提交开源任务材料

3 years ago · 4b49d82104
12 changed files with 942 additions and 1 deletions
--- a/JSD-8141需求确认书.docx
+++ b/JSD-8141需求确认书.docx
--- a/README.md
+++ b/README.md
@ -1,3 +1,6 @@
 # open-JSD-8141

-JSD-8141 开源任务材料
+JSD-8141 开源任务材料\
+免责说明：该源码为第三方爱好者提供，不保证源码和方案的可靠性，也不提供任何形式的源码教学指导和协助！\
+仅作为开发者学习参考使用！禁止用于任何商业用途！\
+为保护开发者隐私，开发者信息已隐去！若原开发者希望公开自己的信息，可联系hugh处理。
--- a/lib/fastjson-1.2.75.jar
+++ b/lib/fastjson-1.2.75.jar
--- a/plugin.xml
+++ b/plugin.xml
@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?><plugin>
+    <id>com.fr.plugin.xhSSO</id>
+    <name><![CDATA[单点登录]]></name>
+    <active>yes</active>
+    <version>1.0.2</version>
+    <env-version>10.0</env-version>
+    <jartime>2018-07-31</jartime>
+    <vendor>fr.open</vendor>
+    <description><![CDATA[单点登录]]></description>
+    <change-notes><![CDATA[
+    ]]></change-notes>
+    <main-package>com.fr.plugin.xhSSO</main-package>
+    <lifecycle-monitor class="com.fr.plugin.xhSSO.config.InitializeMonitor"/>
+
+    <extra-decision>
+            <GlobalRequestFilterProvider class="com.fr.plugin.xhSSO.filter.SSOFilter"/>
+    </extra-decision>
+
+    <function-recorder class="com.fr.plugin.xhSSO.config.PluginSimpleConfig"/>
+</plugin>
--- a/src/main/java/com/fr/plugin/xhSSO/config/InitializeMonitor.java
+++ b/src/main/java/com/fr/plugin/xhSSO/config/InitializeMonitor.java
@ -0,0 +1,21 @@
+package com.fr.plugin.xhSSO.config;
+
+import com.fr.plugin.context.PluginContext;
+import com.fr.plugin.observer.inner.AbstractPluginLifecycleMonitor;
+
+/**
+ * @author richie
+ * @version 10.0
+ * Created by richie on 2018-12-04
+ */
+public class InitializeMonitor extends AbstractPluginLifecycleMonitor {
+    @Override
+    public void afterRun(PluginContext pluginContext) {
+        PluginSimpleConfig.getInstance();
+    }
+
+    @Override
+    public void beforeStop(PluginContext pluginContext) {
+
+    }
+}
--- a/src/main/java/com/fr/plugin/xhSSO/config/PluginSimpleConfig.java
+++ b/src/main/java/com/fr/plugin/xhSSO/config/PluginSimpleConfig.java
@ -0,0 +1,123 @@
+package com.fr.plugin.xhSSO.config;
+
+import com.fr.config.*;
+import com.fr.config.holder.Conf;
+import com.fr.config.holder.factory.Holders;
+import com.fr.intelli.record.Focus;
+import com.fr.intelli.record.Original;
+import com.fr.record.analyzer.EnableMetrics;
+
+@Visualization(category = "单点登录配置")
+@EnableMetrics
+public class PluginSimpleConfig extends DefaultConfiguration {
+
+    private static volatile PluginSimpleConfig config = null;
+
+    @Focus(id="com.fr.plugin.sso.config.simple", text = "单点登录配置", source = Original.PLUGIN)
+    public static PluginSimpleConfig getInstance() {
+        if (config == null) {
+            config = ConfigContext.getConfigInstance(PluginSimpleConfig.class);
+        }
+        return config;
+    }
+
+    @Identifier(value = "index", name = "帆软主页", description = "帆软主页", status = Status.SHOW)
+    private Conf<String> index = Holders.simple("http://localhost:8075/webroot/decision");
+
+    @Identifier(value = "client_id", name = "client_id", description = "client_id", status = Status.SHOW)
+    private Conf<String> appId = Holders.simple("xxx");
+
+    @Identifier(value = "client_secret", name = "client_secret", description = "client_secret", status = Status.SHOW)
+    private Conf<String> secret = Holders.simple("xxx");
+
+    @Identifier(value = "authUrl", name = "获取code地址", description = "获取code地址", status = Status.SHOW)
+    private Conf<String> authUrl = Holders.simple("xxx");
+
+    @Identifier(value = "tokenUrl", name = "获取token地址", description = "获取token地址", status = Status.SHOW)
+    private Conf<String> tokenUrl = Holders.simple("xxx");
+
+    @Identifier(value = "openIdUrl", name = "获取openId地址", description = "获取openId地址", status = Status.SHOW)
+    private Conf<String> logoutUrl = Holders.simple("xxx");
+
+    @Identifier(value = "userUrl", name = "获取用户信息地址", description = "获取用户信息地址", status = Status.SHOW)
+    private Conf<String> userUrl = Holders.simple("xxx");
