open

1 year ago · 59dbcab65f
22 changed files with 1805 additions and 0 deletions
--- a/README.md
+++ b/README.md
@ -0,0 +1,6 @@
+# open-JSD-10203
+ 
+JSD-10203 oauth2单点登录\
+免责说明：该源码为第三方爱好者提供，不保证源码和方案的可靠性，也不提供任何形式的源码教学指导和协助！\
+仅作为开发者学习参考使用！禁止用于任何商业用途！\
+为保护开发者隐私，开发者信息已隐去！若原开发者希望公开自己的信息，可联系【pioneer】处理。
--- a/plugin.xml
+++ b/plugin.xml
@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?><plugin>
+    <id>com.fr.plugin.xx.zyjn.sso</id>
+    <name><![CDATA[sso_EK]]></name>
+    <active>yes</active>
+    <version>1.6</version>
+    <env-version>10.0~11.0</env-version>
+    <jartime>2018-07-31</jartime>
+    <vendor>fr.open</vendor>
+    <description><![CDATA[jds-10203sso_EK]]></description>
+    <change-notes><![CDATA[
+        [2022-07-18]【1.0】初始化插件。<br/>
+        [2022-10-13]【1.1】url encode 移除多余配置。<br/>
+        [2022-10-14]【1.2】登出+拦截配置。<br/>
+        [2022-10-27]【1.3】新增组织同步、接口鉴权、ssoToken。<br/>
+        [2022-11-08]【1.3】token刷新。<br/>
+        [2022-11-25]【1.4】token刷新+参数过滤。<br/>
+        [2022-11-25]【1.5】token刷新+参数过滤。<br/>
+        [2022-11-25]【1.6】token刷新+参数过滤。<br/>
+    ]]></change-notes>
+    <function-recorder class="com.fr.plugin.xx.zyjn.sso.OAuth"/>
+    <extra-decision>
+        <HttpHandlerProvider class="com.fr.plugin.xx.zyjn.handler.HRGT"/>
+        <URLAliasProvider class="com.fr.plugin.xx.zyjn.handler.URGT"/>
+        <GlobalRequestFilterProvider class="com.fr.plugin.xx.zyjn.sso.OAuth"/>
+        <LogInOutEventProvider class="com.fr.plugin.xx.zyjn.sso.Logout"/>
+    </extra-decision>
+    <extra-core>
+        <DBAccessProvider class="com.fr.plugin.xx.zyjn.SyncDBAccessProvider"/>
+    </extra-core>
+    <lifecycle-monitor class="com.fr.plugin.xx.zyjn.rgt.PLMRGT"/>
+
+</plugin>
--- a/src/main/java/com/fr/plugin/xx/zyjn/PluginConstants.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/PluginConstants.java
@ -0,0 +1,13 @@
+package com.fr.plugin.xx.zyjn;
+
+/**
+ * @author xx
+ * @since 2021/12/04
+ */
+public class PluginConstants {
+
+    public static final String PLUGIN_ID = "com.fr.plugin.xx.zyjn.sso";
+
+    public static final String PLUGIN_NAME = "sso";
+
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/SyncDBAccessProvider.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/SyncDBAccessProvider.java
@ -0,0 +1,57 @@
+package com.fr.plugin.xx.zyjn;
+
+import com.fr.db.fun.impl.AbstractDBAccessProvider;
+import com.fr.plugin.xx.zyjn.dao.SyncOrgDao;
+import com.fr.plugin.xx.zyjn.dao.SyncUserDao;
+import com.fr.plugin.xx.zyjn.entity.SyncOrgEntity;
+import com.fr.plugin.xx.zyjn.entity.SyncUserEntity;
+import com.fr.stable.db.accessor.DBAccessor;
+import com.fr.stable.db.dao.BaseDAO;
+import com.fr.stable.db.dao.DAOProvider;
+
+/**
+ * @Author xx
+ * @Date 2022/10/12
+ * @Description
+ **/
+public class SyncDBAccessProvider extends AbstractDBAccessProvider {
+
+    private static DBAccessor dbAccessor = null;
+
+    public static DBAccessor getDbAccessor() {
+        return dbAccessor;
+    }
+
+    @Override
+    public DAOProvider<?>[] registerDAO() {
+        return new DAOProvider[]{
+                new DAOProvider<SyncUserEntity>() {
+                    @Override
+                    public Class<SyncUserEntity> getEntityClass() {
+                        return SyncUserEntity.class;
+                    }
+
+                    @Override
+                    public Class<? extends BaseDAO<SyncUserEntity>> getDAOClass() {
+                        return SyncUserDao.class;
+                    }
+                },
+                new DAOProvider<SyncOrgEntity>() {
+                    @Override
+                    public Class<SyncOrgEntity> getEntityClass() {
+                        return SyncOrgEntity.class;
+                    }
+
+                    @Override
+                    public Class<? extends BaseDAO<SyncOrgEntity>> getDAOClass() {
+                        return SyncOrgDao.class;
+                    }
+                }
+        };
+    }
+
+    @Override
+    public void onDBAvailable(DBAccessor dbAccessor) {
+        SyncDBAccessProvider.dbAccessor = dbAccessor;
+    }
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/conf/GxkgSsoConfig.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/conf/GxkgSsoConfig.java
@ -0,0 +1,163 @@
+package com.fr.plugin.xx.zyjn.conf;
+
+import com.fr.config.*;
+import com.fr.config.holder.Conf;
+import com.fr.config.holder.factory.Holders;
+import com.fr.intelli.record.Focus;
+import com.fr.intelli.record.Original;
+import com.fr.record.analyzer.EnableMetrics;
+import com.fr.stable.StringUtils;
+
+/**
+ * @author xx
+ * @date 2021/11/04
+ */
+@Visualization(category = "sso单点")
+@EnableMetrics
+public class GxkgSsoConfig extends DefaultConfiguration {
+
+    private static volatile GxkgSsoConfig config = null;
+
+    @Focus(id="com.fr.plugin.sso.sykg.extra", text = "SYKG-SSO配置", source = Original.PLUGIN)
+    public static GxkgSsoConfig getInstance() {
+        if (config == null) {
+            config = ConfigContext.getConfigInstance(GxkgSsoConfig.class);
+        }
+        return config;
+    }
+
+    @Identifier(value = "debugSwitch", name = "日志调试模式", description = "日志调试模式", status = Status.SHOW)
+    private Conf<Boolean> debugSwitch = Holders.simple(true);
+
+    public Boolean getdebugSwitch() { return debugSwitch.get(); }
+
+    public void setdebugSwitch(Boolean debugSwitch) { this.debugSwitch.set(debugSwitch); }
+
+    @Identifier(value = "redirect", name = "帆软服务回跳地址", description = "帆软服务回跳地址，http://ip:port/webroot/decision", status = Status.SHOW)
+    private Conf<String> redirect = Holders.simple(StringUtils.EMPTY);
+
+    public String getRedirect() {
+        return redirect.get();
+    }
+
+    public void setRedirect(String redirect) {
+        this.redirect.set(redirect);
+    }
+
+    @Identifier(value = "host", name = "单点Oauth2地址", description = "单点Oauth2地址，http://ip:port", status = Status.SHOW)
+    private Conf<String> host = Holders.simple(StringUtils.EMPTY);
+
+    public String getHost() {
+        return host.get();
+    }
+
+    public void setHost(String host) {
+        this.host.set(host);
+    }
+
+
+    private Conf<String> syncHost = Holders.simple(StringUtils.EMPTY);
+
+    public String getSyncHost() {
+        return syncHost.get();
+    }
+
+    public void setSyncHost(String syncHost) {
+        this.syncHost.set(syncHost);
+    }
+
+    @Identifier(value = "clientId", name = "clientId", description = "clientId", status = Status.SHOW)
+    private Conf<String> clientId = Holders.simple(StringUtils.EMPTY);
+
+    public String getClientId() {
+        return clientId.get();
+    }
+
+    public void setClientId(String clientId) {
+        this.clientId.set(clientId);
+    }
+
+    @Identifier(value = "clientSecret", name = "clientSecret", description = "clientSecret", status = Status.SHOW)
+    private Conf<String> clientSecret = Holders.simple(StringUtils.EMPTY);
+
+    public String getClientSecret() {
+        return clientSecret.get();
+    }
+
+    public void setClientSecret(String clientSecret) {
+        this.clientSecret.set(clientSecret);
+    }
+
+    @Identifier(value = "logoutUrl", name = "登出调用地址", description = "登出调用地址", status = Status.SHOW)
+    private Conf<String> logoutUrl = Holders.simple(StringUtils.EMPTY);
+    public String getLogoutUrl() {
+        return logoutUrl.get();
+    }
+
+    public void setLogoutUrl(String logoutUrl) {
+        this.logoutUrl.set(logoutUrl);
+    }
+
+    @Identifier(value = "refreshToken", name = "刷新token开关", description = "刷新token开关", status = Status.SHOW)
+    private Conf<Boolean> refreshToken = Holders.simple(false);
+
+    public Boolean getRefreshToken() {
+        return refreshToken.get();
+    }
+
+    public void setRefreshToken(Boolean refreshToken) {
+        this.refreshToken.set(refreshToken);
+    }
+
+
+    private Conf<String> cron = Holders.simple("0 0/1 * * * ? *");
+
+    public String getCron() {
+        return cron.get();
+    }
+
+    public void setCron(String cron) {
+        this.cron.set(cron);
