Dharma 114 号会员
  •  0 回帖  •  1.6K 浏览  •  5 年前
 

维柴铸造 统一门户登录

维柴项目上线 需要用户在统一门户进行用户登录，所以需开放外部登录接口
1 applicationContext-security.xml 中添加对外接口
<s:http pattern=“/**/autoLoginController2!.” security=“none” />
<s:http pattern=“.*/controller!operate.action?.bean=autoLoginController2.” security=“none” request-matcher=“regex”/>
2 代码实现
package com.epichust.mestar.management.controller;

import com.epichust.mestar.account.service.impl.UserDetailsServiceImpl;
import com.epichust.mestar.logging.MestarLogger;
import com.epichust.mestar.platform.controller.web.DefaultController;
import com.epichust.mestar.utils.exception.MestarException;
import com.epichust.mestar.utils.path.EnvUtil;
import com.epichust.mestar.utils.security.Crypt;
import com.epichust.mestar.utils.security.MD5Util;
import com.epichust.mestar.utils.spring.SpringSecurityUtils;

import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.net.HttpURLConnection;
import java.net.URL;
import net.sf.json.JSONArray;
import net.sf.json.JSONObject;

import java.io.IOException;
import java.io.PrintStream;
import java.net.URLEncoder;
import java.util.HashSet;
import java.util.Map;
import java.util.Properties;
import java.util.Set;

import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Scope;
import org.springframework.security.core.authority.SimpleGrantedAuthority;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.security.core.context.SecurityContextImpl;
import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.stereotype.Controller;

@Scope(“prototype”)
@Controller
public class AutoLoginController2 extends DefaultController {
private static final String URLKEY_USERNAME = “_u”;
private static final String URLKEY_PASSWORD = “_p”;
private static final String URLKEY_TIME = “_t”;
private static final String URLKEY_PASSTYPE = “_pt”;
private static final String URLKEY_TOPAGE = “_to”;
private static final String PSW_TYPE_DEF = “crypt”;
private static final String PSW_TYPE_MD5 = “md5”;
private static final String PSW_TYPE_MIN = “min”;
private static final Long ENCRYPT_NUMBER = Long.valueOf(1800000L);
private static Long intervalTime;

  
/** 统一身份认证常量 **/
// 常量
//private static String COOKIE_NAME = "BBCloudBAMSession";
//private static String APP_ID = "MESCF"; // 由统一用户认证系统提供
//private static String APP_KEY = "MESCFpass"; // 由统一用户认证系统提供
//private static String REDIRECT_URL = "http://10.0.11.214:7002/apphub-webui/login"; // 统一登陆入口登陆地址

//private static String AM_REST_IS_TOKEN_VALID = "http://bimbam.bim.com:7003/bam/identity/json/isTokenValid?tokenid=";// 验证token是否有效地址
//private static String AM_REST_ATTR = "http://bimbam.bim.com:7003/bam/identity/json/attributesapi?tokenid=";

//private static String REDIRECT_URL = "http://daohangtest.weichai.com:7002/apphub-webui/login"; //统一登陆入口登陆地址

//private static String AM_REST_IS_TOKEN_VALID = "bamtest.weichai.com:7003/bam/identity/json/isTokenValid?tokenid=";//验证token是否有效地址
//private static String AM_REST_ATTR = "http://bamtest.weichai.com:7003/bam/identity/json/attributesapi?tokenid=";

private static String APP_ID = "MESCF"; //由统一用户认证系统提供

private static String APP_KEY = " MESCFpass "; //由统一用户认证系统提供

private static String COOKIE_NAME = "BBCloudBAMSession";

private static String REDIRECT_URL = "http://daohang.weichai.com";

private static String AM_REST_IS_TOKEN_VALID = "http://bam.weichai.com:7011/bam/identity/json/isTokenValid?tokenid=";

private static String AM_REST_ATTR ="http://bam.weichai.com:7011/bam/identity/json/attributesapi?tokenid=";

/************************/

@Autowired
private UserDetailsServiceImpl userDetailService;

