提交开源任务材料

2 years ago · 29edb26cd3
13 changed files with 1053 additions and 1 deletions
--- a/JSD-9434-需求确认书V1.docx
+++ b/JSD-9434-需求确认书V1.docx
--- a/README.md
+++ b/README.md
@ -1,3 +1,6 @@
 # open-JSD-9434

-JSD-9434 门户集成+消息推送
+JSD-9434 门户集成+消息推送\
+免责说明：该源码为第三方爱好者提供，不保证源码和方案的可靠性，也不提供任何形式的源码教学指导和协助！\
+仅作为开发者学习参考使用！禁止用于任何商业用途！\
+为保护开发者隐私，开发者信息已隐去！若原开发者希望公开自己的信息，可联系hugh处理。
--- a/plugin.xml
+++ b/plugin.xml
@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<plugin>
+    <id>com.fr.plugin.xxxx.fymh.sso</id>
+    <name><![CDATA[H5门户集成及消息推送]]></name>
+    <active>yes</active>
+    <version>1.7</version>
+    <env-version>10.0</env-version>
+    <jartime>2018-07-31</jartime>
+    <vendor>fr.open</vendor>
+    <description><![CDATA[H5门户集成及消息推送]]></description>
+    <change-notes><![CDATA[
+      [2021-12-26]【1.0】初始化插件。<br/>
+      [2021-01-06]【1.1】配置参数修改。<br/>
+      [2021-01-06]【1.2】接口调用修改。<br/>
+      [2021-01-07]【1.3】返回数据解析。<br/>
+      [2021-01-07]【1.4】跳转地址修改。<br/>
+      [2021-01-07]【1.5】日志打印。<br/>
+      [2021-01-07]【1.6】待办鉴权。<br/>
+      [2021-01-07]【1.6】增加回调地址。<br/>
+    ]]></change-notes>
+    <extra-decision>
+        <GlobalRequestFilterProvider class="com.fr.plugin.xxxx.fymh.sso.LoginFilter"/>
+        <HttpHandlerProvider class="com.fr.plugin.xxxx.fymh.sso.handler.HandleRequestHandlerBridge"/>
+        <URLAliasProvider class="com.fr.plugin.xxxx.fymh.sso.handler.HandleRequestURLAliasBridge" />
+    </extra-decision>
+    <function-recorder class="com.fr.plugin.xxxx.fymh.sso.LoginFilter"/>
+    <lifecycle-monitor class="com.fr.plugin.xxxx.fymh.sso.LRGT"/>
+</plugin>
--- a/src/main/java/com/fr/plugin/xxxx/fymh/sso/CommonUtils.java
+++ b/src/main/java/com/fr/plugin/xxxx/fymh/sso/CommonUtils.java
@ -0,0 +1,152 @@
+package com.fr.plugin.xxxx.fymh.sso;
+
+import com.fr.data.NetworkHelper;
+import com.fr.decision.authority.data.User;
+import com.fr.decision.mobile.terminal.TerminalHandler;
+import com.fr.decision.webservice.utils.DecisionServiceConstants;
+import com.fr.decision.webservice.utils.DecisionStatusService;
+import com.fr.decision.webservice.utils.WebServiceUtils;
+import com.fr.decision.webservice.v10.login.LoginService;
+import com.fr.decision.webservice.v10.login.TokenResource;
+import com.fr.decision.webservice.v10.user.UserService;
+import com.fr.locale.InterProviderFactory;
+import com.fr.log.FineLoggerFactory;
+import com.fr.stable.StringUtils;
+import com.fr.stable.web.Device;
+import com.fr.web.utils.WebUtils;
+
+import javax.servlet.FilterChain;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.PrintWriter;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Properties;
+
+/**
+ * @author fr.open
+ * @since 2021/8/24
+ */
+public class CommonUtils {
+
+    public static String getProperty(Properties props, String key, String defaultValue, boolean allowBlank) {
+        String value = props.getProperty(key);
+        if (StringUtils.isNotBlank(value)) {
+            return value;
+        } else {
+            if (allowBlank) {
+                LogUtils.warn("Property[" + key + "] value is blank.");
+                return defaultValue;
+            } else {
+                throw new IllegalArgumentException("Property[" + key + "] cann't be blank.");
+            }
+        }
+    }
+
+    public static String getProperty(Properties props, String key, boolean allowBlank) {
+        return getProperty(props, key, null, allowBlank);
+    }
+
+    public static String getProperty(Properties props, String key) {
+        return getProperty(props, key, null, true);
+    }
+
+    public static boolean isLogin(HttpServletRequest request) {
+        String oldToken = TokenResource.COOKIE.getToken(request);
+        return oldToken != null && checkTokenValid(request, (String) oldToken);
+    }
+
+    private static boolean checkTokenValid(HttpServletRequest req, String token) {
+        try {
+            Device device = NetworkHelper.getDevice(req);
+            LoginService.getInstance().loginStatusValid(token, TerminalHandler.getTerminal(req, device));
+            return true;
+        } catch (Exception ignore) {
+        }
+        return false;
+    }
+
+    /**
+     * 跳转到过滤器链中的下一个过滤器
+     *
+     * @param request
+     * @param response
+     * @param chain
+     */
+    public static void next(HttpServletRequest request, HttpServletResponse response, FilterChain chain) {
+        try {
+            chain.doFilter(request, response);
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().error(e.getMessage(), e);
+        }
+    }
+
+    public static void login(String username, HttpServletRequest request, HttpServletResponse response) {
+        try {
+            User user = UserService.getInstance().getUserByUserName(username);
+            if (user == null) {
+                throw new RuntimeException("系统未授权, 当前用户是\"" + username + "\"");
+            }
