1.实名制和统一平台登录功能

王通
1 parent 73715d80
Showing 16 changed files with 635 additions and 171 deletions
src/main/java/com/bsth/common/Constants.java
src/main/java/com/bsth/controller/IndexController.java
src/main/java/com/bsth/controller/realcontrol/AdminUtilsController.java
src/main/java/com/bsth/controller/sys/UserController.java
src/main/java/com/bsth/entity/sys/SecurityUser.java
src/main/java/com/bsth/entity/sys/SysUser.java
src/main/java/com/bsth/repository/sys/SysUserRepository.java
src/main/java/com/bsth/security/SsoConfig.java
src/main/java/com/bsth/security/WebSecurityConfig.java
src/main/java/com/bsth/security/handler/CustomLogoutSuccessHandler.java
src/main/java/com/bsth/service/sys/SysUserService.java
src/main/java/com/bsth/service/sys/impl/SysUserServiceImpl.java
src/main/resources/application-cloud.properties
src/main/resources/datatools/config-prod.properties
src/main/resources/static/index.html
src/main/resources/static/pages/permission/user/jobCode.html
@@ -14,7 +14,8 @@ public class Constants {
 	 * 不需要拦截的资源
 	 */
 	public static final String LOGIN = "/user/login/**";
-	public static final String LOGIN_PAGE = "/login.html";
+	public static final String ORIGINAL_LOGIN_PAGE = "/login.html";
+	public static String LOGIN_PAGE = "/login.html";
 	public static final String ASSETS_URL = "/assets/**";
 	public static final String FAVICON_URL = "/favicon.ico";
 	public static final String METRONIC_URL = "/metronic_v4.5.4/**";
@@ -63,4 +64,6 @@ public class Constants {
 	public static final String WEAK_CIPHER = "weakCipher";
 	public static final String FILE_AUTH = "/.well-known/pki-validation/fileauth.txt";
+
+	public static final String SSO_TOKEN = "ssoToken";
 }
-package com.bsth.controller;
-
-import java.io.BufferedInputStream;
-import java.io.IOException;
-import java.io.InputStream;
-
-import javax.servlet.http.HttpServletResponse;
-
-import org.apache.commons.lang3.StringUtils;
-import org.slf4j.Logger;
-import org.slf4j.LoggerFactory;
-import org.springframework.web.bind.annotation.RequestMapping;
-import org.springframework.web.bind.annotation.RestController;
-
-@RestController
-@RequestMapping("/")
-public class IndexController {
-
-	Logger logger = LoggerFactory.getLogger(this.getClass());
-
-	String indexSource;
-
-	/**
-	 * 构造函数
-	 */
-	public IndexController() {
-		BufferedInputStream bis = null;
-
-		try {
-			InputStream is = IndexController.class.getClassLoader().getResourceAsStream("static/index.html");
-			bis = new BufferedInputStream(is);
-			StringBuilder source = new StringBuilder();
-			byte[] buffer = new byte[bis.available()];
-
-			while (bis.read(buffer) != -1) {
-				source.append(new String(buffer));
-			}
-
-			indexSource = source.toString();
-		} catch (Exception e) {
-			logger.error("", e);
-		} finally {
-			try {
-				bis.close();
-			} catch (IOException e) {
-				logger.error("", e);
-			}
-		}
-	}
-
-	/**
-	 * 
-	 * @Title: index 
-	 * @Description: TODO(输出首页 index.html) 
-	 */
-	@RequestMapping
-	public void index(String initFragment, HttpServletResponse resp) {
-
-		// 初始打开的片段地址
-		String outStr = StringUtils.replace(indexSource, "^_^initFragment^_^",
-				initFragment == null ? "" : initFragment);
-
-		resp.setContentType("text/html;charset=UTF-8");
-		try {
-			resp.getOutputStream().write(outStr.getBytes());
-		} catch (IOException e) {
-			logger.error("", e);
-		}
-
-	}
-}
+package com.bsth.controller;
+
+import java.io.BufferedInputStream;
+import java.io.IOException;
+import java.io.InputStream;
+
+import javax.servlet.http.HttpServletResponse;
+
+import org.apache.commons.lang3.StringUtils;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestMethod;
+import org.springframework.web.bind.annotation.RestController;
+
+@RestController
