潘钊 / control_service_data_Interface · Commits

Commit 285d51e88780b712a574ef60cf70286df672f5f0

Authored by 王通
1 parent 61b9d8ce
build: skipped

1.提供给博协响应式公交数据接口

Inline Side-by-side
Showing 4 changed files with 250 additions and 219 deletions
src/main/java/com/bsth/CXFConfig.java
  View file @285d51e
... ... @@ -14,6 +14,7 @@ import com.bsth.server_rs.bigdata.BigscreenService;
14 14 import com.bsth.server_rs.departure.DepartureRestService;
15 15 import com.bsth.server_rs.destroy.DestroyDetailRestService;
16 16 import com.bsth.server_rs.directive.DirectiveRestService;
  17 +import com.bsth.server_rs.dks.BxRestService;
17 18 import com.bsth.server_rs.dks.DksRestService;
18 19 import com.bsth.server_rs.electric.ElectricService;
19 20 import com.bsth.server_rs.exception.AesExceptionMapper;
... ... @@ -139,6 +140,9 @@ public class CXFConfig {
139 140 @Autowired
140 141 private ManHoursRestService manHoursRestService;
141 142  
  143 + @Autowired
  144 + private BxRestService bxRestService;
  145 +
142 146 @Bean
143 147 public Server rsServer() {
144 148 JAXRSServerFactoryBean endpoint = new JAXRSServerFactoryBean();
... ... @@ -167,7 +171,8 @@ public class CXFConfig {
167 171 departureRestService,
168 172 dksRestService,
169 173 xxfbRestService,
170   - manHoursRestService));
  174 + manHoursRestService,
  175 + bxRestService));
171 176 endpoint.setProviders(Arrays.asList(new JacksonJsonProvider(), new AesExceptionMapper()));
172 177 //endpoint.setFeatures(Arrays.asList(new Swagger2Feature()));
173 178 endpoint.getInInterceptors().add(new AuthorizeInterceptor_IN());
... ...
src/main/java/com/bsth/StartCommand.java
  View file @285d51e
... ... @@ -7,6 +7,7 @@ import com.bsth.server_rs.man_hours.ManHoursRefreshScheduler;
7 7 import com.bsth.server_rs.schedule.real.thread.ExecSchDataRefreshThread;
8 8 import com.bsth.server_rs.schedule.real.thread.SchInOutDataRefreshThread;
9 9 import com.bsth.server_rs.thread.RfidCardInfoPersistenceThread;
  10 +import com.bsth.service.SystemParamService;
10 11 import org.springframework.beans.factory.annotation.Autowired;
11 12 import org.springframework.boot.CommandLineRunner;
12 13 import org.springframework.stereotype.Component;
... ... @@ -37,6 +38,9 @@ public class StartCommand implements CommandLineRunner{
37 38 @Autowired
38 39 ManHoursRefreshScheduler manHoursRefreshScheduler;
39 40  
  41 + @Autowired
  42 + SystemParamService systemParamService;
  43 +
40 44 @Override
41 45 public void run(String... arg0){
42 46  
... ... @@ -53,6 +57,7 @@ public class StartCommand implements CommandLineRunner{
53 57 //定时刷新基础信息
54 58 Application.mainServices.scheduleWithFixedDelay(basicDataRefreshThread, 30, 30, TimeUnit.MINUTES);
55 59 manHoursRefreshScheduler.refresh();
  60 + systemParamService.refresh();
56 61 } catch (Exception e) {
57 62 e.printStackTrace();
58 63 }
... ...
src/main/java/com/bsth/server_rs/AuthorizeInterceptor_IN.java
  View file @285d51e
1   -package com.bsth.server_rs;
2   -
3   -import com.bsth.server_rs.exception.AesException;
4   -import com.bsth.service.UserService;
5   -import org.apache.commons.lang3.StringEscapeUtils;
6   -import org.apache.cxf.interceptor.Fault;
7   -import org.apache.cxf.message.Message;
8   -import org.apache.cxf.phase.AbstractPhaseInterceptor;
9   -import org.apache.cxf.phase.Phase;
10   -import org.eclipse.jetty.util.MultiMap;
11   -import org.eclipse.jetty.util.UrlEncoded;
12   -import org.slf4j.Logger;
13   -import org.slf4j.LoggerFactory;
14   -import org.springframework.beans.BeansException;
15   -import org.springframework.context.ApplicationContext;
16   -import org.springframework.context.ApplicationContextAware;
17   -import org.springframework.stereotype.Component;
18   -
19   -import java.security.MessageDigest;
20   -import java.util.Arrays;
21   -import java.util.HashMap;
22   -import java.util.Map;
23   -import java.util.Set;
24   -
25   -/**
26   - * rest 接口授权校验（IN 输入拦截）
27   - * Created by panzhao on 2017/3/28.
