1

zj

2024-06-13 a4662cc65a02f258062bf6cc392ceb1017db9292

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
Êþº¾4
0
:
;

:    ¯
<
=
>
?
@    ¯
A
²
B    ¯
C
D
E

F
G
H
I
J
K
J
L
M

N
D
Oû
P
Q

R
S
T

U
V
W
X
Y

Z    ¯
[
\
]
^

_
`

R
a    ¯
b

c
d

e
f

g
h    
i
j

i
k

e
l    ¯
m
n
o

p
q
r
s
t
u
-
v
]
w
x
¯
y
¯
z
{
|

}
~    

€


‚    

ƒ    ¯
„

…
†
¯
‡    
i
ˆ
‰
Š
@
:
‹
Œ
@

@
Ž



0
Ž

_
‘
’    ¯
“

”
•

}
–
—
]
˜
™
š
›
œ
     ¯

ž
Ÿ
 

¡
¢è<    ¯
£
¤
¥
¤
¦
§
I
¨a
©
ª
c
«a
¬
¤
­

…
®
¯
°
±
²
¤
³
´
µ
c
¶
c
·
¤
¸x
¹
º
»    ¯
¼
½
x
:
¾
¿
%

À

Á
Â
Ã

Ä
Å

Æ
Ç
È
É
Ê
Ë

Ì
Í
Î
Ï

Ð
Ñ
Ò

Ó
Ô

Ó
Õ

Ó
Ö


×
Ø
Ù
Ú
Û
Ü

Ý
Þ
ß
]
à
á
â
ã
ä
å
æ
ç
è
é

ê
ë
ì
]
í

Ý
î
ï
ð¸

ñ
ò
ó
ô
õ
­
ö
÷

ø
ù

ú
û
ü
²
:
ý
´
:
þ
logger
Lorg/slf4j/Logger;
ENCRYPTION_KEY
Ljava/lang/String;
RuntimeVisibleAnnotations
4Lorg/springframework/beans/factory/annotation/Value;
value
${sign.encryption-key}
VERSION_NUMBER
${sign.version-number}

tokenStore
5Lcom/yami/trading/security/common/manager/TokenStore;
8Lorg/springframework/beans/factory/annotation/Autowired;
httpHandler
-Lcom/yami/trading/common/handler/HttpHandler;
authConfigAdapter
<Lcom/yami/trading/security/common/adapter/AuthConfigAdapter;
riskClientService
1Lcom/yami/trading/service/user/RiskClientService;
userService
+Lcom/yami/trading/service/user/UserService;
WHITE_URLS2
Ljava/util/HashSet;
    Signature
'Ljava/util/HashSet<Ljava/lang/String;>;
 ADMINCACHEMAP
Ljava/util/Map;
3Ljava/util/Map<Ljava/lang/String;Ljava/lang/Long;>;
pathMatcher
)Lorg/springframework/util/AntPathMatcher;
$assertionsDisabled

Z
<init>
()V
Code
LineNumberTable
LocalVariableTable
this
4Lcom/yami/trading/security/common/filter/AuthFilter;
doFilter
[(Ljavax/servlet/ServletRequest;Ljavax/servlet/ServletResponse;Ljavax/servlet/FilterChain;)V
excludePathPattern
maybe
userId

userEntity
"Lcom/yami/trading/bean/model/User;

e
Ljava/lang/Exception;
loginIP
Ljava/lang/Object;
request
Ljavax/servlet/ServletRequest;
response
Ljavax/servlet/ServletResponse;
chain
Ljavax/servlet/FilterChain;
req
'Ljavax/servlet/http/HttpServletRequest;
resp
(Ljavax/servlet/http/HttpServletResponse;

requestUri
servletPath
servletPathWhiteUri
ignoreTokenUri
excludePathPatterns
Ljava/util/List;
optionalTokenUri
 maybeAuthUris
token
accessToken
userInfoInToken
7Lcom/yami/trading/security/common/bo/UserInfoInTokenBO;
clientIp
userCode
tokenErr
9Lcom/yami/trading/common/exception/YamiShopBindException;
LocalVariableTypeTable
$Ljava/util/List<Ljava/lang/String;>;
 StackMapTable
÷
ÿ

