package jnpf.flowable.service.dev;
|
|
import com.alibaba.fastjson.JSON;
|
import com.alibaba.fastjson.JSONObject;
|
import jnpf.exception.WorkFlowException;
|
import jnpf.flowable.mapper.DevApprovalSignatureMapper;
|
import jnpf.util.UserProvider;
|
import lombok.RequiredArgsConstructor;
|
import org.springframework.stereotype.Service;
|
import java.util.Objects;
|
|
@Service
|
@RequiredArgsConstructor
|
public class DevApprovalSignatures {
|
private final DevApprovalSignatureMapper mapper;
|
|
public DevApprovalSignature require(String taskId, String signId) throws WorkFlowException {
|
if (signId == null || signId.isBlank()) throw new WorkFlowException("请先完成本轮电子签名");
|
String tenant = UserProvider.getUser().getTenantId();
|
DevApprovalSignature sign = mapper.find(signId, tenant == null || tenant.isBlank() ? "0" : tenant);
|
if (sign == null || !Objects.equals(sign.getUserId(), UserProvider.getLoginUserId()))
|
throw new WorkFlowException("电子签名不存在或不属于当前登录用户");
|
// A new native signature is required for each run; it can be reused only on this instance.
|
long age = sign.getCreatedAt() == null ? Long.MAX_VALUE : System.currentTimeMillis() - sign.getCreatedAt().getTime();
|
if (age < -60000 || age > 30 * 60 * 1000 || (sign.getExtraJson() != null && !sign.getExtraJson().isBlank()))
|
throw new WorkFlowException("电子签名已过期或已被其他业务使用，请重新签名");
|
JSONObject meta;
|
try { meta = JSON.parseObject(sign.getMetaData()); }
|
catch (RuntimeException e) { throw new WorkFlowException("电子签名业务信息无效"); }
|
if (meta == null || !"workflow-dev-approval".equals(meta.getString("biz_module"))
|
|| meta.getJSONArray("biz_data") == null || meta.getJSONArray("biz_data").size() != 1
|
|| !taskId.equals(meta.getJSONArray("biz_data").getString(0)))
|
throw new WorkFlowException("电子签名不属于本流程的一键审批操作");
|
return sign;
|
}
|
}
|
