pioneer
2 years ago
commit
54c6ed7f21
12 changed files with 451 additions and 0 deletions
@ -0,0 +1,7 @@ |
|||||||
|
|
||||||
|
# open-JSD-9856 |
||||||
|
|
||||||
|
JSD-9856 oauth2 单点登录\ |
||||||
|
免责说明：该源码为第三方爱好者提供，不保证源码和方案的可靠性，也不提供任何形式的源码教学指导和协助！\ |
||||||
|
仅作为开发者学习参考使用！禁止用于任何商业用途！\ |
||||||
|
为保护开发者隐私，开发者信息已隐去！若原开发者希望公开自己的信息，可联系【pioneer】处理。 |
||||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
@ -0,0 +1,25 @@ |
|||||||
|
<?xml version="1.0" encoding="UTF-8"?> |
||||||
|
<plugin> |
||||||
|
<id>com.fr.plugin.ihef.sso</id> |
||||||
|
<name><![CDATA[单点登陆]]></name> |
||||||
|
<active>yes</active> |
||||||
|
<version>1.0.2</version> |
||||||
|
<env-version>11.0</env-version> |
||||||
|
<jartime>2021-10-01</jartime> |
||||||
|
<vendor>fr.open</vendor> |
||||||
|
<description><![CDATA[单点登陆]]></description> |
||||||
|
<change-notes><![CDATA[单点登陆]]></change-notes> |
||||||
|
<main-package>com.fr.plugin.ihef</main-package> |
||||||
|
<prefer-packages> |
||||||
|
<prefer-package>com.fanruan.api</prefer-package> |
||||||
|
</prefer-packages> |
||||||
|
<lifecycle-monitor class="com.fr.plugin.ihef.PluginMonitor"/> |
||||||
|
<extra-core> |
||||||
|
<LocaleFinder class="com.fr.plugin.ihef.LocaleFinder"/> |
||||||
|
</extra-core> |
||||||
|
<extra-decision> |
||||||
|
<GlobalRequestFilterProvider class="com.fr.plugin.ihef.request.OAuthLogin"/> |
||||||
|
<LogInOutEventProvider class="com.fr.plugin.ihef.CustomLogInOut"/> |
||||||
|
</extra-decision> |
||||||
|
<function-recorder class="com.fr.plugin.ihef.LocaleFinder"/> |
||||||
|
</plugin> |
||||||
@ -0,0 +1,42 @@ |
|||||||
|
/** |
||||||
|
* Copyright (C), 2015-2021 |
||||||
|
* FileName: CustomLogInOut |
||||||
|
* Author: fr.open |
||||||
|
* Date: 2019/6/19 16:25 |
||||||
|
* Description: CustomLogInOut |
||||||
|
* History: |
||||||
|
* <author> <time> <version> <desc> |
||||||
|
*/ |
||||||
|
package com.fr.plugin.ihef; |
||||||
|
|
||||||
|
import com.fr.decision.fun.impl.AbstractLogInOutEventProvider; |
||||||
|
import com.fr.decision.webservice.login.LogInOutResultInfo; |
||||||
|
import com.fr.plugin.ihef.config.IhefConfig; |
||||||
|
|
||||||
|
/** |
||||||
|
* 〈Function Description〉<br> |
||||||
|
* 〈CustomLogInOut〉 |
||||||
|
* |
||||||
|
* @author fr.open |
||||||
|
* @since 1.0.0 |
||||||
|
*/ |
||||||
|
public class CustomLogInOut extends AbstractLogInOutEventProvider { |
||||||
|
|
||||||
|
public static final String LOGOUT_PATH = "/c/portal/logout"; |
||||||
|
private final IhefConfig config; |
||||||
|
|
||||||
|
public CustomLogInOut() { |
||||||
|
this.config = IhefConfig.getInstance(); |
||||||
|
} |
||||||
|
|
||||||
|
/** |
||||||
|
* 用户登出处理 |
||||||
|
* |
||||||
|
* @param result |
||||||
|
* @return |
||||||
|
*/ |
||||||
|
@Override |
||||||
|
public String logoutAction(LogInOutResultInfo result) { |
||||||
|
return this.config.getUriBase() + LOGOUT_PATH; |
||||||
|
} |
||||||
|
} |
||||||
@ -0,0 +1,37 @@ |
|||||||
|
/* |
||||||
|
* Copyright (C), 2018-2020 |
