1. 技术文章
  2. O2OA教程-业务开发与设计-系统应用权限控制-系统交互样例-登录认证 For Java

O2OA教程-业务开发与设计-系统应用权限控制-系统交互样例-登录认证 For Java

由 二次信任 提交于 2020-03-06 16:37:36

使用Java程序发送Http请求进行o2server登录认证

o2server向外提供了非常完整的restful服务，用户可以使用任何语言，编写代码发起http请求来进行o2server功能和业务的操作。大多数服务的调用，都需要进行登录认证，本篇详细介绍如何使用其他语言来发送http请求进行服务器认证。

（1）发送用户名使用SSO进行登录认证

此示例演示如何通过登录用户名，和SSO相关的配置，使用单点认证的方式进行O2Server的登录认证，获取xtoken信息

涉及到加密解密，请使用非中文的唯一标识进行登录 ，中文登录 有可能会有找不到用户的问题。

一、o2Server平台SSO配置

1、使用管理员(或者xadmin)登录O2OA

2、打开系统菜单->控制面板->系统设置->SSO配置

打开控制面板

进入系统设置

进入SSO配置

3、添加SSO配置

添加一个SSO配置

4、重启o2server

二、编写登录代码

完整代码内容：O.java

package net.o2oa.demos;
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.PrintWriter;
import java.net.URL;
import java.net.URLConnection;
import java.util.Date;
import org.apache.commons.codec.binary.StringUtils;
import org.json.JSONObject;
import net.o2oa.util.Crypto;
/**
 * 此示例演示如何通过登录用户名，和SSO相关的配置，使用单点认证的方式进行O2Server的登录认证，获取xtoken信息
 * 涉及到加密解密，请使用非中文的唯一标识进行登录 ，中文登录 有可能会有找不到用户的问题。
 * @author O2OA
 */
public class Demo_LoginWithSSO {
    static final String  URL_SSOLOGIN="/x_organization_assemble_authentication/jaxrs/sso";
    public static void main( String[] args ) {
        String applicationServer = "127.0.0.1";
        Integer applicationPort = 20020;
        String userName = "13533441287";
        String ssoClient = "sso_demo";
        String key = "sso123456";
        try {
            LoginResult result = login(applicationServer, applicationPort, userName, ssoClient, key);
            if( StringUtils.equals( "success", result.getType() )) {
                System.out.println("xtoken=" + result.getToken() );
            }else {
                System.out.println("message:" + result.getMessage() );
            }           
        } catch (Exception e) {
            // TODO Auto-generated catch block
            e.printStackTrace();
        }
    }
    //服务地址：http://127.0.0.1:20020/x_organization_assemble_authentication/jaxrs/sso
    //{"token":"xadmin","client":"sso_demo"}
    /**
     * 使用登录认证的接口进行服务器登录，获取xtoken信息
     * @param applicationServer  127.0.0.1
     * @param applicationPort     20020
     * @param userName             张三
     * @param client                    sso_demo
     * @param key                       sso123456
     * @return
     * @throws Exception
     */
public static LoginResult login( String applicationServer, Integer applicationPort, String userName, String client, String key ) throws Exception {
//参数
        String loginUrl = "http://" + applicationServer + ":" + applicationPort + URL_SSOLOGIN ;
        String xtoken = Crypto.encrypt( userName + "#" + new Date().getTime(), key );
        String loginParams = String.format("{'token':'%s','client':'%s'}", xtoken, client );
        String responseData = sendPost( loginUrl, loginParams );
/**
         * 成功响应结果
         * {
              "type": "success",
              "data": {
                "token": "Xb9XTOjIQJa5AVRfHfIbNMFvhYdVfLgaipZBZBiUF7aNHeLrQ4vOu9YgprWeK2E1YsxApE_z4f1mvqvStFQI5CW7Pk31ulroUVAeR5jUybQ",
                "roleList": [],
                "id": "1cb47e12-18ad-4363-a55f-4514edb76215",
                "genderType": "m",
                "signature": "",
                "pinyin": "lisi",
                "pinyinInitial": "ls",
                "description": "",
                "name": "李四",
                "employee": "",
                "unique": "c93b7fb8-6820-466c-ab9c-f0637b8a3682",
                "distinguishedName": "李四@c93b7fb8-6820-466c-ab9c-f0637b8a3682@P",
                "orderNumber": 56649305,
                "controllerList": [],
                "superior": "",
                "changePasswordTime": "2019-10-18",
                "mail": "",
                "weixin": "",
                "qq": "",
                "mobile": "13533441287",
                "officePhone": "",
                "createTime": "2019-10-18 15:55:05",
                "updateTime": "2019-10-18 15:55:05"
              },
              "message": "",
              "date": "2019-10-19 15:12:10",
              "spent": 141,
              "size": -1,
              "count": 0,
              "position": 0
            }**/
/**
         * 失败响应结果 
         * {
                "readyState": 4,
                "responseText": "{\n  \"type\": \"error\",\n  \"message\": \"用户不存在或者密码错误.\",\n  \"date\": \"2019-10-19 14:34:34\",\n  \"spent\": 9,\n  \"size\": -1,\n  \"count\": 0,\n  \"position\": 0,\n  \"prompt\": \"com.x.organization.assemble.authentication.jaxrs.authentication.ExceptionPersonNotExistOrInvalidPassword\"\n}",
                "responseJSON": {
                    "type": "error",
                    "message": "用户不存在或者密码错误.",
                    "date": "2019-10-19 14:34:34",
                    "spent": 9,
                    "size": -1,
                    "count": 0,
                    "position": 0,
                    "prompt": "com.x.organization.assemble.authentication.jaxrs.authentication.ExceptionPersonNotExistOrInvalidPassword"
                },
                "status": 500,