+    }
+
+   
+    private Conf<String> syncUser = Holders.simple(StringUtils.EMPTY);
+
+    public String getSyncUser() {
+        return syncUser.get();
+    }
+
+    public void setSyncUser(String syncUser) {
+        this.syncUser.set(syncUser);
+    }
+
+    private Conf<String> syncPass = Holders.simple(StringUtils.EMPTY);
+
+    public String getSyncPass() {
+        return syncPass.get();
+    }
+
+    public void setSyncPass(String syncPass) {
+        this.syncPass.set(syncPass);
+    }
+
+  
+    private Conf<String> appSn = Holders.simple(StringUtils.EMPTY);
+
+    public String getAppSn() {
+        return appSn.get();
+    }
+
+    public void setAppSn(String appSn) {
+        this.appSn.set(appSn);
+    }
+
+    @Override
+    public Object clone() throws CloneNotSupportedException {
+        GxkgSsoConfig cloned = (GxkgSsoConfig) super.clone();
+        cloned.debugSwitch = (Conf<Boolean>) debugSwitch.clone();
+        return cloned;
+    }
+
+
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/dao/SyncOrgDao.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/dao/SyncOrgDao.java
@ -0,0 +1,21 @@
+package com.fr.plugin.xx.zyjn.dao;
+
+import com.fr.plugin.xx.zyjn.entity.SyncOrgEntity;
+import com.fr.stable.db.dao.BaseDAO;
+import com.fr.stable.db.session.DAOSession;
+
+/**
+ * @Author xx
+ * @Date 2022/10/12
+ * @Description
+ **/
+public class SyncOrgDao extends BaseDAO<SyncOrgEntity> {
+    public SyncOrgDao(DAOSession daoSession) {
+        super(daoSession);
+    }
+
+    @Override
+    protected Class<SyncOrgEntity> getEntityClass() {
+        return SyncOrgEntity.class;
+    }
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/dao/SyncService.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/dao/SyncService.java
@ -0,0 +1,37 @@
+package com.fr.plugin.xx.zyjn.dao;
+
+import com.fr.plugin.xx.zyjn.SyncDBAccessProvider;
+import com.fr.plugin.xx.zyjn.entity.SyncOrgEntity;
+import com.fr.plugin.xx.zyjn.entity.SyncUserEntity;
+import com.fr.plugin.xx.zyjn.utils.LogUtils;
+import com.fr.stable.db.action.DBAction;
+
+/**
+ * @Author xx
+ * @Date 2022/10/12
+ * @Description
+ **/
+public class SyncService {
+
+    public static void saveUser(SyncUserEntity entity) {
+        try {
+            SyncDBAccessProvider.getDbAccessor().runDMLAction((DBAction) daoContext -> {
+                daoContext.getDAO(SyncUserDao.class).addOrUpdate(entity);
+                return null;
+            });
+        } catch (Exception e) {
+            LogUtils.error(e.getMessage(), e);
+        }
+    }
+
+    public static void saveOrg(SyncOrgEntity entity) {
+        try {
+            SyncDBAccessProvider.getDbAccessor().runDMLAction((DBAction) daoContext -> {
+                daoContext.getDAO(SyncOrgDao.class).addOrUpdate(entity);
+                return null;
+            });
+        } catch (Exception e) {
+            LogUtils.error(e.getMessage(), e);
+        }
+    }
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/dao/SyncUserDao.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/dao/SyncUserDao.java
@ -0,0 +1,21 @@
+package com.fr.plugin.xx.zyjn.dao;
+
+import com.fr.plugin.xx.zyjn.entity.SyncUserEntity;
+import com.fr.stable.db.dao.BaseDAO;
+import com.fr.stable.db.session.DAOSession;
+
+/**
+ * @Author xx
+ * @Date 2022/10/12
+ * @Description
+ **/
+public class SyncUserDao extends BaseDAO<SyncUserEntity> {
+    public SyncUserDao(DAOSession daoSession) {
+        super(daoSession);
+    }
+
+    @Override
+    protected Class<SyncUserEntity> getEntityClass() {
+        return SyncUserEntity.class;
+    }
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/entity/SyncOrgEntity.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/entity/SyncOrgEntity.java
@ -0,0 +1,85 @@
+package com.fr.plugin.xx.zyjn.entity;
+
+import com.fr.json.JSONObject;
+import com.fr.stable.db.entity.BaseEntity;
+import com.fr.third.javax.persistence.Column;
+import com.fr.third.javax.persistence.Entity;
+import com.fr.third.javax.persistence.Table;
+
+/**
+ * @Author xx
+ * @Date 2022/10/12
+ * @Description
+ **/
+@Entity
+@Table(name = "plugin_fine_sync_org")
+public class SyncOrgEntity extends BaseEntity {
+
+    @Column(name = "name")
+    private String name;
+
+    @Column(name = "parent_sn")
+    private String parentSn;
+
+    @Column(name = "status")
+    private Boolean status;
+
+    @Column(name = "org_code")
+    private String orgCode;
+
+    @Column(name = "sort_num")
+    private String sortNum;
+
+    public SyncOrgEntity() {
+
+    }
+
+    public SyncOrgEntity(JSONObject object) {
+        this.setId(object.getString("sn"));
+        this.setName(object.getString("name"));
+        this.setParentSn(object.getString("parentSn"));
+        this.setStatus(object.getInt("status") == 1);
+        this.setOrgCode(object.getString("orgCode"));
+        this.setSortNum(object.getString("sortNum"));
+    }
+
+    public String getName() {
+        return name;
+    }
+
+    public void setName(String name) {
+        this.name = name;
+    }
+
+    public String getParentSn() {
+        return parentSn;
+    }
+
+    public void setParentSn(String parentSn) {
+        this.parentSn = parentSn;
+    }
+
+    public Boolean getStatus() {
+        return status;
+    }
+
+    public void setStatus(Boolean status) {
+        this.status = status;
+    }
+
+    public String getOrgCode() {
+        return orgCode;
+    }
+
+    public void setOrgCode(String orgCode) {
+        this.orgCode = orgCode;
+    }
+
+    public String getSortNum() {
+        return sortNum;
+    }
+
+    public void setSortNum(String sortNum) {
+        this.sortNum = sortNum;
+    }
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/entity/SyncUserEntity.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/entity/SyncUserEntity.java
@ -0,0 +1,153 @@
+package com.fr.plugin.xx.zyjn.entity;
+
+import com.fr.json.JSONObject;
+import com.fr.stable.StringUtils;
+import com.fr.stable.db.entity.BaseEntity;
+import com.fr.third.javax.persistence.Column;
+import com.fr.third.javax.persistence.Entity;
+import com.fr.third.javax.persistence.Table;
+
+/**
+ * @Author xx
+ * @Date 2022/10/12
+ * @Description
+ **/
+@Entity
+@Table(name = "plugin_fine_sync_user")
+public class SyncUserEntity extends BaseEntity {
+
+    @Column(name = "orgSn")
+    private String orgSn;
+
+    @Column(name = "name")
+    private String name;
+
+    @Column(name = "sex")
+    private Boolean sex;
+
+    @Column(name = "status")
+    private Boolean status;
+
+    @Column(name = "telephone")
+    private String telephone;
+
+    @Column(name = "email")
+    private String email;
+
+    @Column(name = "position")
+    private String position;
+
+    @Column(name = "joinDate")
+    private String joinDate;
+
+    @Column(name = "loginName")
+    private String loginName;
+
+    @Column(name = "password")
+    private String password;
+
+    public SyncUserEntity() {
+
+    }
+
+    public SyncUserEntity(JSONObject object) {
+        this.setId(object.getString("sn"));
+        Boolean male = null;
+        if (object.has("sex") && StringUtils.isNotBlank(object.getString("sex"))) {
+            if (object.getInt("sex") != 0) {
+                male = object.getInt("sex") == 1 ? true : false;
+            }
+        }
+        this.setSex(male);
+        this.setLoginName(object.getString("loginName"));
+        this.setName(object.getString("name"));
+        this.setEmail(object.getString("email"));
+        this.setTelephone(object.getString("telephone"));
+        this.setStatus(object.getInt("status") == 1);
+        this.setOrgSn(object.getString("orgSn"));
+        this.setPosition(object.getString("position"));
+        this.setJoinDate(object.getString("joinDate"));
+        this.setPassword(object.getString("password"));
+    }
+
+
+    public String getOrgSn() {
+        return orgSn;
+    }
+
+    public void setOrgSn(String orgSn) {
+        this.orgSn = orgSn;
+    }
+
+    public String getName() {