||||||
|
* Project: starter |
||||||
|
* FileName: LocaleFinder |
||||||
|
* Author: fr.open |
||||||
|
* Date: 2020/8/31 22:19 |
||||||
|
*/ |
||||||
|
package com.fr.plugin.ihef; |
||||||
|
|
||||||
|
import com.fr.intelli.record.Focus; |
||||||
|
import com.fr.intelli.record.Original; |
||||||
|
import com.fr.record.analyzer.EnableMetrics; |
||||||
|
import com.fr.stable.fun.impl.AbstractLocaleFinder; |
||||||
|
|
||||||
|
import static com.fr.plugin.ihef.config.IhefConfig.PLUGIN_ID; |
||||||
|
|
||||||
|
/** |
||||||
|
* <Function Description><br> |
||||||
|
* <LocaleFinder> |
||||||
|
* |
||||||
|
* @author fr.open |
||||||
|
* @since 1.0.0 |
||||||
|
*/ |
||||||
|
@EnableMetrics |
||||||
|
public class LocaleFinder extends AbstractLocaleFinder { |
||||||
|
|
||||||
|
@Override |
||||||
|
@Focus(id = PLUGIN_ID, text = "Plugin-ihef", source = Original.PLUGIN) |
||||||
|
public String find() { |
||||||
|
return "com/fr/plugin/ihef/locale/lang"; |
||||||
|
} |
||||||
|
|
||||||
|
@Override |
||||||
|
public int currentAPILevel() { |
||||||
|
return CURRENT_LEVEL; |
||||||
|
} |
||||||
|
} |
||||||
@ -0,0 +1,33 @@ |
|||||||
|
/* |
||||||
|
* Copyright (C), 2018-2021 |
||||||
|
* Project: starter |
||||||
|
* FileName: PluginMonitor |
||||||
|
* Author: fr.open |
||||||
|
* Date: 2021/3/30 15:10 |
||||||
|
*/ |
||||||
|
package com.fr.plugin.ihef; |
||||||
|
|
||||||
|
import com.fr.plugin.context.PluginContext; |
||||||
|
import com.fr.plugin.ihef.config.IhefConfig; |
||||||
|
import com.fr.plugin.observer.inner.AbstractPluginLifecycleMonitor; |
||||||
|
|
||||||
|
/** |
||||||
|
* <Function Description><br> |
||||||
|
* <PluginMonitor> |
||||||
|
* |
||||||
|
* @author fr.open |
||||||
|
* @since 1.0.0 |
||||||
|
*/ |
||||||
|
public class PluginMonitor extends AbstractPluginLifecycleMonitor { |
||||||
|
public PluginMonitor() { |
||||||
|
} |
||||||
|
|
||||||
|
@Override |
||||||
|
public void afterRun(PluginContext pluginContext) { |
||||||
|
IhefConfig.getInstance(); |
||||||
|
} |
||||||
|
|
||||||
|
@Override |
||||||
|
public void beforeStop(PluginContext pluginContext) { |
||||||
|
} |
||||||
|
} |
||||||
@ -0,0 +1,74 @@ |
|||||||
|
/* |
||||||
|
* Copyright (C), 2018-2021 |
||||||
|
* Project: starter |
||||||
|
* FileName: SsoConfig |
||||||
|
* Author: fr.open |
||||||
|
* Date: 2021/3/30 9:38 |
||||||
|
*/ |
||||||
|
package com.fr.plugin.ihef.config; |
||||||
|
|
||||||
|
import com.fanruan.api.util.StringKit; |
||||||
|
import com.fr.config.*; |
||||||
|
import com.fr.config.holder.Conf; |
||||||
|
import com.fr.config.holder.factory.Holders; |
||||||
|
|
||||||
|
/** |
||||||
|
* <Function Description><br> |
||||||
|
* <SsoConfig> |
||||||
|
* |
||||||
|
* @author fr.open |
||||||
|
* @since 1.0.0 |
||||||
|
*/ |
||||||
|
@Visualization(category = "Plugin-ihef_Group") |
||||||
|
public class IhefConfig extends DefaultConfiguration { |
||||||
|
public static final String PLUGIN_ID = "com.fr.plugin.ihef.sso"; |