                "statusText": "Internal Server Error"
            }
**/
JSONObject result = new JSONObject(responseData);
        String type = result.getString("type");
if( StringUtils.equals( "success", type )) {
    //登录成功
            JSONObject data = result.getJSONObject("data");
            String token = data.getString( "token" );
return new LoginResult("success", token, "登录成功！");
}else {
    //登录失败
    return new LoginResult("error", null, "用户登录失败！");
}
}
/**
     * 发送POST请求
     * 
     * @param url  地址
     * @param param   传入的数据
     * @return
     */
public static String sendPost( String url, String param ) {
        PrintWriter out = null;
        BufferedReader in = null;
        String result = "";
try {
            URL realUrl = new URL(url);
            URLConnection conn = realUrl.openConnection();
            conn.setRequestProperty("accept", "*/*");
            conn.setRequestProperty("connection", "Keep-Alive");
            conn.setRequestProperty("Content-Type", "application/json; charset=utf-8");
            conn.setRequestProperty("user-agent", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");
            conn.setDoOutput(true);
            conn.setDoInput(true);
            out = new PrintWriter(conn.getOutputStream());
            out.print(param);
            out.flush();
            in = new BufferedReader( new InputStreamReader(conn.getInputStream()));
            String line;
while ((line = in.readLine()) != null) {
                result += line;
}
} catch (Exception e) {
            e.printStackTrace();
} finally {
try {
if (out != null) {
                    out.close();
}
if (in != null) {
                    in.close();
}
} catch (IOException ex) {
                ex.printStackTrace();
}
}
return result;
}
public static class LoginResult{
    private String type;
    private String token;
    private String message;
        public LoginResult(String type, String token, String message) {
            super();
            this.type = type;
            this.token = token;
            this.message = message;
        }
        public String getType() {
            return type;
        }
        public void setType(String type) {
            this.type = type;
        }
        public String getToken() {
            return token;
        }
        public void setToken(String token) {
            this.token = token;
        }
        public String getMessage() {
            return message;
        }
        public void setMessage(String message) {
            this.message = message;
        }
}
}
数据加密辅助类：
Crypto.java
package net.o2oa.util;
import java.io.IOException;
import java.net.URLDecoder;
import java.net.URLEncoder;
import java.security.SecureRandom;
import javax.crypto.Cipher;
import javax.crypto.SecretKey;
import javax.crypto.SecretKeyFactory;
import javax.crypto.spec.DESKeySpec;
import org.apache.commons.codec.binary.Base64;
import org.apache.commons.lang3.StringUtils;
/**
 * 数据加密辅助类
 * @author O2OA
 *
 */
public class Crypto {
    private static final String utf8 = "UTF-8";
    private final static String DES = "DES";
    private final static String cipher_init = "DES";
    public static String encrypt(String data, String key) throws Exception {
        byte[] bt = encrypt(data.getBytes(), key.getBytes());
        String str = Base64.encodeBase64URLSafeString(bt);
        return URLEncoder.encode( str, utf8 );
    }
    public static byte[] encrypt(byte[] data, byte[] key) throws Exception {
        // 生成一个可信任的随机数源
        SecureRandom sr = new SecureRandom();
        // 从原始密钥数据创建DESKeySpec对象
        DESKeySpec dks = new DESKeySpec(key);
        // 创建一个密钥工厂，然后用它把DESKeySpec转换成SecretKey对象
        SecretKeyFactory keyFactory = SecretKeyFactory.getInstance(DES);
        SecretKey securekey = keyFactory.generateSecret(dks);
        // Cipher对象实际完成加密操作
        Cipher cipher = Cipher.getInstance(cipher_init);
        // 用密钥初始化Cipher对象
        cipher.init(Cipher.ENCRYPT_MODE, securekey, sr);
        return cipher.doFinal(data);
    }
    public static String decrypt(String data, String key) throws IOException, Exception {
        if (StringUtils.isEmpty(data)) {
            return null;
        }
        String str = URLDecoder.decode(data, utf8);
        byte[] buf = Base64.decodeBase64(str);
        byte[] bt = decrypt(buf, key.getBytes());
        return new String(bt);
    }
    public static byte[] decrypt(byte[] data, byte[] key) throws Exception {
        // 生成一个可信任的随机数源
        SecureRandom sr = new SecureRandom();
        // 从原始密钥数据创建DESKeySpec对象
        DESKeySpec dks = new DESKeySpec(key);
        // 创建一个密钥工厂，然后用它把DESKeySpec转换成SecretKey对象
        SecretKeyFactory keyFactory = SecretKeyFactory.getInstance(DES);
        SecretKey securekey = keyFactory.generateSecret(dks);
        // Cipher对象实际完成解密操作
        Cipher cipher = Cipher.getInstance(cipher_init);
        // 用密钥初始化Cipher对象
        cipher.init(Cipher.DECRYPT_MODE, securekey, sr);
        return cipher.doFinal(data);

