|
|
|
|
@ -3,17 +3,20 @@ package com.dsideal.gw.Handler;
|
|
|
|
|
import cn.hutool.json.JSONObject;
|
|
|
|
|
import cn.hutool.json.JSONUtil;
|
|
|
|
|
import com.dsideal.gw.GwApplication;
|
|
|
|
|
import com.dsideal.gw.Util.CommonUtil;
|
|
|
|
|
import com.dsideal.gw.Util.JwtUtil;
|
|
|
|
|
import com.jfinal.handler.Handler;
|
|
|
|
|
import com.jfinal.kit.StrKit;
|
|
|
|
|
import com.jfinal.upload.MultipartRequest;
|
|
|
|
|
import com.jfinal.upload.UploadFile;
|
|
|
|
|
import io.jsonwebtoken.Claims;
|
|
|
|
|
import okhttp3.*;
|
|
|
|
|
|
|
|
|
|
import javax.servlet.http.Cookie;
|
|
|
|
|
import javax.servlet.http.HttpServletRequest;
|
|
|
|
|
import javax.servlet.http.HttpServletResponse;
|
|
|
|
|
import java.io.*;
|
|
|
|
|
import java.util.Enumeration;
|
|
|
|
|
import java.util.List;
|
|
|
|
|
import java.util.Objects;
|
|
|
|
|
import java.util.*;
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* 测试用例：
|
|
|
|
|
@ -93,11 +96,66 @@ public class RouterHandler extends Handler {
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
//如果是白名单，不检查jwt,否则需要检查jwt
|
|
|
|
|
if (GwApplication.whiteSet.contains(servletPath)) {
|
|
|
|
|
// TODO
|
|
|
|
|
System.out.println("白名单内链接，不检查jwt!");
|
|
|
|
|
} else {
|
|
|
|
|
System.out.println("不包含在白名单内链接，检查jwt!");
|
|
|
|
|
if (!GwApplication.whiteSet.contains(servletPath)) {
|
|
|
|
|
//是不是通过了登录检查？
|
|
|
|
|
boolean canPass = true;
|
|
|
|
|
|
|
|
|
|
//1、存在Cookie,检查是不是正确的Cookie
|
|
|
|
|
Cookie[] cookies = req.getCookies();
|
|
|
|
|
String identity_id = null;
|
|
|
|
|
String person_id = null;
|
|
|
|
|
String bureau_id = null;
|
|
|
|
|
String token = null;
|
|
|
|
|
if (cookies != null) {
|
|
|
|
|
for (Cookie cookie : cookies) {
|
|
|
|
|
if ("identity_id".equals(cookie.getName())) {
|
|
|
|
|
String cookieValue = cookie.getValue();
|
|
|
|
|
identity_id = cookieValue;
|
|
|
|
|
}
|
|
|
|
|
if ("person_id".equals(cookie.getName())) {
|
|
|
|
|
person_id = cookie.getValue();
|
|
|
|
|
}
|
|
|
|
|
if ("bureau_id".equals(cookie.getName())) {
|
|
|
|
|
bureau_id = cookie.getValue();
|
|
|
|
|
}
|
|
|
|
|
if ("token".equals(cookie.getName())) {
|
|
|
|
|
token = cookie.getValue();
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
//如果没有找到Cookie，那么直接不通过
|
|
|
|
|
if (StrKit.isBlank(token) || StrKit.isBlank(bureau_id) || StrKit.isBlank(identity_id) || StrKit.isBlank(person_id)) {
|
|
|
|
|
canPass = false;
|
|
|
|
|
}
|
|
|
|
|
//找到了Cookie,那是不是合法的Cookie呢？需要检查一下Token
|
|
|
|
|
if (canPass) {
|
|
|
|
|
Map<String, Object> loginMap = new HashMap<>();
|
|
|
|
|
loginMap.put("identity_id", identity_id);
|
|
|
|
|
loginMap.put("person_id", person_id);
|
|
|
|
|
loginMap.put("bureau_id", bureau_id);
|
|
|
|
|
String cookie_token = CommonUtil.Sign(loginMap, GwApplication.PropKit.get("jwt.CookieMd5SingPwd"));
|
|
|
|
|
if (!token.equals(cookie_token)) {//根据Cookie中的Token，和计算出来的Token是否一致
|
|
|
|
|
canPass = false;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
if (!canPass) {
|
|
|
|
|
//如果不存在Cookie,那么检查是不是存在JWT,并且JWT是不是正确的
|
|
|
|
|
if (req.getHeader("Authorization") != null) {
|
|
|
|
|
String jwtToken = req.getHeader("Authorization");
|
|
|
|
|
Claims claims = JwtUtil.getClaims(jwtToken);
|
|
|
|
|
if (claims == null) {
|
|
|
|
|
canPass = true;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
if(!canPass){
|
|
|
|
|
JSONObject jo = new JSONObject();
|
|
|
|
|
jo.put("success", false);
|
|
|
|
|
jo.put("message", "登录已过期，请重新登录！");
|
|
|
|
|
renderJson(res, jo);
|
|
|
|
|
isHandled[0] = true; //停止filter
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
//路由到哪个微服务
|
|
|
|
|
|
