.#fetionssomanager.java.1.8

自己实现的AES和DES的加密算法。自己可以随意组成加密数据结构

package com.cmcc.server;

import java.util.Calendar;
import java.util.Date;
import java.util.GregorianCalendar;
import java.util.List;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import com.cmcc.bean.CredenResult;
import com.cmcc.bean.EncryptedByte;
import com.cmcc.bean.EncryptedByteV2;
import com.cmcc.bean.EncryptedData;
import com.cmcc.bean.EncryptedDataV2;
import com.cmcc.common.util.AES;
import com.cmcc.common.util.BASE64;
import com.cmcc.common.util.ByteConvert;
import com.cmcc.common.util.DES;
import com.cmcc.common.util.IpUtil;
import com.cmcc.common.util.StringUtil;
import com.cmcc.hibernate.GcfgSsikeys;
import com.cmcc.util.Constant;
import com.cmcc.util.SpringHelper;
import com.cmcc.ws.info.UserInfo;

public class FetionSsoManager {
	
	private HttpServletRequest request;

	private HttpServletResponse response;
	
	public FetionSsoManager(){
		
	}
	public FetionSsoManager(HttpServletRequest request,
			HttpServletResponse response) {
		this.request = request;
		this.response = response;		
	}

	/**
	 * 生成核心域的AES认证串
	 * @param users
	 */
	public String createCoreCredenByAES(UserInfo user, String usertype) {
		String result = "";
		String coredomain = Constant.SSO_SERVER_DOMAIN;
		GcfgSsikeys coressikey = Constant.ssikeyMap.get(coredomain);
		if(coressikey==null) {
			List<GcfgSsikeys> list = SpringHelper.getFetionSsoService().getSsikeysList();
			for (int i = 0; i<list.size(); i++) {
				coressikey = (GcfgSsikeys)list.get(i);
				if(coressikey.getDomain().equals(coredomain)) {
					break;
				}
			}
		}
		if (coressikey == null) {
			return result; 
		}
		
		int flag = coressikey.getFlag() & 8;
		int keyid = coressikey.getFlag() & 3;
		String key = "";
		int credenLevel = 0;  
		if (flag == 0) {
			credenLevel = 1;
		} else {
			credenLevel = 2; 
		}		
		
		if (keyid == 0) {
			key = coressikey.getKey0();
		} else if (keyid == 1) {
			key = coressikey.getKey1();
		} else if (keyid == 2) {
			key = coressikey.getKey2();
		}
		
		Date now = new Date();
		
		String uri = request.getRequestURI();
		String domain = StringUtil.getValue(request.getParameter("domain"));
		String clientip = request.getRemoteAddr();
		String corecreden = "";
		credenLevel = 2;
		try {
			if (credenLevel == 1) {
				EncryptedByte encryptedbyte = new EncryptedByte();
				encryptedbyte.setUserType(Constant.USER_TYPE);
				encryptedbyte.setUserUri(uri);
				encryptedbyte.setDomain(domain);
				encryptedbyte.setUserIp(clientip);
				encryptedbyte.setUserMobileNo(String.valueOf(user.getMp()));
				encryptedbyte.setSignInTime(now.getTime());
				encryptedbyte.setSignInTimeOut(now.getTime() + Constant.ExpireTime*1000);
				encryptedbyte.setUserSid(String.valueOf(user.getFid()));
				encryptedbyte.setUserStatus("" + user.getStatus());
				DES des = new DES();
				byte[] inBuff = des.data2Byte(encryptedbyte);
				byte[] outBuff = des.encryptByDES(inBuff, ByteConvert.getKeyByStr(key));
				
				byte[] bresult = new byte[outBuff.length + 5];
				bresult[0] = (byte)coressikey.getFlag().intValue();
				byte[] bet = ByteConvert.int2byte(Constant.ExpireTime);
				System.arraycopy(bet, 0, bresult, 1, bet.length);
				System.arraycopy(outBuff, 0, bresult, 5, outBuff.length);	
				
				corecreden = BASE64.getBASE64(bresult).replaceAll("\r\n", "");
				
