提交开源任务材料

3 years ago · 0c22e8f174
23 changed files with 1404 additions and 1 deletions
--- a/JSD-8486-需求文档V1.docx
+++ b/JSD-8486-需求文档V1.docx
--- a/README.md
+++ b/README.md
@ -1,3 +1,6 @@
 # open-JSD-8486

-JSD-8486 开源任务材料
+JSD-8486 IDM单点+组织架构同步\
+免责说明：该源码为第三方爱好者提供，不保证源码和方案的可靠性，也不提供任何形式的源码教学指导和协助！\
+仅作为开发者学习参考使用！禁止用于任何商业用途！\
+为保护开发者隐私，开发者信息已隐去！若原开发者希望公开自己的信息，可联系hugh处理。
--- a/conf.properties
+++ b/conf.properties
@ -0,0 +1,17 @@
+##\u8BF7\u6C42\u7528\u6237\u4FE1\u606F\u7684\u63A5\u53E3
+userinfourl=
+##\u6821\u9A8Ctoken\u4FE1\u606F\u7684\u63A5\u53E3
+validationurl=
+##\u670D\u52A1\u7F16\u53F7
+servicecode=
+##\u670D\u52A1\u79D8\u94A5
+servicepwd=
+# \u63A5\u53E3\u6240\u9700\u7684\u53C2\u6570\u503C
+api.client_id=xxxx
+api.client_secret=xxxx
+# \u767B\u9646\u9875\u9762\u83B7\u53D6code\u5730\u5740
+api.authorize=https://xxxx/oauth2/authorize
+# \u83B7\u53D6access_token\u63A5\u53E3
+api.get-token=https://xxxx/oauth2/token
+# \u83B7\u53D6\u7528\u6237\u4FE1\u606F\u63A5\u53E3
+api.get-user=https://xxxx/oauth2/get_user_info
--- a/plugin.xml
+++ b/plugin.xml
@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?><plugin>
+    <id>com.fr.plugin.idm.sso</id>
+    <main-package>com.fr.plugin.idm.sso</main-package>
+    <name><![CDATA[idm单点]]></name>
+    <active>yes</active>
+    <version>1.8</version>
+    <env-version>10.0</env-version>
+    <jartime>2018-07-31</jartime>
+    <vendor>holger</vendor>
+    <description><![CDATA[idm单点]]></description>
+    <change-notes><![CDATA[
+      [1.7] 修改单点登陆方式为oauth2
+      [1.8] 添加原声登陆页面及静态资源放行
+    ]]></change-notes>
+    <extra-core>
+        <DBAccessProvider class="com.fr.plugin.idm.sso.RecordDBAccessProvider"/>
+    </extra-core>
+    <extra-decision>
+        <GlobalRequestFilterProvider class="com.fr.plugin.idm.sso.SsoFilter"/>
+    </extra-decision>
+    <function-recorder class="com.fr.plugin.idm.sso.SsoFilter"/>
+</plugin>
--- a/readme.txt
+++ b/readme.txt
@ -0,0 +1,7 @@
+此次完成功能如下
+	a、单点登录
+
+1、将压缩文件解压后的conf.properties配置文件拷贝至 %部署路径%/WEB-INF/resources, 并修改相应的属性配置
+2、安装本插件，插件安装见连接http://help.finereport.com/doc-view-2198.html
+3、进入系统测试单点登录
+   PC端访问地址为http://ip:port/webroot/decision
--- a/src/main/java/com/fr/plugin/idm/sso/BaseAction.java
+++ b/src/main/java/com/fr/plugin/idm/sso/BaseAction.java
@ -0,0 +1,62 @@
+package com.fr.plugin.idm.sso;
+
+import com.fr.general.IOUtils;
+import com.fr.json.JSONObject;
+import com.fr.json.revise.EmbedJson;
+import com.fr.stable.StringUtils;
+import com.fr.stable.db.entity.BaseEntity;
+import com.fr.third.fasterxml.jackson.databind.DeserializationFeature;
+import com.fr.third.fasterxml.jackson.databind.ObjectMapper;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.IOException;
+
+/**
+ * @Author fr.open
+ * @Date 2020/8/18
+ * @Description
+ **/
+public abstract class BaseAction {
+
+    /**
+     * 执行的业务方法
+     * @param req
+     * @param res
+     * @return
+     */
+    public abstract IdmResponse handel(HttpServletRequest req, HttpServletResponse res) throws Exception;
+
+    public <T> T getBody(HttpServletRequest req,Class<? extends BaseEntity>  t) throws IOException, SyncException {
+        String body = IOUtils.inputStream2String(req.getInputStream());
+        if(StringUtils.isBlank(body)){
+            throw new SyncException("body_is_null");
+        }
+        JSONObject jsonObject = new JSONObject(body);
+        if(jsonObject.isEmpty()){
+            throw new SyncException("json_is_null");
+        }
+        return (T) getEntity(jsonObject,t);
+
+
+    }
+
+    public JSONObject getBody(HttpServletRequest req) throws IOException, SyncException {
+        String body = IOUtils.inputStream2String(req.getInputStream());
+        if(StringUtils.isBlank(body)){
+            throw new SyncException("body_is_null");
+        }
+        JSONObject jsonObject = new JSONObject(body);
+        if(jsonObject.isEmpty()){
+            throw  new SyncException("json_is_null");
+        }
+        return jsonObject;
+
+
+    }
+
+    protected  <T> T getEntity(JSONObject object, Class<T> t) {
+        ObjectMapper mapper = EmbedJson.MAPPER.configure(DeserializationFeature.FAIL_ON_UNKNOWN_PROPERTIES, false);
+        return mapper.convertValue(object, t);
+    }
+}
--- a/src/main/java/com/fr/plugin/idm/sso/IdmResponse.java
+++ b/src/main/java/com/fr/plugin/idm/sso/IdmResponse.java
@ -0,0 +1,100 @@
+package com.fr.plugin.idm.sso;
+
+import com.fr.third.fasterxml.jackson.annotation.JsonInclude;
+
+import java.io.Serializable;
+import java.util.HashMap;
+
+/**
+ * @Author fr.open
+ * @Date 2020/12/10
+ * @Description
+ **/
+@JsonInclude(JsonInclude.Include.NON_DEFAULT)
+public class IdmResponse  implements Serializable {
+    private int status;
+    private String errorCode;
+    private String errorMsg;
+    private Object result;
+
+    public IdmResponse() {
+    }
+
+    public IdmResponse status(int var1) {
+        this.status = var1;
+        return this;
+    }
+
+    public IdmResponse errorCode(String var1) {
+        this.errorCode = var1;
+        return this;
+    }
+
+    public IdmResponse errorMsg(String var1) {
+        this.errorMsg = var1;
+        return this;
+    }
+
+    public IdmResponse data(Object var1) {
+        this.result = var1;
+        return this;
+    }
+
+    public Object getResult() {
+        return this.result;
+    }
+
+    public void setResult(Object var1) {
+        this.result = var1;
+    }
+
+    public String getErrorCode() {
+        return this.errorCode;
+    }
+
+    public void setErrorCode(String var1) {
+        this.errorCode = var1;
+    }
+
+    public String getErrorMsg() {
+        return this.errorMsg;
+    }
+
+    public void setErrorMsg(String var1) {
+        this.errorMsg = var1;
+    }
+