+@RequestMapping("/")
+public class IndexController {
+
+	Logger logger = LoggerFactory.getLogger(this.getClass());
+
+	String indexSource;
+
+	/**
+	 * 构造函数
+	 */
+	public IndexController() {
+		load();
+	}
+
+	/**
+	 * 
+	 * @Title: index 
+	 * @Description: TODO(输出首页 index.html) 
+	 */
+	@RequestMapping
+	public void index(String initFragment, HttpServletResponse resp) {
+
+		// 初始打开的片段地址
+		String outStr = StringUtils.replace(indexSource, "^_^initFragment^_^",
+				initFragment == null ? "" : initFragment);
+
+		resp.setContentType("text/html;charset=UTF-8");
+		try {
+			resp.getOutputStream().write(outStr.getBytes());
+		} catch (IOException e) {
+			logger.error("", e);
+		}
+
+	}
+
+	@RequestMapping(value = "/index/load", method = RequestMethod.GET)
+	public void load() {
+		BufferedInputStream bis = null;
+
+		try {
+			InputStream is = IndexController.class.getClassLoader().getResourceAsStream("static/index.html");
+			bis = new BufferedInputStream(is);
+			StringBuilder source = new StringBuilder();
+			byte[] buffer = new byte[bis.available()];
+
+			while (bis.read(buffer) != -1) {
+				source.append(new String(buffer));
+			}
+
+			indexSource = source.toString();
+		} catch (Exception e) {
+			logger.error("", e);
+		} finally {
+			try {
+				bis.close();
+			} catch (IOException e) {
+				logger.error("", e);
+			}
+		}
+	}
+}
@@ -7,6 +7,7 @@ import java.util.*;
 import com.bsth.common.Setting;
 import com.bsth.data.BasicData;
+import com.bsth.security.SsoConfig;
 import com.bsth.service.schedule.utils.SpringUtils;
 import com.bsth.util.MailUtils;
 import com.fasterxml.jackson.core.JsonProcessingException;
@@ -65,13 +66,16 @@ public class AdminUtilsController {
     PilotReport pilotReport;
     @Autowired
-    MailUtils mailUtils;
+    private MailUtils mailUtils;
     @Autowired
-    BasicData.BasicDataLoader basicDataLoader;
+    private BasicData.BasicDataLoader basicDataLoader;
     @Autowired
-    Setting setting;
+    private Setting setting;
+
+    @Autowired
+    private SsoConfig ssoConfig;
     /**
      * 出现重复班次的车辆
@@ -326,4 +330,17 @@ public class AdminUtilsController {
         return "error";
     }
+
+    @RequestMapping("/ssoEnabledSwitch")
+    public String ssoEnabledSwitch(boolean ssoEnabled) {
+        Map<String, Object> result = new HashMap<>();
+        try {
+            ssoConfig.setSsoEnabled(ssoEnabled);
+            return "success";
+        } catch (Exception e) {
+            e.printStackTrace();
+        }
+
+        return "error";
+    }
 }
 \ No newline at end of file
@@ -9,25 +9,32 @@ import com.bsth.email.entity.EmailBean;
 import com.bsth.entity.sys.CompanyAuthority;
 import com.bsth.entity.sys.Role;
 import com.bsth.entity.sys.SysUser;
+import com.bsth.security.SsoConfig;
 import com.bsth.security.util.SecurityUtils;
 import com.bsth.service.sys.CompanyAuthorityService;
 import com.bsth.service.sys.SysUserService;
 import com.bsth.service.sys.impl.PwdGenerator;
+import com.bsth.util.HttpClientUtils;
 import com.bsth.util.IpUtils;
+import com.fasterxml.jackson.core.JsonProcessingException;
+import com.fasterxml.jackson.databind.ObjectMapper;
 import com.google.common.collect.ArrayListMultimap;
 import org.apache.commons.lang3.StringUtils;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Value;
 import org.springframework.security.authentication.BadCredentialsException;
 import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
 import org.springframework.security.web.authentication.session.SessionAuthenticationException;
+import org.springframework.util.Assert;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RequestMethod;
 import org.springframework.web.bind.annotation.RequestParam;
 import org.springframework.web.bind.annotation.RestController;
