http接口安全校驗

@Component
public class MassageInterceptor implements HandlerInterceptor {

    private static final Logger log = LoggerFactory.getLogger(MassageInterceptor.class);

    /**
     * 進入controller層之前攔截請求
     *
     * @param httpServletRequest
     * @param httpServletResponse
     * @param o
     * @return
     * @throws Exception
     */
    @Override
    public boolean preHandle(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object o) throws Exception {
        // 計算校驗值 是否與cs匹配
        String bodyJson = httpServletRequest.getAttribute("postParameter").toString();
        String cs = httpServletRequest.getParameter("cs");
        String openkey = "RIqXkbml6dunptIc";
        String openid = httpServletRequest.getParameter("openid");
        String ts = httpServletRequest.getParameter("ts");
        if (StringUtils.isEmpty(openid)) {
            errorResponse(httpServletResponse, "openid不能為空");
            return false;
        }

        if (StringUtils.isEmpty(ts)) {
            errorResponse(httpServletResponse, "時間戳不能為空");
            return false;
        }
        StringBuilder csBuilder = new StringBuilder()
                .append("Data[").append(bodyJson).append("];")
                .append("openid[").append(openid).append("];")
                .append("openkey[").append(openkey).append("];")
                .append("ts[").append(ts).append("];");
        //logger.info("MD5加密字符串：{}", csBuilder.toString());
        if (!cs.equals(MD5Util.md5(csBuilder.toString()))) {
            exceptionResponse(httpServletResponse, "CS驗證不通過");
            return false;
        }
        return true;
    }

    @Override
    public void postHandle(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object o, ModelAndView modelAndView) throws Exception {
        // log.info("--------------處理請求完成后視圖渲染之前的處理操作---------------");
    }

    @Override
    public void afterCompletion(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object o, Exception e) throws Exception {
        //log.info("---------------視圖渲染之后的操作-------------------------0");
    }

    private void errorResponse(HttpServletResponse response, String errorMsg) throws Exception {
        response.setCharacterEncoding("UTF-8");
        response.setContentType("application/json; charset=utf-8");
        PrintWriter out = response.getWriter();
        HttpResult resultMsg = new HttpResult();
        resultMsg.setCode(HttpResultConstant.HTTP_ERROR);
        resultMsg.setMsg(errorMsg);
        JSONObject obj = JSONObject.fromObject(resultMsg);
        out.append(obj.toString());
        log.info("接口響應：{}", obj.toString());
    }

    private void exceptionResponse(HttpServletResponse response, String errorMsg) throws Exception {
        response.setCharacterEncoding("UTF-8");
        response.setContentType("application/json; charset=utf-8");
        PrintWriter out = response.getWriter();
        HttpResult resultMsg = new HttpResult();
        resultMsg.setCode(HttpResultConstant.HTTP_EXCEPTION);
        resultMsg.setMsg(errorMsg);
        JSONObject obj = JSONObject.fromObject(resultMsg);
        out.append(obj.toString());
        log.info("接口響應：{}", obj.toString());
    }

}