常规认证方式

上代码:
需要的Maven
<dependency><groupId>org.apache.httpcomponents</groupId><artifactId>httpclient</artifactId><version>4.5</version></dependency><dependency><groupId>org.apache.httpcomponents</groupId><artifactId>httpmime</artifactId><version>4.5</version></dependency><dependency><groupId>org.apache.httpcomponents</groupId><artifactId>httpcore</artifactId><version>4.4.1</version></dependency><dependency><groupId>org.apache.commons</groupId><artifactId>commons-lang3</artifactId><version>3.8.1</version></dependency>
Digests
package top.huinengtech.park.exchanger.xianju.test;import org.apache.commons.codec.binary.Hex;
import org.apache.commons.lang3.Validate;import java.security.GeneralSecurityException;
import java.security.MessageDigest;
import java.security.SecureRandom;
import java.util.Random;/*** @author wcy* @date 2021/8/13 下午3:03*/public class Digests {private static SecureRandom random = new SecureRandom();/*** 加密遵循RFC2671规范 将相关参数加密生成一个MD5字符串,并返回*/public static String http_da_calc_HA1(String username, String realm, String password,String nonce, String nc, String cnonce, String qop,String method, String uri, String algorithm) {String HA1, HA2;if ("MD5-sess".equals(algorithm)) {HA1 = HA1_MD5_sess(username, realm, password, nonce, cnonce);} else {HA1 = HA1_MD5(username, realm, password);}byte[] md5Byte = md5(HA1.getBytes());HA1 = new String(Hex.encodeHex(md5Byte));md5Byte = md5(HA2(method, uri).getBytes());HA2 = new String(Hex.encodeHex(md5Byte));String original = HA1 + ":" + (nonce + ":" + nc + ":" + cnonce + ":" + qop) + ":" + HA2;md5Byte = md5(original.getBytes());return new String(Hex.encodeHex(md5Byte));}/*** algorithm值为MD5时规则*/private static String HA1_MD5(String username, String realm, String password) {return username + ":" + realm + ":" + password;}/*** algorithm值为MD5-sess时规则*/private static String HA1_MD5_sess(String username, String realm, String password, String nonce, String cnonce) {// MD5(username:realm:password):nonce:cnonceString s = HA1_MD5(username, realm, password);byte[] md5Byte = md5(s.getBytes());String smd5 = new String(Hex.encodeHex(md5Byte));return smd5 + ":" + nonce + ":" + cnonce;}private static String HA2(String method, String uri) {return method + ":" + uri;}/*** 对输入字符串进行md5散列.*/public static byte[] md5(byte[] input) {return digest(input, "MD5", null, 1);}/*** 对字符串进行散列, 支持md5与sha1算法.*/private static byte[] digest(byte[] input, String algorithm, byte[] salt, int iterations) {try {MessageDigest digest = MessageDigest.getInstance(algorithm);if (salt != null) {digest.update(salt);}byte[] result = digest.digest(input);for (int i = 1; i < iterations; i++) {digest.reset();result = digest.digest(result);}return result;} catch (GeneralSecurityException e) {throw new RuntimeException(e);}}/*** 随机生成numBytes长度数组* @param numBytes* @return*/public static byte[] generateSalt(int numBytes) {Validate.isTrue(numBytes > 0, "numBytes argument must be a positive integer (1 or larger)", (long)numBytes);byte[] bytes = new byte[numBytes];random.nextBytes(bytes);return bytes;}@Deprecatedpublic static String generateSalt2(int length) {String val = "";Random random = new Random();//参数length,表示生成几位随机数for(int i = 0; i < length; i++) {String charOrNum = random.nextInt(2) % 2 == 0 ? "char" : "num";//输出字母还是数字if( "char".equalsIgnoreCase(charOrNum) ) {//输出是大写字母还是小写字母int temp = random.nextInt(2)%2 == 0 ? 65 : 97;val += (char)(random.nextInt(26) + temp);} else if( "num".equalsIgnoreCase(charOrNum) ) {val += String.valueOf(random.nextInt(10));}}return val.toLowerCase();}}
HttpRequestUtils
package top.huinengtech.park.exchanger.xianju.test;import com.alibaba.fastjson.JSON;
import com.alibaba.fastjson.JSONObject;
import org.apache.commons.lang3.StringUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.OutputStream;
import java.net.HttpURLConnection;
import java.net.URL;
import java.net.URLConnection;
import java.util.*;/*** @author wcy* @date 2021/8/13 下午3:04*/public class HttpRequestUtils {private static final Logger logger = LoggerFactory.getLogger(HttpRequestUtils.class);public static void main(String[] args) {String json = HttpRequestUtils.sendPost("http://112.13.167.212:10000/uas/v1/api/media/live", "", "Username", "Password", "{\n" +" \"cameraId\": \"33000000000105010103000001075426\",\n" +" \"streamType\": 1,\n" +" \"urlType\": 1,\n" +" \"agentType\": 1\n" +"}", "json");System.out.println(json);}static int nc = 0; //调用次数private static final String GET = "GET";private static final String POST = "POST";private static final String PUT = "PUT";private static final String DELETE = "DELETE";/*** 向指定URL发送DELETE方法的请求* @param url 发送请求的URL* @param param 请求参数,请求参数应该是 name1=value1&name2=value2 的形式。