 import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
 import javax.servlet.http.HttpSession;
 import java.util.*;
 import java.util.regex.Matcher;
@@ -45,6 +52,11 @@ public class UserController extends BaseController&lt;SysUser, Integer&gt; {
     @Autowired
     CompanyAuthorityService companyAuthorityService;
+    private ObjectMapper mapper = new ObjectMapper();
+
+    @Autowired
+    private SsoConfig ssoConfig;
+
     private Pattern pattern = Pattern.compile("^(?=.*[a-z])(?=.*[A-Z])(?=.*\\d)(?=.*?[#?!@$%^&*-.]).{8,16}$");
     @RequestMapping(value = "/login/jCryptionKey")
@@ -65,6 +77,66 @@ public class UserController extends BaseController&lt;SysUser, Integer&gt; {
     public static Map<String, Integer> USER_ERRTIMES = new HashMap<>();
     public static Map<String, Long> USER_LOCKTIME = new HashMap<>();
+    @RequestMapping(value = "/login/token")
+    public void login(@RequestParam String token, @RequestParam String account, @RequestParam Long time, HttpServletRequest request, HttpServletResponse response) throws Exception {
+        response.addHeader("Content-Type", "text/html;charset=UTF-8");
+        if (!ssoConfig.isSsoEnabled()) {
+            response.getWriter().write("系统未开启统一登录配置，请联系管理员");
+            return;
+        }
+        if (token == null || account == null || time == null) {
+            throw new IllegalArgumentException("请检查参数");
+        }
+
+        Map<String, Object> param = new HashMap<>(), user = new HashMap<>();
+        param.put("token", token);
+        param.put("systemCode", ssoConfig.getSystemCode());
+        StringBuilder sb = HttpClientUtils.post(ssoConfig.getSsoAuthUrl(), mapper.writeValueAsString(param));
+
+        Assert.notNull(sb, "统一登录平台验证数据不为空");
+        param = mapper.readValue(mapper.writeValueAsString(mapper.readValue(sb.toString(), Map.class).get("data")), Map.class);
+        String jobCode = (String) param.get("account"), realName = (String) param.get("userName");
+        if (!account.equals(jobCode)) {
+            response.getWriter().write("token与用户不匹配");
+            return;
+        }
+
+        if (jobCode == null || realName == null) {
+            response.getWriter().write("token数据异常");
+            return;
+        }
+
+        user.put("jobCode_eq", jobCode);
+        user.put("realName_eq", realName);
+        user.put("enabled", true);
+
+        Iterator<SysUser> userIterator = sysUserService.list(user).iterator();
+        SysUser sysUser = null;
+        while (userIterator.hasNext()) {
+            sysUser = userIterator.next();
+            break;
+        }
+
+        if (sysUser != null) {
+            HttpSession session = request.getSession();
+            // 登录
+            SecurityUtils.login(sysUser, request);
+            sysUserService.recordLoginDate(sysUser.getUserName());
+            //session里写入用户名，webSocket连接时标识身份用
+            session.setAttribute(Constants.SSO_TOKEN, token);
+            session.setAttribute(Constants.SESSION_USERNAME, sysUser.getUserName());
+            //获取公司权限数据
+            List<CompanyAuthority> cmyAuths = companyAuthorityService.findByUser(sysUser);
+            session.setAttribute(Constants.COMPANY_AUTHORITYS, cmyAuths);
+
+            USER_ERRTIMES.remove(sysUser.getUserName());
+            logger.error(String.format("用户: %s登录, token: %s",sysUser.getUserName(), token));
+            response.sendRedirect("/pages/home.html");
+        } else {
+            response.getWriter().write("未找到有效的用户，请联系管理员");
+        }
+    }
+
     @RequestMapping(value = "/login", method = RequestMethod.POST)
     public Map<String, Object> login(HttpServletRequest request, @RequestParam String userName,
                                      @RequestParam String password, String captcha) {
