11 changed files with 419 additions and 2 deletions
@ -0,0 +1,56 @@ |
|||
package com.ccsens.signin.api; |
|||
|
|||
import cn.hutool.core.collection.CollectionUtil; |
|||
import cn.hutool.core.util.ObjectUtil; |
|||
import cn.hutool.core.util.StrUtil; |
|||
import cn.hutool.extra.servlet.ServletUtil; |
|||
import com.ccsens.signin.bean.dto.FiotDto; |
|||
import com.ccsens.signin.bean.dto.UserDto; |
|||
import com.ccsens.signin.bean.vo.FiotVo; |
|||
import com.ccsens.signin.bean.vo.UserVo; |
|||
import com.ccsens.signin.exception.UserLoginException; |
|||
import com.ccsens.util.JsonResponse; |
|||
import com.ccsens.util.WebConstant; |
|||
import com.ccsens.util.wx.WxXcxUtil; |
|||
import com.ccsens.wechatutil.wxfiotexplorer.FiotExplorerSigninUtil; |
|||
import io.swagger.annotations.Api; |
|||
import io.swagger.annotations.ApiImplicitParams; |
|||
import io.swagger.annotations.ApiOperation; |
|||
import io.swagger.annotations.ApiParam; |
|||
import lombok.extern.slf4j.Slf4j; |
|||
import org.springframework.validation.annotation.Validated; |
|||
import org.springframework.web.bind.annotation.RequestBody; |
|||
import org.springframework.web.bind.annotation.RequestMapping; |
|||
import org.springframework.web.bind.annotation.RequestMethod; |
|||
import org.springframework.web.bind.annotation.RestController; |
|||
|
|||
import javax.servlet.http.HttpServletRequest; |
|||
import java.util.Map; |
|||
|
|||
/** |
|||
* @description: |
|||
* @author: whj |
|||
* @time: 2021/11/30 10:42 |
|||
*/ |
|||
@Slf4j |
|||
@Api(tags = "物联网", description = "") |
|||
@RestController |
|||
@RequestMapping("/fiot") |
|||
public class FiotExplorerController { |
|||
|
|||
@ApiOperation(value = "物联网用户登录") |
|||
@ApiImplicitParams({ |
|||
}) |
|||
@RequestMapping(value = "/signin", method = RequestMethod.POST, produces = {"application/json;charset=UTF-8"}) |
|||
public JsonResponse<FiotVo.Signin> userSignin(@ApiParam @Validated @RequestBody(required = true)FiotDto.Signin signin) throws Exception { |
|||
log.info("物联网用户登录：{}", signin); |
|||
String type = "FIOT"; |
|||
WxXcxUtil.WechatUser wechatUser = WxXcxUtil.getUserInfo(signin.getCode(), type); |
|||
String token = FiotExplorerSigninUtil.getToken(wechatUser.openid, signin.getNickName(), signin.getAvatar(), WxXcxUtil.appId(type)); |
|||
FiotVo.Signin vo = new FiotVo.Signin(); |
|||
vo.setToken(token); |
|||
log.info("物联网用户登录结果：{}", vo); |
|||
return JsonResponse.newInstance().ok(vo); |
|||
|
|||
} |
|||
} |
|||
@ -0,0 +1,31 @@ |
|||
package com.ccsens.signin.bean.dto; |
|||
|
|||
import io.swagger.annotations.ApiModel; |
|||
import io.swagger.annotations.ApiModelProperty; |
|||
import lombok.Data; |
|||
|
|||
import javax.validation.constraints.NotEmpty; |
|||
|
|||
/** |
|||
* @description: |
|||
* @author: whj |
|||
* @time: 2021/11/30 10:45 |
|||
*/ |
|||
public class FiotDto { |
|||
|
|||
@Data |
|||
@ApiModel("登录-请求") |
|||
public static class Signin { |
|||