+            String token = LoginService.getInstance().login(request, response, user.getUserName());
+            request.setAttribute(DecisionServiceConstants.FINE_AUTH_TOKEN_NAME, token);
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().error("sso >> Failed to login with[" + username + "]", e);
+            throw new RuntimeException("用户\"" + username + "\"登录失败");
+        }
+    }
+
+    public static boolean isMobileDevice(HttpServletRequest request) {
+        if (WebUtils.getDevice(request).isMobile()) {
+            LogUtils.debug4plugin("current request is is mobile request ,url is {}", request.getRequestURI());
+            return true;
+        }
+        String requestHeader = request.getHeader("user-agent");
+        String[] deviceArray = new String[]{"android", "iphone", "ipad", "ios", "windows phone", "wechat"};
+        if (requestHeader == null) {
+            return false;
+        }
+        requestHeader = requestHeader.toLowerCase();
+        for (int i = 0; i < deviceArray.length; i++) {
+            if (requestHeader.toLowerCase().contains(deviceArray[i])) {
+                LogUtils.debug4plugin("current request:{} is mobile request!", request.getRequestURI());
+                return true;
+            }
+        }
+        String op = WebUtils.getHTTPRequestParameter(request, "op");
+        return StringUtils.isNotBlank(op) && StringUtils.equals("h5", op);
+    }
+
+    public static void cacheParams(String key, Map<String, String> values) {
+        try {
+            DecisionStatusService.originUrlStatusService().put(key, values);
+        } catch (Exception e) {
+            throw new RuntimeException(e);
+        }
+    }
+
+    public static String getCachedParam(String key, String name) {
+        try {
+            Map<String, String> values = DecisionStatusService.originUrlStatusService().get(key);
+            return values.get(name);
+        } catch (Exception e) {
+            throw new RuntimeException(e);
+        }
+    }
+
+    public static void setError(HttpServletResponse res, String reason) {
+        try {
+            PrintWriter printWriter = WebUtils.createPrintWriter(res);
+            Map<String, Object> map = new HashMap<>();
+            map.put("result", InterProviderFactory.getProvider().getLocText("Fine-Engine_Error_Page_Result"));
+            map.put("reason", reason);
+            map.put("solution", InterProviderFactory.getProvider().getLocText("Fine-Engine_Please_Contact_Platform_Admin"));
+            String page = WebServiceUtils.parseWebPageResourceSafe("com/fr/web/controller/decision/entrance/resources/unavailable.html", map);
+            printWriter.write(page);
+            printWriter.flush();
+            printWriter.close();
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().error(e.getMessage(), e);
+        }
+    }
+
+}
--- a/src/main/java/com/fr/plugin/xxxx/fymh/sso/FeiYuSsoConfig.java
+++ b/src/main/java/com/fr/plugin/xxxx/fymh/sso/FeiYuSsoConfig.java
@ -0,0 +1,128 @@
+package com.fr.plugin.xxxx.fymh.sso;
+
+import com.fr.config.*;
+import com.fr.config.holder.Conf;
+import com.fr.config.holder.factory.Holders;
+import com.fr.stable.StringUtils;
+
+
+/**
+ * @author fr.open
+ * @since 2021/12/04
+ */
+@Visualization(category = "门户配置")
+public class FeiYuSsoConfig extends DefaultConfiguration {
+
+    private static volatile FeiYuSsoConfig config = null;
+
+    public static FeiYuSsoConfig getInstance() {
+        if (config == null) {
+            config = ConfigContext.getConfigInstance(FeiYuSsoConfig.class);
+        }
+        return config;
+    }
+
+    @Identifier(value = "debugSwitch", name = "插件调试开关", description = "日志调试模式", status = Status.SHOW)
+    private Conf<Boolean> debugSwitch = Holders.simple(true);
+
+    public Boolean getDebugSwitch() {
+        return this.debugSwitch.get();
+    }
+
+    public void setDebugSwitch(Boolean debugSwitch) {
+        this.debugSwitch.set(debugSwitch);
+    }
+
+    @Identifier(value = "authUser", name = "授权账户", description = "授权账户", status = Status.SHOW)
+    private Conf<String> authUser = Holders.simple(StringUtils.EMPTY);
+
+    public String getAuthUser() {
+        return this.authUser.get();
+    }
+
+    public void setAuthUser(String authUser) {
+        this.authUser.set(authUser);
+    }
+
+    @Identifier(value = "authPass", name = "授权密码", description = "授权密码", status = Status.SHOW)
+    private Conf<String> authPass = Holders.simple(StringUtils.EMPTY);
+
+    public String getAuthPass() {
+        return this.authPass.get();
+    }
+
+    public void setAuthPass(String authPass) {
+        this.authPass.set(authPass);
+    }
+
+    @Identifier(value = "infoUrl", name = "用户信息接口地址", description = "用户信息接口地址", status = Status.SHOW)
+    private Conf<String> infoUrl = Holders.simple(StringUtils.EMPTY);
+
+    public String getInfoUrl() {
+        return this.infoUrl.get();
+    }
+
+    public void setInfoUrl(String infoUrl) {
