You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
82 lines
2.6 KiB
82 lines
2.6 KiB
package com.eco.plugin.xx.grsso.filter; |
|
|
|
import com.eco.plugin.xx.grsso.config.xxPluginSimpleConfig; |
|
import com.eco.plugin.xx.grsso.utils.EncryptUtils; |
|
import com.eco.plugin.xx.grsso.utils.FRUtils; |
|
import com.eco.plugin.xx.grsso.utils.ResponseUtils; |
|
import com.eco.plugin.xx.grsso.utils.Utils; |
|
import com.fr.decision.fun.impl.AbstractGlobalRequestFilterProvider; |
|
import com.fr.json.JSONObject; |
|
import com.fr.plugin.context.PluginContexts; |
|
import com.fr.record.analyzer.EnableMetrics; |
|
import com.fr.stable.fun.Authorize; |
|
|
|
import javax.servlet.FilterChain; |
|
import javax.servlet.http.HttpServletRequest; |
|
import javax.servlet.http.HttpServletResponse; |
|
|
|
@EnableMetrics |
|
@Authorize(callSignKey = "com.eco.plugin.xx.grsso") |
|
public class SSOFilter extends AbstractGlobalRequestFilterProvider { |
|
@Override |
|
public String filterName() { |
|
return "grssoFilter"; |
|
} |
|
|
|
@Override |
|
public String[] urlPatterns() { |
|
return new String[]{"/*"}; |
|
} |
|
|
|
@Override |
|
public void doFilter(HttpServletRequest req, HttpServletResponse res, FilterChain chain ){ |
|
|
|
if(PluginContexts.currentContext().isAvailable()){ |
|
xxPluginSimpleConfig psc = xxPluginSimpleConfig.getInstance(); |
|
String param = psc.getParamname(); |
|
String token = req.getParameter(param); |
|
|
|
if(Utils.isNullStr(token)){ |
|
release(req,res,chain); |
|
return ; |
|
} |
|
|
|
String plainToken = null; |
|
try { |
|
plainToken = EncryptUtils.rsaDecrypt(token,psc.getSecret()); |
|
} catch (Exception e) { |
|
ResponseUtils.failedResponse(res,"token解密异常!"+e.getMessage()); |
|
return ; |
|
} |
|
|
|
JSONObject json = new JSONObject(plainToken); |
|
Long timestamp = json.getLong("timestamp"); |
|
Long now = System.currentTimeMillis(); |
|
|
|
FRUtils.FRLogInfo("timestamp:"+timestamp+";now:"+now); |
|
|
|
if((now - timestamp)/1000 > Long.parseLong(psc.getTimeout())){ |
|
ResponseUtils.failedResponse(res,"token超时，请重新生成！"); |
|
return ; |
|
} |
|
|
|
String username = json.getString("username"); |
|
String url = FRUtils.getAllUrl(req); |
|
url = Utils.removeParam(url,param); |
|
url = Utils.encodeCH(url); |
|
FRUtils.login(req,res,username,url); |
|
} |
|
|
|
release(req,res,chain); |
|
} |
|
|
|
//放行拦截器 |
|
private void release(HttpServletRequest req, HttpServletResponse res, FilterChain chain) { |
|
try{ |
|
chain.doFilter(req,res); |
|
}catch (Exception e){ |
|
FRUtils.FRLogInfo("拦截失败"); |
|
} |
|
} |
|
} |
|
|
|
|