package com.hailian.interceptors;
import java.io.BufferedReader;
import java.io.IOException;
import java.util.Map;
import java.util.regex.Pattern;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.util.EntityUtils;
import org.codehaus.jackson.JsonParseException;
import org.codehaus.jackson.map.JsonMappingException;
import org.codehaus.jackson.map.ObjectMapper;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.context.annotation.Configuration;
import org.springframework.util.StringUtils;
import org.springframework.web.method.HandlerMethod;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;
import com.hailian.annotation.AuthPower;
import com.hailian.common.TokenConstants;
import com.hailian.conf.Constant;
import com.hailian.enums.PlatformType;
import com.hailian.exception.AppWebException;
import com.hailian.utils.JWTUtil;
/**
* Package: com.hailian.interceptor.AppInterceptors
* Description: 描述
* Copyright: Copyright (c) 2017
*
* @author lv bin
* Date: 2018/1/19 14:11
* Version: V1.0.0
*/
@Configuration
public class AppInterceptors extends WebMvcConfigurerAdapter{
// 路径中版本的前缀， 这里用 /v[1-9]/的形式
private final static Pattern VERSION_PREFIX_PATTERN = Pattern.compile("v(\\d+)/");
@Value("${app.version}")
private String APP_VERSION;
/**
* 默认请求request header 头部存放 token 名称
*/
public static String DEFAULT_TOKEN_NAME = "X-Token";
/**
* 参数加密值
*/
public static String DEFAULT_AUTH_NAME = "X-Sign";
public static String DEFAULT_PLATFORM = "X-Platform";
public static String REQUEST_TIME = "http_request_time";
@Override
public void addInterceptors(InterceptorRegistry registry) {
/*registry.addInterceptor(new HandlerInterceptorAdapter() {
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response,
Object handler) throws Exception {
request.setAttribute(REQUEST_TIME, new Date());
return true;
}
}).addPathPatterns("/*","/user/**");*/
registry.addInterceptor(new ApiInterceptor()).addPathPatterns("/api/**");
registry.addInterceptor(new TokenInterceptor()).addPathPatterns("/bigSreen/**");
}
/**
* 单点登录
* @author lzg
*/
private class TokenInterceptor extends HandlerInterceptorAdapter{
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
response.setCharacterEncoding("utf-8");
request.setCharacterEncoding("utf-8");
String targetUrl = "http://t.c.haier.net/login?url=http://dvp.haier.net";
//检验session
HttpSession session = request.getSession();
String userCode = (String) session.getAttribute(Constant.PORTAL_USER_690);
//若session为空检验token
if(StringUtils.isEmpty(userCode)) {
String tokenStr = request.getParameter("token");
if(StringUtils.isEmpty(tokenStr)) {response.sendRedirect(targetUrl);}
HttpPost post = new HttpPost("http://dvp.haier.net/userServiceYonghong/checkUserToken?token="+tokenStr);
CloseableHttpClient client = HttpClients.createDefault();
CloseableHttpResponse response1 = null;
String rest = "";
try {
response1 = client.execute(post);
rest = EntityUtils.toString(response1.getEntity(), "utf-8");
//返回结果形如 {"result":"success","userAlias":"王健","userId":"A0000662"}
System.out.println(rest);
if(StringUtils.isEmpty(rest)) {response.sendRedirect(targetUrl);}
//获取信息账户
ObjectMapper objectMapper = new ObjectMapper();
Map<String,String> maps = objectMapper.readValue(rest, Map.class);
for (String string : maps.keySet()) { System.out.println(string+":"+maps.get(string)); }
String status = maps.get("result");
String userAlias = maps.get("userAlias");
userCode = maps.get("userId");
if("error".equals(status)||StringUtils.isEmpty(status)||StringUtils.isEmpty(userAlias)||StringUtils.isEmpty(userCode)) {
response.reset();response.sendRedirect(targetUrl);
}
//设置session
request.getSession().setAttribute(Constant.PORTAL_USER_690,userCode);
} catch (JsonParseException e) { e.printStackTrace();
response.sendRedirect(targetUrl);
} catch (JsonMappingException e) { e.printStackTrace();
response.sendRedirect(targetUrl);
} catch (IOException e) { e.printStackTrace();
} catch (Exception e) { e.printStackTrace();
}
}
return true;
}
}
/**
* api 拦截器
*/
private class ApiInterceptor extends HandlerInterceptorAdapter{
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
String uri = request.getRequestURI();
boolean avoidVersion = false;
boolean avoidLogin = true;
boolean avoidPower = true;
boolean avoidSign = true;
boolean avoidPlatform = true;
if(handler instanceof HandlerMethod) {
HandlerMethod method = (HandlerMethod) handler;
AuthPower authPower = method.getMethodAnnotation(AuthPower.class);
avoidVersion = authPower.avoidVersion();
avoidLogin = authPower.avoidLogin();
avoidPower = authPower.avoidPower();
avoidSign = authPower.avoidSign();
avoidPlatform=authPower.avoidPlatform();
}
String platform = request.getHeader(TokenConstants.X_PLATFORM);
if(!avoidPlatform&&(StringUtils.isEmpty(platform) || PlatformType.getTypeByPlatform(platform) == null)){
throw new AppWebException("平台类型异常：只能为PC、ANDROID、IOS");
}
String version = "/api/".concat(APP_VERSION);
// 版本号校验
if(!avoidVersion && !uri.startsWith(version)){
throw new AppWebException("版本参数异常，当前版本"+version);
}
String tokenAuth = request.getHeader(DEFAULT_TOKEN_NAME);
// 登录校验
if(!avoidLogin){
// token 是否为空 以及redis中获取token是否存在
if(StringUtils.isEmpty(tokenAuth)){
throw new AppWebException("X-Token不能为空！");
}
String userId = JWTUtil.getUserId(tokenAuth);
if(userId == null){
throw new AppWebException("登陆超时，请重新登陆！");
}
// 延长token时间
//RedisUtils.put(TokenConstants.CURRENT_LOGIN_TOKEN, tokenAuth, String.valueOf(userId), TokenConstants.TOKEN_EXPIRES_TIME);
}
if(!avoidPower){
// 需要判断用户是否有权访问接口 -- db内配置用户角色接口访问权限
throw new AppWebException("没有访问权限!");
}
String signAuth = request.getHeader(DEFAULT_AUTH_NAME);
if(!avoidSign&&StringUtils.isEmpty(signAuth)){
// 判断是否需要校验参数规则
throw new AppWebException("非法参数加密值 !");
}
/*if(request instanceof BodyReaderHttpServletRequestWrapper){
BodyReaderHttpServletRequestWrapper requestWrapper = (BodyReaderHttpServletRequestWrapper) request;
// 请求body不为空
BufferedReader reader = requestWrapper.getReader();
StringBuilder sb = new StringBuilder();
String line = null;
while ((line = reader.readLine()) != null) {
sb.append(line);
}
System.out.println("--------------------------" + sb.toString());
}*/
return super.preHandle(request, response, handler);
}
}
}