+    public int getStatus() {
+        return this.status;
+    }
+
+    public void setStatus(int var1) {
+        this.status = var1;
+    }
+
+    private static IdmResponse create() {
+        return new IdmResponse();
+    }
+
+    public static IdmResponse ok(Object var0) {
+        return create().data(var0);
+    }
+
+    public static IdmResponse success() {
+        return ok("0");
+    }
+
+    public static IdmResponse success(int var0) {
+        HashMap var1 = new HashMap();
+        var1.put("count", var0);
+        return ok(var1);
+    }
+
+    public static IdmResponse error(int var0, String var1, String var2) {
+        return create().status(var0).errorCode(var1).errorMsg(var2);
+    }
+
+    public static IdmResponse error(String var0, String var1) {
+        return create().errorCode(var0).errorMsg(var1);
+    }
+}
--- a/src/main/java/com/fr/plugin/idm/sso/PluginConstants.java
+++ b/src/main/java/com/fr/plugin/idm/sso/PluginConstants.java
@ -0,0 +1,11 @@
+package com.fr.plugin.idm.sso;
+
+/**
+ * @Author fr.open
+ * @Date 2021/9/15
+ * @Description
+ **/
+public class PluginConstants {
+
+    public static final String PLUGIN_ID = "com.fr.plugin.idm.sso";
+}
--- a/src/main/java/com/fr/plugin/idm/sso/RecordDBAccessProvider.java
+++ b/src/main/java/com/fr/plugin/idm/sso/RecordDBAccessProvider.java
@ -0,0 +1,69 @@
+package com.fr.plugin.idm.sso;
+
+import com.fr.db.fun.impl.AbstractDBAccessProvider;
+import com.fr.plugin.idm.sso.dao.OrgDao;
+import com.fr.plugin.idm.sso.dao.UserDao;
+import com.fr.plugin.idm.sso.dao.UserOrgDao;
+import com.fr.plugin.idm.sso.entity.OrgEntity;
+import com.fr.plugin.idm.sso.entity.UserEntity;
+import com.fr.plugin.idm.sso.entity.UserOrgEntity;
+import com.fr.stable.db.accessor.DBAccessor;
+import com.fr.stable.db.dao.BaseDAO;
+import com.fr.stable.db.dao.DAOProvider;
+
+/**
+ * @Author fr.open
+ * @Date 2020/5/24
+ **/
+public class RecordDBAccessProvider extends AbstractDBAccessProvider {
+
+    private static DBAccessor dbAccessor = null;
+
+    public static DBAccessor getDbAccessor() {
+        return dbAccessor;
+    }
+
+    @Override
+    public DAOProvider[] registerDAO() {
+        return new DAOProvider[]{
+                new DAOProvider() {
+                    @Override
+                    public Class getEntityClass() {
+                        return UserEntity.class;
+                    }
+
+                    @Override
+                    public Class<? extends BaseDAO> getDAOClass() {
+                        return UserDao.class;
+                    }
+                },
+                new DAOProvider() {
+                    @Override
+                    public Class getEntityClass() {
+                        return OrgEntity.class;
+                    }
+
+                    @Override
+                    public Class<? extends BaseDAO> getDAOClass() {
+                        return OrgDao.class;
+                    }
+                },
+                new DAOProvider() {
+                    @Override
+                    public Class getEntityClass() {
+                        return UserOrgEntity.class;
+                    }
+
+                    @Override
+                    public Class<? extends BaseDAO> getDAOClass() {
+                        return UserOrgDao.class;
+                    }
+                }
+        };
+    }
+
+    @Override
+    public void onDBAvailable(DBAccessor dbAccessor) {
+        RecordDBAccessProvider.dbAccessor = dbAccessor;
+    }
+}
--- a/src/main/java/com/fr/plugin/idm/sso/SsoFilter.java
+++ b/src/main/java/com/fr/plugin/idm/sso/SsoFilter.java
@ -0,0 +1,216 @@
+package com.fr.plugin.idm.sso;
+
+import com.fr.decision.fun.impl.AbstractGlobalRequestFilterProvider;
+import com.fr.decision.webservice.Response;
+import com.fr.decision.webservice.utils.WebServiceUtils;
+import com.fr.general.PropertiesUtils;
+import com.fr.general.http.HttpToolbox;
+import com.fr.intelli.record.Focus;
+import com.fr.intelli.record.Original;
+import com.fr.json.JSONObject;
+import com.fr.locale.InterProviderFactory;
+import com.fr.log.FineLoggerFactory;
+import com.fr.plugin.context.PluginContexts;
+import com.fr.plugin.idm.sso.action.OrgAction;
+import com.fr.plugin.idm.sso.action.UserAction;
+import com.fr.plugin.transform.FunctionRecorder;
+import com.fr.stable.StringUtils;
+import com.fr.stable.fun.Authorize;
+import com.fr.web.utils.WebUtils;
+
+import javax.servlet.FilterChain;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+
+import java.io.IOException;
+import java.io.PrintWriter;
+import java.net.URLEncoder;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Properties;
+import java.util.UUID;
+import java.util.stream.Stream;
+
+import static com.fr.plugin.idm.sso.util.CommonUtils.*;
+
+/**
+ * @Author fr.open
+ * @Date 2020/8/18
+ * @Description
+ **/
+@FunctionRecorder
+@Authorize(callSignKey = PluginConstants.PLUGIN_ID)
+public class SsoFilter extends AbstractGlobalRequestFilterProvider {
+
+    private final static String[] NOT_FILTER = {
+            "/decision/file",
+            "/decision/resources",
+            "/decision/login/config",
+            "/decision/system",
+            "/decision/login/slider",
+            "/decision/remote",
+            "/decision/login"
+    };
+
+    private String apiClientId;
+
+    private String apiClientSecret;
+
+    private String apiAuthorize;
+
+    private String apiGetToken;
+
+    private String apiGetUser;
+
+    private void initParams() {
+        Properties props = PropertiesUtils.getProperties("conf");
+        this.apiClientId = getProperty(props, "api.client_id", false);
+        this.apiAuthorize = getProperty(props, "api.authorize", false);
+        this.apiGetToken = getProperty(props, "api.get-token", false);
