|
@@ -0,0 +1,165 @@
|
|
|
+package com.fcb.gateway.filter;
|
|
|
+
|
|
|
+import com.alibaba.fastjson.JSON;
|
|
|
+import com.fcb.gateway.util.MD5Utils;
|
|
|
+import lombok.extern.log4j.Log4j2;
|
|
|
+import org.apache.commons.lang3.StringUtils;
|
|
|
+import org.reactivestreams.Publisher;
|
|
|
+import org.springframework.beans.factory.annotation.Autowired;
|
|
|
+import org.springframework.cloud.gateway.filter.GatewayFilterChain;
|
|
|
+import org.springframework.cloud.gateway.filter.GlobalFilter;
|
|
|
+import org.springframework.core.Ordered;
|
|
|
+import org.springframework.core.io.buffer.DataBuffer;
|
|
|
+import org.springframework.core.io.buffer.DataBufferFactory;
|
|
|
+import org.springframework.core.io.buffer.DataBufferUtils;
|
|
|
+import org.springframework.data.redis.core.RedisTemplate;
|
|
|
+import org.springframework.http.server.reactive.ServerHttpRequest;
|
|
|
+import org.springframework.http.server.reactive.ServerHttpResponse;
|
|
|
+import org.springframework.http.server.reactive.ServerHttpResponseDecorator;
|
|
|
+import org.springframework.stereotype.Component;
|
|
|
+import org.springframework.util.CollectionUtils;
|
|
|
+import org.springframework.util.MultiValueMap;
|
|
|
+import org.springframework.web.server.ServerWebExchange;
|
|
|
+import reactor.core.publisher.Flux;
|
|
|
+import reactor.core.publisher.Mono;
|
|
|
+
|
|
|
+import java.io.UnsupportedEncodingException;
|
|
|
+import java.net.URLDecoder;
|
|
|
+import java.nio.charset.Charset;
|
|
|
+import java.util.HashMap;
|
|
|
+import java.util.List;
|
|
|
+import java.util.Map;
|
|
|
+import java.util.TreeMap;
|
|
|
+
|
|
|
+@Component
|
|
|
+@Log4j2
|
|
|
+public class AuthAndLogFilter implements GlobalFilter, Ordered {
|
|
|
+
|
|
|
+ @Autowired
|
|
|
+ private RedisTemplate redisTemplate;
|
|
|
+
|
|
|
+ @Override
|
|
|
+ public Mono<Void> filter(ServerWebExchange exchange, GatewayFilterChain chain) {
|
|
|
+
|
|
|
+ ServerHttpRequest serverHttpRequest = exchange.getRequest();
|
|
|
+ ServerHttpResponse serverHttpResponse = exchange.getResponse();
|
|
|
+ //TODO:这个后面要将日志级别改成debug
|
|
|
+ log.info("==========网关收到请求:{}==========", serverHttpRequest.getPath());
|
|
|
+ StringBuilder logBuilder = new StringBuilder();
|
|
|
+ List<String> tokenList = serverHttpRequest.getHeaders().get("token");
|
|
|
+ Map<String, Object> mapResult = new HashMap<>();
|
|
|
+ String requestUrl = exchange.getRequest().getPath().toString();
|
|
|
+
|
|
|
+ if(requestUrl.startsWith("/api/scene/camera/findBySnCode")
|
|
|
+ || requestUrl.startsWith("/api/manage/department/findById")
|
|
|
+ || requestUrl.startsWith("/api/manage/user/login")
|
|
|
+ || requestUrl.startsWith("/api/scene/app/getSceneStatusByUnicode")
|
|
|
+ || requestUrl.startsWith("/api/scene/app/getScreencapVoice")
|
|
|
+ || requestUrl.startsWith("/api/scene/getInfo")
|
|
|
+ ){
|
|
|
+ log.info("白名单路径,无需校验token");
|
|
|
+ }else{
|
|
|
+ if (!CollectionUtils.isEmpty(tokenList)) {
|
|
|
+ String token = tokenList.get(0);
|
|
|
+ if(!redisTemplate.hasKey(token)){
|
|
|
+ log.info("登录超时,需要重新登录");
|
|
|
+ mapResult.put("code", 500);
|
|
|
+ mapResult.put("message", "token已经失效,请重新登录");
|
|
|
+ DataBuffer bodyDataBuffer = serverHttpResponse.bufferFactory().wrap(JSON.toJSONString(mapResult).getBytes());
|
|
|
+ serverHttpResponse.getHeaders().add("Content-Type", "text/plain;charset=UTF-8");
|
|
|
+ return serverHttpResponse.writeWith(Mono.just(bodyDataBuffer));
|
|
|
+ }
|
|
|
+ }else{
|
|
|
+ log.info("没有上送token");
|
|
|
+ mapResult.put("code", 500);
