|
|
@@ -0,0 +1,114 @@
|
|
|
+package com.genersoft.iot.vmp.conf;
|
|
|
+
|
|
|
+import com.genersoft.iot.vmp.common.ApiSaveConstant;
|
|
|
+import com.genersoft.iot.vmp.conf.security.SecurityUtils;
|
|
|
+import com.genersoft.iot.vmp.service.ILogService;
|
|
|
+import com.genersoft.iot.vmp.storager.dao.dto.LogDto;
|
|
|
+import org.apache.commons.lang3.StringUtils;
|
|
|
+import org.slf4j.Logger;
|
|
|
+import org.slf4j.LoggerFactory;
|
|
|
+import org.springframework.beans.factory.annotation.Autowired;
|
|
|
+import org.springframework.http.HttpStatus;
|
|
|
+import org.springframework.web.filter.OncePerRequestFilter;
|
|
|
+
|
|
|
+import javax.servlet.*;
|
|
|
+import javax.servlet.annotation.WebFilter;
|
|
|
+import javax.servlet.http.HttpServletRequest;
|
|
|
+import javax.servlet.http.HttpServletResponse;
|
|
|
+import java.io.IOException;
|
|
|
+import java.text.SimpleDateFormat;
|
|
|
+
|
|
|
+@WebFilter(filterName = "ApiAccessFilter", urlPatterns = "/api/*", asyncSupported=true)
|
|
|
+public class ApiAccessFilter extends OncePerRequestFilter {
|
|
|
+
|
|
|
+ private final static Logger logger = LoggerFactory.getLogger(ApiAccessFilter.class);
|
|
|
+
|
|
|
+ private final SimpleDateFormat format = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss");
|
|
|
+
|
|
|
+ @Autowired
|
|
|
+ private UserSetup userSetup;
|
|
|
+
|
|
|
+ @Autowired
|
|
|
+ private ILogService logService;
|
|
|
+
|
|
|
+
|
|
|
+ @Override
|
|
|
+ protected void doFilterInternal(HttpServletRequest servletRequest, HttpServletResponse servletResponse, FilterChain filterChain) throws ServletException, IOException {
|
|
|
+ String username = null;
|
|
|
+ if (SecurityUtils.getUserInfo() == null) {
|
|
|
+ username = servletRequest.getParameter("username");
|
|
|
+ }else {
|
|
|
+ username = SecurityUtils.getUserInfo().getUsername();
|
|
|
+ }
|
|
|
+ long start = System.currentTimeMillis(); // 请求进入时间
|
|
|
+ String uriName = ApiSaveConstant.getVal(servletRequest.getRequestURI());
|
|
|
+
|
|
|
+ filterChain.doFilter(servletRequest, servletResponse);
|
|
|
+
|
|
|
+ if (uriName != null && userSetup.getLogInDatebase()) {
|
|
|
+
|
|
|
+ LogDto logDto = new LogDto();
|
|
|
+ logDto.setName(uriName);
|
|
|
+ logDto.setUsername(username);
|
|
|
+ logDto.setAddress(servletRequest.getRemoteAddr());
|
|
|
+ logDto.setResult(HttpStatus.valueOf(servletResponse.getStatus()).toString());
|
|
|
+ logDto.setTiming(System.currentTimeMillis() - start);
|
|
|
+ logDto.setType(servletRequest.getMethod());
|
|
|
+ logDto.setUri(servletRequest.getRequestURI());
|
|
|
+ logDto.setCreateTime(format.format(System.currentTimeMillis()));
|
|
|
+ logService.add(logDto);
|
|
|
+// logger.warn("[Api Access] [{}] [{}] [{}] [{}] [{}] {}ms",
|
|
|
+// uriName, servletRequest.getMethod(), servletRequest.getRequestURI(), servletRequest.getRemoteAddr(), HttpStatus.valueOf(servletResponse.getStatus()),
|
|
|
+// System.currentTimeMillis() - start);
|
|
|
+
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 获取IP地址
|
|
|
+ *
|
|
|
+ * @param request 请求
|
|
|
+ * @return request发起客户端的IP地址
|
|
|
+ */
|
|
|
+ private String getIP(HttpServletRequest request) {
|
|
|
+ if (request == null) {
|
|
|
+ return "0.0.0.0";
|
|
|
+ }
|
|
|
+
|
|
|
+ String Xip = request.getHeader("X-Real-IP");
|
|
|
+ String XFor = request.getHeader("X-Forwarded-For");
|
|
|
+
|
|
|
+ String UNKNOWN_IP = "unknown";
|
|
|
+ if (StringUtils.isNotEmpty(XFor) && !UNKNOWN_IP.equalsIgnoreCase(XFor)) {
|
|
|
+ //多次反向代理后会有多个ip值,第一个ip才是真实ip
|
|
|
+ int index = XFor.indexOf(",");
|
|
|
+ if (index != -1) {
|
|
|
+ return XFor.substring(0, index);
|
|
|
+ } else {
|
|
|
+ return XFor;
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ XFor = Xip;
|
|
|
+ if (StringUtils.isNotEmpty(XFor) && !UNKNOWN_IP.equalsIgnoreCase(XFor)) {
|
|
|
+ return XFor;
|
|
|
+ }
|
|
|
+
|
|
|
+ if (StringUtils.isBlank(XFor) || UNKNOWN_IP.equalsIgnoreCase(XFor)) {
|
|
|
+ XFor = request.getHeader("Proxy-Client-IP");
|
|
|
+ }
|
|
|
+ if (StringUtils.isBlank(XFor) || UNKNOWN_IP.equalsIgnoreCase(XFor)) {
|
|
|
+ XFor = request.getHeader("WL-Proxy-Client-IP");
|
|
|
+ }
|
|
|
+ if (StringUtils.isBlank(XFor) || UNKNOWN_IP.equalsIgnoreCase(XFor)) {
|
|
|
+ XFor = request.getHeader("HTTP_CLIENT_IP");
|
|
|
+ }
|
|
|
+ if (StringUtils.isBlank(XFor) || UNKNOWN_IP.equalsIgnoreCase(XFor)) {
|
|
|
+ XFor = request.getHeader("HTTP_X_FORWARDED_FOR");
|
|
|
+ }
|
|
|
+ if (StringUtils.isBlank(XFor) || UNKNOWN_IP.equalsIgnoreCase(XFor)) {
|
|
|
+ XFor = request.getRemoteAddr();
|
|
|
+ }
|
|
|
+ return XFor;
|
|
|
+ }
|
|
|
+}
|