@@ -372,7 +444,7 @@ public class UserController extends BaseController&lt;SysUser, Integer&gt; {
     }
     /**
-     * 解除临时锁定
+     * 弱密码
      * @param request
      * @return
      */
@@ -385,4 +457,65 @@ public class UserController extends BaseController&lt;SysUser, Integer&gt; {
         return result;
     }
+    /**
+     * 弱密码
+     * @return
+     */
+    @RequestMapping(value = "/isRealName", method = RequestMethod.POST)
+    public Map<String, Object> hasJobCode() {
+        Map<String, Object> result = new HashMap<>();
+        SysUser user = SecurityUtils.getCurrentUser();
+        result.put("status", ResponseCode.SUCCESS);
+        result.put("data", (StringUtils.isBlank(user.getJobCode()) || StringUtils.isBlank(user.getRealName())) ? 0 : 1);
+
+        return result;
+    }
+
+    // 重置密码
+    @RequestMapping(value = "/realName", method = RequestMethod.POST)
+    public Map<String, Object> setJobCode(@RequestParam String jobCode, @RequestParam String realName) throws Exception {
+        Map<String, Object> data = new HashMap<>(), result = new HashMap<>();
+        result.put("status", ResponseCode.ERROR);
+        result.put("data", "设置成功");
+
+        if (jobCode == null || realName == null) {
+            result.put("data", "你跳过验证了是吧");
+            return result;
+        }
+        data.put("account", jobCode);
+        data.put("pageSize", 2);
+        data.put("pageNum", 1);
+        StringBuilder stringBuilder = HttpClientUtils.post("https://112.64.45.51/businessCenter/userInfo/queryUserList", mapper.writeValueAsString(data));
+        if (stringBuilder == null) {
+            result.put("data", "统一平台验证失败1");
+            return result;
+        } else {
+            List<Map<String, Object>> maps = mapper.readValue(mapper.writeValueAsString(((Map) mapper.readValue(stringBuilder.toString(), Map.class).get("data")).get("list")), mapper.getTypeFactory().constructParametricType(List.class, Map.class));
+            if (maps.size() == 0) {
+                result.put("data", "统一平台验证失败2");
+                return result;
+            } else {
+                boolean isAuth = false;
+                for (Map<String, Object> map : maps) {
+                    if (realName.equals(map.get("name"))) {
+                        isAuth = true;
+                        break;
+                    }
+                }
+                if (!isAuth) {
+                    result.put("data", "统一平台验证失败3");
+                    return result;
+                }
+            }
+        }
+
+        SysUser user = SecurityUtils.getCurrentUser();
+        sysUserService.realName(jobCode, realName, user.getId());
+        user.setJobCode(jobCode);
+        user.setRealName(realName);
+
+        result.put("status", ResponseCode.SUCCESS);
+        return result;
+    }
+
 }
-package com.bsth.entity.sys;
-
-import java.util.ArrayList;
-import java.util.Collection;
-import java.util.Set;
-
-import org.springframework.security.core.GrantedAuthority;
-import org.springframework.security.core.authority.SimpleGrantedAuthority;
-import org.springframework.security.core.userdetails.UserDetails;
-
-public class SecurityUser extends SysUser implements UserDetails {
-
-	private static final long serialVersionUID = 1L;
-
-	public SecurityUser(SysUser user) {
-		if (null != user) {
-			this.setId(user.getId());
-			this.setUserName(user.getUserName());
-			this.setName(user.getName());
-			this.setPassword(user.getPassword());
-			this.setAgencies(user.getAgencies());
-			this.setRoles(user.getRoles());
-			this.setEnabled(user.isEnabled());
-		}
-	}
-
-	@Override
-	public Collection<? extends GrantedAuthority> getAuthorities() {
-		Collection<GrantedAuthority> authorities = new ArrayList<>();
