java口令_java动态口令登录实现过程详解

1.实现一个ItsClient 客户端用来实例化调用验证功能

public class ItsClient {

private static final String routing &＃61; "/v1.0/sectoken/otp_validation";

// ! HTTPS消息验证地址

private String httpsVerifyUrl &＃61; "";

// ! otp ipAddr

private String ipAddr &＃61; "";

// ! otp port

private String port &＃61; "";

// ! otp appID

private String appID &＃61; "";

// ! otp appKey

private String appKey &＃61; "";

// ! 错误码

private int errorCode &＃61; 0;

// ! 错误消息

private String errorMessage &＃61; "";

TreeMap errorCodeTable &＃61; new TreeMap() {

{

put(200, "请求成功");

put(400, "输入不合法,比如请求数据不是json");

put(401, "AppID不合法");

put(402, "指纹不合法");

put(410, "非法用户&＃xff0c;验证otp时,传入的uid有误,找不到用户");

put(411, "错误的otp");

put(412, "一个周期内动态口令只能使用一次");

put(413, "已达一个周期内最大尝试次数");

put(500, "ITS服务器内部错误");

put(601, "参数错误");

put(602, "sha1签名失败");

put(603, "操作json失败");

put(604, "url访问错误:");

put(605, "较验返回指纹失败");

}

};

public ItsClient() {

this.ipAddr &＃61; ItsConf.GetIpAddr();

this.port &＃61; ItsConf.GetPort();

this.appID &＃61; ItsConf.GetOtpAppID();

this.appKey &＃61; ItsConf.GetOtpAppKey();

httpsVerifyUrl &＃61; "https://" &＃43; this.ipAddr &＃43; &＃39;:&＃39; &＃43; this.port &＃43; routing;

}

//获取错误信息

public St ring GetErrorMessage() {

return this.errorMessage;

}

//获取错误码

public int GetErrorCode() {

return this.errorCode;

}

public void SetError(int errorCode, String extMessage) {

this.errorCode &＃61; errorCode;

this.errorMessage &＃61; this.errorCodeTable.get(this.errorCode).toString() &＃43; extMessage;

}

public static String SHA1(String decript) throws NoSuchAlgorithmException {

String ret &＃61; "";

MessageDigest sha1 &＃61; MessageDigest.getInstance("SHA1");

byte[] sha1bytes &＃61; sha1.digest(decript.getBytes());

if (sha1bytes !&＃61; null) {

ret &＃61; new BASE64Encoder().encode(sha1bytes);

}

return ret;

}

public String EncodeJson(TreeMap map) {

JSONObject jmap &＃61; new JSONObject(map);

return jmap.toString();

}

public TreeMap DecodeJson(String jsonStr) throws ParseException {

JSONObject jsonObject &＃61; new JSONObject(jsonStr);

TreeMap retMap &＃61; new TreeMap();

Iterator iter &＃61; jsonObject.keys();

String key &＃61; null;

Object value &＃61; null;

while (iter.hasNext()) {

key &＃61; iter.next();

value &＃61; jsonObject.get(key);

retMap.put(key, value);

}

return retMap;

}

public String BuildQueryStr(TreeMap params) {

String queryStr &＃61; "";

Iterator itr &＃61; params.keySet().iterator();

while (itr.hasNext()) {

String key &＃61; itr.next();

queryStr &＃43;&＃61; (key &＃43; "&＃61;" &＃43; params.get(key).toString() &＃43; "&");

}

return queryStr.substring(0, queryStr.length() - 1);

}

public boolean IsEmptyOrNull(String param) {

return param &＃61;&＃61; null || param.length() <&＃61; 0;

}

/**

* &＃64;brief 验证otp

* &＃64;param uid ITS主账号UID或已配置的从账号

* &＃64;param otp 需要验证的动态口令

* &＃64;return bool true: 成功, false: 失败

*/

&＃64;SuppressWarnings("serial")

public boolean AuthOtp(final String uid, final String otp) {

if (IsEmptyOrNull(this.ipAddr) || IsEmptyOrNull(this.port) || IsEmptyOrNull(this.appID)

|| IsEmptyOrNull(this.appKey) || IsEmptyOrNull(uid) || IsEmptyOrNull(otp)) {

SetError(601, "");

return false;

