Spring Cloud Gateway+Spring Security OAuth2+JWT（一）

爱被打了一巴掌 2024-04-19 10:54 140阅读 0赞

Spring Cloud Gateway+Spring Security OAuth2+JWT（一）

  • 前言
  • 授权服务 OAuth2+JWT
    • pom
    • 授权服务器配置
    • 自定义用户
    • jwt

前言

捣鼓了一段时间的Spring cloud,想把公司的的基于用户和权限体系的基础框架也融入到Spring cloud中。查阅了一些相关资料，打算采用Spring Cloud Gateway+Spring Security OAuth2+JWT的方式。基础版本的已经搭好了，也总结一下这几天的成果。

授权服务 OAuth2+JWT

首先说明一下Spring Security OAuth2的交互数据可以有3种方式。

  1. 第一钟是基于配置的即内存
  2. 第二钟是基于内置数据结构的数据库（Spring Security OAuth2 自己定义了很多表结构和封装好的DAO 我们只要按照它给的表结构创建表就可以用了）
  3. 第三种就是我们自己定义的表

我有用了2和3，很多资料都是第一种,自己也研究了半天。不多说直接上代码

pom

如果采用redis存储token的话 要注意一下

  1. <dependency>
  2.             <groupId>org.springframework.cloud</groupId>
  3.             <artifactId>spring-cloud-starter-security</artifactId>
  4.         </dependency>
  5.         <dependency>
  6.             <groupId>io.jsonwebtoken</groupId>
  7.             <artifactId>jjwt</artifactId>
  8.         </dependency>
  9.         <dependency>
  10.             <groupId>org.springframework.security.oauth</groupId>
  11.             <artifactId>spring-security-oauth2</artifactId>
  12.             <!-- 指明版本，解决redis存储出现的问题：java.lang.NoSuchMethodError: org.springframework.data.redis.connection.RedisConnection.set([B[B)V问题 -->
  13.             <version>2.3.3.RELEASE</version>
  14.         </dependency>

授权服务器配置

这里主要是配置了用户的相关信息，由于我有自己的用户表所以我就采用了实现UserService接口的一个实现类。

  1. package com.ljl.auth.config;
  3. import com.ljl.auth.service.impl.UserServiceImpl;
  4. import org.springframework.beans.factory.annotation.Autowired;
  5. import org.springframework.context.annotation.Bean;
  6. import org.springframework.context.annotation.Configuration;
  7. import org.springframework.http.HttpMethod;
  8. import org.springframework.security.authentication.AuthenticationManager;
  9. import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
  10. import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
  11. import org.springframework.security.config.annotation.web.builders.HttpSecurity;
  12. import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
  13. import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
  14. import org.springframework.security.core.userdetails.UserDetailsService;
  15. import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
  16. import org.springframework.security.crypto.password.PasswordEncoder;
  18. import javax.sql.DataSource;
  20. /** * Created by Administrator on 2019/9/3 0003. * 安全配置 */
  21. @Configuration
  22. @EnableWebSecurity
  23. @EnableGlobalMethodSecurity(prePostEnabled = true)
  24. public class SecurityConfig extends WebSecurityConfigurerAdapter { 
  26.     @Autowired
  27.     private UserServiceImpl userService;
  29.     @Autowired
  30.     private DataSource dataSource;
  32.     /** * 注入用户信息服务 * @return 用户信息服务对象 */
  33.     @Bean
  34.     public UserDetailsService userDetailsService() { 
  35.         return userService;
  36.     }
  38.     /** * 全局用户信息 * @param auth 认证管理 * @throws Exception 用户认证异常信息 */
  39.     @Autowired
  40.     public void globalUserDetails(AuthenticationManagerBuilder auth) throws Exception { 
  41.         //auth.jdbcAuthentication().dataSource(dataSource).passwordEncoder(passwordEncoder());
  42.         auth.userDetailsService(userDetailsService()).passwordEncoder(passwordEncoder());
  43.     }
  45.     /** * 认证管理 * @return 认证管理对象 * @throws Exception 认证异常信息 */
  46.     @Override
  47.     @Bean
  48.     public AuthenticationManager authenticationManagerBean() throws Exception { 
  49.         return super.authenticationManagerBean();
  50.     }
  52.     /** * http安全配置 * @param http http安全对象 * @throws Exception http安全异常信息 */
  53.     @Override
  54.     protected void configure(HttpSecurity http) throws Exception { 
  55.         http.authorizeRequests().antMatchers(HttpMethod.OPTIONS).permitAll().anyRequest().authenticated().and()
  56.                 .httpBasic().and().csrf().disable();
  57.     }
  59.     @Bean
  60.     public PasswordEncoder passwordEncoder() { 
  61.         return new BCryptPasswordEncoder();
  62.     }
  64. }

