接口安全验证 - 好文

<>ip黑名单过滤
import lombok.extern.slf4j.Slf4j; import org.springframework.beans.factory.
annotation.Autowired; import org.springframework.core.annotation.Order; import
org.springframework.data.redis.core.StringRedisTemplate; import org.
springframework.stereotype.Component; import org.springframework.web.filter.
OncePerRequestFilter; import javax.servlet.FilterChain; import javax.servlet.
ServletException; import javax.servlet.http.HttpServletRequest; import javax.
servlet.http.HttpServletResponse; import java.io.IOException; /** * 描述:黑名单过滤 *
* @author ZMY * @date 2018/11/2711:01 */ @Component @Order(1) @Slf4j public
class IpFilter extends OncePerRequestFilter { @Autowired private
StringRedisTemplate stringRedisTemplate; private static final String
IP_BLACK_LIST_KEY= "ip_black_list_%s"; private static String[] IP_HEADS = new
String[]{"x-forwarded-for", "proxy-client-ip", "wl-proxy-client-ip",
"http_client_ip", "http_x_forwarded_for",}; @Override protected void
doFilterInternal(HttpServletRequest request, HttpServletResponse response,
FilterChain filterChain) throws ServletException, IOException { // 获取IP地址
String ip= WebUtils.getRemoteAddr(request); log.info("请求的ip:{}"+ip); String key
= String.format(IP_BLACK_LIST_KEY,ip); boolean flag = this.stringRedisTemplate.
hasKey(key); if(flag){ // 将相关的错误返回给客户端 WebUtils.write(response,BasicResult.fail(
10001, "ip存在黑名单中")); return; } filterChain.doFilter(request,response); } }
<>这是工具类
import com.google.common.collect.Maps; import com.zhuguang.lession8.model.
BasicResult; import java.io.IOException; import java.io.OutputStreamWriter;
import java.io.PrintWriter; import java.io.UnsupportedEncodingException; import
java.util.Arrays; import java.util.List; import java.util.TreeMap; import javax.
servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse;
import lombok.extern.slf4j.Slf4j; import org.apache.commons.lang3.ArrayUtils;
/** * @author Hikaru * Created on 2018/5/27. */ @Slf4j public class WebUtils {
private static String[] IP_HEADS = new String[]{"x-forwarded-for",
"proxy-client-ip", "wl-proxy-client-ip", "http_client_ip",
"http_x_forwarded_for",}; public static String getRemoteAddr(HttpServletRequest
request) { for (String header : IP_HEADS) { String ip = request.getHeader(header
); if (ip != null && ip.length() > 0 && !"unknown".equalsIgnoreCase(ip)) { if (
ip.indexOf(",") > -1) { ip = ip.substring(0, ip.indexOf(",")); } return ip; } }
return request.getRemoteAddr(); } public static void write(HttpServletResponse
response, BasicResult basicResult) throws IOException { response.
setCharacterEncoding("UTF-8"); response.setContentType("application/json;
charset=utf-8"); PrintWriter writer = null; OutputStreamWriter osw = null; try {
osw= new OutputStreamWriter(response.getOutputStream(), "UTF-8"); writer = new
PrintWriter(osw, true); String jsonStr = GsonUtils.getGsonInstance().toJson(
basicResult); writer.write(jsonStr); writer.flush(); writer.close(); osw.close()
; } catch (UnsupportedEncodingException e) { log.error("过滤器返回信息失败:" + e.
getMessage(), e); } catch (IOException e) { log.error("过滤器返回信息失败:" + e.
getMessage(), e); } finally { if (null != writer) { writer.close(); } if (null
!= osw) { osw.close(); } } } /** * 是否匹配配置路径 */ public static boolean match(
HttpServletRequest request,List<String> paths) { String path = request.
getRequestURI(); boolean flag = false; for (String string : paths) { if (string.
matches(path)) { flag = true; break; } } return flag; } /** * 拼接get参数和post参数列表
*/ public static String paramResult(HttpServletRequest request) { TreeMap<String
, String> tree = Maps.newTreeMap(); request.getParameterMap().forEach( (key,
value) -> { if (ArrayUtils.isNotEmpty(value) && isNotBlankArray(value)) { tree.
put(key, Arrays.toString(value)); } } ); StringBuilder sb = new StringBuilder();
tree.forEach((key, value) -> { sb.append(key); sb.append("="); sb.append(value)
; }); return sb.toString(); } private static boolean isNotBlankArray(String[]
value) { if (value.length == 1 && value[0] == "") { return false; } return true;
} }

热门工具换一换