【add】添加跨站过滤器和白名单txt文件用于读取白名单

2021-04-16 15:50:51 +08:00
parent 5c0b28d4bf
commit 1e582930fa
1 changed files with 164 additions and 0 deletions
@@ -0,0 +1,164 @@
 package com.jero.config;
 import cn.hutool.json.JSONObject;
 import cn.hutool.json.JSONUtil;
 import com.jero.common.api.vo.Result;
 import org.apache.commons.logging.Log;
 import org.apache.commons.logging.LogFactory;
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.stereotype.Component;
 import org.springframework.util.ResourceUtils;
 import javax.servlet.*;
 import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;
 import java.io.*;
 import java.text.SimpleDateFormat;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Date;
 import java.util.List;
 /**
 * 描述：跨站过滤器
 *
 * @Author: 马志朝
 * @Date: 2021/4/16 14:09
 */
@Component
 public class CsrfFilter implements Filter {
    /**
     * LOGGER
     */
    private static final Log LOGGER = LogFactory.getLog(CsrfFilter.class);
    /**
     * 白名单
     */
    private List<String> whiteUrls = new ArrayList<>();
    /**
     * size
     */
    private int size = 0;
    @Override
    public void init(FilterConfig filterConfig) throws ServletException {
        FileInputStream fis = null;
        InputStreamReader isr = null;
        BufferedReader br = null;
        try {
             File file = ResourceUtils.getFile("classpath:whiteUrls.txt");
             fis = new FileInputStream(file);
             isr = new InputStreamReader(fis);
             br = new BufferedReader(isr);
            String url = null;
            while((url = br.readLine()) != null){
                whiteUrls.add(url);
            }
            size = whiteUrls.size();
        } catch (IOException e) {
            e.printStackTrace();
        } finally {
            if(fis!=null){
                try {
                    fis.close();
                } catch (IOException e) {
                    e.printStackTrace();
                }
            }
            if(isr!=null){
                try {
                    isr.close();
                } catch (IOException e) {
                    e.printStackTrace();
                }
            }
            if(br!=null){
                try {
                    br.close();
                } catch (IOException e) {
                    e.printStackTrace();
                }
            }
        }
    }
    @Override
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)  {
        try {
            HttpServletRequest req = (HttpServletRequest) request;
            HttpServletResponse res = (HttpServletResponse) response;
            // 获取请求url地址
            String url = req.getRequestURL().toString();
            // 获取来源
            String referurl = req.getHeader("Referer");
            if(isWhiteReq(referurl)){
                chain.doFilter(request, response);
            }else{
                String log = "";
                String date = new SimpleDateFormat("yyyyMMddHHmmss").format(new Date());
                String ip = getIp(req);
                log = "跨站请求---->>>" + ip + "||" + date + "||" + referurl + "||" + url;
                LOGGER.warn(log);
                //发送错误信息
                JSONObject json = JSONUtil.parseObj(Result.error("监测到跨站请求，请求失败"), false);
                res.setCharacterEncoding("UTF-8");
                res.setContentType("application/json; charset=utf-8");
                PrintWriter out = res.getWriter();
                out.append(json.toStringPretty());
            }
        } catch (Exception e) {
            LOGGER.error("doFilter", e);
        }
    }
    /**
     * 判断是否是白名单
     */
    private boolean isWhiteReq(String referUrl) {
        if (referUrl == null || "".equals(referUrl) || size == 0) {
            return true;
        } else {
            String refHost = "";
            referUrl = referUrl.toLowerCase();
            if (referUrl.startsWith("http://")) {
                refHost = referUrl.substring(7);
            } else if (referUrl.startsWith("https://")) {
                refHost = referUrl.substring(8);
            }
            for (String urlTemp : whiteUrls) {
                if (refHost.contains(urlTemp.toLowerCase())) {
                    return true;
                }
            }
        }
        return false;
    }
    /**
     * 获取登录用户IP地址
     * @param request
     * @return
     */
    public  String getIp(HttpServletRequest request) {
        String ip = request.getHeader("x-forwarded-for");
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
            ip = request.getHeader("Proxy-Client-IP");
        }
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
            ip = request.getHeader("WL-Proxy-Client-IP");
        }
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
            ip = request.getRemoteAddr();
        }
        if (ip.equals("0:0:0:0:0:0:0:1")) {
            ip = "localhost";
        }
        return ip;
    }
    @Override
    public void destroy() {
    }
 }