+
+    @Identifier(value = "redirectUrl", name = "用户名字段", description = "用户名字段", status = Status.SHOW)
+    private Conf<String> redirectUrl = Holders.simple("loginName");
+
+    public String getIndex() {
+        return index.get();
+    }
+
+    public void setIndex(String url) {
+        this.index.set(url);
+    }
+
+    public String getAppId() {
+        return appId.get();
+    }
+
+    public void setAppId(String url) {
+        this.appId.set(url);
+    }
+
+    public String getSecret() {
+        return secret.get();
+    }
+
+    public void setSecret(String url) {
+        this.secret.set(url);
+    }
+
+    public String getAuthUrl() {
+        return authUrl.get();
+    }
+
+    public void setAuthUrl(String url) {
+        this.authUrl.set(url);
+    }
+
+    public String getTokenUrl() {
+        return tokenUrl.get();
+    }
+
+    public void setTokenUrl(String url) {
+        this.tokenUrl.set(url);
+    }
+
+    public String getUserUrl() {
+        return userUrl.get();
+    }
+
+    public void setUserUrl(String url) {
+        this.userUrl.set(url);
+    }
+
+    public String getLogoutUrl() {
+        return logoutUrl.get();
+    }
+
+    public void setLogoutUrl(String url) {
+        this.logoutUrl.set(url);
+    }
+
+    public String getRedirectUrl() {
+        return redirectUrl.get();
+    }
+
+    public void setRedirectUrl(String url) {
+        this.redirectUrl.set(url);
+    }
+
+    @Override
+    public Object clone() throws CloneNotSupportedException {
+        PluginSimpleConfig cloned = (PluginSimpleConfig) super.clone();
+//        cloned.text = (Conf<String>) text.clone();
+//        cloned.count = (Conf<Integer>) count.clone();
+//        cloned.price = (Conf<Double>) price.clone();
+//        cloned.time = (Conf<Long>) time.clone();
+//        cloned.student = (Conf<Boolean>) student.clone();
+        return cloned;
+    }
+
+}
--- a/src/main/java/com/fr/plugin/xhSSO/filter/SSOFilter.java
+++ b/src/main/java/com/fr/plugin/xhSSO/filter/SSOFilter.java
@ -0,0 +1,191 @@
+package com.fr.plugin.xhSSO.filter;
+
+import com.fr.decision.fun.impl.AbstractGlobalRequestFilterProvider;
+import com.fr.json.JSONObject;
+import com.fr.plugin.xhSSO.config.PluginSimpleConfig;
+import com.fr.plugin.xhSSO.utils.FRUtils;
+import com.fr.plugin.xhSSO.utils.HttpUtils;
+import com.fr.plugin.xhSSO.utils.Utils;
+import com.fr.record.analyzer.EnableMetrics;
+import javax.servlet.FilterChain;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.IOException;
+
+@EnableMetrics
+public class SSOFilter extends AbstractGlobalRequestFilterProvider {
+    @Override
+    public String filterName() {
+        return "xhssoFilter";
+    }
+
+    @Override
+    public String[] urlPatterns() {
+        return new String[]{"/*"};
+    }
+
+    @Override
+    public void doFilter(HttpServletRequest req, HttpServletResponse res, FilterChain chain ){
+        //code
+        String code = req.getParameter("code");
+        //完整请求路径
+        String allUrl = FRUtils.getAllUrl(req);
+        //是否放行
+        boolean release = isRelease(req);
+
+        if(release){
+            release(req,res,chain);
+            return;
+        }
+
+        if(Utils.isNullStr(code)){
+            //跳转认证中心
+            redirect(req,res);
+            return;
+        }
+
+        String redirectUrl = allUrl.contains("&code") ? allUrl.substring(0,allUrl.indexOf("&code")) : allUrl.substring(0,allUrl.indexOf("?code"));
+
+        //获取token
+        String token = getToken(code,redirectUrl);
+        //获取openId
+        String openId = getOpenId(token);
+        //获取userInfo
+        String username = getUsername(openId,token);
+
+        if(Utils.isNullStr(username) || !FRUtils.isUserExist(username)){
+            PluginSimpleConfig psc = PluginSimpleConfig.getInstance();
+            String index = psc.getIndex();
+            try {
+                res.sendRedirect(index+"/login");
+            } catch (IOException e) {