+        return name;
+    }
+
+    public void setName(String name) {
+        this.name = name;
+    }
+
+    public Boolean getSex() {
+        return sex;
+    }
+
+    public void setSex(Boolean sex) {
+        this.sex = sex;
+    }
+
+    public Boolean getStatus() {
+        return status;
+    }
+
+    public void setStatus(Boolean status) {
+        this.status = status;
+    }
+
+    public String getTelephone() {
+        return telephone;
+    }
+
+    public void setTelephone(String telephone) {
+        this.telephone = telephone;
+    }
+
+    public String getEmail() {
+        return email;
+    }
+
+    public void setEmail(String email) {
+        this.email = email;
+    }
+
+    public String getPosition() {
+        return position;
+    }
+
+    public void setPosition(String position) {
+        this.position = position;
+    }
+
+    public String getJoinDate() {
+        return joinDate;
+    }
+
+    public void setJoinDate(String joinDate) {
+        this.joinDate = joinDate;
+    }
+
+    public String getLoginName() {
+        return loginName;
+    }
+
+    public void setLoginName(String loginName) {
+        this.loginName = loginName;
+    }
+
+    public String getPassword() {
+        return password;
+    }
+
+    public void setPassword(String password) {
+        this.password = password;
+    }
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/handler/HRGT.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/handler/HRGT.java
@ -0,0 +1,21 @@
+package com.fr.plugin.xx.zyjn.handler;
+
+import com.fr.decision.fun.HttpHandler;
+import com.fr.decision.fun.impl.AbstractHttpHandlerProvider;
+import com.fr.plugin.xx.zyjn.handler.action.SyncOrgHandler;
+import com.fr.plugin.xx.zyjn.handler.action.SyncUserHandler;
+
+/**
+ * @Author xx
+ * @Date 2021/11/27
+ * @Description
+ **/
+public class HRGT extends AbstractHttpHandlerProvider {
+    @Override
+    public HttpHandler[] registerHandlers() {
+        return new HttpHandler[]{
+                new SyncUserHandler(),
+                new SyncOrgHandler(),
+        };
+    }
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/handler/URGT.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/handler/URGT.java
@ -0,0 +1,20 @@
+package com.fr.plugin.xx.zyjn.handler;
+
+import com.fr.decision.fun.impl.AbstractURLAliasProvider;
+import com.fr.decision.webservice.url.alias.URLAlias;
+import com.fr.decision.webservice.url.alias.URLAliasFactory;
+
+/**
+ * @Author xx
+ * @Date 2021/11/27
+ * @Description
+ **/
+public class URGT extends AbstractURLAliasProvider {
+    @Override
+    public URLAlias[] registerAlias() {
+        return new URLAlias[]{
+                URLAliasFactory.createPluginAlias("/sync/user", "/sync/user", true),
+                URLAliasFactory.createPluginAlias("/sync/org", "/sync/org", true),
+        };
+    }
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/handler/action/BaseHandler.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/handler/action/BaseHandler.java
@ -0,0 +1,65 @@
+package com.fr.plugin.xx.zyjn.handler.action;
+
+import com.fr.decision.fun.impl.BaseHttpHandler;
+import com.fr.general.IOUtils;
+import com.fr.json.JSONObject;
+import com.fr.plugin.xx.zyjn.utils.LogUtils;
+import com.fr.stable.StringUtils;
+import com.fr.third.org.apache.commons.codec.digest.DigestUtils;
+import com.fr.web.utils.WebUtils;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.nio.charset.StandardCharsets;
+import java.text.SimpleDateFormat;
+import java.util.Date;
+
+/**
+ * @Author xx
+ * @Date 2022/10/27
+ * @Description
+ **/
+public abstract class BaseHandler extends BaseHttpHandler {
+
+    private final static String PREFIX = "jynsh";
+
+    @Override
+    public void handle(HttpServletRequest req, HttpServletResponse res) throws Exception {
+        String tokenId = req.getHeader("tokenId");
+        String format = new SimpleDateFormat("yyyy-MM-dd").format(new Date());
+        if (!StringUtils.equals(DigestUtils.md5Hex((PREFIX + format).getBytes(StandardCharsets.UTF_8)).toLowerCase(), tokenId)) {
+            setError(res, "报文认证不通过");
+            return;
+        }
+        String body = IOUtils.inputStream2String(req.getInputStream());
+        if (StringUtils.isBlank(body)) {
+            setError(res, "请求内容不能为空");
+            return;
+        }
+        JSONObject object = null;
+        try {
+            object = new JSONObject(body);
+        } catch (Exception e) {
+            setError(res, "报文格式非json");
+        }
+        if (!object.has("sn")) {
+            setError(res, "请求sn不能为空");
+            return;
+        }
+        LogUtils.debug4plugin("sync url is {} body is {}", req.getRequestURI(), body);
+        sync(res, object);
+
+
+    }
+
+    abstract void sync(HttpServletResponse res, JSONObject entity) throws Exception;
+
+    protected void setError(HttpServletResponse res, String mess) {
+        try {
+            JSONObject error = JSONObject.create().put("code", 1).put("msg", mess);
+            WebUtils.printAsJSON(res, error);
+        } catch (Exception e) {
+            LogUtils.error(e.getMessage(), e);
+        }
+    }
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/handler/action/SyncOrgHandler.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/handler/action/SyncOrgHandler.java
@ -0,0 +1,39 @@
+package com.fr.plugin.xx.zyjn.handler.action;
+
+import com.fr.json.JSONObject;
+import com.fr.plugin.xx.zyjn.dao.SyncService;
+import com.fr.plugin.xx.zyjn.entity.SyncOrgEntity;
+import com.fr.third.springframework.web.bind.annotation.RequestMethod;
+import com.fr.web.utils.WebUtils;
+
+import javax.servlet.http.HttpServletResponse;
+
+/**
+ * @Author xx
+ * @Date 2021/11/27
+ * @Description
+ **/
+public class SyncOrgHandler extends BaseHandler {
+
+    @Override
+    public RequestMethod getMethod() {
+        return RequestMethod.POST;
+    }
+
+    @Override
+    public String getPath() {
+        return "/sync/org";
+    }
+
+    @Override
+    public boolean isPublic() {
+        return true;
+    }
+
+
+    @Override
+    void sync(HttpServletResponse res, JSONObject entity) throws Exception {
+        SyncService.saveOrg(new SyncOrgEntity(entity));
+        WebUtils.printAsJSON(res, new JSONObject("{\"code\":0,\"msg\":\"成功\"}"));
+    }
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/handler/action/SyncUserHandler.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/handler/action/SyncUserHandler.java
@ -0,0 +1,55 @@
+package com.fr.plugin.xx.zyjn.handler.action;
+
+import com.fr.json.JSONObject;
+import com.fr.plugin.xx.zyjn.dao.SyncService;
+import com.fr.plugin.xx.zyjn.entity.SyncUserEntity;
+import com.fr.third.springframework.web.bind.annotation.RequestMethod;
+import com.fr.web.utils.WebUtils;
+
+import javax.servlet.http.HttpServletResponse;
+
+/**
+ * @Author xx
+ * @Date 2021/11/27
+ * @Description
+ **/
+public class SyncUserHandler extends BaseHandler {
+
+    /*
+    *
+基本字段-员工工号	sn	String		no	no	员工工号
+基本字段-组织编号	orgSn	String		no	no	所属组织编号
+基本字段-姓名	name	String		no	no	用户名称
+基本字段-性别	sex	int		yes	no	性别，1-男，2-女，0-未知
+基本字段-状态	status	int		no	no	1-正常，2-离职
+基本字段-手机号	telephone	String		yes	no	手机号
+基本字段-邮箱	email	String		yes	no	邮箱
+基本字段-职务	position	String		yes	no	职务中文
+基本字段-入职日期	joinDate	String		yes	no	入职日期,例2020-07-07 00:00:00
+基本字段-登录名	loginName	String		yes	no
+基本字段-密码	password	String		yes	no	MD5 32位小写加密后的密码
+    * */
+
+    @Override
+    public RequestMethod getMethod() {
+        return RequestMethod.POST;
+    }
+
+    @Override
+    public String getPath() {
+        return "/sync/user";
+    }
+
+    @Override
+    public boolean isPublic() {
+        return true;
+    }
+
+
+    @Override
+    void sync(HttpServletResponse res, JSONObject body) throws Exception {
+        SyncUserEntity entity = new SyncUserEntity(body);
+        SyncService.saveUser(entity);
+        WebUtils.printAsJSON(res, new JSONObject("{\"code\":0,\"msg\":\"成功\"}"));
+    }
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/rgt/PLMRGT.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/rgt/PLMRGT.java
