diff --git a/JSD-8508-配置使用文档.docx b/JSD-8508-配置使用文档.docx new file mode 100644 index 0000000..36778d4 Binary files /dev/null and b/JSD-8508-配置使用文档.docx differ diff --git a/JSD-8508需求确认书.docx b/JSD-8508需求确认书.docx new file mode 100644 index 0000000..fddc787 Binary files /dev/null and b/JSD-8508需求确认书.docx differ diff --git a/LICENSE b/LICENSE new file mode 100644 index 0000000..76cf19e --- /dev/null +++ b/LICENSE @@ -0,0 +1,201 @@ + Apache License + Version 2.0, January 2004 + http://www.apache.org/licenses/ + + TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION + + 1. Definitions. + + "License" shall mean the terms and conditions for use, reproduction, + and distribution as defined by Sections 1 through 9 of this document. + + "Licensor" shall mean the copyright owner or entity authorized by + the copyright owner that is granting the License. + + "Legal Entity" shall mean the union of the acting entity and all + other entities that control, are controlled by, or are under common + control with that entity. For the purposes of this definition, + "control" means (i) the power, direct or indirect, to cause the + direction or management of such entity, whether by contract or + otherwise, or (ii) ownership of fifty percent (50%) or more of the + outstanding shares, or (iii) beneficial ownership of such entity. + + "You" (or "Your") shall mean an individual or Legal Entity + exercising permissions granted by this License. + + "Source" form shall mean the preferred form for making modifications, + including but not limited to software source code, documentation + source, and configuration files. + + "Object" form shall mean any form resulting from mechanical + transformation or translation of a Source form, including but + not limited to compiled object code, generated documentation, + and conversions to other media types. + + "Work" shall mean the work of authorship, whether in Source or + Object form, made available under the License, as indicated by a + copyright notice that is included in or attached to the work + (an example is provided in the Appendix below). + + "Derivative Works" shall mean any work, whether in Source or Object + form, that is based on (or derived from) the Work and for which the + editorial revisions, annotations, elaborations, or other modifications + represent, as a whole, an original work of authorship. For the purposes + of this License, Derivative Works shall not include works that remain + separable from, or merely link (or bind by name) to the interfaces of, + the Work and Derivative Works thereof. + + "Contribution" shall mean any work of authorship, including + the original version of the Work and any modifications or additions + to that Work or Derivative Works thereof, that is intentionally + submitted to Licensor for inclusion in the Work by the copyright owner + or by an individual or Legal Entity authorized to submit on behalf of + the copyright owner. For the purposes of this definition, "submitted" + means any form of electronic, verbal, or written communication sent + to the Licensor or its representatives, including but not limited to + communication on electronic mailing lists, source code control systems, + and issue tracking systems that are managed by, or on behalf of, the + Licensor for the purpose of discussing and improving the Work, but + excluding communication that is conspicuously marked or otherwise + designated in writing by the copyright owner as "Not a Contribution." + + "Contributor" shall mean Licensor and any individual or Legal Entity + on behalf of whom a Contribution has been received by Licensor and + subsequently incorporated within the Work. + + 2. Grant of Copyright License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + copyright license to reproduce, prepare Derivative Works of, + publicly display, publicly perform, sublicense, and distribute the + Work and such Derivative Works in Source or Object form. + + 3. Grant of Patent License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + (except as stated in this section) patent license to make, have made, + use, offer to sell, sell, import, and otherwise transfer the Work, + where such license applies only to those patent claims licensable + by such Contributor that are necessarily infringed by their + Contribution(s) alone or by combination