devbox
小丑西瓜9
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

HttpServletRequestWrapper、HttpServletResponseWrapper结合 过滤器 实现接口的加解密、国际化

作者：小丑西瓜9 | 2024-05-18 16:51:02

赞

踩

servletrequestwrapper

目录

一、HttpServletRequestWrapper代码

二、HttpServletRequestWrapper代码

三、加解密过滤器代码

四、国际化过滤器代码

一、HttpServletRequestWrapper代码

  1. package com.vteam.uap.security.httpWrapper;
  2.  
  3. import jakarta.servlet.ReadListener;
  4. import jakarta.servlet.ServletInputStream;
  5. import jakarta.servlet.http.HttpServletRequest;
  6. import jakarta.servlet.http.HttpServletRequestWrapper;
  7.  
  8. import java.io.BufferedInputStream;
  9. import java.io.ByteArrayInputStream;
  10. import java.io.ByteArrayOutputStream;
  11. import java.io.IOException;
  12.  
  13. /**
  14.  * @author Miller.Lai
  15.  * @description: 请求装饰器
  16.  * @date 2023-12-18 11:09:46
  17.  */
  18. public class RequestWrapper extends HttpServletRequestWrapper {
  19.     private byte[] bytes;
  20.  
  21.     private HttpServletRequest request;
  22.  
  23.     /**
  24.      * @param request
  25.      */
  26.     public RequestWrapper(HttpServletRequest request) {
  27.         super(request);
  28.         this.request = request;
  29.     }
  30.  
  31.     public String getRequestBody() throws IOException {
  32.         try (BufferedInputStream bis = new BufferedInputStream(request.getInputStream());
  33.              ByteArrayOutputStream baos = new ByteArrayOutputStream()) {
  34.             byte[] buffer = new byte[1024];
  35.             int len;
  36.             while ((len = bis.read(buffer)) > 0) {
  37.                 baos.write(buffer, 0, len);
  38.             }
  39.             bytes = baos.toByteArray();
  40.             String body = new String(bytes);
  41.             return body;
  42.         } catch (IOException ex) {
  43.             throw ex;
  44.         }
  45.     }
  46.  
  47.     public void setRequestBody(String body){
  48.         bytes = body.getBytes();
  49.     }
  50.  
  51.  
  52.  
  53.     public ServletInputStream getInputStream() throws IOException {
  54.         final ByteArrayInputStream byteArrayInputStream = new ByteArrayInputStream(bytes);
  55.         return new ServletInputStream() {
  56.             @Override
  57.             public boolean isFinished() {
  58.                 return false;
  59.             }
  60.  
  61.             @Override
  62.             public boolean isReady() {
  63.                 return false;
  64.             }
  65.  
  66.             @Override
  67.             public void setReadListener(ReadListener readListener) {
  68.  
  69.             }
  70.  
  71.             @Override
  72.             public int read() throws IOException {
  73.                 return byteArrayInputStream.read();
  74.             }
  75.         };
  76.     }
  77.  
  78. }

二、HttpServletRequestWrapper代码

  1. package com.vteam.uap.security.httpWrapper;
  2.  
  3. import jakarta.servlet.ServletOutputStream;
  4. import jakarta.servlet.WriteListener;
  5. import jakarta.servlet.http.HttpServletResponse;
  6. import jakarta.servlet.http.HttpServletResponseWrapper;
  7.  
  8. import java.io.*;
  9.  
  10. /**
  11.  * @author Miller.Lai
  12.  * @description: 响应装饰器
  13.  * @date 2023-12-15 13:29:16
  14.  */
  15. public class ResponseWrapper extends HttpServletResponseWrapper {
  16.  
  17.     private ByteArrayOutputStream outputStream;
  18.  
  19.     public byte[] getResponseData(){
  20.  
  21.         try {
  22.             outputStream.flush();
  23.         } catch (IOException e) {
  24.             e.printStackTrace();
  25.         }
  26.         return outputStream.toByteArray();
  27.     }
  28.  
  29.     public ResponseWrapper(HttpServletResponse response) {
  30.         super(response);
  31.         this.outputStream =new ByteArrayOutputStream();
  32.  
  33.     }
  34.  
  35.     @Override
  36.     public PrintWriter getWriter() throws IOException {
  37.         return new PrintWriter(outputStream);
  38.     }
  39.  
  40.  
  41.     @Override
  42.     public ServletOutputStream getOutputStream() throws IOException {
  43.         return new ServletOutputStream() {
  44.             @Override
  45.             public boolean isReady() {
  46.                 return false;
  47.             }
  48.  
  49.             @Override
  50.             public void setWriteListener(WriteListener listener) {
  51.  
  52.             }
  53.  
  54.             @Override
  55.             public void write(int b) throws IOException {
  56.                 outputStream.write(b);
  57.             }
  58.         };
  59.     }
  60. }

