提交开源任务材料

3 years ago · 6053c385a7
21 changed files with 1527 additions and 1 deletions
--- a/README.md
+++ b/README.md
@ -1,3 +1,6 @@
 # open-JSD-8709

-JSD-8709 jwt单点
+JSD-8709 jwt单点\
+免责说明：该源码为第三方爱好者提供，不保证源码和方案的可靠性，也不提供任何形式的源码教学指导和协助！\
+仅作为开发者学习参考使用！禁止用于任何商业用途！\
+为保护开发者隐私，开发者信息已隐去！若原开发者希望公开自己的信息，可联系hugh处理。
--- a/lib/commons-codec-1.15.jar
+++ b/lib/commons-codec-1.15.jar
--- a/lib/jackson-annotations-2.9.0.jar
+++ b/lib/jackson-annotations-2.9.0.jar
--- a/lib/jackson-core-2.9.8.jar
+++ b/lib/jackson-core-2.9.8.jar
--- a/lib/jackson-databind-2.9.8.jar
+++ b/lib/jackson-databind-2.9.8.jar
--- a/lib/java-jwt-3.9.0.jar
+++ b/lib/java-jwt-3.9.0.jar
--- a/plugin.xml
+++ b/plugin.xml
@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?><plugin>
+    <id>com.fr.plugin.rcsso</id>
+    <name><![CDATA[单点登录]]></name>
+    <active>yes</active>
+    <version>1.0.14</version>
+    <env-version>10.0</env-version>
+    <jartime>2018-07-31</jartime>
+    <vendor>fr.open</vendor>
+    <description><![CDATA[单点登录]]></description>
+    <change-notes><![CDATA[
+    ]]></change-notes>
+    <main-package>com.fr.plugin.rcsso</main-package>
+    <lifecycle-monitor class="com.fr.plugin.rcsso.config.InitializeMonitor"/>
+
+    <extra-decision>
+        <HttpHandlerProvider class="com.fr.plugin.rcsso.handler.ExtendAttrHandlerProvider"/>
+        <URLAliasProvider class="com.fr.plugin.rcsso.handler.URLAliasProvide"/>
+        <GlobalRequestFilterProvider class="com.fr.plugin.rcsso.filter.SSOFilter"/>
+        <LogInOutEventProvider class="com.fr.plugin.rcsso.logout.Logout"/>
+
+    </extra-decision>
+
+    <function-recorder class="com.fr.plugin.rcsso.config.PluginSimpleConfig"/>
+</plugin>
--- a/src/main/java/com/fr/plugin/rcsso/config/InitializeMonitor.java
+++ b/src/main/java/com/fr/plugin/rcsso/config/InitializeMonitor.java
@ -0,0 +1,21 @@
+package com.fr.plugin.rcsso.config;
+
+import com.fr.plugin.context.PluginContext;
+import com.fr.plugin.observer.inner.AbstractPluginLifecycleMonitor;
+
+/**
+ * @author fr.open
+ * @version 10.0
+ * Created by fr.open on 2018-12-04
+ */
+public class InitializeMonitor extends AbstractPluginLifecycleMonitor {
+    @Override
+    public void afterRun(PluginContext pluginContext) {
+        PluginSimpleConfig.getInstance();
+    }
+
+    @Override
+    public void beforeStop(PluginContext pluginContext) {
+
+    }
+}
--- a/src/main/java/com/fr/plugin/rcsso/config/PluginSimpleConfig.java
+++ b/src/main/java/com/fr/plugin/rcsso/config/PluginSimpleConfig.java
@ -0,0 +1,133 @@
+package com.fr.plugin.rcsso.config;
+
+import com.fr.config.*;
+import com.fr.config.holder.Conf;
+import com.fr.config.holder.factory.Holders;
+import com.fr.intelli.record.Focus;
+import com.fr.intelli.record.Original;
+import com.fr.record.analyzer.EnableMetrics;
+
+@Visualization(category = "单点登录配置")
+@EnableMetrics
+public class PluginSimpleConfig extends DefaultConfiguration {
+
+    private static volatile PluginSimpleConfig config = null;
+
+    @Focus(id="com.fr.plugin.xxw.config", text = "单点登录配置", source = Original.PLUGIN)
+    public static PluginSimpleConfig getInstance() {
+        if (config == null) {
+            config = ConfigContext.getConfigInstance(PluginSimpleConfig.class);
+        }
+        return config;
+    }
+
+    @Identifier(value = "tokenStr", name = "参数名称", description = "参数名称", status = Status.SHOW)
+    private Conf<String> tokenStr = Holders.simple("tokenid");
+
+    @Identifier(value = "pkey", name = "秘钥", description = "秘钥", status = Status.SHOW)
+    private Conf<String> pkey = Holders.simple("");
+
+    @Identifier(value = "clientId", name = "clientId", description = "clientId", status = Status.SHOW)
+    private Conf<String> clientId = Holders.simple("");
+
+    @Identifier(value = "secret", name = "secret", description = "secret", status = Status.SHOW)
+    private Conf<String> secret = Holders.simple("");
+
+    @Identifier(value = "authurl", name = "authorize接口", description = "authorize接口", status = Status.SHOW)
+    private Conf<String> authurl = Holders.simple("");
+
+    @Identifier(value = "token", name = "tokens接口", description = "tokens接口", status = Status.SHOW)
+    private Conf<String> token = Holders.simple("");
+
+    @Identifier(value = "user", name = "获取用户信息接口", description = "获取用户信息接口", status = Status.SHOW)
+    private Conf<String> user = Holders.simple("");
+
+    @Identifier(value = "logout", name = "单点登出接口", description = "单点登出接口", status = Status.SHOW)
+    private Conf<String> logout = Holders.simple("");
+
+    @Identifier(value = "index", name = "FR首页", description = "FR首页", status = Status.SHOW)
+    private Conf<String> index = Holders.simple("");
+
+    public String getTokenStr() {
+        return tokenStr.get();
+    }
+
+    public void setTokenStr(String url) {
+        this.tokenStr.set(url);
+    }
+
+    public String getPkey() {
+        return pkey.get();
+    }
+
+    public void setPkey(String url) {
+        this.pkey.set(url);
+    }
+
+    public String getClientId() {
+        return clientId.get();
+    }
+
+    public void setClientId(String url) {
+        this.clientId.set(url);
+    }
+
+    public String getSecret() {
+        return secret.get();
+    }
+
+    public void setSecret(String url) {
+        this.secret.set(url);
+    }
+
+    public String getAuthurl() {
+        return authurl.get();
+    }
+
+    public void setAuthurl(String url) {
+        this.authurl.set(url);
+    }
+
+    public String getToken() {
+        return token.get();
+    }
+
+    public void setToken(String url) {
+        this.token.set(url);
+    }
+
+    public String getUser() {
+        return user.get();
+    }
+
+    public void setUser(String url) {
+        this.user.set(url);
+    }
+
+    public String getLogout() {
+        return logout.get();
+    }
+
+    public void setLogout(String url) {
+        this.logout.set(url);
+    }
+
+    public String getIndex() {
+        return index.get();
+    }
+
+    public void setIndex(String url) {
+        this.index.set(url);
+    }
+    @Override
+    public Object clone() throws CloneNotSupportedException {
+        PluginSimpleConfig cloned = (PluginSimpleConfig) super.clone();