+                FRUtils.FRLogInfo("跳转登录页异常!");
+            }
+
+            return;
+        }
+
+        //登录
+        FRUtils.login(req,res,username,"");
+        release(req,res,chain);
+    }
+
+    private boolean isRelease(HttpServletRequest req) {
+        String url = FRUtils.getAllUrl(req);
+        FRUtils.FRLogInfo("requestUrl:"+url);
+
+        boolean isLogin = FRUtils.isLogin(req);
+        boolean isRemote = url.contains("remote");
+        boolean isLoginPage = url.contains("login")||url.contains("decision/file")||url.contains("decision/resource")||url.contains("decision/system")||url.contains("query/ip");
+        boolean iswxSSO = url.contains("weixin/single/login");
+        return isLogin || isRemote || isLoginPage || iswxSSO;
+    }
+
+    //获取用户名
+    private static String getUsername(String openId,String token) {
+        String username = "";
+        PluginSimpleConfig pluginSimpleConfig = PluginSimpleConfig.getInstance();
+        String userUrl= pluginSimpleConfig.getUserUrl();
+        userUrl += "?access_token="+token+"&oauth_consumer_key=BI_REPORT&openid="+openId;
+        String result = HttpUtils.get(userUrl,null,null);
+
+        if(Utils.isNullStr(result)){
+            return "";
+        }
+
+        JSONObject json = new JSONObject(result);
+        String ret = json.getString("ret");
+
+        if(!"0".equals(ret)){
+            return "";
+        }
+
+        String userinfoStr = json.getString("userinfo");
+        com.alibaba.fastjson.JSONObject userinfo = com.alibaba.fastjson.JSONObject.parseObject(userinfoStr);
+        String nameStr = pluginSimpleConfig.getRedirectUrl();
+        username = userinfo.getString(nameStr);
+
+        if(Utils.isNullStr(username)){
+            return "";
+        }
+
+        return username;
+    }
+
+    //获取用户id
+    private static String getOpenId(String token) {
+        PluginSimpleConfig pluginSimpleConfig = PluginSimpleConfig.getInstance();
+        String openIdURL= pluginSimpleConfig.getLogoutUrl();
+        openIdURL += "?access_token="+token;
+        String openId = "";
+        String result = HttpUtils.get(openIdURL,null,null);
+
+        if(Utils.isNullStr(result)){
+            return "";
+        }
+
+        JSONObject json = new JSONObject(result);
+        openId = json.getString("openid");
+
+        if(Utils.isNullStr(openId)){
+            return "";
+        }
+
+        return openId;
+    }
+
+//
+    //获取token
+    private static String getToken(String code,String redirectUrl) {
+        PluginSimpleConfig psc = PluginSimpleConfig.getInstance();
+        String clientId = psc.getAppId();
+        String secret = psc.getSecret();
+        String token = "";
+        redirectUrl = "https://www.baidu.com";
+        String tokenUrl = psc.getTokenUrl();
+        tokenUrl += "?grant_type=authorization_code&client_id="+clientId+"&client_secret="+secret+"&code="+code+
+        "&redirect_uri="+redirectUrl;
+
+
+        String result = HttpUtils.get(tokenUrl,null,null);
+
+        if(Utils.isNullStr(result)){
+            return "";
+        }
+
+        JSONObject json = new JSONObject(result);
+        token = json.getString("access_token");
+
+        if(Utils.isNullStr(token)){
+            return "";
+        }
+
+        return token;
+    }
+
+    //跳转认证中心
+    private void redirect(HttpServletRequest req,HttpServletResponse res) {
+        PluginSimpleConfig psc = PluginSimpleConfig.getInstance();
+        String rzzxurl = psc.getAuthUrl();
+        String clienId = psc.getAppId();
+
+        String url = FRUtils.getAllUrl(req);
+
+        rzzxurl+= "?response_type=code&client_id="+clienId+"&redirect_uri="+url+"&state=1";
+        try {
+            res.sendRedirect(rzzxurl);
+        } catch (IOException e) {
+            FRUtils.FRLogInfo("跳转认证中心异常:"+e.getMessage());
+        }
+    }
+
+    //放行拦截器
+    private void release(HttpServletRequest req, HttpServletResponse res, FilterChain chain) {