+        this.apiGetUser = getProperty(props, "api.get-user", false);
+        this.apiClientSecret = getProperty(props, "api.client_secret", false);
+    }
+
+    @Override
+    public String filterName() {
+        return "sso";
+    }
+
+    @Override
+    public String[] urlPatterns() {
+        return new String[]{"/*"};
+    }
+
+    @Override
+    @Focus(id = PluginConstants.PLUGIN_ID, text = "idm单点", source = Original.PLUGIN)
+    public void doFilter(HttpServletRequest req, HttpServletResponse res, FilterChain chain) {
+        if (!PluginContexts.currentContext().isAvailable()) {
+            next(req, res, chain);
+            return;
+        }
+
+        BaseAction action = null;
+        if (req.getRequestURI().endsWith("sync/org")) {
+            action = new OrgAction();
+        } else if (req.getRequestURI().endsWith("sync/user")) {
+            action = new UserAction();
+        }
+        if (action != null) {
+            executeAction(req, res, action);
+            return;
+        }
+        //执行单点登录
+        if (isAccept(req)) {
+            next(req, res, chain);
+            return;
+        }
+        try {
+            initParams();
+            String code = req.getParameter("code");
+            if (StringUtils.isBlank(code)) {
+                jumpAuthorize(req, res);
+                return;
+            }
+            login(getUsername(getToken(code, req)), req, res);
+            String state = req.getParameter("state");
+            if (StringUtils.isNotBlank(state)) {
+                String accessURL = getCachedParam(state, "accessURL");
+                if (StringUtils.isNotBlank(accessURL)) {
+                    res.sendRedirect(accessURL);
+                    return;
+                }
+            }
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().error("sso >>> 单点登陆处理失败", e);
+            setError(res, e.getMessage());
+        }
+
+        next(req, res, chain);
+    }
+
+    private boolean isAccept(HttpServletRequest request) {
+        String url = request.getRequestURL().toString();
+        if (Stream.of(NOT_FILTER).anyMatch(url::contains)) {
+            return true;
+        }
+        return isLogin(request);
+    }
+
+    private String getUsername(String token) throws IOException {
+        HashMap<String, String> params = new HashMap<>();
+        params.put("access_token", token);
+        String res = HttpToolbox.get(apiGetUser, params);
+        JSONObject body = new JSONObject(res);
+        if (body.has("name")) {
+            return body.getString("name");
+        }
+        throw new RuntimeException("获取用户信息失败，Cause by: " + res);
+    }
+
+    private String getToken(String code, HttpServletRequest request) throws IOException {
+        HashMap<String, String> params = new HashMap<>();
+        params.put("grant_type", "authorization_code");
+        params.put("code", code);
+        params.put("client_id", apiClientId);
+        params.put("client_secret", apiClientSecret);
+        params.put("redirect_uri", request.getRequestURL().toString());
+        String res = HttpToolbox.get(apiGetToken, params);
+        JSONObject body = new JSONObject(res);
+        if (body.has("access_token")) {
+            return body.getString("access_token");
+        }
+        throw new RuntimeException("获取access_token失败，Cause by: " + res);
+    }
+
+    private void jumpAuthorize(HttpServletRequest request, HttpServletResponse response) throws IOException {
+        String state = UUID.randomUUID().toString();
+        String accessURL = request.getRequestURI();
+        if (StringUtils.isNotBlank(request.getQueryString())) {
+            accessURL += "?" + request.getQueryString();
+        }
+        Map<String, String> params = new HashMap<>();
+        params.put("accessURL", accessURL);
+        cacheParams(state, params);
+        String address = String.format("%s?response_type=code&client_id=%s&state=%s&redirect_uri=%s", apiAuthorize, apiClientId, state, URLEncoder.encode(request.getRequestURL().toString(), "utf-8"));
+        FineLoggerFactory.getLogger().info("oauth2 >>> 请求中不包含code值，条转到登陆页面 >>> \"{}\"", address);
+        response.sendRedirect(address);
+    }
+
+    private void executeAction(HttpServletRequest req, HttpServletResponse res, BaseAction action) {
+        try {
+            IdmResponse response = action.handel(req, res);
+            WebUtils.printAsJSON(res, JSONObject.mapFrom(response));
+        } catch (SyncException e) {
+            try {
+                WebUtils.printAsJSON(res, JSONObject.mapFrom(Response.error(e.getMessage(), e.getMessage())));
+            } catch (Exception exception) {
+                FineLoggerFactory.getLogger().error(e.getMessage(),e);
+            }
+        } catch (Exception e) {
+            try {
+                FineLoggerFactory.getLogger().error(e.getMessage(),e);
+                WebUtils.printAsJSON(res, JSONObject.mapFrom(Response.error("unknown_error", e.getMessage())));
+            } catch (Exception exception) {
+                FineLoggerFactory.getLogger().error(e.getMessage(),e);
+            }
+        }
+    }
+
+    private void setError(HttpServletResponse res, String reason) {
+        try {
+            PrintWriter printWriter = WebUtils.createPrintWriter(res);
+            Map<String, Object> map = new HashMap<>();
+            map.put("result", InterProviderFactory.getProvider().getLocText("Fine-Engine_Error_Page_Result"));
+            map.put("reason", reason);
+            map.put("solution", InterProviderFactory.getProvider().getLocText("Fine-Engine_Please_Contact_Platform_Admin"));
+            String page = WebServiceUtils.parseWebPageResourceSafe("com/fr/web/controller/decision/entrance/resources/unavailable.html", map);