@NotEmpty |
|||
@ApiModelProperty("登录code") |
|||
private String code; |
|||
@NotEmpty |
|||
@ApiModelProperty("用户名") |
|||
private String nickName; |
|||
@NotEmpty |
|||
@ApiModelProperty("头像") |
|||
private String avatar; |
|||
} |
|||
|
|||
|
|||
} |
|||
@ -0,0 +1,18 @@ |
|||
package com.ccsens.signin.bean.vo; |
|||
|
|||
import io.swagger.annotations.ApiModel; |
|||
import lombok.Data; |
|||
|
|||
/** |
|||
* @description: |
|||
* @author: whj |
|||
* @time: 2021/11/30 10:52 |
|||
*/ |
|||
public class FiotVo { |
|||
|
|||
@Data |
|||
@ApiModel("物联网登录-返回") |
|||
public static class Signin{ |
|||
private String token; |
|||
} |
|||
} |
|||
@ -0,0 +1,74 @@ |
|||
package com.ccsens.wechatutil.bean.po.wxfiotexplorer; |
|||
|
|||
import cn.hutool.core.date.DatePattern; |
|||
import cn.hutool.core.date.DateUtil; |
|||
import cn.hutool.core.util.HexUtil; |
|||
import com.alibaba.fastjson.JSON; |
|||
import com.alibaba.fastjson.JSONObject; |
|||
import com.ccsens.wechatutil.util.TC3Util; |
|||
import lombok.Data; |
|||
|
|||
import java.util.Calendar; |
|||
import java.util.Random; |
|||
import java.util.TimeZone; |
|||
import java.util.UUID; |
|||
|
|||
/** |
|||
* @description: |
|||
* @author: whj |
|||
* @time: 2021/11/26 9:33 |
|||
*/ |
|||
@Data |
|||
public class FiotSignin { |
|||
/** |
|||
* 公共参数，本接口取值：AppGetTokenByWeiXin |
|||
*/ |
|||
private String Action = "AppGetTokenByWeiXin"; |
|||
/** |
|||
* 公共参数，唯一请求 ID，可自行生成，推荐使用 uuid。定位问题时，需提供该次请求的 RequestId |
|||
*/ |
|||
private String RequestId = UUID.randomUUID().toString(); |
|||
/** |
|||
* 公共参数，应用 AppKey ，用于标识对应的小程序或 App |
|||
*/ |
|||
private String AppKey = null; |
|||
/** |
|||
* 公共参数，请求签名，需用户自行生成，用于校验请求的合法性 |
|||
*/ |
|||
private String Signature = null; |
|||
/** |
|||
* 公共参数，请求的 UINX 时间戳（秒级） |
|||
*/ |
|||
private long Timestamp = System.currentTimeMillis() / 1000; |
|||
/** |
|||
* 公共参数，随机正整数，与 Timestamp 联合起来，防止重放攻击 |
|||
*/ |
|||
private int Nonce = new Random().nextInt(10000); |
|||
/** |
|||
* 微信用户的 OpenID 或 UnionID |
|||
*/ |
|||
private String WxOpenID; |
|||
/** |
|||
* 昵称 |
|||
*/ |
|||
private String NickName; |
|||
/** |
|||
* 头像 |
|||
*/ |
|||
private String Avatar; |
|||
|
|||
public FiotSignin() { |
|||
} |
|||
|
|||
public FiotSignin(String openId, String nickName, String avatar, String appKey) throws Exception { |
|||
this(); |
|||
this.WxOpenID = openId; |
|||
this.NickName = nickName; |
|||
this.Avatar = avatar; |
|||
this.AppKey = appKey; |
|||
this.Signature = TC3Util.generateSignature("iot", "iot.cloud.tencent.com", this.Timestamp, null); |
|||
|
|||
} |
|||
|
|||
|
|||
} |
|||
@ -0,0 +1,17 @@ |
|||
package com.ccsens.wechatutil.bean.po.wxfiotexplorer; |
|||
|
|||
import io.swagger.annotations.ApiModelProperty; |
|||
import lombok.Data; |
|||
|
|||
/** |
|||
* @description: |
|||
* @author: whj |
|||
* @time: 2021/11/30 10:25 |
|||
*/ |
|||
@Data |
|||
public class FiotSigninResponse { |
|||
@ApiModelProperty("截止时间，UINX 秒级时间戳") |
