fastDFS+SpringBoot实现文件上传和下载(防盗链)

客官°小女子只卖身不卖艺 2023-07-16 15:59 2阅读 0赞

发布于2018-12-30 19:23:29  
  
FastDFS内置防盗链采用Token的方式。Token是带时效的，也就是说在设定的时间范围内，比如1分钟，token是有效的。token包含了文件id、时间戳ts和密钥。  
FastDFS在URL中带上当前时间戳和带时效的token，参数名分别为ts和token。Token的生成和校验都是在服务端，因此不会存在安全问题。

例如：

http://你的IP/meng/M00/00/00/rBFE2VwohBOAOrnIAABDRU16ivg948.png?token=f48b02095128da73e43006d2b53f0001&ts=1546159147

一、配置文件说明

1、http.conf中防盗链相关的几个参数如下：

\# cd /etc/fdfs  
\# vim /etc/fdfs/http.conf

\# if use token to anti-steal  
\# default value is false (0)  
\# 是否做token检查，缺省值为false。  
http.anti\_steal.check\_token=true  
  
\# token TTL (time to live), seconds  
\# default value is 600  
\# TTL，即生成token的有效时长(秒)  
http.anti\_steal.token\_ttl=120  
  
\# secret key to generate anti-steal token  
\# this parameter must be set when http.anti\_steal.check\_token set to true  
\# the length of the secret key should not exceed 128 bytes  
\# 生成token的密钥，尽量设置得长一些，千万不要泄露出去  
http.anti\_steal.secret\_key=FastDFS1234567890  
  
\# return the content of the file when check token fail  
\# default value is empty (no file sepecified)  
\# 检查失败，返回的文件内容，需指定本地文件名  
http.anti\_steal.token\_check\_fail=/home/fileError.png

需重启 tracker、storage 和 nginx

\# fdfs\_trackerd /etc/fdfs/tracker.conf  
\# fdfs\_trackerd /etc/fdfs/tracker.conf restart  
waiting for pid \[23891\] exit ...  
starting ...  
\# fdfs\_storaged /etc/fdfs/storage.conf  
\# fdfs\_trackerd /etc/fdfs/tracker.conf restart  
waiting for pid \[26848\] exit ...  
starting ...  
\# ./nginx -s reload  
ngx\_http\_fastdfs\_set pid=26832

2、application-dev.properties

\# fastDFS  
fdfs.so-timeout=1501  
fdfs.connect-timeout=601  
fdfs.thumb-image.width=150  
fdfs.thumb-image.height=150  
fdfs.web-server-url=你的IP/  
fdfs.tracker-list\[0\]=你的IP:22122  
fdfs.http.anti\_steal\_token = true  
fdfs.http.secret\_key = FastDFS1234567890

二、项目中增加依赖

<dependency>  
<groupId>com.github.tobato</groupId>  
<artifactId>fastdfs-client</artifactId>  
<version>1.26.2</version>  
</dependency>  
<dependency>  
<groupId>net.oschina.zcx7878</groupId>  
<artifactId>fastdfs-client-java</artifactId>  
<version>1.27.0.0</version>  
</dependency>

三、引入fastDFS配置

import org.springframework.boot.web.servlet.MultipartConfigFactory;  
import org.springframework.context.annotation.Bean;  
import org.springframework.context.annotation.Configuration;  
import org.springframework.context.annotation.EnableMBeanExport;  
import org.springframework.context.annotation.Import;  
import org.springframework.jmx.support.RegistrationPolicy;  
  
import com.github.tobato.fastdfs.FdfsClientConfig;  
  
@Configuration  
@Import(FdfsClientConfig.class)  
@EnableMBeanExport(registration = RegistrationPolicy.IGNORE\_EXISTING)// 解决jmx重复注册bean的问题  
public class ComponetImport \{  
// 导入依赖组件  
\}

四、工具类

import java.io.BufferedOutputStream;  
import java.io.ByteArrayInputStream;  
import java.io.ByteArrayOutputStream;  
import java.io.File;  
import java.io.FileInputStream;  
import java.io.FileOutputStream;  
import java.io.IOException;  
import java.io.InputStream;  
import java.net.HttpURLConnection;  
import java.net.URL;  
import java.nio.charset.Charset;  
  
import org.apache.commons.io.FilenameUtils;  
import org.apache.commons.lang.StringUtils;  
import org.springframework.beans.factory.annotation.Autowired;  
import org.springframework.mock.web.MockMultipartFile;  
import org.springframework.stereotype.Component;  
import org.springframework.stereotype.Service;  
import org.springframework.util.Base64Utils;  
import org.springframework.web.multipart.MultipartFile;  
  
import com.github.tobato.fastdfs.conn.FdfsWebServer;  
import com.github.tobato.fastdfs.domain.StorePath;  
import com.github.tobato.fastdfs.exception.FdfsUnsupportStorePathException;  
import com.github.tobato.fastdfs.proto.storage.DownloadByteArray;  
import com.github.tobato.fastdfs.service.FastFileStorageClient;  
  
