package project.ddos.filter;
|
|
import java.io.IOException;
|
import java.io.PrintWriter;
|
import java.util.ArrayList;
|
import java.util.Arrays;
|
import java.util.List;
|
|
import javax.servlet.Filter;
|
import javax.servlet.FilterChain;
|
import javax.servlet.FilterConfig;
|
import javax.servlet.ServletException;
|
import javax.servlet.ServletRequest;
|
import javax.servlet.ServletResponse;
|
import javax.servlet.http.HttpServletRequest;
|
import javax.servlet.http.HttpServletResponse;
|
|
import org.apache.commons.collections.CollectionUtils;
|
import org.slf4j.Logger;
|
import org.slf4j.LoggerFactory;
|
import org.springframework.web.context.ContextLoader;
|
import org.springframework.web.context.WebApplicationContext;
|
|
//import com.alibaba.druid.util.StringUtils;
|
|
import kernel.util.JsonUtils;
|
import kernel.util.StringUtils;
|
import kernel.web.ResultObject;
|
import project.ddos.CheckIpRequestCountService;
|
import project.party.PartyService;
|
import project.party.model.Party;
|
import project.syspara.Syspara;
|
import project.syspara.SysparaService;
|
import project.user.token.TokenService;
|
|
/**
|
* 所有服务请求过滤
|
*
|
* @author User
|
*
|
*/
|
public class AllServiceRequestFilter implements Filter {
|
|
private Logger logger = LoggerFactory.getLogger(AllServiceRequestFilter.class);
|
/**
|
* url 白名单
|
*/
|
private List<String> urls = new ArrayList<String>();
|
|
@Override
|
public void destroy() {
|
// TODO Auto-generated method stub
|
|
}
|
public String getIp(HttpServletRequest request) {
|
String ip = request.getHeader("X-Forwarded-For");
|
if (StringUtils.isNotEmpty(ip) && !"unKnown".equalsIgnoreCase(ip)) {
|
// 多次反向代理后会有多个ip值，第一个ip才是真实ip
|
int index = ip.indexOf(",");
|
if (index != -1) {
|
return ip.substring(0, index);
|
} else {
|
return ip;
|
}
|
}
|
ip = request.getHeader("X-Real-IP");
|
if (StringUtils.isNotEmpty(ip) && !"unKnown".equalsIgnoreCase(ip)) {
|
return ip;
|
}
|
return request.getRemoteAddr();
|
}
|
@Override
|
public void doFilter(ServletRequest request, ServletResponse response, FilterChain filterChain)
|
throws IOException, ServletException {
|
// TODO Auto-generated method stub
|
ServletRequest oldRequest = request;
|
ServletResponse oldResponse = response;
|
HttpServletRequest httpServletRequest = (HttpServletRequest) request;
|
HttpServletResponse httpServletResponse = (HttpServletResponse) response;
|
String servletPath = httpServletRequest.getServletPath();
|
String ip = getIp(httpServletRequest);
|
// if(urls.contains(servletPath)||!".action".equals(servletPath.substring(servletPath.length()-7))) {//白名单直接过滤，非action请求直接过滤
|
// filterChain.doFilter(oldRequest, oldResponse);
|
// return;
|
// }
|
WebApplicationContext wac = ContextLoader.getCurrentWebApplicationContext();
|
CheckIpRequestCountService checkIpRequestCountService = (CheckIpRequestCountService) wac
|
.getBean("checkIpRequestCountService");
|
|
/**
|
* 通过获取系统配置里的用户名来给客户无网络连接状态 start
|
*/
|
if (checkUserBlack(httpServletRequest, httpServletResponse, wac)) {
|
return;
|
}
|
;
|
/**
|
* 通过获取系统配置里的用户名来给客户无网络连接状态 end
|
*/
|
|
if (!checkIpRequestCountService.checkButton()) {// 功能未开启则直接正常返回
|
filterChain.doFilter(oldRequest, oldResponse);
|
return;
|
}
|
if (checkIpRequestCountService.isLock(ip)) {// 锁定的ip直接返回
|
return;
|
}
|
if (checkIpRequestCountService.chcekIp(ip, servletPath)) {
|
// 被封ip只能通过特定的url
|
if (checkIpRequestCountService.loginPageRelationAction().contains(servletPath)) {
|
filterChain.doFilter(oldRequest, oldResponse);
|
return;
|
}
|
httpServletResponse.setCharacterEncoding("UTF-8");
|
httpServletResponse.setContentType("application/json; charset=utf-8");
|
httpServletResponse.setHeader("Access-Control-Allow-Origin", "*");
|
PrintWriter out = httpServletResponse.getWriter();
|
ResultObject resultObject = new ResultObject();
|
resultObject.setCode("403");
|
resultObject.setMsg("请重新登录");
|
out.append(JsonUtils.getJsonString(resultObject));
|
} else {
|
filterChain.doFilter(oldRequest, oldResponse);
|
}
|
}
|
|
private boolean checkUserBlack(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse,
|
WebApplicationContext wac) throws IOException {
|
SysparaService sysparaService = (SysparaService) wac.getBean("sysparaService");
|
PartyService partyService = (PartyService) wac.getBean("partyService");
|
TokenService tokenService = (TokenService) wac.getBean("tokenService");
|
Syspara syspara = sysparaService.find("stop_user_internet");
|
if (syspara == null) {
|
return false;
|
}
|
String tokenNeame = httpServletRequest.getParameter("token");
|
String partyId = tokenService.cacheGet(tokenNeame);
|
if (StringUtils.isEmpty(partyId)) {
|
return false;
|
}
|
Party party = partyService.cachePartyBy(partyId, true);
|
if(party==null) {
|
return false;
|
}
|
String username = party.getUsername();
|
|
String userRecordNames = syspara.getValue();
|
List<String> userRecordNamesList = Arrays.asList(userRecordNames.split(","));
|
if (CollectionUtils.isNotEmpty(userRecordNamesList) && userRecordNamesList.contains(username)) {
|
|
httpServletResponse.setCharacterEncoding("UTF-8");
|
httpServletResponse.setContentType("application/json; charset=utf-8");
|
httpServletResponse.setHeader("Access-Control-Allow-Origin", "*");
|
PrintWriter out = httpServletResponse.getWriter();
|
ResultObject resultObject = new ResultObject();
|
resultObject.setCode("1");
|
resultObject.setMsg("Please check network connection");
|
out.append(JsonUtils.getJsonString(resultObject));
|
return true;
|
}
|
return false;
|
}
|
|
@Override
|
public void init(FilterConfig arg0) throws ServletException {
|
// TODO Auto-generated method stub
|
urls.add("/api/user!login.action");// 登录时
|
}
|
}
|
