Tenlion/business-card
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

权限校验

Browse Source
This commit is contained in:
ly19960718 2021-01-28 10:21:48 +08:00
parent 36cc4f8b4e
commit 5c38e54fbd
7 changed files with 488 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

53
src/main/java/cn/com/tenlion/accesstokenmanager/AccessTokenManager.java Normal file
View File

@ -0,0 +1,53 @@
package cn.com.tenlion.accesstokenmanager;
import cn.com.tenlion.pojo.dtos.carduser.CardUserDTO;
import cn.com.tenlion.pojo.vos.carduser.CardUserVO;
import java.util.Map;
import java.util.concurrent.ConcurrentHashMap;
/**
* TODO
* @version 1.0
* @author LY
* @date 2021/1/27 11:00
*/
public class AccessTokenManager {
private static Map<String, CardUserDTO> cardUserVOMap = new ConcurrentHashMap<>();
private AccessTokenManager(){
}
public static AccessTokenManager getInstance(){
return tokenManageBuiler.accessTokenInstance;
}
public CardUserDTO getKey(String key){
return cardUserVOMap.get(key);
}
public void setKey(String key,CardUserDTO cardUserDTO){
cardUserVOMap.put(key,cardUserDTO);
}
public void removeKey(String key){
cardUserVOMap.remove(key);
}
public void updateLastActivityTime(String key){
CardUserDTO dto = this.getKey(key);
dto.setLastActivityTime(System.currentTimeMillis());
}
private static class tokenManageBuiler{
private static AccessTokenManager accessTokenInstance = new AccessTokenManager();
}
}

88
src/main/java/cn/com/tenlion/config/CheckAuth.java Normal file
View File

@ -0,0 +1,88 @@
package cn.com.tenlion.config;
import cn.com.tenlion.accesstokenmanager.AccessTokenManager;
import cn.com.tenlion.pojo.dtos.carduser.CardUserDTO;
import cn.com.tenlion.pojo.vos.carduser.CardUserVO;
import cn.com.tenlion.service.carduser.ICardUserService;
import cn.com.tenlion.util.AesUtil;
import com.github.pagehelper.util.StringUtil;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
/**
* TODO
* @version 1.0
* @author LY
* @date 2021/1/27 12:20
*/
@Component
public class CheckAuth implements HandlerInterceptor {
@Autowired
private ICardUserService cardUserService;
/**
* 在请求处理之前进行调用（Controller方法调用之前）
*/
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) {
try {
String path = request.getServletPath();
if(path.contains("release")){
return true;
}
String token = request.getHeader("token");
if(token == null || StringUtil.isEmpty(token)){
// response.setStatus(response.SC_METHOD_NOT_ALLOWED);
// response.addHeader("msg","token不合法");
response.sendError(response.SC_METHOD_NOT_ALLOWED,"token不合法");
return false;
}
CardUserDTO tokenManage = AccessTokenManager.getInstance().getKey(token);
if(tokenManage != null) {
AccessTokenManager.getInstance().updateLastActivityTime(token);
return true;
}else{
String aesDecoderToken = AesUtil.aesCommonDecoder(token,token);
CardUserDTO cardUserDTO = cardUserService.getCardUserById(aesDecoderToken);
if(cardUserDTO != null){
AccessTokenManager.getInstance().setKey(token,cardUserDTO);
AccessTokenManager.getInstance().updateLastActivityTime(token);
}
}
response.setStatus(response.SC_OK);
} catch (Exception e) {
e.printStackTrace();
}
return false;
}
/**
* 请求处理之后进行调用，但是在视图被渲染之前（Controller方法调用之后）
*/
@Override
public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) {
System.out.println("执行了TestInterceptor的postHandle方法");
}
/**
* 在整个请求结束之后被调用，也就是在DispatcherServlet 渲染了对应的视图之后执行（主要是用于进行资源清理工作）
*/
@Override
public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) {
System.out.println("执行了TestInterceptor的afterCompletion方法");
}
}

31
src/main/java/cn/com/tenlion/config/LoginConfig.java Normal file
View File

@ -0,0 +1,31 @@
package cn.com.tenlion.config;
import org.apache.catalina.startup.UserConfig;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.InterceptorRegistration;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
/**
* 拦截器初始化
* @version 1.0
* @author LY
* @date 2021/1/27 12:34
*/
@Configuration
public class LoginConfig implements WebMvcConfigurer {
@Override
public void addInterceptors(InterceptorRegistry registry) {
//注册TestInterceptor拦截器
InterceptorRegistration registration = registry.addInterceptor(checkAuth());
registration.addPathPatterns("/app/**"); //app所有路径都被拦截
}
@Bean
private static CheckAuth checkAuth() {
return new CheckAuth();
}
}