=
>
M
s
r

Exceptions
    checkSign
I(Ljavax/servlet/http/HttpServletRequest;Ljavax/servlet/ServletResponse;)Z
entry
Entry
InnerClasses
Ljava/util/Map$Entry;
 timestampDate

J
!Ljava/lang/NumberFormatException;
servletPath2
    timestamp
systemRandom
waitSign
currDate
oldDate
key
sign

md5_result
9Ljava/util/Map$Entry<Ljava/lang/String;Ljava/lang/Long;>;
»
processTimezone
*(Ljavax/servlet/http/HttpServletRequest;)V
showTimeZone
clientTimeZone
checkBlackRequest
v(Ljavax/servlet/http/HttpServletRequest;Ljavax/servlet/http/HttpServletResponse;Ljava/lang/String;Ljava/lang/String;)Z
responseJson
riskList
:Ljava/util/List<Lcom/yami/trading/bean/model/RiskClient;>;
closeAction
=(Ljava/lang/String;Ljavax/servlet/http/HttpServletResponse;)V
Ljava/io/IOException;
ô
<clinit>

SourceFile
AuthFilter.java
*Lorg/springframework/stereotype/Component;×Ø
'org/springframework/util/AntPathMatcherÓÔ
%javax/servlet/http/HttpServletRequest
&javax/servlet/http/HttpServletResponse    ÌÍ
ÆÇ÷ 
java/lang/String 
 Authorization
null !"


adminLogin
·¸
$---> requestUri:{}, accessToken:*{}*#$%&'(ÁÂ)*+,-./0123½-4ÊË56789
java/lang/Exception
7com/yami/trading/common/exception/YamiShopBindException
Z---> AuthFilter doFilter å¤„理 uri:{}, accessToken:{} æŠ¥ YamiShopBindException å¼‚常:{}
java/lang/Object:;<
>---> AuthFilter doFilter å¤„理 uri:{}, accessToken:{} æŠ¥é”™:
-
.
)
*
Þ=>?Ø@ABCDØEB¿ºF

G3
/updateCheckIp
java/lang/StringBuilder
+com/yami/trading/common/constants/RedisKeys
    ACCESS_IPHIJKLMN
\The Login IP Is Inconsistent With The Operation IP! Login-IP:{} Access-IP:{} Servlet-Path:{}ÄÅOPQRS
/---> requestUri:{} æœªé…ç½® optional ç™½åå•;T
E您的账号已过期或已经在其他地方登录，请重新登录
'您的账号已经在其他地方登录
C---> AuthFilter requestUri:{}, accessToken:{}, è¯·æ±‚处理报错: 
tissuePaper¹º
----> AuthFilter checkSign æ—¶é—´æˆ³ä¸ºç©º:{} 
时间戳为空UVWXYÐÑZ[0\]^
java/util/Map$Entry_
java/lang/Long`YaDbc
8---> AuthFilter checkSign æ—¶é—´æˆ³å’Œéšæœºæ•°ä¸ºç©º:{}
时间戳和随机数为空
3com/yami/trading/security/common/util/ItemRedisKeys
ITEM_ADMIN_SYSTEM_RANDOM_Lb
[---> AuthFilter checkSign å½“前请求时间戳和随机数和上次一样,请求拒绝:{} 
=当前请求时间戳和随机数和上次一样,请求拒绝defghi
*---> AuthFilter checkSign è¯·æ±‚过期:{} 
请求过期
java/lang/NumberFormatExceptionÕÖ
java/lang/AssertionError
)---> AuthFilter checkSign è¯·æ±‚异常:{}
请求异常j 
)---> AuthFilter checkSign ç­¾åä¸ºç©º:{}
签名为空k
%l
)---> AuthFilter checkSign ç­¾åå¤±è´¥:{}
签名失败
timezone
x-api-timezone
config.timezone.showmno