+//        cloned.text = (Conf<String>) text.clone();
+//        cloned.count = (Conf<Integer>) count.clone();
+//        cloned.price = (Conf<Double>) price.clone();
+//        cloned.time = (Conf<Long>) time.clone();
+//        cloned.student = (Conf<Boolean>) student.clone();
+        return cloned;
+    }
+
+}
--- a/src/main/java/com/fr/plugin/rcsso/filter/SSOFilter.java
+++ b/src/main/java/com/fr/plugin/rcsso/filter/SSOFilter.java
@ -0,0 +1,78 @@
+package com.fr.plugin.rcsso.filter;
+
+import com.fr.decision.fun.impl.AbstractGlobalRequestFilterProvider;
+import com.fr.plugin.context.PluginContexts;
+import com.fr.plugin.rcsso.config.PluginSimpleConfig;
+import com.fr.plugin.rcsso.utils.*;
+import com.fr.plugin.transform.FunctionRecorder;
+import com.fr.record.analyzer.EnableMetrics;
+import com.fr.stable.fun.Authorize;
+
+import javax.servlet.FilterChain;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.net.URLDecoder;
+
+@EnableMetrics
+@FunctionRecorder
+@Authorize(callSignKey = "com.fr.plugin.rcsso")
+public class SSOFilter extends AbstractGlobalRequestFilterProvider {
+    @Override
+    public String filterName() {
+        return "rcssoFilter";
+    }
+
+    @Override
+    public String[] urlPatterns() {
+        return new String[]{"/decision/*"};
+    }
+
+    @Override
+    public void doFilter(HttpServletRequest req, HttpServletResponse res, FilterChain chain ){
+        if(PluginContexts.currentContext().isAvailable()) {
+            String tokenStr = PluginSimpleConfig.getInstance().getTokenStr();
+            String token = req.getParameter(tokenStr);
+
+            FRUtils.FRLogInfo("tokenStr:"+tokenStr + ";token:"+token);
+
+            if(Utils.isNullStr(token) || FRUtils.isLogin(req)){
+                release(req,res,chain);
+                return ;
+            }
+
+            String privateKey = PluginSimpleConfig.getInstance().getPkey();
+            String userName = "";
+            try {
+                if(Utils.isMobile(req)){
+                    FRUtils.FRLogInfo("mobile");
+                    userName = JwtUtil.getUsername(token);
+                }else{
+                    FRUtils.FRLogInfo("pc");
+                    userName = RSAUtil.decrypt(token,privateKey);
+                }
+                FRUtils.FRLogInfo("username "+userName);
+            } catch (Exception e) {
+                FRUtils.FRLogError("getUserName exception:"+e.getMessage());
+                ResponseUtils.failedResponse(res,"解密用户名异常");
+            }
+
+            String url = FRUtils.getAllUrl(req);
+            url = url.substring(0,url.indexOf(url.contains("?token") ? "?token" : "&token"));
+            url = url.replace("http","https");
+            //登录
+            FRUtils.login(req,res,userName,url);
+        }
+
+        release(req,res,chain);
+    }
+
+    //放行拦截器
+    private void release(HttpServletRequest req, HttpServletResponse res, FilterChain chain) {
+        try{
+            chain.doFilter(req,res);
+        }catch (Exception e){
+            FRUtils.FRLogInfo("拦截失败");
+        }
+    }
+}
+
--- a/src/main/java/com/fr/plugin/rcsso/handler/ExtendAttrHandlerProvider.java
+++ b/src/main/java/com/fr/plugin/rcsso/handler/ExtendAttrHandlerProvider.java
@ -0,0 +1,13 @@
+package com.fr.plugin.rcsso.handler;
+
+import com.fr.decision.fun.HttpHandler;
+import com.fr.decision.fun.impl.AbstractHttpHandlerProvider;
+
+public class ExtendAttrHandlerProvider extends AbstractHttpHandlerProvider {
+    @Override
+    public HttpHandler[] registerHandlers() {
+        return new HttpHandler[]{
+                new Login()
+        };
+    }
+}
--- a/src/main/java/com/fr/plugin/rcsso/handler/Login.java
+++ b/src/main/java/com/fr/plugin/rcsso/handler/Login.java
@ -0,0 +1,108 @@
+package com.fr.plugin.rcsso.handler;
+
+import com.fr.decision.fun.impl.BaseHttpHandler;
+import com.fr.json.JSONObject;
+import com.fr.plugin.rcsso.config.PluginSimpleConfig;
+import com.fr.plugin.rcsso.utils.CipherUtils;
+import com.fr.plugin.rcsso.utils.FRUtils;
+import com.fr.plugin.rcsso.utils.HttpUtils;
+import com.fr.plugin.rcsso.utils.Utils;
+import com.fr.plugin.transform.FunctionRecorder;
+import com.fr.third.springframework.web.bind.annotation.RequestMethod;
+import org.nfunk.jep.function.Str;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.BufferedReader;
+import java.io.DataOutputStream;
+import java.io.InputStreamReader;
+import java.io.OutputStream;
+import java.net.HttpURLConnection;
+import java.net.URL;
+import java.nio.charset.Charset;
+import java.util.HashMap;
+import java.util.Map;
+
+@FunctionRecorder
+public class Login extends BaseHttpHandler {
+
+
+    public Login() {
+    }
+
+    @Override
+    public RequestMethod getMethod() {
+        return RequestMethod.GET;
+    }
+
+    @Override
+    public String getPath() {
+        return "/sso";
+    }
+
+    @Override
+    public boolean isPublic() {
+        return true;
+    }
+
+    @Override
+    public void handle(HttpServletRequest req, HttpServletResponse res) throws Exception {
+        PluginSimpleConfig psc = PluginSimpleConfig.getInstance();
+        //获取请求参数
+        String code = req.getParameter("code");
+        String token = req.getParameter("token");
+        String url = psc.getIndex()+"/url/sso";
+        String username = "";
+
+        //插件跳转到认证中心返回code
+        if(Utils.isNotNullStr(code)){
+            token = getToken(code,url,psc);
+        }
+
+        if(Utils.isNotNullStr(token)){
+            username = getUsername(token,psc);
+        }
+
+        if(Utils.isNotNullStr(username)){
+            FRUtils.login(req,res,username,psc.getIndex());
+            return ;
+        }
+
+        String redirecturl =psc.getAuthurl()+"?client_id="+psc.getClientId()+"&response_type=code&redirect_uri="+psc.getIndex()+
+                "/url/sso&scope=UserProfile.me&state=xyz";
+
+        res.sendRedirect(redirecturl);
+    }
+
+    private static String getUsername(String token,PluginSimpleConfig psc){
+        String userurl = psc.getUser();
+        Map<String, String> header = new HashMap<String,String>();
+        header.put("Authorization",token);