|||
private Long ExpireAt; |
|||
@ApiModelProperty("开发平台返回的 AccessToken，通过该 Token 进行登录后的接口请求") |
|||
private String Token; |
|||
} |
|||
@ -0,0 +1,30 @@ |
|||
package com.ccsens.wechatutil.bean.po.wxfiotexplorer; |
|||
|
|||
import io.swagger.annotations.ApiModelProperty; |
|||
import lombok.Data; |
|||
|
|||
/** |
|||
* @description: |
|||
* @author: whj |
|||
* @time: 2021/11/30 10:17 |
|||
*/ |
|||
@Data |
|||
public class ResponseInfo<T> { |
|||
private Info<T> Response; |
|||
private String RequestId; |
|||
|
|||
|
|||
@Data |
|||
public static class Info<T>{ |
|||
@ApiModelProperty("数据，异常时，data为空") |
|||
private T Data; |
|||
@ApiModelProperty("错误码，正确返回时，error为空") |
|||
private ErrorInfo Error; |
|||
} |
|||
|
|||
@Data |
|||
public static class ErrorInfo{ |
|||
private String Code; |
|||
private String Message; |
|||
} |
|||
} |
|||
@ -0,0 +1,107 @@ |
|||
package com.ccsens.wechatutil.util; |
|||
|
|||
import cn.hutool.core.util.StrUtil; |
|||
|
|||
import javax.crypto.Mac; |
|||
import javax.crypto.spec.SecretKeySpec; |
|||
import javax.xml.bind.DatatypeConverter; |
|||
import java.nio.charset.Charset; |
|||
import java.nio.charset.StandardCharsets; |
|||
import java.security.MessageDigest; |
|||
import java.text.SimpleDateFormat; |
|||
import java.util.Date; |
|||
import java.util.TimeZone; |
|||
import java.util.TreeMap; |
|||
|
|||
/** |
|||
* @description: |
|||
* @author: whj |
|||
* @time: 2021/11/29 17:50 |
|||
*/ |
|||
public class TC3Util { |
|||
private final static Charset UTF8 = StandardCharsets.UTF_8; |
|||
private final static String SECRET_ID = "AKIDxhBRRAdplRpwnMfnfGaeRxDBsJTN0NTI"; |
|||
private final static String SECRET_KEY = "Zrte9MPFo68tMZU8WcXDeqnVx95rYzA6"; |
|||
private final static String CT_JSON = "application/json; charset=utf-8"; |
|||
|
|||
public static byte[] hmac256(byte[] key, String msg) throws Exception { |
|||
Mac mac = Mac.getInstance("HmacSHA256"); |
|||
SecretKeySpec secretKeySpec = new SecretKeySpec(key, mac.getAlgorithm()); |
|||
mac.init(secretKeySpec); |
|||
return mac.doFinal(msg.getBytes(UTF8)); |
|||
} |
|||
|
|||
public static String sha256Hex(String s) throws Exception { |
|||
MessageDigest md = MessageDigest.getInstance("SHA-256"); |
|||
byte[] d = md.digest(s.getBytes(UTF8)); |
|||
return DatatypeConverter.printHexBinary(d).toLowerCase(); |
|||
} |
|||
|
|||
public static String generateSignature(String service, String host, long timestamp, String payload) throws Exception { |
|||
//String service = "cvm";
|
|||
//String host = "cvm.tencentcloudapi.com";
|
|||
// String region = "ap-guangzhou";
|
|||
// String action = "DescribeInstances";
|
|||
// String version = "2017-03-12";
|
|||
String algorithm = "TC3-HMAC-SHA256"; |
|||
//String timestamp = "1551113065";
|
|||
SimpleDateFormat sdf = new SimpleDateFormat("yyyy-MM-dd"); |
|||
// 注意时区，否则容易出错
|
|||
sdf.setTimeZone(TimeZone.getTimeZone("UTC")); |
|||