of their Contribution(s) + with the Work to which such Contribution(s) was submitted. If You + institute patent litigation against any entity (including a + cross-claim or counterclaim in a lawsuit) alleging that the Work + or a Contribution incorporated within the Work constitutes direct + or contributory patent infringement, then any patent licenses + granted to You under this License for that Work shall terminate + as of the date such litigation is filed. + + 4. Redistribution. You may reproduce and distribute copies of the + Work or Derivative Works thereof in any medium, with or without + modifications, and in Source or Object form, provided that You + meet the following conditions: + + (a) You must give any other recipients of the Work or + Derivative Works a copy of this License; and + + (b) You must cause any modified files to carry prominent notices + stating that You changed the files; and + + (c) You must retain, in the Source form of any Derivative Works + that You distribute, all copyright, patent, trademark, and + attribution notices from the Source form of the Work, + excluding those notices that do not pertain to any part of + the Derivative Works; and + + (d) If the Work includes a "NOTICE" text file as part of its + distribution, then any Derivative Works that You distribute must + include a readable copy of the attribution notices contained + within such NOTICE file, excluding those notices that do not + pertain to any part of the Derivative Works, in at least one + of the following places: within a NOTICE text file distributed + as part of the Derivative Works; within the Source form or + documentation, if provided along with the Derivative Works; or, + within a display generated by the Derivative Works, if and + wherever such third-party notices normally appear. The contents + of the NOTICE file are for informational purposes only and + do not modify the License. You may add Your own attribution + notices within Derivative Works that You distribute, alongside + or as an addendum to the NOTICE text from the Work, provided + that such additional attribution notices cannot be construed + as modifying the License. + + You may add Your own copyright statement to Your modifications and + may provide additional or different license terms and conditions + for use, reproduction, or distribution of Your modifications, or + for any such Derivative Works as a whole, provided Your use, + reproduction, and distribution of the Work otherwise complies with + the conditions stated in this License. + + 5. Submission of Contributions. Unless You explicitly state otherwise, + any Contribution intentionally submitted for inclusion in the Work + by You to the Licensor shall be under the terms and conditions of + this License, without any additional terms or conditions. + Notwithstanding the above, nothing herein shall supersede or modify + the terms of any separate license agreement you may have executed + with Licensor regarding such Contributions. + + 6. Trademarks. This License does not grant permission to use the trade + names, trademarks, service marks, or product names of the Licensor, + except as required for reasonable and customary use in describing the + origin of the Work and reproducing the content of the NOTICE file. + + 7. Disclaimer of Warranty. Unless required by applicable law or + agreed to in writing, Licensor provides the Work (and each + Contributor provides its Contributions) on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or + implied, including, without limitation, any warranties or conditions + of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A + PARTICULAR PURPOSE. You are solely responsible for determining the + appropriateness of using or redistributing the Work and assume any + risks associated with Your exercise of permissions under this License. + + 8. Limitation of Liability. In no event and under no legal theory, + whether in tort (including negligence), contract, or otherwise, + unless required by applicable law (such as deliberate and grossly + negligent acts) or agreed to in writing, shall any Contributor be + liable to You for damages, including any direct, indirect, special, + incidental, or consequential damages of any character arising as a + result of this License or out of the use or inability to use