+        this.infoUrl.set(infoUrl);
+    }
+
+    @Identifier(value = "clientId", name = "客⼾端ID", description = "客⼾端ID", status = Status.SHOW)
+    private Conf<String> clientId = Holders.simple(StringUtils.EMPTY);
+
+    public String getClientId() {
+        return this.clientId.get();
+    }
+
+    public void setClientId(String clientId) {
+        this.clientId.set(clientId);
+    }
+
+    @Identifier(value = "clientSecret", name = "客⼾端密钥", description = "客⼾端密钥", status = Status.SHOW)
+    private Conf<String> clientSecret = Holders.simple(StringUtils.EMPTY);
+
+    public String getClientSecret() {
+        return this.clientSecret.get();
+    }
+
+    public void setClientSecret(String clientSecret) {
+        this.clientSecret.set(clientSecret);
+    }
+
+    @Identifier(value = "tokenUrl", name = "获取token的地址", description = "获取token的地址⼾端密钥", status = Status.SHOW)
+    private Conf<String> tokenUrl = Holders.simple(StringUtils.EMPTY);
+
+    public String getTokenUrl() {
+        return this.tokenUrl.get();
+    }
+
+    public void setTokenUrl(String tokenUrl) {
+        this.tokenUrl.set(tokenUrl);
+    }
+
+    @Identifier(value = "todoUrl", name = "推送待办地址", description = "推送待办地址", status = Status.SHOW)
+    private Conf<String> todoUrl = Holders.simple(StringUtils.EMPTY);
+
+    public String getTodoUrl() {
+        return this.todoUrl.get();
+    }
+
+    public void setTodoUrl(String todoUrl) {
+        this.todoUrl.set(todoUrl);
+    }
+
+    @Override
+    public Object clone() throws CloneNotSupportedException {
+        FeiYuSsoConfig cloned = (FeiYuSsoConfig) super.clone();
+        cloned.debugSwitch = (Conf<Boolean>) debugSwitch.clone();
+        cloned.authUser = (Conf<String>) authUser.clone();
+        cloned.authPass = (Conf<String>) authPass.clone();
+        cloned.infoUrl = (Conf<String>) infoUrl.clone();
+        cloned.clientId = (Conf<String>) clientId.clone();
+        cloned.clientSecret = (Conf<String>) clientSecret.clone();
+        cloned.tokenUrl = (Conf<String>) tokenUrl.clone();
+        cloned.todoUrl = (Conf<String>) todoUrl.clone();
+        return cloned;
+    }
+
+
+}
--- a/src/main/java/com/fr/plugin/xxxx/fymh/sso/HttpUtil.java
+++ b/src/main/java/com/fr/plugin/xxxx/fymh/sso/HttpUtil.java
@ -0,0 +1,337 @@
+package com.fr.plugin.xxxx.fymh.sso;
+
+import com.fr.json.JSONObject;
+import com.fr.log.FineLoggerFactory;
+import com.fr.stable.StringUtils;
+import com.fr.third.org.apache.http.HttpResponse;
+import com.fr.third.org.apache.http.HttpStatus;
+import com.fr.third.org.apache.http.NameValuePair;
+import com.fr.third.org.apache.http.client.HttpClient;
+import com.fr.third.org.apache.http.client.entity.UrlEncodedFormEntity;
+import com.fr.third.org.apache.http.client.methods.HttpPost;
+import com.fr.third.org.apache.http.config.Registry;
+import com.fr.third.org.apache.http.config.RegistryBuilder;
+import com.fr.third.org.apache.http.conn.socket.ConnectionSocketFactory;
+import com.fr.third.org.apache.http.conn.socket.PlainConnectionSocketFactory;
+import com.fr.third.org.apache.http.conn.ssl.SSLConnectionSocketFactory;
+import com.fr.third.org.apache.http.impl.client.HttpClients;
+import com.fr.third.org.apache.http.impl.conn.PoolingHttpClientConnectionManager;
+import com.fr.third.org.apache.http.message.BasicNameValuePair;
+import com.fr.third.org.apache.http.util.EntityUtils;
+
+import javax.net.ssl.*;
+import java.io.*;
+import java.net.HttpURLConnection;
+import java.net.URL;
+import java.net.URLEncoder;
+import java.security.cert.CertificateException;
+import java.util.ArrayList;
+import java.util.Iterator;
+import java.util.List;
+import java.util.Map;
+import java.util.stream.Collectors;
+
+/**
+ * @Author fr.open
+ * @Date 2020/12/05
+ * @Description
+ **/
+public class HttpUtil {
+
+    private static HostnameVerifier hv = new HostnameVerifier() {
+        @Override
+        public boolean verify(String urlHostName, SSLSession session) {
+            System.out.println("Warning: URL Host: " + urlHostName + " vs. "
+                    + session.getPeerHost());
+            return true;
+        }
+    };
+
+    /**
+     * 发送get请求
+     *
+     * @param url
+     * @param param
+     * @param header
+     * @return
+     * @throws IOException
+     */
+    public static String sendGet(String url, Map<String, String> param, Map<String, String> header) {
+        String result = "";
+        BufferedReader in = null;
+        String urlNameString = url;
+        try {
+        if (param != null) {
+            urlNameString += "?";
+            urlNameString += param.entrySet()
+                    .stream()
+                    .map(entry -> entry.getKey() + "=" + entry.getValue())
+                    .collect(Collectors.joining("&"));
+        }
+
+        URL realUrl = new URL(urlNameString);
+        // 打开和URL之间的连接
+        HttpURLConnection connection;
+        if (url.startsWith("https")) {