@ -0,0 +1,20 @@
+package com.fr.plugin.xx.zyjn.rgt;
+
+import com.fr.plugin.context.PluginContext;
+import com.fr.plugin.xx.zyjn.conf.GxkgSsoConfig;
+import com.fr.plugin.observer.inner.AbstractPluginLifecycleMonitor;
+
+/**
+ * @author xx
+ * @date 2021/11/04
+ */
+public class PLMRGT extends AbstractPluginLifecycleMonitor {
+    @Override
+    public void afterRun(PluginContext pluginContext) {
+        GxkgSsoConfig.getInstance();
+    }
+
+    @Override
+    public void beforeStop(PluginContext pluginContext) {
+    }
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/schedule/SyncUserSchedule.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/schedule/SyncUserSchedule.java
@ -0,0 +1,85 @@
+package com.fr.plugin.xx.zyjn.schedule;
+
+import com.fr.cluster.core.ClusterNode;
+import com.fr.decision.authority.AuthorityContext;
+import com.fr.decision.authority.base.constant.type.operation.ManualOperationType;
+import com.fr.decision.authority.data.User;
+import com.fr.json.JSONArray;
+import com.fr.json.JSONObject;
+import com.fr.plugin.xx.zyjn.conf.GxkgSsoConfig;
+import com.fr.plugin.xx.zyjn.utils.HttpUtil;
+import com.fr.plugin.xx.zyjn.utils.LogUtils;
+import com.fr.scheduler.job.FineScheduleJob;
+import com.fr.stable.StringUtils;
+import com.fr.third.v2.org.quartz.JobExecutionContext;
+
+import java.util.HashMap;
+import java.util.Map;
+
+/**
+ * @Author xx
+ * @Date 2022/7/18
+ * @Description
+ **/
+public class SyncUserSchedule extends FineScheduleJob {
+
+    private static final String TOKEN_URL = "%s/api/sys/getToken";
+
+    private static final String USER_URL = "%s/api/rest/data/acct";
+
+
+    @Override
+    public void run(JobExecutionContext jobExecutionContext, ClusterNode clusterNode) throws Exception {
+        GxkgSsoConfig config = GxkgSsoConfig.getInstance();
+        if (StringUtils.isBlank(config.getSyncUser()) || StringUtils.isBlank(config.getSyncPass())) {
+            LogUtils.error("同步授权账户信息为空");
+            return;
+        }
+        JSONObject tokenBody = JSONObject.create().put("username", config.getSyncUser()).put("password", config.getSyncPass());
+        String tokenUrl = String.format(TOKEN_URL, config.getSyncHost());
+        LogUtils.debug4plugin("token url is {}", tokenUrl);
+        String tokenRes = HttpUtil.sendPost(tokenUrl, null, tokenBody);
+        LogUtils.debug4plugin("token res is {}", tokenRes);
+        if (StringUtils.isBlank(tokenRes)) {
+            LogUtils.error("token 返回空");
+            return;
+        }
+        JSONObject tokenObject = new JSONObject(tokenRes);
+        String token = tokenObject.getString("msg");
+        if (StringUtils.isBlank(token)) {
+            LogUtils.error("msg 返回空");
+            return;
+        }
+        String userUrl = String.format(USER_URL, config.getSyncHost());
+        Map<String, String> header = new HashMap();
+        header.put("uim-login-user-id", token);
+        LogUtils.debug4plugin("user url is {}", userUrl);
+        String userRes = HttpUtil.sendPost(userUrl, header, JSONObject.create().put("appSn", config.getAppSn()));
+        LogUtils.debug4plugin("user res is {}", userRes);
+        JSONObject object = new JSONObject(userRes);
+        if (object.containsKey("data")) {
+            JSONArray array = object.getJSONArray("data");
+            LogUtils.debug4plugin("get sync user size is {}", array.size());
+            int created = 0, updated = 0;
+            for (int i = 0; i < array.size(); i++) {
+                JSONObject body = array.getJSONObject(i);
+                String id = body.getString("id");
+                User user = AuthorityContext.getInstance().getUserController().getById(id);
+                if (user == null) {
+                    user = new User().id(id).userName(body.getString("loginName"))
+                            .realName(body.getString("userName")).creationType(ManualOperationType.KEY)
+                            .lastOperationType(ManualOperationType.KEY).enable(body.getInt("status") == 1);
+                    AuthorityContext.getInstance().getUserController().add(user);
+                    created++;
+                } else {
+                    user.id(id).userName(body.getString("loginName"))
+                            .realName(body.getString("userName")).creationType(ManualOperationType.KEY)
+                            .lastOperationType(ManualOperationType.KEY).enable(body.getInt("status") == 1);
+                    AuthorityContext.getInstance().getUserController().update(user);
+                    updated++;
+                }
+            }
+            LogUtils.debug4plugin("sync user create size is {} updated size is {}", created, updated);
+        }
+    }
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/sso/Logout.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/sso/Logout.java
@ -0,0 +1,38 @@
+package com.fr.plugin.xx.zyjn.sso;
+
+import com.fr.decision.fun.impl.AbstractLogInOutEventProvider;
+import com.fr.decision.webservice.login.LogInOutResultInfo;
+import com.fr.plugin.xx.zyjn.conf.GxkgSsoConfig;
+import com.fr.plugin.xx.zyjn.utils.LogUtils;
+import com.fr.plugin.transform.FunctionRecorder;
+import com.fr.stable.StringUtils;
+
+import java.io.UnsupportedEncodingException;
+import java.net.URLEncoder;
+
+/**
+ * @author xx
+ * @date 2021/11/04
+ */
+@FunctionRecorder
+public class Logout extends AbstractLogInOutEventProvider {
+
+    @Override
+    public void loginAction(LogInOutResultInfo result) {
+    }
+
+    @Override
+    public String logoutAction(LogInOutResultInfo result) {
+        GxkgSsoConfig config = GxkgSsoConfig.getInstance();
+        if (StringUtils.isBlank(config.getHost())) {
+            return StringUtils.EMPTY;
+        }
+        String temp = "%s?redirectToUrl=%s";
+        try {
+            return String.format(temp, config.getLogoutUrl(), URLEncoder.encode(config.getRedirect(),"UTF-8"));
+        } catch (UnsupportedEncodingException e) {
+            LogUtils.error(e.getMessage(),e);
+        }
+        return StringUtils.EMPTY;
+    }
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/sso/OAuth.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/sso/OAuth.java
@ -0,0 +1,231 @@
+package com.fr.plugin.xx.zyjn.sso;
+
+import com.fr.decision.fun.impl.AbstractGlobalRequestFilterProvider;
+import com.fr.json.JSONObject;
+import com.fr.log.FineLoggerFactory;
+import com.fr.plugin.context.PluginContexts;
+import com.fr.plugin.xx.zyjn.PluginConstants;
+import com.fr.plugin.xx.zyjn.conf.GxkgSsoConfig;
+import com.fr.plugin.xx.zyjn.schedule.SyncUserSchedule;
+import com.fr.plugin.xx.zyjn.utils.CommonUtils;
+import com.fr.plugin.xx.zyjn.utils.HttpUtil;
+import com.fr.plugin.xx.zyjn.utils.LogUtils;
+import com.fr.plugin.transform.FunctionRecorder;
+import com.fr.scheduler.QuartzContext;
+import com.fr.scheduler.ScheduleJobManager;
+import com.fr.stable.StringUtils;
+import com.fr.stable.fun.Authorize;
+import com.fr.third.v2.org.quartz.CronScheduleBuilder;
+import com.fr.third.v2.org.quartz.JobKey;
+import com.fr.third.v2.org.quartz.SchedulerException;
+import com.fr.third.v2.org.quartz.TriggerBuilder;
+import com.fr.web.utils.WebUtils;
+
+import javax.servlet.FilterChain;
+import javax.servlet.FilterConfig;
+import javax.servlet.http.Cookie;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.net.URLDecoder;
+import java.net.URLEncoder;
+import java.util.HashMap;
+import java.util.Map;
+
+/**
+ * @author xx
+ * @date 2021/11/04
+ */
+@FunctionRecorder
+@Authorize(callSignKey = PluginConstants.PLUGIN_ID)
+public class OAuth extends AbstractGlobalRequestFilterProvider {
+
+    @Override
+    public void init(FilterConfig filterConfig) {
+    }
+
+    public static void initSchedule() {
+        JobKey jobKey = new JobKey("syncUser", "syncGroup");
+        try {
+            if (QuartzContext.getInstance().getScheduler().checkExists(jobKey)) {
+                ScheduleJobManager.getInstance().removeJob(jobKey.getName(), jobKey.getGroup());