三、加解密过滤器代码

  1. package com.vteam.uap.core.filter;
  2.  
  3. import com.alibaba.fastjson2.JSON;
  4. import com.alibaba.fastjson2.JSONObject;
  5. import com.vteam.uap.common.util.*;
  6. import com.vteam.uap.security.codec.CodecProperties;
  7. import com.vteam.uap.security.httpWrapper.RequestWrapper;
  8. import com.vteam.uap.security.httpWrapper.ResponseWrapper;
  9. import jakarta.annotation.Resource;
  10. import jakarta.servlet.Filter;
  11. import jakarta.servlet.*;
  12. import jakarta.servlet.http.HttpServletRequest;
  13. import jakarta.servlet.http.HttpServletResponse;
  14. import lombok.extern.slf4j.Slf4j;
  15. import org.apache.commons.lang3.ArrayUtils;
  16. import org.springframework.util.PatternMatchUtils;
  17. import org.springframework.web.context.request.RequestContextHolder;
  18. import org.springframework.web.context.request.ServletRequestAttributes;
  19.  
  20. import java.io.IOException;
  21. import java.util.Objects;
  22.  
  23. /**
  24.  * @author Miller.Lai
  25.  * @description:  加解码过滤器
  26.  * @date 2023-12-15 16:46:03
  27.  */
  28. @Slf4j
  29. public class CodecFilter implements Filter {
  30.  
  31.     @Resource
  32.     protected CodecProperties codecProperties;
  33.  
  34.     @Override
  35.     public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
  36.  
  37.         // 请求解密
  38.         if (codecProperties.isApiEnable() && !isIgnore() && ("POST".equals(((HttpServletRequest)request).getMethod().trim().toUpperCase())) && "application/json".equals(request.getContentType().trim().toLowerCase())){
  39.             RequestWrapper requestWrapper = new RequestWrapper((HttpServletRequest) request);
  40.             String bodyStr =  requestWrapper.getRequestBody();
  41.             if(StringUtils.isNotBlank(bodyStr)){
  42.                 JSONObject bodyJson = JSONObject.parseObject(bodyStr);
  43.                 Object data = bodyJson.get("data");
  44.                 if(data != null && data instanceof String && ((String)data).trim().length () !=0 ){
  45.                     if (log.isDebugEnabled()) {
  46.                         log.debug("解密 API 请求消息：type={}, requestBody={}",requestWrapper.getMethod(), bodyJson.toJSONString());
  47.                     }
  48.                     String plainText = AesUtils.decrypt((String) data, AesUtils.Mode.API,codecProperties.getAesKey(),codecProperties.getAesIv(),codecProperties.isDbEnable());
  49.                     bodyJson.put("data",JSONObject.parseObject(plainText));
  50.                     requestWrapper.setRequestBody(bodyJson.toJSONString());
  51.                 }
  52.             }
  53.  
  54.            // 包装响应对象
  55.             ResponseWrapper responseWrapper = new ResponseWrapper((HttpServletResponse) response);
  56.             chain.doFilter(requestWrapper, responseWrapper);
  57.             // 拿到响应对象
  58.             byte[] responseData = responseWrapper.getResponseData();
  59.             if("application/json".equals(responseWrapper.getContentType().trim().toLowerCase())){
  60.                 String originalResulet = new String(responseData);
  61.                 JSONObject jsonObject  =JSONObject.parseObject(originalResulet);
  62.                 // 拿到响应对象中的data
  63.                 Object data = jsonObject.get("data");
  64.                 if(data != null){
  65.                     String encText = AesUtils.encrypt(JSON.toJSONString(data), AesUtils.Mode.API,codecProperties.getAesKey(),codecProperties.getAesIv(),codecProperties.isDbEnable());
  66.                     jsonObject.put("data", encText);
  67.                 }
  68.                 responseData = jsonObject.toJSONString().getBytes("utf-8");
  69.             }
  70.             HttpServletResponse httpServletResponse = (HttpServletResponse) response;
  71.             response.setContentLength(responseData.length);
  72.             httpServletResponse.getOutputStream().write(responseData);
  73.             httpServletResponse.getOutputStream().flush();
  74.         }else{
  75.             // 处理业务逻辑
  76.             chain.doFilter(request, response);
  77.         }
  78.     }
  79.  
  80.     @Override
  81.     public void destroy() {
  82.  
  83.     }
  84.  
  85.     protected boolean isIgnore() {
  86.         boolean isIgnore = false;
  87.         String[] ignoreUrl = codecProperties.getIgnoreUrl();
  88.         if (ArrayUtils.isNotEmpty(ignoreUrl)) {
  89.             HttpServletRequest request =
  90.                     ((ServletRequestAttributes) Objects.requireNonNull(
  91.                             RequestContextHolder.getRequestAttributes())).getRequest();
  92.             for (String s : ignoreUrl) {
  93.                 if (PatternMatchUtils.simpleMatch(s, request.getRequestURI())) {
  94.                     isIgnore = true;
  95.                     break;
  96.                 }
  97.             }
  98.         }
  99.         return isIgnore;
  100.     }
  101.  
  102. }