+            trustAllHttpsCertificates();
+            HttpsURLConnection.setDefaultHostnameVerifier(hv);
+            connection = (HttpURLConnection) realUrl.openConnection();
+        } else {
+            connection = (HttpURLConnection) realUrl.openConnection();
+        }
+        //设置超时时间
+        connection.setDoInput(true);
+        connection.setRequestMethod("GET");
+        connection.setConnectTimeout(5000);
+        connection.setReadTimeout(15000);
+        // 设置通用的请求属性
+        if (header != null) {
+            Iterator<Map.Entry<String, String>> it = header.entrySet().iterator();
+            while (it.hasNext()) {
+                Map.Entry<String, String> entry = it.next();
+                System.out.println(entry.getKey() + ":::" + entry.getValue());
+                connection.setRequestProperty(entry.getKey(), entry.getValue());
+            }
+        }
+        connection.setRequestProperty("accept", "*/*");
+        connection.setRequestProperty("connection", "Keep-Alive");
+        connection.setRequestProperty("user-agent", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");
+        // 建立实际的连接
+        connection.connect();
+        // 定义 BufferedReader输入流来读取URL的响应，设置utf8防止中文乱码
+        in = new BufferedReader(new InputStreamReader(connection.getInputStream(), "utf-8"));
+        String line;
+        while ((line = in.readLine()) != null) {
+            result += line;
+        }
+        if (in != null) {
+            in.close();
+        }
+        }catch (Exception e){
+            FineLoggerFactory.getLogger().error(e,"get url error ,url is:{},error is {}",urlNameString,e.getMessage());
+        }
+        return result;
+    }
+
+    public static String doFormPost(String url, Map<String, Object> header, Map<String, Object> map, String chartset) {
+        //声明返回结果
+        String result = "";
+        UrlEncodedFormEntity entity = null;
+        HttpResponse httpResponse = null;
+        HttpClient httpClient = null;
+        try {
+            // 创建连接
+            httpClient = HttpClients.createDefault();
+            ;
+            if (url.startsWith("https")) {
+                SSLContext sslcontext = createIgnoreVerifySSL();
+                Registry<ConnectionSocketFactory> socketFactoryRegistry = RegistryBuilder.<ConnectionSocketFactory>create()
+                        .register("http", PlainConnectionSocketFactory.INSTANCE)
+                        .register("https", new SSLConnectionSocketFactory(sslcontext))
+                        .build();
+                PoolingHttpClientConnectionManager connManager = new PoolingHttpClientConnectionManager(socketFactoryRegistry);
+                HttpClients.custom().setConnectionManager(connManager);
+                httpClient = HttpClients.custom().setConnectionManager(connManager).build();
+            }
+            // 设置请求头和报文
+            HttpPost httpPost = new HttpPost(url);
+            if (header != null) {
+                header.forEach((k, v) -> {
+                    httpPost.setHeader(k, String.valueOf(v));
+                });
+            }
+            //设置参数
+            List<NameValuePair> list = new ArrayList<NameValuePair>();
+            Iterator iterator = map.entrySet().iterator();
+            while (iterator.hasNext()) {
+                Map.Entry<String, String> elem = (Map.Entry<String, String>) iterator.next();
+                list.add(new BasicNameValuePair(elem.getKey(), elem.getValue()));
+            }
+            entity = new UrlEncodedFormEntity(list, chartset == null ? "UTF-8" : chartset);
+            httpPost.setEntity(entity);
+            //执行发送，获取相应结果
+            httpResponse = httpClient.execute(httpPost);
+            if (httpResponse.getStatusLine().getStatusCode() == HttpStatus.SC_OK) {
+                result = EntityUtils.toString(httpResponse.getEntity());
+            } else {
+                FineLoggerFactory.getLogger().error("Http post form code is {},message is {}", httpResponse.getStatusLine().getStatusCode(), EntityUtils.toString(httpResponse.getEntity()));
+            }
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().error(e.getMessage(), e);
+        }
+        return result;
+
+    }
+
+    public static String sendPost(String url,Map<String,String> header, JSONObject body) {
+        PrintWriter out = null;
+        BufferedReader in = null;
+        String result = StringUtils.EMPTY;
+        String res = StringUtils.EMPTY;
+        try {
+            String urlNameString = url;
+
+            URL realUrl = new URL(urlNameString);
+            // 打开和URL之间的连接
+            HttpURLConnection conn;
+            if (url.startsWith("https")) {
+                trustAllHttpsCertificates();
+                HttpsURLConnection.setDefaultHostnameVerifier(hv);
+                conn = (HttpURLConnection) realUrl.openConnection();
+            } else {
