Token的生成和验证--Java

青旅半醒 2022-06-16 14:41 170阅读 0赞

遇到了token验证的需求，然后下了一个demo，因为我只用到了token的生成和验证，所以根据自己的需求整理了一下，原版demo下载：[http://download.csdn.net/detail/qierkang/9792660][http_download.csdn.net_detail_qierkang_9792660]  
1. 加密工具类，XXTEAUtil

import org.apache.commons.codec.binary.Base64;
    
    
    public class XXTEAUtil { 
    
        /** * 使用密钥加密数据 * @param plain * @param key * @return */
        public static byte[] encrypt(byte[] plain, byte[] key) {
            if (plain.length == 0) {
                return plain;
            }
            return toByteArray(encrypt(toIntArray(plain, true), toIntArray(key, false)), false);
        }
    
        /** * 使用密钥解密 * @param cipher * @param key * @return */
        public static byte[] decrypt(byte[] cipher, byte[] key) {
            if (cipher.length == 0) {
                return cipher;
            }
            return toByteArray(decrypt(toIntArray(cipher, false), toIntArray(key, false)), true);
        }
    
        /** * 使用密钥加密数据 * @param v * @param k * @return */
        public static int[] encrypt(int[] v, int[] k) {
            int n = v.length - 1;
    
            if (n < 1) {
                return v;
            }
            if (k.length < 4) {
                int[] key = new int[4];
    
                System.arraycopy(k, 0, key, 0, k.length);
                k = key;
            }
            int z = v[n], y = v[0], delta = 0x9E3779B9, sum = 0, e;
            int p, q = 6 + 52 / (n + 1);
    
            while (q-- > 0) {
                sum = sum + delta;
                e = sum >>> 2 & 3;
                for (p = 0; p < n; p++) {
                    y = v[p + 1];
                    z = v[p] += (z >>> 5 ^ y << 2) + (y >>> 3 ^ z << 4) ^ (sum ^ y) + (k[p & 3 ^ e] ^ z);
                }
                y = v[0];
                z = v[n] += (z >>> 5 ^ y << 2) + (y >>> 3 ^ z << 4) ^ (sum ^ y) + (k[p & 3 ^ e] ^ z);
            }
            return v;
        }
    
        /** * 使用密钥解密数据 * @param v * @param k * @return */
        public static int[] decrypt(int[] v, int[] k) {
            int n = v.length - 1;
    
            if (n < 1) {
                return v;
            }
            if (k.length < 4) {
                int[] key = new int[4];
    
                System.arraycopy(k, 0, key, 0, k.length);
                k = key;
            }
            int z = v[n], y = v[0], delta = 0x9E3779B9, sum, e;
            int p, q = 6 + 52 / (n + 1);
    
            sum = q * delta;
            while (sum != 0) {
                e = sum >>> 2 & 3;
            for (p = n; p > 0; p--) {
                z = v[p - 1];
                y = v[p] -= (z >>> 5 ^ y << 2) + (y >>> 3 ^ z << 4) ^ (sum ^ y) + (k[p & 3 ^ e] ^ z);
            }
            z = v[n];
            y = v[0] -= (z >>> 5 ^ y << 2) + (y >>> 3 ^ z << 4) ^ (sum ^ y) + (k[p & 3 ^ e] ^ z);
            sum = sum - delta;
            }
            return v;
        }
    
        /** * 字节数组转换为整型数组 * @param data * @param includeLength * @return */
        private static int[] toIntArray(byte[] data, boolean includeLength) {
            int n = (((data.length & 3) == 0) ? (data.length >>> 2) : ((data.length >>> 2) + 1));
            int[] result;
    
            if (includeLength) {
                result = new int[n + 1];
                result[n] = data.length;
            } else {
                result = new int[n];
            }
            n = data.length;
            for (int i = 0; i < n; i++) {
                result[i >>> 2] |= (0x000000ff & data[i]) << ((i & 3) << 3);
            }
            return result;
        }
    