the + Work (including but not limited to damages for loss of goodwill, + work stoppage, computer failure or malfunction, or any and all + other commercial damages or losses), even if such Contributor + has been advised of the possibility of such damages. + + 9. Accepting Warranty or Additional Liability. While redistributing + the Work or Derivative Works thereof, You may choose to offer, + and charge a fee for, acceptance of support, warranty, indemnity, + or other liability obligations and/or rights consistent with this + License. However, in accepting such obligations, You may act only + on Your own behalf and on Your sole responsibility, not on behalf + of any other Contributor, and only if You agree to indemnify, + defend, and hold each Contributor harmless for any liability + incurred by, or claims asserted against, such Contributor by reason + of your accepting any such warranty or additional liability. + + END OF TERMS AND CONDITIONS + + APPENDIX: How to apply the Apache License to your work. + + To apply the Apache License to your work, attach the following + boilerplate notice, with the fields enclosed by brackets "{}" + replaced with your own identifying information. (Don't include + the brackets!) The text should be enclosed in the appropriate + comment syntax for the file format. We also recommend that a + file or class name and description of purpose be included on the + same "printed page" as the copyright notice for easier + identification within third-party archives. + + Copyright©2015-present 帆软软件有限公司 + + Licensed under the Apache License, Version 2.0 (the "License"); + you may not use this file except in compliance with the License. + You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + + Unless required by applicable law or agreed to in writing, software + distributed under the License is distributed on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + See the License for the specific language governing permissions and + limitations under the License. \ No newline at end of file diff --git a/README.md b/README.md index 2cf1558..0553a31 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,6 @@ # open-JSD-8508 -JSD-8508 CAS单点兼容钉钉单点 \ No newline at end of file +JSD-8508 CAS单点兼容钉钉单点\ +免责说明：该源码为第三方爱好者提供，不保证源码和方案的可靠性，也不提供任何形式的源码教学指导和协助！\ +仅作为开发者学习参考使用！禁止用于任何商业用途！\ +为保护开发者隐私，开发者信息已隐去！若原开发者希望公开自己的信息，可联系hugh处理。 \ No newline at end of file diff --git a/config/sso-client-1.6.jar b/config/sso-client-1.6.jar new file mode 100644 index 0000000..8d71b50 Binary files /dev/null and b/config/sso-client-1.6.jar differ diff --git a/config/sso.properties b/config/sso.properties new file mode 100644 index 0000000..c03ca95 --- /dev/null +++ b/config/sso.properties @@ -0,0 +1,16 @@ +#\u5355\u70B9\u767B\u5F55\u5730\u5740 +SSO_LOGIN_URL=http://sso.excegroup.com/WindowsAuthenticationHandler.ashx +#\u5355\u70B9\u767B\u5F55ServiceTicket\u8BA4\u8BC1WebService\u5730\u5740 +SSO_TICKET_SERVICE_URL=http://sso.excegroup.com/Ticket.asmx +#SSO_LOGOUT_URL=http://sso.szprl.com:8010/ReLoginHandler.ashx +SSO_LOGOUT_URL=http://sso.excegroup.com/logout.aspx +#\u5E94\u7528\u7CFB\u7EDF\u7684\u7F16\u53F7 +SERVICE_ID=2686aa9569d9 +#\u5E94\u7528\u7CFB\u7EDF\u7684\u79D8\u94A5 +SECRET_KEY=R1pTSNLy +#AccessTicketCookie\u540D\u79F0 +AT_COOKIE_NAME=amsSession +#\u63A5\u5165\u7CFB\u7EDF\u4F7F\u7528\u7684CookieNam +AUTH_COOKIES=UserAccount +LOGIN_PAGE=/sso/login.jsp +RETURN_URL_PARAM_NAME=retUrl \ No newline at end of file diff --git a/config/sso/login.jsp b/config/sso/login.jsp new file mode 100644 index 0000000..ebbb376 --- /dev/null +++ b/config/sso/login.jsp @@ -0,0 +1,144 @@ +<%@ page language="java" import="java.util.*,indigox.sso.cilent.service.*,indigox.sso.cilent.entity.*,indigox.sso.cilent.exception.*,javax.xml.rpc.ServiceException,java.net.*,net.indigox.sso.