content: 
  package com.platform.modules.system.rest;
  
  import cn.datax.common.security.annotation.DataInner;
  import cn.hutool.core.collection.CollectionUtil;
  import com.platform.modules.security.service.UserDetailsServiceImpl;
  import com.platform.modules.security.service.dto.JwtUserDto;
  import com.platform.modules.system.domain.UserInfo;
  import io.swagger.annotations.Api;
  import io.swagger.annotations.ApiOperation;
  import lombok.RequiredArgsConstructor;
  import com.platform.annotation.Log;
  import com.platform.config.RsaProperties;
  import com.platform.modules.system.domain.Dept;
  import com.platform.modules.system.service.DataService;
  import com.platform.modules.system.domain.User;
  import com.platform.exception.BadRequestException;
  import com.platform.modules.system.domain.vo.UserPassVo;
  import com.platform.modules.system.service.DeptService;
  import com.platform.modules.system.service.RoleService;
  import com.platform.modules.system.service.dto.RoleSmallDto;
  import com.platform.modules.system.service.dto.UserDto;
  import com.platform.modules.system.service.dto.UserQueryCriteria;
  import com.platform.modules.system.service.VerifyService;
  import com.platform.utils.*;
  import com.platform.modules.system.service.UserService;
  import com.platform.utils.enums.CodeEnum;
  import org.springframework.data.domain.Pageable;
  import org.springframework.http.HttpStatus;
  import org.springframework.http.ResponseEntity;
  import org.springframework.security.access.prepost.PreAuthorize;
  import org.springframework.security.crypto.password.PasswordEncoder;
  import org.springframework.util.CollectionUtils;
  import org.springframework.util.ObjectUtils;
  import org.springframework.validation.annotation.Validated;
  import org.springframework.web.bind.annotation.*;
  import org.springframework.web.multipart.MultipartFile;
  import javax.servlet.http.HttpServletResponse;
  import java.io.IOException;
  import java.util.*;
  import java.util.stream.Collectors;
  
  /**
   * @author AllDataDC
   * @date 2023-01-27
   */
  @Api(tags = "系统：用户管理")
  @RestController
  @RequestMapping("/api/users")
  @RequiredArgsConstructor
  public class UserController {
  
      private final PasswordEncoder passwordEncoder;
      private final UserService userService;
      private final DataService dataService;
      private final DeptService deptService;
      private final RoleService roleService;
      private final VerifyService verificationCodeService;
  
      private UserDetailsServiceImpl userDetailsService;
  
      @GetMapping(value = "/test")
      public ResponseEntity<Object> test(HttpServletResponse response) throws IOException {
          return new ResponseEntity<>(PageUtil.toPage(null,0),HttpStatus.OK);
      }
  
      @ApiOperation("导出用户数据")
      @GetMapping(value = "/download")
      @PreAuthorize("@el.check('user:list')")
      public void exportUser(HttpServletResponse response, UserQueryCriteria criteria) throws IOException {
          userService.download(userService.queryAll(criteria), response);
      }
  
      @ApiOperation("导出用户数据")
      @GetMapping(value = "/{username}")
      @DataInner
      public JwtUserDto loginByUsername(@PathVariable("username") String username) throws IOException {
          return userDetailsService.loadUserByUsername(username);
      }
  
  
      @ApiOperation("查询用户")
      @GetMapping
      @PreAuthorize("@el.check('user:list')")
      public ResponseEntity<Object> queryUser(UserQueryCriteria criteria, Pageable pageable){
          if (!ObjectUtils.isEmpty(criteria.getDeptId())) {
              criteria.getDeptIds().add(criteria.getDeptId());
              // 先查找是否存在子节点
              List<Dept> data = deptService.findByPid(criteria.getDeptId());
              // 然后把子节点的ID都加入到集合中
              criteria.getDeptIds().addAll(deptService.getDeptChildren(data));
          }
          // 数据权限
          List<Long> dataScopes = dataService.getDeptIds(userService.findByName(SecurityUtils.getCurrentUsername()));
          // criteria.getDeptIds() 不为空并且数据权限不为空则取交集
          if (!CollectionUtils.isEmpty(criteria.getDeptIds()) && !CollectionUtils.isEmpty(dataScopes)){
              // 取交集
              criteria.getDeptIds().retainAll(dataScopes);
              if(!CollectionUtil.isEmpty(criteria.getDeptIds())){
                  return new ResponseEntity<>(userService.queryAll(criteria,pageable),HttpStatus.OK);
              }
          } else {
              // 否则取并集
              criteria.getDeptIds().addAll(dataScopes);
              return new ResponseEntity<>(userService.queryAll(criteria,pageable),HttpStatus.OK);
          }
          return new ResponseEntity<>(PageUtil.toPage(null,0),HttpStatus.OK);
      }
  