}

}

pom.xml内容：

<project xmlns="http://maven.apache.org/POM/4.0.0"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
    <groupId>net.o2oa.demos</groupId>
    <artifactId>test_o2oa_java_demo</artifactId>
    <version>0.0.1-SNAPSHOT</version>
    <packaging>jar</packaging>
    <name>test_start_process_demo</name>
    <url>http://maven.apache.org</url>
    <properties>
        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
    </properties>
    <dependencies>
        <!-- https://mvnrepository.com/artifact/org.apache.httpcomponents/httpclient -->
        <dependency>
            <groupId>org.apache.httpcomponents</groupId>
            <artifactId>httpclient</artifactId>
            <version>4.5.10</version>
        </dependency>
        <!-- https://mvnrepository.com/artifact/org.apache.httpcomponents/httpcore-nio -->
        <dependency>
            <groupId>org.apache.httpcomponents</groupId>
            <artifactId>httpcore-nio</artifactId>
            <version>4.4.12</version>
        </dependency>
        <!-- https://mvnrepository.com/artifact/org.apache.httpcomponents/httpcore -->
        <dependency>
            <groupId>org.apache.httpcomponents</groupId>
            <artifactId>httpcore</artifactId>
            <version>4.4.12</version>
        </dependency>
        <!-- https://mvnrepository.com/artifact/org.apache.httpcomponents/httpmime -->
        <dependency>
            <groupId>org.apache.httpcomponents</groupId>
            <artifactId>httpmime</artifactId>
            <version>4.5.10</version>
        </dependency>
        <dependency>
            <groupId>org.apache.commons</groupId>
            <artifactId>commons-lang3</artifactId>
            <version>3.9</version>
        </dependency>
        <dependency>
            <groupId>com.google.code.gson</groupId>
            <artifactId>gson</artifactId>
            <version>2.8.5</version>
        </dependency>
        <!-- https://mvnrepository.com/artifact/org.json/json -->
        <dependency>
            <groupId>org.json</groupId>
            <artifactId>json</artifactId>
            <version>20190722</version>
        </dependency>
        <dependency>
            <groupId>junit</groupId>
            <artifactId>junit</artifactId>
            <version>3.8.1</version>
            <scope>test</scope>
        </dependency>
    </dependencies>
</project>