+        try{
+            chain.doFilter(req,res);
+        }catch (Exception e){
+            FRUtils.FRLogInfo("拦截失败");
+        }
+    }
+}
+
--- a/src/main/java/com/fr/plugin/xhSSO/utils/FRUtils.java
+++ b/src/main/java/com/fr/plugin/xhSSO/utils/FRUtils.java
@ -0,0 +1,158 @@
+package com.fr.plugin.xhSSO.utils;
+
+import com.fr.decision.authority.AuthorityContext;
+import com.fr.decision.authority.data.User;
+import com.fr.decision.webservice.login.LogInOutResultInfo;
+import com.fr.decision.webservice.utils.DecisionServiceConstants;
+import com.fr.decision.webservice.v10.login.LoginService;
+import com.fr.decision.webservice.v10.login.event.LogInOutEvent;
+import com.fr.decision.webservice.v10.user.UserService;
+import com.fr.event.EventDispatcher;
+import com.fr.log.FineLoggerFactory;
+import com.fr.stable.StringUtils;
+import com.fr.stable.query.QueryFactory;
+import com.fr.stable.query.restriction.RestrictionFactory;
+import com.fr.web.utils.WebUtils;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import javax.servlet.http.HttpSession;
+import java.util.List;
+
+public class FRUtils {
+    /**
+     * 判断用户是否存在
+     * @param userName
+     * @return
+     */
+    public static boolean isUserExist(String userName){
+        if (StringUtils.isEmpty(userName)) {
+            return false;
+        } else {
+            try {
+                List var1 = AuthorityContext.getInstance().getUserController().find(QueryFactory.create().addRestriction(RestrictionFactory.eq("userName", userName)));
+                return var1 != null && !var1.isEmpty();
+            } catch (Exception var2) {
+                FineLoggerFactory.getLogger().error(var2.getMessage());
+                return false;
+            }
+        }
+    }
+
+    /**
+     * 判断是否登录FR
+     * @param req
+     * @return
+     */
+    public static boolean isLogin(HttpServletRequest req){
+        return LoginService.getInstance().isLogged(req);
+    }
+
+    /**
+     * 帆软登录
+     * @param httpServletRequest
+     * @param httpServletResponse
+     * @param userName
+     * @param url
+     */
+    public static void login(HttpServletRequest httpServletRequest,HttpServletResponse httpServletResponse,String userName,String url){
+
+        FineLoggerFactory.getLogger().info("FRLOG:用户名:"+userName);
+        FineLoggerFactory.getLogger().info("FRLOG:跳转链接:"+url);
+
+
+        //判断用户名是否为空
+        if(!Utils.isNullStr(userName)){
+            if(isUserExist(userName)){
+                String FRToken = "";
+
+                try {
+                    HttpSession session = httpServletRequest.getSession(true);
+
+                    FRToken = LoginService.getInstance().login(httpServletRequest, httpServletResponse, userName);
+
+                    httpServletRequest.setAttribute(DecisionServiceConstants.FINE_AUTH_TOKEN_NAME,FRToken);
+
+                    session.setAttribute(DecisionServiceConstants.FINE_AUTH_TOKEN_NAME, FRToken);
+                    EventDispatcher.fire(LogInOutEvent.LOGIN,new LogInOutResultInfo(httpServletRequest,httpServletResponse,userName,true));
+                    FineLoggerFactory.getLogger().info("FRLOG:登陆成功!");
+
+                    if(!Utils.isNullStr(url)){
+                        httpServletResponse.sendRedirect(url);
+                    }
+                } catch (Exception e) {
+                    ResponseUtils.failedResponse(httpServletResponse,"登录异常，请联系管理员!");
+                    FineLoggerFactory.getLogger().info("FRLOG:登录异常，请联系管理员!");
+                    FineLoggerFactory.getLogger().info("FRLOGException:"+e.getMessage());
+                }
+            }else{
+                ResponseUtils.failedResponse(httpServletResponse,"用户在报表系统中不存在!");
+                FineLoggerFactory.getLogger().info("FRLOG:用户在报表系统中不存在!");
+            }
+        }else{
+            ResponseUtils.failedResponse(httpServletResponse,"用户名不能为空!");
+            FineLoggerFactory.getLogger().info("FRLOG:用户名不能为空!");
+        }