61
src/main/java/cn/com/tenlion/pojo/dtos/weixinresult/WeiXinAuthResult.java Normal file
View File

@ -0,0 +1,61 @@
package cn.com.tenlion.pojo.dtos.weixinresult;
/**
* TODO
* @version 1.0
* @author LY
* @date 2021/1/26 16:45
*/
public class WeiXinAuthResult {
/**用户唯一标识*/
private String openid;
/**会话密钥*/
private String session_key;
/**用户在开放平台的唯一标识符，在满足 UnionID 下发条件的情况下会返回*/
private String unionid;
/**错误码*/
private String errcode;
/**错误信息*/
private String errmsg;
public String getOpenid() {
return openid;
}
public void setOpenid(String openid) {
this.openid = openid;
}
public String getSession_key() {
return session_key;
}
public void setSession_key(String session_key) {
this.session_key = session_key;
}
public String getUnionid() {
return unionid;
}
public void setUnionid(String unionid) {
this.unionid = unionid;
}
public String getErrcode() {
return errcode;
}
public void setErrcode(String errcode) {
this.errcode = errcode;
}
public String getErrmsg() {
return errmsg;
}
public void setErrmsg(String errmsg) {
this.errmsg = errmsg;
}
}

155
src/main/java/cn/com/tenlion/util/AesUtil.java Normal file
View File

@ -0,0 +1,155 @@
package cn.com.tenlion.util;
import org.apache.commons.codec.binary.Base64;
import org.apache.commons.codec.binary.StringUtils;
import javax.crypto.*;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.spec.SecretKeySpec;
import java.io.UnsupportedEncodingException;
import java.security.*;
public class AesUtil {
private static final String IV_STRING = "16-Bytes--String";
/**
* PKCS#7
*/
public static final String PKCS_7 = "PKCS7Padding";
/**
* PKCS#5
*/
public static final String PKCS_5 = "PKCS5Padding";
/**
* AES加密
*
* @param encodeRule
* @param content
* @return
* @throws Exception
*/
public static String aesEncoder(String encodeRule, String content) throws Exception {
// 1.构造秘钥生成器
KeyGenerator keyGenerator = KeyGenerator.getInstance("AES");
// 2.根据编码规则构建秘钥生成器
SecureRandom random = SecureRandom.getInstance("SHA1PRNG");
random.setSeed(encodeRule.getBytes());
keyGenerator.init(128, random);
// 3.产生堆成秘钥
SecretKey secretKey = keyGenerator.generateKey();
// 4.对称秘钥原始数组
byte[] secretKeyByte = secretKey.getEncoded();
// 5.生成AES秘钥
SecretKey key = new SecretKeySpec(secretKeyByte, "AES");
// 6.初始化密码器
Cipher cipher = Cipher.getInstance("AES");
cipher.init(Cipher.ENCRYPT_MODE, key);
// 8.获取加密内容字节数组
byte[] contentByte = content.getBytes("UTF-8");
// 9.加密
return new String(Base64.encodeBase64(cipher.doFinal(contentByte)));
}
/**
* AES解密
*
* @param encodeRule
* @param content
* @return
* @throws Exception
*/
public static String aesDecoder(String encodeRule, String content) throws Exception {
// 1.构建秘钥生成器
KeyGenerator keyGenerator = KeyGenerator.getInstance("AES");
// 2.根据编码规则构建秘钥生成器
SecureRandom random = SecureRandom.getInstance("SHA1PRNG");
random.setSeed(encodeRule.getBytes());
keyGenerator.init(128, random);
// 3.生成对称解密秘钥
SecretKey secretKey = keyGenerator.generateKey();
// 4.对称秘钥原始数组
byte[] secretKeyByte = secretKey.getEncoded();
// 5.生成AES秘钥
SecretKey key = new SecretKeySpec(secretKeyByte, "AES");
// 6.初始化密码器
Cipher cipher = Cipher.getInstance("AES");
cipher.init(Cipher.DECRYPT_MODE, key);
// 7.要解密内容的字节数组
byte[] contentByte = Base64.decodeBase64(content);
// 8.解密
return new String(cipher.doFinal(contentByte), "UTF-8");
}
/**
* 通用aes加密，兼容IOS
*
* @param key
* @param content
* @return
* @throws Exception
*/
public static String aesCommonEncoder(String key, String content) throws Exception {
byte[] encryptedBytes = aesCommonEncodeDetail(key, content, IV_STRING.getBytes(), PKCS_5);
return new String(Base64.encodeBase64(encryptedBytes), "UTF-8");
}
/**
* 通用aes加密，兼容IOS
*
* @param key
* @param content
* @param paddingType
* @return
* @throws Exception
*/
public static byte[] aesCommonEncodeDetail(String key, String content, byte[] ivBytes, String paddingType) throws Exception {
byte[] byteContent = content.getBytes("UTF-8");
byte[] enCodeFormat = key.getBytes();
SecretKeySpec secretKeySpec = new SecretKeySpec(enCodeFormat, "AES");
IvParameterSpec ivParameterSpec = new IvParameterSpec(ivBytes);
if (StringUtils.equals(paddingType, PKCS_7)) {
Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider());
}
Cipher cipher = Cipher.getInstance("AES/CBC/" + paddingType);
cipher.init(Cipher.ENCRYPT_MODE, secretKeySpec, ivParameterSpec);
return cipher.doFinal(byteContent);
}
/**
* aes通用解密，兼容IOS
*
* @param key
* @param content
* @return
* @throws Exception
*/
public static String aesCommonDecoder(String key, String content) throws Exception {
byte[] encryptedBytes = Base64.decodeBase64(content);
byte[] keyBytes = key.getBytes();
byte[] result = aesCommonDecoderDetail(keyBytes, encryptedBytes, IV_STRING.getBytes(), PKCS_5);
return new String(result, "UTF-8");
}
/**
* aes cbc 通用解密
*
* @param keyBytes 秘钥字节数组
* @param encryptedBytes 密文字节数组
* @param ivBytes 向量字节数组
* @param paddingType 填充类型
* @return
* @throws Exception
*/
public static byte[] aesCommonDecoderDetail(byte[] keyBytes, byte[] encryptedBytes, byte[] ivBytes, String paddingType) throws Exception {
SecretKeySpec secretKey = new SecretKeySpec(keyBytes, "AES");
IvParameterSpec ivParameterSpec = new IvParameterSpec(ivBytes);
Cipher cipher;
if (StringUtils.equals(paddingType, PKCS_7)) {
Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider());
}
cipher = Cipher.getInstance("AES/CBC/" + paddingType);
cipher.init(Cipher.DECRYPT_MODE, secretKey, ivParameterSpec);
return cipher.doFinal(encryptedBytes);
}
}

