From 4bcedc984948c3c757d6b155e019174ef2fe9a0a Mon Sep 17 00:00:00 2001
From: KKSU <15274802129@163.com>
Date: Fri, 14 Jun 2024 14:41:17 +0800
Subject: [PATCH] 星级矩阵
---
src/main/java/cc/mrbird/febs/common/interceptor/DappInterceptor.java | 45 ++++++++++++++++++++++++++++++++-------------
1 files changed, 32 insertions(+), 13 deletions(-)
diff --git a/src/main/java/cc/mrbird/febs/common/interceptor/DappInterceptor.java b/src/main/java/cc/mrbird/febs/common/interceptor/DappInterceptor.java
index 2c4927e..a0d0218 100644
--- a/src/main/java/cc/mrbird/febs/common/interceptor/DappInterceptor.java
+++ b/src/main/java/cc/mrbird/febs/common/interceptor/DappInterceptor.java
@@ -2,14 +2,20 @@
import cc.mrbird.febs.common.contants.AppContants;
import cc.mrbird.febs.common.entity.FebsResponse;
+import cc.mrbird.febs.common.properties.SystemProperties;
+import cc.mrbird.febs.common.utils.LoginUserUtil;
import cc.mrbird.febs.common.utils.RedisUtils;
import cc.mrbird.febs.common.utils.SpringContextUtil;
import cc.mrbird.febs.dapp.entity.DappMemberEntity;
import cc.mrbird.febs.dapp.mapper.DappMemberDao;
import cn.hutool.core.util.StrUtil;
+import cn.hutool.crypto.SecureUtil;
+import cn.hutool.crypto.asymmetric.KeyType;
+import com.alibaba.fastjson.JSONObject;
import com.fasterxml.jackson.databind.ObjectMapper;
import lombok.extern.slf4j.Slf4j;
import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Value;
import org.springframework.http.HttpStatus;
import org.springframework.web.servlet.HandlerInterceptor;
import org.web3j.crypto.Hash;
@@ -29,6 +35,8 @@
private final DappMemberDao dappMemberDao = SpringContextUtil.getBean(DappMemberDao.class);
private final RedisUtils redisUtils = SpringContextUtil.getBean(RedisUtils.class);
+ private SystemProperties systemProperties = SpringContextUtil.getBean(SystemProperties.class);
+
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
if ("OPTIONS".equals(request.getMethod().toUpperCase())) {
@@ -37,7 +45,6 @@
String headAddress = request.getHeader("address");
String key = request.getHeader("key");
String path = request.getServletPath().replace("/dapi", "");
- log.info("进入拦截:{}, {}", headAddress, path);
String chain = request.getHeader("chain");
if (StrUtil.isBlank(headAddress) || StrUtil.isBlank(key)) {
@@ -45,19 +52,21 @@
return false;
}
- Map<Object, Object> signKey = redisUtils.hmget(AppContants.REDIS_KEY_SIGN);
- Object signObj = signKey.get(headAddress);
+ if (!systemProperties.isDebug()) {
+ Map<Object, Object> signKey = redisUtils.hmget(AppContants.REDIS_KEY_SIGN);
+ Object signObj = signKey.get(headAddress);
- if (signObj == null) {
- responseUnAuth(response);
- return false;
- }
- String sign = (String) signObj;
+ if (signObj == null) {
+ responseUnAuth(response);
+ return false;
+ }
+ String sign = (String) signObj;
- String calKey = Hash.sha3(sign + path + headAddress).replace("0x", "");
- if (!calKey.equals(key)) {
- responseUnAuth(response);
- return false;
+ String calKey = LoginUserUtil.sha3(sign + path + headAddress).replace("0x", "");
+ if (!calKey.equals(key)) {
+ responseUnAuth(response);
+ return false;
+ }
}
DappMemberEntity memberEntity = dappMemberDao.selectByAddress(headAddress, null);
@@ -73,6 +82,16 @@
private void responseUnAuth(HttpServletResponse response) throws IOException {
response.setCharacterEncoding("UTF-8");
response.setContentType("application/json; charset=utf-8");
- response.getWriter().write(new ObjectMapper().writeValueAsString(new FebsResponse().code(HttpStatus.UNAUTHORIZED)));
+
+ FebsResponse code = new FebsResponse().code(HttpStatus.UNAUTHORIZED);
+ String encryptBase64 = SecureUtil.rsa(AppContants.RESP_PRIVATE_KEY, AppContants.RESP_PUBLIC_KEY).encryptBase64(JSONObject.toJSONString(code).getBytes(), KeyType.PublicKey);
+ response.getWriter().write(new ObjectMapper().writeValueAsString(encryptBase64));
+ }
+
+ public static void main(String[] args) {
+ String headAddress = "0x971c09aa9735eb98459b17ec8b48932d24cbb931";
+ String path = "/member/walletInfo";
+ String sign = "0x1fd3f82895ca4615daa10ec245d628ca230358e08423df71c8f6c8d3d4163520";
+// System.out.println(Hash.sha3(sign + path + headAddress));
}
}
--
Gitblit v1.9.1