        /** * 整型数组转换为字节数组 * @param data * @param includeLength * @return */
        private static byte[] toByteArray(int[] data, boolean includeLength) {
            int n = data.length << 2;
            if (includeLength) {
                int m = data[data.length - 1];
    
                if (m > n) {
                    return null;
                } else {
                    n = m;
                }
            }
            byte[] result = new byte[n];
    
            for (int i = 0; i < n; i++) {
                result[i] = (byte) ((data[i >>> 2] >>> ((i & 3) << 3)) & 0xff);
            }
            return result;
        }
    
        /** * 先XXXTEA加密，后Base64加密 * @param plain * @param key * @return */
        public static String encrypt(String plain, String key) {
            String cipher = "";
            byte[] k = key.getBytes();
            byte[] v = plain.getBytes();
            cipher = new String(Base64.encodeBase64(XXTEAUtil.encrypt(v, k)));
            cipher = cipher.replace('+', '-');
            cipher = cipher.replace('/', '_');
            cipher = cipher.replace('=', '.');
            return cipher;
        }
    
        /** * 先Base64解密，后XXXTEA解密 * @param cipher * @param key * @return */
        public static String decrypt(String cipher, String key) {
            String plain = "";
            cipher = cipher.replace('-', '+');
            cipher = cipher.replace('_', '/');
            cipher = cipher.replace('.', '=');
            byte[] k = key.getBytes();
            byte[] v = Base64.decodeBase64(cipher);
            plain = new String(XXTEAUtil.decrypt(v, k));
            return plain;
        }
    
    }

2 . token的生成和验证

import java.util.Random;
    import java.util.concurrent.TimeUnit;
    
    import org.apache.commons.lang.StringUtils;
    
    
    public class TokenUtil { 
    
        private static final String[] codeBase= {
       "0","1","2","3","4","5","6","7","8","9","A","B","C","D","E","F","G","H","I","J","K","L","M","N","O","P","Q","R","S","T","U","V","W","X","Y","Z","a","b","c","d","e","f","g","h","i","j","k","l","m","n","o","p","q","r","s","t","u","v","w","x","y","z"};
    
        private static Random rand= new Random();
    
        /** XXTEA加密解密的密钥 */
        private static String secKey = "captcha";
    
        /** token超时门限(天) */
        private static long expire = 30;
    
    
        /** 验证码字符数 */
        private static int charCount = 4;
    
        public static final  String  genToken() {
            StringBuffer sb= new StringBuffer();
            for(int i=0; i<charCount; i++){
                int randInt= Math.abs(rand.nextInt());
                sb.append(codeBase[randInt % codeBase.length]);
            }
            long timestamp= System.currentTimeMillis();
            String token= null;
            token= String.format("%s_%d", sb.toString(), timestamp);
            System.out.println("未加密的token:"+token);
            token= XXTEAUtil.encrypt(token, secKey);
            return token;
        }
    
        public static final boolean verificationToken(String token) throws StatusInfoException{
            String plainText= XXTEAUtil.decrypt(token, secKey);
            if (StringUtils.isBlank(plainText)){
                    throw new IllegalStateException("解密失败,token可能遭到篡改");
                }
                String[] plainTextArr= plainText.split("_");
                if (plainTextArr.length!=2){
                    throw new IllegalStateException("token数据格式错误");
                }
                long timestamp= 0;
                try{
                    timestamp= Long.parseLong(plainTextArr[1]);
                }catch(NumberFormatException e){
                    throw new IllegalStateException("时间戳无效");
                }
                if ((System.currentTimeMillis() - timestamp)>TimeUnit.MILLISECONDS.convert(expire+5, TimeUnit.DAYS)){
                    throw new IllegalStateException("token已过期");
                }
            return true;
        }
    }

具体用到哪些jar包，可以下载demo看

[http_download.csdn.net_detail_qierkang_9792660]: http://download.csdn.net/detail/qierkang/9792660