| 
					
				 | 
			
			
				@@ -0,0 +1,114 @@ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+package com.genersoft.iot.vmp.conf; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import com.genersoft.iot.vmp.common.ApiSaveConstant; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import com.genersoft.iot.vmp.conf.security.SecurityUtils; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import com.genersoft.iot.vmp.service.ILogService; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import com.genersoft.iot.vmp.storager.dao.dto.LogDto; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import org.apache.commons.lang3.StringUtils; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import org.slf4j.Logger; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import org.slf4j.LoggerFactory; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import org.springframework.beans.factory.annotation.Autowired; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import org.springframework.http.HttpStatus; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import org.springframework.web.filter.OncePerRequestFilter; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import javax.servlet.*; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import javax.servlet.annotation.WebFilter; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import javax.servlet.http.HttpServletRequest; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import javax.servlet.http.HttpServletResponse; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import java.io.IOException; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import java.text.SimpleDateFormat; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+@WebFilter(filterName = "ApiAccessFilter", urlPatterns = "/api/*", asyncSupported=true) 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+public class ApiAccessFilter extends OncePerRequestFilter { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+    private final static Logger logger = LoggerFactory.getLogger(ApiAccessFilter.class); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+    private final SimpleDateFormat format = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss"); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+    @Autowired 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+    private UserSetup userSetup; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+    @Autowired 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+    private ILogService logService; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+    @Override 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+    protected void doFilterInternal(HttpServletRequest servletRequest, HttpServletResponse servletResponse, FilterChain filterChain) throws ServletException, IOException { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        String username = null; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        if (SecurityUtils.getUserInfo() == null) { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            username = servletRequest.getParameter("username"); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        }else { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            username = SecurityUtils.getUserInfo().getUsername(); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        } 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        long start = System.currentTimeMillis(); // 请求进入时间 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        String uriName = ApiSaveConstant.getVal(servletRequest.getRequestURI()); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        filterChain.doFilter(servletRequest, servletResponse); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        if (uriName != null && userSetup.getLogInDatebase()) { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            LogDto logDto = new LogDto(); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            logDto.setName(uriName); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            logDto.setUsername(username); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            logDto.setAddress(servletRequest.getRemoteAddr()); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            logDto.setResult(HttpStatus.valueOf(servletResponse.getStatus()).toString()); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            logDto.setTiming(System.currentTimeMillis() - start); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            logDto.setType(servletRequest.getMethod()); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            logDto.setUri(servletRequest.getRequestURI()); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            logDto.setCreateTime(format.format(System.currentTimeMillis())); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            logService.add(logDto); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+//            logger.warn("[Api Access]  [{}] [{}] [{}] [{}] [{}] {}ms", 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+//                    uriName, servletRequest.getMethod(), servletRequest.getRequestURI(), servletRequest.getRemoteAddr(), HttpStatus.valueOf(servletResponse.getStatus()), 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+//                    System.currentTimeMillis() - start); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        } 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+    } 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+    /** 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+     * 获取IP地址 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+     * 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+     * @param request 请求 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+     * @return request发起客户端的IP地址 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+     */ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+    private String getIP(HttpServletRequest request) { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        if (request == null) { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            return "0.0.0.0"; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        } 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        String Xip = request.getHeader("X-Real-IP"); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        String XFor = request.getHeader("X-Forwarded-For"); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        String UNKNOWN_IP = "unknown"; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        if (StringUtils.isNotEmpty(XFor) && !UNKNOWN_IP.equalsIgnoreCase(XFor)) { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            //多次反向代理后会有多个ip值,第一个ip才是真实ip 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            int index = XFor.indexOf(","); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            if (index != -1) { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+                return XFor.substring(0, index); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            } else { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+                return XFor; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            } 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        } 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        XFor = Xip; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        if (StringUtils.isNotEmpty(XFor) && !UNKNOWN_IP.equalsIgnoreCase(XFor)) { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            return XFor; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        } 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        if (StringUtils.isBlank(XFor) || UNKNOWN_IP.equalsIgnoreCase(XFor)) { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            XFor = request.getHeader("Proxy-Client-IP"); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        } 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        if (StringUtils.isBlank(XFor) || UNKNOWN_IP.equalsIgnoreCase(XFor)) { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            XFor = request.getHeader("WL-Proxy-Client-IP"); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        } 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        if (StringUtils.isBlank(XFor) || UNKNOWN_IP.equalsIgnoreCase(XFor)) { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            XFor = request.getHeader("HTTP_CLIENT_IP"); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        } 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        if (StringUtils.isBlank(XFor) || UNKNOWN_IP.equalsIgnoreCase(XFor)) { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            XFor = request.getHeader("HTTP_X_FORWARDED_FOR"); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        } 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        if (StringUtils.isBlank(XFor) || UNKNOWN_IP.equalsIgnoreCase(XFor)) { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+            XFor = request.getRemoteAddr(); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        } 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+        return XFor; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+    } 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+} 
			 |