+        String result = HttpUtils.get(userurl,null,header);
+
+        if(Utils.isNullStr(result)){
+            return "";
+        }
+
+        JSONObject json = new JSONObject(result);
+
+        return json.getString("uid").toLowerCase();
+    }
+
+    private static String getToken(String code,String url,PluginSimpleConfig psc){
+        String accessToken = "";
+        String tokenurl = psc.getToken()+"?redirect_uri="+url+"&grant_type=authorization_code&code="+code;
+
+        Map<String,String> header = new HashMap<String,String>();
+        header.put("Authorization","Basic "+new String(CipherUtils.base64Encode(psc.getClientId()+":"+psc.getSecret())).trim());
+
+        String resutl = HttpUtils.HttpPostWWWForm(tokenurl,header,null);
+        JSONObject obj = new JSONObject(resutl);
+        accessToken = obj.getString("access_token");
+
+        return accessToken;
+    }
+
+
+}
+
--- a/src/main/java/com/fr/plugin/rcsso/handler/URLAliasProvide.java
+++ b/src/main/java/com/fr/plugin/rcsso/handler/URLAliasProvide.java
@ -0,0 +1,14 @@
+package com.fr.plugin.rcsso.handler;
+
+import com.fr.decision.fun.impl.AbstractURLAliasProvider;
+import com.fr.decision.webservice.url.alias.URLAlias;
+import com.fr.decision.webservice.url.alias.URLAliasFactory;
+
+public class URLAliasProvide extends AbstractURLAliasProvider {
+    @Override
+    public URLAlias[] registerAlias() {
+        return new URLAlias[]{
+                URLAliasFactory.createPluginAlias("/sso","/sso",true),
+        };
+    }
+}
--- a/src/main/java/com/fr/plugin/rcsso/logout/Logout.java
+++ b/src/main/java/com/fr/plugin/rcsso/logout/Logout.java
@ -0,0 +1,21 @@
+package com.fr.plugin.rcsso.logout;
+
+import com.fr.decision.fun.impl.AbstractLogInOutEventProvider;
+import com.fr.decision.webservice.login.LogInOutResultInfo;
+import com.fr.decision.webservice.v10.login.LoginService;
+import com.fr.plugin.rcsso.config.PluginSimpleConfig;
+
+import javax.servlet.http.HttpSession;
+
+public class Logout extends AbstractLogInOutEventProvider {
+
+    @Override
+    public String logoutAction(LogInOutResultInfo result) {
+        HttpSession session = result.getRequest().getSession(true);
+        LoginService.getInstance().crossDomainLogout(result.getRequest(),result.getResponse(),"");
+        session.invalidate();
+        PluginSimpleConfig psc = PluginSimpleConfig.getInstance();
+        return psc.getLogout()+"?end_url="+psc.getIndex()+"/url/sso";
+    }
+}
+
--- a/src/main/java/com/fr/plugin/rcsso/utils/CipherUtils.java
+++ b/src/main/java/com/fr/plugin/rcsso/utils/CipherUtils.java
@ -0,0 +1,262 @@
+package com.fr.plugin.rcsso.utils;
+
+import com.fr.log.FineLoggerFactory;
+import sun.misc.BASE64Decoder;
+import sun.misc.BASE64Encoder;
+
+import javax.crypto.Cipher;
+import javax.crypto.SecretKey;
+import javax.crypto.SecretKeyFactory;
+import javax.crypto.spec.DESKeySpec;
+import javax.crypto.spec.SecretKeySpec;
+import java.io.IOException;
+import java.security.Key;
+import java.security.MessageDigest;
+import java.security.SecureRandom;
+
+/**
+ * 加解密工具类
+ */
+public class CipherUtils {
+    /**
+     * 加密
+     *
+     * @param datasource
+     *            byte[]
+     * @param password
+     *            String
+     * @return byte[]
+     */
+    public static byte[] desEncrypt(byte[] datasource, String password) {
+        try {
+            SecureRandom random = new SecureRandom();
+            DESKeySpec desKey = new DESKeySpec(password.getBytes());
+            // 创建一个密匙工厂，然后用它把DESKeySpec转换成
+            SecretKeyFactory keyFactory = SecretKeyFactory.getInstance("DES");
+            SecretKey securekey = keyFactory.generateSecret(desKey);
+            // Cipher对象实际完成加密操作
+            Cipher cipher = Cipher.getInstance("DES");
+            // 用密匙初始化Cipher对象
+            cipher.init(Cipher.ENCRYPT_MODE, securekey, random);
+            // 现在，获取数据并加密
+            // 正式执行加密操作
+            return cipher.doFinal(datasource);
+        } catch (Throwable e) {
+            e.printStackTrace();
+        }
+
+        return null;
+    }
+
+    /**
+     * 解密
+     *
+     * @param src
+     *            byte[]
+     * @param password
+     *            String
+     * @return byte[]
+     * @throws Exception
+     */
+    public static byte[] desDecrypt(byte[] src, String password) throws Exception {
+        // DES算法要求有一个可信任的随机数源
+        SecureRandom random = new SecureRandom();
+        // 创建一个DESKeySpec对象
+        DESKeySpec desKey = new DESKeySpec(password.getBytes("UTF-8"));
+        // 创建一个密匙工厂
+        SecretKeyFactory keyFactory = SecretKeyFactory.getInstance("DES");
+        // 将DESKeySpec对象转换成SecretKey对象
+        SecretKey securekey = keyFactory.generateSecret(desKey);
+        // Cipher对象实际完成解密操作
+        Cipher cipher = Cipher.getInstance("DES");
+        // 用密匙初始化Cipher对象
+        cipher.init(Cipher.DECRYPT_MODE, securekey, random);
+        // 真正开始解密操作
+        return cipher.doFinal(src);
+    }
+
+    /**
+     * 自定义一个key
+     **/
+    public static byte[] getKey(String keyRule) {
+        Key key = null;
+        byte[] keyByte = keyRule.getBytes();
+        // 创建一个空的八位数组,默认情况下为0
+        byte[] byteTemp = new byte[8];
+        // 将用户指定的规则转换成八位数组
+        for (int i = 0; i < byteTemp.length && i < keyByte.length; i++) {
+            byteTemp[i] = keyByte[i];
+        }
+        key = new SecretKeySpec(byteTemp, "DES");
+        return key.getEncoded();
+
+    }
+
+    /**
+     * 将16进制转换为二进制
+     *
+     * @param hexStr
+     * @return
+     */
+    public static byte[] parseHexStr2Byte(String hexStr) {
+        if (hexStr.length() < 1) return null;
+        byte[] result = new byte[hexStr.length() / 2];
+        for (int i = 0; i < hexStr.length() / 2; i++) {
+            int high = Integer.parseInt(hexStr.substring(i * 2, i * 2 + 1), 16);
+            int low = Integer.parseInt(hexStr.substring(i * 2 + 1, i * 2 + 2), 16);
+            result[i] = (byte) (high * 16 + low);
+        }
+        return result;
+    }
+
+    /***
+     * 解密数据
+     * @param decryptString
+     * @param decryptKey
+     * @return
+     * @throws Exception
+     */
+    public static String decryptDES(String decryptString, String decryptKey) throws Exception {