%
UTF-8pqo
defaultrstuvwRx
x-api-client-timezone
riskclient/save
demo/checkip

0

badnetworkyz{
^---> AuthFilter.checkBlackRequest å½“前用户断网 requestUri = {}, clientIp:{}, userCode:{}$<
black
cn/hutool/core/util/CharsetUtil|}
"org/springframework/http/MediaType
application/json~}€
{"code":1,"msg":"Forbidden"}‚ƒ„}
>---> AuthFilter.checkBlackRequest requestUri:{} è®¿é—®æŠ¥é”™: ;%…{
M---> AuthFilter.checkBlackRequest å½“前IP断网 requestUri = {}, clientIp:{}
 !close.action†‡ˆ
&{"code":1,"msg":"Network Unavailable"}
java/io/IOException
3com/yami/trading/common/exception/BusinessException׉
2com/yami/trading/security/common/filter/AuthFilterŠ‹ŒŽ
java/util/HashSet
&java/util/concurrent/ConcurrentHashMap
javax/servlet/Filter
javax/servlet/ServletRequest
javax/servlet/ServletResponse
javax/servlet/FilterChain
java/util/List
java/util/Iterator
5com/yami/trading/security/common/bo/UserInfoInTokenBO
java/lang/Throwable
javax/servlet/ServletException
 getRequestURI
()Ljava/lang/String;
getServletPath
contains
(Ljava/lang/Object;)Z
:com/yami/trading/security/common/adapter/AuthConfigAdapter
()Ljava/util/List;
(cn/hutool/core/collection/CollectionUtil

isNotEmpty
(Ljava/util/Collection;)Z
iterator
()Ljava/util/Iterator;
hasNext
()Z
next
()Ljava/lang/Object;
match
'(Ljava/lang/String;Ljava/lang/String;)Z
maybeAuthUri
    getHeader
&(Ljava/lang/String;)Ljava/lang/String;
cn/hutool/core/util/StrUtil
isBlank
(Ljava/lang/CharSequence;)Z
java/util/Objects
equals
'(Ljava/lang/Object;Ljava/lang/Object;)Z
getParameter
org/slf4j/Logger
info
9(Ljava/lang/String;Ljava/lang/Object;Ljava/lang/Object;)V
%com/yami/trading/common/util/IPHelper
    getIpAddr

isNotBlank
3com/yami/trading/security/common/manager/TokenStore
getUserInfoByAccessToken
L(Ljava/lang/String;Z)Lcom/yami/trading/security/common/bo/UserInfoInTokenBO;

getSysType
()Ljava/lang/Integer;
java/lang/Integer
intValue
()I
2com/yami/trading/security/common/enums/SysTypeEnum
ORDINARY
4Lcom/yami/trading/security/common/enums/SysTypeEnum;
    getUserId
)com/yami/trading/service/user/UserService
cacheUserBy
6(Ljava/lang/String;)Lcom/yami/trading/bean/model/User;
 com/yami/trading/bean/model/User
getUserCode