授权服务器配置。这边主要是token和配置客户端详情信息。
由于我用了jwt所以就不需要将token存储下来了，所以只用了OAUTH_CLIENT_DETAILS这个表。
OAuth2集成了很多表，可以去查询相关资料。

jwt我采用的是RSA加密的方法，工具类我也贴出来了。

  1. package com.ljl.auth.config;
  3. import com.ljl.common.util.RSAUtil;
  4. import org.springframework.beans.factory.annotation.Autowired;
  5. import org.springframework.context.annotation.Bean;
  6. import org.springframework.context.annotation.Configuration;
  7. import org.springframework.data.redis.connection.RedisConnectionFactory;
  8. import org.springframework.data.redis.connection.jedis.JedisConnectionFactory;
  9. import org.springframework.security.authentication.AuthenticationManager;
  10. import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
  11. import org.springframework.security.crypto.password.PasswordEncoder;
  12. import org.springframework.security.oauth2.config.annotation.configurers.ClientDetailsServiceConfigurer;
  13. import org.springframework.security.oauth2.config.annotation.web.configuration.AuthorizationServerConfigurerAdapter;
  14. import org.springframework.security.oauth2.config.annotation.web.configuration.EnableAuthorizationServer;
  15. import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerEndpointsConfigurer;
  16. import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerSecurityConfigurer;
  17. import org.springframework.security.oauth2.provider.token.TokenStore;
  18. import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter;
  19. import org.springframework.security.oauth2.provider.token.store.JwtTokenStore;
  20. import org.springframework.security.oauth2.provider.token.store.redis.RedisTokenStore;
  22. import javax.sql.DataSource;
  24. /** * Created by Administrator on 2019/9/3 0003. * 授权服务器配置 */
  25. @Configuration
  26. @EnableAuthorizationServer
  27. public class AuthorizationServerConfig extends AuthorizationServerConfigurerAdapter { 
  29.     // 认证管理器
  30.     @Autowired
  31.     private AuthenticationManager authenticationManager;
  32.     // redis连接工厂
  33.     /*@Autowired private JedisConnectionFactory JedisConnectionFactory;*/
  34.     @Autowired
  35.     private PasswordEncoder passwordEncoder;
  36.     @Autowired
  37.     private DataSource dataSource;
  38.     /** * 令牌存储 * @return redis令牌存储对象 */
  39.     /*@Bean public TokenStore tokenStore() { return new RedisTokenStore(JedisConnectionFactory); } @Override public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception { endpoints.authenticationManager(this.authenticationManager); endpoints.tokenStore(tokenStore()); }*/
  41.     @Bean
  42.     protected JwtAccessTokenConverter jwtAccessTokenConverter() { 
  43.         JwtAccessTokenConverter converter = new MyJwtAccessTokenConverter();
  44.         converter.setKeyPair(RSAUtil.GetKeyPair());
  45.         return converter;
  46.     }
  48.     @Bean
  49.     public TokenStore jwtTokenStore() { 
  50.         return new JwtTokenStore(jwtAccessTokenConverter());
  51.     }
  53.     @Override
  54.     public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception { 
  55.         endpoints.tokenStore(jwtTokenStore()).accessTokenConverter(jwtAccessTokenConverter()).authenticationManager(this.authenticationManager);
  56.     }
  58.     /** * OAuth 授权端点开放 */
  59.     @Override
  60.     public void configure(AuthorizationServerSecurityConfigurer security) throws Exception { 
  61.         security
  62.                 // 开启/oauth/token_key验证端口无权限访问
  63.                 .tokenKeyAccess("permitAll()")
  64.                 // 开启/oauth/check_token验证端口认证权限访问
  65.                 .checkTokenAccess("isAuthenticated()")
  66.                 //主要是让/oauth/token支持client_id以及client_secret作登录认证
  67.                 .allowFormAuthenticationForClients();
  68.     }
  69.     /** * OAuth 配置客户端详情信息 */
  70.     @Override
  71.     public void configure(ClientDetailsServiceConfigurer clients) throws Exception { 
  72.         clients.jdbc(dataSource).passwordEncoder(passwordEncoder);
  73.     }
  76. }

