From 5e7b0ed4a154ad067cbcf4aa1a1c7cce32f9864c Mon Sep 17 00:00:00 2001
From: admin <weikou2014>
Date: 星期五, 26 四月 2024 18:02:17 +0800
Subject: [PATCH] 唯品会链接解析升级
---
fanli/src/main/java/com/yeshi/fanli/aspect/H5SignValidateAspect.java | 384 +++++++++++++++++++++++++++++-------------------------
1 files changed, 203 insertions(+), 181 deletions(-)
diff --git a/fanli/src/main/java/com/yeshi/fanli/aspect/H5SignValidateAspect.java b/fanli/src/main/java/com/yeshi/fanli/aspect/H5SignValidateAspect.java
index cd7d8f4..b38074e 100644
--- a/fanli/src/main/java/com/yeshi/fanli/aspect/H5SignValidateAspect.java
+++ b/fanli/src/main/java/com/yeshi/fanli/aspect/H5SignValidateAspect.java
@@ -1,181 +1,203 @@
-package com.yeshi.fanli.aspect;
-
-import java.io.IOException;
-import java.io.PrintWriter;
-import java.lang.reflect.Method;
-import java.util.ArrayList;
-import java.util.Collections;
-import java.util.Iterator;
-import java.util.List;
-import java.util.Map;
-
-import javax.servlet.http.HttpServletRequest;
-
-import org.aspectj.lang.ProceedingJoinPoint;
-import org.aspectj.lang.Signature;
-import org.aspectj.lang.annotation.Around;
-import org.aspectj.lang.annotation.Aspect;
-import org.aspectj.lang.reflect.MethodSignature;
-import org.springframework.stereotype.Component;
-import org.springframework.web.context.request.RequestContextHolder;
-import org.springframework.web.context.request.ServletRequestAttributes;
-import org.yeshi.utils.JsonUtil;
-
-import com.yeshi.fanli.log.LogHelper;
-import com.yeshi.fanli.util.StringUtil;
-import com.yeshi.fanli.util.annotation.RequestNoSignValidate;
-
-import net.sf.json.JSONObject;
-
-//瀹㈡埛绔帴鍙ｇ鍚嶉獙璇�
-@Component
-@Aspect
-public class H5SignValidateAspect {
-
- public static final String EDP = "execution(* com.yeshi.fanli.controller.apph5.*.*(..))";
-
- public static String KEY = "thisWarning";
-
- @Around(EDP)
- public Object appH5Around(ProceedingJoinPoint joinPoint) throws IOException {
-
- ServletRequestAttributes servletContainer = (ServletRequestAttributes) RequestContextHolder
- .getRequestAttributes();
- HttpServletRequest request = servletContainer.getRequest();
-
- Signature signature = joinPoint.getSignature();
- MethodSignature methodSignature = (MethodSignature) signature;
- Method targetMethod = methodSignature.getMethod();
- Method realMethod = null;
- try {
- realMethod = joinPoint.getTarget().getClass().getDeclaredMethod(joinPoint.getSignature().getName(),
- targetMethod.getParameterTypes());
- } catch (NoSuchMethodException e2) {
- e2.printStackTrace();
- } catch (SecurityException e2) {
- e2.printStackTrace();
- }
-
- Object[] args = joinPoint.getArgs();
- // 鍒ゆ柇鏄惁鏈夊拷鐣ラ獙璇佺殑娉ㄨВ
- if (realMethod != null && realMethod.isAnnotationPresent(RequestNoSignValidate.class)) {
- try {
- return joinPoint.proceed(args);
- } catch (Throwable e) {
- e.printStackTrace();
- try {
- LogHelper.errorDetailInfo(e, getHttpServletParams(request), request.getRequestURI().toString());
- } catch (Exception e1) {
- e1.printStackTrace();
- }
- }
- }
-
- PrintWriter out = servletContainer.getResponse().getWriter();
- String callback = request.getParameter("callback");
-
- String sign = request.getParameter("sign");
- Map<String, String> parameterMap = request.getParameterMap();
- // 鍙傛暟-銆乻ign 鍧囦笉鑳戒负绌�
- if (parameterMap == null || StringUtil.isNullOrEmpty(sign)) {
- JsonUtil.printMode(out, callback, JsonUtil.loadFalseResult("绛惧悕閿欒"));
- return null;
- }
-
- boolean isRight = signIsRight(sign, parameterMap);
-
- // 绛惧悕鏄惁姝ｇ‘
- if (isRight) {
- Object obj = null;
- try {
- obj = joinPoint.proceed(args);
- } catch (Throwable e) {
- e.printStackTrace();
- try {