-		Set<Role> userRoles = this.getRoles();
-
-		if (userRoles != null) {
-			for (Role role : userRoles) {
-				SimpleGrantedAuthority authority = new SimpleGrantedAuthority(
-						role.getCodeName());
-				authorities.add(authority);
-			}
-		}
-		return authorities;
-	}
-
-	@Override
-	public String getPassword() {
-		return super.getPassword();
-	}
-
-	@Override
-	public boolean isAccountNonExpired() {
-		return true;
-	}
-
-	@Override
-	public boolean isAccountNonLocked() {
-		return true;
-	}
-
-	@Override
-	public boolean isCredentialsNonExpired() {
-		return true;
-	}
-
-	@Override
-	public String getUsername() {
-		return super.getUserName();
-	}
-
-	@Override
-	public boolean equals(Object obj) {
-		return this.getUserName().equals(((SysUser)obj).getUserName());
-	}
-
-	@Override
-	public int hashCode() {
-		return this.getId() + this.getUserName().hashCode();
-	}
-}
+package com.bsth.entity.sys;
+
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.Set;
+
+import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.authority.SimpleGrantedAuthority;
+import org.springframework.security.core.userdetails.UserDetails;
+
+public class SecurityUser extends SysUser implements UserDetails {
+
+	private static final long serialVersionUID = 1L;
+
+	public SecurityUser(SysUser user) {
+		if (null != user) {
+			this.setId(user.getId());
+			this.setUserName(user.getUserName());
+			this.setName(user.getName());
+			this.setPassword(user.getPassword());
+			this.setAgencies(user.getAgencies());
+			this.setRoles(user.getRoles());
+			this.setEnabled(user.isEnabled());
+			this.setJobCode(user.getJobCode());
+			this.setRealName(user.getRealName());
+		}
+	}
+
+	@Override
+	public Collection<? extends GrantedAuthority> getAuthorities() {
+		Collection<GrantedAuthority> authorities = new ArrayList<>();
+		Set<Role> userRoles = this.getRoles();
+
+		if (userRoles != null) {
+			for (Role role : userRoles) {
+				SimpleGrantedAuthority authority = new SimpleGrantedAuthority(
+						role.getCodeName());
+				authorities.add(authority);
+			}
+		}
+		return authorities;
+	}
+
+	@Override
+	public String getPassword() {
+		return super.getPassword();
+	}
+
+	@Override
+	public boolean isAccountNonExpired() {
+		return true;
+	}
+
+	@Override
+	public boolean isAccountNonLocked() {
+		return true;
+	}
+
+	@Override
+	public boolean isCredentialsNonExpired() {
+		return true;
+	}
+
+	@Override
+	public String getUsername() {
+		return super.getUserName();
+	}
+
+	@Override
+	public boolean equals(Object obj) {
+		return this.getUserName().equals(((SysUser)obj).getUserName());
+	}
+
+	@Override
+	public int hashCode() {
+		return this.getId() + this.getUserName().hashCode();
+	}
+}
@@ -44,7 +44,10 @@ public class SysUser implements Serializable {
 	@ManyToMany(fetch = FetchType.EAGER)
 	private Set<Role> roles = new LinkedHashSet<>();
-	
+
+	private String jobCode;
+
+	private String realName;
 	public Integer getId() {
 		return id;
@@ -125,4 +128,20 @@ public class SysUser implements Serializable {
 	public void setRoles(Set<Role> roles) {
 		this.roles = roles;
 	}
+
+	public String getJobCode() {
+		return jobCode;
+	}
+
+	public void setJobCode(String jobCode) {
+		this.jobCode = jobCode;
+	}
+
+	public String getRealName() {
+		return realName;
+	}
+
+	public void setRealName(String realName) {
+		this.realName = realName;
+	}
 }
@@ -30,6 +30,10 @@ public interface SysUserRepository extends BaseRepository&lt;SysUser, Integer&gt;{
 	List<SysUser> findAll_distinct();
 	@Modifying
-	@Query(value="update bsth_c_sys_user set last_login_date=now() where user_name=?1",nativeQuery=true)
+	@Query(value="update bsth_c_sys_user set last_login_date=now() where user_name = ?1",nativeQuery=true)
 	void recordLoginDate(String userName);