      @Log("新增用户")
      @ApiOperation("新增用户")
      @PostMapping
      @PreAuthorize("@el.check('user:add')")
      public ResponseEntity<Object> createUser(@Validated @RequestBody User resources){
          checkLevel(resources);
          // 默认密码 123456
          resources.setPassword(passwordEncoder.encode("123456"));
          userService.create(resources);
          return new ResponseEntity<>(HttpStatus.CREATED);
      }
  
      @Log("修改用户")
      @ApiOperation("修改用户")
      @PutMapping
      @PreAuthorize("@el.check('user:edit')")
      public ResponseEntity<Object> updateUser(@Validated(User.Update.class) @RequestBody User resources) throws Exception {
          checkLevel(resources);
          userService.update(resources);
          return new ResponseEntity<>(HttpStatus.NO_CONTENT);
      }
  
      @Log("修改用户：个人中心")
      @ApiOperation("修改用户：个人中心")
      @PutMapping(value = "center")
      public ResponseEntity<Object> centerUser(@Validated(User.Update.class) @RequestBody User resources){
          if(!resources.getId().equals(SecurityUtils.getCurrentUserId())){
              throw new BadRequestException("不能修改他人资料");
          }
          userService.updateCenter(resources);
          return new ResponseEntity<>(HttpStatus.NO_CONTENT);
      }
  
      @Log("删除用户")
      @ApiOperation("删除用户")
      @DeleteMapping
      @PreAuthorize("@el.check('user:del')")
      public ResponseEntity<Object> deleteUser(@RequestBody Set<Long> ids){
          for (Long id : ids) {
              Integer currentLevel =  Collections.min(roleService.findByUsersId(SecurityUtils.getCurrentUserId()).stream().map(RoleSmallDto::getLevel).collect(Collectors.toList()));
              Integer optLevel =  Collections.min(roleService.findByUsersId(id).stream().map(RoleSmallDto::getLevel).collect(Collectors.toList()));
              if (currentLevel > optLevel) {
                  throw new BadRequestException("角色权限不足，不能删除：" + userService.findById(id).getUsername());
              }
          }
          userService.delete(ids);
          return new ResponseEntity<>(HttpStatus.OK);
      }
  
      @ApiOperation("修改密码")
      @PostMapping(value = "/updatePass")
      public ResponseEntity<Object> updateUserPass(@RequestBody UserPassVo passVo) throws Exception {
          String oldPass = RsaUtils.decryptByPrivateKey(RsaProperties.privateKey,passVo.getOldPass());
          String newPass = RsaUtils.decryptByPrivateKey(RsaProperties.privateKey,passVo.getNewPass());
          UserDto user = userService.findByName(SecurityUtils.getCurrentUsername());
          if(!passwordEncoder.matches(oldPass, user.getPassword())){
              throw new BadRequestException("修改失败，旧密码错误");
          }
          if(passwordEncoder.matches(newPass, user.getPassword())){
              throw new BadRequestException("新密码不能与旧密码相同");
          }
          userService.updatePass(user.getUsername(),passwordEncoder.encode(newPass));
          return new ResponseEntity<>(HttpStatus.OK);
      }
  
      @ApiOperation("修改头像")
      @PostMapping(value = "/updateAvatar")
      public ResponseEntity<Object> updateUserAvatar(@RequestParam MultipartFile avatar){
          return new ResponseEntity<>(userService.updateAvatar(avatar), HttpStatus.OK);
      }
  
      @Log("修改邮箱")
      @ApiOperation("修改邮箱")
      @PostMapping(value = "/updateEmail/{code}")
      public ResponseEntity<Object> updateUserEmail(@PathVariable String code,@RequestBody User user) throws Exception {
          String password = RsaUtils.decryptByPrivateKey(RsaProperties.privateKey,user.getPassword());
          UserDto userDto = userService.findByName(SecurityUtils.getCurrentUsername());
          if(!passwordEncoder.matches(password, userDto.getPassword())){
              throw new BadRequestException("密码错误");
          }
          verificationCodeService.validated(CodeEnum.EMAIL_RESET_EMAIL_CODE.getKey() + user.getEmail(), code);
          userService.updateEmail(userDto.getUsername(),user.getEmail());
          return new ResponseEntity<>(HttpStatus.OK);
      }
  
      /**
       * 如果当前用户的角色级别低于创建用户的角色级别，则抛出权限不足的错误
       * @param resources /
       */
      private void checkLevel(User resources) {
          Integer currentLevel =  Collections.min(roleService.findByUsersId(SecurityUtils.getCurrentUserId()).stream().map(RoleSmallDto::getLevel).collect(Collectors.toList()));
          Integer optLevel = roleService.findByRoles(resources.getRoles());
          if (currentLevel > optLevel) {
              throw new BadRequestException("角色权限不足");
          }
      }
  }
  