package com.qxueyou.scc.web;
|
|
import java.io.IOException;
|
|
import javax.servlet.Filter;
|
import javax.servlet.FilterChain;
|
import javax.servlet.FilterConfig;
|
import javax.servlet.ServletException;
|
import javax.servlet.ServletRequest;
|
import javax.servlet.ServletResponse;
|
import javax.servlet.annotation.WebFilter;
|
import javax.servlet.http.HttpServletRequest;
|
import javax.servlet.http.HttpServletResponse;
|
import javax.servlet.http.HttpSession;
|
|
import org.apache.commons.lang3.ArrayUtils;
|
import org.apache.logging.log4j.LogManager;
|
import org.apache.logging.log4j.Logger;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.boot.context.properties.EnableConfigurationProperties;
|
import org.springframework.data.redis.core.StringRedisTemplate;
|
|
import com.alibaba.druid.util.StringUtils;
|
import com.alibaba.fastjson.JSONObject;
|
import com.qxueyou.scc.base.model.Result;
|
import com.qxueyou.scc.base.model.UserInfoWrapper;
|
import com.qxueyou.scc.base.service.ILicenseService;
|
import com.qxueyou.scc.config.SccConfig;
|
import com.qxueyou.scc.sys.service.IAuthorizeService;
|
|
@WebFilter(urlPatterns = "/*", filterName = "authorizeFilter")
|
@EnableConfigurationProperties(SccConfig.class)
|
public class AuthorizeFilter implements Filter {
|
private final Logger log = LogManager.getLogger("AuthorizeFilter");
|
|
@Autowired
|
private IAuthorizeService authorizeService;
|
|
@Autowired
|
private SccConfig sccConfig;
|
|
@Autowired
|
ILicenseService licenseService;
|
|
@Autowired
|
private StringRedisTemplate stringRedisTemplate;
|
|
private String[] excludeUrls;
|
|
/**
|
* 非法请求返回结果
|
*/
|
private String forbidden = JSONObject.toJSONString(new Result(false,Result.CODE_FORBIDDEN));
|
|
private String forbiddenOfInvalidLicense = JSONObject.toJSONString(new Result(false,Result.CODE_FORBIDDEN,"license invalid"));
|
|
@Override
|
public void init(FilterConfig filterConfig) throws ServletException {
|
// 从配置文件中获取excludeUrls
|
String excludeUrl = sccConfig.getExcludeUrl();
|
|
if (!StringUtils.isEmpty(excludeUrl)) {
|
excludeUrls = excludeUrl.split(";");
|
String root = filterConfig.getServletContext().getContextPath();
|
for (int i = 0; i < excludeUrls.length; i++) {
|
excludeUrls[i] = excludeUrls[i].replace("\n", "").replace("\t", "").replace(" ", "");
|
excludeUrls[i] = root.concat(excludeUrls[i]);
|
}
|
}
|
|
log.debug("license info: valid:{0},companyName:{1},productName:{2},expiredDate{3}",
|
licenseService.isValid(),
|
licenseService.getCustomerName(),
|
licenseService.getProductName(),
|
licenseService.getExpiredDate()
|
);
|
}
|
|
@Override
|
public void doFilter(ServletRequest request, ServletResponse response, FilterChain filterChain)
|
throws IOException, ServletException {
|
|
HttpServletRequest httpRequest = (HttpServletRequest) request;
|
HttpServletResponse httpResponse = (HttpServletResponse) response;
|
|
String url = httpRequest.getRequestURI();
|
log.debug("request URI:" + url);
|
|
// 是否略过
|
if (ArrayUtils.isEmpty(excludeUrls) || isExclude(httpRequest)) {
|
filterChain.doFilter(httpRequest, httpResponse);
|
return;
|
}
|
|
//是否合法
|
// if(!licenseService.isValid()) {
|
// log.debug("license invalid");
|
//// forbiddenAsLicense(httpResponse);
|
//// return;
|
//// }
|
|
if (!addClientInfo(httpRequest)) {
|
log.debug("非法请求:" + httpRequest.getRequestURI());
|
forbidden(httpResponse);
|
return;
|
}
|
filterChain.doFilter(request, response);
|
}
|
|
private void forbidden(HttpServletResponse httpResponse) {
|
try {
|
httpResponse.getWriter().append(forbidden);
|
} catch (IOException e) {
|
log.error(e,e);
|
}
|
|
}
|
|
private void forbiddenAsLicense(HttpServletResponse httpResponse) {
|
try {
|
httpResponse.getWriter().append(forbiddenOfInvalidLicense);
|
} catch (IOException e) {
|
log.error(e,e);
|
}
|
|
}
|
|
|
|
/**
|
* 绑定客户端信息
|
*
|
* @param httpRequest
|
* @param cookieKey
|
* @return
|
*/
|
private boolean addClientInfo(HttpServletRequest httpRequest) {
|
HttpSession session = httpRequest.getSession(true);
|
UserInfoWrapper wrapper = (UserInfoWrapper) session.getAttribute(UserInfoWrapper.SESSION_USER_INFO_KEY);
|
|
if (wrapper == null) {
|
return false;
|
}
|
|
//获取用户对应的sessionId是否与保存在redis中的一致，如果不一致，如果不一致则跳转到登录页面
|
//String currOnlineSessinId = (String) stringRedisTemplate.opsForHash().get(UserInfoWrapper.REDIS_USER_ONLINE_MAP_KEY, wrapper.getInfo(UserInfoWrapper.INF_USER_ID));
|
|
//如果不存在,则返回
|
// if(!session.getId().equalsIgnoreCase(currOnlineSessinId)){
|
// session.invalidate();
|
// return false;
|
// }
|
|
authorizeService.addClientInfo(wrapper);
|
return true;
|
}
|
|
/**
|
* 是否过滤掉
|
*
|
* @param httpRequest
|
* @return
|
*/
|
private boolean isExclude(HttpServletRequest httpRequest) {
|
String url = httpRequest.getRequestURI();
|
for (String excludeUrl : excludeUrls) {
|
if (url.startsWith(excludeUrl)) {
|
return true;
|
}
|
}
|
return false;
|
}
|
|
|
@Override
|
public void destroy() {
|
System.out.println("destroy authorizeFilter");
|
}
|
|
}
|