+            }
+        } catch (SchedulerException e) {
+            FineLoggerFactory.getLogger().error(e.getMessage(), e);
+        }
+
+        addSchedule(jobKey);
+    }
+
+    private static void addSchedule(JobKey jobKey) {
+        Map<String, Object> param = new HashMap();
+        TriggerBuilder triggerBuilder = TriggerBuilder.newTrigger();
+        triggerBuilder.forJob(jobKey.getName(), jobKey.getGroup()).withIdentity(jobKey.getName(), jobKey.getGroup()).startNow();
+        String cron = GxkgSsoConfig.getInstance().getCron();
+        if (StringUtils.isBlank(cron)) {
+            FineLoggerFactory.getLogger().error("cron is null schedule start failed");
+            return;
+        }
+        CronScheduleBuilder schedule = CronScheduleBuilder.cronSchedule(cron);
+        triggerBuilder.withSchedule(schedule);
+        try {
+            ScheduleJobManager.getInstance().addJob(jobKey.getName(), jobKey.getGroup(), "sync job", SyncUserSchedule.class, triggerBuilder.build(), param);
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().error(e.getMessage(), e);
+        }
+    }
+
+    @Override
+    public String filterName() {
+        return "oauthFilter";
+    }
+
+    @Override
+    public String[] urlPatterns() {
+        if (!PluginContexts.currentContext().isAvailable()) {
+            LogUtils.error("未注册或禁用");
+            return new String[]{"/neverbeused"};
+        }
+        //initSchedule();
+        return new String[]{
+                "/decision",
+                "/decision/view/report",
+                "/decision/view/form",
+        };
+    }
+
+    @Override
+    public void doFilter(HttpServletRequest request, HttpServletResponse response, FilterChain chain) {
+        GxkgSsoConfig config = GxkgSsoConfig.getInstance();
+        if (CommonUtils.isLogin(request)) {
+            Cookie sessionId = com.fr.third.springframework.web.util.WebUtils.getCookie(request, "SSO_SESSION_ID");
+            if (config.getRefreshToken() && StringUtils.equals("XMLHttpRequest", request.getHeader("X-Requested-With"))) {
+                refreshSession(sessionId, config);
+            }
+            CommonUtils.next(request, response, chain);
+            return;
+        }
+        if (isAccept(request)) {
+            CommonUtils.next(request, response, chain);
+            return;
+        }
+        try {
+            String code = request.getParameter("code");
+            if (StringUtils.isBlank(code)) {
+                jumpAuthorize(request, response, config);
+                return;
+            }
+            String token = getToken(code, config);
+            if (StringUtils.isBlank(token)) {
+                CommonUtils.setError(response, "token 获取失败");
+                return;
+            }
+            String username = getUsername(token, config);
+            if (StringUtils.isBlank(username)) {
+                CommonUtils.setError(response, "username 获取失败");
+                return;
+            }
+            if (!CommonUtils.existUser(username)) {
+                CommonUtils.setError(response, String.format("[%s]用户不存在", username));
+                return;
+            }
+            CommonUtils.login(username, request, response);
+            String state = request.getParameter("state");
+            String sessionId = request.getParameter("sessionId");
+            response.addCookie(new Cookie("SSO_SESSION_ID", sessionId));
+            if (StringUtils.isNotBlank(state)) {
+                String accessURL = CommonUtils.getCachedParam(state);
+                if (StringUtils.isNotBlank(accessURL)) {
+                    response.sendRedirect(accessURL);
+                    return;
+                }
+            }
+
+            String url = request.getRequestURL().toString();
+            String query = String.format("%s=%s", "code", code);
+            String queryString = URLDecoder.decode(request.getQueryString(),"UTF-8");
+            LogUtils.debug4plugin("query string is {}", queryString);
+            queryString = queryString.replace("&" + query, "").replace(query, "");
+            if (StringUtils.isNotBlank(queryString)) {
+                LogUtils.debug4plugin("replace string is {}", url + "?" + queryString);
+                response.sendRedirect(url + "?" + queryString);
+            } else {
+                LogUtils.debug4plugin("replace string is {}", url);
+                response.sendRedirect(url);
+            }
+        } catch (Exception e) {
+            LogUtils.error("oauth2单点登陆处理失败, Cause by: ", e);
+            CommonUtils.setError(response, e.getMessage());
+        }
+    }
+
+    private void refreshSession(Cookie cookie, GxkgSsoConfig config) {
+        if (cookie == null) {
+            return;
+        }
+        String temp = "%s/sso/refreshLoginTime?sessionId=%s";
+        String url = String.format(temp, config.getHost(), cookie.getValue());
+        LogUtils.debug4plugin("get refreshSession url is {}", url);
+        Map<String, Object> param = new HashMap<>();
+        param.put("sessionId", cookie.getValue());
+        String res = HttpUtil.doFormPost(url, null, param, null);
+        LogUtils.debug4plugin("refreshSession token res is {}", res);
+    }
+
+    private String getUsername(String token, GxkgSsoConfig config) {
+        String temp = "%s/sso/oauth2/userInfo?access_token=%s&client_id=%s";
+        String url = String.format(temp, config.getHost(), token, config.getClientId());
+        LogUtils.debug4plugin("get username url is {}", url);
+        String res = HttpUtil.sendGet(url, null, null);
+        LogUtils.debug4plugin("get token res is {}", res);
+        JSONObject result = new JSONObject(res);
+        if (result.has("uid")) {
+            return result.getString("uid");
+        }
+        return StringUtils.EMPTY;
+    }
+
+    private String getToken(String code, GxkgSsoConfig config) {
+        String temp = "%s/sso/oauth2/token?client_id=%s&grant_type=authorization_code&code=%s&client_secret=%s";
+        String url = String.format(temp, config.getHost(), config.getClientId(), code, config.getClientSecret());
+        LogUtils.debug4plugin("get token url is {}", url);
+        String res = HttpUtil.sendPost(url, null, JSONObject.create());
+        LogUtils.debug4plugin("get token res is {}", res);
+        JSONObject result = new JSONObject(res);
+        if (result.has("access_token")) {
+            return result.getString("access_token");
+        }
+        return StringUtils.EMPTY;
+    }
+
+    private void jumpAuthorize(HttpServletRequest request, HttpServletResponse response, GxkgSsoConfig config) {
+        try {
+            String redirectUrl = CommonUtils.getUrl(request);
+            String key = CommonUtils.cacheParams(redirectUrl);
+            String temp = "%s/sso/oauth2/authorize?response_type=code&redirect_uri=%s&client_id=%s&state=%s";
+            String url = String.format(temp, config.getHost(), URLEncoder.encode(config.getRedirect(), "UTF-8"), config.getClientId(), key);
+            if (StringUtils.isNotBlank(request.getParameter("ssoToken"))) {
+                url += "&ssoToken=" + request.getParameter("ssoToken");
+            }
+            LogUtils.debug4plugin("redirect url is {}", url);
+            response.sendRedirect(url);
+        } catch (Exception e) {
+            LogUtils.error(e.getMessage(), e);
+        }
+
+    }
+
+    private boolean isAccept(HttpServletRequest request) {
+        if (request.getRequestURI().endsWith("/view/form") || request.getRequestURI().endsWith("/view/report")) {
+            if (StringUtils.isNotBlank(WebUtils.getHTTPRequestParameter(request, "code"))) {
+                return false;
+            }
+            if (StringUtils.isNotBlank(WebUtils.getReportTitleFromRequest(request))) {
+                return false;
+            }
+            return true;
+        }
+        return false;
+    }
+
+
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/utils/CommonUtils.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/utils/CommonUtils.java