+                conn = (HttpURLConnection) realUrl.openConnection();
+            }
+            // 设置通用的请求属性
+            conn.setRequestProperty("accept", "*/*");
+            conn.setRequestProperty("connection", "Keep-Alive");
+            conn.setRequestProperty("user-agent",
+                    "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");
+            if(body != null && !body.isEmpty()){
+                conn.setRequestProperty("Content-Type","application/json;;charset=UTF-8");
+            }
+            //conn.setRequestProperty("Content-Type", "multipart/form-data; boundary=----footfoodapplicationrequestnetwork");
+            if(header != null){
+                header.forEach((k, v) -> {
+                    conn.setRequestProperty(k, v);
+                });
+            }
+            // 发送POST请求必须设置如下两行
+            conn.setDoOutput(true);
+            conn.setDoInput(true);
+            //获取请求头
+
+            // 获取URLConnection对象对应的输出流
+            out = new PrintWriter(conn.getOutputStream());
+            StringBuffer buffer = new StringBuffer();
+            /*param.forEach((k,v)->{
+                buffer.append("------footfoodapplicationrequestnetwork\r\n");
+                buffer.append("Content-Disposition: form-data; name=\"");
+                buffer.append(k);
+                buffer.append("\"\r\n\r\n");
+                buffer.append(v);
+                buffer.append("\r\n");
+            });
+            buffer.append("------footfoodapplicationrequestnetwork--\r\n");
+            out.print(buffer.toString());*/
+            // 发送请求参数
+            if(body != null){
+                out.print(body.toString());
+            }
+            // flush输出流的缓冲
+            out.flush();
+            // 定义BufferedReader输入流来读取URL的响应
+            in = new BufferedReader(
+                    new InputStreamReader(conn.getInputStream()));
+            String line;
+            while ((line = in.readLine()) != null) {
+                result += line;
+            }
+            res = result;
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().error(e.getMessage(),e);
+        }
+        //使用finally块来关闭输出流、输入流
+        finally{
+            try{
+                if(out!=null){
+                    out.close();
+                }
+                if(in!=null){
+                    in.close();
+                }
+            }
+            catch(IOException e){
+                FineLoggerFactory.getLogger().error(e.getMessage(),e);
+            }
+        }
+        return res;
+    }
+
+    private static void trustAllHttpsCertificates() throws Exception {
+        TrustManager[] trustAllCerts = new TrustManager[1];
+        TrustManager tm = new miTM();
+        trustAllCerts[0] = tm;
+        SSLContext sc = SSLContext.getInstance("SSL","SunJSSE");
+        sc.init(null, trustAllCerts, null);
+        HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
+    }
+    
+
+    /**
+     * encode url by UTF-8
+     * @param url url before encoding
+     * @return url after encoding
+     */
+    public static String encodeUrl(String url){
+        String eurl = url;
+        try {
+            eurl = URLEncoder.encode(url,"UTF-8");
+        } catch (UnsupportedEncodingException e) {
+        }
+        return eurl;
+    }
+
+    private static class miTM implements TrustManager,
+            X509TrustManager {
+        @Override
+        public java.security.cert.X509Certificate[] getAcceptedIssuers() {
+            return null;
+        }
+
+        public boolean isServerTrusted(
+                java.security.cert.X509Certificate[] certs) {
+            return true;
+        }
+
+        public boolean isClientTrusted(
+                java.security.cert.X509Certificate[] certs) {
+            return true;
+        }
+
+        @Override
+        public void checkServerTrusted(
+                java.security.cert.X509Certificate[] certs, String authType)
+                throws CertificateException {
+            return;
+        }
+
+        @Override
+        public void checkClientTrusted(
+                java.security.cert.X509Certificate[] certs, String authType)
+                throws CertificateException {
+            return;
+        }
+    }
+
+    public static SSLContext createIgnoreVerifySSL() {
+        try {
+            SSLContext sc = SSLContext.getInstance("SSLv3");
+
+            // 实现一个X509TrustManager接口，用于绕过验证，不用修改里面的方法
+            X509TrustManager trustManager = new X509TrustManager() {
+                @Override
+                public void checkClientTrusted(
+                        java.security.cert.X509Certificate[] paramArrayOfX509Certificate,
+                        String paramString) throws CertificateException {
+                }
+
+                @Override
+                public void checkServerTrusted(
+                        java.security.cert.X509Certificate[] paramArrayOfX509Certificate,