String date = sdf.format(new Date(Long.valueOf(timestamp + "000"))); |
|||
|
|||
// ************* 步骤 1：拼接规范请求串 *************
|
|||
String httpRequestMethod = "POST"; |
|||
String canonicalUri = "/"; |
|||
String canonicalQueryString = ""; |
|||
String canonicalHeaders = "content-type:application/json; charset=utf-8\n" + "host:" + host + "\n"; |
|||
String signedHeaders = "content-type;host"; |
|||
|
|||
// String payload = "{\"Limit\": 1, \"Filters\": [{\"Values\": [\"\\u672a\\u547d\\u540d\"], \"Name\": \"instance-name\"}]}";
|
|||
String hashedRequestPayload = StrUtil.isEmpty(payload) ? "" : sha256Hex(payload); |
|||
String canonicalRequest = httpRequestMethod + "\n" + canonicalUri + "\n" + canonicalQueryString + "\n" |
|||
+ canonicalHeaders + "\n" + signedHeaders + "\n" + hashedRequestPayload; |
|||
System.out.println(canonicalRequest); |
|||
|
|||
// ************* 步骤 2：拼接待签名字符串 *************
|
|||
String credentialScope = date + "/" + service + "/" + "tc3_request"; |
|||
String hashedCanonicalRequest = sha256Hex(canonicalRequest); |
|||
String stringToSign = algorithm + "\n" + timestamp + "\n" + credentialScope + "\n" + hashedCanonicalRequest; |
|||
System.out.println(stringToSign); |
|||
|
|||
// ************* 步骤 3：计算签名 *************
|
|||
byte[] secretDate = hmac256(("TC3" + SECRET_KEY).getBytes(UTF8), date); |
|||
byte[] secretService = hmac256(secretDate, service); |
|||
byte[] secretSigning = hmac256(secretService, "tc3_request"); |
|||
String signature = DatatypeConverter.printHexBinary(hmac256(secretSigning, stringToSign)).toLowerCase(); |
|||
System.out.println(signature); |
|||
|
|||
// ************* 步骤 4：拼接 Authorization *************
|
|||
String authorization = algorithm + " " + "Credential=" + SECRET_ID + "/" + credentialScope + ", " |
|||
+ "SignedHeaders=" + signedHeaders + ", " + "Signature=" + signature; |
|||
|
|||
TreeMap<String, String> headers = new TreeMap<String, String>(); |
|||
headers.put("Authorization", authorization); |
|||
headers.put("Content-Type", CT_JSON); |
|||
headers.put("Host", host); |
|||
// headers.put("X-TC-Action", action);
|
|||
// headers.put("X-TC-Timestamp", timestamp);
|
|||
// headers.put("X-TC-Version", version);
|
|||
// headers.put("X-TC-Region", region);
|
|||
|
|||
StringBuilder sb = new StringBuilder(); |
|||
sb.append("curl -X POST https://").append(host) |
|||
.append(" -H \"Authorization: ").append(authorization).append("\"") |
|||
.append(" -H \"Content-Type: application/json; charset=utf-8\"") |
|||
.append(" -H \"Host: ").append(host).append("\""); |
|||
// .append(" -H \"X-TC-Action: ").append(action).append("\"")
|
|||
// .append(" -H \"X-TC-Timestamp: ").append(timestamp).append("\"")
|
|||
// .append(" -H \"X-TC-Version: ").append(version).append("\"")
|
|||
// .append(" -H \"X-TC-Region: ").append(region).append("\"")
|
|||
if (StrUtil.isNotEmpty(payload)) { |
|||
sb.append(" -d '").append(payload).append("'"); |
|||
} |
|||
|
|||
return sb.toString(); |