+        SecretKeySpec key = new SecretKeySpec(getKey(decryptKey), "DES");
+        Cipher cipher = Cipher.getInstance("DES/ECB/PKCS5Padding");
+        cipher.init(Cipher.DECRYPT_MODE, key);
+        byte decryptedData[] = cipher.doFinal(parseHexStr2Byte(decryptString));
+        return new String(decryptedData,"utf-8");
+    }
+
+    /**
+     * jdksha256加密
+     * @param str
+     * @return
+     */
+    public static String jdksha256(String str)
+    {
+        String sha256Str = "";
+
+        try {
+            MessageDigest sha256Deget = MessageDigest.getInstance("SHA-256");
+            byte[] sha256Encode = sha256Deget.digest(str.getBytes());
+            sha256Str = ByteToHexStr(sha256Encode);
+        }catch (Exception e){
+            FineLoggerFactory.getLogger().info("FRLOG:SHA256加密异常:"+e.getMessage());
+        }
+
+        return sha256Str;
+    }
+
+    /**
+     * byte数组转16进制字符串
+     * @param bytes
+     * @return
+     */
+    private static String ByteToHexStr(byte[] bytes)
+    {
+        String hexStr = "";
+
+        for(int i =0;i<bytes.length;i++)
+        {
+            int temp = bytes[i] & 0xff;
+            String tempHex = Integer.toHexString(temp);
+            if(tempHex.length() < 2)
+            {
+                hexStr += "0"+tempHex;
+            }
+            else {
+                hexStr += tempHex;
+            }
+        }
+
+        return hexStr;
+    }
+
+    /**
+     * base64加密
+     * @param key
+     * @return
+     */
+    public static String base64Encode(String key){
+        return (new BASE64Encoder()).encodeBuffer(key.getBytes());
+    }
+
+    /**
+     * base64解密
+     * @param key
+     * @return
+     */
+    public static String base64Decode(String key){
+        String result = "";
+        try {
+            result = new String((new BASE64Decoder()).decodeBuffer(key));
+        } catch (IOException e) {
+            FineLoggerFactory.getLogger().info("FRLOG:BASE64解密异常:"+e.getMessage());
+        }
+
+        return result;
+    }
+
+    public static String getBase64DecodeStr(String str){
+        if(str == null || str.isEmpty()){
+            return "";
+        }
+
+        String result = base64Decode(str);
+        return result.contains("base64")?result:str;
+    }
+
+    /**
+     * 是否被base64加密过
+     * @param str
+     * @return
+     */
+    public static boolean isBase64(String str) {
+        if (str == null || str.trim().length() == 0) {
+            return false;
+        }
+        else {
+            if (str.length() % 4 != 0) {
+                return false;
+            }
+
+            char[] strChars = str.toCharArray();
+
+            for (char c:strChars) {
+                if ((c >= 'a' && c <= 'z') || (c >= 'A' && c <= 'Z') || (c >= '0' && c <= '9')
+                        || c == '+' || c == '/' || c == '=') {
+                    continue;
+                }
+                else {
+                    return false;
+                }
+            }
+
+            return true;
+        }
+    }
+    public static void main(String[] args) throws Exception {
+//        String key = "z2bse2zh";
+//        String key = "ajshcjzj";
+//        String str = "男";
+////
+//        byte[] a =desEncrypt(str.getBytes(),key);
+////        System.out.println(new String(a));
+//        String a1 = new BASE64Encoder().encodeBuffer(a);
+////
+//        System.out.println(a1);
+////
+////        byte[] b = desDecrypt(a,key);
+////        System.out.println(new String(b));
+//
+//        String key2 = "rdTK5iLsDFw=";
+//        byte[] b2 = desDecrypt(new BASE64Decoder().decodeBuffer(key2),"ajshcjzj");
+//        System.out.println(new String(b2));
+//        //密钥
+//        String key = "z2bse2zh";
+//        //解密数据
+//        String encryDate = "DF2DF0F837C38A1233A8B1255B0532E36E9D29052873B7F8707936C025E2FE368B0A8919A93C8869";
+//        String a = "ED33AD65CDBAEF49";
+//        String result = decryptDES(a, key);
+//
+//        System.out.println("result:" + result);
+//        System.out.println("result2:"+new String(decrypt(result.getBytes(),key)));
+    }
+}
--- a/src/main/java/com/fr/plugin/rcsso/utils/FRUtils.java
+++ b/src/main/java/com/fr/plugin/rcsso/utils/FRUtils.java
@ -0,0 +1,190 @@
+package com.fr.plugin.rcsso.utils;
+
+import com.fr.base.ServerConfig;
+import com.fr.decision.authority.AuthorityContext;
+import com.fr.decision.authority.data.User;
+import com.fr.decision.webservice.login.LogInOutResultInfo;
+import com.fr.decision.webservice.utils.DecisionServiceConstants;
+import com.fr.decision.webservice.v10.login.LoginService;
+import com.fr.decision.webservice.v10.login.event.LogInOutEvent;
+import com.fr.decision.webservice.v10.user.UserService;
+import com.fr.event.EventDispatcher;
+import com.fr.log.FineLoggerFactory;
+import com.fr.stable.StringUtils;
+import com.fr.stable.query.QueryFactory;
+import com.fr.stable.query.restriction.RestrictionFactory;
+import com.fr.web.utils.WebUtils;
+
+import javax.servlet.http.Cookie;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import javax.servlet.http.HttpSession;
+import java.util.List;
+
+public class FRUtils {
+    /**
+     * 判断用户是否存在
+     * @param userName
+     * @return
+     */
+    public static boolean isUserExist(String userName){
+        if (StringUtils.isEmpty(userName)) {
+            return false;
+        } else {
+            try {
+                List var1 = AuthorityContext.getInstance().getUserController().find(QueryFactory.create().addRestriction(RestrictionFactory.eq("userName", userName)));
+                return var1 != null && !var1.isEmpty();
+            } catch (Exception var2) {
+                FineLoggerFactory.getLogger().error(var2.getMessage());
+                return false;
+            }
+        }
+    }
+
+    /**
+     * 判断是否登录FR
+     * @param req
+     * @return
+     */
+    public static boolean isLogin(HttpServletRequest req){
+        return LoginService.getInstance().isLogged(req);
+    }
+
+    /**
+     * 帆软登录
+     * @param httpServletRequest
+     * @param httpServletResponse
+     * @param userName
+     * @param url
+     */
