package org.springblade.modules.signature.util;
|
|
import java.io.IOException;
|
import java.util.HashMap;
|
import java.util.Map;
|
|
import javax.servlet.http.HttpServletRequest;
|
|
import com.qcloud.cos.utils.Md5Utils;
|
import liquibase.util.MD5Util;
|
import lombok.extern.slf4j.Slf4j;
|
import org.apache.commons.lang3.StringUtils;
|
import org.springblade.common.utils.Md5SignUtil;
|
import org.springblade.modules.signature.entity.BaseSign;
|
import org.springframework.web.context.request.RequestContextHolder;
|
import org.springframework.web.context.request.ServletRequestAttributes;
|
|
/**
|
* 签名验证工具类
|
* @author arsn
|
* @since 2022-03-10
|
*/
|
@Slf4j
|
public class SignUtils {
|
|
public static String prodSign(BaseSign sign, String accessKeySecret) throws IOException {
|
Map<String, Object> map = new HashMap<>();
|
map.put("sign",sign.getSign());
|
map.put("accessKeyId",sign.getAccessKeyId());
|
map.put("accessDate",sign.getAccessDate());
|
return Md5SignUtil.signRequest(map,accessKeySecret);
|
}
|
|
public static void checkSign(BaseSign signRo, SysApiCo apiCo) throws IOException {
|
// 验证账号是否存在
|
checkAccessKey(apiCo);
|
// 验证账号是否有效
|
checkStatus(apiCo);
|
// 验证账号是否到期
|
checkVldToTm(apiCo);
|
// 验证是否有接口访问权限
|
checkMethod(apiCo);
|
// 验证访问时间是否有效
|
// checkAccessDate(signRo);
|
// 验证签名是否有效
|
checkSign(signRo, apiCo.getAkSecret());
|
}
|
|
private static void checkSign(BaseSign signRo, String accessKeySecret) throws IOException {
|
String sign = prodSign(signRo, accessKeySecret);
|
if (!StringUtils.equals(sign, signRo.getSign())) {
|
|
}
|
}
|
|
private static void checkAccessKey(SysApiCo apiCo) {
|
if (null == apiCo) {
|
// BssExpUtils.error("用户密钥不存在", log);
|
}
|
}
|
|
private static void checkStatus(SysApiCo apiCo) {
|
// if (apiCo.getStatus() == SysApiEn.Status.DISABLE.cd()) {
|
// BssExpUtils.error("用户密钥停用", log);
|
// }
|
}
|
|
@SuppressWarnings("deprecation")
|
private static void checkMethod(SysApiCo apiCo) {
|
String methodStr = apiCo.getMethod();
|
if (StringUtils.isNotBlank(methodStr)) {
|
// HttpServletRequest request = HttpRequestUtils.getHttpServletRequest();
|
ServletRequestAttributes requestAttributes = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes();
|
HttpServletRequest request = requestAttributes.getRequest();
|
String reqtMethod = StringUtils.replaceAll(StringUtils.substring(request.getRequestURI(), 1), "/", ".");
|
|
methodStr = StringUtils.replaceAll(methodStr, "，", ",");
|
String[] methods = StringUtils.split(methodStr, ",");
|
boolean authz = false;
|
for (String method : methods) {
|
if (StringUtils.equals(StringUtils.trim(method), reqtMethod)) {
|
authz = true;
|
break;
|
}
|
}
|
if (!authz) {
|
// BssExpUtils.error("没有访问该方法权限", log);
|
}
|
}
|
}
|
|
private static void checkVldToTm(SysApiCo apiCo) {
|
// Date vldToTm = apiCo.getVldToTm();
|
// if (null != vldToTm && DateUtils.compareMill(vldToTm, DateUtils.getCurrentTime()) > 0) {
|
// BssExpUtils.error("账号到期", log);
|
// }
|
}
|
}
|