||||||
|
|
||||||
|
private static volatile IhefConfig config = null; |
||||||
|
@Identifier(value = "uriBase", name = "Plugin-ihef_Config_UriBase", description = "Plugin-ihef_Config_UriBase_Description", status = Status.SHOW) |
||||||
|
private final Conf<String> uriBase = Holders.simple(StringKit.EMPTY); |
||||||
|
@Identifier(value = "clientId", name = "Plugin-ihef_Config_ClientId", description = "Plugin-ihef_Config_ClientId_Description", status = Status.SHOW) |
||||||
|
private Conf<String> clientId = Holders.simple(StringKit.EMPTY); |
||||||
|
@Identifier(value = "clientSecret", name = "Plugin-ihef_Config_ClientSecret", description = "Plugin-ihef_Config_ClientSecret_Description", status = Status.SHOW) |
||||||
|
private Conf<String> clientSecret = Holders.simple(StringKit.EMPTY); |
||||||
|
@Identifier(value = "frUri", name = "Plugin-ihef_Config_FrUri", description = "Plugin-ihef_Config_FrUri_Description", status = Status.SHOW) |
||||||
|
private Conf<String> frUri = Holders.simple(StringKit.EMPTY); |
||||||
|
|
||||||
|
public static IhefConfig getInstance() { |
||||||
|
if (config == null) { |
||||||
|
config = ConfigContext.getConfigInstance(IhefConfig.class); |
||||||
|
} |
||||||
|
return config; |
||||||
|
} |
||||||
|
|
||||||
|
public String getUriBase() { |
||||||
|
return uriBase.get(); |
||||||
|
} |
||||||
|
|
||||||
|
public void setUriBase(String uriBase) { |
||||||
|
this.uriBase.set(uriBase); |
||||||
|
} |
||||||
|
|
||||||
|
public String getClientId() { |
||||||
|
return clientId.get(); |
||||||
|
} |
||||||
|
|
||||||
|
public void setClientId(String clientId) { |
||||||
|
this.clientId.set(clientId); |
||||||
|
} |
||||||
|
|
||||||
|
public String getClientSecret() { |
||||||
|
return clientSecret.get(); |
||||||
|
} |
||||||
|
|
||||||
|
public void setClientSecret(String clientSecret) { |
||||||
|
this.clientSecret.set(clientSecret); |
||||||
|
} |
||||||
|
|
||||||
|
public String getFrUri() { |
||||||
|
return frUri.get(); |
||||||
|
} |
||||||
|
|
||||||
|
public void setFrUri(String frUri) { |
||||||
|
this.frUri.set(frUri); |
||||||
|
} |
||||||
|
} |
||||||
@ -0,0 +1,211 @@ |
|||||||
|
/* |
||||||
|
* Copyright (C), 2018-2021 |
||||||
|
* Project: starter |
||||||
|
* FileName: OAuthLogin |
||||||
|
* Author: fr.open |
||||||
|
* Date: 2021/3/30 22:09 |
||||||
|
*/ |
||||||
|
package com.fr.plugin.ihef.request; |
||||||
|
|
||||||
|
import com.fanruan.api.decision.login.LoginKit; |
||||||
|
import com.fanruan.api.decision.user.UserKit; |
||||||
|
import com.fanruan.api.i18n.I18nKit; |
||||||
|
import com.fanruan.api.log.LogKit; |
||||||
|
import com.fanruan.api.net.NetworkKit; |
||||||
|
import com.fanruan.api.net.http.HttpKit; |
||||||
|
import com.fanruan.api.util.StringKit; |
||||||
|
import com.fr.decision.fun.impl.AbstractGlobalRequestFilterProvider; |
||||||
|
import com.fr.decision.webservice.utils.DecisionServiceConstants; |
||||||
|