+            printWriter.write(page);
+            printWriter.flush();
+            printWriter.close();
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().error(e.getMessage(), e);
+        }
+    }
+
+
+}
--- a/src/main/java/com/fr/plugin/idm/sso/SyncException.java
+++ b/src/main/java/com/fr/plugin/idm/sso/SyncException.java
@ -0,0 +1,12 @@
+package com.fr.plugin.idm.sso;
+
+/**
+ * @Author fr.open
+ * @Date 2020/8/19
+ * @Description
+ **/
+public class SyncException extends Exception {
+    public SyncException(String message) {
+        super(message);
+    }
+}
--- a/src/main/java/com/fr/plugin/idm/sso/action/OrgAction.java
+++ b/src/main/java/com/fr/plugin/idm/sso/action/OrgAction.java
@ -0,0 +1,35 @@
+package com.fr.plugin.idm.sso.action;
+
+import com.fr.plugin.idm.sso.BaseAction;
+import com.fr.plugin.idm.sso.IdmResponse;
+import com.fr.plugin.idm.sso.RecordDBAccessProvider;
+import com.fr.plugin.idm.sso.dao.OrgDao;
+import com.fr.plugin.idm.sso.entity.OrgEntity;
+import com.fr.stable.db.action.DBAction;
+import com.fr.stable.db.dao.DAOContext;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.util.UUID;
+
+/**
+ * @Author fr.open
+ * @Date 2020/8/18
+ * @Description
+ **/
+public class OrgAction extends BaseAction {
+
+    @Override
+    public IdmResponse handel(HttpServletRequest req, HttpServletResponse res) throws Exception {
+        OrgEntity orgEntity = getBody(req,OrgEntity.class);
+        RecordDBAccessProvider.getDbAccessor().runDMLAction(new DBAction<OrgEntity>() {
+            @Override
+            public OrgEntity run(DAOContext daoContext) throws Exception {
+                orgEntity.setId(UUID.randomUUID().toString());
+                daoContext.getDAO(OrgDao.class).add(orgEntity);
+                return null;
+            }
+        });
+        return IdmResponse.ok("0");
+    }
+}
--- a/src/main/java/com/fr/plugin/idm/sso/action/UserAction.java
+++ b/src/main/java/com/fr/plugin/idm/sso/action/UserAction.java
@ -0,0 +1,83 @@
+package com.fr.plugin.idm.sso.action;
+
+import com.fr.json.JSONArray;
+import com.fr.json.JSONObject;
+import com.fr.plugin.db.PluginDBManager;
+import com.fr.plugin.idm.sso.BaseAction;
+import com.fr.plugin.idm.sso.IdmResponse;
+import com.fr.plugin.idm.sso.RecordDBAccessProvider;
+import com.fr.plugin.idm.sso.dao.UserDao;
+import com.fr.plugin.idm.sso.dao.UserOrgDao;
+import com.fr.plugin.idm.sso.entity.OrgEntity;
+import com.fr.plugin.idm.sso.entity.UserEntity;
+import com.fr.plugin.idm.sso.entity.UserOrgEntity;
+import com.fr.stable.db.action.DBAction;
+import com.fr.stable.db.dao.DAOContext;
+import com.fr.stable.db.session.DBSession;
+import com.fr.stable.query.QueryFactory;
+import com.fr.stable.query.restriction.RestrictionFactory;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.UUID;
+
+/**
+ * @Author fr.open
+ * @Date 2020/8/18
+ * @Description
+ **/
+public class UserAction extends BaseAction {
+
+    @Override
+    public IdmResponse handel(HttpServletRequest req, HttpServletResponse res) throws Exception {
+        JSONObject object = getBody(req);
+        JSONArray array = object.getJsonArray("userorgs");
+        List<UserOrgEntity> list = new ArrayList<>();
+        for (int i = 0; i < array.size();i++){
+           JSONObject jsonObject = array.getJSONObject(i);
+            UserOrgEntity userOrgEntity = jsonObject.mapTo(UserOrgEntity.class);
+            list.add(userOrgEntity);
+        }
+        object.remove("userorgs");
+        UserEntity user = this.getEntity(object,UserEntity.class);
+        RecordDBAccessProvider.getDbAccessor().runDMLAction(new DBAction<OrgEntity>() {
+            @Override
+            public OrgEntity run(DAOContext daoContext) throws Exception {
+                user.setId(UUID.randomUUID().toString());
+                UserDao userDao = daoContext.getDAO(UserDao.class);
+                UserOrgDao userOrgDao = daoContext.getDAO(UserOrgDao.class);
+                userDao.addOrUpdate(user);
+                userOrgDao.remove(QueryFactory.create().addRestriction(RestrictionFactory.eq("uid",user.getUid())));
+                for (UserOrgEntity userOrgEntity:list) {
+                    userOrgEntity.setId(UUID.randomUUID().toString());
+                    userOrgDao.add(userOrgEntity);
+                }
+                return null;
+            }
+        });
+
+
+        return IdmResponse.ok("0");
+    }
+
+    public void batchSubmit(List<UserOrgEntity> addData) throws Exception {//list里面的就是DBAccessProvider接口里面定义的entity对象
+        DBSession session = PluginDBManager.getInstance().getDbContext().openSession();
+        try {
+            session.beginTransaction();//开始事务
+            if (addData != null) {
+                for (Object addO : addData) {
+                    //添加更新的数据
+                    session.persist(addO);
+                }
+            }
+            session.commitTransaction();//提交
+            //
+            session.closeSession();
+        } catch (Exception e) {
+            session.rollbackTransaction();//回滚
+            throw e;
+        }
+    }
+}
--- a/src/main/java/com/fr/plugin/idm/sso/dao/OrgDao.java
+++ b/src/main/java/com/fr/plugin/idm/sso/dao/OrgDao.java
@ -0,0 +1,21 @@
+package com.fr.plugin.idm.sso.dao;
+
+import com.fr.plugin.idm.sso.entity.OrgEntity;
+import com.fr.stable.db.dao.BaseDAO;
+import com.fr.stable.db.session.DAOSession;
+
+/**
+ * @Author fr.open
+ * @Date 2020/8/19
+ * @Description
+ **/
+public class OrgDao extends BaseDAO<OrgEntity> {
+    public OrgDao(DAOSession daoSession) {
+        super(daoSession);
+    }
+
+    @Override
+    protected Class<OrgEntity> getEntityClass() {
+        return OrgEntity.class;