+    public static void login(HttpServletRequest httpServletRequest,HttpServletResponse httpServletResponse,String userName,String url){
+        FineLoggerFactory.getLogger().info("FRLOG:用户名:"+userName);
+        FineLoggerFactory.getLogger().info("FRLOG:跳转链接:"+url);
+
+
+        //判断用户名是否为空
+        if(!Utils.isNullStr(userName)){
+            if(isUserExist(userName)){
+                String FRToken = "";
+
+                try {
+                    HttpSession session = httpServletRequest.getSession(true);
+
+                    FRToken = LoginService.getInstance().login(httpServletRequest, httpServletResponse, userName);
+                    writeToken2Cookie(httpServletResponse,FRToken,-1);
+
+                    httpServletRequest.setAttribute(DecisionServiceConstants.FINE_AUTH_TOKEN_NAME,FRToken);
+
+                    session.setAttribute(DecisionServiceConstants.FINE_AUTH_TOKEN_NAME, FRToken);
+                    EventDispatcher.fire(LogInOutEvent.LOGIN,new LogInOutResultInfo(httpServletRequest,httpServletResponse,userName,true));
+                    FineLoggerFactory.getLogger().info("FRLOG:登陆成功!");
+
+                    if(!Utils.isNullStr(url)){
+                        httpServletResponse.sendRedirect(url);
+                    }
+                } catch (Exception e) {
+                    ResponseUtils.failedResponse(httpServletResponse,"登录异常，请联系管理员!");
+                    FineLoggerFactory.getLogger().info("FRLOG:登录异常，请联系管理员!");
+                    FineLoggerFactory.getLogger().info("FRLOGException:"+e.getMessage());
+                }
+            }else{
+                ResponseUtils.failedResponse(httpServletResponse,"用户在报表系统中不存在!");
+                FineLoggerFactory.getLogger().info("FRLOG:用户在报表系统中不存在!");
+            }
+        }else{
+            ResponseUtils.failedResponse(httpServletResponse,"用户名不能为空!");
+            FineLoggerFactory.getLogger().info("FRLOG:用户名不能为空!");
+        }
+    }
+
+    private static void writeToken2Cookie(HttpServletResponse var1, String var2, int var3) {
+        try {
+            if (StringUtils.isNotEmpty(var2)) {
+                Cookie var4 = new Cookie("fine_auth_token", var2);
+                long var5 = var3 == -2 ? 1209600000L : (long)var3;
+                var4.setMaxAge((int)var5);
+                var4.setPath(ServerConfig.getInstance().getCookiePath());
+                var1.addCookie(var4);
+                Cookie var7 = new Cookie("fine_remember_login", String.valueOf(var3 == -2 ? -2 : -1));
+                var7.setMaxAge((int)var5);
+                var7.setPath(ServerConfig.getInstance().getCookiePath());
+                var1.addCookie(var7);
+            } else {
+                FineLoggerFactory.getLogger().error("empty token cannot save.");
+            }
+        } catch (Exception var8) {
+            FineLoggerFactory.getLogger().error(var8.getMessage(), var8);
+        }
+
+    }
+
+    /**
+     *
+     * @param httpServletRequest
+     * @param httpServletResponse
+     */
+    public static void logout(HttpServletRequest httpServletRequest,HttpServletResponse httpServletResponse)
+    {
+        if(!isLogin(httpServletRequest)){
+            return ;
+        }
+
+        try {
+            LoginService.getInstance().logout(httpServletRequest,httpServletResponse);
+        } catch (Exception e) {
+            ResponseUtils.failedResponse(httpServletResponse,"登出异常，请联系管理员!");
+            FineLoggerFactory.getLogger().info("FRLOG:登出异常，请联系管理员!");
+            FineLoggerFactory.getLogger().info("FRLOGException:"+e.getMessage());
+        }
+    }
+
+    /**
+     * 打印FR日志
+     * @param message
+     */
+    public static void FRLogInfo(String message){
+        FineLoggerFactory.getLogger().info("FRLOG:"+message);
+    }
+
+    /**
+     * 打印FR日志-error
+     * @param message
+     */
+    public static void FRLogError(String message){
+        FineLoggerFactory.getLogger().error("FRLOG:"+message);
+    }
+
+
+    /**
+     * 根据用户名获取用户信息
+     * @param userName
+     * @return
+     */
+    public static User getFRUserByUserName(String userName){
+        try {
+            return UserService.getInstance().getUserByUserName(userName);
+        } catch (Exception e) {
+            FRLogInfo("获取用户信息异常:"+e.getMessage());
+        }
+
+        return null;
+    }
+
+    /**
+     * 解密FR密码
+     * @param password
+     * @return
+     */
+//    public static String decryptFRPsd(String password){
+//        FRLogInfo("解密密码:"+password);
+//        return TransmissionTool.decrypt(password);
+//    }
+
+    /**
+     * 获取带参数的访问链接
+     * @return
+     */
+    public static String getAllUrl(HttpServletRequest httpServletRequest){
+        return  WebUtils.getOriginalURL(httpServletRequest);
+    }
+}
--- a/src/main/java/com/fr/plugin/rcsso/utils/HttpUtils.java
+++ b/src/main/java/com/fr/plugin/rcsso/utils/HttpUtils.java
@ -0,0 +1,230 @@
+package com.fr.plugin.rcsso.utils;
+
+import com.fr.log.FineLoggerFactory;
+import com.fr.third.org.apache.http.HttpEntity;
+import com.fr.third.org.apache.http.HttpResponse;
+import com.fr.third.org.apache.http.HttpStatus;
+import com.fr.third.org.apache.http.NameValuePair;
+import com.fr.third.org.apache.http.client.CookieStore;
+import com.fr.third.org.apache.http.client.entity.UrlEncodedFormEntity;
+import com.fr.third.org.apache.http.client.methods.HttpGet;
+import com.fr.third.org.apache.http.client.methods.HttpPost;
+import com.fr.third.org.apache.http.conn.ssl.NoopHostnameVerifier;
+import com.fr.third.org.apache.http.entity.StringEntity;
+import com.fr.third.org.apache.http.impl.client.BasicCookieStore;
+import com.fr.third.org.apache.http.impl.client.CloseableHttpClient;
+import com.fr.third.org.apache.http.impl.client.HttpClients;
+import com.fr.third.org.apache.http.impl.cookie.BasicClientCookie;
+import com.fr.third.org.apache.http.message.BasicNameValuePair;
+import com.fr.third.org.apache.http.ssl.SSLContexts;
+import com.fr.third.org.apache.http.ssl.TrustStrategy;
+import com.fr.third.org.apache.http.util.EntityUtils;
+
+import javax.net.ssl.SSLContext;
+import javax.servlet.http.Cookie;
+import java.io.UnsupportedEncodingException;
+import java.security.KeyManagementException;