import com.fr.decision.webservice.v10.login.LoginService; |
||||||
|
import com.fr.json.JSONObject; |
||||||
|
import com.fr.plugin.context.PluginContexts; |
||||||
|
import com.fr.plugin.ihef.config.IhefConfig; |
||||||
|
import com.fr.stable.fun.Authorize; |
||||||
|
import com.fr.third.org.apache.http.client.utils.URIBuilder; |
||||||
|
|
||||||
|
import javax.servlet.FilterChain; |
||||||
|
import javax.servlet.FilterConfig; |
||||||
|
import javax.servlet.http.HttpServletRequest; |
||||||
|
import javax.servlet.http.HttpServletResponse; |
||||||
|
import java.net.URISyntaxException; |
||||||
|
import java.util.HashMap; |
||||||
|
import java.util.Map; |
||||||
|
|
||||||
|
import static com.fr.plugin.ihef.config.IhefConfig.PLUGIN_ID; |
||||||
|
|
||||||
|
/** |
||||||
|
* <Function Description><br> |
||||||
|
* <OAuthLogin> |
||||||
|
* |
||||||
|
* @author fr.open |
||||||
|
* @since 1.0.0 |
||||||
|
*/ |
||||||
|
@Authorize(callSignKey = PLUGIN_ID) |
||||||
|
public class OAuthLogin extends AbstractGlobalRequestFilterProvider { |
||||||
|
public static final String CODE_PATH = "/o/oauth2/authorize"; |
||||||
|
public static final String TOKEN_PATH = "/o/oauth2/token"; |
||||||
|
public static final String USERINFO_PATH = "/api/jsonws/user/get-current-user"; |
||||||
|
public static final String CODE = "code"; |
||||||
|
public static final String STATE = "fkLiferay"; |
||||||
|
private IhefConfig config; |
||||||
|
|
||||||
|
/** |
||||||
|
* 过滤器名称 |
||||||
|
* |
||||||
|
* @return |
||||||
|
*/ |
||||||
|
@Override |
||||||
|
public String filterName() { |
||||||
|
return "ihefFilter"; |
||||||
|
} |
||||||
|
|
||||||
|
/** |
||||||
|
* 过滤规则 |
||||||
|
* |
||||||
|
* @return |
||||||
|
*/ |
||||||
|
@Override |
||||||
|
public String[] urlPatterns() { |
||||||
|
return new String[]{"/decision", "/decision/", "/decision/view/form", "/decision/view/report", "/decision/v10/entry/access/*", "/decision/v5/design/report/*"}; |
||||||
|
} |
||||||
|
|
||||||
|
/** |
||||||
|
* 过滤器初始化 |
||||||
|
* |
||||||
|
* @param filterConfig |
||||||
|
*/ |
||||||
|
@Override |
||||||
|
public void init(FilterConfig filterConfig) { |
||||||
|
this.config = IhefConfig.getInstance(); |
||||||
|
super.init(filterConfig); |
||||||
|
} |
||||||
|
|
||||||
|
/** |
||||||
|
* 过滤器处理 |
||||||
|
* |
||||||
|
* @param request |
||||||
|
* @param response |
||||||
|
* @param filterChain |
||||||
|
*/ |
||||||
|
@Override |
||||||
|
public void doFilter(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) { |
||||||
|
try { |
||||||
|
if (operation(request, response)) { |
||||||
|
filterChain.doFilter(request, response); |
||||||
|
} |
||||||
|
} catch (Exception e) { |
||||||
|
LogKit.error(e.getMessage(), e); |
||||||
|
} |
||||||
|
} |
||||||
|
|
||||||
|
/** |
||||||
|
* 用户验证登陆操作 |
||||||
|
* |
||||||
|
* @param req |
||||||
|
* @param res |
||||||
|
* @throws Exception |
||||||
|
*/ |
||||||
|
private boolean operation(HttpServletRequest req, HttpServletResponse res) throws Exception { |