@ -0,0 +1,191 @@
+package com.fr.plugin.xx.zyjn.utils;
+
+import com.fr.data.NetworkHelper;
+import com.fr.decision.authority.data.User;
+import com.fr.decision.mobile.terminal.TerminalHandler;
+import com.fr.decision.webservice.utils.DecisionServiceConstants;
+import com.fr.decision.webservice.utils.DecisionStatusService;
+import com.fr.decision.webservice.utils.WebServiceUtils;
+import com.fr.decision.webservice.v10.login.LoginService;
+import com.fr.decision.webservice.v10.login.TokenResource;
+import com.fr.decision.webservice.v10.user.UserService;
+import com.fr.locale.InterProviderFactory;
+import com.fr.log.FineLoggerFactory;
+import com.fr.stable.StringUtils;
+import com.fr.stable.web.Device;
+import com.fr.web.utils.WebUtils;
+
+import javax.servlet.FilterChain;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.PrintWriter;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Properties;
+import java.util.UUID;
+
+/**
+ * @author xx
+ * @since 2021/8/24
+ */
+public class CommonUtils {
+
+    public static String getProperty(Properties props, String key, String defaultValue, boolean allowBlank) {
+        String value = props.getProperty(key);
+        if (StringUtils.isNotBlank(value)) {
+            return value;
+        } else {
+            if (allowBlank) {
+                LogUtils.warn("Property[" + key + "] value is blank.");
+                return defaultValue;
+            } else {
+                throw new IllegalArgumentException("Property[" + key + "] cann't be blank.");
+            }
+        }
+    }
+
+    public static String getProperty(Properties props, String key, boolean allowBlank) {
+        return getProperty(props, key, null, allowBlank);
+    }
+
+    public static String getProperty(Properties props, String key) {
+        return getProperty(props, key, null, true);
+    }
+
+    public static boolean isLogin(HttpServletRequest request) {
+        String oldToken = TokenResource.COOKIE.getToken(request);
+        return oldToken != null && checkTokenValid(request, (String) oldToken);
+    }
+
+    private static boolean checkTokenValid(HttpServletRequest req, String token) {
+        try {
+            Device device = NetworkHelper.getDevice(req);
+            LoginService.getInstance().loginStatusValid(token, TerminalHandler.getTerminal(req, device));
+            return true;
+        } catch (Exception ignore) {
+        }
+        return false;
+    }
+
+    /**
+     * 跳转到过滤器链中的下一个过滤器
+     *
+     * @param request
+     * @param response
+     * @param chain
+     */
+    public static void next(HttpServletRequest request, HttpServletResponse response, FilterChain chain) {
+        try {
+            chain.doFilter(request, response);
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().error(e.getMessage(),e);
+        }
+    }
+
+    public static boolean existUser(String username){
+        try {
+            User user = UserService.getInstance().getUserByUserName(username);
+            if (user == null) {
+                return false;
+            }
+            return true;
+        } catch (Exception e) {
+
+        }
+        return false;
+
+    }
+
+    public static void login(String username, HttpServletRequest request, HttpServletResponse response) {
+        try {
+            User user = UserService.getInstance().getUserByUserName(username);
+            if (user == null) {
+                throw new RuntimeException("系统未授权, 当前用户是\"" + username + "\"");
+            }
+            String token = LoginService.getInstance().login(request, response, user.getUserName());
+            request.setAttribute(DecisionServiceConstants.FINE_AUTH_TOKEN_NAME, token);
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().error("sso >> Failed to login with[" + username + "]", e);
+            throw new RuntimeException("用户\"" + username + "\"登录失败");
+        }
+    }
+
+    public static boolean isMobileDevice(HttpServletRequest request) {
+        if (WebUtils.getDevice(request).isMobile()) {
+            LogUtils.debug4plugin("current request is is mobile request ,url is {}", request.getRequestURI());
+            return true;
+        }
+        String requestHeader = request.getHeader("user-agent");
+        String[] deviceArray = new String[]{"android", "iphone", "ipad", "ios", "windows phone", "wechat"};
+        if (requestHeader == null) {
+            return false;
+        }
+        requestHeader = requestHeader.toLowerCase();
+        for (int i = 0; i < deviceArray.length; i++) {
+            if (requestHeader.toLowerCase().contains(deviceArray[i])) {
+                LogUtils.debug4plugin("current request:{} is mobile request!", request.getRequestURI());
+                return true;
+            }
+        }
+        String op = WebUtils.getHTTPRequestParameter(request, "op");
+        return StringUtils.isNotBlank(op) && StringUtils.equals("h5", op);
+    }
+
+    public static String cacheParams(String values) {
+        try {
+            String key = UUID.randomUUID().toString();
+            DecisionStatusService.originUrlStatusService().put(key, values);
+            return key;
+        } catch (Exception e) {
+            LogUtils.error(e.getMessage(),e);
+        }
+        return StringUtils.EMPTY;
+    }
+    public static String getCachedParam(String key) {
+        try {
+            return DecisionStatusService.originUrlStatusService().get(key);
+        } catch (Exception e) {
+            return StringUtils.EMPTY;
+        }
+    }
+
+    public static void cacheParams(String key, Map<String, String> values) {
+        try {
+            DecisionStatusService.originUrlStatusService().put(key, values);
+        } catch (Exception e) {
+            throw new RuntimeException(e);
+        }
+    }
+
+    public static String getCachedParam(String key, String name) {
+        try {
+            Map<String, String> values = DecisionStatusService.originUrlStatusService().get(key);
+            return values.get(name);
+        } catch (Exception e) {
+            throw new RuntimeException(e);
+        }
+    }
+
+    public static void setError(HttpServletResponse res, String reason) {
+        try {
+            PrintWriter printWriter = WebUtils.createPrintWriter(res);
+            Map<String, Object> map = new HashMap<>();
+            map.put("result", InterProviderFactory.getProvider().getLocText("Fine-Engine_Error_Page_Result"));
+            map.put("reason", reason);
+            map.put("solution", InterProviderFactory.getProvider().getLocText("Fine-Engine_Please_Contact_Platform_Admin"));
+            String page = WebServiceUtils.parseWebPageResourceSafe("com/fr/web/controller/decision/entrance/resources/unavailable.html", map);
+            printWriter.write(page);
+            printWriter.flush();
+            printWriter.close();
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().error(e.getMessage(), e);
+        }
+    }
+
+    public static String getUrl(HttpServletRequest req) {
+        String uri = req.getRequestURI();
+        String query = req.getQueryString();
+        return StringUtils.isNotBlank(query) ? uri + "?" + query : uri;
+    }
+
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/utils/HttpUtil.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/utils/HttpUtil.java
@ -0,0 +1,330 @@
+package com.fr.plugin.xx.zyjn.utils;
+
+import com.fr.json.JSONObject;
+import com.fr.log.FineLoggerFactory;
+import com.fr.stable.StringUtils;
+import com.fr.third.org.apache.http.HttpResponse;
+import com.fr.third.org.apache.http.HttpStatus;
+import com.fr.third.org.apache.http.NameValuePair;
+import com.fr.third.org.apache.http.client.HttpClient;
+import com.fr.third.org.apache.http.client.entity.UrlEncodedFormEntity;
+import com.fr.third.org.apache.http.client.methods.HttpPost;
+import com.fr.third.org.apache.http.config.Registry;
+import com.fr.third.org.apache.http.config.RegistryBuilder;
