|
@ -712,41 +712,57 @@ public class WlyyLoginEndpoint extends AbstractEndpoint {
|
|
|
|
|
|
//获取私钥
|
|
|
public KeyPair getKeyPair(HttpSession httpSession,HttpServletRequest request){
|
|
|
String referer = request.getHeader("Referer");
|
|
|
if(referer.indexOf("https://yyfbxt.szhz.hangzhou.gov.cn")==0){
|
|
|
OauthKeypairDO keypairDO = oauthKeypairDao.findByCode("yyfbxtKey");
|
|
|
KeyPair keyPair = (KeyPair) SerializeUtil.unSerialize(keypairDO.getKeyPair());
|
|
|
return keyPair;
|
|
|
}
|
|
|
KeyPair keyPair = (KeyPair) httpSession.getAttribute("privateKey");
|
|
|
OauthKeypairDO keypairDO = oauthKeypairDao.findByCode("yyfbxtKey");
|
|
|
KeyPair keyPair = (KeyPair) SerializeUtil.unSerialize(keypairDO.getKeyPair());
|
|
|
return keyPair;
|
|
|
// String referer = request.getHeader("Referer");
|
|
|
// if(referer.indexOf("https://yyfbxt.szhz.hangzhou.gov.cn")==0){
|
|
|
// OauthKeypairDO keypairDO = oauthKeypairDao.findByCode("yyfbxtKey");
|
|
|
// KeyPair keyPair = (KeyPair) SerializeUtil.unSerialize(keypairDO.getKeyPair());
|
|
|
// return keyPair;
|
|
|
// }
|
|
|
// KeyPair keyPair = (KeyPair) httpSession.getAttribute("privateKey");
|
|
|
// return keyPair;
|
|
|
}
|
|
|
|
|
|
|
|
|
@RequestMapping(value = "/oauth/getPublicKey", method = RequestMethod.GET)
|
|
|
public ObjEnvelop<PublickeyVO> getPublicKey(HttpSession httpSession, HttpServletRequest request) {
|
|
|
String referer = request.getHeader("Referer");
|
|
|
if(referer.indexOf("https://yyfbxt.szhz.hangzhou.gov.cn")==0){
|
|
|
//跨域时公钥固定
|
|
|
OauthKeypairDO keypairDO = oauthKeypairDao.findByCode("yyfbxtKey");
|
|
|
if (keypairDO == null) {
|
|
|
KeyPair keyPair = com.yihu.jw.security.utils.RSAUtils.getKey();
|
|
|
byte[] bytekey = SerializeUtil.ObjTOSerialize(keyPair);
|
|
|
OauthKeypairDO kpDO = new OauthKeypairDO();
|
|
|
kpDO.setCode("yyfbxtKey");
|
|
|
kpDO.setKeyPair(bytekey);
|
|
|
keypairDO = oauthKeypairDao.save(kpDO);
|
|
|
}
|
|
|
KeyPair keyPair = (KeyPair) SerializeUtil.unSerialize(keypairDO.getKeyPair());
|
|
|
PublickeyVO pk = new PublickeyVO();
|
|
|
pk.setPublicKey(com.yihu.jw.security.utils.RSAUtils.generateBase64PublicKey(keyPair));
|
|
|
return ObjEnvelop.getSuccess("success", pk);
|
|
|
}
|
|
|
KeyPair keyPair = com.yihu.jw.security.utils.RSAUtils.getKey();
|
|
|
httpSession.setAttribute("privateKey", keyPair);
|
|
|
OauthKeypairDO keypairDO = oauthKeypairDao.findByCode("yyfbxtKey");
|
|
|
if (keypairDO == null) {
|
|
|
KeyPair keyPair = com.yihu.jw.security.utils.RSAUtils.getKey();
|
|
|
byte[] bytekey = SerializeUtil.ObjTOSerialize(keyPair);
|
|
|
OauthKeypairDO kpDO = new OauthKeypairDO();
|
|
|
kpDO.setCode("yyfbxtKey");
|
|
|
kpDO.setKeyPair(bytekey);
|
|
|
keypairDO = oauthKeypairDao.save(kpDO);
|
|
|
}
|
|
|
KeyPair keyPair = (KeyPair) SerializeUtil.unSerialize(keypairDO.getKeyPair());
|
|
|
PublickeyVO pk = new PublickeyVO();
|
|
|
pk.setPublicKey(com.yihu.jw.security.utils.RSAUtils.generateBase64PublicKey(keyPair));
|
|
|
return ObjEnvelop.getSuccess("success", pk);
|
|
|
// String referer = request.getHeader("Referer");
|
|
|
// if(referer.indexOf("https://yyfbxt.szhz.hangzhou.gov.cn")==0){
|
|
|
// //跨域时公钥固定
|
|
|
// OauthKeypairDO keypairDO = oauthKeypairDao.findByCode("yyfbxtKey");
|
|
|
// if (keypairDO == null) {
|
|
|
// KeyPair keyPair = com.yihu.jw.security.utils.RSAUtils.getKey();
|
|
|
// byte[] bytekey = SerializeUtil.ObjTOSerialize(keyPair);
|
|
|
// OauthKeypairDO kpDO = new OauthKeypairDO();
|
|
|
// kpDO.setCode("yyfbxtKey");
|
|
|
// kpDO.setKeyPair(bytekey);
|
|
|
// keypairDO = oauthKeypairDao.save(kpDO);
|
|
|
// }
|
|
|
// KeyPair keyPair = (KeyPair) SerializeUtil.unSerialize(keypairDO.getKeyPair());
|
|
|
// PublickeyVO pk = new PublickeyVO();
|
|
|
// pk.setPublicKey(com.yihu.jw.security.utils.RSAUtils.generateBase64PublicKey(keyPair));
|
|
|
// return ObjEnvelop.getSuccess("success", pk);
|
|
|
// }
|
|
|
// KeyPair keyPair = com.yihu.jw.security.utils.RSAUtils.getKey();
|
|
|
// httpSession.setAttribute("privateKey", keyPair);
|
|
|
// PublickeyVO pk = new PublickeyVO();
|
|
|
// pk.setPublicKey(com.yihu.jw.security.utils.RSAUtils.generateBase64PublicKey(keyPair));
|
|
|
// return ObjEnvelop.getSuccess("success", pk);
|
|
|
}
|
|
|
|
|
|
/**
|