||||||
|
// 已登录
|
||||||
|
if (LoginService.getInstance().isLogged(req)) { |
||||||
|
return true; |
||||||
|
} |
||||||
|
LogKit.info("ihef-OAuthLogin-operation-url:{}", req.getRequestURL().toString()); |
||||||
|
String code = NetworkKit.getHTTPRequestParameter(req, CODE); |
||||||
|
String state = NetworkKit.getHTTPRequestParameter(req, STATE); |
||||||
|
String clientId = NetworkKit.getHTTPRequestParameter(req, "client_id"); |
||||||
|
LogKit.info("ihef-OAuthLogin-operation-code:{}, state:{}, clientId:{}", code, state, clientId); |
||||||
|
if (StringKit.isBlank(code)) { |
||||||
|
res.sendRedirect(getLoginUrl()); |
||||||
|
return false; |
||||||
|
} |
||||||
|
String accessToken = getAccessToken(code); |
||||||
|
String username = getUsername(accessToken); |
||||||
|
if (StringKit.isEmpty(username) || !UserKit.existUsername(username)) { |
||||||
|
return true; |
||||||
|
} |
||||||
|
if (!PluginContexts.currentContext().isAvailable()) { |
||||||
|
LogKit.error(I18nKit.getLocText("Plugin-ihef_Licence_Expired")); |
||||||
|
return true; |
||||||
|
} |
||||||
|
String tokenFR = LoginKit.login(req, res, username); |
||||||
|
req.setAttribute(DecisionServiceConstants.FINE_AUTH_TOKEN_NAME, tokenFR); |
||||||
|
return true; |
||||||
|
} |
||||||
|
|
||||||
|
/** |
||||||
|
* 获取access_token |
||||||
|
* |
||||||
|
* @param code |
||||||
|
* @return |
||||||
|
* @throws Exception |
||||||
|
*/ |
||||||
|
private String getAccessToken(String code) throws Exception { |
||||||
|
Map<String, String> headers = new HashMap<>(); |
||||||
|
headers.put("Accept", "application/json"); |
||||||
|
Map<String, String> tokenParams = new HashMap<>(); |
||||||
|
tokenParams.put("client_id", this.config.getClientId()); |
||||||
|
tokenParams.put("client_secret", this.config.getClientSecret()); |
||||||
|
tokenParams.put("grant_type", "authorization_code"); |
||||||
|
tokenParams.put("code", code); |
||||||
|
LogKit.info("ihef-OAuthLogin-getAccessToken-params:{}", tokenParams); |
||||||
|
String res = HttpKit.post(this.config.getUriBase() + TOKEN_PATH, tokenParams, headers); |
||||||
|
LogKit.info("ihef-OAuthLogin-getAccessToken-res:{}", res); |
||||||
|
if (StringKit.isEmpty(res)) { |
||||||
|
return StringKit.EMPTY; |
||||||
|
} |
||||||
|
return new JSONObject(res).getString("access_token"); |
||||||
|
} |
||||||
|
|
||||||
|
/** |
||||||
|
* 通过凭证获得username |
||||||
|
* |
||||||
|
* @param token |
||||||
|
* @return |
||||||
|
*/ |
||||||
|
private String getUsername(String token) throws Exception { |
||||||
|
LogKit.info("ihef-OAuthLogin-getUsername-token:{}", token); |
||||||
|
Map<String, String> headers = new HashMap<>(); |
||||||
|
headers.put("Authorization", "Bearer " + token); |
||||||
|
String userRes = HttpKit.get(this.config.getUriBase() + USERINFO_PATH, new HashMap<>(), headers); |
||||||
|
LogKit.info("ihef-OAuthLogin-getUsername-userRes:{}", userRes); |
||||||
|
JSONObject userJo = new JSONObject(userRes); |
