package com.gwssi.common.utils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import java.security.MessageDigest;
public class MD5Util {
    final static Logger log = LoggerFactory.getLogger(MD5Util.class);
    /**
     * 十六進制下數(shù)字到字符的映射數(shù)組
     */
    private final static String[] HEX_DIGITS = {"0", "1", "2", "3", "4",
            "5", "6", "7", "8", "9", "a", "b", "c", "d", "e", "f"};
    /**
     * md5加密算法
     * @param  originString 待加密字符串
     * @return 加密后的字符串
     */
    public static String encodeByMD5(String originString){
        if (originString != null){
            try{
                //創(chuàng)建具有指定算法名稱的信息摘要
                MessageDigest md = MessageDigest.getInstance("MD5");
                //使用指定的字節(jié)數(shù)組對摘要進行最后更新，然后完成摘要計算
                byte[] results = md.digest(originString.getBytes());
                //將得到的字節(jié)數(shù)組變成字符串返回
                String resultString = byteArrayToHexString(results);
                return resultString.toUpperCase();
            } catch(Exception ex){
                log.error("md5加密算法失敗", ex);
            }
        }
        return null;
    }
    /**
     * 轉(zhuǎn)換字節(jié)數(shù)組為十六進制字符串
     * @param
     * @return    十六進制字符串
     */
    private static String byteArrayToHexString(byte[] b){
        StringBuffer resultSb = new StringBuffer();
        for (int i = 0; i < b.length; i++){
            resultSb.append(byteToHexString(b[i]));
        }
        return resultSb.toString();
    }
    /** 將一個字節(jié)轉(zhuǎn)化成十六進制形式的字符串     */
    private static String byteToHexString(byte b){
        int n = b;
        if (n < 0) {
            n = 256 + n;
        }
        int d1 = n / 16;
        int d2 = n % 16;
        return HEX_DIGITS[d1] + HEX_DIGITS[d2];
    }
}
 

package com.gwssi.device.component;
import com.gwssi.common.entity.Constant;
import com.gwssi.common.entity.ResponseCode;
import com.gwssi.common.entity.Result;
import com.gwssi.common.utils.BgUtils;
import com.gwssi.common.utils.MD5Util;
import com.gwssi.common.utils.ThreadCache;
import net.sf.json.JSONObject;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.stereotype.Component;
import java.text.SimpleDateFormat;
import java.util.Arrays;
import java.util.Date;
import java.util.Map;
@Component
public class WenZhouComponent {
    Logger log = LoggerFactory.getLogger(WenZhouComponent.class);
    @Value("${wenzhou.appKey}")
    String localAppKey;
    @SuppressWarnings("unchecked")
    public Map<String,Object> wenzhouApis(){
        //獲取請求參數(shù)
        JSONObject js = JSONObject.fromObject(ThreadCache.getData(Constant.HTTP_PARAM));
        Map<String,Object> map = (Map<String,Object>) js;
        //map的數(shù)據(jù)是調(diào)取方傳遞的所有參數(shù)，_sign調(diào)取方通過約定規(guī)則生成的簽名，time調(diào)取方生成的時間戳，appKey雙方約定的秘鑰，type為普通必傳參數(shù)
        //必傳參數(shù)校驗
        if(!BgUtils.cheakParamIsNull(map, Arrays.asList("_sign","time","type","appKey"))){
            Result.putValue(ResponseCode.CodeEnum.REQUIRED_PARAM_NULL);
            return null;
        }
        //簽名校驗
        if(!checkSign(map.get("_sign").toString(),map.get("appKey").toString(),Long.parseLong(map.get("time").toString()),map)){
            return null;
        }
        int type = Integer.parseInt(map.get("type").toString());
        //進行接口主體操作
        return null;
    }
    //api連接安全檢驗
    private boolean checkSign(String getSign,String appKey,long time,Map<String,Object> map){
        //接收方校驗appKey是否一致
        //appKey配置是否一致
            log.info("配置本地appkey:"+localAppKey+" 傳遞appkey:"+appKey);
        if(!appKey.equals(localAppKey)){
            Result.putValue(ResponseCode.CodeEnum.APP_KEY_ERROR);
            return false;
        }
        //接收方使用相同的方式生成簽名，對比簽名是否一致
        //此處簽名規(guī)則是，將所有傳入的參數(shù)（除sign簽名參數(shù)），按照順序，依次key=value&拼接在一起，然后進行MD5加密，再將加密后的結(jié)果全部大寫，即為 簽名生成規(guī)則
        StringBuffer str = new StringBuffer("");
        map.keySet().stream().filter(c->!c.equals("_sign")).forEach(c->str.append(c).append("=").append(map.get(c).toString()).append("&"));
        String mySign = MD5Util.encodeByMD5(str.toString());
        //簽名計算規(guī)則是否一致
        log.info("加密字符串:"+str.toString()+" 計算簽名:"+mySign+" 傳遞簽名:"+getSign);
        if(!getSign.equals(mySign.toUpperCase())){
            Result.putValue(ResponseCode.CodeEnum.PARAM_SIGN_INCORRECT);
            return false;
        }
        //接收方校驗時間戳time加上指定時長，如時間戳加5秒（時間戳有效時長為5秒），若當(dāng)前時間已經(jīng)大于時間戳加5秒后的時間，則此簽名過期，拒絕訪問
        //簽名過期判斷(時間戳有效期當(dāng)且僅有5秒)
        if(new Date(time+5000).compareTo(new Date()) < 0){
            log.info("簽名已在"+new SimpleDateFormat("yyyy-MM-dd HH:mm:ss").format(new Date(time+5000))+"后過期");
            Result.putValue(ResponseCode.CodeEnum.SIGN_EXPIRE);
            return false;
        }
        return true;
    }
}

    @ApiOperation("溫州對外提供的api接口地址封裝")
    @RequestMapping("/device/wenzhouApis")
    public void wenzhouApis(){
        wenZhouComponent.wenzhouApis();
    }