+                        String paramString) throws CertificateException {
+                }
+
+                @Override
+                public java.security.cert.X509Certificate[] getAcceptedIssuers() {
+                    return null;
+                }
+            };
+
+            sc.init(null, new TrustManager[]{trustManager}, null);
+            return sc;
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().error(e.getMessage(), e);
+        }
+        return null;
+    }
+}
--- a/src/main/java/com/fr/plugin/xxxx/fymh/sso/LRGT.java
+++ b/src/main/java/com/fr/plugin/xxxx/fymh/sso/LRGT.java
@ -0,0 +1,27 @@
+package com.fr.plugin.xxxx.fymh.sso;
+
+import com.fr.plugin.context.PluginContext;
+import com.fr.plugin.observer.inner.AbstractPluginLifecycleMonitor;
+
+/**
+ * 配置信息初始化
+ */
+
+public class LRGT extends AbstractPluginLifecycleMonitor {
+    @Override
+    public void afterRun(PluginContext pluginContext) {
+        FeiYuSsoConfig.getInstance();
+    }
+
+    @Override
+    public void beforeStop(PluginContext pluginContext) {
+    }
+
+    @Override
+    public void beforeUninstall(PluginContext pluginContext) {
+    }
+
+    @Override
+    public void afterInstall(PluginContext var1) {
+    }
+}
--- a/src/main/java/com/fr/plugin/xxxx/fymh/sso/LogUtils.java
+++ b/src/main/java/com/fr/plugin/xxxx/fymh/sso/LogUtils.java
@ -0,0 +1,120 @@
+package com.fr.plugin.xxxx.fymh.sso;
+
+import com.fr.log.FineLoggerFactory;
+import com.fr.log.FineLoggerProvider;
+import com.fr.plugin.context.PluginContexts;
+import com.fr.stable.StringUtils;
+
+/**
+ * @author fr.open
+ * @since 2021/12/04
+ */
+public final class LogUtils {
+    private static final String DEBUG_PREFIX = "[插件调试] ";
+    private static String LOG_PREFIX = PluginConstants.PLUGIN_NAME;
+    private static final String PLUGIN_VERSION;
+
+    private static final FineLoggerProvider LOGGER = FineLoggerFactory.getLogger();
+
+    static {
+        String version = PluginContexts.currentContext().getMarker().getVersion();
+        if (StringUtils.isNotBlank(version)) {
+            PLUGIN_VERSION = "[v" + version + "] ";
+        } else {
+            PLUGIN_VERSION = "[unknown version] ";
+        }
+
+        LOG_PREFIX = LOG_PREFIX + PLUGIN_VERSION;
+    }
+
+    public static void setPrefix(String prefix) {
+        if (prefix != null) {
+            LOG_PREFIX = prefix;
+        }
+    }
+
+    public static boolean isDebugEnabled() {
+        return LOGGER.isDebugEnabled();
+    }
+
+    public static void debug(String s) {
+        LOGGER.debug(LOG_PREFIX + s);
+    }
+
+    public static void debug(String s, Object... objects) {
+        LOGGER.debug(LOG_PREFIX + s, objects);
+    }
+
+    public static void debug(String s, Throwable throwable) {
+        LOGGER.debug(LOG_PREFIX + s, throwable);
+    }
+
+    public static void debug4plugin(String s) {
+        if (FeiYuSsoConfig.getInstance().getDebugSwitch()) {
+            LOGGER.error(DEBUG_PREFIX + LOG_PREFIX + s);
+        } else {
+            LOGGER.debug(LOG_PREFIX + s);
+        }
+    }
+
+    public static void debug4plugin(String s, Object... objects) {
+        if (FeiYuSsoConfig.getInstance().getDebugSwitch()) {
+            LOGGER.error(DEBUG_PREFIX + LOG_PREFIX + s, objects);
+        } else {
+            LOGGER.debug(LOG_PREFIX + s, objects);
+        }
+    }
+
+    public static void debug4plugin(String s, Throwable throwable) {
+        if (FeiYuSsoConfig.getInstance().getDebugSwitch()) {
+            LOGGER.error(DEBUG_PREFIX + LOG_PREFIX + s, throwable);
+        } else {
+            LOGGER.debug(LOG_PREFIX + s, throwable);
+        }
+    }
+
+
+    public static boolean isInfoEnabled() {
+        return LOGGER.isInfoEnabled();
+    }
+
+    public static void info(String s) {
+        LOGGER.info(LOG_PREFIX + s);
+    }
+
+    public static void info(String s, Object... objects) {
+        LOGGER.info(LOG_PREFIX + s, objects);
+    }
+
+    public static void warn(String s) {
+        LOGGER.warn(LOG_PREFIX + s);
+    }
+
+    public static void warn(String s, Object... objects) {
+        LOGGER.warn(LOG_PREFIX + s, objects);
+    }
+
+    public static void warn(String s, Throwable throwable) {
+        LOGGER.warn(LOG_PREFIX + s, throwable);
+    }
+
+    public static void warn(Throwable throwable, String s, Object... objects) {
+        LOGGER.warn(throwable, LOG_PREFIX + s, objects);
+    }
+
+    public static void error(String s) {
+        LOGGER.error(LOG_PREFIX + s);
+    }
+
+    public static void error(String s, Object... objects) {
+        LOGGER.error(LOG_PREFIX + s, objects);
+    }
+
+    public static void error(String s, Throwable throwable) {
+        LOGGER.error(LOG_PREFIX + s, throwable);
+    }
+
+    public static void error(Throwable throwable, String s, Object... objects) {
+        LOGGER.error(throwable, LOG_PREFIX + s, objects);