- LogHelper.errorDetailInfo(e, getHttpServletParams(request), request.getRequestURI().toString());
- } catch (Exception e1) {
- e1.printStackTrace();
- }
- }
- return obj;
- } else {
- JsonUtil.printMode(out, callback, JsonUtil.loadFalseResult("绛惧悕閿欒"));
- out.close();
- LogHelper.error("H5绛惧悕閿欒:" + getHttpServletParams(request));
- return null;
- }
- }
-
- /**
- * 鑾峰彇璇锋眰鍙傛暟
- *
- * @param request
- * @return
- */
- private String getHttpServletParams(HttpServletRequest request) {
- if (request == null) {
- return "";
- }
- Map map = request.getParameterMap();
- if (map != null) {
- Iterator<String> its = map.keySet().iterator();
- JSONObject json = new JSONObject();
- while (its.hasNext()) {
- String next = its.next();
- if (map.get(next) != null) {
- Object[] objects = (Object[]) map.get(next);
- if (objects != null && objects.length > 0) {
- json.put(next, objects[0].toString());
- }
- }
- }
- return json.toString();
- }
- return "";
- }
-
- /**
- * 楠岃瘉鏄惁姝ｇ‘
- *
- * @param sign
- * @param parameterMap
- * @return
- */
- @SuppressWarnings("unchecked")
- private boolean signIsRight(String sign, Map<String, String> map) {
- int i = 0;
-
- List<String> list = new ArrayList<>();
-
- Iterator<String> iterator = map.keySet().iterator();
-
- while (iterator.hasNext()) {
- String key = iterator.next();
-
- if ("sign".equalsIgnoreCase(key) || "callback".equalsIgnoreCase(key) || "_".equalsIgnoreCase(key)) {
- continue;
- }
-
- Object value = map.get(key);
- Object[] values = (Object[]) value;
- list.add(values[0].toString());
- }
- Collections.sort(list);
-
- StringBuffer sb = new StringBuffer();
-
- for (String val : list) {
- sb.append(val);
- sb.append("###");
- }
-
- String md5 = StringUtil.Md5(sb.toString() + KEY);
-
- if (!md5.equalsIgnoreCase(sign)) {
- return false;
- } else {
- return true;
- }
- }
-
-}
+package com.yeshi.fanli.aspect;
+
+import java.io.IOException;
+import java.io.PrintWriter;
+import java.lang.reflect.Method;
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.Iterator;
+import java.util.List;
+import java.util.Map;
+
+import javax.servlet.http.HttpServletRequest;
+
+import com.yeshi.fanli.entity.SystemEnum;
+import com.yeshi.fanli.entity.accept.AcceptData;
+import com.yeshi.fanli.util.SystemInfoUtil;
+import org.aspectj.lang.ProceedingJoinPoint;
+import org.aspectj.lang.Signature;
+import org.aspectj.lang.annotation.Around;
+import org.aspectj.lang.annotation.Aspect;
+import org.aspectj.lang.reflect.MethodSignature;
+import org.springframework.stereotype.Component;
+import org.springframework.web.context.request.RequestContextHolder;
+import org.springframework.web.context.request.ServletRequestAttributes;
+import org.yeshi.utils.JsonUtil;
+
+import com.yeshi.fanli.log.LogHelper;
+import com.yeshi.fanli.util.StringUtil;
+import com.yeshi.fanli.util.annotation.RequestNoSignValidate;
+
+import net.sf.json.JSONObject;
+import org.yeshi.utils.SystemUtil;
+
+//瀹㈡埛绔帴鍙ｇ鍚嶉獙璇�
+@Component
+@Aspect
+public class H5SignValidateAspect {
+
+ public static final String EDP = "execution(* com.yeshi.fanli.controller.apph5.*.*(..))";
+
+ public static String KEY = "thisWarning";
+ public static String KEY_TEJIA = "@?,223Hbb88lll";
+
+ @Around(EDP)
+ public Object appH5Around(ProceedingJoinPoint joinPoint) throws IOException {
+ Object[] args = joinPoint.getArgs();
+ ServletRequestAttributes servletContainer = (ServletRequestAttributes) RequestContextHolder
+ .getRequestAttributes();
+ HttpServletRequest request = servletContainer.getRequest();
+
+ AcceptData acceptData = null;
+ for (Object obj : args) {
+ if (obj instanceof AcceptData) {
+ acceptData = (AcceptData) obj;
+ }
+ }
+
+
+ Signature signature = joinPoint.getSignature();
+ MethodSignature methodSignature = (MethodSignature) signature;