  
@Component  
public class FastDFSClient \{  
  
@Autowired  
private FastFileStorageClient storageClient;  
  
@Autowired  
private FdfsWebServer fdfsWebServer;  
  
/\*\*  
\* 上传文件  
\* @param file 文件对象  
\* @return 文件访问地址  
\* @throws IOException  
\*/  
public String uploadFile(MultipartFile file) throws IOException \{  
StorePath storePath = storageClient.uploadFile(file.getInputStream(),file.getSize(), FilenameUtils.getExtension(file.getOriginalFilename()),null);  
return getResAccessUrl(storePath);  
\}  
  
/\*\*  
\* 上传文件  
\* @param file 文件对象  
\* @return 文件访问地址  
\* @throws IOException  
\*/  
public String uploadFile(File file) throws IOException \{  
FileInputStream inputStream = new FileInputStream (file);  
StorePath storePath = storageClient.uploadFile(inputStream,file.length(), FilenameUtils.getExtension(file.getName()),null);  
return getResAccessUrl(storePath);  
\}  
  
/\*\*  
\* 将一段字符串生成一个文件上传  
\* @param content 文件内容  
\* @param fileExtension  
\* @return  
\*/  
public String uploadFile(String content, String fileExtension) \{  
byte\[\] buff = content.getBytes(Charset.forName("UTF-8"));  
ByteArrayInputStream stream = new ByteArrayInputStream(buff);  
StorePath storePath = storageClient.uploadFile(stream,buff.length, fileExtension,null);  
return getResAccessUrl(storePath);  
\}  
  
// 封装图片完整URL地址  
private String getResAccessUrl(StorePath storePath) \{  
String fileUrl = fdfsWebServer.getWebServerUrl() + storePath.getFullPath();  
return fileUrl;  
\}  
  
/\*\*  
\* 下载文件  
\* @param fileUrl 文件url  
\* @return  
\*/  
public byte\[\] download(String fileUrl) \{  
String group = fileUrl.substring(0, fileUrl.indexOf("/"));  
String path = fileUrl.substring(fileUrl.indexOf("/") + 1);  
byte\[\] bytes = storageClient.downloadFile(group, path, new DownloadByteArray());  
return bytes;  
\}  
  
/\*\*  
\* 删除文件  
\* @param fileUrl 文件访问地址  
\* @return  
\*/  
public void deleteFile(String fileUrl) \{  
if (StringUtils.isEmpty(fileUrl)) \{  
return;  
\}  
try \{  
StorePath storePath = StorePath.praseFromUrl(fileUrl);  
storageClient.deleteFile(storePath.getGroup(), storePath.getPath());  
\} catch (FdfsUnsupportStorePathException e) \{  
e.getMessage();  
\}  
\}  
  
\}

五、文件的上传、下载 与 访问获取的 token

import org.apache.commons.io.IOUtils;  
import org.csource.common.MyException;  
import org.csource.fastdfs.ProtoCommon;  
import org.meng.project.common.FileUtil;  
import org.meng.project.entity.Filesource;  
import org.meng.project.service.ExcelService;  
import org.meng.project.service.FileService;  
import org.meng.project.util.FastDFSClient;  
import org.springframework.beans.factory.annotation.Autowired;  
import org.springframework.beans.factory.annotation.Value;  
import org.springframework.stereotype.Controller;  
import org.springframework.ui.Model;  
import org.springframework.web.bind.annotation.\*;  
import org.springframework.web.multipart.MultipartFile;  
  
import java.io.UnsupportedEncodingException;  
import java.net.URLEncoder;  
import java.security.NoSuchAlgorithmException;  
import java.text.SimpleDateFormat;  
import java.time.Instant;  
import java.util.\*;  
  
import javax.servlet.ServletOutputStream;  
import javax.servlet.http.HttpServletRequest;  
import javax.servlet.http.HttpServletResponse;  
  
@Controller  
@RequestMapping("/fdfs")  
public class FastDFSController \{  
  
@Autowired  
private FastDFSClient fdfsClient;  
  
@Value("$\{fdfs.web-server-url\}")  
private String fastdfsUrl;  
  
@Value("$\{fdfs.http.secret\_key\}")  
private String fastdfsToken;  
  