我用的是oracle

  1. -- Create table
  2. create table OAUTH_CLIENT_DETAILS
  3. (
  4.   client_id               VARCHAR2(255) not null,
  5.   resource_ids            VARCHAR2(255),
  6.   client_secret           VARCHAR2(255),
  7.   scope                   VARCHAR2(255),
  8.   authorized_grant_types  VARCHAR2(255),
  9.   web_server_redirect_uri VARCHAR2(255),
  10.   authorities             VARCHAR2(255),
  11.   access_token_validity   NUMBER(11),
  12.   refresh_token_validity  NUMBER(11),
  13.   additional_information  VARCHAR2(255),
  14.   autoapprove             VARCHAR2(255)
  15. )
  16. tablespace BASE
  17.   pctfree 10
  18.   initrans 1
  19.   maxtrans 255
  20.   storage
  21.   (
  22.     initial 64K
  23.     next 1M
  24.     minextents 1
  25.     maxextents unlimited
  26.   );

自定义用户

自定义用户表的话主要是需要实现UserService这个接口中的loadUserByUsername方法并返回一个uesr对象。
这边的查询用户是我另一个基础服务的一个接口，就是通过用户名查询数据。

  1. package com.ljl.auth.service.impl;
  5. import com.alibaba.fastjson.JSON;
  6. import com.ljl.auth.model.*;
  7. import com.ljl.auth.service.UserService;
  8. import com.ljl.base.api.UserFeignApi;
  9. import com.ljl.common.base.Pages;
  10. import com.ljl.common.base.Result;
  11. import com.ljl.common.model.BaseOperator;
  12. import com.ljl.common.util.PasswordUtil;
  13. import com.ljl.common.util.StaticData;
  14. import com.ljl.dataSource.BaseDao;
  15. import org.springframework.beans.factory.annotation.Autowired;
  16. import org.springframework.security.core.authority.AuthorityUtils;
  17. import org.springframework.security.core.userdetails.User;
  18. import org.springframework.security.core.userdetails.UserDetails;
  19. import org.springframework.security.core.userdetails.UsernameNotFoundException;
  20. import org.springframework.stereotype.Service;
  22. import javax.servlet.http.HttpServletRequest;
  23. import javax.servlet.http.HttpSession;
  24. import java.util.*;
  26. @Service("userService")
  27. public class UserServiceImpl implements UserService { 
  28.     @Autowired
  29.     private UserFeignApi userFeignApi;
  31.     @Override
  32.     public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { 
  33.         //查询用户信息
  34.         BaseOperator userinfo = userFeignApi.getUserByUsername(username);
  35.         //需要构造org.springframework.security.core.userdetails.User 对象包含账号密码还有用户的角色
  36.         if (userinfo!=null){ 
  37.             User user =  new User(userinfo.getLoginname(),userinfo.getPassword(), AuthorityUtils.createAuthorityList("admin"));
  38.             return new OauthUser(userinfo,user);
  39.         }else { 
  40.             throw  new UsernameNotFoundException("用户["+username+"]不存在");
  41.         }
  42.     }
  43. }

这个是我自己定义的实现了UserDetails, CredentialsContainer这两个接口的用户对象，除了再上面要用，jwt中也要用。
这边的baseUser 是我自己的用户对象。