+ Method targetMethod = methodSignature.getMethod();
+ Method realMethod = null;
+ try {
+ realMethod = joinPoint.getTarget().getClass().getDeclaredMethod(joinPoint.getSignature().getName(),
+ targetMethod.getParameterTypes());
+ } catch (NoSuchMethodException e2) {
+ e2.printStackTrace();
+ } catch (SecurityException e2) {
+ e2.printStackTrace();
+ }
+
+ if (acceptData != null && !StringUtil.isNullOrEmpty(acceptData.getPackages())) {
+ acceptData.setSystem(SystemInfoUtil.getSystem(acceptData));
+ }
+
+ // 鍒ゆ柇鏄惁鏈夊拷鐣ラ獙璇佺殑娉ㄨВ
+ if (realMethod != null && realMethod.isAnnotationPresent(RequestNoSignValidate.class)) {
+ if (acceptData != null) {
+ acceptData.setSystem(SystemInfoUtil.getSystem(acceptData));
+ }
+
+ try {
+ return joinPoint.proceed(args);
+ } catch (Throwable e) {
+ LogHelper.errorDetailInfo(e, getHttpServletParams(request), request.getRequestURI().toString());
+ }
+ }
+
+ PrintWriter out = servletContainer.getResponse().getWriter();
+ String callback = request.getParameter("callback");
+
+ String sign = request.getParameter("sign");
+ Map<String, String[]> parameterMap = request.getParameterMap();
+ // 鍙傛暟-銆乻ign 鍧囦笉鑳戒负绌�
+ if (parameterMap == null || StringUtil.isNullOrEmpty(sign)) {
+ JsonUtil.printMode(out, callback, JsonUtil.loadFalseResult("绛惧悕閿欒"));
+ return null;
+ }
+
+ boolean isRight = signIsRight(sign, parameterMap, acceptData != null ? acceptData.getSystem() : null);
+
+ // 绛惧悕鏄惁姝ｇ‘
+ if (isRight) {
+ if (acceptData != null) {
+ acceptData.setSystem(SystemInfoUtil.getSystem(acceptData));
+ }
+
+ Object obj = null;
+ try {
+ obj = joinPoint.proceed(args);
+ } catch (Throwable e) {
+ e.printStackTrace();
+ try {
+ LogHelper.errorDetailInfo(e, getHttpServletParams(request), request.getRequestURI().toString());
+ } catch (Exception e1) {
+ e1.printStackTrace();
+ }
+ }
+ return obj;
+ } else {
+ JsonUtil.printMode(out, callback, JsonUtil.loadFalseResult("绛惧悕閿欒"));
+ out.close();
+ LogHelper.error("H5绛惧悕閿欒:" + getHttpServletParams(request));
+ return null;
+ }
+ }
+
+ /**
+ * 鑾峰彇璇锋眰鍙傛暟
+ *
+ * @param request
+ * @return
+ */
+ private String getHttpServletParams(HttpServletRequest request) {
+ if (request == null) {
+ return "";
+ }
+ Map map = request.getParameterMap();
+ if (map != null) {
+ Iterator<String> its = map.keySet().iterator();
+ JSONObject json = new JSONObject();
+ while (its.hasNext()) {
+ String next = its.next();
+ if (map.get(next) != null) {
+ Object[] objects = (Object[]) map.get(next);
+ if (objects != null && objects.length > 0) {
+ json.put(next, objects[0].toString());
+ }
+ }
+ }
+ return json.toString();
+ }
+ return "";
+ }
+
+ /**
+ * 楠岃瘉鏄惁姝ｇ‘
+ *
+ * @param sign
+ * @param map
+ * @return
+ */
+ @SuppressWarnings("unchecked")
+ private boolean signIsRight(String sign, Map<String, String[]> map, SystemEnum system) {
+ int i = 0;
+
+ List<String> list = new ArrayList<>();
+
+ Iterator<String> iterator = map.keySet().iterator();
+
+ while (iterator.hasNext()) {
+ String key = iterator.next();
+
+ if ("sign".equalsIgnoreCase(key) || "callback".equalsIgnoreCase(key) || "_".equalsIgnoreCase(key)) {
+ continue;
+ }
+
+ Object value = map.get(key);
+ Object[] values = (Object[]) value;
+ list.add(values[0].toString());
+ }
+ Collections.sort(list);
+
+ StringBuffer sb = new StringBuffer();
+
+ for (String val : list) {
+ sb.append(val);
+ sb.append("###");
+ }
+
+ String md5 = StringUtil.Md5(sb.toString() + KEY);
+ if (system != null && (system == SystemEnum.yhqjx||system == SystemEnum.hsb)) {
+ md5 = StringUtil.Md5(sb.toString() + KEY_TEJIA);
+ }
+
+ if (!md5.equalsIgnoreCase(sign)) {
+ return false;
+ } else {
+ return true;
+ }
+ }
+
+}
--
Gitblit v1.8.0