+    }
+}
--- a/src/main/java/com/fr/plugin/idm/sso/dao/UserDao.java
+++ b/src/main/java/com/fr/plugin/idm/sso/dao/UserDao.java
@ -0,0 +1,22 @@
+package com.fr.plugin.idm.sso.dao;
+
+import com.fr.plugin.idm.sso.entity.UserEntity;
+import com.fr.stable.db.dao.BaseDAO;
+import com.fr.stable.db.session.DAOSession;
+
+/**
+ * @Author fr.open
+ * @Date 2020/8/19
+ * @Description
+ **/
+public class UserDao extends BaseDAO<UserEntity> {
+
+    public UserDao(DAOSession daoSession) {
+        super(daoSession);
+    }
+
+    @Override
+    protected Class<UserEntity> getEntityClass() {
+        return UserEntity.class;
+    }
+}
--- a/src/main/java/com/fr/plugin/idm/sso/dao/UserOrgDao.java
+++ b/src/main/java/com/fr/plugin/idm/sso/dao/UserOrgDao.java
@ -0,0 +1,21 @@
+package com.fr.plugin.idm.sso.dao;
+
+import com.fr.plugin.idm.sso.entity.UserOrgEntity;
+import com.fr.stable.db.dao.BaseDAO;
+import com.fr.stable.db.session.DAOSession;
+
+/**
+ * @Author fr.open
+ * @Date 2020/8/19
+ * @Description
+ **/
+public class UserOrgDao extends BaseDAO<UserOrgEntity> {
+    public UserOrgDao(DAOSession daoSession) {
+        super(daoSession);
+    }
+
+    @Override
+    protected Class<UserOrgEntity> getEntityClass() {
+        return UserOrgEntity.class;
+    }
+}
--- a/src/main/java/com/fr/plugin/idm/sso/entity/OrgEntity.java
+++ b/src/main/java/com/fr/plugin/idm/sso/entity/OrgEntity.java
@ -0,0 +1,90 @@
+package com.fr.plugin.idm.sso.entity;
+
+import com.fr.stable.db.entity.BaseEntity;
+import com.fr.third.javax.persistence.Column;
+import com.fr.third.javax.persistence.Entity;
+import com.fr.third.javax.persistence.Table;
+
+/**
+ * @Author fr.open
+ * @Date 2020/8/18
+ * @Description
+ **/
+@Entity
+@Table(name = "plugin_sso_org")
+public class OrgEntity extends BaseEntity {
+
+    @Column(name = "orgtype")
+    private int orgtype;
+    @Column(name = "code")
+    private String code;
+    @Column(name = "name")
+    private String name;
+    @Column(name = "orderby")
+    private int orderby;
+    @Column(name = "oid")
+    private String oid;
+    @Column(name = "fullname")
+    private String fullname;
+    @Column(name = "poid")
+    private String poid;
+
+    public OrgEntity() {
+    }
+
+    public void setOrgtype(int orgtype) {
+        this.orgtype = orgtype;
+    }
+
+    public int getOrgtype() {
+        return orgtype;
+    }
+
+    public void setCode(String code) {
+        this.code = code;
+    }
+
+    public String getCode() {
+        return code;
+    }
+
+    public void setName(String name) {
+        this.name = name;
+    }
+
+    public String getName() {
+        return name;
+    }
+
+    public void setOrderby(int orderby) {
+        this.orderby = orderby;
+    }
+
+    public int getOrderby() {
+        return orderby;
+    }
+
+    public void setOid(String oid) {
+        this.oid = oid;
+    }
+
+    public String getOid() {
+        return oid;
+    }
+
+    public void setFullname(String fullname) {
+        this.fullname = fullname;
+    }
+
+    public String getFullname() {
+        return fullname;
+    }
+
+    public void setPoid(String poid) {
+        this.poid = poid;
+    }
+
+    public String getPoid() {
+        return poid;
+    }
+}
--- a/src/main/java/com/fr/plugin/idm/sso/entity/UserDTOEntity.java
+++ b/src/main/java/com/fr/plugin/idm/sso/entity/UserDTOEntity.java
@ -0,0 +1,75 @@
+package com.fr.plugin.idm.sso.entity;
+
+import com.fr.stable.db.entity.BaseEntity;
+import com.fr.third.javax.persistence.Column;
+import com.fr.third.javax.persistence.Entity;
+import com.fr.third.javax.persistence.Table;
+
+import java.util.List;
+
+/**
+ * @Author fr.open
+ * @Date 2020/8/18
+ * @Description
+ **/
+public class UserDTOEntity extends BaseEntity {
+
+    private String uid;
+    private int sex;
+    private List<UserOrgEntity> UserOrgs;
+    private String loginname;
+    private String mobilephone;
+    private String username;
+
+    public UserDTOEntity() {
+    }
+
+    public void setUid(String uid) {
+        this.uid = uid;
+    }
+
+    public String getUid() {
+        return uid;
+    }
+
+    public void setSex(int sex) {
+        this.sex = sex;
+    }
+
+    public int getSex() {
+        return sex;
+    }
+
+    public void setUserOrgs(List<UserOrgEntity> UserOrgs) {
+        this.UserOrgs = UserOrgs;
+    }
+
+    public List<UserOrgEntity> getUserOrgs() {
+        return UserOrgs;
+    }
+
+    public void setLoginname(String loginname) {
+        this.loginname = loginname;
+    }
+
+    public String getLoginname() {
+        return loginname;
+    }
+
+    public void setMobilephone(String mobilephone) {
+        this.mobilephone = mobilephone;
+    }
+
+    public String getMobilephone() {
+        return mobilephone;
+    }
+
+    public void setUsername(String username) {
+        this.username = username;
+    }
+
+    public String getUsername() {
+        return username;
+    }
+
+}
--- a/src/main/java/com/fr/plugin/idm/sso/entity/UserEntity.java
+++ b/src/main/java/com/fr/plugin/idm/sso/entity/UserEntity.java
@ -0,0 +1,73 @@
+package com.fr.plugin.idm.sso.entity;
+
+import com.fr.stable.db.entity.BaseEntity;
+import com.fr.third.javax.persistence.Column;
+import com.fr.third.javax.persistence.Entity;
+import com.fr.third.javax.persistence.Table;
+
+import java.util.List;
+
+/**
+ * @Author fr.open
+ * @Date 2020/8/18
+ * @Description
+ **/
+@Entity
+@Table(name = "plugin_sso_user")
+public class UserEntity extends BaseEntity {
+
+    @Column(name = "uid")
+    private String uid;
+    @Column(name = "sex")
+    private int sex;
+    @Column(name = "loginname")
+    private String loginname;
+    @Column(name = "mobilephone")
+    private String mobilephone;
+    @Column(name = "username")