+    }
+
+    /**
+     *
+     * @param httpServletRequest
+     * @param httpServletResponse
+     */
+    public static void logout(HttpServletRequest httpServletRequest,HttpServletResponse httpServletResponse)
+    {
+        if(!isLogin(httpServletRequest)){
+            return ;
+        }
+
+        try {
+            LoginService.getInstance().logout(httpServletRequest,httpServletResponse);
+        } catch (Exception e) {
+            ResponseUtils.failedResponse(httpServletResponse,"登出异常，请联系管理员!");
+            FineLoggerFactory.getLogger().info("FRLOG:登出异常，请联系管理员!");
+            FineLoggerFactory.getLogger().info("FRLOGException:"+e.getMessage());
+        }
+    }
+
+    /**
+     * 打印FR日志
+     * @param message
+     */
+    public static void FRLogInfo(String message){
+        FineLoggerFactory.getLogger().info("FRLOG:"+message);
+    }
+
+    /**
+     * 根据用户名获取用户信息
+     * @param userName
+     * @return
+     */
+    public static User getFRUserByUserName(String userName){
+        try {
+            return UserService.getInstance().getUserByUserName(userName);
+        } catch (Exception e) {
+            FRLogInfo("获取用户信息异常:"+e.getMessage());
+        }
+
+        return null;
+    }
+
+    /**
+     * 解密FR密码
+     * @param password
+     * @return
+     */
+//    public static String decryptFRPsd(String password){
+//        FRLogInfo("解密密码:"+password);
+//        return TransmissionTool.decrypt(password);
+//    }
+
+    /**
+     * 获取带参数的访问链接
+     * @return
+     */
+    public static String getAllUrl(HttpServletRequest httpServletRequest){
+        return  WebUtils.getOriginalURL(httpServletRequest);
+    }
+}
--- a/src/main/java/com/fr/plugin/xhSSO/utils/HttpUtils.java
+++ b/src/main/java/com/fr/plugin/xhSSO/utils/HttpUtils.java
@ -0,0 +1,237 @@
+package com.fr.plugin.xhSSO.utils;
+
+import com.fr.log.FineLoggerFactory;
+import com.fr.third.org.apache.http.HttpEntity;
+import com.fr.third.org.apache.http.HttpResponse;
+import com.fr.third.org.apache.http.HttpStatus;
+import com.fr.third.org.apache.http.NameValuePair;
+import com.fr.third.org.apache.http.client.CookieStore;
+import com.fr.third.org.apache.http.client.entity.UrlEncodedFormEntity;
+import com.fr.third.org.apache.http.client.methods.HttpGet;
+import com.fr.third.org.apache.http.client.methods.HttpPost;
+import com.fr.third.org.apache.http.conn.ssl.NoopHostnameVerifier;
+import com.fr.third.org.apache.http.entity.StringEntity;
+import com.fr.third.org.apache.http.impl.client.BasicCookieStore;
+import com.fr.third.org.apache.http.impl.client.CloseableHttpClient;
+import com.fr.third.org.apache.http.impl.client.HttpClients;
+import com.fr.third.org.apache.http.impl.cookie.BasicClientCookie;
+import com.fr.third.org.apache.http.message.BasicNameValuePair;
+import com.fr.third.org.apache.http.ssl.SSLContexts;
+import com.fr.third.org.apache.http.ssl.TrustStrategy;
+import com.fr.third.org.apache.http.util.EntityUtils;
+
+import javax.net.ssl.SSLContext;
+import javax.servlet.http.Cookie;
+import java.io.UnsupportedEncodingException;
+import java.security.KeyManagementException;
+import java.security.KeyStoreException;
+import java.security.NoSuchAlgorithmException;
+import java.security.cert.CertificateException;
+import java.security.cert.X509Certificate;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+
+public class HttpUtils {
+    /**
+     * httpGet请求
+     * @param url
+     * @return
+     */
+    public static String get(String url,Cookie[] cookies,Map<String,String> header){
+        FineLoggerFactory.getLogger().info("FRLOG:HttpUtils.get--url:"+url);
+
+        //创建httpClient
+        CloseableHttpClient httpclient = createHttpClient(cookies);
+
+        HttpGet getMethod = new HttpGet(url);
+
+        if(header != null && header.size() > 0){
+            Set<String> keySet = header.keySet();
+
+            for(String key : keySet){
+                getMethod.setHeader(key,header.get(key));
+            }
