package com.stylefeng.guns.modular.system.auth;
|
|
import org.apache.tomcat.util.codec.binary.Base64;
|
|
import javax.servlet.http.HttpServletRequest;
|
import java.util.*;
|
|
/**
|
*
|
* 接口鉴权工具类
|
*
|
* @author gwx 2017-12-23
|
*
|
*/
|
public class AuthenticationKit {
|
public static final String utf8="UTF-8";
|
|
/**
|
* 返回64 位 token
|
*
|
* @param key 自定义安全字符
|
* @return
|
* @throws Exception
|
*/
|
public static String getToken(String key) throws Exception {
|
// 随机生成 32位字符
|
String salt = HashKit.generateSaltForSha256();
|
// 获取当前时间
|
long cur = System.currentTimeMillis();
|
// 生成64位token
|
String access_token = getToken256(key, salt, cur);
|
return access_token;
|
}
|
|
/**
|
* 返回64 位 token
|
*
|
* @param key
|
* @return
|
* @throws Exception
|
*/
|
public static String getToken256(String key, String salt, long cur) throws Exception {
|
// 生成64位token
|
String access_token = HashKit.sha256(salt + cur + key);
|
return access_token;
|
}
|
|
/**
|
* 返回到秒
|
*
|
* @return
|
*/
|
public static String createTimestamp() {
|
long l = System.currentTimeMillis();
|
return Long.toString(l / 1000);
|
}
|
|
/**
|
* 返回noce 不带 短杠"-"
|
*
|
* @return
|
*/
|
public static String createNonceStr() {
|
return getUUID();
|
}
|
|
public static String getUUID() {
|
UUID uuid = UUID.randomUUID();
|
String str = uuid.toString();
|
str = str.replaceAll("-", "");
|
return str;
|
}
|
|
/**
|
* 组装路径
|
*
|
* @param params
|
* @return
|
*/
|
public static String localSignParam(Map<String, String> params) {
|
return localSignUrl(null, params, false);
|
}
|
|
|
/**
|
* 组装签名路径
|
* @param url
|
* @param params
|
* @return
|
*/
|
public static String localSignUrl(String url, Map<String, String> params, boolean urlEncode) {
|
StringBuilder strBuilder = new StringBuilder();
|
// if(StringUtils.isNotBlank(url) && url.lastIndexOf("?")==-1){
|
// strBuilder.append(url).append("?");
|
// }
|
|
Set es = params.entrySet();//所有参与传参的参数按照accsii排序（升序）
|
Iterator it = es.iterator();
|
while(it.hasNext()) {
|
Map.Entry entry = (Map.Entry)it.next();
|
String k = (String)entry.getKey();
|
Object v = entry.getValue();
|
if(null != v && !"".equals(v)) {
|
strBuilder.append(k + "=" + v + "&");
|
}
|
}
|
return strBuilder.substring(0, strBuilder.length() - 1);
|
|
// for (String key : params.keySet()) {
|
// if (params.get(key) != null) {
|
// String lowerKey = key.toLowerCase();
|
// String encodeKey = lowerKey;
|
// String encodedValue = params.get(key);
|
// if (urlEncode){
|
// encodeKey = UrlEncoderUtils.encode(lowerKey);
|
// encodedValue = UrlEncoderUtils.encode(encodedValue);
|
// }
|
// if (!seeOne) {
|
// seeOne = true;
|
// } else {
|
// strBuilder.append("&");
|
// }
|
// strBuilder.append(encodeKey).append("=").append(encodedValue);
|
// }
|
// }
|
// return strBuilder.toString();
|
}
|
|
|
/**
|
* 加密签名路径生成签名
|
*
|
* @param signUrl
|
* /token?appid=12345×tamp=1512440267&nonce=12345
|
* @param encryptKey
|
* @return
|
* @throws Exception
|
*/
|
public static String signUrlEncode(String signUrl, String encryptKey) throws Exception {
|
byte[] signByte = HMACSHA1.HmacSHA1Encrypt(signUrl, encryptKey);
|
String localSign = Base64.encodeBase64String(signByte);
|
return localSign;
|
}
|
|
/**
|
* 返回鉴权 签名路径
|
*
|
* @param req
|
* @return
|
*/
|
public static String getSignUrl(HttpServletRequest req) {
|
return getSignUrl(req,"");
|
}
|
|
/**
|
* 服务端 获取 客户端请求 组装验证签名
|
* @param req
|
* @param delParams 移除不相关 的签名参数
|
* @return
|
*/
|
public static String getSignUrl(HttpServletRequest req, String... delParams) {
|
// 获取相对的访问路径
|
String url = req.getServletPath();
|
Map<String, String> paramMap = packageRequestGetParams(req);
|
if (paramMap.size() > 0) {
|
// 删除
|
for (int i = 0, len = delParams.length; i < len; i++) {
|
paramMap.remove(delParams[i]);
|
}
|
return localSignUrl(url, paramMap, false);
|
}
|
return null;
|
}
|
|
|
/**
|
* 组装签名路径 客户端测试用
|
* @param url api访问地址 "/apid"
|
* @param appid
|
* @return
|
*/
|
public static String getSignUrl(String url, String appid, Map<String, String> queryParas) {
|
Map<String, String> params = new TreeMap<String, String>();
|
params.put("appid", appid);
|
params.put("nonce", createNonceStr());
|
params.put("timestamp", createTimestamp());
|
if(queryParas!=null && queryParas.size()>0){
|
params.putAll(queryParas);
|
}
|
return localSignUrl(url, params, false);
|
}
|
|
/**
|
* 组装签名路径 客户端测试用
|
* @param url api访问地址 "/apid"
|
* @param appid
|
* @return
|
*/
|
public static String getSignUrl(String url, String appid) {
|
return getSignUrl(url, appid, "");
|
}
|
|
/**
|
*
|
* @param url
|
* @param appid
|
* @param params
|
* @return
|
*/
|
public static String getSignUrl(String url, String appid, String params) {
|
String urlTmp = getSignUrl(url, appid, new HashMap<String,String>());
|
return urlTmp + UrlEncoderUtils.encode(params);
|
}
|
|
/**
|
* 解析get参数返回treemap
|
* @param req
|
* @return
|
*/
|
public static Map<String, String> packageRequestGetParams(
|
HttpServletRequest req) {
|
Map<String, String> paramMap = new TreeMap<String, String>();
|
Enumeration pNames = req.getParameterNames();
|
while (pNames.hasMoreElements()) {
|
String key = (String) pNames.nextElement();
|
String value = req.getParameter(key);
|
paramMap.put(key, value);
|
}
|
return paramMap;
|
}
|
|
}
|