+    }
+}
--- a/src/main/java/com/fr/plugin/xxxx/fymh/sso/LoginFilter.java
+++ b/src/main/java/com/fr/plugin/xxxx/fymh/sso/LoginFilter.java
@ -0,0 +1,94 @@
+package com.fr.plugin.xxxx.fymh.sso;
+
+import com.fr.base.TemplateUtils;
+import com.fr.decision.fun.impl.AbstractGlobalRequestFilterProvider;
+import com.fr.json.JSONObject;
+import com.fr.plugin.context.PluginContexts;
+import com.fr.plugin.transform.FunctionRecorder;
+import com.fr.stable.StringUtils;
+import com.fr.stable.fun.Authorize;
+import com.fr.third.org.apache.commons.codec.binary.Base64;
+
+
+import javax.servlet.FilterChain;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.nio.charset.Charset;
+import java.util.HashMap;
+import java.util.Map;
+
+/**
+ * @Author fr.open
+ * @Date 2022/1/3
+ * @Description
+ **/
+@FunctionRecorder
+@Authorize(callSignKey = PluginConstants.PLUGIN_ID)
+public class LoginFilter extends AbstractGlobalRequestFilterProvider {
+    @Override
+    public String filterName() {
+        return "xxxx";
+    }
+
+    @Override
+    public String[] urlPatterns() {
+        if (PluginContexts.currentContext().isAvailable()) {
+            return new String[]{"/decision/QPaaS"};
+        } else {
+            return new String[0];
+        }
+    }
+
+    @Override
+    public void doFilter(HttpServletRequest req, HttpServletResponse res, FilterChain filterChain) {
+        String code = req.getParameter("code");
+        if (StringUtils.isBlank(code)) {
+            CommonUtils.setError(res, "code is not null");
+            return;
+        }
+        String appid = req.getParameter("appid");
+        if (StringUtils.isBlank(appid)) {
+            CommonUtils.setError(res, "appid is not null");
+            return;
+        }
+        LogUtils.debug4plugin("get request code is {}", code);
+        LogUtils.debug4plugin("get request appid is {}", appid);
+        FeiYuSsoConfig instance = FeiYuSsoConfig.getInstance();
+        if (StringUtils.isBlank(instance.getAuthUser()) || StringUtils.isBlank(instance.getAuthPass()) || StringUtils.isBlank(instance.getInfoUrl())) {
+            CommonUtils.setError(res, "config is not null");
+            return;
+        }
+        Map<String, String> header = new HashMap<>();
+        header.put("Authorization", getHeader(instance.getAuthUser(), instance.getAuthPass()));
+        String url = String.format("%s?code=%s&appid=%s", instance.getInfoUrl(), code, appid);
+        LogUtils.debug4plugin("header is {}",header);
+        String result = HttpUtil.sendGet(url, null, header);
+        LogUtils.debug4plugin("info url res is {} by url {}", result, url);
+        JSONObject object = new JSONObject(result);
+        if (!object.has("data") || !object.getJSONObject("data").has("adUserNo")) {
+            CommonUtils.setError(res, "the adUserNo not exist form result : " + result);
+            return;
+        }
+        CommonUtils.login(object.getJSONObject("data").getString("adUserNo"), req, res);
+        try {
+            String redirect = req.getParameter("redirect");
+            LogUtils.debug4plugin("redirect url {}", redirect);
+            if(StringUtils.isBlank(redirect)){
+                String root = TemplateUtils.render("${fineServletURL}");
+                res.sendRedirect(root + "/url/mobile");
+            }else {
+                res.sendRedirect(redirect);
+            }
+        } catch (Exception e) {
+            LogUtils.error(e.getMessage(), e);
+        }
+    }
+
+    private String getHeader(String user, String pass) {
+        String auth = user + ":" + pass;
+        byte[] encodedAuth = Base64.encodeBase64(auth.getBytes(Charset.forName("US-ASCII")));
+        String authHeader = "Basic " + new String(encodedAuth);
+        return authHeader;
+    }
+
+}
--- a/src/main/java/com/fr/plugin/xxxx/fymh/sso/PluginConstants.java
+++ b/src/main/java/com/fr/plugin/xxxx/fymh/sso/PluginConstants.java
@ -0,0 +1,13 @@
+package com.fr.plugin.xxxx.fymh.sso;
+
+/**
+ * @author fr.open
+ * @since 2021/12/04
+ */
+public class PluginConstants {
+
+    public static final String PLUGIN_ID = "com.fr.plugin.xxxx.fymh.sso";
+
+    public static final String PLUGIN_NAME = "门户";
+
+}
--- a/src/main/java/com/fr/plugin/xxxx/fymh/sso/handler/HandleRequestHandlerBridge.java
+++ b/src/main/java/com/fr/plugin/xxxx/fymh/sso/handler/HandleRequestHandlerBridge.java
@ -0,0 +1,19 @@
+package com.fr.plugin.xxxx.fymh.sso.handler;
+
+import com.fr.decision.fun.HttpHandler;
+import com.fr.decision.fun.impl.AbstractHttpHandlerProvider;
+
+/**
+ * @Author fr.open
+ * @Date 2021/11/16
+ * @Description
+ **/
+public class HandleRequestHandlerBridge extends AbstractHttpHandlerProvider {
+
+    @Override
+    public HttpHandler[] registerHandlers() {
+        return new HttpHandler[]{
+                new SendHandler(),
+        };
+    }
+}
--- a/src/main/java/com/fr/plugin/xxxx/fymh/sso/handler/HandleRequestURLAliasBridge.java