*,net.indigox.sso.TicketServiceLocator" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8"%> + +<%@ page import="javax.servlet.http.Cookie" %> +<%@ page import="com.fr.base.TemplateUtils" %> +<%@ page import="com.fr.log.FineLoggerFactory" %> +<%@ page import="com.fr.decision.authority.data.User" %> +<%@ page import="com.fr.decision.webservice.v10.user.UserService" %> +<%@ page import="com.fr.decision.webservice.v10.login.TokenResource" %> +<%@ page import="com.fr.decision.webservice.v10.login.LoginService" %> +<%@ page import="com.fr.general.ComparatorUtils" %> +<%@ page import="com.fr.security.JwtUtils" %> +<%@ page import="com.fr.stable.web.Device" %> +<%@ page import="com.fr.data.NetworkHelper" %> +<%@ page import="com.fr.decision.mobile.terminal.TerminalHandler" %> +<%@ page import="com.fr.stable.StringUtils" %> + + + + + <% +try { + System.out.println("mybbsss"); + ValidateService service = new ValidateService(); + Assertion assertion = service.validate(request, response); + + String userName = assertion.getUserName(); + System.out.println("userName:"+userName); + + + + // жDzie + + // var isIE = false; + // var userAgent = navigator.userAgent; //ȡuserAgentַ + // var isOpera = userAgent.indexOf("Opera") > -1; + // if (userAgent.indexOf("compatible") > -1 && userAgent.indexOf("MSIE") > -1 && !isOpera) { + // isIE = true; + // }; + // // Ϊie10-ie11İ汾⣬֧document.allжϣieжϺҪд + // if(!isIE){ + // isIE = !!window.ActiveXObject || "ActiveXObject" in window; + // } + // // ieȡϢ½ + // if(isIE){ + // try + // { + // //debugger; + // var WshNetwork = new ActiveXObject("WScript.Network"); + + + // } + // catch(e) + // { + // var promptStr = "fdasfdsafasdfd"; + // alert(promptStr); + // } + // } + // ʵʱhttp://localhost:8064/WebReport/oaauth.jsp?fr_username=Alice + + String username=userName; + + System.out.println(username); + //String decision ="http://10.1.10.28"; + String decision ="http://"+request.getServerName()+":"+request.getServerPort()+"/webroot/decision"; + try{ + //decision = TemplateUtils.render("http://10.1.10.28"); + decision = TemplateUtils.render("http://"+request.getServerName()+":"+request.getServerPort()+"/webroot/decision"); + } catch (Exception e) { + System.out.println("error template"); + FineLoggerFactory.getLogger().error(e.getMessage(), e); + } + //ûΪգת¼ҳ + if(username == null){ + System.out.println("username is null"); + System.out.println("decision ="+decision); + response.sendRedirect(decision); + return; + } + try { + User user = UserService.getInstance().getUserByUserName(username); + if (user == null) { + System.out.println("username is null 1"); + System.out.println("decision 1="+decision); + response.sendRedirect(decision); + } + boolean needLogin = false; + String oldToken = TokenResource.COOKIE.getToken(request); + if (StringUtils.isEmpty(oldToken)) { + needLogin = true; + } else { + try { + if (!ComparatorUtils.equals(username, JwtUtils.parseJWT(oldToken).getSubject())) { + FineLoggerFactory.getLogger().info("username changed" + username); + } + Device device = NetworkHelper.getDevice(request); + LoginService.getInstance().loginStatusValid(oldToken, TerminalHandler.getTerminal(request, device)); + } catch (Exception e) { + needLogin = true; + } + } + if (needLogin) { + //guest + //username="guest";//zhuoyue + LoginService.getInstance().login(request, response, username); + } + //¼תƽַ̨ԸҪǷתתĵַ + System.out.println("decision 2="+decision); + //response.sendRedirect(decision); + //decision = request.getParameter("retUrl"); + response.sendRedirect(decision); + return; + } catch (Exception e) { + e.printStackTrace(); + } + +} +catch (UnauthorizedAccessException e) { + +System.out.println("curUrl ="+request.getRequestURL()); +System.out.println("QueryString ="+request.getQueryString()); + String ssoUrl = "http://sso.excegroup.com/Validate.ashx?service=2686aa9569d9&returnURL="+ URLEncoder.encode(request.getRequestURL() + "?"+ request.getQueryString(), "UTF-8"); +//String ssoUrl = Settings.SSOLoginUrl+"?service=" + Settings.ServiceID + "&returnURL="+ URLEncoder.encode(request.getRequestURL() + "?"+ request.getQueryString(), "UTF-8"); + //System.out.println("ssoUrl="+ssoUrl); + response.sendRedirect(ssoUrl); + +} +catch (Exception e) { + String token = LoginService.getInstance().login(request, response,"guest"); + String returnURL = request.getParameter("retUrl"); + response.sendRedirect(returnURL); +} + + + + +%> + + + + + + + + diff --git a/lib/axis-jaxrpc-1.4.jar b/lib/axis-jaxrpc-1.4.jar new file mode 100644 index 0000000..a2c13d9 Binary files /dev/null and b/lib/axis-jaxrpc-1.4.jar differ diff --git a/lib/finekit-10.0.jar b/lib/finekit-10.0.jar new file mode 100644 index 0000000..f4482fc Binary files /dev/null and b/lib/finekit-10.0.jar differ diff --git a/lib/sso-client-1.6.jar b/lib/sso-client-1.6.jar new file mode 100644 index 0000000..8d71b50 Binary