// 统一身份 维柴提供，参考sso.jsp
private static String getText(String httpUrl) {
	String getText = "";
	HttpURLConnection connection = null;
	try {
		URL url = new URL(httpUrl);
		connection = (HttpURLConnection) url.openConnection();
		connection.setDoOutput(true);
		connection.setRequestMethod("GET");
		connection.connect();
		int rsp = connection.getResponseCode();
		if (rsp == HttpURLConnection.HTTP_OK) {
			BufferedReader in = new BufferedReader(new InputStreamReader(connection.getInputStream(), "UTF-8"));
			String inputLine;
			while ((inputLine = in.readLine()) != null) {
				getText = getText + inputLine;
			}
			in.close();
		} else if (rsp == HttpURLConnection.HTTP_UNAUTHORIZED) {
			BufferedReader in = new BufferedReader(new InputStreamReader(connection.getErrorStream(), "UTF-8"));
			String inputLine;
			while ((inputLine = in.readLine()) != null) {
				getText = getText + inputLine;
			}
			in.close();
		}
	} catch (Exception e) {
		e.printStackTrace();
	} finally {
		if (connection != null) {
			connection.disconnect();
		}
	}
	return getText;
}

private JSONArray getJsonArray(JSONObject jsonObject) {
	return jsonObject.getJSONArray("attributes").getJSONObject(0).getJSONArray("values");
}

private static String getTokenFromCookie(HttpServletRequest request) {
	String cookieToken = null;
	javax.servlet.http.Cookie[] cookies = request.getCookies();
	if (cookies != null) {
		for (Cookie cookie : cookies) {
			if (COOKIE_NAME.equalsIgnoreCase(cookie.getName())) {
				if (!"".equalsIgnoreCase(cookie.getValue())) {
					cookieToken = cookie.getValue();
				}
			}
		}
	}
	return cookieToken;
}

public void login() {

	HttpServletResponse response = this.pageData.getResponse();
	HttpServletRequest request = this.pageData.getRequest();

	MestarLogger.debug("------=-=-=-=-=-=--=-=-=-=-=-=-");
	MestarLogger.debug("------  Auto Login  -=-=-=-=-=-");
	MestarLogger.debug("------   统一身份认证         -=-=-=-=-=-");
	MestarLogger.debug("------=-=-=-=-=-=--=-=-=-=-=-=-");
	Map params = this.pageData.getParams();
	// 登录名称
	String userName =null;// (String) params.get("_u");
	/**
	if(1==1)
	{
		login2(userName);
		
		
		response.addHeader("P3P", "CP=CAO PSA OUR");
		try {
			//进入系统导航栏
			//response.sendRedirect("index-desktop.jsp");
			
			response.sendRedirect("index.jsp");
		} catch (IOException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
	}
	**/
	/*
	 * SecurityContextImpl sscontext = this.pageData.getRequest().getSession()
	 * .getAttribute("SPRING_SECURITY_CONTEXT") == null ? null :
	 * (SecurityContextImpl) this.pageData.getRequest().getSession()
	 * .getAttribute("SPRING_SECURITY_CONTEXT");
	 */

	/************ 集成统一身份认证信息 start *****************/

	// 逃生通道配置，需要各应用系统自己设置一个参数用来控制逃生通道的开启和关闭
	// 后期行方要求各应用系统走逃生通道的时候，会通过各种方式通知到各应用的运维管理员，运维管理员手动更改此参数进行逃生通道的开启
	// 例如：在配置文件中这只一个参数，该参数的值为1时开启逃生通道，获取的参数值result==1的时候，进入逃生通道
	
	
	/*
	 * String result="2"; //后期改为配置文件读取 if (result == "1") {
	 * System.out.println("######进入应急通道######"); // 应该跳转到各个应用系统的逃生通道，依据系统自身的登陆页面认证。
	 * }
	 */
	
	
	