+
+	@Modifying
+	@Query(value="update bsth_c_sys_user set job_code = ?1, real_name = ?2 where id = ?3",nativeQuery=true)
+	void realName(String jobCode, String realName, int id);
 }
+package com.bsth.security;
+
+import com.bsth.common.Constants;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.stereotype.Component;
+
+/**
+ * sso登录相关配置信息
+ * @author Hill
+ */
+@Component
+public class SsoConfig {
+
+    /**
+     * 是否开启sso登录
+     */
+    private boolean ssoEnabled;
+
+    /**
+     * 本系统在统一平台的系统代码
+     */
+    private String systemCode;
+
+    /**
+     * sso登录请求地址
+     */
+    private String ssoLoginUrl;
+
+    /**
+     * sso登出请求地址
+     */
+    private String ssoLogoutUrl;
+
+    /**
+     * sso验证请求地址
+     */
+    private String ssoAuthUrl;
+
+    public boolean isSsoEnabled() {
+        return ssoEnabled;
+    }
+
+    @Value("${sso.enabled}")
+    public void setSsoEnabled(boolean ssoEnabled) {
+        this.ssoEnabled = ssoEnabled;
+        if (ssoEnabled) {
+            Constants.LOGIN_PAGE = ssoLoginUrl;
+        } else {
+            Constants.LOGIN_PAGE = Constants.ORIGINAL_LOGIN_PAGE;
+        }
+    }
+
+
+    public String getSystemCode() {
+        return systemCode;
+    }
+
+    @Value("${sso.systemcode}")
+    public void setSystemCode(String systemCode) {
+        this.systemCode = systemCode;
+    }
+
+    public String getSsoLoginUrl() {
+        return ssoLoginUrl;
+    }
+
+    @Value("${sso.http.url.login}")
+    public void setSsoLoginUrl(String ssoLoginUrl) {
+        this.ssoLoginUrl = ssoLoginUrl;
+        if (ssoEnabled) {
+            Constants.LOGIN_PAGE = ssoLoginUrl;
+        }
+    }
+
+    public String getSsoLogoutUrl() {
+        return ssoLogoutUrl;
+    }
+
+    @Value("${sso.http.url.logout}")
+    public void setSsoLogoutUrl(String ssoLogoutUrl) {
+        this.ssoLogoutUrl = ssoLogoutUrl;
+    }
+
+    public String getSsoAuthUrl() {
+        return ssoAuthUrl;
+    }
+
+    @Value("${sso.http.url.auth}")
+    public void setSsoAuthUrl(String ssoAuthUrl) {
+        this.ssoAuthUrl = ssoAuthUrl;
+    }
+}
@@ -2,7 +2,9 @@ package com.bsth.security;
 import com.bsth.common.Setting;
 import com.bsth.filter.WhiteIpFilter;
+import com.bsth.security.handler.CustomLogoutSuccessHandler;
 import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Value;
 import org.springframework.boot.web.servlet.ServletListenerRegistrationBean;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
@@ -36,7 +38,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
     SecurityMetadataSourceService securityMetadataSourceService;
     @Autowired
-    Setting setting;
+    private Setting setting;
     @Override
     public void configure(WebSecurity web) throws Exception {
@@ -61,7 +63,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
                 //指定登录页
                 .loginPage(Constants.LOGIN_PAGE)
                 .loginProcessingUrl(Constants.LOGIN).permitAll()
-                .and().logout()
+                .and().logout().logoutSuccessUrl(Constants.LOGIN_PAGE)
                 //禁用CXRF
                 .and().csrf().disable()
                 //禁用匿名用户功能
@@ -69,10 +71,10 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
                 //允许 iframe
                 .headers().frameOptions().disable();
-        // 同时只保持一个回话
+        // 同时只保持一个回话 maxSessionsPreventsLogin(false)让之前的登录过期
         http.sessionManagement().maximumSessions(1)
                 .expiredUrl(Constants.LOGIN_PAGE + "?error=true")
-                .maxSessionsPreventsLogin(false)//让之前的登录过期
+                .maxSessionsPreventsLogin(false)
                 .sessionRegistry(sessionRegistry());
         WhiteIpFilter whiteIpFilter = new WhiteIpFilter();