+import com.fr.third.org.apache.http.conn.socket.ConnectionSocketFactory;
+import com.fr.third.org.apache.http.conn.socket.LayeredConnectionSocketFactory;
+import com.fr.third.org.apache.http.conn.socket.PlainConnectionSocketFactory;
+import com.fr.third.org.apache.http.conn.ssl.SSLConnectionSocketFactory;
+import com.fr.third.org.apache.http.conn.ssl.SSLContexts;
+import com.fr.third.org.apache.http.conn.ssl.TrustStrategy;
+import com.fr.third.org.apache.http.impl.client.CloseableHttpClient;
+import com.fr.third.org.apache.http.impl.client.HttpClientBuilder;
+import com.fr.third.org.apache.http.impl.conn.PoolingHttpClientConnectionManager;
+import com.fr.third.org.apache.http.message.BasicNameValuePair;
+import com.fr.third.org.apache.http.util.EntityUtils;
+
+import javax.net.ssl.HostnameVerifier;
+import javax.net.ssl.HttpsURLConnection;
+import javax.net.ssl.SSLContext;
+import javax.net.ssl.SSLSession;
+import java.io.*;
+import java.net.HttpURLConnection;
+import java.net.URL;
+import java.net.URLEncoder;
+import java.security.KeyManagementException;
+import java.security.KeyStore;
+import java.security.KeyStoreException;
+import java.security.NoSuchAlgorithmException;
+import java.security.cert.CertificateException;
+import java.util.ArrayList;
+import java.util.Iterator;
+import java.util.List;
+import java.util.Map;
+import java.util.stream.Collectors;
+
+/**
+ * @Author xx
+ * @Date 2020/12/05
+ * @Description
+ **/
+public class HttpUtil {
+
+    private static HostnameVerifier hv = new HostnameVerifier() {
+        @Override
+        public boolean verify(String urlHostName, SSLSession session) {
+            System.out.println("Warning: URL Host: " + urlHostName + " vs. "
+                    + session.getPeerHost());
+            return true;
+        }
+    };
+
+    /**
+     * 发送get请求
+     *
+     * @param url
+     * @param param
+     * @param header
+     * @return
+     * @throws IOException
+     */
+    public static String sendGet(String url, Map<String, String> param, Map<String, String> header) {
+        String result = "";
+        BufferedReader in = null;
+        String urlNameString = url;
+        try {
+        if (param != null) {
+            urlNameString += "?";
+            urlNameString += param.entrySet()
+                    .stream()
+                    .map(entry -> entry.getKey() + "=" + entry.getValue())
+                    .collect(Collectors.joining("&"));
+        }
+
+        URL realUrl = new URL(urlNameString);
+        // 打开和URL之间的连接
+        HttpURLConnection connection;
+        if (url.startsWith("https")) {
+            trustAllHttpsCertificates();
+            HttpsURLConnection.setDefaultHostnameVerifier(hv);
+            connection = (HttpURLConnection) realUrl.openConnection();
+        } else {
+            connection = (HttpURLConnection) realUrl.openConnection();
+        }
+        //设置超时时间
+        connection.setDoInput(true);
+        connection.setRequestMethod("GET");
+        connection.setConnectTimeout(5000);
+        connection.setReadTimeout(15000);
+        // 设置通用的请求属性
+        if (header != null) {
+            Iterator<Map.Entry<String, String>> it = header.entrySet().iterator();
+            while (it.hasNext()) {
+                Map.Entry<String, String> entry = it.next();
+                System.out.println(entry.getKey() + ":::" + entry.getValue());
+                connection.setRequestProperty(entry.getKey(), entry.getValue());
+            }
+        }
+        connection.setRequestProperty("accept", "*/*");
+        connection.setRequestProperty("connection", "Keep-Alive");
+        connection.setRequestProperty("user-agent", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");
+        // 建立实际的连接
+        connection.connect();
+        // 定义 BufferedReader输入流来读取URL的响应，设置utf8防止中文乱码
+        in = new BufferedReader(new InputStreamReader(connection.getInputStream(), "utf-8"));
+        String line;
+        while ((line = in.readLine()) != null) {
+            result += line;
+        }
+        if (in != null) {
+            in.close();
+        }
+        }catch (Exception e){
+            FineLoggerFactory.getLogger().error(e,"get url error ,url is:{},error is {}",urlNameString,e.getMessage());
+        }
+        return result;
+    }
+
+    public static String sendPost(String url,Map<String,String> header, JSONObject body) {
+        PrintWriter out = null;
+        BufferedReader in = null;
+        String result = StringUtils.EMPTY;
+        String res = StringUtils.EMPTY;
+        try {
+            String urlNameString = url;
+
+            URL realUrl = new URL(urlNameString);
+            // 打开和URL之间的连接
+            HttpURLConnection conn;
+            if (url.startsWith("https")) {
+                trustAllHttpsCertificates();
+                HttpsURLConnection.setDefaultHostnameVerifier(hv);
+                conn = (HttpURLConnection) realUrl.openConnection();
+            } else {
+                conn = (HttpURLConnection) realUrl.openConnection();
+            }
+            // 设置通用的请求属性
+            conn.setRequestProperty("accept", "*/*");
+            conn.setRequestProperty("connection", "Keep-Alive");
+            conn.setRequestProperty("user-agent",
+                    "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");
+            conn.setRequestProperty("Content-Type","application/json;;charset=UTF-8");
+            //conn.setRequestProperty("Content-Type", "multipart/form-data; boundary=----footfoodapplicationrequestnetwork");
+            if(header != null){
+                header.forEach((k, v) -> {
+                    conn.setRequestProperty(k, v);
+                });
+            }
+            // 发送POST请求必须设置如下两行
+            conn.setDoOutput(true);
+            conn.setDoInput(true);
+            //获取请求头
+
+            // 获取URLConnection对象对应的输出流
+            out = new PrintWriter(conn.getOutputStream());
+            StringBuffer buffer = new StringBuffer();
+
+            // 发送请求参数
+            if(body != null){
+                out.print(body.toString());
+            }
+            // flush输出流的缓冲
+            out.flush();
+            // 定义BufferedReader输入流来读取URL的响应
+            in = new BufferedReader(
+                    new InputStreamReader(conn.getInputStream()));
+            String line;
+            while ((line = in.readLine()) != null) {
+                result += line;
+            }
+            res = result;
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().error(e.getMessage(),e);
+        }
+        //使用finally块来关闭输出流、输入流
+        finally{
+            try{
+                if(out!=null){
+                    out.close();
+                }
+                if(in!=null){
+                    in.close();
+                }
+            }
+            catch(IOException e){
+                FineLoggerFactory.getLogger().error(e.getMessage(),e);
+            }
+        }
+        return res;
+    }
+
+
+    private static CloseableHttpClient getHttpsClient() {
+        RegistryBuilder<ConnectionSocketFactory> registryBuilder = RegistryBuilder.<ConnectionSocketFactory>create();
+        ConnectionSocketFactory plainSF = new PlainConnectionSocketFactory();
+        registryBuilder.register("http", plainSF);
+        // 指定信任密钥存储对象和连接套接字工厂
+        try {
+            KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
+            // 信任任何链接
+            TrustStrategy anyTrustStrategy = new TrustStrategy() {
+
+                @Override
+                public boolean isTrusted(java.security.cert.X509Certificate[] arg0, String arg1) throws CertificateException {
+                    // TODO Auto-generated method stub
+                    return true;
+                }
+            };
+            SSLContext sslContext = SSLContexts.custom().useTLS().loadTrustMaterial(trustStore, anyTrustStrategy).build();
+            LayeredConnectionSocketFactory sslSF = new SSLConnectionSocketFactory(sslContext, SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