四、国际化过滤器代码

  1. package com.vteam.uap.core.filter;
  2.  
  3. import com.alibaba.fastjson2.JSONObject;
  4. import com.vteam.uap.common.constant.CommonConstants;
  5. import com.vteam.uap.common.util.GlobalConstants;
  6. import com.vteam.uap.common.util.I18NUtils;
  7. import com.vteam.uap.common.util.StringUtils;
  8. import com.vteam.uap.common.util.UuidUtil;
  9. import com.vteam.uap.security.httpWrapper.ResponseWrapper;
  10. import jakarta.servlet.*;
  11. import jakarta.servlet.Filter;
  12. import jakarta.servlet.http.HttpServletRequest;
  13. import jakarta.servlet.http.HttpServletResponse;
  14. import lombok.extern.slf4j.Slf4j;
  15. import org.apache.commons.lang3.ArrayUtils;
  16. import org.slf4j.MDC;
  17. import org.springframework.beans.factory.annotation.Value;
  18. import org.springframework.util.PatternMatchUtils;
  19. import org.springframework.web.context.request.RequestContextHolder;
  20. import org.springframework.web.context.request.ServletRequestAttributes;
  21.  
  22. import java.io.IOException;
  23. import java.util.Objects;
  24.  
  25. /**
  26.  * @author Miller.Lai
  27.  * @description:
  28.  * @date 2023-12-15 16:46:03
  29.  */
  30. @Slf4j
  31. public class I18NFilter implements Filter {
  32.  
  33.  
  34.     @Value("${uap.i18n.enable:false}")
  35.     private boolean i18nEnable;
  36.  
  37.     @Value("${uap.i18n.language:zh_CN}")
  38.     private String language;
  39.  
  40.     @Value("${uap.i18n.ignore-url:/doc.html,/webjars/**,/v3/api-docs/**,/actuator**,/favicon.ico}")
  41.     private String ignoreUrl;
  42.  
  43.     @Value("${uap.response.msg.include-request-id:false}")
  44.     private boolean msgIncludeRequestId;
  45.  
  46.     public I18NFilter() {
  47.     }
  48.  
  49.     @Override
  50.     public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
  51.         // 如果开启了国际化则进行国际化处理
  52.         if (i18nEnable && !isIgnore()) {
  53.             // 包装响应对象
  54.             ResponseWrapper customResponseWrapper = new ResponseWrapper((HttpServletResponse) response);
  55.             // 处理业务逻辑
  56.             chain.doFilter(request, customResponseWrapper);
  57.             // 拿到响应对象
  58.             byte[] responseData = customResponseWrapper.getResponseData();
  59.             if("application/json".equals(customResponseWrapper.getContentType().trim().toLowerCase())){
  60.                 String originalResulet = new String(responseData);
  61.                 JSONObject jsonObject  =JSONObject.parseObject(originalResulet);
  62.  
  63.                 // 拿到响应对象中的msg
  64.                 String msg = (String)jsonObject.get("msg");
  65.  
  66.  
  67.                 String i18nMsg = null;
  68.                 if ( StringUtils.isNotBlank(msg) ) {
  69.                     HttpServletRequest httpServletRequest = (HttpServletRequest) request;
  70.                     String languageInheader = httpServletRequest.getHeader("Language");
  71.                     // 优先使用请求头里的国际化语言
  72.                     if (languageInheader != null) {
  73.                         i18nMsg = I18NUtils.getI18N(msg, languageInheader);
  74.                     } else {
  75.                         i18nMsg = I18NUtils.getI18N(msg, language);
  76.                     }
  77.  
  78.                 }else if( StringUtils.isNotBlank(msg) ){// 不进行国际化也要清除相关缓存
  79.                     I18NUtils.getActualContainBraceMsgParamMap().remove(msg+GlobalConstants.Symbol.UNDERLINE+Thread.currentThread().getId());
  80.                     I18NUtils.getActualContainBraceMsgMap().remove(msg+GlobalConstants.Symbol.UNDERLINE+Thread.currentThread().getId());
  81.                 }
  82.  
  83.                 if(i18nMsg != null ){
  84.                     msg = i18nMsg;
  85.                 }
  86.  
  87.                 if(msg == null){
  88.                     msg = "";
  89.                 }
  90.  
  91.                 // 如果线程号不存在，则进行设置
  92.                 if(StringUtils.isEmpty(MDC.get("UUID"))){
  93.                     MDC.put("UUID", UuidUtil.getShortUuid());
  94.                 }
  95.  
  96.                 // msg中携带请求id返回
  97.                 if(msgIncludeRequestId ){
  98.                     msg = MDC.get("UUID") + GlobalConstants.Symbol.SPACE + msg ;
  99.                 }
  100.                 jsonObject.put("msg", msg);
  101.                 responseData =  jsonObject.toJSONString().getBytes("utf-8");
  102.             }
  103.  
  104.             HttpServletResponse httpServletResponse = (HttpServletResponse) response;
  105.             response.setContentLength(responseData.length);
  106.             httpServletResponse.getOutputStream().write(responseData);
  107.             httpServletResponse.getOutputStream().flush();
  108.         }else{
  109.             // 处理业务逻辑
  110.             chain.doFilter(request, response);
  111.         }
  112.     }
  113.  
  114.     @Override
  115.     public void destroy() {
  116.  
  117.     }
  118.  
  119.     protected boolean isIgnore() {
  120.         boolean isIgnore = false;
  121.         if(StringUtils.isEmpty(ignoreUrl)){
  122.             return false;
  123.         }
  124.         String[] ignoreUrls = ignoreUrl.split(CommonConstants.Symbol.COMMA);
  125.         if (ArrayUtils.isNotEmpty(ignoreUrls)) {
  126.             HttpServletRequest request =
  127.                     ((ServletRequestAttributes) Objects.requireNonNull(
  128.                             RequestContextHolder.getRequestAttributes())).getRequest();
  129.             for (String s : ignoreUrls) {
  130.                 if (PatternMatchUtils.simpleMatch(s, request.getRequestURI())) {
  131.                     isIgnore = true;
  132.                     break;
  133.                 }
  134.             }
  135.         }
  136.         return isIgnore;
  137.     }
  138. }