@@ -94,16 +96,6 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
         return filterSecurityInterceptor;
     }
-/*	@Bean
-	public LoginSuccessHandler loginSuccessHandler(){
-		return new LoginSuccessHandler();
-	}*/
-	
-/*	@Bean
-	public LogoutHandler logoutHandler(){
-		return new CustomLogoutHandler();
-	}*/
-
     @Bean
     public SessionRegistry sessionRegistry() {
         SessionRegistry sessionRegistry = new SessionRegistryImpl();
+package com.bsth.security.handler;
+
+import java.io.IOException;
+import java.util.Date;
+import java.util.HashMap;
+import java.util.Map;
+
+import javax.servlet.ServletException;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import javax.servlet.http.HttpSession;
+
+import com.bsth.common.Constants;
+import com.bsth.util.HttpClientUtils;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.security.core.Authentication;
+
+import org.springframework.security.web.authentication.logout.LogoutSuccessHandler;
+import org.springframework.stereotype.Component;
+
+/**
+ * @author Hill
+ */
+@Component
+public class CustomLogoutSuccessHandler implements LogoutSuccessHandler {
+
+    private final static Logger log = LoggerFactory.getLogger(CustomLogoutSuccessHandler.class);
+
+    @Value("${sso.http.url.login}")
+    private String ssoLoginUrl;
+
+    @Value("${sso.http.url.logout}")
+    private String ssoLogoutUrl;
+
+    @Override
+    public void onLogoutSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException, ServletException {
+        HttpSession session = request.getSession();
+        String token = String.valueOf(request.getSession().getAttribute(Constants.SSO_TOKEN));
+        Map<String, Object> param = new HashMap<>();
+        param.put("Authorization", String.format("Bearer %s", token));
+        try {
+            request.getSession().invalidate();
+            StringBuilder sb = HttpClientUtils.post(ssoLogoutUrl, null, param);
+            log.error(String.format("注销token:%s,返回结果:%s", token, sb.toString()));
+        } catch (Exception e) {
+            log.error("注销token异常", e);
+        } finally {
+            response.sendRedirect(ssoLoginUrl);
+        }
+    }
+}
@@ -22,4 +22,6 @@ public interface SysUserService extends BaseService&lt;SysUser, Integer&gt;{
 	Map<String, Object> resetPassword(@RequestParam Integer id);
 	void recordLoginDate(String userName);
+
+	void realName(String jobCode, String realName, int id);
 }
@@ -202,4 +202,10 @@ public class SysUserServiceImpl extends BaseServiceImpl&lt;SysUser, Integer&gt; implem
 	public void recordLoginDate(String userName) {
 		sysUserRepository.recordLoginDate(userName);
 	}
+
+	@Override
+	@Transactional(rollbackFor = Exception.class)
+	public void realName(String jobCode, String realName, int id) {
+		sysUserRepository.realName(jobCode, realName, id);
+	}
 }
@@ -55,4 +55,10 @@ cp.ack.url= https://58.247.254.118:4003/prod-api/serverApi/instructionsIssue/con
 ## admin mail
 admin.mail= 3090342880@qq.com
 ## enabled
-enabled.whiteip= true
 \ No newline at end of file
+enabled.whiteip= true
+
+sso.enabled= true
+sso.systemcode = SYS0019
+sso.http.url.login= http://180.169.154.251:28090/portal/index.html#/login
+sso.http.url.logout= http://180.169.154.251:18080/information/api/v1/logout
+sso.http.url.auth= http://180.169.154.251:18080/information/authenticate/authorityAuthentication
 \ No newline at end of file
@@ -5,13 +5,13 @@ datatools.kettle_properties=/datatools/kettle.properties
 # 2、ktr文件通用配置变量（数据库连接，根据不同的环境需要修正）
 #数据库ip地址
-datatools.kvars_dbip=10.10.200.121
+datatools.kvars_dbip=192.168.168.241
 #数据库用户名
 datatools.kvars_dbuname=root
 #数据库密码
 datatools.kvars_dbpwd=root2jsp
 #数据库库名
-datatools.kvars_dbdname=control
+datatools.kvars_dbdname=pd_control
 # 3、上传数据配置信息
 # 上传文件目录配置（根据不同的环境需要修正）
@@ -454,6 +454,28 @@