示例下载（Eclipse, JDK1.8）：

（2）发送用户账号密码进行登录认证

此示例演示如何使用java发送Http请求来登录o2server，获取登录认证xtoken信息

完整代码示例：

使用账号密码发送请求登录

package net.o2oa.demos;
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.PrintWriter;
import java.net.URL;
import java.net.URLConnection;
import org.apache.commons.codec.binary.StringUtils;
import org.json.JSONObject;
/**
 * 此示例演示如何使用java发送Http请求来登录o2server，获取登录认证xtoken信息 * @author O2OA
 */
public class Demo_LoginToServer {
static final String URL_LOGIN = "/x_organization_assemble_authentication/jaxrs/authentication";
public static void main(String[] args) {
        String applicationServer = "127.0.0.1";
        Integer applicationPort = 20020;
        String userName = "张三";
        String password = "o2";
try {
            LoginResult result = login(applicationServer, applicationPort, userName, password);
if (StringUtils.equals("success", result.getType())) {
                System.out.println("xtoken=" + result.getToken());
} else {
                System.out.println("message:" + result.getMessage());
}
} catch (Exception e) {
            e.printStackTrace();
}
}
//服务地址：http://127.0.0.1:20020/x_organization_assemble_authentication/jaxrs/authentication
// {"credential":"xadmin","password":"o2"}
/**
     * 使用登录认证的接口进行服务器登录，获取xtoken信息
     * @param applicationServer  127.0.0.1
     * @param applicationPort     20020
     * @param userName             张三
     * @param password              o2
     * @return
     * @throws Exception
     */
public static LoginResult login(String applicationServer, Integer applicationPort, String userName, String password) throws Exception {
//参数
        String loginUrl = "http://" + applicationServer + ":" + applicationPort + URL_LOGIN;
        String loginParams = String.format("{'credential':'%s','password':'%s'}", userName, password);
        String responseData = sendPost(loginUrl, loginParams);
        JSONObject result = new JSONObject(responseData);
        String type = result.getString("type");
if (StringUtils.equals("success", type)) {
//登录成功
            JSONObject data = result.getJSONObject("data");
            String token = data.getString("token");
return new LoginResult("success", token, "登录成功！");
} else {
//登录失败
return new LoginResult("error", null, "用户不存在或者密码错误！");
}
}
/**
     * 发送POST请求     *    * @param url  地址    * @param param   传入的数据  * @return
     */
public static String sendPost(String url, String param) {
        PrintWriter out = null;
        BufferedReader in = null;
        String result = "";
try {
            URL realUrl = new URL(url);
            URLConnection conn = realUrl.openConnection();
            conn.setRequestProperty("accept", "*/*");
            conn.setRequestProperty("connection", "Keep-Alive");
            conn.setRequestProperty("Content-Type", "application/json; charset=utf-8");
            conn.setRequestProperty("user-agent", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");
            conn.setDoOutput(true);
            conn.setDoInput(true);
            out = new PrintWriter(conn.getOutputStream());
            out.print(param);
            out.flush();
            in = new BufferedReader(new InputStreamReader(conn.getInputStream()));
            String line;
while ((line = in.readLine()) != null) {
                result += line;
}
} catch (Exception e) {
            e.printStackTrace();
} finally {
try {
if (out != null) {
                    out.close();
}
if (in != null) {
                    in.close();
}
} catch (IOException ex) {
                ex.printStackTrace();
}
}
return result;
}
public static class LoginResult {
private String type;
private String token;
private String message;
public LoginResult(String type, String token, String message) {
super();
this.type = type;
this.token = token;
this.message = message;
}
public String getType() {
return type;
}
public void setType(String type) {
this.type = type;
}
public String getToken() {
return token;
}
public void setToken(String token) {
this.token = token;
}
public String getMessage() {
return message;
}
public void setMessage(String message) {
this.message = message;
}
}
}
成功响应结果
{
"type": "success",
"data": {
"tokenType": "manager",
"token": "HeEoZIVgPjQAuhSAF5z5qKCO-_-iWowwEIdiuKMfurQ",
"roleList": [
"Manager",
"OrganizationManager",
"MeetingManager",
"ProcessPlatformManager"
],
"id": "xadmin",
"name": "xadmin",
"employee": "xadmin",
"distinguishedName": "xadmin@o2oa@P",
"mail": "xadmin@o2oa.net",
"weixin": "",
"qq": "",
"mobile": ""
},
"message": "",
"date": "2019-10-19 14:15:17",
"spent": 18,
"size": -1,
"count": 0,
"position": 0
}
失败响应结果
{
"readyState": 4,
"responseText": "{\"type\": \"error\",\"message\": \"用户不存在或者密码错误.\",\"date\": \"2019-10-19 14:34:34\",\"spent\": 9,  \"size\": -1,  \"count\": 0,  \"position\": 0,   \"prompt\":\"com.x.organization.assemble.authentication.jaxrs.authentication.ExceptionPersonNotExistOrInvalidPassword\"  }",
"responseJSON": {
"type": "error",
"message": "用户不存在或者密码错误.",
"date": "2019-10-19 14:34:34",
"spent": 9,
"size": -1,
"count": 0,
"position": 0,
"prompt": "com.x.organization.assemble.authentication.jaxrs.authentication.ExceptionPersonNotExistOrInvalidPassword"
},
"status": 500,
"statusText": "Internal Server Error"
}