+import java.security.KeyStoreException;
+import java.security.NoSuchAlgorithmException;
+import java.security.cert.CertificateException;
+import java.security.cert.X509Certificate;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+
+public class HttpUtils {
+    /**
+     * httpGet请求
+     * @param url
+     * @return
+     */
+    public static String get(String url,Cookie[] cookies,Map<String,String> header){
+        FineLoggerFactory.getLogger().info("FRLOG:HttpUtils.get--url:"+url);
+
+        //创建httpClient
+        CloseableHttpClient httpclient = createHttpClient(cookies);
+
+        HttpGet getMethod = new HttpGet(url);
+
+        if(header != null && header.size() > 0){
+            Set<String> keySet = header.keySet();
+
+            for(String key : keySet){
+                getMethod.setHeader(key,header.get(key));
+            }
+        }
+
+        try {
+            HttpResponse response = httpclient.execute(getMethod);
+            int status =response.getStatusLine().getStatusCode();
+            HttpEntity entity = response.getEntity();
+            String returnResult = EntityUtils.toString(entity, "utf-8");
+
+            FineLoggerFactory.getLogger().info("FRLOG:HttpUtils.get--status:"+status);
+            FineLoggerFactory.getLogger().info("FRLOG:HttpUtils.get--returnResult:"+returnResult);
+
+            if (status == HttpStatus.SC_OK) {
+                return returnResult;
+            }
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().info("FRLOG:HttpUtils.get--exception:"+e.getMessage());
+        }
+
+        return "";
+    }
+
+    /**
+     * HttpPost请求
+     * @param postMethod
+     * @return
+     */
+    private static String HttpPost(HttpPost postMethod){
+        CloseableHttpClient httpclient = createHttpClient(null);
+
+        try {
+            HttpResponse response = httpclient.execute(postMethod);
+            int status = response.getStatusLine().getStatusCode();
+            HttpEntity entity = response.getEntity();
+            String returnResult = EntityUtils.toString(entity, "utf-8");
+            FineLoggerFactory.getLogger().info("FRLOG:HttpPost:status:"+status);
+            FineLoggerFactory.getLogger().info("FRLOG:HttpPost:returnResult:"+returnResult);
+
+            if (status == HttpStatus.SC_OK) {
+                return returnResult;
+            }
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().info("FRLOG:HttpPost:exception:"+e.getMessage());
+        }
+
+        return "";
+    }
+
+    public static String HttpPostXML(String url, String xmlParam){
+        FineLoggerFactory.getLogger().info("FRLOG:HttpPostXML:url:"+url);
+
+        HttpPost postMethod = new HttpPost(url);
+
+        postMethod.setHeader("Content-type", "text/html");
+        HttpEntity entity2 = null;
+        try {
+            entity2 = new StringEntity(xmlParam);
+        } catch (UnsupportedEncodingException e) {
+            FineLoggerFactory.getLogger().info("FRLOG:HttpPostXML:参数异常:"+e.getMessage());
+            return "";
+        }
+
+        postMethod.setEntity(entity2);
+
+        return HttpPost(postMethod);
+    }
+
+    public static String HttpPostJson(String url, String param,Map<String,String> header){
+        FineLoggerFactory.getLogger().info("FRLOG:HttpPostJSON:url:"+url);
+
+        HttpPost postMethod = new HttpPost(url);
+
+        postMethod.setHeader("Content-Type","application/json");
+
+        if(header != null && header.size() > 0){
+            Set<String> keySet = header.keySet();
+
+            for(String key : keySet){
+                postMethod.setHeader(key,header.get(key));
+            }
+        }
+
+        if(!Utils.isNullStr(param)){
+            HttpEntity entity2 = null;
+            try {
+                entity2 = new StringEntity(param);
+            } catch (UnsupportedEncodingException e) {
+                FineLoggerFactory.getLogger().info("FRLOG:HttpPostJSON:参数异常:"+e.getMessage());
+                return "";
+            }
+
+            postMethod.setEntity(entity2);
+        }
+
+        return HttpPost(postMethod);
+    }
+
+    public static String HttpPostWWWForm(String url, Map<String,String> header,Map<String,String> param){
+        FineLoggerFactory.getLogger().info("FRLOG:HttpWWWForm:url:"+url);
+
+        HttpPost postMethod = new HttpPost(url);
+
+        if(header != null && header.size() > 0){
+            Set<String> keySet = header.keySet();
+
+            for(String key : keySet){
+                postMethod.setHeader(key,header.get(key));
+            }
+        }
+
+        if(param != null && param.size() > 0){
+            List<NameValuePair> params = new ArrayList<NameValuePair>(param.size());
+
+            for(Map.Entry<String,String> map : param.entrySet()){
+                params.add(new BasicNameValuePair(map.getKey(), map.getValue()));
+            }
+
+            try {
+                postMethod.setEntity(new UrlEncodedFormEntity(params, "UTF-8"));
+            } catch (UnsupportedEncodingException e) {
+                FineLoggerFactory.getLogger().info("FRLOG:HttpWWWForm:异常:"+e.getMessage());
+                return "";
+            }
+        }
+
+        return HttpPost(postMethod);
+    }
+
+    private static CloseableHttpClient createHttpClient(Cookie[] cookies){
+
+        SSLContext sslContext = null;
+        try {
+            sslContext = SSLContexts.custom().loadTrustMaterial(null, new TrustStrategy() {
+                @Override
+                public boolean isTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
+                    return true;
+                }
+            }).build();
+        } catch (Exception e) {
+            FRUtils.FRLogInfo("exception:"+e.getMessage());
+        }
+
+        CloseableHttpClient httpclient = null;
+
+        if(cookies != null && cookies.length > 0){
+            CookieStore cookieStore = cookieToCookieStore(cookies);
+
+            httpclient = HttpClients.custom().setSslcontext(sslContext).
+                    setSSLHostnameVerifier(new NoopHostnameVerifier()).setDefaultCookieStore(cookieStore).build();
+        }
+        else{
+            httpclient = HttpClients.custom().setSslcontext(sslContext).
