饿了么绘图，添加口碑

admin

2020-05-19 744594ef1a2f530fc3e86ea9dc48b62247f79420

 fanli/src/main/java/com/yeshi/fanli/aspect/SignValidateAspect.java

@@ -1,6 +1,5 @@
package com.yeshi.fanli.aspect;



import java.io.IOException;

import java.io.PrintWriter;

import java.util.ArrayList;

import java.util.Arrays;

@@ -14,23 +13,26 @@
import org.aspectj.lang.ProceedingJoinPoint;

import org.aspectj.lang.annotation.Around;

import org.aspectj.lang.annotation.Aspect;

import org.springframework.core.annotation.Order;

import org.springframework.stereotype.Component;

import org.springframework.web.context.request.RequestContextHolder;

import org.springframework.web.context.request.ServletRequestAttributes;

import org.yeshi.utils.JsonUtil;



import com.yeshi.fanli.entity.accept.AcceptData;

import com.yeshi.fanli.log.LogHelper;

import com.yeshi.fanli.util.Constant;

import com.yeshi.fanli.util.StringUtil;

import org.yeshi.utils.JsonUtil;

import com.yeshi.fanli.util.ThreadUtil;



import net.sf.json.JSONObject;



//客户端接口签名验证

@Component

@Aspect

@Order(2)

public class SignValidateAspect {

   public static final String EDP = "execution(* com.yeshi.fanli.controller.client.*.*(..))";

   public static final String EDP = "execution(* com.yeshi.fanli.controller.client.*.*.*(..))";



   public static String KEY = "";



@@ -39,7 +41,7 @@
   }



   @Around(EDP)

   public Object testAround(ProceedingJoinPoint joinPoint) throws IOException {

   public Object testAround(ProceedingJoinPoint joinPoint) throws Throwable {

      Object[] args = joinPoint.getArgs();

      PrintWriter out = null;

      ServletRequestAttributes servletContainer = (ServletRequestAttributes) RequestContextHolder

@@ -52,6 +54,8 @@
      for (Object obj : args) {

         if (obj instanceof AcceptData) {

            acceptData = (AcceptData) obj;

         } else if (obj instanceof HttpServletRequest) {

            request = (HttpServletRequest) obj;

         }

      }

      boolean isRight = true;

@@ -64,8 +68,8 @@


      if ((acceptData.getPlatform() != null && acceptData.getPlatform().equalsIgnoreCase("android")

            && acceptData.getVersion() != null && Integer.parseInt(acceptData.getVersion()) > 21)

            || (acceptData.getPlatform().equalsIgnoreCase("ios") && acceptData.getVersion() != null

                  && Integer.parseInt(acceptData.getVersion()) > 24)) {

            || (acceptData.getPlatform() != null && acceptData.getPlatform().equalsIgnoreCase("ios")

                  && acceptData.getVersion() != null && Integer.parseInt(acceptData.getVersion()) > 24)) {

         isRight = signIsRight(request);

      } else if (acceptData.getPackages().startsWith("com.haicaojie")) {

         isRight = signIsRight(request);

@@ -81,26 +85,49 @@
      // 签名是否正确

      if (isRight) {

         // 判断签名超时

         // if (Math.abs((Long.parseLong(acceptData.getTime()) -

         // System.currentTimeMillis())) > 1000 * 60 * 10) {

         // JSONObject data = new JSONObject();

         // data.put("code", -2);

         // data.put("msg", "时间错误");

         // out.print(data);

         // out.close();

         // return null;

         // }

         if (Math.abs((Long.parseLong(acceptData.getTime()) - System.currentTimeMillis())) > 1000 * 60 * 10) {

            JSONObject data = new JSONObject();

            data.put("code", -2);

            data.put("msg", "时间错误");

            out.print(data);

            out.close();

            return null;

         }



         final String url = request.getRequestURI();

         @SuppressWarnings("unchecked")

         final Map<String, Object> params = request.getParameterMap();

         ThreadUtil.run(new Runnable() {

            @Override

            public void run() {

               // 记录请求日志

               LogHelper.requestInfo(url, params);

            }

         });



         Object obj = null;

         try {

            long startTime = System.currentTimeMillis();

            obj = joinPoint.proceed(args);

         } catch (Throwable e) {

            e.printStackTrace();

            try {

               LogHelper.errorDetailInfo(e, getHttpServletParams(request), request.getRequestURI().toString());

            } catch (Exception e1) {

               e1.printStackTrace();

            final long responseTime = System.currentTimeMillis() - startTime;

            // 记录大于2s的请求

            if (responseTime >= 2000) {

               ThreadUtil.run(new Runnable() {



                  @Override

                  public void run() {

                     LogHelper.requestTime(url, params, responseTime);

                  }

               });



            }



         } catch (Throwable e) {

            LogHelper.errorDetailInfo(e, getHttpServletParams(request), request.getRequestURI().toString());

            if (!Constant.IS_TEST)

               out.print(JsonUtil.loadFalseResult(90009, "服务器内部错误"));

            else

               throw e;

         }

         return obj;

      } else {

@@ -109,7 +136,7 @@
         data.put("msg", "签名错误");

         out.print(data);

         out.close();

         LogHelper.error("签名错误:" + getHttpServletParams(request));

         LogHelper.error("签名错误:" + request.getRequestURI() + "-" + getHttpServletParams(request));

         return null;

      }

   }

@@ -168,9 +195,9 @@
      while (its.hasNext()) {

         String key = its.next();



         if (key.equalsIgnoreCase("callback")) {

            fromWEB = true;

         }

         // if (key.equalsIgnoreCase("callback")) {

         // fromWEB = true;

         // }



         if (key.equalsIgnoreCase("sign") || key.equalsIgnoreCase("callback") || key.equalsIgnoreCase("_")) {

            continue;

@@ -196,4 +223,25 @@
      }

   }



   public static boolean signIsRight(JSONObject json) {

      List<String> list = new ArrayList<>();

      for (Iterator<String> its = json.keySet().iterator(); its.hasNext();) {

         String key = its.next();

         if (!key.equalsIgnoreCase("sign"))

            list.add(key + "=" + json.optString(key));

      }

      Collections.sort(list);

      String str = "";

      for (String st : list) {

         str += st + "&";

      }

      String sign = StringUtil.Md5(str + KEY);

      if (sign.equalsIgnoreCase(json.optString("sign"))) {

         return true;

      } else {

         return false;

      }



   }



}