+    private String username;
+
+    public UserEntity() {
+    }
+
+    public void setUid(String uid) {
+        this.uid = uid;
+    }
+
+    public String getUid() {
+        return uid;
+    }
+
+    public void setSex(int sex) {
+        this.sex = sex;
+    }
+
+    public int getSex() {
+        return sex;
+    }
+
+    public void setLoginname(String loginname) {
+        this.loginname = loginname;
+    }
+
+    public String getLoginname() {
+        return loginname;
+    }
+
+    public void setMobilephone(String mobilephone) {
+        this.mobilephone = mobilephone;
+    }
+
+    public String getMobilephone() {
+        return mobilephone;
+    }
+
+    public void setUsername(String username) {
+        this.username = username;
+    }
+
+    public String getUsername() {
+        return username;
+    }
+
+}
--- a/src/main/java/com/fr/plugin/idm/sso/entity/UserOrgEntity.java
+++ b/src/main/java/com/fr/plugin/idm/sso/entity/UserOrgEntity.java
@ -0,0 +1,69 @@
+package com.fr.plugin.idm.sso.entity;
+
+import com.fr.stable.db.entity.BaseEntity;
+import com.fr.third.javax.persistence.Column;
+import com.fr.third.javax.persistence.Entity;
+import com.fr.third.javax.persistence.Table;
+
+/**
+ * @Author fr.open
+ * @Date 2020/8/18
+ * @Description
+ **/
+@Entity
+@Table(name = "plugin_user_org")
+public class UserOrgEntity extends BaseEntity {
+    @Column(name = "uid")
+    private String uid;
+    @Column(name = "positionids")
+    private String positionids;
+    @Column(name = "oid")
+    private String oid;
+    @Column(name = "orderby")
+    private int orderby;
+    @Column(name = "jobids")
+    private String jobids;
+
+    public UserOrgEntity() {
+    }
+
+    public void setUid(String uid) {
+        this.uid = uid;
+    }
+
+    public String getUid() {
+        return uid;
+    }
+
+    public void setPositionids(String positionids) {
+        this.positionids = positionids;
+    }
+
+    public String getPositionids() {
+        return positionids;
+    }
+
+    public void setOid(String oid) {
+        this.oid = oid;
+    }
+
+    public String getOid() {
+        return oid;
+    }
+
+    public void setOrderby(int orderby) {
+        this.orderby = orderby;
+    }
+
+    public int getOrderby() {
+        return orderby;
+    }
+
+    public void setJobids(String jobids) {
+        this.jobids = jobids;
+    }
+
+    public String getJobids() {
+        return jobids;
+    }
+}
--- a/src/main/java/com/fr/plugin/idm/sso/util/CommonUtils.java
+++ b/src/main/java/com/fr/plugin/idm/sso/util/CommonUtils.java
@ -0,0 +1,132 @@
+package com.fr.plugin.idm.sso.util;
+
+import com.fr.data.NetworkHelper;
+import com.fr.decision.authority.data.User;
+import com.fr.decision.mobile.terminal.TerminalHandler;
+import com.fr.decision.webservice.utils.DecisionServiceConstants;
+import com.fr.decision.webservice.utils.DecisionStatusService;
+import com.fr.decision.webservice.v10.login.LoginService;
+import com.fr.decision.webservice.v10.login.TokenResource;
+import com.fr.decision.webservice.v10.user.UserService;
+import com.fr.log.FineLoggerFactory;
+import com.fr.stable.StringUtils;
+import com.fr.stable.web.Device;
+import com.fr.web.utils.WebUtils;
+
+import javax.servlet.FilterChain;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.util.Map;
+import java.util.Properties;
+
+/**
+ * @author fr.open
+ * @since 2021/8/27
+ */
+public class CommonUtils {
+
+    public static String getProperty(Properties props, String key, String defaultValue, boolean allowBlank) {
+        String value = props.getProperty(key);
+        if (StringUtils.isNotBlank(value)) {
+            return value;
+        } else {
+            if (allowBlank) {
+                FineLoggerFactory.getLogger().warn("Property[" + key + "] value is blank.");
+                return defaultValue;
+            } else {
+                throw new IllegalArgumentException("Property[" + key + "] cann't be blank.");
+            }
+        }
+    }
+
+    public static String getProperty(Properties props, String key, boolean allowBlank) {
+        return getProperty(props, key, null, allowBlank);
+    }
+
+    public static String getProperty(Properties props, String key) {
+        return getProperty(props, key, null, true);
+    }
+
+    public static boolean isLogin(HttpServletRequest request) {
+        String oldToken = TokenResource.COOKIE.getToken(request);
+        return oldToken != null && checkTokenValid(request, (String) oldToken);
+    }
+
+    private static boolean checkTokenValid(HttpServletRequest req, String token) {
+        try {
+            Device device = NetworkHelper.getDevice(req);
+            LoginService.getInstance().loginStatusValid(token, TerminalHandler.getTerminal(req, device));
+            return true;
+        } catch (Exception ignore) {
+        }
+        return false;
+    }
+
+    /**
+     * 跳转到过滤器链中的下一个过滤器
+     *
+     * @param request
+     * @param response
+     * @param chain
+     */
+    public static void next(HttpServletRequest request, HttpServletResponse response, FilterChain chain) {
+        try {
+            chain.doFilter(request, response);
+        } catch (Exception e) {
+            throw new RuntimeException(e);
+        }
+    }
+
+    public static void login(String username, HttpServletRequest request, HttpServletResponse response) {
+        try {
+            User user = UserService.getInstance().getUserByUserName(username);
+            if (user == null) {
+                throw new RuntimeException("系统未授权, 当前用户是\"" + username + "\"");
+            }
+            String token = LoginService.getInstance().login(request, response, username);
+            request.setAttribute(DecisionServiceConstants.FINE_AUTH_TOKEN_NAME, token);