||||||
|
if (userJo.has("screenName")) { |
||||||
|
return userJo.getString("screenName"); |
||||||
|
} |
||||||
|
return StringKit.EMPTY; |
||||||
|
} |
||||||
|
|
||||||
|
/** |
||||||
|
* 获取login_url |
||||||
|
* |
||||||
|
* @return |
||||||
|
*/ |
||||||
|
private String getLoginUrl() { |
||||||
|
String url = this.config.getUriBase() + CODE_PATH; |
||||||
|
Map<String, String> params = new HashMap<>(); |
||||||
|
params.put("client_id", this.config.getClientId()); |
||||||
|
params.put("redirect_uri", this.config.getFrUri()); |
||||||
|
params.put("response_type", "code"); |
||||||
|
params.put("state", STATE); |
||||||
|
String loginUrl = buildUrl(url, params); |
||||||
|
LogKit.info("ihef-OAuthLogin-getLoginUrl-loginUrl:{}", loginUrl); |
||||||
|
return loginUrl; |
||||||
|
} |
||||||
|
|
||||||
|
private String buildUrl(String url, Map<String, String> params) { |
||||||
|
if (params == null || params.isEmpty()) { |
||||||
|
return url; |
||||||
|
} |
||||||
|
try { |
||||||
|
URIBuilder builder = new URIBuilder(url); |
||||||
|
for (Map.Entry<String, String> entry : params.entrySet()) { |
||||||
|
builder.setParameter(entry.getKey(), entry.getValue()); |
||||||
|
} |
||||||
|
return builder.build().toString(); |
||||||
|
} catch (URISyntaxException e) { |
||||||
|
LogKit.error("ihef-OAuthLogin-Error to build url, please check the arguments."); |
||||||
|
return url; |
||||||
|
} |
||||||
|
} |
||||||
|
} |
||||||
@ -0,0 +1,11 @@ |
|||||||
|
Plugin-ihef=Sso Plugin |
||||||
|
Plugin-ihef_Group=Sso Plugin |
||||||
|
Plugin-ihef_Config_UriBase=Uri Base |
||||||
|
Plugin-ihef_Config_UriBase_Description=Uri Base |
||||||
|
Plugin-ihef_Licence_Expired=Sso Plugin Licence Expired |
||||||
|
Plugin-ihef_Config_ClientId=Client Id |
||||||
|
Plugin-ihef_Config_ClientId_Description=Client Id |
||||||
|
Plugin-ihef_Config_ClientSecret=Client Secret |
||||||
|
Plugin-ihef_Config_ClientSecret_Description=Client Secret |
||||||
|
Plugin-ihef_Config_FrUri=FR Uri |
||||||
|
Plugin-ihef_Config_FrUri_Description=FR Uri |
||||||
@ -0,0 +1,11 @@ |
|||||||
|
Plugin-ihef=\u5355\u70B9\u767B\u9646\u63D2\u4EF6 |
||||||
|
Plugin-ihef_Group=\u5355\u70B9\u767B\u9646\u63D2\u4EF6 |
||||||
|
Plugin-ihef_Config_UriBase=\u5355\u70B9\u63A5\u53E3\u5730\u5740 |
||||||
|
Plugin-ihef_Config_UriBase_Description=\u5355\u70B9\u63A5\u53E3\u5730\u5740 |
||||||
|
Plugin-ihef_Licence_Expired=\u5355\u70B9\u767B\u9646\u63D2\u4EF6\u8BB8\u53EF\u8FC7\u671F |
||||||
|
Plugin-ihef_Config_ClientId=\u5E94\u7528\u6CE8\u518CID |
||||||
|
Plugin-ihef_Config_ClientId_Description=\u5E94\u7528\u6CE8\u518CID |
||||||
|
Plugin-ihef_Config_ClientSecret=\u5E94\u7528\u6CE8\u518C\u5BC6\u7801 |
||||||
|
Plugin-ihef_Config_ClientSecret_Description=\u5E94\u7528\u6CE8\u518C\u5BC6\u7801 |
||||||
|
Plugin-ihef_Config_FrUri=\u5E06\u8F6F\u7CFB\u7EDFurl |
||||||
|
Plugin-ihef_Config_FrUri_Description=\u5E06\u8F6F\u7CFB\u7EDFurl |
||||||
Loading…
Reference in new issue