	String accountName = "";
	String token = "";
	JSONObject jsonObjectValid;
	JSONObject jsonObjectAccount;
	Boolean isValid = false;
	String requesttoken = request.getParameter(COOKIE_NAME);
	if (requesttoken != null && !requesttoken.equals("")) {
		System.out.println("----requesttoken is: " + requesttoken + "-------------");
		token = requesttoken;
	} else {
		String cookieToken = getTokenFromCookie(request);
		System.out.println("-----cookietoken is: " + cookieToken + "-------------");
		token = cookieToken;
	}
	if (token != null && !token.equals("")) {
		String isTokenValidUrl = AM_REST_IS_TOKEN_VALID + token;
		String verifyData = getText(isTokenValidUrl);
		jsonObjectValid = JSONObject.fromObject(verifyData);
		System.out.println("----------------jsonObject is:" + jsonObjectValid + "---------------");
		if (jsonObjectValid.has("boolean")) {
			if (jsonObjectValid.getBoolean("boolean")) {
				isValid = true;
			}
			System.out.println("----------------isValid is:" + isValid + "--------------");
		}
		if (isValid) {
			String getAttrUrl = AM_REST_ATTR + token + "&attributenames=accountName&app_id=" + APP_ID + "&app_key="
					+ APP_KEY;
			String attrData = getText(getAttrUrl);
			jsonObjectAccount = JSONObject.fromObject(attrData);
			if (jsonObjectAccount.getJSONArray("attributes").isArray()) {
				JSONArray accountJsonArray = getJsonArray(jsonObjectAccount);
				accountName = accountJsonArray.getString(0);
				// 这里的得到的是应用系统的账号，后续认证逻辑应用系统自身完成，一般的处理方法是根据账号去数据库中查，
				// 若存在进入应用系统index界面，若不存在抛出异常。(依据各个应用系统的认证逻辑而定，这里只提供参考)
		
				// 已经通过维柴系统登录系统验证，不在验证本系统密码
				userName=accountName;
				//用户登录
				login2(userName);
				
				
				response.addHeader("P3P", "CP=CAO PSA OUR");
				try {
					//进入系统导航栏
					response.sendRedirect("index-desktop.jsp");
				} catch (IOException e) {
					// TODO Auto-generated catch block
					e.printStackTrace();
				}
			}
		} else {
			try {
				response.sendRedirect(REDIRECT_URL);
			} catch (IOException e) {
				// TODO Auto-generated catch block
				e.printStackTrace();
			}
		}
	} else {
		try {
			response.sendRedirect(REDIRECT_URL);
		} catch (IOException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
	}
	
	/************* 集成统一身份认证信息 end *******************/
	
	
}

private void login2(String userName) {
	UserDetails udetails = this.userDetailService.loadUserByUsername(userName);

	SecurityContextHolder.setContext(new SecurityContextImpl());
	SpringSecurityUtils.saveUserDetailsToContext(udetails, this.pageData.getRequest());
	this.pageData.getRequest().getSession().setAttribute("SPRING_SECURITY_CONTEXT",
			SecurityContextHolder.getContext());
	this.pageData.getRequest().getSession().setAttribute("CURRENT_USER_NAME", userName);
}

/**
 * public void login() { MestarLogger.debug("------=-=-=-=-=-=--=-=-=-=-=-=-");
 * MestarLogger.debug("------ Auto Login -=-=-=-=-=-");
 * MestarLogger.debug("------ 自动登陆 -=-=-=-=-=-");
 * MestarLogger.debug("------=-=-=-=-=-=--=-=-=-=-=-=-"); Map params =
 * this.pageData.getParams(); String userName = (String) params.get("_u");
 * String password = (String) params.get("_p"); String passtype = (String)
 * params.get("_pt"); String time = (String) params.get("_t");
 * //替换跳转地址为平台登录后访问首页 params.put("_too", "index.action");
 * 
 * SecurityContextImpl sscontext =
 * this.pageData.getRequest().getSession().getAttribute("SPRING_SECURITY_CONTEXT")
 * == null ? null : (SecurityContextImpl)
 * this.pageData.getRequest().getSession().getAttribute("SPRING_SECURITY_CONTEXT");
 * 
 * if ((com.epichust.mestar.utils.lang.StringUtils.isEmpty(password)) &&
 * (com.epichust.mestar.utils.lang.StringUtils.isNotEmpty(time))) { if
 * (org.apache.commons.lang.StringUtils.isNumeric(time)) { Long timeLong =
 * Long.valueOf(Long.parseLong(time) + ENCRYPT_NUMBER.longValue()); Long nowTime
 * = Long.valueOf(System.currentTimeMillis()); if (Math.abs(nowTime.longValue()
 * - timeLong.longValue()) <= intervalTime.longValue()) { if (sscontext != null)
 * { String sname = sscontext.getAuthentication().getName();
 * 
 * if (!sname.equals(userName)) { login(userName); } } else { login(userName); }
 * } } } else { String md5psw = processPassword(password, passtype); if
 * (sscontext != null) { String sname = sscontext.getAuthentication().getName();
 * 
 * if (!sname.equals(userName)) { login(userName, md5psw); } else { Object
 * creObj = sscontext.getAuthentication().getCredentials(); if ((creObj == null)
 * || (!creObj.toString().equals(md5psw))) { login(userName, md5psw); } } } else
 * { login(userName, md5psw); }
 * 
 * }
 * 
 * redirect2Page(params); }
 **/
private void login(String userName, String password) {
	UserDetails udetails = this.userDetailService.loadUserByUsername(userName);