|||
} |
|||
} |
|||
@ -0,0 +1,79 @@ |
|||
package com.ccsens.wechatutil.wxfiotexplorer; |
|||
|
|||
import cn.hutool.core.util.StrUtil; |
|||
import com.alibaba.fastjson.JSONObject; |
|||
import com.ccsens.util.CodeError; |
|||
import com.ccsens.util.RedisUtil; |
|||
import com.ccsens.util.RestTemplateUtil; |
|||
import com.ccsens.util.exception.BaseException; |
|||
import com.ccsens.wechatutil.bean.po.wxfiotexplorer.FiotSignin; |
|||
import com.ccsens.wechatutil.bean.po.wxfiotexplorer.FiotSigninResponse; |
|||
import com.ccsens.wechatutil.bean.po.wxfiotexplorer.ResponseInfo; |
|||
import lombok.extern.slf4j.Slf4j; |
|||
import org.springframework.beans.factory.annotation.Value; |
|||
import org.springframework.stereotype.Component; |
|||
|
|||
import javax.annotation.PostConstruct; |
|||
import javax.annotation.Resource; |
|||
|
|||
/** |
|||
* @description: |
|||
* @author: whj |
|||
* @time: 2021/11/25 11:47 |
|||
*/ |
|||
@Slf4j |
|||
@Component |
|||
public class FiotExplorerSigninUtil { |
|||
|
|||
private final static String SIGN_URL = "https://iot.cloud.tencent.com/api/exploreropen/appapi"; |
|||
private final static String TOKEN_KEY = "FIOT_{}"; |
|||
@Value("${fiot.appId:}") |
|||
private String appKey; |
|||
@Value("${fiot.secret:}") |
|||
private String appSecret; |
|||
@Resource |
|||
private RedisUtil redisUtil; |
|||
private static FiotExplorerSigninUtil util; |
|||
|
|||
@PostConstruct |
|||
public void init(){ |
|||
util = this; |
|||
util.redisUtil = this.redisUtil; |
|||
util.appKey = this.appKey; |
|||
util.appSecret = this.appSecret; |
|||
} |
|||
|
|||
|
|||
|
|||
|
|||
public static String getToken(String openId, String nickName, String avatar, String appKey) throws Exception { |
|||
log.info("物联网查询token：{},{},{}", openId, nickName, avatar); |
|||
String key = StrUtil.format(TOKEN_KEY, openId); |
|||
Object o = util.redisUtil.get(key); |
|||
log.info("{}缓存的token：{}", key, o); |
|||
if (o != null) { |
|||
return (String) o; |
|||
} |
|||
// 查询token
|
|||
|
|||
FiotSignin fiotSignin = new FiotSignin(openId, nickName, avatar, appKey); |
|||
log.info("登录：{}", fiotSignin); |
|||
String s = RestTemplateUtil.postBody(SIGN_URL, fiotSignin); |
|||
log.info("登录结果：{}", s); |
|||
if (StrUtil.isEmpty(s)) { |
|||
throw new BaseException(CodeError.THIRD_ERROR); |
|||
} |
|||
ResponseInfo<FiotSigninResponse> res = JSONObject.parseObject(s, ResponseInfo.class); |
|||
if (res.getResponse() == null) { |
|||
throw new BaseException(CodeError.THIRD_ERROR); |
|||
} else if (res.getResponse().getError() != null ) { |
|||
throw new BaseException(CodeError.THIRD_ERROR.getCode(), res.getResponse().getError().getMessage()); |
|||
} |
|||
FiotSigninResponse data = res.getResponse().getData(); |
|||
util.redisUtil.set(key, data.getToken(), data.getExpireAt() - System.currentTimeMillis()/1000); |
|||
return data.getToken(); |
|||
} |
|||
|
|||
|
|||
|
|||
} |
|||
Loading…
Reference in new issue