+                    setSSLHostnameVerifier(new NoopHostnameVerifier()).build();
+        }
+
+        return httpclient;
+    }
+
+    /**
+     * cookies转cookieStore
+     * @param cookies
+     * @return
+     */
+    public static CookieStore cookieToCookieStore(Cookie[] cookies){
+        CookieStore cookieStore = new BasicCookieStore();
+
+        if(cookies != null && cookies.length>0){
+            for(Cookie cookie : cookies){
+                BasicClientCookie cookie1 = new BasicClientCookie(cookie.getName(), cookie.getValue());
+                cookieStore.addCookie(cookie1);
+            }
+        }
+
+        return cookieStore;
+    }
+}
--- a/src/main/java/com/fr/plugin/rcsso/utils/JwtUtil.java
+++ b/src/main/java/com/fr/plugin/rcsso/utils/JwtUtil.java
@ -0,0 +1,92 @@
+package com.fr.plugin.rcsso.utils;
+
+import java.util.Date;
+import com.auth0.jwt.JWT;
+import com.auth0.jwt.JWTVerifier;
+import com.auth0.jwt.algorithms.Algorithm;
+import com.auth0.jwt.interfaces.DecodedJWT;
+
+/**
+ * JWT工具类
+ * @author ibm
+ */
+public class JwtUtil
+{
+    /**
+     * 过期时间7天
+     */
+    private static final long EXPIRE_TIME = 7 * 24 * 60 * 60 * 1000;
+
+    /**
+     * 校验token是否正确
+     * @param token 密钥
+     * @param secret 用户的密码
+     * @return 是否正确
+     */
+    public static boolean verify(String token, String username, String secret)
+    {
+        try
+        {
+            Algorithm algorithm = Algorithm.HMAC256(secret);
+            JWTVerifier verifier = JWT.require(algorithm).withClaim("username", username).build();
+            verifier.verify(token);
+            return true;
+        }
+        catch (Exception exception)
+        {
+            return false;
+        }
+    }
+
+    /**
+     * 获得token中的信息无需secret解密也能获得
+     * @return token中包含的用户名
+     */
+    public static String getUsername(String token)
+    {
+        try
+        {
+            DecodedJWT jwt = JWT.decode(token);
+            return jwt.getClaim("username").asString();
+        }
+        catch (Exception e)
+        {
+           throw new RuntimeException("获取用户名出错,原因："+e.getMessage(),e);
+        }
+    }
+
+    /**
+     * 获得token中的信息无需secret解密也能获得
+     * @return token中包含的用户ID
+     */
+    public static long getUserId(String token)
+    {
+        try
+        {
+            DecodedJWT jwt = JWT.decode(token);
+            return jwt.getClaim("userId").asLong();
+        }
+        catch (Exception e)
+        {
+            throw new RuntimeException("获取用户ID出错,原因：",e);
+        }
+    }
+
+    /**
+     * 生成签名,指定时间后过期
+     * @param username 用户名
+     * @param secret 用户的密码
+     * @return 加密的token
+     */
+    public static String sign(String username, String secret,long userId,Long redisExpire)
+    {
+        Date date = new Date(System.currentTimeMillis() + redisExpire);
+        Algorithm algorithm = Algorithm.HMAC256(secret);
+        // 附带username信息
+        return JWT.create().withClaim("username", username).withClaim("userId",userId).withExpiresAt(date).sign(algorithm);
+    }
+
+    public static void main(String[] args) {
+        System.out.println(getUsername("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjE2NDMyNjkwNDIsInVzZXJJZCI6MjkyMCwidXNlcm5hbWUiOiJsX2dvbmdkY3M1In0.fIje0LK23p-LRtED8J80Nt5cCqd1fDoK3NuZY2ogPyc"));
+    }
+}
--- a/src/main/java/com/fr/plugin/rcsso/utils/RSAUtil.java
+++ b/src/main/java/com/fr/plugin/rcsso/utils/RSAUtil.java
@ -0,0 +1,45 @@
+package com.fr.plugin.rcsso.utils;
+
+import org.apache.commons.codec.binary.Base64;
+
+import javax.crypto.Cipher;
+import java.net.URLDecoder;
+import java.net.URLEncoder;
+import java.security.KeyFactory;
+import java.security.interfaces.RSAPrivateKey;
+import java.security.spec.PKCS8EncodedKeySpec;
+
+public class RSAUtil {
+    public static void main(String[] args) throws Exception {
+        // 密文
+//        String message = "aFnvaH3EvOQYX/1zRMwueZvaEG/Oghm4aJ25HtEhYIEQAuLUMRpN9rAfL8a6DWoQ93Cm6bBlfNIRQE0HvDnb897ClmL9tXC3 rGjO8P5RXAuCTywpLHJI/774 z1iXsIi 50YoTDCyt1oKm1z2vc5QBr8EV8ivNk56mFC/s7LqY=";
+        String message = URLDecoder.decode("G2xTxbkrjzgEA4YOryTOUYksyJX0uHnvrutmFgnZEtD291kuSI%2Bq5oEaetqBz%2BVBh3D4Pz9t2iFfyIgLP7NEs%2BoD10i2eh%2FFWKwPEucJ3Ls9XV2fqfkFwsiA6%2FHQZvdzLs5MnbFjZ2c4uk2atSkUUnRGZ8xk5T39h6D52Ep26zw%3D");
+        System.out.println(URLEncoder.encode(message));
+        // 私钥：请保存好
+        String privateKey = "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";
+        String messageDes = decrypt(message, privateKey);
+        System.out.println("还原后的明文为:" + messageDes);
+
+        //tokenid
+    }
+
+    /**
+     * RSA私钥解密
+     *
+     * @param str        加密字符串
+     * @param privateKey 私钥
+     * @return 明文
+     * @throws Exception 解密过程中的异常信息
+     */
+    public static String decrypt(String str, String privateKey) throws Exception {
+        //64位解码加密后的字符串
+        byte[] inputByte = Base64.decodeBase64(str.getBytes("UTF-8"));
+        //base64编码的私钥
+        byte[] decoded = Base64.decodeBase64(privateKey);
+        RSAPrivateKey priKey = (RSAPrivateKey) KeyFactory.getInstance("RSA").generatePrivate(new PKCS8EncodedKeySpec(decoded));
+        //RSA解密
+        Cipher cipher = Cipher.getInstance("RSA");
+        cipher.init(Cipher.DECRYPT_MODE, priKey);
+        return new String(cipher.doFinal(inputByte));
+    }
+}
--- a/src/main/java/com/fr/plugin/rcsso/utils/ResponseUtils.java
+++ b/src/main/java/com/fr/plugin/rcsso/utils/ResponseUtils.java
@ -0,0 +1,94 @@
+package com.fr.plugin.rcsso.utils;
+
+import com.fr.json.JSONObject;
+import com.fr.log.FineLoggerFactory;
+import com.fr.web.utils.WebUtils;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.PrintWriter;
+
+public class ResponseUtils {
+    private static final int SUCCESS = 200;
+    private static final int FAILED = -1;
+
+    public static void successResponse(HttpServletResponse res, String body) {
+        response(res, body, SUCCESS);
+    }
+
+    public static void failedResponse(HttpServletResponse res, String body) {
+        response(res, body, FAILED);
+    }
+
+    private static void response(HttpServletResponse res, String body, int code) {
+        JSONObject object = new JSONObject();
+        PrintWriter pw;
+        try {
+            object.put("code", code);
+            object.put("data", body);
+            pw = WebUtils.createPrintWriter(res);
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().info(e.getMessage());
+            return;
+        }
+        res.setContentType("application/json;charset=utf-8");
+        String result = object.toString();
+        pw.println(result);
+        pw.flush();
+        pw.close();
+    }
+
+    public static void response(HttpServletResponse res,JSONObject json){
+        PrintWriter pw;
+        try {
+            pw = WebUtils.createPrintWriter(res);
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().info(e.getMessage());
+            return;
+        }
+        res.setContentType("application/json;charset=utf-8");
+        String result = json.toString();
+        pw.println(result);