28   - */
29   -@Component
30   -public class AuthorizeInterceptor_IN extends AbstractPhaseInterceptor<Message> implements ApplicationContextAware {
31   -
32   - private static final String SIGN = "sign";
33   - private static final String TIMESTAMP = "timestamp";
34   - private static final String NONCE = "nonce";
35   - private static final String PASSWORD = "password";
36   - private static final int MAX_TIME_DIFF = 1000 * 60 * 10;
37   - private static Map<String, String> pwd2nonceMap;
38   -
39   - static UserService userService;
40   -
41   - static Logger logger = LoggerFactory.getLogger(AuthorizeInterceptor_IN.class);
42   -
43   - public AuthorizeInterceptor_IN() {
44   - super(Phase.RECEIVE);
45   - }
46   -
47   - static {
48   - pwd2nonceMap = new HashMap<>();
49   - }
50   -
51   - @Override
52   - public void handleMessage(Message message) throws Fault {
53   -
54   - long t = System.currentTimeMillis();
55   - if (message.get(Message.QUERY_STRING) == null) {
56   - throw new AesException(AesException.MISS_SIGN);
57   - }
58   -
59   - //放行wadl
60   - if(message.get(Message.QUERY_STRING).equals("_wadl")
61   - && message.get(Message.PATH_INFO).equals("/webservice/rest")){
62   - return ;
63   - }
64   -
65   - //获取参数，不包括 url 路径参数 只包括?号之后的
66   - String queryString = StringEscapeUtils.unescapeHtml4(message.get(Message.QUERY_STRING).toString());
67   - MultiMap<String> params = new MultiMap<>();
68   - UrlEncoded.decodeTo(queryString, params, "utf-8");
69   - Map<String, String> map = multi2One(params);
70   -
71   - if (!map.containsKey(SIGN)) {
72   - throw new AesException(AesException.MISS_SIGN);
73   - }
74   - if (!map.containsKey(TIMESTAMP)) {
75   - throw new AesException(AesException.MISS_TIMESTAMP);
76   - }
77   -
78   - try{
79   - long timestamp = Long.parseLong(map.get(TIMESTAMP));
80   - if(Math.abs(t - timestamp) > MAX_TIME_DIFF){
81   - throw new AesException(AesException.INVALID_TIMESTAMP);
82   - }
83   - }catch(Exception e){
84   - throw new AesException(AesException.INVALID_TIMESTAMP);
85   - }
86   -
87   - if (!map.containsKey(NONCE)) {
88   - throw new AesException(AesException.MISS_NONCE);
89   - }
90   - if (!map.containsKey(PASSWORD)) {
91   - throw new AesException(AesException.MISS_PWD);
92   - }
93   -
94   - String prevNonce = pwd2nonceMap.get(map.get(PASSWORD));
95   - if(prevNonce != null && prevNonce.equals(map.get(NONCE)))
96   - throw new AesException(AesException.NO_RANDOM_NONCE);
97   -
98   - if (userService.get(map.get(PASSWORD)) == null) {
99   - throw new AesException(AesException.INVALID_PWD);
100   - }
101   -
102   - String sign = map.get(SIGN);
103   - map.remove(SIGN);
104   - String sh1 = "";
105   - try {
106   - sh1 = getSHA1(map);
107   - } catch (Exception e) {
108   - throw new AesException(AesException.SIGN_CHECK_ERROR);
109   - }
110   -
111   - if (!sign.equals(sh1)) {
112   - throw new AesException(AesException.SIGN_CHECK_FAIL);
113   - }
114   - }
115   -
116   - public static Map<String, String> multi2One(MultiMap<String> params) {
117   - Map<String, String> map = new HashMap<>();
118   - Set<String> ks = params.keySet();
119   - for (String k : ks) {
120   - map.put(k, params.getString(k));
121   - }
122   - return map;
123   - }
124   -
125   -
126   - public static String getSHA1(Map<String, String> map) throws Exception {
127   -
128   - try {
129   - String[] array = new String[map.size()];
130   - map.values().toArray(array);
131   - StringBuffer sb = new StringBuffer();
132   -
133   - // 字符串排序
134   - Arrays.sort(array);
135   - for (int i = 0; i < array.length; i++) {
136   - sb.append(array[i]);
137   - }
138   - String str = sb.toString();
139   - // SHA1签名生成