getMessage
error
((Ljava/lang/String;[Ljava/lang/Object;)V
@(Ljavax/servlet/ServletRequest;Ljavax/servlet/ServletResponse;)V
5com/yami/trading/security/common/util/AuthUserContext
clean
,com/yami/trading/common/util/TimeZoneContext
clientTimeZoneId
Ljava/lang/ThreadLocal;
java/lang/ThreadLocal
remove
showTimeZoneId
$org/apache/commons/lang3/ObjectUtils
ADMIN
append
-(Ljava/lang/String;)Ljava/lang/StringBuilder;
toString
&com/yami/trading/common/util/RedisUtil
get
&(Ljava/lang/String;)Ljava/lang/Object;
equalIpSegment
+com/yami/trading/common/handler/HttpHandler
printServerResponseToWeb
(Ljava/lang/String;I)V
set
:(Lcom/yami/trading/security/common/bo/UserInfoInTokenBO;)V
'(Ljava/lang/String;Ljava/lang/Object;)V
    sendError
(ILjava/lang/String;)V
java/lang/System
currentTimeMillis
()J
 java/util/Map
size
entrySet
()Ljava/util/Set;
 java/util/Set
getValue
    longValue
getKey
&(Ljava/lang/Object;)Ljava/lang/Object;
isEmpty
    parseLong
(Ljava/lang/String;)J
valueOf
(J)Ljava/lang/Long;
put
8(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;
trim
)com/yami/trading/security/common/util/MD5
toUpperCase
,com/yami/trading/common/util/ApplicationUtil
getProperty
8(Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String;
java/net/URLDecoder
decode
java/time/ZoneId
 systemDefault
()Ljava/time/ZoneId;
getId
of
&(Ljava/lang/String;)Ljava/time/ZoneId;
(Ljava/lang/Object;)V
4com/yami/trading/security/common/util/RiskClientUtil
getRiskInfoByUserCode
6(Ljava/lang/String;Ljava/lang/String;)Ljava/util/List;
setCharacterEncoding
(Ljava/lang/String;)V
setContentType
    setStatus
(I)V
    getWriter
()Ljava/io/PrintWriter;
java/io/PrintWriter
write
getRiskInfoByIp
(com/yami/trading/common/util/ThreadUtils
sleep
(J)V
(Ljava/lang/Throwable;)V
java/lang/Class
desiredAssertionStatus
org/slf4j/LoggerFactory
    getLogger
%(Ljava/lang/Class;)Lorg/slf4j/Logger;!¯0
¶·¸¹º
»
¼
½s¾¿º
»
¼
½sÀÁÂ
»
ÃÄÅ
»
ÃÆÇ
»
ÃÈÉ
»
ÃÊË
»
ÃÌÍ
ÎÏÐÑ
ÎÒÓÔÕÖ
×Ø
Ù>
*·
*»Y·µ±Ú
:\Û
ÜÝ
ÞßÙ¤+À:,À:¹
:¹
:6²    ¶
™66    *´¹
:
 
¸ ™6
¹
:¹
™#¹
À:*´¶™6    §ÿÙ6*´¹
:¸ ™9¹
:  ¹
™& ¹
À:*´¶™    6§§ÿÖ¹: ¹:¸š ¸™ :¸š ¸™¹:¸š ¸™:¶™²¹ 
:¸!::
:¸"™š*´#¶$:¶%¶&²'¶(¶& #¶):*´*¹+:Æ
¶,:§W:Á.™-²/½0YSYSY¶1S¹2À.:§#²3½0YSYSYS¹2¿*·4™±*·5™-¹6¸7²8¶9²:¶9±*´;¸<™*,¶=™¸7²8¶9²:¶9±    ™-¹6¸7²8¶9²:¶9±ƕ¶%¶&²>¶(¶& y*´?¶šk»@Y·AC¶D¶)¶D¶E¸F:
¥I¶G¸Hš<²I½0YSYSYS¹2*´Jé¶K¸7²8¶9²:¶9±¸L§0š+²M¹N*´JO
“¶K¸7²8¶9²:¶9±Æ¿-¹6¸7²8¶9²:¶9§]:Á.™*´JP
“¶K¸7²8¶9²:¶9±²Q½0YSYSYS¹2¿:¸7²8¶9²:¶9¿±
R
’
•-
ùI-2I-BQI-aàI-ðI-%7I-
ù2BQaàð%7I_o‘Ú
¾oabcdf!g,h/l2m=oEpdqrrutxx{y†zŽ{­|»}¾~Á€ÄƒÏ„Ú…ì†ðˆ
‰
 ‹
Œ
#Ž
-
;’
>“
C”
G–
J—
R™
^š
r›
y
†ž
‹Ÿ
’ª
•¢
—£
Ÿ¤
¿¥
ɧ
æ¨
é­
ø®
ù³
ÿ¶·òóô¸¼(¾2ò5ó;ôA¿BÄGÅQòTóZô`ÆaÊfÌz͈ΤϷÐÔÑàòãóéôïÒðØøÙýÝ    Þòóô$ß%á*ã-ç7ò:ó@ôFõIèKêSë_òbóhônìoîŒïò”óšô õ£öÛ
dàº­áº
yâº
†ãä
—Råæ¤LçèKDåæ¤Üݤéê
¤ëì¤íîžïð˜ñòóº†ôº!ƒõÖ2röÖ    =g÷ø
{)ùÖ†úøÏÕûº ÚÊüº
>fýþ
Caÿº
G]
º
JZ



