ArcGIS Server Rest 认证过程分析
1.
http://192.168.1.220:6080/arcgis/admin/login?redirect=
Request URL: http://192.168.1.220:6080/arcgis/admin/login?redirect=
Request Method: POST
Status Code: 302 Found
Remote Address: 192.168.1.220:6080
Referrer Policy: no-referrer-when-downgrade
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Cache-Control: max-age=0
Connection: keep-alive
Content-Length: 290
Content-Type: application/x-www-form-urlencoded
Host: 192.168.1.220:6080
Origin: http://192.168.1.220:6080
Referer: http://192.168.1.220:6080/arcgis/admin/login
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.67 Safari/537.36
password: 7a138ea2a5a0612e2f4418bc80dc0b7188f26d86abbeebd24b9448f5fcd4fa6f28644f150317f493decb8d8c14b121be40fc6dbbd072cd72b15302bd4349fc91
username: 6393efc202b63592a688d9dc3722676f5b08d39bf844e30f94351ae527592e076f78424f28f85ffbaef89c2f4bb5d34b4a591cebf9ffbaca5bd9753e5cb4a36a
encrypted: true
----------------------------------
Content-Length: 0
Date: Sat, 08 Dec 2018 08:03:55 GMT
Location: http://192.168.1.220:6080/arcgis/admin/
Server:
Set-Cookie: AGS_ADMIN_TOKEN="AZ7rFFN477VEpmJFE-p6oy5zDie7gT7ra-HgydqVf3LnSFuPqhBC15cfE6aYx7Hp,AZ7rFFN477VEpmJFE-p6o9m-1pBqmpRtHWAl5-x4GO32g-SaSt78UH1ZktLfjOQHPZdJ1WhX2Jor0YLhQuCvSB8BAKiq9csAZEimJZ9J47A."; Version=1; HttpOnly
Set-Cookie: AGS_PRIVILEGE_TOKEN=jV6AxlQ-vteRvEcY7CKHsJlUjjr3owLQ-kAb6ySF0rJ5O3zTeHkQxyyv37PMnaPtvCfgfd-WoaZvfr4ilnZPrg..; HttpOnly
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
2.
http://192.168.1.220:6080/arcgis/admin/
Request URL: http://192.168.1.220:6080/arcgis/admin/
Request Method: GET
Status Code: 200 OK
Remote Address: 192.168.1.220:6080
Referrer Policy: no-referrer-when-downgrade
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Cache-Control: max-age=0
Connection: keep-alive
Cookie: AGS_ADMIN_TOKEN="AZ7rFFN477VEpmJFE-p6oy5zDie7gT7ra-HgydqVf3LnSFuPqhBC15cfE6aYx7Hp,AZ7rFFN477VEpmJFE-p6o9m-1pBqmpRtHWAl5-x4GO32g-SaSt78UH1ZktLfjOQHPZdJ1WhX2Jor0YLhQuCvSB8BAKiq9csAZEimJZ9J47A."; AGS_PRIVILEGE_TOKEN=jV6AxlQ-vteRvEcY7CKHsJlUjjr3owLQ-kAb6ySF0rJ5O3zTeHkQxyyv37PMnaPtvCfgfd-WoaZvfr4ilnZPrg..
Host: 192.168.1.220:6080
Referer: http://192.168.1.220:6080/arcgis/admin/login
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.67 Safari/537.36
----------------------------------
Content-Length: 4246
Content-Type: text/html;charset=utf-8
Date: Sat, 08 Dec 2018 08:03:55 GMT
Server:
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
3.
http://192.168.1.220:6080/arcgis/admin/machines
Request URL: http://192.168.1.220:6080/arcgis/admin/machines
Request Method: GET
Status Code: 200 OK
Remote Address: 192.168.1.220:6080
Referrer Policy: no-referrer-when-downgrade
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Connection: keep-alive
Cookie: AGS_ADMIN_TOKEN="AZ7rFFN477VEpmJFE-p6o1ZRCoo5aZoVNEGRr9HMX1IS7eFUMLoa-LpZKnqH2hEh,AZ7rFFN477VEpmJFE-p6o5VBUs_C5VWdtXxT865HRc_Nmkq7gSm82hl7SI3zs0JF3cWGgFyWN2Z9XYeT-QvjABYKP3fk42Q8mWQ2CIqh-T4."; AGS_PRIVILEGE_TOKEN=bGan0Kz6aO88LXMZsAEkfOow92lIXG3-Hur-7bYa5FZAjeOv_Kn6V2WqIgQxv10-4K0LwDACPDNx8ojUFnF75w..
