浙里办个人单点登陆接口对接java

1,458 阅读2分钟

吐槽下,这个接口文档真的是我见过最沙雕的。
我拿到了好几个版本的word,发现参数有所不同,请求地址也不同,搞不懂。然后看的22.06.08的word。里面与两种接入方式,参数也不一样。直接给我整懵逼了。
还好搞了2个小时总算给我调通了。记录下对接的demo(找了个群,里面的demo只管了打通网关,没打通sso的给我整麻了)

下面是以第二种方式接入的代码

1. pom

<dependencies>

    <dependency>
        <groupId>cn.hutool</groupId>
        <artifactId>hutool-all</artifactId>
        <version>5.8.0</version>
    </dependency>
    <dependency>
        <groupId>org.projectlombok</groupId>
        <artifactId>lombok</artifactId>
        <version>1.18.22</version>
    </dependency>

    <dependency>
        <groupId>ch.qos.logback</groupId>
        <artifactId>logback-core</artifactId>
        <version>1.2.11</version>
    </dependency>

    <dependency>
        <groupId>org.slf4j</groupId>
        <artifactId>slf4j-api</artifactId>
        <version>2.0.0-alpha5</version>
    </dependency>
</dependencies>

2.实现类(我稍微封装了一下)

package com.call;

import cn.hutool.crypto.SecureUtil;
import cn.hutool.http.HttpRequest;
import cn.hutool.json.JSONObject;
import cn.hutool.json.JSONParser;
import cn.hutool.json.JSONString;
import cn.hutool.json.JSONUtil;

import java.time.LocalDateTime;
import java.time.format.DateTimeFormatter;
import java.util.*;

/**
 * @author gaoll
 * @time 2022/6/17 16:14
 **/
public class TestCall {

    //能保证你调用通网关,但具体参数需要根据组件结合。
    private static final String url = "https://ibcdsg.zj.gov.cn:8443/restapi/prod/IC33000020220228000004/sso/servlet/simpleauth";

    //替换成组件超市的accessKey
    private static final String ak = "";

    //替换成组件超市的secretKey
    private static final String sk = "";


    public static void main(String[] args) {

        // ticket 由前端提供
        String st = "";

        // 请求体构建
        HashMap<String, Object> requestBody = new HashMap<>();
        requestBody.put("st", st);
        // 发起请求
        String stRes = httpPost("ticketValidation",requestBody);
        JSONObject jsonObject = JSONUtil.parseObj(stRes);
        String token = jsonObject.getStr("token");
        System.out.println(stRes);

        HashMap<String, Object> tokenRequestBody = new HashMap<>();
        tokenRequestBody.put("token", token);
        // 发起请求
        String tokenRes = httpPost("getUserInfo",tokenRequestBody);
        System.out.println(tokenRes);

    }

    private static String httpPost(String method, HashMap<String, Object> requestBody) {
        Map<String, String> header = HmacAuthUtil.generateHeader(url, "POST", ak, sk);

        LocalDateTime dateTime = LocalDateTime.now();
        String date = dateTime.format(DateTimeFormatter.ofPattern("yyyyMMddHHmmss"));

        // 公共参数
        requestBody.put("servicecode", ak);
        requestBody.put("method", method);
        requestBody.put("time", date);
        requestBody.put("sign", SecureUtil.md5(ak + sk + date));
        requestBody.put("datatype", "json");

        //链式构建请求
        String result = HttpRequest.post(url)
                .headerMap(header, true)//头信息,多个头信息多次调用此方法即可
                .header("Content-Type", "application/x-www-form-urlencoded")
                .form(requestBody)//表单内容
                .timeout(3000)//超时,毫秒
                .execute().body();

        return result;
    }
}

3.浙里办官方提供的工具类 HmacAuthUtil

package com.call;

import javafx.util.Pair;
import lombok.extern.slf4j.Slf4j;

import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import javax.xml.bind.DatatypeConverter;
import java.io.UnsupportedEncodingException;
import java.net.URI;
import java.net.URL;
import java.net.URLEncoder;
import java.text.DateFormat;
import java.text.SimpleDateFormat;
import java.util.*;
import java.util.stream.Collectors;