}

TreeMap params &＃61; new TreeMawww.cppcns.comp() {

{

put("app_id", appID);

put("app_key", appKey);

put("uid", uid);

put("otp", otp);

}

};

String qureyStr &＃61; this.BuildQueryStr(params);

String fingerprint &＃61; "";

try {

fingerprint &＃61; SHA1(qureyStr);

} catch (Exception ex) {

ex.printStackTrace();

SetError(602, ex.getMessage());

return false;

}

params.remove("app_key");

params.put("fingerprint", fingerprint);

String postStr &＃61; "";

try {

postStr &＃61; EncodeJson(params);

} catch (Exception ex) {

ex.printStackTrace();

SetError(603, "json encode" &＃43; ex.getMessage());

return false;

}

HttpsClient conn &＃61; null;

String res

2.实现一个HttpsClient 请求工具

public class HttpsClient {

final static HostnameVerifier doNotVerifier &＃61; new HostnameVerifier() {

public boolean verify(String hostname, SSLSession session) {

return true;

}

};

/**

* &＃64;brief 发送请求

* &＃64;param httpsUrl 请求的地址

* &＃64;param postStr 请求的数据

* &＃64;throws Exception

*/

public String post(String httpsUrl, String postStr) throws Exception {

HttpsURLConnection conn &＃61; null;

StringBuffer recvBuff &＃61; new StringBuffer();

String resData &＃61; "";

try {

conn &＃61; (HttpsURLConnection) (new URL(httpsUrl)).openConnection();

conn.setHostnameVerifier(doNotVerifier);

conn.setDoInput(true);

conn.setDoOutput(true);

conn.setRequestMethod("POST");

conn.setRequestProperty("Content-Type", " application/json");

conn.setRequestProperty("Content-Length", String.valueOf(postStr.getBytes("utf-8").length));

conn.setUseCaches(false);

//设置为utf-8可以解决服务器接收时读取的数据中文乱码问题

conn.getOutputStream().write(postStr.getBytes("utf-8"));

conn.getOutputStream().flush();

conn.getOutputStream().close();

&nbwww.cppcns.comsp; BufferedReader in &＃61; new BufferedReader(new InputStreamReader(conn.getInputStream()));

String line;

while ((line &＃61; in.readLine()) !&＃61; null) {

recvBuff.append(line);

}

resData &＃61; recvBuff.toString();

return resData;

} catch (MalformedURLException ex) {

throw ex;

} catch (IOException ex) {

throw ex;

} catch (Exception ex) {

throw ex;

}

}

}

3.实现Its一个配置用来配置Its服务器信息接口访问地址

public class ItsConf {

// ITS服务器地址 1.1.1.1 或 xxx.xxx.com的形式

private static String ipAddr &＃61; "";

// ITS服务器端口

private static String port &＃61; "";

// OTP服务的AppID

private static Stwww.cppcns.comring otpAppID &＃61; "";

// OTP服务的AppKey

private static String otpAppKey &＃61; "";

public static String GetIpAddr() {

return ipAddr;

}

public static String GetPort() {

return port;

}

public static String GetOtpAppID() {

return otpAppID;

}

public static String GetOtpAppKey() {

return otpAppKey;

}

}

4.接下来就是LoginContorller 完成口令认证

//username 用户名

//code动态口令密码

ItsClient itsClient &＃61; new ItsClient();

if(itsClient.AuthOtp(username, code)){

//认证成功,跳转页面

}

5.登陆页面就省略了,自己完成吧

以上就是本文的全部内容&＃xff0c;希望对大家的学习有所帮助&＃xff0c;也希望大家多多支持我们。

本文标题: java动态口令登录实现过程详解

本文地址: http://www.cppcns.com/ruanjian/java/264603.html