31
src/main/java/cn/com/tenlion/util/exception/UpdateException.java Normal file
View File

@ -0,0 +1,31 @@
package cn.com.tenlion.util.exception;
/**
* @ClassName: UpdateException
* @Description: 编辑异常
* @Author: WangGeng
* @Date: 2019/2/26 5:25 PM
* @Version: 1.0
**/
public class UpdateException extends SystemException {
public UpdateException() {
}
public UpdateException(String message) {
super(message);
}
public UpdateException(String message, boolean withMsg) {
super(message, withMsg);
}
public UpdateException(String message, Throwable cause) {
super(message, cause);
}
public UpdateException(Throwable cause) {
super(cause);
}
}

69
src/main/java/cn/com/tenlion/util/vx/WxApiUtil.java Normal file
View File

@ -0,0 +1,69 @@
package cn.com.tenlion.util.vx;
import cn.com.tenlion.pojo.dtos.weixinresult.WeiXinAuthResult;
import com.alibaba.druid.util.StringUtils;
import com.alibaba.fastjson.JSON;
import com.alibaba.fastjson.JSONObject;
import java.util.HashMap;
import java.util.Map;
/**
* 微信相关api
* @version 1.0
* @author LY
* @date 2021/1/27 16:35
*/
public class WxApiUtil {
/**微信获取登陆凭证校验 接口*/
private static String VX_SMALL_ROUTINE_SESSION_KEY = "https://api.weixin.qq.com/sns/jscode2session";
/**
* 获取微信登陆凭证
* @param code 登录时获取的 code
* @param appId 小程序 appId
* @param secret 小程序 appSecret
* @param grantType 授权类型，此处只需填写 authorization_code
* @return
* @throws Exception
*/
public WeiXinAuthResult weiXinLoginGetAuth(String code,String appId,String secret,String grantType) throws Exception{
WeiXinAuthResult result = new WeiXinAuthResult();
result.setErrcode("1");
if(StringUtils.isEmpty(code) && null != code){
result.setErrmsg("code 不能为空");
return result;
}
if(StringUtils.isEmpty(appId) && null != appId){
result.setErrmsg("appId 不能为空");
return result;
}
if(StringUtils.isEmpty(secret) && null != secret){
result.setErrmsg("secret 不能为空");
return result;
}
if(StringUtils.isEmpty(grantType) && null != grantType){
result.setErrmsg("grantType不能为空");
return result;
}
// 配置请求参数
Map<String, String> param = new HashMap<>();
param.put("appid", appId);
param.put("secret", secret);
param.put("js_code", code);
param.put("grant_type", grantType);
String str = WxUtil.doGet(VX_SMALL_ROUTINE_SESSION_KEY, param);
JSONObject json = JSONObject.parseObject(str);
return JSON.toJavaObject(json, WeiXinAuthResult.class);
}
}