五、过滤器注册

  1.     /**
  2.      * 国际化过滤器
  3.      * @return
  4.      */
  5.     @Bean
  6.     public I18NFilter i18NFilter() {
  7.         return new I18NFilter();
  8.     }
  9.  
  10.     @Bean
  11.     public FilterRegistrationBean i18NFilterRegistrationBean() {
  12.         // 新建过滤器注册类
  13.         FilterRegistrationBean registration = new FilterRegistrationBean();
  14.         // 添加自定义 过滤器
  15.         registration.setFilter(i18NFilter());
  16.         // 设置过滤器的URL模式
  17.         registration.addUrlPatterns("/*");
  18.         //设置过滤器顺序
  19.         registration.setOrder(4);
  20.         return registration;
  21.     }
  22.  
  23.     /**
  24.      * 请求加解密过滤器
  25.      * @return
  26.      */
  27.     @Bean
  28.     public CodecFilter codecFilter() {
  29.         return new CodecFilter();
  30.     }
  31.  
  32.     @Bean
  33.     public FilterRegistrationBean codecFilterRegistrationBean() {
  34.         // 新建过滤器注册类
  35.         FilterRegistrationBean registration = new FilterRegistrationBean();
  36.         // 添加自定义 过滤器
  37.         registration.setFilter(codecFilter());
  38.         // 设置过滤器的URL模式
  39.         registration.addUrlPatterns("/*");
  40.         //设置过滤器顺序
  41.         registration.setOrder(3);
  42.         return registration;
  43.     }

      本人近十年JAVA架构设计经验，长期从事IT技术资源整合。有志于自我技术提升、需要最新IT技术课程的小伙伴，可私信联系我 ，粉丝一律友情价

声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/小丑西瓜9/article/detail/589165
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号