 			}
 		});
+		$.ajax({
+			url: '/user/isRealName',
+			type: 'POST',
+			async: false,
+			success: function (result,status,xhr) {
+				if (result.data == 0) {
+					$.get('/pages/permission/user/jobCode.html', function (content) {
+						layer.open({
+							type: 1,
+							area: ['600px', '360px'],
+							content: content,
+							title: '设置工号(后期统一登录平台接入)',
+							shift: 5,
+							scrollbar: false,
+							success: function () {
+							}
+						});
+					});
+				}
+			}
+		});
+
 		$.get('/user/currentUser', function (user) {
 			$('#indexTopUName').text(user.userName);
 		});
+<div class="row">
+<div class="col-md-12">
+<!-- BEGIN VALIDATION STATES-->
+<div class="portlet light portlet-fit portlet-form bordered">
+<div class="portlet-body">
+	<form class="form-horizontal" id="jobCodeForm">
+		<div class="alert alert-danger display-hide">
+            <button class="close" data-close="alert"></button>您的输入有误，请检查下面的输入项
+        </div>
+		<div class="form-group" style="margin-top: 60px">
+			<label class="control-label col-md-5">姓名：
+			</label>
+			<div class="col-md-4">
+				<div class="input-icon right">
+					<i class="fa"></i>
+					<input type="input" class="form-control" name="realName" /> </div>
+			</div>
+		</div>
+		<div class="form-group">
+		    <label class="control-label col-md-5">工号：
+		    </label>
+		    <div class="col-md-4">
+		        <div class="input-icon right">
+		            <i class="fa"></i>
+		            <input type="input" class="form-control" name="jobCode" /> </div>
+		    </div>
+		</div>
+		<div class="form-actions">
+	        <div class="row">
+	            <div class="col-md-offset-5 col-md-7">
+	                <button type="submit" id="confirm" class="btn green">确定</button>
+	                <button type="reset" class="btn default">取消</button>
+	            </div>
+	        </div>
+	    </div>
+	</form>
+</div>
+</div>
+</div>
+</div>
+
+<script>
+$(function(){
+	var form = $('#jobCodeForm');
+    //表单 validate
+    var error = $('.alert-danger', form);
+
+	$.validator.addMethod("jobcoderule", function(value, element) {
+		var reg = /^0[1-5]-[A-Za-z0-9]{5}$/;
+		return this.optional(element) || reg.test(value) && validate(value);
+	}, "格式应该为【2位公司代码-6位工号】");
+
+    //表单 validate
+    form.validate({
+        errorElement : 'span',
+        errorClass : 'help-block help-block-error',
+        focusInvalid : false,
+        rules : {
+        	'realName': {
+        		required: true,
+				minlength: 2,
+				maxlength: 16
+			},
+            'jobCode': {
+        		required: true,
+				minlength: 6,
+				maxlength: 9,
+                jobcoderule: false
+            }
+        },
+        invalidHandler : function(event, validator) {
+            error.show();
+            App.scrollTo(error, -200);
+        },
+
+        highlight : function(element) {
+            $(element).closest('.form-group').addClass('has-error');
+        },
+
+        unhighlight : function(element) {
+            $(element).closest('.form-group').removeClass('has-error');
+        },
+
+        success : function(label) {
+            label.closest('.form-group').removeClass('has-error');
+        },
+        
+        submitHandler : function(f) {
+            var params = form.serializeJSON();
+            error.hide();
+            $.ajax({
+                url: '/user/realName',
+                type: 'POST',
+                traditional: true,
+                data: params,
+                success: function(res){
+                    layer.alert(res.data);
+                    if (res.status == 'SUCCESS') {
+						layer.closeAll('page');
+					}
+                }
+            });
+        }
+    });
+});
+</script>
 \ No newline at end of file