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().error("sso >> Failed to login with[" + username + "]", e);
+            throw new RuntimeException("用户\"" + username +"\"登录失败");
+        }
+    }
+
+    public static boolean isMobileDevice(HttpServletRequest request) {
+        if (WebUtils.getDevice(request).isMobile()) {
+            FineLoggerFactory.getLogger().info("current request is is mobile request ,url is {}", request.getRequestURI());
+            return true;
+        }
+        String requestHeader = request.getHeader("user-agent");
+        String[] deviceArray = new String[]{"android", "iphone", "ipad", "ios", "windows phone", "wechat"};
+        if (requestHeader == null) {
+            return false;
+        }
+        requestHeader = requestHeader.toLowerCase();
+        for (int i = 0; i < deviceArray.length; i++) {
+            if (requestHeader.toLowerCase().contains(deviceArray[i])) {
+                FineLoggerFactory.getLogger().info("current request:{} is mobile request!", request.getRequestURI());
+                return true;
+            }
+        }
+        String op = WebUtils.getHTTPRequestParameter(request, "op");
+        return StringUtils.isNotBlank(op) && StringUtils.equals("h5",op);
+    }
+
+    public static void cacheParams(String key, Map<String, String> values) {
+        try {
+            DecisionStatusService.originUrlStatusService().put(key, values);
+        } catch (Exception e) {
+            throw new RuntimeException(e);
+        }
+    }
+
+    public static String getCachedParam(String key, String name) {
+        try {
+            Map<String, String> values = DecisionStatusService.originUrlStatusService().get(key);
+            return values.get(name);
+        } catch (Exception e) {
+            throw new RuntimeException(e);
+        }
+    }
+
+}
--- a/src/main/java/com/fr/plugin/idm/sso/util/HttpUtil.java
+++ b/src/main/java/com/fr/plugin/idm/sso/util/HttpUtil.java
@ -0,0 +1,246 @@
+package com.fr.plugin.idm.sso.util;
+
+import com.fr.json.JSONObject;
+import com.fr.log.FineLoggerFactory;
+import com.fr.stable.StringUtils;
+
+import javax.net.ssl.HostnameVerifier;
+import javax.net.ssl.HttpsURLConnection;
+import javax.net.ssl.SSLSession;
+import java.io.*;
+import java.net.HttpURLConnection;
+import java.net.URL;
+import java.net.URLConnection;
+import java.net.URLEncoder;
+import java.util.HashMap;
+import java.util.Iterator;
+import java.util.Map;
+import java.util.Set;
+import java.util.stream.Collectors;
+
+/**
+ * @author fr.open
+ * @date 2019/4/2
+ */
+public class HttpUtil {
+
+    private static HostnameVerifier hv = new HostnameVerifier() {
+        @Override
+        public boolean verify(String urlHostName, SSLSession session) {
+            System.out.println("Warning: URL Host: " + urlHostName + " vs. "
+                    + session.getPeerHost());
+            return true;
+        }
+    };
+
+    /**
+     * 发送get请求
+     *
+     * @param url
+     * @param param
+     * @param header
+     * @return
+     * @throws IOException
+     */
+    public static String sendGet(String url, Map<String, String> param, Map<String, String> header) {
+        String result = "";
+        BufferedReader in = null;
+        String urlNameString = url;
+        try {
+        if (param != null) {
+            urlNameString += "?";
+            urlNameString += param.entrySet()
+                    .stream()
+                    .map(entry -> entry.getKey() + "=" + entry.getValue())
+                    .collect(Collectors.joining("&"));
+        }
+
+        URL realUrl = new URL(urlNameString);
+        // 打开和URL之间的连接
+        HttpURLConnection connection;
+        if (url.startsWith("https")) {
+            trustAllHttpsCertificates();
+            HttpsURLConnection.setDefaultHostnameVerifier(hv);
+            connection = (HttpURLConnection) realUrl.openConnection();
+        } else {
+            connection = (HttpURLConnection) realUrl.openConnection();
+        }
+        //设置超时时间
+        connection.setDoInput(true);
+        connection.setRequestMethod("GET");
+        connection.setConnectTimeout(5000);
+        connection.setReadTimeout(15000);
+        // 设置通用的请求属性
+        if (header != null) {
+            Iterator<Map.Entry<String, String>> it = header.entrySet().iterator();
+            while (it.hasNext()) {
+                Map.Entry<String, String> entry = it.next();
+                System.out.println(entry.getKey() + ":::" + entry.getValue());
+                connection.setRequestProperty(entry.getKey(), entry.getValue());
+            }
+        }
+        connection.setRequestProperty("accept", "*/*");
+        connection.setRequestProperty("connection", "Keep-Alive");
+        connection.setRequestProperty("user-agent", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");
+        // 建立实际的连接
+        connection.connect();
+        // 定义 BufferedReader输入流来读取URL的响应，设置utf8防止中文乱码
+        in = new BufferedReader(new InputStreamReader(connection.getInputStream(), "utf-8"));
+        String line;
+        while ((line = in.readLine()) != null) {
+            result += line;
+        }
+        if (in != null) {
+            in.close();
+        }
+        }catch (Exception e){
+            FineLoggerFactory.getLogger().error(e,"get url error ,url is:{},error is {}",urlNameString,e.getMessage());
+        }
+        return result;
+    }
+
+    public static String sendPost(String url,Map<String,String> header, Map<String, String> param) {
+        PrintWriter out = null;
+        BufferedReader in = null;
+        String result = StringUtils.EMPTY;
+        String res = StringUtils.EMPTY;
+        try {
+            String urlNameString = url;
