package com.gk.firework.Config.Oauth2;
|
|
import cn.hutool.core.util.ObjectUtil;
|
import cn.hutool.core.util.StrUtil;
|
import com.alibaba.fastjson.JSON;
|
import com.gk.firework.Domain.AuthorizationInfo;
|
import com.gk.firework.Domain.Utils.CommonUtil;
|
import com.gk.firework.Domain.Utils.Constants;
|
import com.gk.firework.Domain.Utils.Msg;
|
import com.gk.firework.Domain.Vo.UserVo;
|
import com.gk.firework.Service.AuthorizationService;
|
import com.gk.firework.Service.UserService;
|
import io.jsonwebtoken.Claims;
|
import org.slf4j.Logger;
|
import org.slf4j.LoggerFactory;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.http.HttpHeaders;
|
import org.springframework.http.HttpStatus;
|
import org.springframework.util.AntPathMatcher;
|
|
import javax.servlet.*;
|
import javax.servlet.http.HttpServletRequest;
|
import javax.servlet.http.HttpServletResponse;
|
import java.io.IOException;
|
import java.io.PrintWriter;
|
import java.util.List;
|
import java.util.Map;
|
|
/**
|
* AccessToken filter
|
*
|
* @author zhangby
|
* @date 2019-05-20 20:32
|
*/
|
public class AccessTokenFilter implements Filter {
|
private final Logger logger = LoggerFactory.getLogger(this.getClass());
|
|
/**
|
* redis service
|
*/
|
IRedisService redisService = SpringContextUtil.getBean(IRedisService.class);
|
|
UserService userService = SpringContextUtil.getBean(UserService.class);
|
|
AuthorizationService authorizationService = SpringContextUtil.getBean(AuthorizationService.class);
|
|
/**
|
* do filter
|
*
|
* @param servletRequest servletRequest
|
* @param servletResponse servletResponse
|
* @param filterChain filterChain
|
* @throws IOException IOException
|
* @throws ServletException ServletException
|
*/
|
@Override
|
public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
|
HttpServletRequest request = (HttpServletRequest) servletRequest;
|
HttpServletResponse response = (HttpServletResponse) servletResponse;
|
response.setHeader("Access-Control-Allow-Origin", request.getHeader("Origin"));
|
Msg msg = new Msg();
|
try {
|
// filter url && !request.getMethod().equals("OPTIONS")
|
if (urlMatcher(request.getRequestURI(), Constants.FILTER_EXCLUDE_PATH)){
|
String token = request.getHeader(HttpHeaders.AUTHORIZATION);
|
if (null != token && !token.equals("undefined")) {
|
/** 解析token */
|
Claims claims = CommonUtil.parseJWT(token);
|
if (ObjectUtil.isNotNull(claims)) {
|
//设置当前登录用户
|
System.setProperty(Constants.CURRENT_USER_ID, claims.get("user_id").toString());
|
try {
|
//获取redis 查询token是否有效 [jti]
|
String tokenKey = StrUtil.format(RedisKeyEnum.AUTH_TOKEN.getKey(), claims.getId());
|
Object userInfo = redisService.get(tokenKey);
|
if (ObjectUtil.isNotNull(userInfo)) {
|
Map map = JSON.parseObject(userInfo.toString(), Map.class);
|
UserVo userVo = userService.selectUserVoByName(map.get("username").toString());
|
if (null == userVo) {
|
msg.setCode("100");
|
msg.setMessage("用户不存在");
|
returnJson(response, msg);
|
return;
|
}
|
if (userVo.getIssale() == 1){
|
if (userVo.getStatus()!=null && userVo.getStatus() != 1){
|
msg.setCode("100");
|
msg.setMessage("用户已失效");
|
returnJson(response, msg);
|
return;
|
}
|
if (userVo.getExpiredate() != null && userVo.getExpiredate().getTime() < System.currentTimeMillis()){