@Slf4j
public class HmacAuthUtil {

    /**
     * 构造请求 header
     *
     * @param urlStr        请求url,全路径格式,比如:https://bcdsg.zj.gov.cn/api/p/v1/user.get
     * @param requestMethod 请求方法,大写格式,如:GET, POST
     * @param accessKey     应用的 AK
     * @param secretKey     应用的 SK
     * @return 结果
     */
    public static Map<String, String> generateHeader(String urlStr, String requestMethod, String accessKey, String secretKey) {
        log.info("params,urlStr={},requestMethod={},accessKey={},secretKey={}", urlStr, requestMethod, accessKey, secretKey);
        Map<String, String> header = new HashMap<>();
        try {
            DateFormat dateFormat = new SimpleDateFormat("EEE, dd MMM yyyy HH:mm:ss z", Locale.US);
            dateFormat.setTimeZone(TimeZone.getTimeZone("GMT"));
            String date = dateFormat.format(new Date());
            URL url = new URL(urlStr);
            URI uri = new URI(url.getProtocol(), url.getHost(), url.getPath(), url.getQuery(), null);

            String canonicalQueryString = getCanonicalQueryString(uri.getQuery());

            String message = requestMethod.toUpperCase() + "\n" + uri.getPath() + "\n" + canonicalQueryString + "\n" + accessKey + "\n" + date + "\n";

            Mac hasher = Mac.getInstance("HmacSHA256");
            hasher.init(new SecretKeySpec(secretKey.getBytes(), "HmacSHA256"));

            byte[] hash = hasher.doFinal(message.getBytes());

            // to lowercase hexits
            DatatypeConverter.printHexBinary(hash);

            // to base64
            String sign = DatatypeConverter.printBase64Binary(hash);
            header.put("X-BG-HMAC-SIGNATURE", sign);
            header.put("X-BG-HMAC-ALGORITHM", "hmac-sha256");
            header.put("X-BG-HMAC-ACCESS-KEY", accessKey);
            header.put("X-BG-DATE-TIME", date);


        } catch (Exception e) {
            log.error("generate error", e);
            throw new RuntimeException("generate header error");
        }
        log.info("header info,{}", header);
        return header;
    }

    private static String getCanonicalQueryString(String query) {
        if (query == null || query.trim().length() == 0) {
            return "";
        }
        List<Pair<String, String>> queryParamList = new ArrayList<>();
        String[] params = query.split("&");
        for (String param : params) {
            int eqIndex = param.indexOf("=");
            String key = param;
            String value = "";
            if (eqIndex != -1) {
                key = param.substring(0, eqIndex);
                value = param.substring(eqIndex + 1);
            }
            Pair<String, String> pair = new Pair<String, String>(key, value);
            queryParamList.add(pair);
        }

        List<Pair<String, String>> sortedParamList = queryParamList.stream().sorted(Comparator.comparing(param -> param.getKey() + "=" + Optional.ofNullable(param.getValue()).orElse(""))).collect(Collectors.toList());
        List<Pair<String, String>> encodeParamList = new ArrayList<>();
        sortedParamList.stream().forEach(param -> {
            try {
                String key = URLEncoder.encode(param.getKey(), "utf-8");
                String value = URLEncoder.encode(Optional.ofNullable(param.getValue()).orElse(""), "utf-8")
                        .replaceAll("\%2B", "%20")
                        .replaceAll("\+", "%20")
                        .replaceAll("\%21", "!")
                        .replaceAll("\%27", "'")
                        .replaceAll("\%28", "(")
                        .replaceAll("\%29", ")")
                        .replaceAll("\%7E", "~")
                        .replaceAll("\%25", "%");
                encodeParamList.add(new Pair<>(key, value));
            } catch (UnsupportedEncodingException e) {
                throw new RuntimeException("encoding error");
            }
        });
        StringBuilder queryParamString = new StringBuilder(64);
        for (Pair<String, String> encodeParam : encodeParamList) {
            queryParamString.append(encodeParam.getKey()).append("=").append(Optional.ofNullable(encodeParam.getValue()).orElse(""));
            queryParamString.append("&");
        }

        return queryParamString.substring(0, queryParamString.length() - 1);
    }
}