You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
172 lines
6.5 KiB
172 lines
6.5 KiB
package com.fr.plugin.filter; |
|
|
|
import com.fanruan.api.log.LogKit; |
|
import com.fr.base.ServerConfig; |
|
import com.fr.data.NetworkHelper; |
|
import com.fr.decision.authority.data.User; |
|
import com.fr.decision.fun.impl.AbstractGlobalRequestFilterProvider; |
|
import com.fr.decision.mobile.terminal.TerminalHandler; |
|
import com.fr.decision.webservice.v10.login.LoginService; |
|
import com.fr.decision.webservice.v10.login.TokenResource; |
|
import com.fr.decision.webservice.v10.user.UserService; |
|
import com.fr.json.JSONObject; |
|
import com.fr.log.FineLoggerFactory; |
|
import com.fr.plugin.JwtUtil; |
|
import com.fr.stable.StringUtils; |
|
import com.fr.stable.web.Device; |
|
import com.fr.web.utils.WebUtils; |
|
|
|
import javax.servlet.FilterChain; |
|
import javax.servlet.FilterConfig; |
|
import javax.servlet.http.Cookie; |
|
import javax.servlet.http.HttpServletRequest; |
|
import javax.servlet.http.HttpServletResponse; |
|
import java.net.URLEncoder; |
|
import java.util.Enumeration; |
|
|
|
public class KYJDDecision1Filter extends AbstractGlobalRequestFilterProvider { |
|
@Override |
|
public String filterName() { |
|
return "KYJDDecision1Filter"; |
|
} |
|
|
|
@Override |
|
public String[] urlPatterns() { |
|
return new String[]{ |
|
"/decision", |
|
}; |
|
} |
|
|
|
@Override |
|
public void init(FilterConfig filterConfig) { |
|
super.init(filterConfig); |
|
} |
|
|
|
@Override |
|
public void doFilter(HttpServletRequest req, HttpServletResponse res, FilterChain filterChain) { |
|
try { |
|
String ucToken = req.getParameter("uc_token"); |
|
if (req.getMethod().equals("GET")&& StringUtils.isNotBlank(ucToken)) { |
|
String userIdFromToken = JwtUtil.getUserIdFromToken(ucToken, JwtUtil.JWT_SECRET); |
|
User user = UserService.getInstance().getUserByUserName(userIdFromToken); |
|
if (user == null) { |
|
LogKit.error("解析的用户给在系统中未查到:{}",userIdFromToken); |
|
}else{ |
|
String url = getUrl(req); |
|
LogKit.info("解析JWT成功,用户信息:{} 跳转去:{} ",user.toString(),url); |
|
login(req,res,userIdFromToken); |
|
sendRedirect(res,url); |
|
return; |
|
} |
|
} |
|
filterChain.doFilter(req, res); |
|
} catch (Exception e) { |
|
FineLoggerFactory.getLogger().error(e.getMessage(), e); |
|
} |
|
} |
|
|
|
private String getUrl(HttpServletRequest request) { |
|
StringBuilder builder=new StringBuilder( ); |
|
|
|
String url = "/"; |
|
try { |
|
url = request.getScheme()+"://" + request.getServerName()//服务器地址 |
|
+ ":" |
|
+ request.getServerPort() + request.getRequestURI(); |
|
builder.append(url); |
|
Enumeration<String> parameterNames = request.getParameterNames(); |
|
builder.append("?ttt=1"); |
|
while (parameterNames.hasMoreElements()) { |
|
String key = parameterNames.nextElement(); |
|
if(StringUtils.equals(key,"uc_token")){ |
|
continue; |
|
} |
|
builder.append("&").append(key).append("=").append(URLEncoder.encode(request.getParameter(key),"utf-8")); |
|
} |
|
} catch (Exception e) { |
|
e.printStackTrace(); |
|
} |
|
return builder.toString(); |
|
} |
|
private boolean needFilter(HttpServletRequest request) { |
|
String requestURI = request.getRequestURI(); |
|
String ticket = request.getParameter("sign"); |
|
if (StringUtils.isNotBlank(requestURI) && request.getMethod().equals("GET") && StringUtils.isNotBlank(ticket)) { |
|
if (requestURI.endsWith("decision") || requestURI.endsWith("decision/")) { |
|
return true; |
|
} |
|
if (requestURI.endsWith("/url/patch/web/page")) { |
|
return true; |
|
} |
|
if (requestURI.endsWith("/view/form") || requestURI.endsWith("/view/report")) { |
|
if (StringUtils.isNotBlank(request.getParameter("viewlet"))) { |
|
return true; |
|
} |
|
} |
|
if (requestURI.contains("/v10/entry/access/") && request.getMethod().equals("GET")) { |
|
return true; |
|
} |
|
if (requestURI.contains("/v5/design/report") && (requestURI.endsWith("/edit") || requestURI.endsWith("/view"))) { |
|
return true; |
|
} |
|
} |
|
return false; |
|
} |
|
|
|
private void sendRedirect(HttpServletResponse res, String url) { |
|
res.setStatus(HttpServletResponse.SC_MOVED_TEMPORARILY); |
|
res.setHeader("Location", url); |
|
} |
|
|
|
private void delLoginOut(HttpServletRequest req, HttpServletResponse res) { |
|
try { |
|
//执行帆软内部的退出 |
|
LoginService.getInstance().logout(req, res); |
|
JSONObject jsonObject = new JSONObject(); |
|
jsonObject.put("data", "login"); |
|
//调用外部接口注销accessToken |
|
WebUtils.printAsJSON(res, jsonObject); |
|
} catch (Exception e) { |
|
} |
|
} |
|
|
|
private boolean isLogOut(HttpServletRequest req) { |
|
String url = WebUtils.getOriginalURL(req); |
|
String servletNamePrefix = "/" + ServerConfig.getInstance().getServletName() + "/logout"; |
|
return url.contains(servletNamePrefix) && req.getMethod().equals("POST"); |
|
} |
|
|
|
private void login(HttpServletRequest req, HttpServletResponse res, String username) { |
|
String token = null; |
|
try { |
|
token = LoginService.getInstance().login(req, res, username); |
|
req.setAttribute("fine_auth_token", token); |
|
} catch (Exception e) { |
|
FineLoggerFactory.getLogger().error(e.getMessage(), e); |
|
FineLoggerFactory.getLogger().error("login failed"); |
|
} |
|
FineLoggerFactory.getLogger().error("login success"); |
|
} |
|
|
|
private boolean isLogin(HttpServletRequest request) { |
|
String oldToken = TokenResource.COOKIE.getToken(request); |
|
return oldToken != null && checkTokenValid(request, (String) oldToken); |
|
} |
|
|
|
private boolean checkTokenValid(HttpServletRequest req, String token) { |
|
try { |
|
Device device = NetworkHelper.getDevice(req); |
|
LoginService.getInstance().loginStatusValid(token, TerminalHandler.getTerminal(req, device)); |
|
return true; |
|
} catch (Exception ignore) { |
|
} |
|
return false; |
|
} |
|
|
|
private static void setCookie(HttpServletResponse response, String name, String value) { |
|
Cookie cookie = new Cookie(name, value); |
|
cookie.setPath("/"); |
|
response.addCookie(cookie); |
|
} |
|
|
|
}
|
|
|