+        pw.flush();
+        pw.close();
+    }
+
+    public static void responseXml(HttpServletResponse res,String xml){
+        PrintWriter pw;
+        try {
+            pw = WebUtils.createPrintWriter(res);
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().info(e.getMessage());
+            return;
+        }
+        res.setContentType("text/xml;charset=utf-8");
+        pw.println(xml);
+        pw.flush();
+        pw.close();
+    }
+
+    public static void setCSRFHeader(HttpServletResponse httpServletResponse){
+        httpServletResponse.setHeader("Access-Control-Allow-Origin", "*");
+        httpServletResponse.setHeader("Access-Control-Allow-Methods", "POST,GET,OPTIONS,DELETE,HEAD,PUT,PATCH");
+        httpServletResponse.setHeader("Access-Control-Max-Age", "36000");
+        httpServletResponse.setHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept,Authorization,authorization");
+    }
+
+    public static void responseJsonp(HttpServletRequest req, HttpServletResponse res, JSONObject json){
+        PrintWriter pw;
+        try {
+            pw = WebUtils.createPrintWriter(res);
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().info(e.getMessage());
+            return;
+        }
+        res.setContentType("text/javascript;charset=utf-8;charset=utf-8");
+        String result = json.toString();
+
+        String jsonp=req.getParameter("callback");
+
+        pw.println(jsonp+"("+result+")");
+        pw.flush();
+        pw.close();
+    }
+}
--- a/src/main/java/com/fr/plugin/rcsso/utils/Utils.java
+++ b/src/main/java/com/fr/plugin/rcsso/utils/Utils.java
@ -0,0 +1,198 @@
+package com.fr.plugin.rcsso.utils;
+
+import com.fr.data.NetworkHelper;
+import com.fr.json.JSONObject;
+import com.fr.stable.CodeUtils;
+import com.fr.stable.StringUtils;
+import com.fr.third.org.apache.commons.codec.digest.DigestUtils;
+
+import javax.servlet.http.Cookie;
+import javax.servlet.http.HttpServletRequest;
+import java.io.BufferedReader;
+import java.net.URLEncoder;
+import java.util.UUID;
+import java.util.regex.Matcher;
+import java.util.regex.Pattern;
+
+public class Utils {
+
+    /**
+     * 判断字符串是否为空
+     * @param str
+     * @return  true 空字符串  false 非空字符串
+     */
+    public static boolean isNullStr(String str){
+        return !(str != null && !str.isEmpty() && !"null".equals(str));
+    }
+
+    /**
+     * 判断字符串是否非空
+     * @param str
+     * @return
+     */
+    public static boolean isNotNullStr(String str){
+        return !isNullStr(str);
+    }
+
+    /**
+     * MD5加密
+     * @param str
+     * @return
+     */
+    public static String getMd5Str(String str)
+    {
+        return DigestUtils.md5Hex(str);
+    }
+
+	/**
+     * 帆软shaEncode加密
+     */
+
+	public static String shaEncode(String str){
+		return CodeUtils.sha256Encode(str);
+	}
+
+    /**
+     * 获取uuid
+     */
+    public static String uuid(){
+        return UUID.randomUUID().toString();
+    }
+
+    /**
+     * 替换空字符串
+     * @param str
+     * @param replace
+     * @return
+     */
+    public static String replaceNullStr(String str,String replace){
+        if(isNullStr(str)){
+            return replace;
+        }
+
+        return str;
+    }
+
+    /**
+     * 获取请求体
+     * @param req
+     * @return
+     */
+    public static JSONObject getRequestBody(HttpServletRequest req){
+        StringBuffer sb = new StringBuffer();
+        String line = null;
+        try {
+            BufferedReader reader = req.getReader();
+            while ((line = reader.readLine()) != null)
+                sb.append(line);
+        } catch (Exception e) {
+            FRUtils.FRLogInfo("getRequestBody:exception:"+e.getMessage());
+        }
+        //将空格和换行符替换掉避免使用反序列化工具解析对象时失败
+        String jsonString = sb.toString().replaceAll("\\s","").replaceAll("\n","");
+
+        JSONObject json = new JSONObject(jsonString);
+
+        return json;
+    }
+
+    /**
+     * 获取ip
+     * @return
+     */
+    public static String getIp(HttpServletRequest req){
+        String realIp = req.getHeader("X-Real-IP");
+        String fw = req.getHeader("X-Forwarded-For");
+        if (StringUtils.isNotEmpty(fw) && !"unKnown".equalsIgnoreCase(fw)) {
+            int var3 = fw.indexOf(",");
+            return var3 != -1 ? fw.substring(0, var3) : fw;
+        } else {
+            fw = realIp;
+            if (StringUtils.isNotEmpty(realIp) && !"unKnown".equalsIgnoreCase(realIp)) {
+                return realIp;
+            } else {
+                if (StringUtils.isBlank(realIp) || "unknown".equalsIgnoreCase(realIp)) {
+                    fw = req.getHeader("Proxy-Client-IP");
+                }
+
+                if (StringUtils.isBlank(fw) || "unknown".equalsIgnoreCase(fw)) {
+                    fw = req.getHeader("WL-Proxy-Client-IP");
+                }
+
+                if (StringUtils.isBlank(fw) || "unknown".equalsIgnoreCase(fw)) {
+                    fw = req.getHeader("HTTP_CLIENT_IP");
+                }
+
+                if (StringUtils.isBlank(fw) || "unknown".equalsIgnoreCase(fw)) {
+                    fw = req.getHeader("HTTP_X_FORWARDED_FOR");
+                }
+
+                if (StringUtils.isBlank(fw) || "unknown".equalsIgnoreCase(fw)) {
+                    fw = req.getRemoteAddr();
+                }
+
+                return fw;
+            }
+        }
+    }
+
+    /**
+     * 根据key获取cookie
+     * @param req
+     * @return
+     */
+    public static String getCookieByKey(HttpServletRequest req,String key){
+        Cookie[] cookies = req.getCookies();
+        String cookie = "";
+
+        if(cookies == null || cookies.length <=0){
+            return "";
+        }
+
+        for(int i = 0; i < cookies.length; i++) {
+            Cookie item = cookies[i];
+            if (item.getName().equalsIgnoreCase(key)) {
+                cookie = item.getValue();
+            }
+        }
+
+        FRUtils.FRLogInfo("cookie:"+cookie);
+
+        return cookie;
+    }
+
+    /**
+     * 判断是否是手机端的链接
+     * @param req
+     * @return
+     */
+    public static boolean isMobile(HttpServletRequest req) {
+        String[] mobileArray = {"iPhone", "iPad", "android", "windows phone", "xiaomi"};
+        String userAgent = req.getHeader("user-agent");
+        FRUtils.FRLogInfo("userAgent:"+userAgent);
+        if (userAgent != null && userAgent.toUpperCase().contains("MOBILE")) {
+            for(String mobile : mobileArray) {
+                if(userAgent.toUpperCase().contains(mobile.toUpperCase())) {
+                    return true;
+                }
+            }
+        }
+        return NetworkHelper.getDevice(req).isMobile();
+    }
+
+    /**
+     * 只编码中文
+     * @param url
+     * @return
+     */
+    public static String encodeCH(String url ){
+        Matcher matcher = Pattern.compile("[\\u4e00-\\u9fa5]").matcher(url);
+
+        while(matcher.find()){
+            String chn = matcher.group();
+            url = url.replaceAll(chn, URLEncoder.encode(chn));
+        }
+
+        return url;
+    }
+}