|
|
|
+ mapResult.put("message", "token缺失");
|
|
|
+ DataBuffer bodyDataBuffer = serverHttpResponse.bufferFactory().wrap(JSON.toJSONString(mapResult).getBytes());
|
|
|
+ serverHttpResponse.getHeaders().add("Content-Type", "text/plain;charset=UTF-8");
|
|
|
+ return serverHttpResponse.writeWith(Mono.just(bodyDataBuffer));
|
|
|
+ }
|
|
|
+ }
|
|
|
+ DataBufferFactory bufferFactory = serverHttpResponse.bufferFactory();
|
|
|
+ ServerHttpResponseDecorator decoratedResponse = new ServerHttpResponseDecorator(serverHttpResponse) {
|
|
|
+ @Override
|
|
|
+ public Mono<Void> writeWith(Publisher<? extends DataBuffer> body) {
|
|
|
+ if (body instanceof Flux) {
|
|
|
+ Flux<? extends DataBuffer> fluxBody = (Flux<? extends DataBuffer>) body;
|
|
|
+ return super.writeWith(fluxBody.map(dataBuffer -> {
|
|
|
+ byte[] content = new byte[dataBuffer.readableByteCount()];
|
|
|
+ dataBuffer.read(content);
|
|
|
+ DataBufferUtils.release(dataBuffer);
|
|
|
+ String resp = new String(content, Charset.forName("UTF-8"));
|
|
|
+ logBuilder.append(",resp=").append(resp);
|
|
|
+ log.info(logBuilder.toString());
|
|
|
+ byte[] uppedContent = new String(content, Charset.forName("UTF-8")).getBytes();
|
|
|
+ return bufferFactory.wrap(uppedContent);
|
|
|
+ }));
|
|
|
+ }
|
|
|
+ return super.writeWith(body);
|
|
|
+ }
|
|
|
+ };
|
|
|
+ return chain.filter(exchange.mutate().response(decoratedResponse).build());
|
|
|
+ }
|
|
|
+
|
|
|
+ private Map<String, String> parseRequest(ServerWebExchange exchange, StringBuilder logBuilder) {
|
|
|
+ ServerHttpRequest serverHttpRequest = exchange.getRequest();
|
|
|
+ String method = serverHttpRequest.getMethodValue().toUpperCase();
|
|
|
+ logBuilder.append(method).append(",").append(serverHttpRequest.getURI());
|
|
|
+ MultiValueMap<String, String> query = serverHttpRequest.getQueryParams();
|
|
|
+ Map<String, String> params = new HashMap<>();
|
|
|
+ query.forEach((k, v) -> {
|
|
|
+ params.put(k, v.get(0));
|
|
|
+ });
|
|
|
+ if ("POST".equals(method)) {
|
|
|
+ String body = exchange.getAttributeOrDefault("cachedRequestBody", "");
|
|
|
+ if (StringUtils.isNotBlank(body)) {
|
|
|
+ logBuilder.append(",body=").append(body);
|
|
|
+ String[] kvArray = body.split("&");
|
|
|
+ for (String kv : kvArray) {
|
|
|
+ if (kv.indexOf("=") >= 0) {
|
|
|
+ String k = kv.split("=")[0];
|
|
|
+ String v = kv.split("=")[1];
|
|
|
+ if (!params.containsKey(k)) {
|
|
|
+ try {
|
|
|
+ params.put(k, URLDecoder.decode(v, "UTF-8"));
|
|
|
+ } catch (UnsupportedEncodingException e) {
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+ return params;
|
|
|
+ }
|
|
|
+
|
|
|
+ private boolean checkSignature(Map<String, String> params, ServerHttpRequest serverHttpRequest) {
|
|
|
+
|
|
|
+ String sign = params.get("sign");
|
|
|
+ if (StringUtils.isBlank(sign)) {
|
|
|
+ return false;
|
|
|
+ }
|
|
|
+ //检查签名
|
|
|
+ Map<String, String> sorted = new TreeMap<>();
|
|
|
+ params.forEach((k, v) -> {
|
|
|
+ if (!"sign".equals(k)) {
|
|
|
+ sorted.put(k, v);
|
|
|
+ }
|
|
|
+ });
|
|
|
+ StringBuilder builder = new StringBuilder();
|
|
|
+ sorted.forEach((k, v) -> {
|
|
|
+ builder.append(k).append("=").append(v).append("&");
|
|
|
+ });
|
|
|
+ String value = builder.toString();
|
|
|
+ value = value.substring(0, value.length() - 1);
|
|
|
+ if (!sign.equalsIgnoreCase(MD5Utils.MD5(value))) {
|
|
|
+ return false;
|
|
|
+ }
|
|
|
+
|
|
|
+ return true;
|
|
|
+ }
|
|
|
+
|
|
|
+ @Override
|
|
|
+ public int getOrder() {
|
|
|
+ return -20;
|
|
|
+ }
|
|
|
+}
|