+        }
+
+        try {
+            HttpResponse response = httpclient.execute(getMethod);
+
+            FineLoggerFactory.getLogger().info("FRLOG:HttpUtils.get--status:"+response.getStatusLine().getStatusCode());
+
+            if (response.getStatusLine().getStatusCode() == HttpStatus.SC_OK) {
+                HttpEntity entity = response.getEntity();
+                String returnResult = EntityUtils.toString(entity, "utf-8");
+
+                FineLoggerFactory.getLogger().info("FRLOG:HttpUtils.get--returnResult:"+returnResult);
+
+                return returnResult;
+            }
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().info("FRLOG:HttpUtils.get--exception:"+e.getMessage());
+        }
+
+        return "";
+    }
+
+    /**
+     * HttpPost请求
+     * @param postMethod
+     * @return
+     */
+    private static String HttpPost(HttpPost postMethod){
+        CloseableHttpClient httpclient = createHttpClient(null);
+
+        try {
+            HttpResponse response = httpclient.execute(postMethod);
+
+            FineLoggerFactory.getLogger().info("FRLOG:HttpPost:status:"+response.getStatusLine().getStatusCode());
+
+            if (response.getStatusLine().getStatusCode() == HttpStatus.SC_OK) {
+                HttpEntity entity = response.getEntity();
+                String returnResult = EntityUtils.toString(entity, "utf-8");
+
+                FineLoggerFactory.getLogger().info("FRLOG:HttpPost:returnResult:"+returnResult);
+
+                return returnResult;
+            }
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().info("FRLOG:HttpPost:exception:"+e.getMessage());
+        }
+
+        return "";
+    }
+
+    public static String HttpPostXML(String url, String xmlParam){
+        FineLoggerFactory.getLogger().info("FRLOG:HttpPostXML:url:"+url);
+
+        HttpPost postMethod = new HttpPost(url);
+
+        postMethod.setHeader("Content-type", "text/html");
+        HttpEntity entity2 = null;
+        try {
+            entity2 = new StringEntity(xmlParam);
+        } catch (UnsupportedEncodingException e) {
+            FineLoggerFactory.getLogger().info("FRLOG:HttpPostXML:参数异常:"+e.getMessage());
+            return "";
+        }
+
+        postMethod.setEntity(entity2);
+
+        return HttpPost(postMethod);
+    }
+
+    public static String HttpPostJson(String url, String param,Map<String,String> header){
+        FineLoggerFactory.getLogger().info("FRLOG:HttpPostJSON:url:"+url);
+
+        HttpPost postMethod = new HttpPost(url);
+
+        postMethod.setHeader("Content-Type","application/json");
+
+        if(header != null && header.size() > 0){
+            Set<String> keySet = header.keySet();
+
+            for(String key : keySet){
+                postMethod.setHeader(key,header.get(key));
+            }
+        }
+
+        if(!Utils.isNullStr(param)){
+            HttpEntity entity2 = null;
+            try {
+                entity2 = new StringEntity(param);
+            } catch (UnsupportedEncodingException e) {
+                FineLoggerFactory.getLogger().info("FRLOG:HttpPostJSON:参数异常:"+e.getMessage());
+                return "";
+            }
+
+            postMethod.setEntity(entity2);
+        }
+
+        return HttpPost(postMethod);
+    }
+
+    public static String HttpPostWWWForm(String url, Map<String,String> header,Map<String,String> param){
+        FineLoggerFactory.getLogger().info("FRLOG:HttpWWWForm:url:"+url);
+
+        HttpPost postMethod = new HttpPost(url);
+
+        if(header != null && header.size() > 0){
+            Set<String> keySet = header.keySet();
+
+            for(String key : keySet){
+                postMethod.setHeader(key,header.get(key));
+            }
+        }
+
+        if(param != null && param.size() > 0){
+            List<NameValuePair> params = new ArrayList<NameValuePair>(param.size());
+
+            for(Map.Entry<String,String> map : param.entrySet()){