140   - MessageDigest md = MessageDigest.getInstance("SHA-1");
141   - md.update(str.getBytes());
142   - byte[] digest = md.digest();
143   -
144   - StringBuffer hexstr = new StringBuffer();
145   - String shaHex = "";
146   - for (int i = 0; i < digest.length; i++) {
147   - shaHex = Integer.toHexString(digest[i] & 0xFF);
148   - if (shaHex.length() < 2) {
149   - hexstr.append(0);
150   - }
151   - hexstr.append(shaHex);
152   - }
153   - return hexstr.toString();
154   - } catch (Exception e) {
155   - logger.error("", e);
156   - throw e;
157   - }
158   - }
159   -
160   - @Override
161   - public void setApplicationContext(ApplicationContext applicationContext) throws BeansException {
162   - userService = applicationContext.getBean(UserService.class);
163   - }
164   -}
  1 +package com.bsth.server_rs;
  2 +
  3 +import com.bsth.common.SystemParamKeys;
  4 +import com.bsth.server_rs.exception.AesException;
  5 +import com.bsth.service.SystemParamService;
  6 +import com.bsth.service.UserService;
  7 +import org.apache.commons.lang3.StringEscapeUtils;
  8 +import org.apache.cxf.interceptor.Fault;
  9 +import org.apache.cxf.message.Message;
  10 +import org.apache.cxf.phase.AbstractPhaseInterceptor;
  11 +import org.apache.cxf.phase.Phase;
  12 +import org.eclipse.jetty.util.MultiMap;
  13 +import org.eclipse.jetty.util.UrlEncoded;
  14 +import org.slf4j.Logger;
  15 +import org.slf4j.LoggerFactory;
  16 +import org.springframework.beans.BeansException;
  17 +import org.springframework.beans.factory.InitializingBean;
  18 +import org.springframework.context.ApplicationContext;
  19 +import org.springframework.context.ApplicationContextAware;
  20 +import org.springframework.stereotype.Component;
  21 +
  22 +import java.security.MessageDigest;
  23 +import java.util.Arrays;
  24 +import java.util.HashMap;
  25 +import java.util.Map;
  26 +import java.util.Set;
  27 +
  28 +/**
  29 + * rest 接口授权校验（IN 输入拦截）
  30 + * Created by panzhao on 2017/3/28.
  31 + */
  32 +@Component
  33 +public class AuthorizeInterceptor_IN extends AbstractPhaseInterceptor<Message> implements ApplicationContextAware {
  34 +
  35 + private static final String SIGN = "sign";
  36 + private static final String TIMESTAMP = "timestamp";
  37 + private static final String NONCE = "nonce";
  38 + private static final String PASSWORD = "password";
  39 + private static final int MAX_TIME_DIFF = 1000 * 60 * 10;
  40 + private static Map<String, String> pwd2nonceMap;
  41 +
  42 + static UserService userService;
  43 +
  44 + static SystemParamService systemParamService;
  45 +
  46 + static Logger logger = LoggerFactory.getLogger(AuthorizeInterceptor_IN.class);
  47 +
  48 + public AuthorizeInterceptor_IN() {
  49 + super(Phase.RECEIVE);
  50 + }
  51 +
  52 + static {
  53 + pwd2nonceMap = new HashMap<>();
  54 + }
  55 +
  56 + @Override
  57 + public void handleMessage(Message message) throws Fault {
  58 +
  59 + long t = System.currentTimeMillis();
  60 + if (message.get(Message.QUERY_STRING) == null) {
  61 + throw new AesException(AesException.MISS_SIGN);
  62 + }
  63 +
  64 + //放行wadl
  65 + if(message.get(Message.QUERY_STRING).equals("_wadl")
  66 + && message.get(Message.PATH_INFO).equals("/webservice/rest")){
  67 + return ;
  68 + }
  69 +
  70 + //获取参数，不包括 url 路径参数 只包括?号之后的
  71 + String queryString = StringEscapeUtils.unescapeHtml4(message.get(Message.QUERY_STRING).toString());
  72 + MultiMap<String> params = new MultiMap<>();
  73 + UrlEncoded.decodeTo(queryString, params, "utf-8");
  74 + Map<String, String> map = multi2One(params);
  75 +
  76 + if (!map.containsKey(SIGN)) {
  77 + throw new AesException(AesException.MISS_SIGN);
  78 + }
  79 + if (!map.containsKey(TIMESTAMP)) {