  1. package com.ljl.auth.model;
  3. import com.ljl.common.model.BaseOperator;
  4. import org.springframework.security.core.CredentialsContainer;
  5. import org.springframework.security.core.GrantedAuthority;
  6. import org.springframework.security.core.userdetails.User;
  7. import org.springframework.security.core.userdetails.UserDetails;
  9. import java.util.Collection;
  11. /** * Created by Administrator on 2019/9/6 0006. */
  12. public class OauthUser implements UserDetails, CredentialsContainer { 
  15.     private final BaseOperator baseUser;
  16.     private final User user;
  18.     public OauthUser(BaseOperator baseUser, User user) { 
  19.         this.baseUser = baseUser;
  20.         this.user = user;
  21.     }
  24.     @Override
  25.     public void eraseCredentials() { 
  26.         user.eraseCredentials();
  27.     }
  29.     @Override
  30.     public Collection<? extends GrantedAuthority> getAuthorities() { 
  31.         return user.getAuthorities();
  32.     }
  34.     @Override
  35.     public String getPassword() { 
  36.         return user.getPassword();
  37.     }
  39.     @Override
  40.     public String getUsername() { 
  41.         return user.getUsername();
  42.     }
  44.     @Override
  45.     public boolean isAccountNonExpired() { 
  46.         return user.isAccountNonExpired();
  47.     }
  49.     @Override
  50.     public boolean isAccountNonLocked() { 
  51.         return user.isAccountNonLocked();
  52.     }
  54.     @Override
  55.     public boolean isCredentialsNonExpired() { 
  56.         return user.isCredentialsNonExpired();
  57.     }
  59.     @Override
  60.     public boolean isEnabled() { 
  61.         return user.isEnabled();
  62.     }
  64.     public BaseOperator getBaseOperator() { 
  65.         return baseUser;
  66.     }
  67. }

jwt

jwt生成token 我们可以自己定义jwt里面的内容

  1. package com.ljl.auth.config;
  3. import com.ljl.auth.model.OauthUser;
  4. import org.springframework.security.oauth2.common.DefaultOAuth2AccessToken;
  5. import org.springframework.security.oauth2.common.OAuth2AccessToken;
  6. import org.springframework.security.oauth2.provider.OAuth2Authentication;
  7. import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter;
  9. import java.util.HashMap;
  11. /** * Created by Administrator on 2019/9/6 0006. * 自定义的token */
  12. public class MyJwtAccessTokenConverter extends JwtAccessTokenConverter { 
  14.     @Override
  15.     public OAuth2AccessToken enhance(OAuth2AccessToken accessToken, OAuth2Authentication authentication) { 
  16.         if (accessToken instanceof DefaultOAuth2AccessToken) { 
  17.             //((DefaultOAuth2AccessToken) accessToken).setRefreshToken();
  18.             Object principal = authentication.getPrincipal();
  19.             if (principal instanceof OauthUser) { 
  20.                 OauthUser user = (OauthUser) principal;
  21.                 HashMap<String, Object> map = new HashMap<>();
  22.                 map.put("user_id", user.getBaseOperator().getUserid());
  23.                 map.put("phone", user.getBaseOperator().getTelphonenum());
  24.                 ((DefaultOAuth2AccessToken) accessToken).setAdditionalInformation(map);
  25.             }
  26.         }
  27.         return super.enhance(accessToken, authentication);
  28.     }
  31. }

