jagzwxm/ja_manage.git

package org.sxkj.common.utils;
 
import cn.hutool.core.codec.Base64;
import cn.hutool.crypto.asymmetric.SM2;
import com.alibaba.fastjson.JSONObject;
import com.fasterxml.jackson.core.JsonProcessingException;
import com.fasterxml.jackson.databind.ObjectMapper;
 
import org.sxkj.common.utils.sm3.SM2SignUtil;
 
 
import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.net.HttpURLConnection;
import java.net.URL;
import java.nio.charset.StandardCharsets;
import java.util.HashMap;
import java.util.Map;
 
 
 
public class AuthUtil {
    private static final ObjectMapper objectMapper = new ObjectMapper();
    /**
     * 国土调查云获取token
     * 1、获取当前时间的时间的毫秒时间戳A
     * 2、用调用方的数字证书B和A进行字符串顺序拼接得到字符串C
     * 3、获取字符串C的UTF-8字节数组D
     * 4、采用调用方的私钥，使用SM2签名算法对字节数组D进行签名得到字节数组E
     * 5、对字节数组E进行base64编码得到字符串F
     * 6、组装得到token：{B}.{A}.{F}
     * @return
     */
    public static String getToken() {
        String privateKey = "00D631FD5615416EAB63D33A9E66E801F95DE840567504210080006081DE877AE3";
        String publicKey = "04225AACF606D800EA3C2C31FCF8FB161B15F7A8D0460DEB91013D4F228C455E76A2ED8D71BC6525B5DC5CC015C155479D8839950344AEE438A3A6305C90F8269F";
        SM2 sm2 = new SM2(privateKey, publicKey);
        sm2.usePlainEncoding();
        //SM2 token生成
        String certCode = "UAV32_WHR4E3UAJZTE3KE5IZFDGL7CBU";
        long timestamp = System.currentTimeMillis();
        //拼接待签名数据
        String needSignData = certCode + timestamp;
        byte[] needSignDataByte = needSignData.getBytes(StandardCharsets.UTF_8);
        //签名
        byte[] signData = sm2.sign(needSignDataByte);
//        String signDataHex = HexUtil.encodeHexStr(signData);
//        System.out.println("sign Hex:" + signDataHex);
        String signDataBase64 = Base64.encode(signData);
//        System.out.println("sign Base64:" + signDataBase64);
        //生成token
//        String token = certCode + "." + timestamp + "." + signDataBase64;
//        System.out.println("token:" + token);
        //SM2 token验证
//        boolean rst1 = sm2.verify(needSignDataByte, signData);
//        System.out.println("verify result:" + rst1);
//        boolean rst2 = sm2.verify(needSignDataByte, HexUtil.decodeHex(signDataHex));
//        System.out.println("verify result:" + rst2);
//        boolean rst3 = sm2.verify(needSignDataByte, Base64.decode(signDataBase64));
//        System.out.println("verify result:" + rst3);
        return certCode + "." + timestamp + "." + signDataBase64;
 
    }
 
    public static boolean tokenVerify(String token) {
 
        String [] tokenStrs = token.split("\\.");
        if (tokenStrs.length < 3) {
            return false;
        }
 
        String privateKey = "00D631FD5615416EAB63D33A9E66E801F95DE840567504210080006081DE877AE3";
        String publicKey = "04225AACF606D800EA3C2C31FCF8FB161B15F7A8D0460DEB91013D4F228C455E76A2ED8D71BC6525B5DC5CC015C155479D8839950344AEE438A3A6305C90F8269F";
        SM2 sm2 = new SM2(privateKey, publicKey);
        sm2.usePlainEncoding();
 
        //拼接待签名数据
        String needSignData = tokenStrs[0] + tokenStrs[1];
        byte[] needSignDataByte = needSignData.getBytes(StandardCharsets.UTF_8);
 
        return sm2.verify(needSignDataByte, Base64.decode(tokenStrs[2]));
    }
 
    public static boolean tokenVerify2(String token,String publicKey) {
        String [] tokenStrs = token.split("\\.");
        if (tokenStrs.length < 3) {
            return false;
        }
 
        String privateKey = "00D631FD5615416EAB63D33A9E66E801F95DE840567504210080006081DE877AE3";
//        String publicKey ="047719B34C1149EE1068A18E207E2BA4D0F61C42D2336FD0E0AE76D75AD556AB50DF8B8A395624F589DD3FBE12FB1E0DEA059114BD15D0629AE3408FDBC48212FA" ;
        SM2 sm2 = new SM2(privateKey, publicKey);
        sm2.usePlainEncoding();
 