+            /*if (param != null && !param.isEmpty()) {
+                urlNameString += "?";
+                urlNameString += param.entrySet()
+                        .stream()
+                        .map(entry -> entry.getKey() + "=" + entry.getValue())
+                        .collect(Collectors.joining("&"));
+            }*/
+
+            URL realUrl = new URL(urlNameString);
+            // 打开和URL之间的连接
+            HttpURLConnection conn;
+            if (url.startsWith("https")) {
+                trustAllHttpsCertificates();
+                HttpsURLConnection.setDefaultHostnameVerifier(hv);
+                conn = (HttpURLConnection) realUrl.openConnection();
+            } else {
+                conn = (HttpURLConnection) realUrl.openConnection();
+            }
+            // 设置通用的请求属性
+            conn.setRequestProperty("accept", "*/*");
+            conn.setRequestProperty("connection", "Keep-Alive");
+            conn.setRequestProperty("user-agent",
+                    "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");
+            //conn.setRequestProperty("Content-Type","application/json;;charset=UTF-8");
+            conn.setRequestProperty("Content-Type", "multipart/form-data; boundary=----footfoodapplicationrequestnetwork");
+            if(header != null){
+                header.forEach((k, v) -> {
+                    conn.setRequestProperty(k, v);
+                });
+            }
+            // 发送POST请求必须设置如下两行
+            conn.setDoOutput(true);
+            conn.setDoInput(true);
+            //获取请求头
+
+            // 获取URLConnection对象对应的输出流
+            out = new PrintWriter(conn.getOutputStream());
+            StringBuffer buffer = new StringBuffer();
+            param.forEach((k,v)->{
+                buffer.append("------footfoodapplicationrequestnetwork\r\n");
+                buffer.append("Content-Disposition: form-data; name=\"");
+                buffer.append(k);
+                buffer.append("\"\r\n\r\n");
+                buffer.append(v);
+                buffer.append("\r\n");
+            });
+            buffer.append("------footfoodapplicationrequestnetwork--\r\n");
+            out.print(buffer.toString());
+            /*// 发送请求参数
+            if(body != null){
+                out.print(body.toString());
+            }*/
+            // flush输出流的缓冲
+            out.flush();
+            // 定义BufferedReader输入流来读取URL的响应
+            in = new BufferedReader(
+                    new InputStreamReader(conn.getInputStream()));
+            String line;
+            while ((line = in.readLine()) != null) {
+                result += line;
+            }
+            res = result;
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().error(e.getMessage(),e);
+        }
+        //使用finally块来关闭输出流、输入流
+        finally{
+            try{
+                if(out!=null){
+                    out.close();
+                }
+                if(in!=null){
+                    in.close();
+                }
+            }
+            catch(IOException e){
+                FineLoggerFactory.getLogger().error(e.getMessage(),e);
+            }
+        }
+        return res;
+    }
+
+    private static void trustAllHttpsCertificates() throws Exception {
+        javax.net.ssl.TrustManager[] trustAllCerts = new javax.net.ssl.TrustManager[1];
+        javax.net.ssl.TrustManager tm = new miTM();
+        trustAllCerts[0] = tm;
+        javax.net.ssl.SSLContext sc = javax.net.ssl.SSLContext.getInstance("SSL","SunJSSE");
+        sc.init(null, trustAllCerts, null);
+        HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
+    }
+    
+
+    /**
+     * encode url by UTF-8
+     * @param url url before encoding
+     * @return url after encoding
+     */
+    public static String encodeUrl(String url){
+        String eurl = url;
+        try {
+            eurl = URLEncoder.encode(url,"UTF-8");
+        } catch (UnsupportedEncodingException e) {
+        }
+        return eurl;
+    }
+
+    private static class miTM implements javax.net.ssl.TrustManager,
+            javax.net.ssl.X509TrustManager {
+        @Override
+        public java.security.cert.X509Certificate[] getAcceptedIssuers() {
+            return null;
+        }
+
+        public boolean isServerTrusted(
+                java.security.cert.X509Certificate[] certs) {
+            return true;
+        }
+
+        public boolean isClientTrusted(
+                java.security.cert.X509Certificate[] certs) {
+            return true;
+        }
+
+        @Override
+        public void checkServerTrusted(
+                java.security.cert.X509Certificate[] certs, String authType)
+                throws java.security.cert.CertificateException {
+            return;
+        }
+
+        @Override
+        public void checkClientTrusted(
+                java.security.cert.X509Certificate[] certs, String authType)
+                throws java.security.cert.CertificateException {
+            return;
+        }
+    }
+}
--- a/src/main/resources/conf.properties
+++ b/src/main/resources/conf.properties
@ -0,0 +1,17 @@
+##\u8BF7\u6C42\u7528\u6237\u4FE1\u606F\u7684\u63A5\u53E3
+userinfourl=
+##\u6821\u9A8Ctoken\u4FE1\u606F\u7684\u63A5\u53E3
+validationurl=
+##\u670D\u52A1\u7F16\u53F7
+servicecode=
+##\u670D\u52A1\u79D8\u94A5
+servicepwd=
+# \u63A5\u53E3\u6240\u9700\u7684\u53C2\u6570\u503C
+api.client_id=xxxx
+api.client_secret=xxxx
+# \u767B\u9646\u9875\u9762\u83B7\u53D6code\u5730\u5740
+api.authorize=https://xxxx/oauth2/authorize
+# \u83B7\u53D6access_token\u63A5\u53E3
+api.get-token=https://xxxx/oauth2/token
+# \u83B7\u53D6\u7528\u6237\u4FE1\u606F\u63A5\u53E3
+api.get-user=https://xxxx/oauth2/get_user_info