  80 + throw new AesException(AesException.MISS_TIMESTAMP);
  81 + }
  82 +
  83 + try{
  84 + long timestamp = Long.parseLong(map.get(TIMESTAMP));
  85 + if(Math.abs(t - timestamp) > MAX_TIME_DIFF){
  86 + throw new AesException(AesException.INVALID_TIMESTAMP);
  87 + }
  88 + }catch(Exception e){
  89 + throw new AesException(AesException.INVALID_TIMESTAMP);
  90 + }
  91 +
  92 + if (!map.containsKey(NONCE)) {
  93 + throw new AesException(AesException.MISS_NONCE);
  94 + }
  95 + if (!map.containsKey(PASSWORD)) {
  96 + throw new AesException(AesException.MISS_PWD);
  97 + }
  98 +
  99 + String prevNonce = pwd2nonceMap.get(map.get(PASSWORD));
  100 + if(prevNonce != null && prevNonce.equals(map.get(NONCE)))
  101 + throw new AesException(AesException.NO_RANDOM_NONCE);
  102 +
  103 + if (userService.get(map.get(PASSWORD)) == null) {
  104 + throw new AesException(AesException.INVALID_PWD);
  105 + }
  106 +
  107 + String sign = map.get(SIGN);
  108 + map.remove(SIGN);
  109 + String sh1 = "";
  110 + try {
  111 + sh1 = getSHA1(map);
  112 + } catch (Exception e) {
  113 + throw new AesException(AesException.SIGN_CHECK_ERROR);
  114 + }
  115 +
  116 + if (!sign.equals(sh1)) {
  117 + throw new AesException(AesException.SIGN_CHECK_FAIL);
  118 + }
  119 +
  120 + validate(map, message);
  121 + }
  122 +
  123 + private static void validate(Map<String, String> map, Message message) {
  124 + String limitPasswords = systemParamService.getValue(SystemParamKeys.LIMIT_PASSWORDS);
  125 + String limitUris = systemParamService.getValue(SystemParamKeys.LIMIT_URIS);
  126 + if (limitPasswords != null && limitPasswords.indexOf(String.format("%s,", map.get(PASSWORD))) > -1) {
  127 + if (limitUris != null && limitUris.indexOf(String.format("%s,", message.get(Message.REQUEST_URI))) == -1) {
  128 + throw new AesException(AesException.INVALID_URI);
  129 + }
  130 + }
  131 + }
  132 +
  133 + public static Map<String, String> multi2One(MultiMap<String> params) {
  134 + Map<String, String> map = new HashMap<>();
  135 + Set<String> ks = params.keySet();
  136 + for (String k : ks) {
  137 + map.put(k, params.getString(k));
  138 + }
  139 + return map;
  140 + }
  141 +
  142 +
  143 + public static String getSHA1(Map<String, String> map) throws Exception {
  144 +
  145 + try {
  146 + String[] array = new String[map.size()];
  147 + map.values().toArray(array);
  148 + StringBuffer sb = new StringBuffer();
  149 +
  150 + // 字符串排序
  151 + Arrays.sort(array);
  152 + for (int i = 0; i < array.length; i++) {
  153 + sb.append(array[i]);
  154 + }
  155 + String str = sb.toString();
  156 + // SHA1签名生成
  157 + MessageDigest md = MessageDigest.getInstance("SHA-1");
  158 + md.update(str.getBytes());
  159 + byte[] digest = md.digest();
  160 +
  161 + StringBuffer hexstr = new StringBuffer();
  162 + String shaHex = "";
  163 + for (int i = 0; i < digest.length; i++) {
  164 + shaHex = Integer.toHexString(digest[i] & 0xFF);
  165 + if (shaHex.length() < 2) {
  166 + hexstr.append(0);
  167 + }
  168 + hexstr.append(shaHex);
  169 + }
  170 + return hexstr.toString();
  171 + } catch (Exception e) {
  172 + logger.error("", e);
  173 + throw e;
  174 + }
  175 + }
  176 +
  177 + @Override
  178 + public void setApplicationContext(ApplicationContext applicationContext) throws BeansException {
  179 + userService = applicationContext.getBean(UserService.class);
  180 + systemParamService = applicationContext.getBean(SystemParamService.class);
  181 + }
  182 +}
... ...
src/main/java/com/bsth/server_rs/exception/AesException.java
  View file @285d51e
1   -package com.bsth.server_rs.exception;
2   -
3   -/**
4   - * Created by panzhao on 2017/3/28.