			} else if (credenLevel == 2) {
				EncryptedByteV2 datav2 = new EncryptedByteV2();
				datav2.setUserTypeV2(Constant.USER_TYPE_V2);
				datav2.setCreateTime(now.getTime());
				datav2.setExpireTime(now.getTime() + Constant.ExpireTime*1000);
				datav2.setSid(user.getFid());
				datav2.setMobile(user.getMp());
				String logicPoolId = ""+user.getPoolid();
				datav2.setLogicalPoolId(Short.valueOf(logicPoolId));
				long lip = IpUtil.ipToLongValue(clientip);
				datav2.setUserIp(lip);
				datav2.setUserStatusV2(user.getStatus());
				datav2.setUserTypeV2((byte)0);				
//				datav2.setCreateTime(now.getTime());
//				datav2.setExpireTime(this.getDateAddYearToLong());			
				byte[] inBuff = AES.encrypt(datav2.getByteV2(), key);
				
				byte[] bresult = new byte[inBuff.length + 5];
				bresult[0] = (byte)coressikey.getFlag().intValue();
				byte[] bet = ByteConvert.int2byte(Constant.ExpireTime);
				System.arraycopy(bet, 0, bresult, 1, bet.length);
				System.arraycopy(inBuff, 0, bresult, 5, inBuff.length);		

				corecreden = BASE64.getBASE64(bresult).replaceAll("\r", "").replaceAll("\n", "");
			}
			
		} catch (Exception ex) {
			ex.printStackTrace();
		}
		/* 保存cookie */
		if (!"".equals(corecreden)) {
			result = corecreden;
		}
		return result;
		
	}

	/**
	 * 取核心域数据  AES解密
	 * @return CredenResult
	 */
	public CredenResult getCoreEncryptedDataByAES(String corecreden) {
		CredenResult result = new CredenResult();
		result.setType("0");
		try {
		
			String coredomain = Constant.SSO_SERVER_DOMAIN;
			GcfgSsikeys coressikey = Constant.ssikeyMap.get(coredomain);
			if(coressikey==null) {
				List<GcfgSsikeys> list = SpringHelper.getFetionSsoService().getSsikeysList();
				for (int i = 0; i<list.size(); i++) {
					coressikey = (GcfgSsikeys)list.get(i);
					if(coressikey.getDomain().equals(coredomain)) {
						break;
					}
				}
			}
			if (coressikey == null) {
				return result;
			}
			
			byte[] bcorecreden = BASE64.getFromBASE64(corecreden.replaceAll(" ", "+"));
			/* Flag = bCoreCredentail[0] 
			 * bit3：1为第二类凭证，0为第一类凭证(bit "1000" = 8); 
			 * bit0-bit1 key "11" = 3 */
			int flag =  bcorecreden[0] & 8;
			int keyid = bcorecreden[0] & 3;
			String key = "";
			int credenLevel = 0;  
			if (flag == 0) {
				credenLevel = 1;
			} else {
				credenLevel = 2; 
			}
			if (keyid == 0) {
				key = coressikey.getKey0();
			} else if (keyid == 1) {
				key = coressikey.getKey1();
			} else if (keyid == 2) {
				key = coressikey.getKey2();
			}
			if (key == null || "".equals(key) || bcorecreden.length <= 5) {
				return result;
			}
			byte[] bencrypted = new byte[bcorecreden.length - 5];
			
			System.arraycopy(bcorecreden, 5, bencrypted, 0, bcorecreden.length - 5);			
			credenLevel = 2;
			/* 解析一类凭证,以及二类凭证 */
			if (credenLevel == 1) {
				DES des = new DES();
				byte[] outBuff = des.decryptByDES(bencrypted, ByteConvert.getKeyByStr(key));
				EncryptedData data = des.byte2date(outBuff);
				if (data != null) {
					result.setType("1");
					result.setData(data);
				}
			} else if (credenLevel == 2) {
				AES aes = new AES();
				byte[] outBuff;
				outBuff = AES.decrypt(bencrypted, key);
				EncryptedDataV2 data = aes.byte2date(outBuff);
				if (data != null) {
					result.setType("2");
					result.setData(data);
				}				
			}
		} catch (Exception ex) {
			ex.printStackTrace();
		}
		return result;
	}
	
	private long getDateAddYearToLong() {
		long extime = 0;
		Calendar c = new GregorianCalendar();
        c.setTime (new Date());
        c.set(Calendar.YEAR,c.get(Calendar.YEAR)+60);
        extime = c.getTimeInMillis();
		return extime;
	}
}