From 796b44ea813a1133beae4f3a67f1c0263510c0c7 Mon Sep 17 00:00:00 2001 From: 13693261870 <252740454@qq.com> Date: 星期日, 17 十一月 2024 09:45:07 +0800 Subject: [PATCH] 1 --- src/main/java/com/moon/server/service/sys/ProxyService.java | 130 +++++++++++++++++++++---------------------- 1 files changed, 64 insertions(+), 66 deletions(-) diff --git a/src/main/java/com/moon/server/service/sys/ProxyService.java b/src/main/java/com/moon/server/service/sys/ProxyService.java index f5c0de2..8fa7c8e 100644 --- a/src/main/java/com/moon/server/service/sys/ProxyService.java +++ b/src/main/java/com/moon/server/service/sys/ProxyService.java @@ -23,12 +23,8 @@ import java.util.TimerTask; import java.util.concurrent.TimeUnit; -/** - * 浠g悊鏈嶅姟绫� - * @author WWW - * @date 2023-07-11 - */ @Service +@SuppressWarnings("ALL") public class ProxyService { @Resource RedisService redisService; @@ -44,33 +40,24 @@ public static final String ILLEGAL_RESOURCE = JSON.toJSONString(new ResponseMsg<String>(HttpStatus.UNAUTHORIZED, "娌℃湁璧勬簮璁块棶鏉冮檺")); - /** - * URL浠g悊 - */ public void proxyUrl(String token, int resId, boolean isRest, HttpServletRequest req, HttpServletResponse res) throws Exception { - // 3.鑾峰彇鐢ㄦ埛 UserEntity ue = getUser(req, res, token); if (null == ue) { return; } - // 9.鑾峰彇璧勬簮瀹炰綋 ResEntity entity = getResEntity(ue, resId); - if (null == entity || StaticData.THREE != entity.getType() || StringHelper.isNull(entity.getProxy()) || StringHelper.isNull(entity.getUrl())) { + if (null == entity || StaticData.I1 > entity.getStatus() || StringHelper.isNull(entity.getProxy()) || StringHelper.isNull(entity.getUrl())) { WebHelper.writeStr2Page(res, ILLEGAL_RESOURCE); return; } - insertLog(req, ue, resId); - String url = getSourceUrl(req, entity, token); + String url = getUrl(req, ue, entity, token, isRest); res.setHeader("token", token); forward(req, res, entity, url); } - /** - * 鑾峰彇鐢ㄦ埛 - */ private UserEntity getUser(HttpServletRequest req, HttpServletResponse res, String token) { String key = RedisCacheKey.permsProxy(token); Object obj = redisService.get(key); @@ -92,35 +79,22 @@ return ue; } - /** - * 妫�鏌� - */ private boolean check(HttpServletRequest req, HttpServletResponse res, UserEntity ue, String token) { - // 4.鑾峰彇IP String ip = WebHelper.getIpAddress(req); if (StringHelper.isEmpty(ip)) { return WebHelper.writeStr2Page(res, AuthInterceptor.IP_NULL); } - - // 5.妫�鏌ラ粦鍚嶅崟 if (!checkBlackList(ip, req)) { return WebHelper.writeStr2Page(res, AuthInterceptor.BLACK_LIST); } - - // 6.admin璺宠繃鏉冮檺妫�娴� if (StaticData.ADMIN.equals(ue.getUid())) { return true; } - - // 7.妫�鏌ョ櫧鍚嶅崟 if (!checkWhiteList(ip, req)) { - // 妫�鏌P涓�鑷存�� if (!checkIpSource(ip, token)) { return WebHelper.writeStr2Page(res, AuthInterceptor.ILLEGAL_TOKEN); } } - - // 8.妫�鏌ョ敤鎴稩D鏄惁绂佺敤 if (sysService.tokenService.isUidDisable(ue)) { return WebHelper.writeStr2Page(res, AuthInterceptor.USER_LOCK); } @@ -128,24 +102,15 @@ return true; } - /** - * 妫�鏌ラ粦鍚嶅崟 - */ private boolean checkBlackList(String ip, HttpServletRequest request) { List<String> blackList = sysService.blacklistService.selectIpList(1); if (blackList == null || blackList.isEmpty()) { return true; } - if (blackList.contains(ip)) { - return false; - } - return true; + return !blackList.contains(ip); } - /** - * 妫�鏌ョ櫧鍚嶅崟 - */ private boolean checkWhiteList(String ip, HttpServletRequest request) { List<String> whiteList = sysService.blacklistService.selectIpList(2); if (whiteList == null || whiteList.isEmpty()) { @@ -155,25 +120,17 @@ return whiteList.contains(ip); } - /** - * 妫�鏌P涓�鑷存�� - */ private boolean checkIpSource(String ip, String token) { TokenEntity te = sysService.tokenService.getEntityByToken(token); - return te.getIp().equals(ip); + return StaticData.I1 == te.getType() || te.getIp().equals(ip); } - /** - * 妫�鏌ヨ祫婧愭潈闄� - */ private ResEntity getResEntity(UserEntity ue, int resId) { - String uid = StaticData.ADMIN.equals(ue.getUid()) ? null : ue.getUid(); - List<ResEntity> rs = permsService.selectRes(uid); + List<ResEntity> rs = StaticData.ADMIN.equals(ue.getUid()) ? permsService.selectAllRes() : permsService.selectRes(ue.getUid()); if (null == rs || rs.isEmpty()) { return null; } - // List<ResEntity> list = rs.stream().filter(resEntity -> resEntity.getId() == resId).collect(Collectors.toList()) for (ResEntity entity : rs) { if (resId == entity.getId()) { @@ -184,9 +141,6 @@ return null; } - /** - * 鎻掑叆鏃ュ織 - */ private void insertLog(HttpServletRequest req, UserEntity ue, int resId) { String ip = WebHelper.getIpAddress(req); @@ -206,11 +160,7 @@ }); } - /** - * 鑾峰彇璇锋眰绫诲埆 - */ private int getRequestType(String method) { - // 璇锋眰绫伙細1-GET锛�2-POST锛�3-PUT锛�4-DELETE锛�5-TRACE锛�6-HEAD锛�7-OPTIONS锛�8-CONNECT'; switch (method) { case "GET": return 1; @@ -233,24 +183,72 @@ } } - /** - * 鑾峰彇鍘熷Url - */ - private String getSourceUrl(HttpServletRequest req, ResEntity entity, String token) { + private String getUrl(HttpServletRequest req, UserEntity ue, ResEntity entity, String token, boolean isRest) { String proxyUrl = entity.getProxy().replace("{token}", token); int end = req.getRequestURL().indexOf(proxyUrl) + proxyUrl.length(); - String url = entity.getUrl() + req.getRequestURL().substring(end); - if (null != req.getQueryString()) { - url = url + (entity.getUrl().contains("?") ? "&" : "?") + req.getQueryString(); + String url = entity.getUrl().trim() + req.getRequestURL().substring(end); + // category锛�0-鍏朵粬锛�1-GisServer锛�2-GeoServer锛�3-鏁扮畝 + if (StaticData.I2 == entity.getCategory()) { + url = getGeoServerUrl(req, ue, entity, url); + } else if (StaticData.I3 == entity.getCategory()) { + if (null != req.getQueryString()) { + url = url + (url.contains("?") ? "&" : "?") + req.getQueryString(); + } + if (isRest) { + url = url.replace("/v6/wmts/", "/v6/rest/"); + } + if (!StringHelper.isNull(entity.getArgs())) { + url = url + (url.contains("?") ? "&" : "?") + entity.getArgs(); + } } return url; } - /** - * 杞彂璇锋眰 - */ + private String getGeoServerUrl(HttpServletRequest req, UserEntity ue, ResEntity entity, String url) { + if (null == req.getQueryString()) { + return url; + } + + String str = req.getQueryString(); + boolean isLower = str.contains(StaticData.SERVICE); + String layersKey = isLower ? StaticData.LAYERS : StaticData.LAYERS.toUpperCase(); + String layers = req.getParameter(layersKey); + String request = req.getParameter(isLower ? StaticData.REQUEST : StaticData.REQUEST.toUpperCase()); + if (!StaticData.GET_CAPABILITIES.equals(request)) { + int start = str.indexOf(layersKey); + int end = str.indexOf("&", start); + layers = filterGeoLayers(ue, layers); + + str = str.replace(str.substring(start, end > -1 ? end : str.length()), layersKey + "=" + layers); + } else { + List<String> tabs = StaticData.ADMIN.equals(ue.getUid()) ? permsService.selectAllTabs() : permsService.selectTabs(ue.getUid()); + entity.setTab(null == tabs ? "" : StringHelper.join(tabs, ",")); + entity.setBak(StaticData.GET_CAPABILITIES); + } + + return url + (url.contains("?") ? "&" : "?") + str; + } + + private String filterGeoLayers(UserEntity ue, String layers) { + List<String> tabs = StaticData.ADMIN.equals(ue.getUid()) ? permsService.selectAllTabs() : permsService.selectTabs(ue.getUid()); + if (null == tabs || tabs.isEmpty() || StringHelper.isEmpty(layers)) { + return ""; + } + + StringBuilder sb = new StringBuilder(); + String[] strs = layers.split(StaticData.COMMA); + for (String str : strs) { + if (tabs.contains(str)) { + sb.append(str).append(","); + } + } + sb.deleteCharAt(sb.length() - 1); + + return sb.toString(); + } + private void forward(HttpServletRequest request, HttpServletResponse response, ResEntity entity, String url) throws Exception { HttpHelper httpHelper = new HttpHelper(); httpHelper.service(request, response, entity, url); -- Gitblit v1.9.3