        //拼接待签名数据
        String needSignData = tokenStrs[0] + tokenStrs[1];
        byte[] needSignDataByte = needSignData.getBytes(StandardCharsets.UTF_8);
 
        return sm2.verify(needSignDataByte, Base64.decode(tokenStrs[2]));
    }
 
 
    public static String getPublicKey() {
        String urlString = "https://xcx.geoway.com.cn:8033/v1/cert/getPublicKey";
        try {
            URL url = new URL(urlString);
            HttpURLConnection connection = (HttpURLConnection) url.openConnection();
            connection.setRequestMethod("GET");
            connection.setRequestProperty("Accept", "application/json");
            connection.setRequestProperty("x-lc-token", "UAV32_WHR4E3UAJZTE3KE5IZFDGL7CBU.1724764016746.mDm0ylBxqPyhX2wEishoTh3EulqMRxji4yLGscnew4ZGVfiV9qqJHTzTIbvbLtXOrog6YOHqFTYNy+j06yQ3IA=="); // 设置token
 
            int responseCode = connection.getResponseCode();
            if (responseCode == HttpURLConnection.HTTP_OK) {
                String secret = connection.getHeaderField("x-lc-secret");
                BufferedReader in = new BufferedReader(new InputStreamReader(connection.getInputStream()));
                String inputLine;
                StringBuilder response = new StringBuilder();
 
                while ((inputLine = in.readLine()) != null) {
                    response.append(inputLine);
                }
                in.close();
 
                // 解析响应中的 JSON 并提取 data 信息
                JSONObject jsonResponse = JSONObject.parseObject(response.toString());
                String data = jsonResponse.getString("data");
                byte[] bytes= SM2SignUtil.deSM2(secret, "00D631FD5615416EAB63D33A9E66E801F95DE840567504210080006081DE877AE3");
                return SM4Util.decrypt(bytes,data);
            } else {
                System.out.println("GET 请求失败。响应码：" + responseCode);
            }
        } catch (Exception e) {
            e.printStackTrace();
        }
        return null;
    }
    public static Map<String,String> getPubulicKeys(String token) {
        String urlString = "https://xcx.geoway.com.cn:8033/v1/cert/getcertbycertcode?certcode="+splitBeforeFirstDot(token);
        try {
            URL url = new URL(urlString);
            HttpURLConnection connection = (HttpURLConnection) url.openConnection();
            connection.setRequestMethod("GET");
            connection.setRequestProperty("Accept", "application/json");
            connection.setRequestProperty("x-lc-token",  getToken()); // 设置token
 
            int responseCode = connection.getResponseCode();
            if (responseCode == HttpURLConnection.HTTP_OK) {
                String secret = connection.getHeaderField("x-lc-secret");
                BufferedReader in = new BufferedReader(new InputStreamReader(connection.getInputStream()));
                String inputLine;
                StringBuilder response = new StringBuilder();
 
                while ((inputLine = in.readLine()) != null) {
                    response.append(inputLine);
                }
                in.close();
 
                // 解析响应中的 JSON 并提取 data 信息
                JSONObject jsonResponse = JSONObject.parseObject(response.toString());
                String data = jsonResponse.getString("data");
                byte[] bytes= SM2SignUtil.deSM2(secret, "00D631FD5615416EAB63D33A9E66E801F95DE840567504210080006081DE877AE3");
                // 解析JSON字符串
                JSONObject jsonObject = JSONObject.parseObject(SM4Util.decrypt(bytes,data));
 
                // 获取publickey字段的值
 
                Map<String,String> map =new HashMap<>();
                map.put("publickey",jsonObject.getString("publickey"));
                map.put("orgname",jsonObject.getString("orgname"));
                return map;
            } else {
                System.out.println("GET 请求失败。响应码：" + responseCode);
            }
        } catch (Exception e) {
            e.printStackTrace();
        }
        return null;
    }
    public static String splitBeforeFirstDot(String input) {
        if (input == null || input.isEmpty()) {
            return input;
        }
        return input.split("\\.")[0];
    }
    public static String getPubulicKey(String token) {
        String urlString = "https://xcx.geoway.com.cn:8033/v1/cert/getcertbycertcode?certcode="+splitBeforeFirstDot(token);
        try {
            URL url = new URL(urlString);
            HttpURLConnection connection = (HttpURLConnection) url.openConnection();
            connection.setRequestMethod("GET");
            connection.setRequestProperty("Accept", "application/json");
            connection.setRequestProperty("x-lc-token",  getToken()); // 设置token
 
            int responseCode = connection.getResponseCode();
            if (responseCode == HttpURLConnection.HTTP_OK) {
                String secret = connection.getHeaderField("x-lc-secret");
                BufferedReader in = new BufferedReader(new InputStreamReader(connection.getInputStream()));
                String inputLine;
                StringBuilder response = new StringBuilder();
 
                while ((inputLine = in.readLine()) != null) {
                    response.append(inputLine);
                }
                in.close();
 
                // 解析响应中的 JSON 并提取 data 信息
                JSONObject jsonResponse = JSONObject.parseObject(response.toString());
                String data = jsonResponse.getString("data");
                byte[] bytes= SM2SignUtil.deSM2(secret, "00D631FD5615416EAB63D33A9E66E801F95DE840567504210080006081DE877AE3");
                // 解析JSON字符串
                JSONObject jsonObject = JSONObject.parseObject(SM4Util.decrypt(bytes,data));
 
                // 获取publickey字段的值
 
                return jsonObject.getString("publickey");
            } else {
                System.out.println("GET 请求失败。响应码：" + responseCode);
                return null;
            }
        } catch (Exception e) {
            e.printStackTrace();
        }
        return null;
    }
 
    public static <T> String buildRequestBody(T obj) {
        try {
            return objectMapper.writeValueAsString(obj);
        } catch (JsonProcessingException e) {
            throw new RuntimeException("对象转换为JSON字符串时发生错误", e);
        }
    }
 
 
}