基于SSM+mysql的校园二手物品交易系统微信小程序源码数据库.zip

package cn.chich.seller.controller; import java.io.File; import java.io.IOException; import java.io.PrintWriter; import java.text.SimpleDateFormat; import java.time.Instant; import java.util.Date; import java.util.HashMap; import java.util.List; import java.util.Map; import javax.annotation.Resource; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import org.springframework.stereotype.Controller; import org.springframework.web.bind.annotation.RequestBody; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.ResponseBody; import org.springframework.web.multipart.MultipartFile; import org.springframework.web.multipart.MultipartHttpServletRequest; import cn.chich.seller.bean.User; import cn.chich.seller.service.UserService; import cn.chich.seller.util.AesCbcUtil; import cn.chich.seller.util.HttpRequest; import net.sf.json.JSONObject; @RequestMapping("/wx/User") @Controller public class UserAPIController { @Resource private UserService userService; String appID="wx3a6b3faec3d05461"; String appSecret="2b9e3da253434bb52297ca8cd3476e6d"; /** * 处理登录请求 */ @RequestMapping(value = "/getOpenid") @ResponseBody public Map getOpenid(String encryptedData, String iv, String code, String nickName,String gender, String city, String province, String country, String avatarUrl) { Map map = new HashMap(); //登录凭证不能为空 if (code == null || code.length() == 0) { map.put("code", 0); map.put("msg", "code 不能为空"); return map; } //小程序唯一标识 (在微信小程序管理后台获取) String wxspAppid = appID; //小程序的 app secret (在微信小程序管理后台获取) String wxspSecret = appSecret; //授权（必填） String grant_type = "authorization_code"; String grant_type2 = "client_credential"; //////////////// 1、向微信服务器 使用登录凭证 code 获取 session_key 和 openid //////////////// //请求参数 String params = "appid=" + wxspAppid + "&secret=" + wxspSecret + "&js_code=" + code + "&grant_type=" + grant_type; String params2 = "appid=" + wxspAppid + "&secret=" + wxspSecret + "&grant_type=" + grant_type2; System.out.println("params======"+params+",params2======"+params2); //发送请求 String sr = HttpRequest.sendGet("https://api.weixin.qq.com/sns/jscode2session", params); String sr2 = HttpRequest.sendGet("https://api.weixin.qq.com/cgi-bin/token", params2); System.out.println("sr======"+sr+",sr2======"+sr2); //解析相应内容（转换成json对象） JSONObject json = JSONObject.fromObject(sr); JSONObject json2 = JSONObject.fromObject(sr2); //获取会话密钥（session_key） String session_key = json.get("session_key").toString(); String access_token = json2.get("access_token").toString(); System.out.println(access_token); //用户的唯一标识（openid） String openid = (String) json.get("openid"); //////////////// 2、对encryptedData加密数据进行AES解密 //////////////// System.out.println("openid="+openid); System.out.println("session_key="+session_key); System.out.println("iv="+iv); System.out.println("encryptedData="+encryptedData); try { if(openid != null && openid != "") { map.put("code", 1); map.put("msg", "解密成功"); User user = new User(); user.setNickName(nickName); user.setHeadimg(avatarUrl); user.setOpenId((String) openid); user.setGender(Integer.parseInt(gender)); User user1=userService.selectUserByOpenId(user.getOpenId()); if(user1!=null) { userService.updateUserInfo(user); user.setId(user1.getId()); }else { userService.addWXUserInfo(user); } Map userInfo = new HashMap(); userInfo.put("openId", openid); userInfo.put("nickName", nickName); userInfo.put("gender", gender); userInfo.put("city", city); userInfo.put("province", province); userInfo.put("country", country); userInfo.put("avatarUrl", avatarUrl); userInfo.put("accessToken",access_token); userInfo.put("id",user.getId()); if(user1!=null) { userInfo.put("qq",user1.getQq()); userInfo.put("email",user1.getEmail()); userInfo.put("phone",user1.getPhone()); userInfo.put("schoolId",user1.getSchoolId()); userInfo.put("schoolName",user1.getSchoolName()); userInfo.put("deptId",user1.getDeptId()); userInfo.put("deptName",user1.getDeptName()); userInfo.put("majorId",user1.getMajorId()); userInfo.put("majorName",user1.getMajorName()); userInfo.put("addr",user1.getAddr()); userInfo.put("remark",user1.getRemark()); userInfo.put("userName",user1.getUserName()); userInfo.put("idNum,",user1.getIdNum()); userInfo.put("status,",user1.getStatus()); } map.put("userInfo", userInfo); return map; } } catch (Exception e) { e.printStackTrace(); } map.put("code", 0); map.put("msg", "解密失败"); return map; } @RequestMapping("getUserInfoById") @ResponseBody public Map getUserInfoById(String id){ Map map = new HashMap(); User user=userService.getUserById(Integer.parseInt(id)); if(user.getFroEndTime()!=null&&System.currentTimeMillis()>user.getFroEndTime().getTime()) { //更新用户状态为已认证1011，违规次数=0 userService.unFrozenUserById(user.getId(),1011); } map.put("data", user); map.put("code", 1); return map; } @RequestMapping("getReportNum") @ResponseBody public Map getReportNum(int id){ Map map = new HashMap(); int reportNum=userService.getReportNum(id); map.put("reportNum", reportNum); map.put("code", 1); return map; } @RequestMapping("editWXUser") @ResponseBody public Map editWXUser(User user){ Map map = new HashMap(); int i=userService.editWXUserInfo(user); if(i>0) { User user1=userService.getUser(user.getId()); map.put("userInfo", user1); map.put("code", 1); }else { map.put("code", 0); } return map; } @RequestMapping("authCenter") @ResponseBody public Map authCenter(User user){ Map map = new HashMap(); int i=userService.authCenter(user); if(i>0) { User user1=userService.getUser(user.getId()); map.put("userInfo", user1); map.put("code", 1); }else { map.put("code", 0); } return map; } //获取当前日期时间的string类型用于文件名防重复 public String dates(){ Date currentTime = new Date(); SimpleDateFormat formatter = new SimpleDateFormat("yyyyMMddHHmmss"); String dateString = formatter.format(currentTime); return dateString; } @RequestMapping("uploadUrl") @ResponseBody public Map uploadPicture(HttpServletRequest request, HttpServletResponse response) throws Exception { Map map=new HashMap<String,Object>(); //获取从前台传过来得图片 MultipartHttpServletRequest req =(MultipartHttpServletRequest)request; MultipartFile multipartFile = req.getFile("file");