/\*\*  
\* 文件上传  
\* @param file  
\* @return  
\* @throws Exception  
\*/  
@RequestMapping("/upload/file")  
@ResponseBody  
public Map<String,Object> upload(@RequestParam("file") MultipartFile file, Model model) throws Exception\{  
Map<String,Object> resultMap = new HashMap<>();  
String url = null;  
  
try \{  
url = fdfsClient.uploadFile(file);  
resultMap.put("code", 200);  
resultMap.put("message", "上传成功");  
resultMap.put("url", url);  
System.out.println(url);  
\} catch (Exception e) \{  
// TODO: handle exception  
resultMap.put("status", 500);  
resultMap.put("message", "上传异常！");  
\}  
  
return resultMap;  
\}  
  
/\*\*  
\* 文件下载  
\* @param fileUrl url 开头从组名开始  
\* @param response  
\* @throws Exception  
\*/  
@RequestMapping(value="/download", method = \{RequestMethod.GET\})  
public void download(HttpServletResponse response, HttpServletRequest request) throws Exception\{  
String fileUrl = request.getParameter("fileUrl");  
  
byte\[\] data = fdfsClient.download(fileUrl);  
  
response.setCharacterEncoding("UTF-8");  
response.setHeader("Content-disposition", "attachment;filename=" + URLEncoder.encode("test.jpg", "UTF-8"));  
  
// 写出  
ServletOutputStream outputStream = response.getOutputStream();  
IOUtils.write(data, outputStream);  
\}  
  
/\*\*  
\* 生成访问链接  
\*/  
@RequestMapping(value="/location", method = \{RequestMethod.GET\})  
public String location(HttpServletResponse response, HttpServletRequest request, Model model) \{  
String fileUrl = request.getParameter("location");  
System.out.println(fileUrl);  
//token  
String token = fastdfsToken;  
String IP = fastdfsUrl;  
  
fileUrl = getToken(fileUrl,token,IP);  
  
model.addAttribute("Url", fileUrl);  
  
return "tools/uploadfile";  
\}  
  
/\*\*  
\* 获取访问服务器的token，拼接到地址后面  
\*  
\* @param fid 文件路径 group1/M00/00/00/wKgzgFnkTPyAIAUGAAEoRmXZPp876.jpeg  
\* @param secret\_key 密钥  
\* @return 返回token，如： token=078d370098b03e9020b82c829c205e1f&ts=1508141521  
\*/  
public static String getToken(String fid, String secret\_key, String IP)\{  
  
String substring = fid.substring(fid.indexOf("/")+1);  
//unix时间戳 以秒为单位  
int ts = (int) (System.currentTimeMillis() / 1000);  
String token=new String();  
try \{  
token= ProtoCommon.getToken(substring, ts, secret\_key);  
\} catch (UnsupportedEncodingException e) \{  
e.printStackTrace();  
\} catch (NoSuchAlgorithmException e) \{  
e.printStackTrace();  
\} catch (MyException e) \{  
e.printStackTrace();  
\}  
StringBuilder sb = new StringBuilder();  
sb.append(IP);  
sb.append(fid);  
sb.append("?token=").append(token);  
sb.append("&ts=").append(ts);  
//System.out.println(sb.toString());  
  
return sb.toString();  
\}  
\}

六、效果

1、上传

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0dvbGRlbl9zb2Z0_size_16_color_FFFFFF_t_70][]

2、下载

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0dvbGRlbl9zb2Z0_size_16_color_FFFFFF_t_70 1][]

3、获取访问链接：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0dvbGRlbl9zb2Z0_size_16_color_FFFFFF_t_70 2][]

访问效果图：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0dvbGRlbl9zb2Z0_size_16_color_FFFFFF_t_70 3][]

部分学习链接：

https://blog.csdn.net/qq\_26545305/article/details/80186385  
————————————————  
版权声明：本文为CSDN博主「W\_Meng\_H」的原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接及本声明。  
原文链接：https://blog.csdn.net/W\_Meng\_H/article/details/85402879

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0dvbGRlbl9zb2Z0_size_16_color_FFFFFF_t_70]: /images/20230528/f14f3f0f2fca44b5a8a158613daca43a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0dvbGRlbl9zb2Z0_size_16_color_FFFFFF_t_70 1]: /images/20230528/fdae4dc031d8440b9d80cc9bded0804a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0dvbGRlbl9zb2Z0_size_16_color_FFFFFF_t_70 2]: /images/20230528/3153fa18ad8641ebb72aacdf3728bd0e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0dvbGRlbl9zb2Z0_size_16_color_FFFFFF_t_70 3]: /images/20230528/4aef6d10e9354fd5842bcf9f284f26c4.png