+++ b/src/main/java/com/fr/plugin/xxxx/fymh/sso/handler/HandleRequestURLAliasBridge.java
@ -0,0 +1,19 @@
+package com.fr.plugin.xxxx.fymh.sso.handler;
+
+import com.fr.decision.fun.impl.AbstractURLAliasProvider;
+import com.fr.decision.webservice.url.alias.URLAlias;
+import com.fr.decision.webservice.url.alias.URLAliasFactory;
+
+/**
+ * @Author fr.open
+ * @Date 2021/11/16
+ * @Description
+ **/
+public class HandleRequestURLAliasBridge extends AbstractURLAliasProvider {
+    @Override
+    public URLAlias[] registerAlias() {
+        return new URLAlias[]{
+                URLAliasFactory.createPluginAlias("/todo", "/todo", true),
+        };
+    }
+}
--- a/src/main/java/com/fr/plugin/xxxx/fymh/sso/handler/SendHandler.java
+++ b/src/main/java/com/fr/plugin/xxxx/fymh/sso/handler/SendHandler.java
@ -0,0 +1,112 @@
+package com.fr.plugin.xxxx.fymh.sso.handler;
+
+import com.fr.decision.fun.impl.BaseHttpHandler;
+import com.fr.ftp.util.Base64;
+import com.fr.json.JSONObject;
+import com.fr.log.FineLoggerFactory;
+import com.fr.plugin.xxxx.fymh.sso.FeiYuSsoConfig;
+import com.fr.plugin.xxxx.fymh.sso.HttpUtil;
+import com.fr.plugin.xxxx.fymh.sso.LogUtils;
+import com.fr.stable.StringUtils;
+import com.fr.third.springframework.web.bind.annotation.RequestMethod;
+import com.fr.web.utils.WebUtils;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.BufferedReader;
+import java.io.PrintWriter;
+import java.nio.charset.Charset;
+import java.util.HashMap;
+import java.util.Map;
+
+/**
+ * @Author fr.open
+ * @Date 2021/11/16
+ * @Description
+ **/
+public class SendHandler extends BaseHttpHandler {
+    @Override
+    public RequestMethod getMethod() {
+        return RequestMethod.POST;
+    }
+
+    @Override
+    public String getPath() {
+        return "/todo";
+    }
+
+    @Override
+    public boolean isPublic() {
+        return true;
+    }
+
+    @Override
+    public void handle(HttpServletRequest req, HttpServletResponse res) throws Exception {
+        String clientId = FeiYuSsoConfig.getInstance().getClientId();
+        String clientSecret = FeiYuSsoConfig.getInstance().getClientSecret();
+        String tokenUrl = FeiYuSsoConfig.getInstance().getTokenUrl();
+        String todoUrl = FeiYuSsoConfig.getInstance().getTodoUrl();
+        String user = FeiYuSsoConfig.getInstance().getAuthUser();
+        String pass = FeiYuSsoConfig.getInstance().getAuthPass();
+        if (StringUtils.isBlank(clientId) || StringUtils.isBlank(clientSecret)
+                || StringUtils.isBlank(tokenUrl) || StringUtils.isBlank(todoUrl)) {
+            setError(res, "config is not null");
+            return;
+        }
+        JSONObject object = getBody(req);
+        if (object == null) {
+            setError(res, "body is not null");
+            return;
+        }
+        Map<String, String> header = new HashMap<>();
+        header.put("Authorization", getHeader(user, pass));
+        String tokenSend = String.format("%s?clientId=%s&clientSecret=%s", tokenUrl, clientId, clientSecret);
+        LogUtils.debug4plugin("header is {}",header);
+        String tokenRes = HttpUtil.sendGet(tokenSend, null, header);
+        LogUtils.debug4plugin("token res is {} by url {}", tokenRes, tokenSend);
+        if (StringUtils.isBlank(tokenRes)) {
+            setError(res, "token res is null");
+            return;
+        }
+        JSONObject tokenJSON = new JSONObject(tokenRes);
+        header.put("token", tokenJSON.getJSONObject("data").getString("token"));
+        String todoRes = HttpUtil.sendPost(todoUrl, header, object);
+        LogUtils.debug4plugin("todo url :{} res: {} by header:{}", todoUrl, todoRes, header);
+        PrintWriter writer = WebUtils.createPrintWriter(res);
+        writer.print(todoRes);
+        writer.flush();
+        writer.close();
+    }
+
+    public JSONObject getBody(HttpServletRequest req) {
+        try {
+            BufferedReader br = req.getReader();
+            String str = "";
+            String listString = "";
+            while ((str = br.readLine()) != null) {
+                listString += str;
+            }
+            JSONObject jsonObject = new JSONObject(listString);
+            return jsonObject;
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().error(e.getMessage(), e);
+        }
+        return null;
+    }
+
+    private void setError(HttpServletResponse res, String mess) {
+        try {
+            WebUtils.printAsJSON(res, JSONObject.create().put("error", mess));
+        } catch (Exception ex) {
+            LogUtils.error(ex.getMessage(), ex);
+        }
+    }
+
+    private String getHeader(String user, String pass) {
+        String auth = user + ":" + pass;
+        byte[] encodedAuth = Base64.encodeBase64(auth.getBytes(Charset.forName("US-ASCII")));
+        String authHeader = "Basic " + new String(encodedAuth);
+        return authHeader;
+    }
+
+}