+                params.add(new BasicNameValuePair(map.getKey(), map.getValue()));
+            }
+
+            try {
+                postMethod.setEntity(new UrlEncodedFormEntity(params, "UTF-8"));
+            } catch (UnsupportedEncodingException e) {
+                FineLoggerFactory.getLogger().info("FRLOG:HttpWWWForm:异常:"+e.getMessage());
+                return "";
+            }
+        }
+
+        return HttpPost(postMethod);
+    }
+
+    private static CloseableHttpClient createHttpClient(Cookie[] cookies){
+
+        SSLContext sslContext = null;
+        try {
+            sslContext = SSLContexts.custom().loadTrustMaterial(null, new TrustStrategy() {
+                @Override
+                public boolean isTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
+                    return true;
+                }
+            }).build();
+        } catch (NoSuchAlgorithmException e) {
+            FRUtils.FRLogInfo("createHttpClientException:"+e.getMessage());
+        } catch (KeyManagementException e) {
+            FRUtils.FRLogInfo("createHttpClientException:"+e.getMessage());
+        } catch (KeyStoreException e) {
+            FRUtils.FRLogInfo("createHttpClientException:"+e.getMessage());
+        }
+
+        CloseableHttpClient httpclient = null;
+
+        if(cookies != null && cookies.length > 0){
+            CookieStore cookieStore = cookieToCookieStore(cookies);
+
+            httpclient = HttpClients.custom().setSslcontext(sslContext).
+                    setSSLHostnameVerifier(new NoopHostnameVerifier()).setDefaultCookieStore(cookieStore).build();
+        }
+        else{
+            httpclient = HttpClients.custom().setSslcontext(sslContext).
+                    setSSLHostnameVerifier(new NoopHostnameVerifier()).build();
+        }
+
+        return httpclient;
+    }
+
+    /**
+     * cookies转cookieStore
+     * @param cookies
+     * @return
+     */
+    public static CookieStore cookieToCookieStore(Cookie[] cookies){
+        CookieStore cookieStore = new BasicCookieStore();
+
+        if(cookies != null && cookies.length>0){
+            for(Cookie cookie : cookies){
+                BasicClientCookie cookie1 = new BasicClientCookie(cookie.getName(), cookie.getValue());
+                cookieStore.addCookie(cookie1);
+            }
+        }
+
+        return cookieStore;
+    }
+}
--- a/src/main/java/com/fr/plugin/xhSSO/utils/ResponseUtils.java
+++ b/src/main/java/com/fr/plugin/xhSSO/utils/ResponseUtils.java
@ -0,0 +1,94 @@
+package com.fr.plugin.xhSSO.utils;
+
+import com.fr.json.JSONObject;
+import com.fr.log.FineLoggerFactory;
+import com.fr.web.utils.WebUtils;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.PrintWriter;
+
+public class ResponseUtils {
+    private static final int SUCCESS = 200;
+    private static final int FAILED = -1;
+
+    public static void successResponse(HttpServletResponse res, String body) {
+        response(res, body, SUCCESS);
+    }
+
+    public static void failedResponse(HttpServletResponse res, String body) {
+        response(res, body, FAILED);
+    }
+
+    private static void response(HttpServletResponse res, String body, int code) {
+        JSONObject object = new JSONObject();
+        PrintWriter pw;
+        try {
+            object.put("code", code);
+            object.put("data", body);
+            pw = WebUtils.createPrintWriter(res);
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().info(e.getMessage());
+            return;
+        }
+        res.setContentType("application/json;charset=utf-8");
+        String result = object.toString();
+        pw.println(result);
+        pw.flush();
+        pw.close();
+    }
+
+    public static void response(HttpServletResponse res,JSONObject json){
+        PrintWriter pw;
+        try {
+            pw = WebUtils.createPrintWriter(res);
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().info(e.getMessage());
+            return;
+        }
+        res.setContentType("application/json;charset=utf-8");