RSA工具类

  1. package com.ljl.common.util;
  3. import org.slf4j.Logger;
  4. import org.slf4j.LoggerFactory;
  5. import org.springframework.core.io.ClassPathResource;
  6. import org.springframework.core.io.Resource;
  7. import org.springframework.util.Base64Utils;
  9. import javax.crypto.Cipher;
  10. import java.io.ByteArrayOutputStream;
  11. import java.io.FileNotFoundException;
  12. import java.io.FileOutputStream;
  13. import java.io.IOException;
  14. import java.security.*;
  15. import java.security.interfaces.RSAPrivateKey;
  16. import java.security.interfaces.RSAPublicKey;
  17. import java.security.spec.InvalidKeySpecException;
  18. import java.security.spec.PKCS8EncodedKeySpec;
  19. import java.security.spec.X509EncodedKeySpec;
  20. import java.util.Base64;
  21. import java.util.Properties;
  23. /** * 实现RSA加解密 * @author : lijialun * @description: */
  24. public class RSAUtil { 
  25.     private static final Logger LOGGER = LoggerFactory.getLogger(RSAUtil.class);
  26.     /** 算法名称 */
  27.     private static final String ALGORITHM =  "RSA";
  28.     /** RSA签名算法 */
  29.     private static final String RSA_SIGNATURE_ALGORITHM = "SHA256WithRSA";
  30.     /** 默认密钥大小 */
  31.     private static final int KEY_SIZE = 2048;
  32.     /** 最大解密长度 */
  33.     private static final int MAX_DECRYPT_BLOCK = 256;
  34.     /** 用来指定保存密钥对的文件名和存储的名称 */
  35.     private static final String PUBLIC_KEY_NAME = "publicKey";
  36.     private static final String PRIVATE_KEY_NAME = "privateKey";
  37.     private static final String PUBLIC_FILENAME = "publicKey.properties";
  38.     private static final String PRIVATE_FILENAME = "privateKey.properties";
  39.     private static Properties pubProperties;
  40.     private static Properties PriProperties;
  41.     /** 密钥对生成器 */
  42.     private static KeyPairGenerator keyPairGenerator = null;
  44.     private static KeyFactory keyFactory = null;
  45.     /** 缓存的密钥对 */
  46.     private static KeyPair keyPair = null;
  47.     /** Base64 编码/解码器 JDK1.8 */
  48.     private static Base64.Decoder decoder = Base64.getDecoder();
  49.     private static Base64.Encoder encoder = Base64.getEncoder();
  51.     /** 初始化密钥工厂 */
  52.     static{ 
  53.         try { 
  54.             keyPairGenerator = KeyPairGenerator.getInstance(ALGORITHM);
  55.             keyFactory = KeyFactory.getInstance(ALGORITHM);
  56.             //generateKeyPair();
  57.             getInstanceForPub();
  58.             getInstanceForPri();
  59.         } catch (NoSuchAlgorithmException e) { 
  60.             LOGGER.error(e.getMessage(),e);
  61.         }
  62.     }
  63.     /*初始化公钥config*/
  64.     private static Properties getInstanceForPub(){ 
  65.         if (pubProperties == null) { 
  66.             Resource res  =new ClassPathResource(PUBLIC_FILENAME);
  67.             pubProperties = new Properties();
  68.             try { 
  69.                 pubProperties.load(res.getInputStream());
  70.             } catch (IOException e) { 
  71.                 e.printStackTrace();
  72.             }
  73.         }
  74.         return pubProperties;
  75.     }
  76.     /*初始钥私钥config*/
  77.     private static Properties getInstanceForPri(){ 
  78.         if (PriProperties == null) { 
  79.             Resource res  =new ClassPathResource(PRIVATE_FILENAME);
  80.             PriProperties = new Properties();
  81.             try { 
  82.                 PriProperties.load(res.getInputStream());
  83.             } catch (IOException e) { 
  84.                 e.printStackTrace();
  85.             }
  86.         }
  87.         return PriProperties;
  88.     }
  89.     /** 私有构造器 */
  90.     private RSAUtil(){ }
  92.     /** * 生成密钥对 * 将密钥分别用Base64编码保存到#publicKey.properties#和#privateKey.properties#文件中 * 保存的默认名称分别为publicKey和privateKey * * */