+            registryBuilder.register("https", sslSF);
+        } catch (KeyStoreException e) {
+            throw new RuntimeException(e);
+        } catch (KeyManagementException e) {
+            throw new RuntimeException(e);
+        } catch (NoSuchAlgorithmException e) {
+            throw new RuntimeException(e);
+        }
+        Registry<ConnectionSocketFactory> registry = registryBuilder.build();
+        // 设置连接管理器
+        PoolingHttpClientConnectionManager connManager = new PoolingHttpClientConnectionManager(registry);
+        // 构建客户端
+        return HttpClientBuilder.create().setConnectionManager(connManager).build();
+
+    }
+
+    public static String doFormPost(String url,Map<String, Object> header, Map<String, Object> map, String chartset) {
+        //声明返回结果
+        String result = "";
+        UrlEncodedFormEntity entity = null;
+        HttpResponse httpResponse = null;
+        HttpClient httpClient = null;
+        try {
+            // 创建连接
+            httpClient = getHttpsClient();
+            
+            // 设置请求头和报文
+            HttpPost httpPost = new HttpPost(url);
+            if (header != null) {
+                header.forEach((k, v) -> {
+                    httpPost.setHeader(k, v.toString());
+                });
+            }
+            //设置参数
+            List<NameValuePair> list = new ArrayList<NameValuePair>();
+            Iterator iterator = map.entrySet().iterator();
+            while (iterator.hasNext()) {
+                Map.Entry<String, String> elem = (Map.Entry<String, String>) iterator.next();
+                list.add(new BasicNameValuePair(elem.getKey(), elem.getValue()));
+            }
+            entity = new UrlEncodedFormEntity(list, chartset == null ? "UTF-8" : chartset);
+            httpPost.setEntity(entity);
+            //执行发送，获取相应结果
+            httpResponse = httpClient.execute(httpPost);
+            if (httpResponse.getStatusLine().getStatusCode() == HttpStatus.SC_OK) {
+                result = EntityUtils.toString(httpResponse.getEntity());
+            } else {
+                FineLoggerFactory.getLogger().error("Http post form code is {},message is {}", httpResponse.getStatusLine().getStatusCode(), EntityUtils.toString(httpResponse.getEntity()));
+            }
+        } catch (Exception e) {
+            FineLoggerFactory.getLogger().error(e.getMessage(), e);
+        }
+        return result;
+
+    }
+
+    private static void trustAllHttpsCertificates() throws Exception {
+        javax.net.ssl.TrustManager[] trustAllCerts = new javax.net.ssl.TrustManager[1];
+        javax.net.ssl.TrustManager tm = new miTM();
+        trustAllCerts[0] = tm;
+        javax.net.ssl.SSLContext sc = javax.net.ssl.SSLContext.getInstance("SSL","SunJSSE");
+        sc.init(null, trustAllCerts, null);
+        HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
+    }
+    
+
+    /**
+     * encode url by UTF-8
+     * @param url url before encoding
+     * @return url after encoding
+     */
+    public static String encodeUrl(String url){
+        String eurl = url;
+        try {
+            eurl = URLEncoder.encode(url,"UTF-8");
+        } catch (UnsupportedEncodingException e) {
+        }
+        return eurl;
+    }
+
+    private static class miTM implements javax.net.ssl.TrustManager,
+            javax.net.ssl.X509TrustManager {
+        @Override
+        public java.security.cert.X509Certificate[] getAcceptedIssuers() {
+            return null;
+        }
+
+        public boolean isServerTrusted(
+                java.security.cert.X509Certificate[] certs) {
+            return true;
+        }
+
+        public boolean isClientTrusted(
+                java.security.cert.X509Certificate[] certs) {
+            return true;
+        }
+
+        @Override
+        public void checkServerTrusted(
+                java.security.cert.X509Certificate[] certs, String authType)
+                throws java.security.cert.CertificateException {
+            return;
+        }
+
+        @Override
+        public void checkClientTrusted(
+                java.security.cert.X509Certificate[] certs, String authType)
+                throws java.security.cert.CertificateException {
+            return;
+        }
+    }
+}
--- a/src/main/java/com/fr/plugin/xx/zyjn/utils/LogUtils.java
+++ b/src/main/java/com/fr/plugin/xx/zyjn/utils/LogUtils.java
@ -0,0 +1,122 @@
+package com.fr.plugin.xx.zyjn.utils;
+
+import com.fr.log.FineLoggerFactory;
+import com.fr.log.FineLoggerProvider;
+import com.fr.plugin.context.PluginContexts;
+import com.fr.plugin.xx.zyjn.PluginConstants;
+import com.fr.plugin.xx.zyjn.conf.GxkgSsoConfig;
+import com.fr.stable.StringUtils;
+
+/**
+ * @author xx
+ * @date 2021/11/04
+ */
+public final class LogUtils {
+    private static final String DEBUG_PREFIX = "[插件调试] ";
+    private static String LOG_PREFIX = PluginConstants.PLUGIN_NAME;
+    private static final String PLUGIN_VERSION;
+
+    private static final FineLoggerProvider LOGGER = FineLoggerFactory.getLogger();
+
+    static {
+        String version = PluginContexts.currentContext().getMarker().getVersion();
+        if (StringUtils.isNotBlank(version)) {
+            PLUGIN_VERSION = "[v" + version + "] ";
+        } else {
+            PLUGIN_VERSION = "[unknown version] ";
+        }
+
+        LOG_PREFIX = LOG_PREFIX + PLUGIN_VERSION;
+    }
+
+    public static void setPrefix(String prefix) {
+        if (prefix != null) {
+            LOG_PREFIX = prefix;
+        }
+    }
+
+    public static boolean isDebugEnabled() {
+        return LOGGER.isDebugEnabled();
+    }
+
+    public static void debug(String s) {
+        LOGGER.debug(LOG_PREFIX + s);
+    }
+
+    public static void debug(String s, Object... objects) {
+        LOGGER.debug(LOG_PREFIX + s, objects);
+    }
+
+    public static void debug(String s, Throwable throwable) {
+        LOGGER.debug(LOG_PREFIX + s, throwable);
+    }
+
+    public static void debug4plugin(String s) {
+        if (GxkgSsoConfig.getInstance().getdebugSwitch()) {
+            LOGGER.error(DEBUG_PREFIX + LOG_PREFIX + s);
+        } else {
+            LOGGER.debug(LOG_PREFIX + s);
+        }
+    }
+
+    public static void debug4plugin(String s, Object... objects) {
+        if (GxkgSsoConfig.getInstance().getdebugSwitch()) {
+            LOGGER.error(DEBUG_PREFIX + LOG_PREFIX + s, objects);
+        } else {
+            LOGGER.debug(LOG_PREFIX + s, objects);
+        }
+    }
+
+    public static void debug4plugin(String s, Throwable throwable) {
+        if (GxkgSsoConfig.getInstance().getdebugSwitch()) {
+            LOGGER.error(DEBUG_PREFIX + LOG_PREFIX + s, throwable);
+        } else {
+            LOGGER.debug(LOG_PREFIX + s, throwable);
+        }
+    }
+
+
+    public static boolean isInfoEnabled() {
+        return LOGGER.isInfoEnabled();
+    }
+
+    public static void info(String s) {
+        LOGGER.info(LOG_PREFIX + s);
+    }
+
+    public static void info(String s, Object... objects) {
+        LOGGER.info(LOG_PREFIX + s, objects);
+    }
+
+    public static void warn(String s) {
+        LOGGER.warn(LOG_PREFIX + s);
+    }
+
+    public static void warn(String s, Object... objects) {
+        LOGGER.warn(LOG_PREFIX + s, objects);
+    }
+
+    public static void warn(String s, Throwable throwable) {
+        LOGGER.warn(LOG_PREFIX + s, throwable);
+    }
+
+    public static void warn(Throwable throwable, String s, Object... objects) {
+        LOGGER.warn(throwable, LOG_PREFIX + s, objects);
+    }
+
+    public static void error(String s) {
+        LOGGER.error(LOG_PREFIX + s);
+    }
+
+    public static void error(String s, Object... objects) {
+        LOGGER.error(LOG_PREFIX + s, objects);
+    }
+
+    public static void error(String s, Throwable throwable) {
+        LOGGER.error(LOG_PREFIX + s, throwable);
+    }
+
+    public static void error(Throwable throwable, String s, Object... objects) {
+        LOGGER.error(throwable, LOG_PREFIX + s, objects);
+    }
+}