noear.solon.annotation.Component;

/**
 * @author 颖
 * @version 1.0.0
 * @date 2021-04-16 16:32
 * @since 1.0.0
 */
public class IdsIdentityServiceImpl implements IdsIdentityService {

    /**
     * Get the jwt token encryption key string
     *
     * @param identity User/organization/enterprise identification
     * @return Encryption key string in json format
     */
    @Override
    public String getJwksJson(String identity) {
        return IdsIdentityService.super.getJwksJson(identity);
    }

    /**
     * Get the configuration of jwt token encryption
     *
     * @param identity User/organization/enterprise identification
     * @return Encryption key string in json format
     */
    @Override
    public JwtConfig getJwtConfig(String identity) {
        return IdsIdentityService.super.getJwtConfig(identity);
    }

}

package com.liusuyun.flowersay.gateway.services;

import com.fujieid.jap.ids.model.UserInfo;
import com.fujieid.jap.ids.service.IdsUserService;
import com.liusuyun.flowersay.common.entities.models.User;
import org.noear.solon.annotation.Component;

/**
 * @author 颖
 * @version 1.0.0
 * @date 2021-04-14 10:27
 * @since 1.0.0
 */
public class IdsUserServiceImpl extends JapService implements IdsUserService {

    /**
     * Login with account and password
     *
     * @param username account number
     * @param password password
     * @return UserInfo
     */
    @Override
    public UserInfo loginByUsernameAndPassword(String username, String password, String clientId) {
        User user = this.findUser(username);
        if (user != null) {
            if (user.authenticate(password)) {
                return this.convert(user);
            }
        }
        return null;
    }

    /**
     * Get user info by userid.
     *
     * @param userId userId of the business system
     * @return UserInfo
     */
    @Override
    public UserInfo getById(String userId) {
        return this.convert(
                this.findUser(Long.parseLong(userId))
        );
    }

    /**
     * Get user info by username.
     *
     * @param username username of the business system
     * @return UserInfo
     */
    @Override
    public UserInfo getByName(String username, String clientId) {
        return this.convert(
                this.findUser(username)
        );
    }

    private UserInfo convert(User user) {
        if (user == null) {
            return null;
        }
        return new UserInfo()
                .setId(String.valueOf(user.getId()))
                .setUsername(user.getUsername())
                .setEmail(user.getEmail());
    }

}

package com.liusuyun.flowersay.gateway.services;

import com.fujieid.jap.sso.JapMfaService;
import com.liusuyun.flowersay.common.entities.models.User;

import java.util.List;
import java.util.Map;
import java.util.concurrent.ConcurrentHashMap;

/**
 * @author 颖
 */
public class JapMfaServiceImpl extends JapService implements JapMfaService {

    /**
     * 根据帐号查询 secretKey
     *
     * @param userName 申请 secretKey 的用户
     * @return secretKey
     */
    @Override
    public String getSecretKey(String userName) {
        User user = this.findUser(userName);
        return user == null ? null : user.getSecret();
    }

    /**
     * 将 secretKey 关联 userName 后进行保存，可以存入数据库也可以存入其他缓存媒介中
     *
     * @param userName       用户名
     * @param secretKey      申请到的 secretKey
     * @param validationCode 当前计算出的 TOTP 验证码
     * @param scratchCodes   scratch 码
     */
    @Override
    public void saveUserCredentials(String userName, String secretKey, int validationCode, List<Integer> scratchCodes) {
        User user = this.findUser(userName);
        if(user == null) {
            throw new IllegalArgumentException();
        }

        user.setSecret(secretKey);
        this.userMapper.updateById(user);
    }

}

package com.liusuyun.flowersay.gateway.services;

import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
import com.fujieid.jap.core.JapUser;
import com.fujieid.jap.core.JapUserService;
import com.liusuyun.flowersay.common.entities.models.User;
import com.liusuyun.flowersay.common.entities.models.UserBinding;
import com.liusuyun.flowersay.common.mappers.UserBindingMapper;
import me.zhyd.oauth.config.AuthDefaultSource;
import me.zhyd.oauth.model.AuthUser;
import org.apache.ibatis.ext.solon.Db;
import org.mindrot.jbcrypt.BCrypt;
import org.noear.solon.annotation.Component;
import org.noear.solon.core.handle.Context;

import java.util.Locale;

/**
 * @author 颖
 */
public class JapUserServiceImpl extends JapService implements JapUserService {

    @Db
    UserBindingMapper userBindingMapper;
    public static String WE_CHAT_SOURCE_PREFIX = "WECHAT";

    @Override
    public JapUser getById(String userId) {
        return this.convert(
                this.findUser(Long.parseLong(userId))
        );
    }

    @Override
    public JapUser getByName(String username) {
        return this.convert(
                this.findUser(username)
        );
    }

    @Override
    public boolean validPassword(String password, JapUser user) {
        boolean success = BCrypt.checkpw(password, user.getPassword());

        if (success) {
            // 删除敏感数据
            user.setPassword(null);
        }

        return success;
    }

    /**
     * 根据第三方平台标识（platform）和第三方平台的用户 uid 查询数据库
     *
     * @param platform 第三方平台标识
     * @param uid      第三方平台的用户 uid
     * @return JapUser
     */
    @Override
    public JapUser getByPlatformAndUid(String platform, String uid) {
        QueryWrapper<UserBinding> queryWrapper = new QueryWrapper<>();
        queryWrapper.eq("platform", AuthDefaultSource.valueOf(platform.toUpperCase(Locale.ROOT)).ordinal());
        queryWrapper.eq("open_id", uid);

        UserBinding userBinding = this.userBindingMapper.selectOne(queryWrapper);
        if (userBinding == null) {
            return null;
        }

        return this.convert(
                this.findUser(userBinding.getUserId())
        );
    }

    /**
     * 创建并获取第三方用户，相当于第三方登录成功后，将授权关系保存到数据库（开发者业务系统中 social user -> sys user 的绑定关系）
     *
     * @param userInfo JustAuth 中的 AuthUser
     * @return JapUser
     */
    @Override
    public JapUser createAndGetSocialUser(Object userInfo) {
        AuthUser authUser = (AuthUser) userInfo;
        // 对 WeChat 系列产品的用户进行特殊处理
        if(authUser.getSource().toUpperCase(Locale.ROOT).startsWith(JapUserServiceImpl.WE_CHAT_SOURCE_PREFIX)) {
            String unionId = authUser.getRawUserInfo().getString("unionId");
            if(unionId != null) {
                authUser.setUuid(unionId);
            }
        }
        // 查询绑定关系，确定当前用户是否已经登录过业务系统
        JapUser user = this.getByPlatformAndUid(authUser.getSource(), authUser.getUuid());
        if (user == null) {
            // 判断用户是否登录
            user = (JapUser) Context.current().session("_jap:session:user");
            if (user == null) {
                return null;
            }
            user.setAdditional(authUser);
            // 添加用户
            this.userBindingMapper.insert(UserBinding.builder()
                    .userId(Long.valueOf(user.getUserId()))
                    .platform(AuthDefaultSource.valueOf(authUser.getSource().toUpperCase(Locale.ROOT)).ordinal())
                    .openId(authUser.getUuid())
                    .metadata(authUser.getRawUserInfo())
                    .build()
                    .buildDate());
        }
        return user;
    }

    private JapUser convert(User user) {
        if (user == null) {
            return null;
        }
        return new JapUser()
                .setUserId(String.valueOf(user.getId()))
                .setUsername(user.getUsername())
                .setPassword(user.getPassword())
                .setAdditional(user);
    }

}