  93.     public static synchronized void generateKeyPair(){ 
  94.         try { 
  95.             keyPairGenerator.initialize(KEY_SIZE,new SecureRandom());
  96.             keyPair = keyPairGenerator.generateKeyPair();
  97.         } catch (InvalidParameterException e){ 
  98.             LOGGER.error("KeyPairGenerator does not support a key length of " + KEY_SIZE + ".",e);
  99.         } catch (NullPointerException e){ 
  100.             LOGGER.error("RSAUtils#key_pair_gen is null,can not generate KeyPairGenerator instance.",e);
  101.         }
  102.         RSAPublicKey rsaPublicKey = (RSAPublicKey)keyPair.getPublic();
  103.         RSAPrivateKey rsaPrivateKey = (RSAPrivateKey)keyPair.getPrivate();
  104.         String publicKeyString = encoder.encodeToString(rsaPublicKey.getEncoded());
  105.         String privateKeyString = encoder.encodeToString(rsaPrivateKey.getEncoded());
  106.         System.out.println("公钥:"+publicKeyString);
  107.         System.out.println("私钥:"+privateKeyString);
  108.         storeKey(publicKeyString,PUBLIC_KEY_NAME,pubProperties,PUBLIC_FILENAME);
  109.         storeKey(privateKeyString,PRIVATE_KEY_NAME,PriProperties,PRIVATE_FILENAME);
  110.     }
  112.     /** * 将指定的密钥字符串保存到文件中,如果找不到文件，就创建 * @param keyString 密钥的Base64编码字符串（值） * @param keyName 保存在文件中的名称（键） * @param properties 目标文件 */
  113.     private static void storeKey(String keyString,String keyName,Properties properties,String fileName){ 
  114.         try { 
  115.             Resource res  =new ClassPathResource(fileName);
  116.             FileOutputStream oFile = new FileOutputStream(res.getFile(), false);
  117.             properties.setProperty(keyName,keyString);
  118.             properties.store(oFile, keyName);
  119.             oFile.close();
  120.         } catch (FileNotFoundException e) { 
  121.             e.printStackTrace();
  122.         } catch (IOException e) { 
  123.             e.printStackTrace();
  124.         }
  127.     }
  129.     /** * 获取密钥字符串 * @param keyName 需要获取的密钥名 * @param properties 密钥文件 * @return Base64编码的密钥字符串 */
  130.     private static String getKeyString(String keyName,Properties properties){ 
  131.         return properties.getProperty(keyName);
  132.     }
  134.     /** * 从文件获取RSA公钥 * @return RSA公钥 * @throws InvalidKeySpecException */
  135.     public static RSAPublicKey getPublicKey(){ 
  136.         try { 
  137.             byte[] keyBytes = decoder.decode(getKeyString(PUBLIC_KEY_NAME,pubProperties));
  138.             X509EncodedKeySpec x509EncodedKeySpec = new X509EncodedKeySpec(keyBytes);
  139.             RSAPublicKey rsa = (RSAPublicKey)keyFactory.generatePublic(x509EncodedKeySpec);
  140.             return rsa;
  141.         }catch (InvalidKeySpecException e) { 
  142.             LOGGER.error("getPublicKey()#" + e.getMessage(),e);
  143.         }
  144.         return null;
  145.     }
  147.     /** * 从文件获取RSA私钥 * @return RSA私钥 * @throws InvalidKeySpecException */
  148.     public static RSAPrivateKey getPrivateKey(){ 
  149.         try { 
  150.             byte[] keyBytes = decoder.decode(getKeyString(PRIVATE_KEY_NAME,PriProperties));
  151.             PKCS8EncodedKeySpec pkcs8EncodedKeySpec = new PKCS8EncodedKeySpec(keyBytes);
  152.             return (RSAPrivateKey)keyFactory.generatePrivate(pkcs8EncodedKeySpec);
  153.         } catch (InvalidKeySpecException e) { 
  154.             LOGGER.error("getPrivateKey()#" + e.getMessage(),e);
  155.         }
  156.         return null;
  157.     }
  158.     /** * RSA公钥加密 */
  159.     public static byte[] encryptByPublicKey(byte[] data) throws Exception { 
  160.         // 对数据加密
  161.         Cipher cipher = Cipher.getInstance("RSA");
  162.         cipher.init(Cipher.ENCRYPT_MODE, getPublicKey());
  163.         int inputLen = data.length;