5   - */
6   -public class AesException extends RuntimeException {
7   -
8   - public final static int OK = 0;
9   - public final static int MISS_SIGN = -30001;
10   - public final static int MISS_TIMESTAMP = -30002;
11   - public final static int MISS_NONCE = -30003;
12   - public final static int NO_RANDOM_NONCE = -30005;
13   - public final static int MISS_PWD = -30004;
14   - public final static int SIGN_CHECK_ERROR = -40001;
15   - public final static int SIGN_CHECK_FAIL = -40002;
16   - public final static int INVALID_PWD = -40003;
17   - public final static int INVALID_TIMESTAMP = -40004;
18   -
19   - private int code;
20   -
21   - private static String getMessage(int code) {
22   - switch (code) {
23   - case MISS_SIGN:
24   - return "sign参数丢失";
25   - case MISS_TIMESTAMP:
26   - return "timestamp参数丢失";
27   - case MISS_NONCE:
28   - return "nonce参数丢失";
29   - case NO_RANDOM_NONCE:
30   - return "nonce参数异常";
31   - case MISS_PWD:
32   - return "密码参数丢失";
33   - case INVALID_PWD:
34   - return "无效的密码";
35   - case SIGN_CHECK_ERROR:
36   - return "签名校验时出现异常";
37   - case SIGN_CHECK_FAIL:
38   - return "无效的签名";
39   - case INVALID_TIMESTAMP:
40   - return "无效的时间戳";
41   - default:
42   - return null;
43   - }
44   - }
45   -
46   - public int getCode() {
47   - return code;
48   - }
49   -
50   - public AesException(int code) {
51   - super(getMessage(code));
52   - this.code = code;
53   - }
54   -}
  1 +package com.bsth.server_rs.exception;
  2 +
  3 +/**
  4 + * Created by panzhao on 2017/3/28.
  5 + */
  6 +public class AesException extends RuntimeException {
  7 +
  8 + public final static int OK = 0;
  9 + public final static int MISS_SIGN = -30001;
  10 + public final static int MISS_TIMESTAMP = -30002;
  11 + public final static int MISS_NONCE = -30003;
  12 + public final static int NO_RANDOM_NONCE = -30005;
  13 + public final static int MISS_PWD = -30004;
  14 + public final static int SIGN_CHECK_ERROR = -40001;
  15 + public final static int SIGN_CHECK_FAIL = -40002;
  16 + public final static int INVALID_PWD = -40003;
  17 + public final static int INVALID_TIMESTAMP = -40004;
  18 + public final static int INVALID_URI = -40005;
  19 +
  20 + private int code;
  21 +
  22 + private static String getMessage(int code) {
  23 + switch (code) {
  24 + case MISS_SIGN:
  25 + return "sign参数丢失";
  26 + case MISS_TIMESTAMP:
  27 + return "timestamp参数丢失";
  28 + case MISS_NONCE:
  29 + return "nonce参数丢失";
  30 + case NO_RANDOM_NONCE:
  31 + return "nonce参数异常";
  32 + case MISS_PWD:
  33 + return "密码参数丢失";
  34 + case INVALID_PWD:
  35 + return "无效的密码";
  36 + case SIGN_CHECK_ERROR:
  37 + return "签名校验时出现异常";
  38 + case SIGN_CHECK_FAIL:
  39 + return "无效的签名";
  40 + case INVALID_TIMESTAMP:
  41 + return "无效的时间戳";
  42 + case INVALID_URI:
  43 + return "无效的URI";
  44 + default:
  45 + return null;
  46 + }
  47 + }
  48 +
  49 + public int getCode() {
  50 + return code;
  51 + }
  52 +
  53 + public AesException(int code) {
  54 + super(getMessage(code));
  55 + this.code = code;
  56 + }
  57 +}
... ...