files /dev/null and b/lib/sso-client-1.6.jar differ diff --git a/plugin.xml b/plugin.xml new file mode 100644 index 0000000..e70da6e --- /dev/null +++ b/plugin.xml @@ -0,0 +1,26 @@ + + + com.fr.plugin.hejr.sso + + yes + 1.1.6 + 10.0 + 2018-07-31 + fr.open + + + com.fr.plugin.hejr + + com.fanruan.api + + + + + + + + + + + + \ No newline at end of file diff --git a/src/main/java/com/fr/plugin/hejr/CustomLogInOutEventProvider.java b/src/main/java/com/fr/plugin/hejr/CustomLogInOutEventProvider.java new file mode 100644 index 0000000..e3b255a --- /dev/null +++ b/src/main/java/com/fr/plugin/hejr/CustomLogInOutEventProvider.java @@ -0,0 +1,44 @@ + /* + * Copyright (C), 2018-2021 + * Project: starter + * FileName: CustomLogInOutEventProvider + * Author: Louis + * Date: 2021/9/1 16:38 + */ + package com.fr.plugin.hejr; + + import com.fanruan.api.util.StringKit; + import com.fr.decision.fun.impl.AbstractLogInOutEventProvider; + import com.fr.decision.webservice.login.LogInOutResultInfo; + import com.fr.plugin.hejr.config.SsoConfig; + + import javax.servlet.http.HttpServletRequest; + + import static com.fr.plugin.hejr.request.OAuthLogin.DING_TALK_LOGIN; + + /** + *
+ * + * + * @author fr.open + * @since 1.0.0 + */ + public class CustomLogInOutEventProvider extends AbstractLogInOutEventProvider { + private final SsoConfig config; + + public CustomLogInOutEventProvider() { + this.config = SsoConfig.getInstance(); + } + + @Override + public String logoutAction(LogInOutResultInfo logInOutResultInfo) { + HttpServletRequest request = logInOutResultInfo.getRequest(); + String dingTalkLogin = String.valueOf(request.getAttribute(DING_TALK_LOGIN)); + if (StringKit.equals(dingTalkLogin, "true") && StringKit.isNotBlank(this.config.getDingLogOut())) { + return this.config.getDingLogOut(); + } else if (StringKit.isNotBlank(this.config.getSsoLogOut())) { + return this.config.getSsoLogOut(); + } + return StringKit.EMPTY; + } + } \ No newline at end of file diff --git a/src/main/java/com/fr/plugin/hejr/LocaleFinder.java b/src/main/java/com/fr/plugin/hejr/LocaleFinder.java new file mode 100644 index 0000000..67c2856 --- /dev/null +++ b/src/main/java/com/fr/plugin/hejr/LocaleFinder.java @@ -0,0 +1,37 @@ + /* + * Copyright (C), 2018-2020 + * Project: starter + * FileName: LocaleFinder + * Author: Louis + * Date: 2020/8/31 22:19 + */ + package com.fr.plugin.hejr; + + import com.fr.intelli.record.Focus; + import com.fr.intelli.record.Original; + import com.fr.record.analyzer.EnableMetrics; + import com.fr.stable.fun.impl.AbstractLocaleFinder; + + import static com.fr.plugin.hejr.config.SsoConfig.PLUGIN_ID; + + /** + *
+ * + * + * @author fr.open + * @since 1.0.0 + */ + @EnableMetrics + public class LocaleFinder extends AbstractLocaleFinder { + + @Override + @Focus(id = PLUGIN_ID, text = "Plugin-hejr", source = Original.PLUGIN) + public String find() { + return "com/fr/plugin/hejr/locale/lang"; + } + + @Override + public int currentAPILevel() { + return CURRENT_LEVEL; + } + } \ No newline at end of file diff --git a/src/main/java/com/fr/plugin/hejr/PluginMonitor.java b/src/main/java/com/fr/plugin/hejr/PluginMonitor.java new file mode 100644 index 0000000..9a8c798 --- /dev/null +++ b/src/main/java/com/fr/plugin/hejr/PluginMonitor.java @@ -0,0 +1,34 @@ + /* + * Copyright (C), 2018-2021 + * Project: starter + * FileName: PluginMonitor + * Author: Louis + * Date: 2021/3/30 15:10 + */ + package com.fr.plugin.hejr; + + import com.fr.plugin.context.PluginContext; + import com.fr.plugin.hejr.config.SsoConfig; + import com.fr.plugin.observer.inner.AbstractPluginLifecycleMonitor; + + + /** + *
+ * + * + * @author fr.open + * @since 1.0.0 + */ + public class PluginMonitor extends AbstractPluginLifecycleMonitor { + public PluginMonitor() { + } + + @Override + public void afterRun(PluginContext pluginContext) { + SsoConfig.getInstance(); + } + + @Override + public void beforeStop(PluginContext pluginContext) { + } + } \ No newline at end of file diff --git a/src/main/java/com/fr/plugin/hejr/config/SsoConfig.java b/src/main/java/com/fr/plugin/hejr/config/SsoConfig.java new file mode 100644 index 0000000..088be15 --- /dev/null +++ b/src/main/java/com/fr/plugin/hejr/config/SsoConfig.java @@ -0,0 +1,66 @@ + /* + * Copyright (C), 2018-2021 + * Project: starter + * FileName: SsoConfig + * Author: Louis + * Date: 2021/3/30 9:38 + */ + package com.fr.plugin.hejr.config; + + import com.fanruan.api.util.StringKit; + import com.fr.config.*; + import com.fr.config.holder.Conf; + import com.fr.config.holder.factory.Holders; + + /** + *