  164.         ByteArrayOutputStream out = new ByteArrayOutputStream();
  165.         int offSet = 0;
  166.         byte[] cache;
  167.         int i = 0;
  168.         // 对数据分段加密
  169.         while (inputLen - offSet > 0) { 
  170.             if (inputLen - offSet > 117) { 
  171.                 cache = cipher.doFinal(data, offSet, 117);
  172.             } else { 
  173.                 cache = cipher.doFinal(data, offSet, inputLen - offSet);
  174.             }
  175.             out.write(cache, 0, cache.length);
  176.             i++;
  177.             offSet = i * 117;
  178.         }
  179.         byte[] encryptedData = out.toByteArray();
  180.         out.close();
  181.         return encryptedData;
  182.     }
  184.     //私钥解密
  185.     public static byte[] decryptByPrivateKey(byte[] encryptedData) throws Exception { 
  186.         PKCS8EncodedKeySpec pkcs8KeySpec = new PKCS8EncodedKeySpec(getPrivateKey().getEncoded());
  187.         KeyFactory keyFactory = KeyFactory.getInstance("RSA");
  188.         Key privateK = keyFactory.generatePrivate(pkcs8KeySpec);
  189.         Cipher cipher = Cipher.getInstance(keyFactory.getAlgorithm());
  190.         cipher.init(Cipher.DECRYPT_MODE, privateK);
  191.         int inputLen = encryptedData.length;
  192.         ByteArrayOutputStream out = new ByteArrayOutputStream();
  193.         int offSet = 0;
  194.         byte[] cache;
  195.         int i = 0;
  196.         // 对数据分段解密
  197.         while (inputLen - offSet > 0) { 
  198.             if (inputLen - offSet > MAX_DECRYPT_BLOCK) { 
  199.                 cache = cipher.doFinal(encryptedData, offSet, MAX_DECRYPT_BLOCK);
  200.             } else { 
  201.                 cache = cipher.doFinal(encryptedData, offSet, inputLen - offSet);
  202.             }
  203.             out.write(cache, 0, cache.length);
  204.             i++;
  205.             offSet = i * MAX_DECRYPT_BLOCK;
  206.         }
  207.         byte[] decryptedData = out.toByteArray();
  208.         out.close();
  209.         return decryptedData;
  210.     }
  212.     /** * RSA公钥验签 * * @param data * 待签名字符串 * 公钥（Base64编码） * @return 验签结果 * @throws Exception */
  213.     public static boolean verify(byte[] data, String sign) throws Exception { 
  214.         Signature signature = Signature.getInstance(RSA_SIGNATURE_ALGORITHM);
  215.         signature.initVerify(getPublicKey());
  216.         signature.update(data);
  217.         return signature.verify(Base64Utils.decodeFromUrlSafeString(sign));
  218.     }
  220.     /** * RSA私钥签名：签名方式SHA1withRSA * * @param data * 待签名byte[] * 私钥（Base64编码） * @return 签名byte[] * @throws Exception */
  221.     public static byte[] sign(byte[] data) throws Exception { 
  222.         // Sign
  223.         Signature signature = Signature.getInstance(RSA_SIGNATURE_ALGORITHM);
  224.         signature.initSign(getPrivateKey());
  225.         signature.update(data);
  226.         return signature.sign();
  227.     }
  231.     /** * 将char转换为byte * @param c char * @return byte */
  232.     private static byte toByte(char c){ 
  233.         return (byte)"0123456789ABCDEF".indexOf(c);
  234.     }
  237.     public static int getValidLength(byte[] bytes){ 
  238.         int i = 0;
  239.         if (null == bytes || 0 == bytes.length)
  240.             return i ;
  241.         for (; i < bytes.length; i++) { 
  242.             if (bytes[i] == '\0')
  243.                 break;
  244.         }
  245.         return i + 1;
  246.     }
  248.     public static KeyPair GetKeyPair(){ 
  249.         return new KeyPair(getPublicKey(),getPrivateKey());
  250.     }
  252. }

发表评论

表情：
评论列表 （有 0 条评论，140人围观）

还没有评论，来说两句吧...

相关阅读

    相关 Spring security Oauth2+JWT

    企业级认证授权技术 一丶用户认证与授权 > 每个项目最基本的也是最重要的是安全，用户认证与授权，是最重要的，用户认证身份。 1.1什么是用户身份认证？ > 用户身份

    小灰灰小灰灰/ 0 赞/ 274 阅读