|
msg.setCode("100");
|
msg.setMessage("用户已超期");
|
returnJson(response, msg);
|
return;
|
}
|
|
Object loginObj = map.get("logintime");
|
Object authObj = map.get("auth");
|
if (loginObj != null && authObj != null){
|
//通过auth查询授权码最后登录时间
|
AuthorizationInfo authInfo = authorizationService.selectByUser(userVo.getCompanynumber(),authObj.toString());
|
if (authInfo == null){
|
msg.setCode("100");
|
msg.setMessage("授权码无效");
|
returnJson(response, msg);
|
return;
|
}
|
if (authInfo.getLasttime().getTime() > Long.parseLong(loginObj.toString())){
|
redisService.set(tokenKey, userInfo, 0L);
|
msg.setCode("100");
|
msg.setMessage("登录失效,请重新登录");
|
returnJson(response, msg);
|
return;
|
}
|
}
|
}
|
//更新登录超时时间
|
redisService.set(tokenKey, userInfo, 60L*60L*18L);
|
} else {
|
logger.info("998：登录超时，无效认证");
|
msg.setCode("100");
|
msg.setMessage("登录超时，无效认证");
|
returnJson(response, msg);
|
return;
|
}
|
} catch (Exception e) {
|
logger.info("401：非授权访问，无效的token");
|
}
|
} else {
|
logger.info("500: 账户或密码不正确,登录失败");
|
}
|
}
|
else if(request.getMethod().equals("OPTIONS")) {
|
response.setHeader("Access-Control-Allow-Origin", request.getHeader("Origin"));
|
response.setHeader("Access-Control-Allow-Credentials", "true");
|
response.setHeader("Access-Control-Allow-Methods", "POST, GET, PATCH, DELETE, PUT, OPTIONS");
|
response.setHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, X-Auth-Token, Authorization");
|
response.setHeader("Access-Control-Max-Age","3600");
|
response.setStatus(HttpStatus.OK.value());
|
return;
|
}
|
else {
|
logger.info("500: token不存在");
|
}
|
}
|
} catch (Exception e) {
|
e.printStackTrace();
|
//系统异常
|
msg.setCode("100");
|
msg.setMessage("系统异常请稍后重试");
|
returnJson(response, msg);
|
response.setStatus(HttpStatus.OK.value());
|
}
|
filterChain.doFilter(servletRequest, servletResponse);
|
//过滤器结束之后销毁
|
System.clearProperty(Constants.CURRENT_USER_ID);
|
}
|
|
|
@Override
|
public void init(FilterConfig filterConfig) throws ServletException {
|
}
|
|
@Override
|
public void destroy() {
|
|
}
|
|
/**
|
* 认证是否需要，验证session url
|
*
|
* @param real_url
|
* @return
|
*/
|
private boolean urlMatcher(String real_url, String pathFilter) {
|
AntPathMatcher antPathMatcher = new AntPathMatcher();
|
/** 验证添加项url */
|
if (StrUtil.isNotBlank(pathFilter)) {
|
for (String path : pathFilter.split(",")) {
|
if (antPathMatcher.match(path.trim(), real_url.trim())) {
|
return false;
|
}
|
}
|
}
|
return true;
|
}
|
|
/**
|
* 返回url
|
*
|
* @param response
|
* @param json
|
*/
|
private void returnJson(HttpServletResponse response, Msg msg) {
|
PrintWriter writer = null;
|
response.setCharacterEncoding("UTF-8");
|
response.setContentType("text/html; charset=utf-8");
|
response.setHeader("Access-Control-Allow-Credentials", "true");
|
response.setHeader("Access-Control-Allow-Methods", "POST, GET, PATCH, DELETE, PUT, OPTIONS");
|
response.setHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, X-Auth-Token, Authorization");
|
response.setHeader("Access-Control-Max-Age","3600");
|
try {
|
writer = response.getWriter();
|
writer.print(JSON.toJSON(msg));
|
} catch (IOException e) {
|
} finally {
|
if (writer != null) {
|
writer.close();
|
}
|
}
|
}
|
}
|