Host: 192.168.1.220:6080
Referer: http://192.168.1.220:6080/arcgis/admin/
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.67 Safari/537.36
-----------------------------------
Content-Length: 2566
Content-Type: text/html;charset=utf-8
Date: Sat, 08 Dec 2018 09:25:32 GMT
Server:
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
4.获取认证
public List<String> getNewAdminToken(ServerCredentialsInfo serverCredentialsInfo, String url) throws IOException { String token = ""; List<String> cookieTokenList = new LinkedList<String>(); HttpPost httpPost = null; try { HttpClient httpClient = HttpClients.createDefault(); //HttpClientBuilder.create(). // new DefaultHttpClient(); String tokenServiceUri = serverCredentialsInfo.getTokenServiceUri(); httpPost = new HttpPost(tokenServiceUri); // 构造消息头 //httpPost.setHeader("Referer", "*"); httpPost.setHeader("Content-Type", "application/x-www-form-urlencoded"); // // List<NameValuePair> param = new ArrayList<NameValuePair>(); param.add(new BasicNameValuePair("username",serverCredentialsInfo.getUsername())); param.add(new BasicNameValuePair("password",serverCredentialsInfo.getPassword())); param.add(new BasicNameValuePair("encrypted","false")); param.add(new BasicNameValuePair("f","json")); UrlEncodedFormEntity postEntity = new UrlEncodedFormEntity(param, "UTF-8"); httpPost.setEntity(postEntity); // HttpResponse response = httpClient.execute(httpPost); // 检验返回码 int statusCode = response.getStatusLine().getStatusCode(); if(statusCode != HttpStatus.SC_OK){ System.out.println("请求出错: "+statusCode); }else{ System.out.println("---------------------------------------------------------------"); for(Header header : response.getAllHeaders()){ System.out.println("Key : " + header.getName() + " ,Value : " + header.getValue()); if(header.getName().equals("Set-Cookie")){ String cookieValue = header.getValue(); cookieTokenList.add(cookieValue.split(";")[0]); } } System.out.println("---------------------------------------------------------------"); String content = EntityUtils.toString(response.getEntity()); System.out.println(content); } } catch (Exception e) { e.printStackTrace(); }finally{ if(httpPost != null){ try { httpPost.releaseConnection(); Thread.sleep(500); } catch (InterruptedException e) { e.printStackTrace(); } } } return cookieTokenList; }
5.获取服务器信息
public static String httpRequest(String url, Map<String, String> headerMap, Map<String, String> cookieMap, Map<String, String> parameterMap) throws IOException { String content = null; /* * HttpPost httpPost = null; try { HttpClient httpClient = * HttpClients.createDefault(); httpPost = new HttpPost(url); // 构造消息头 * //httpPost.setHeader("Referer", "*"); List<Header> headerList = * getHeader(headerMap); headerList.add(new BasicHeader("Content-Type", * "application/x-www-form-urlencoded")); Header[] * headers=headerList.toArray(new Header[headerList.size()]); * httpPost.setHeaders(headers); // // List<NameValuePair> param = * getParam(parameterMap); param.add(new BasicNameValuePair("f","json")); * UrlEncodedFormEntity postEntity = new UrlEncodedFormEntity(param, "UTF-8"); * httpPost.setEntity(postEntity); // HttpResponse response = * httpClient.execute(httpPost); * * // 检验返回码 int statusCode = response.getStatusLine().getStatusCode(); * if(statusCode != HttpStatus.SC_OK){ System.out.println("请求出错: "+statusCode); * }else{ System.out.println( * "---------------------------------------------------------------"); * for(Header header : response.getAllHeaders()){ System.out.println("Key : " + * header.getName() + " ,Value : " + header.getValue()); } System.out.println( * "---------------------------------------------------------------"); content = * EntityUtils.toString(response.getEntity()); System.out.println(content); } } * catch (Exception e) { e.printStackTrace(); }finally{ if(httpPost != null){ * try { httpPost.releaseConnection(); Thread.sleep(500); } catch * (InterruptedException e) { e.printStackTrace(); } } } */ URL urlObj = new URL(url); HttpURLConnection httpURLConnection = (HttpURLConnection) urlObj.openConnection(); try { if (httpURLConnection instanceof HttpsURLConnection) { HttpsURLConnection httpsURLConnection = (HttpsURLConnection) httpURLConnection; SSLContext sc = SSLContext.getInstance("SSL"); sc.init(null, new TrustManager[] { new TrustAnyTrustManager() }, new java.security.SecureRandom()); httpsURLConnection.setSSLSocketFactory(sc.getSocketFactory()); httpsURLConnection.setHostnameVerifier(new TrustAnyHostnameVerifier()); } } catch (NoSuchAlgorithmException | KeyManagementException e) { e.printStackTrace(); } httpURLConnection.setConnectTimeout(5000); httpURLConnection.setReadTimeout(10000); httpURLConnection.setRequestMethod("POST"); // Iterator<Entry<String, String>> it = headerMap.entrySet().iterator(); while (it.hasNext()) { Entry<String, String> parmEntry = it.next(); httpURLConnection.setRequestProperty(parmEntry.getKey(), parmEntry.getValue()); } // String formData = "f=json"; it = parameterMap.entrySet().iterator(); while (it.hasNext()) { Entry<String, String> parmEntry = it.next(); formData += "&" + parmEntry.getKey() + "=" + URLEncoder.encode(parmEntry.getValue(), "UTF-8"); } byte[] bytes = formData.getBytes("UTF-8"); // if it is a POST request httpURLConnection.setRequestMethod("POST"); httpURLConnection.setDoOutput(true); OutputStream outputStream = httpURLConnection.getOutputStream(); outputStream.write(bytes); // InputStream inputStream = httpURLConnection.getInputStream(); Reader reader = new BufferedReader(new InputStreamReader(inputStream, "UTF-8")); StringBuilder contentStringBuilder = new StringBuilder(); char[] buffer = new char[5000]; int n; while ((n = reader.read(buffer)) != -1) { contentStringBuilder.append(buffer, 0, n); } reader.close(); content = contentStringBuilder.toString(); return content; }
6.前端接口
@PostMapping(path = "/generateAdminToken") // @ResponseBody public ResultInfo generateAdminToken(@RequestParam String id) { ResultInfo resultInfo = new ResultInfo(); try { GisServer gisServer = gisServerService.getById(id); TokenUtil tokenUtil = new TokenUtil(); ServerCredentialsInfo serverCredentialsInfo = new ServerCredentialsInfo(gisServer.getUrl()); serverCredentialsInfo.setUsername(gisServer.getUsername()); serverCredentialsInfo.setPassword(gisServer.getPassword()); serverCredentialsInfo.setTokenServiceUri(gisServer.getUrl()+"/admin/login"); List<String> token = tokenUtil.getNewAdminToken(serverCredentialsInfo, gisServer.getUrl()+"/admin/login"); resultInfo.setStatus(token == null ? "fail" : "success"); resultInfo.setData(token); // if (result) { // // } } catch (Exception e) { e.printStackTrace(); resultInfo.setStatus("fail"); resultInfo.setInfo(ExceptionUtil.getStackMsg(e)); } return resultInfo; } @PostMapping(path = "/machines") // @ResponseBody public ResultInfo getMachines(@RequestParam String id) { ResultInfo resultInfo = new ResultInfo(); try { GisServer gisServer = gisServerService.getById(id); TokenUtil tokenUtil = new TokenUtil(); ServerCredentialsInfo serverCredentialsInfo = new ServerCredentialsInfo(gisServer.getUrl()); serverCredentialsInfo.setUsername(gisServer.getUsername()); serverCredentialsInfo.setPassword(gisServer.getPassword()); serverCredentialsInfo.setTokenServiceUri(gisServer.getUrl()+"/admin/login"); List<String> tokens = tokenUtil.getNewAdminToken(serverCredentialsInfo, gisServer.getUrl()+"/admin/login"); // Map<String, String> headerMap = new HashMap<String, String>(); headerMap.put("Cookie", StringUtils.join(tokens, ";")); // for(String token : tokens) { // // } Map<String, String> cookieMap = new HashMap<String, String>(); Map<String, String> parameterMap = new HashMap<String, String>(); headerMap.put("f", "json"); String content = ProxyUtil.httpRequest(gisServer.getUrl()+"/admin/machines", headerMap, cookieMap, parameterMap); resultInfo.setStatus(content == null ? "fail" : "success"); resultInfo.setData(content); // if (result) { // // } } catch (Exception e) { e.printStackTrace(); resultInfo.setStatus("fail"); resultInfo.setInfo(ExceptionUtil.getStackMsg(e)); } return resultInfo; }