	if ((udetails != null) && (udetails.getPassword().equals(password))) {
		SecurityContextHolder.setContext(new SecurityContextImpl());
		SpringSecurityUtils.saveUserDetailsToContext(udetails, this.pageData.getRequest());
		this.pageData.getRequest().getSession().setAttribute("SPRING_SECURITY_CONTEXT",
				SecurityContextHolder.getContext());
		this.pageData.getRequest().getSession().setAttribute("CURRENT_USER_NAME", userName);
	}
}

private void login(String userName) {
	SecurityContextHolder.setContext(new SecurityContextImpl());
	Set authorities = new HashSet();
	authorities.add(new SimpleGrantedAuthority("ROLE_USER"));
	UserDetails userdetails = new User(userName, "", true, true, true, true, authorities);
	SpringSecurityUtils.saveUserDetailsToContext(userdetails, this.pageData.getRequest());
	this.pageData.getRequest().getSession().setAttribute("SPRING_SECURITY_CONTEXT",
			SecurityContextHolder.getContext());
	this.pageData.getRequest().getSession().setAttribute("CURRENT_USER_NAME", userName);
}

private void redirect2Page(Map<String, String> params) {
	System.out.println(params);
	try {
		String contentName = this.pageData.getRequest().getContextPath();

		String topage = processURL(params);

		String url = contentName + "/" + topage;
		MestarLogger.debug("自动登陆,URL:" + url);

		this.pageData.getResponse().addHeader("P3P", "CP=CAO PSA OUR");
		this.pageData.getResponse().sendRedirect(url);
	} catch (IOException e) {
		throw new MestarException("跳转失败!", e);
	}
}

private String processPassword(String psw, String ptype) {
	String spsw = "";
	if ((ptype == null) || ("crypt".equals(ptype))) {
		String mpsw = Crypt.decryptionData2(psw);

		spsw = MD5Util.MD5(mpsw);
	} else if ("md5".equals(ptype)) {
		spsw = psw;
	} else if ("min".equals(ptype)) {
		spsw = MD5Util.MD5(psw);
	}

	return spsw;
}

private String processURL(Map<String, String> params) {
	String topage = (String) params.get("_too");
	if (topage == null) {
		topage = "";
	}
	String urlParams = map2String(params);
	if (topage.indexOf("?") < 0) {
		urlParams = urlParams.replaceFirst("&", "?");
	}
	topage = topage + urlParams;

	return topage;
}

private String map2String(Map<String, String> params) {
	String paramStr = "";
	if ((params != null) && (params.size() > 0)) {
		for (String key : params.keySet()) {
			if (("bean".equals(key)) || ("method".equals(key)) || ("_u".equals(key)) || ("_p".equals(key))
					|| ("_to".equals(key)) || ("_pt".equals(key))) {
				continue;
			}

			try {
				paramStr = paramStr + "&" + key + "=" + URLEncoder.encode((String) params.get(key), "utf-8");
			} catch (Exception e) {
			}
		}
	}
	return paramStr;
}

static {
	try {
		intervalTime = Long.valueOf(
				Long.parseLong(EnvUtil.getMestarHomeApplicationProperties().getProperty("nopsw.login.interval"))
						* 60L * 1000L);
	} catch (Exception e) {
		System.out.println("在application.properties文件中没有读取到无密码登陆的时间间隔（nopsw.login.interval），系统自动取默认值10分钟");
		intervalTime = Long.valueOf(600000L);
	}
}

}

3 对外访问连接
http://localhost:8088/prj-wcdl/autoLoginController2!login.m?BBCloudBAMSession=123
维柴统一门户使用此连接，发送请求，后台验证当前用户 成功后跳转到 mes 首页