pom.xml
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
<modelVersion>4.0.0</modelVersion>
<groupId>net.o2oa.demos</groupId>
<artifactId>test_start_process_demo</artifactId>
<version>0.0.1-SNAPSHOT</version>
<packaging>jar</packaging>
<name>test_start_process_demo</name>
<url>http://maven.apache.org</url>
<properties>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
</properties>
<dependencies>        <!-- https://mvnrepository.com/artifact/org.apache.httpcomponents/httpclient -->
<dependency>
<groupId>org.apache.httpcomponents</groupId>
<artifactId>httpclient</artifactId>
<version>4.5.10</version>
</dependency>        <!-- https://mvnrepository.com/artifact/org.apache.httpcomponents/httpcore-nio -->
<dependency>
<groupId>org.apache.httpcomponents</groupId>
<artifactId>httpcore-nio</artifactId>
<version>4.4.12</version>
</dependency>        <!-- https://mvnrepository.com/artifact/org.apache.httpcomponents/httpcore -->
<dependency>
<groupId>org.apache.httpcomponents</groupId>
<artifactId>httpcore</artifactId>
<version>4.4.12</version>
</dependency>        <!-- https://mvnrepository.com/artifact/org.apache.httpcomponents/httpmime -->
<dependency>
<groupId>org.apache.httpcomponents</groupId>
<artifactId>httpmime</artifactId>
<version>4.5.10</version>
</dependency>
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-lang3</artifactId>
<version>3.9</version>
</dependency>
<dependency>
<groupId>com.google.code.gson</groupId>
<artifactId>gson</artifactId>
<version>2.8.5</version>
</dependency>        <!-- https://mvnrepository.com/artifact/org.json/json -->
<dependency>
<groupId>org.json</groupId>
<artifactId>json</artifactId>
<version>20190722</version>
</dependency>
<dependency>
<groupId>junit</groupId>
<artifactId>junit</artifactId>
<version>3.8.1</version>
<scope>test</scope>
</dependency>
</dependencies>
</project>

示例下载（Eclipse，JDK1.8）：

 

标签
string
token
data
sso
易学教程内所有资源均来自网络或用户发布的内容，如有违反法律规定的内容欢迎反馈！
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!