+        String result = json.toString();
+        pw.println(result);
+        pw.flush();
+        pw.close();
+    }
+
+    public static void responseXml(HttpServletResponse res,String xml){
+        PrintWriter pw;
+        try {
+            pw = WebUtils.createPrintWriter(res);
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().info(e.getMessage());
+            return;
+        }
+        res.setContentType("text/xml;charset=utf-8");
+        pw.println(xml);
+        pw.flush();
+        pw.close();
+    }
+
+    public static void setCSRFHeader(HttpServletResponse httpServletResponse){
+        httpServletResponse.setHeader("Access-Control-Allow-Origin", "*");
+        httpServletResponse.setHeader("Access-Control-Allow-Methods", "POST,GET,OPTIONS,DELETE,HEAD,PUT,PATCH");
+        httpServletResponse.setHeader("Access-Control-Max-Age", "36000");
+        httpServletResponse.setHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept,Authorization,authorization");
+    }
+
+    public static void responseJsonp(HttpServletRequest req, HttpServletResponse res, JSONObject json){
+        PrintWriter pw;
+        try {
+            pw = WebUtils.createPrintWriter(res);
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().info(e.getMessage());
+            return;
+        }
+        res.setContentType("text/javascript;charset=utf-8;charset=utf-8");
+        String result = json.toString();
+
+        String jsonp=req.getParameter("callback");
+
+        pw.println(jsonp+"("+result+")");
+        pw.flush();
+        pw.close();
+    }
+}
--- a/src/main/java/com/fr/plugin/xhSSO/utils/Utils.java
+++ b/src/main/java/com/fr/plugin/xhSSO/utils/Utils.java
@ -0,0 +1,94 @@
+package com.fr.plugin.xhSSO.utils;
+
+import com.fr.json.JSONObject;
+import com.fr.stable.CodeUtils;
+import com.fr.third.org.apache.commons.codec.digest.DigestUtils;
+import javax.servlet.http.HttpServletRequest;
+import java.io.BufferedReader;
+import java.util.UUID;
+
+public class Utils {
+
+    /**
+     * 判断字符串是否为空
+     * @param str
+     * @return  true 空字符串  false 非空字符串
+     */
+    public static boolean isNullStr(String str){
+        return !(str != null && !str.isEmpty() && !"null".equals(str));
+    }
+
+    /**
+     * 判断字符串是否非空
+     * @param str
+     * @return
+     */
+    public static boolean isNotNullStr(String str){
+        return !isNullStr(str);
+    }
+
+    /**
+     * MD5加密
+     * @param str
+     * @return
+     */
+    public static String getMd5Str(String str)
+    {
+        return DigestUtils.md5Hex(str);
+    }
+
+
+    /**
+     * 获取完整的访问路径
+     */
+    public static String getAllUrl(HttpServletRequest req, String queryStr){
+        String url = req.getRequestURL().toString();
+
+        if(isNullStr(queryStr)){
+            return url;
+        }
+
+        return url+"?"+queryStr;
+    }
+
+	/**
+     * 帆软shaEncode加密
+     */
+
+	public static String shaEncode(String str){
+		return CodeUtils.sha256Encode(str);
+	}
+
+    /**
+     * 获取uuid
+     */
+    public static String uuid(){
+        return UUID.randomUUID().toString();
+    }
+
+    public static String replaceNullStr(String str,String replace){
+        if(isNullStr(str)){
+            return replace;
+        }
+
+        return str;
+    }
+
+    public static JSONObject getRequestBody(HttpServletRequest req){
+        StringBuffer sb = new StringBuffer();
+        String line = null;
+        try {
+            BufferedReader reader = req.getReader();
+            while ((line = reader.readLine()) != null)
+                sb.append(line);
+        } catch (Exception e) {
+            FRUtils.FRLogInfo("getRequestBody:exception:"+e.getMessage());
+        }
+        //将空格和换行符替换掉避免使用反序列化工具解析对象时失败
+        String jsonString = sb.toString().replaceAll("\\s","").replaceAll("\n","");
+
+        JSONObject json = new JSONObject(jsonString);
+
+        return json;
+    }
+}
--- a/使用手册.docx
+++ b/使用手册.docx