package com.doumee.config.interfaceencryption;
|
|
import com.alibaba.fastjson.JSONObject;
|
import com.doumee.config.annotation.EncryptionReq;
|
import com.doumee.config.annotation.EncryptionResp;
|
import com.doumee.config.interfaceencryption.tool.RSAEncrypt;
|
import com.doumee.core.utils.AESUtils;
|
import org.slf4j.Logger;
|
import org.slf4j.LoggerFactory;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.core.MethodParameter;
|
import org.springframework.http.HttpHeaders;
|
import org.springframework.http.HttpInputMessage;
|
import org.springframework.http.converter.HttpMessageConverter;
|
import org.springframework.util.StreamUtils;
|
import org.springframework.web.bind.annotation.ControllerAdvice;
|
import org.springframework.web.servlet.mvc.method.annotation.RequestBodyAdvice;
|
|
import java.io.ByteArrayInputStream;
|
import java.io.IOException;
|
import java.io.InputStream;
|
import java.lang.reflect.Type;
|
import java.util.Base64;
|
|
/**
|
* 【问题】群组表
|
* github地址 http://www.github.com/wanyushu
|
* gitee地址 http://www.gitee.com/wanyushu
|
* @author yushu
|
* @email 921784721@qq.com
|
* 对请求的参数进行解密
|
**/
|
@ControllerAdvice
|
public class DecryptRequestBodyAdvice implements RequestBodyAdvice {
|
|
private Logger log = LoggerFactory.getLogger(this.getClass());
|
|
private boolean encrypt;
|
|
@Override
|
public boolean supports(MethodParameter methodParameter, Type targetType, Class<? extends HttpMessageConverter<?>> converterType) {
|
if (methodParameter.getMethod().isAnnotationPresent(EncryptionReq.class) || methodParameter.getClass().isAnnotationPresent(EncryptionReq.class) ) {
|
encrypt = true;
|
}else{
|
encrypt=false;
|
}
|
return encrypt;
|
}
|
|
@Override
|
public Object handleEmptyBody(Object body, HttpInputMessage inputMessage, MethodParameter parameter, Type targetType, Class<? extends HttpMessageConverter<?>> converterType) {
|
return body;
|
}
|
|
@Override
|
public HttpInputMessage beforeBodyRead(HttpInputMessage inputMessage, MethodParameter parameter, Type targetType,
|
Class<? extends HttpMessageConverter<?>> converterType){
|
if (encrypt) {
|
try {
|
byte[] payload = StreamUtils.copyToByteArray(inputMessage.getBody());
|
String content =new String(payload);
|
JSONObject jsonObject = JSONObject.parseObject(content);
|
if(jsonObject.get("data")!=null){
|
content = jsonObject.getString("data");
|
}
|
// 读取完整的客户端请求体，也就是加密/编码后的数据
|
String key = jsonObject.getString("ivKey");
|
log.info("加密 key：{}", key);
|
String decrypt = RSAEncrypt.decrypt(key, RSAEncrypt.privateKey);
|
|
log.info("加密 Payload：{}",content);
|
String decrypt1 = AESUtils.decrypt(content, decrypt);
|
// 解码为原始数据
|
byte[] rawPayload = decrypt1.getBytes();
|
log.info("原始 Payload：{}", decrypt);
|
// 返回 HttpInputMessage 匿名对象
|
return new HttpInputMessage() {
|
@Override
|
public HttpHeaders getHeaders() {
|
// inputMessage.getHeaders().set("Content-Type","application/json;charset=UTF-8");
|
return inputMessage.getHeaders();
|
}
|
@Override
|
public InputStream getBody() throws IOException {
|
// 使用原始数据构建为 ByteArrayInputStream
|
return new ByteArrayInputStream(rawPayload);
|
}
|
};
|
} catch (Exception e) {
|
log.error("Decryption failed", e);
|
}
|
}
|
return inputMessage;
|
}
|
|
@Override
|
public Object afterBodyRead(Object body, HttpInputMessage inputMessage, MethodParameter parameter, Type targetType,
|
Class<? extends HttpMessageConverter<?>> converterType) {
|
return body;
|
}
|
}
|