+ * + * + * @author fr.open + * @since 1.0.0 + */ + @Visualization(category = "Plugin-hejr_Group") + public class SsoConfig extends DefaultConfiguration { + public static final String PLUGIN_ID = "com.fr.plugin.hejr.sso"; + + private static volatile SsoConfig config = null; + @Identifier(value = "dingLogOut", name = "Plugin-hejr_Config_DingLogOut", description = "Plugin-hejr_Config_DingLogOut_Description", status = Status.SHOW) + private final Conf dingLogOut = Holders.simple(StringKit.EMPTY); + @Identifier(value = "ssoLogOut", name = "Plugin-hejr_Config_SsoLogOut", description = "Plugin-hejr_Config_SsoLogOut_Description", status = Status.SHOW) + private final Conf ssoLogOut = Holders.simple(StringKit.EMPTY); + + @Identifier(value = "userMobile", name = "Plugin-hejr_Config_UserMobile", description = "Plugin-hejr_Config_UserMobile_Description", status = Status.SHOW) + private final Conf userMobile = Holders.simple("userMobile"); + + public static SsoConfig getInstance() { + if (config == null) { + config = ConfigContext.getConfigInstance(SsoConfig.class); + } + return config; + } + + public String getDingLogOut() { + return dingLogOut.get(); + } + + public void setDingLogOut(String dingLogOut) { + this.dingLogOut.set(dingLogOut); + } + + public String getSsoLogOut() { + return ssoLogOut.get(); + } + + public void setSsoLogOut(String ssoLogOut) { + this.ssoLogOut.set(ssoLogOut); + } + + + public String getUserMobile() { + return userMobile.get(); + } + + public void setUserMobile(String userMobile) { + this.userMobile.set(userMobile); + } + } \ No newline at end of file diff --git a/src/main/java/com/fr/plugin/hejr/request/OAuthLogin.java b/src/main/java/com/fr/plugin/hejr/request/OAuthLogin.java new file mode 100644 index 0000000..d887c10 --- /dev/null +++ b/src/main/java/com/fr/plugin/hejr/request/OAuthLogin.java @@ -0,0 +1,210 @@ + /* + * Copyright (C), 2018-2021 + * Project: starter + * FileName: OAuthLogin + * Author: Louis + * Date: 2021/3/30 22:09 + */ + package com.fr.plugin.hejr.request; + + import com.fanruan.api.decision.login.LoginKit; + import com.fanruan.api.decision.user.UserKit; + import com.fanruan.api.log.LogKit; + import com.fanruan.api.net.NetworkKit; + import com.fanruan.api.util.StringKit; + import com.fr.decision.fun.impl.AbstractGlobalRequestFilterProvider; + import com.fr.decision.mobile.terminal.TerminalHandler; + import com.fr.decision.webservice.utils.DecisionServiceConstants; + import com.fr.decision.webservice.v10.login.LoginService; + import com.fr.plugin.context.PluginContexts; + import com.fr.plugin.hejr.config.SsoConfig; + import com.fr.stable.fun.Authorize; + import com.fr.web.utils.WebUtils; + import indigox.sso.cilent.entity.Assertion; + import indigox.sso.cilent.exception.UnauthorizedAccessException; + import indigox.sso.cilent.service.ValidateService; + + import javax.servlet.FilterChain; + import javax.servlet.FilterConfig; + import javax.servlet.http.HttpServletRequest; + import javax.servlet.http.HttpServletResponse; + import java.io.IOException; + import java.net.URLEncoder; + + import static com.fr.plugin.hejr.config.SsoConfig.PLUGIN_ID; + + /** + *
+ * + * + * @author fr.open + * @since 1.0.0 + */ + @Authorize(callSignKey = PLUGIN_ID) + public class OAuthLogin extends AbstractGlobalRequestFilterProvider { + public static final String OP_H5 = "H5"; + public static final String MOBILE_PATH = "/url/mobile"; + public static final String REMOTE_DESIGN = "/remote/design"; + public static final String RESOURCES_PATH = "/resources"; + public static final String FILE_PATH = "/file"; + public static final String SYSTEM_INFO = "/system/info"; + public static final String MATERIALS_MIN_JS_MAP = "/materials.min.js.map"; + public static final String LOGIN_PATH = "/login"; + public static final String LOGIN_OTHER = "/login/"; + public static final String LOGOUT_PATH = "/logout"; + public static final String USER_LANGUAGE = "/v10/user/language"; + public static final String SYSTEM_HEALTH = "/system/health"; + public static final String DING_TALK_PATH = "/plugin/public/com.fr.plugin.dingtalk/dingtalk/single/login"; + // pc认证登陆 + public static final String SSO_PC = "/sso/pc"; + public static final String DING_TALK_LOGIN = "DingTalkLogin"; + + private SsoConfig config; + + /** + * 过滤器名称 + * + * @return + */ + @Override + public String filterName() { + return "hejrFilter"; + } + + /** + * 过滤规则 + * + * @return + */ + @Override + public String[] urlPatterns() { + return new String[]{"/*"}; + } + + /** + * 过滤器初始化 + * + * @param filterConfig + */ + @Override + public void init(FilterConfig filterConfig) { + this.config = SsoConfig.getInstance(); + super.init(filterConfig); + } + + /** + * 过滤器处理 + * + * @param request + * @param response + * @param filterChain + */ + @Override + public void doFilter(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) { + try { + if (operation(request, response)) { + filterChain.doFilter(request, response); + } + } catch (Exception e) { + LogKit.error(e.getMessage(), e); + } + } + + /** + * 用户验证登陆操作 + * + * @param req + * @param res + * @throws Exception + */ + private boolean operation(HttpServletRequest req, HttpServletResponse res) throws Exception { + String pathInfo = (req.getPathInfo() != null) ? req.getPathInfo() : StringKit.EMPTY; + LogKit.info("hejr-OAuthLogin-operation-pathInfo:{}", pathInfo); + if (pathInfo.startsWith(REMOTE_DESIGN) || pathInfo.startsWith(LOGIN_OTHER) + || StringKit.equals(LOGIN_PATH, pathInfo) + || pathInfo.startsWith(RESOURCES_PATH) || pathInfo.startsWith(LOGOUT_PATH) + || pathInfo.startsWith(SYSTEM_INFO) || pathInfo.startsWith(MATERIALS_MIN_JS_MAP) || pathInfo.startsWith(SYSTEM_HEALTH) + || pathInfo.startsWith(USER_LANGUAGE) || pathInfo.startsWith(FILE_PATH)) { + return true; + } + // 已登录 + if (LoginService.getInstance().isLogged(req)) { + return true; + } + //DingTalk + if (StringKit.equals(DING_TALK_PATH, pathInfo)) { + req.setAttribute(DING_TALK_LOGIN, "true"); + return true; + } else if (TerminalHandler.getTerminal(req, WebUtils.getDevice(req)) == TerminalHandler.APP) { + // 数据分析app放行 + return true; + } else if (validateMobile(req, pathInfo) || TerminalHandler.getTerminal(req, WebUtils.getDevice(req)) == TerminalHandler.H5) { + String username; + // H5参数未配置，则统一认证 + if (StringKit.isBlank(this.config.getUserMobile())) { + return true; + } + String userMobile = NetworkKit.getHTTPRequestParameter(req, this.config.getUserMobile()); + if (StringKit.isBlank(userMobile)) { + return true; + } + username = userMobile; + if (StringKit.isEmpty(username) || !UserKit.existUsername(username)) { + return true; + } + // 验证插件授权 + if (PluginContexts.currentContext().isAvailable()) { + String tokenFR = LoginKit.login(req, res, username); + req.setAttribute(DecisionServiceConstants.FINE_AUTH_TOKEN_NAME, tokenFR); + } + return true; + } else { + return true; + } + } + + /** + * 验证是否移动端请求 + * + * @param req + * @param pathInfo + * @return + */ + private Boolean validateMobile(HttpServletRequest req, String pathInfo) { + String op = WebUtils.getHTTPRequestParameter(req, "op"); + return (StringKit.isNotEmpty(op) && StringKit.equals(OP_H5, op.toUpperCase())) + || WebUtils.getDevice(req).isMobile() + || StringKit.equalsIgnoreCase(MOBILE_PATH, pathInfo); + } + + /** + * PC认证处理 + * + * @param request + * @param response + */ + private void loginPC(HttpServletRequest request, HttpServletResponse response) throws Exception { + try { + ValidateService service = new ValidateService(); + Assertion assertion = service.validate(request, response); + String userName = assertion.getUserName(); + LogKit.info("hejr-OAuthLogin-loginPC-userName:{}", userName); + //如果用户名为空，跳转到登录页面 + if (StringKit.isBlank(userName) || !UserKit.existUsername(userName)) { + response.sendRedirect(LOGIN_PATH); + return; + } + if (!LoginService.getInstance().isLogged(request) && PluginContexts.currentContext().isAvailable()) { + String tokenFR = LoginKit.login(request, response, userName); + request.setAttribute(DecisionServiceConstants.FINE_AUTH_TOKEN_NAME, tokenFR); + } + //登录后跳转到决策平台地址，可以根据需要设置是否跳转及跳转的地址 + response.sendRedirect("/decision"); + } catch (UnauthorizedAccessException | IOException e) { + LogKit.info("hejr-OAuthLogin-loginPC-curUrl:{}", request.getRequestURL()); + LogKit.info("hejr-OAuthLogin-loginPC-QueryString:{}", request.getQueryString()); + String ssoUrl = "http://sso.excegroup.com/Validate.ashx?service=2686aa9569d9&returnURL=" + URLEncoder.encode(request.getRequestURL() + "?" + request.getQueryString(), "UTF-8"); + response.sendRedirect(ssoUrl); + } + } + } \ No newline at end of file diff --git a/src/main/java/com/fr/plugin/hejr/request/SSOFilter.java b/src/main/java/com/fr/plugin/hejr/request/SSOFilter.java new file mode 100644 index 0000000..2c37a03 --- /dev/null +++ b/src/main/java/com/fr/plugin/hejr/request/SSOFilter.java @@ -0,0 +1,107 @@ + /* + * Copyright (C), 2018-2021 + * Project: starter + * FileName: SSOFilter + * Author: Louis + * Date: 2021/8/29 14:37 + */ + package com.fr.plugin.hejr.request; + + import com.fr.decision.fun.GlobalRequestFilterProvider; + import com.fr.decision.fun.impl.AbstractGlobalRequestFilterProvider; + import org.jetbrains.annotations.NotNull; + + import java.util.HashMap; + import java.util.Map; + + /** + *
+ * + * + * @author fr.open + * @since 1.0.0 + */ + public class SSOFilter extends AbstractGlobalRequestFilterProvider { + + /** + * 过滤器名称 + * + * @return + */ + @Override + public String filterName() { + return "ssoFilter"; + } + + /** + * 过滤规则 + * + * @return + */ + @Override + public String[] urlPatterns() { + return new String[]{"/*"}; + } + +// @Override +// public void doFilter(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) { +// LogKit.info("SSOFilter---running"); +// try { +// filterChain.doFilter(request, response); +// } catch (Exception e) { +// LogKit.error(e.getMessage(), e); +// } +// } + + /** + * 外部的过滤器类名，需要把相应的jar包放到web服务器的classpath中 + * + * @return + */ + @Override + public String externalFilterClassName() { + return "indigox.sso.cilent.web.SSOFilter"; + } + + /** + * 过滤器的初始化参数 + * + * @return + */ + @Override + public Map initializationParameters() { + String patterns = "/webroot/decision/remote/design/*;" + + "/webroot/decision/resources;" + + "/webroot/decision/file;" + + "/webroot/decision/materials.min.js.map;" + + "/webroot/decision/login;" + + "/webroot/decision/login/*;" + + "/webroot/decision/logout;" + + "/webroot/decision/url/*;" + + "/webroot/decision/plugin/public/*;" + + "/webroot/decision/plugin/private/*;" + + "/webroot/decision/token/refresh;" + + "/webroot/decision/system/*;" + + "/webroot/decision/v10/*;" + + "/webroot/decision/view/*;" + + "/webroot/sso/login.jsp;" + + "/webroot/sso/logout.jsp;" + + "/webroot/login.html;" + + "/webroot/scripts/*;" + + "/webroot/services/*"; + Map params = new HashMap<>(); + params.put("excludePatterns", patterns); + return params; + } + + /** + * 可选实现的多个filter排序（执行顺序）的方法 + * + * @param other + * @return 0 相等，大于0是自身优先 小于0 是other优先 + */ + @Override + public int compareTo(@NotNull GlobalRequestFilterProvider other) { + return -1; + } + } \ No newline at end of file diff --git a/src/main/resources/com/fr/plugin/hejr/locale/lang.properties b/src/main/resources/com/fr/plugin/hejr/locale/lang.properties new file mode 100644 index 0000000..e012619 --- /dev/null +++ b/src/main/resources/com/fr/plugin/hejr/locale/lang.properties @@ -0,0 +1,10 @@ +Plugin-hejr=Sso Plugin +Plugin-hejr_Group=Sso Plugin +Plugin-hejr_Config_DingLogOut=DingLogOut +Plugin-hejr_Config_DingLogOut_Description=DingLogOut +Plugin-hejr_Config_SsoLogOut=SsoLogOut +Plugin-hejr_Config_SsoLogOut_Description=SsoLogOut +Plugin-hejr_Config_corpId=Corp Id +Plugin-hejr_Config_corpId_Description=Corp Id +Plugin-hejr_Config_UserMobile=User Mobile +Plugin-hejr_Config_UserMobile_Description=User Mobile \ No newline at end of file diff --git a/src/main/resources/com/fr/plugin/hejr/locale/lang_zh_CN.properties b/src/main/resources/com/fr/plugin/hejr/locale/lang_zh_CN.properties new file mode 100644 index 0000000..162494c --- /dev/null +++ b/src/main/resources/com/fr/plugin/hejr/locale/lang_zh_CN.properties @@ -0,0 +1,10 @@ +Plugin-hejr=\u5355\u70B9\u767B\u9646\u63D2\u4EF6 +Plugin-hejr_Group=\u5355\u70B9\u767B\u9646\u63D2\u4EF6 +Plugin-hejr_Config_DingLogOut=\u9489\u9489\u767B\u51FAurl +Plugin-hejr_Config_DingLogOut_Description=\u9489\u9489\u767B\u51FAurl +Plugin-hejr_Config_SsoLogOut=\u8BA4\u8BC1\u5E73\u53F0\u767B\u51FAurl +Plugin-hejr_Config_SsoLogOut_Description=\u8BA4\u8BC1\u5E73\u53F0\u767B\u51FAurl +Plugin-hejr_Config_corpId=Corp Id +Plugin-hejr_Config_corpId_Description=Corp Id +Plugin-hejr_Config_UserMobile=H5\u7528\u6237\u540D\u53C2\u6570 +Plugin-hejr_Config_UserMobile_Description=H5\u7528\u6237\u540D\u53C2\u6570 \ No newline at end of file