=g÷

†ú

æÿ/    



    





þ

 
&úþ

 
)úý'


ÿV



    







 

 





B
ü3
ú$#ûŽ,[
ü%
ÿ



    







 

 








¬



Ù/F+¹
N+R¹:+S¹:»@Y·A*´T¶D¶D¶E:DzU-¹N,ÀÉV¹W¬¸XYm7[e7    ²]¹^

ô¤N²]¹_
¹`
:¹
™5¹
Àa:¹b
Àc¶d    ”œ²]¹e
¹fW§ÿǸg™²h-¹N,ÀÏi¹W¬k:²]¸<™@²]»@Y·A¶D¶D¶E¹l¸<™²m-¹N,ÀÐn¹W¬²]»@Y·A¶D¶D¶E¸o¸p¹qW»@Y·A*´T¶D¶D¶D¶E:¸ora7”œ²t-¹N,ÀÊu¹W¬§2:²wš,Ç»xY·y¿²z-¹N,ÀÌ{¹W¬+|¹:Æ¶}¶~™0²wš,Ç»xY·y¿²-¹N,ÀÍ€¹W¬¸¶‚:  ¶~š²ƒ-¹N,À΄¹W¬¬

l
™
vÚÊ2ý



3
8
C
Q
S
\
d
 r
—
ª
º
½
Å
Ð
Þ
à
ä
í





(
 
*
#
O
$
l
)
w
*

,
Š
-
˜
.
š
5

0
Ÿ
1
±
2
¼
3
Ê
4
Ì
7
Ö
8
è
:
ú
;
<
=
C
D)
F4
GB
HD
Kۘ—#


w#


Ÿ-å
FÜÝFéð
Fëì?
º5
º+
 º3
!º\
ê
"
d
â
#
    ä
b
$º
Öp
%º'
&º 

—#

'
OÿS







þ-
8ú"üI
ûoB
(ü
(úü
ü.


¬
)
*Ù
"‚+…¹M,¸™+†¹M,¸™‡¸ˆM§,‰¶™
,Š¸‹M,¸š,Œ¸™
¸¶ŽM,¸W²:,¶+‘¹N-¸™
¸¶ŽN-¸W²8-¶±ÚF
P    
Q
R
T 
V+
X4
Y;
\K
^R
bW
c^
fg
gn
hu
kz
l
mÛ*‚Ü݂ïð
    y
+ºg
,º
ü
ü"


¬
-
.
ÙÅ
D+¹
:’¶š “¶™¬¸"™¦”¸šœ•¸–:¸ ™!²—½0YSY-SYS¹˜¬™¸–:¸ ™\²—½0YSY-SYS¹˜,Š¹›,¹ž,ȹŸ :,¹¡
¶¢§:²£¹¤¬-•¸¥:¸ ™²¦-¹ ¬-™¸¥:¸ ™M²¦-¹ ,Š¹›,¹ž,ȹŸ :,¹¡
¶¢§:²£¹¤¬¬p´·-ø
-
0-ږ%
p
q
r
u0
w9
xA
y]
|_
€h
p
ƒŒ
„”
…œ
†¥
ˆ©
‰´
Œ·
Š¹
‹Ç
É
’Ñ
“Ù
Ӿ
—è
›ð
Ͽ
ž

Ÿ
 
 

¡

£
"
¤
-
§
0
¥
2
¦
@
¨
B
«Ûz©
/º¹åæ9
0ø
"
/º
2åæ
DÜÝ
Dïð

Dñò
Dÿº
D
º
<óºÑs
0ø
9
0
1Ñs
0
1
'
ü

ü@
 ÷W
ú
ü
 ÷G



2
3
ÙÙC*§¶™<¨¸ª+Š¹›+¹ž+ȹŸ«M+¹¡
,¶¢§ N»­Y-·®¿±
+58¬Ú.
¯    
°
±
²
³(
´+
¶5
¹8
·9
¸B
»Û*9    å
4+
/ºCóºCñò

ÿ8




5ú    
6Ø
Ù\-¯¶°š§³w¯¸±³»²Y·³³    »´Y·µ³]±Ú9;U"Z
@

7
8»

9


a
¤