* @param username 验证所需的用户名* @param password 验证所需的密码* @param json 请求json字符串* @param type 返回xml和json格式数据,默认xml,传入json返回json数据* @return URL 所代表远程资源的响应结果*/public static String sendDelete(String url, String param, String username, String password, String json, String type) {StringBuilder result = new StringBuilder();BufferedReader in = null;try {String wwwAuth = sendGet(url, param); //发起一次授权请求if (wwwAuth.startsWith("WWW-Authenticate:")) {wwwAuth = wwwAuth.replaceFirst("WWW-Authenticate:", "");} else {return wwwAuth;}nc ++;String urlNameString = url + (StringUtils.isNotEmpty(param) ? "?" + param : "");URL realUrl = new URL(urlNameString);// 打开和URL之间的连接HttpURLConnection connection = (HttpURLConnection)realUrl.openConnection();// 设置是否向connection输出,因为这个是post请求,参数要放在// http正文内,因此需要设为trueconnection.setDoOutput(true);// Read from the connection. Defaultis true.connection.setDoInput(true);// 默认是 GET方式connection.setRequestMethod(DELETE);// 设置通用的请求属性setRequestProperty(connection, wwwAuth, realUrl, username, password, DELETE, type);if (!StringUtils.isEmpty(json)) {byte[] writebytes =json.getBytes();connection.setRequestProperty("Content-Length",String.valueOf(writebytes.length));OutputStream outwritestream = connection.getOutputStream();outwritestream.write(json.getBytes());outwritestream.flush();outwritestream.close();}if (connection.getResponseCode() == 200) {in = new BufferedReader(new InputStreamReader(connection.getInputStream()));String line;while ((line = in.readLine()) != null) {result.append(line);}} else {String errResult = formatResultInfo(connection, type);logger.info(errResult);return errResult;}nc = 0;} catch (Exception e) {nc = 0;throw new RuntimeException(e);} finally {try {if (in != null) in.close();} catch (Exception e2) {e2.printStackTrace();}}return result.toString();}/*** 向指定URL发送PUT方法的请求* @param url 发送请求的URL* @param param 请求参数,请求参数应该是 name1=value1&name2=value2 的形式。* @param username 验证所需的用户名* @param password 验证所需的密码* @param json 请求json字符串* @param type 返回xml和json格式数据,默认xml,传入json返回json数据* @return URL 所代表远程资源的响应结果*/public static String sendPUT(String url, String param, String username, String password, String json, String type) {StringBuilder result = new StringBuilder();BufferedReader in = null;try {String wwwAuth = sendGet(url, param); //发起一次授权请求if (wwwAuth.startsWith("WWW-Authenticate:")) {wwwAuth = wwwAuth.replaceFirst("WWW-Authenticate:", "");} else {return wwwAuth;}nc ++;String urlNameString = url + (StringUtils.isNotEmpty(param) ? "?" + param : "");URL realUrl = new URL(urlNameString);// 打开和URL之间的连接HttpURLConnection connection = (HttpURLConnection)realUrl.openConnection();// 设置是否向connection输出,因为这个是post请求,参数要放在// http正文内,因此需要设为trueconnection.setDoOutput(true);// Read from the connection. Defaultis true.connection.setDoInput(true);// 默认是 GET方式connection.setRequestMethod(PUT);// Post 请求不能使用缓存connection.setUseCaches(false);// 设置通用的请求属性setRequestProperty(connection, wwwAuth,realUrl, username, password, PUT, type);if (!StringUtils.isEmpty(json)) {byte[] writebytes =json.getBytes();connection.setRequestProperty("Content-Length",String.valueOf(writebytes.length));OutputStream outwritestream = connection.getOutputStream();outwritestream.write(json.getBytes());outwritestream.flush();outwritestream.close();}if (connection.getResponseCode() == 200) {in = new BufferedReader(new InputStreamReader(connection.getInputStream()));String line;while ((line = in.readLine()) != null) {result.append(line);}} else {String errResult = formatResultInfo(connection, type);logger.info(errResult);return errResult;}nc = 0;} catch (Exception e) {nc = 0;throw new RuntimeException(e);} finally {try {if (in != null) in.close();} catch (Exception e2) {e2.printStackTrace();}}return result.toString();}/*** 向指定URL发送POST方法的请求* @param url 发送请求的URL* @param param 请求参数,请求参数应该是 name1=value1&name2=value2 的形式。* @param username 验证所需的用户名* @param password 验证所需的密码* @param json 请求json字符串* @param type 返回xml和json格式数据,默认xml,传入json返回json数据* @return URL 所代表远程资源的响应结果*/public static String sendPost(String url, String param, String username, String password, String json, String type) {StringBuilder result = new StringBuilder();BufferedReader in = null;try {String wwwAuth = sendGet(url, param); //发起一次授权请求if (wwwAuth.startsWith("WWW-Authenticate:")) {wwwAuth = wwwAuth.replaceFirst("WWW-Authenticate:", "");} else {return wwwAuth;}nc ++;String urlNameString = url + (StringUtils.isNotEmpty(param) ? "?" + param : "");URL realUrl = new URL(urlNameString);// 打开和URL之间的连接HttpURLConnection connection = (HttpURLConnection)realUrl.openConnection();// 设置是否向connection输出,因为这个是post请求,参数要放在// http正文内,因此需要设为trueconnection.setDoOutput(true);// Read from the connection. Defaultis true.connection.setDoInput(true);// 默认是 GET方式connection.setRequestMethod(POST);// Post 请求不能使用缓存connection.setUseCaches(false);// 设置通用的请求属性setRequestProperty(connection, wwwAuth,realUrl, username, password, POST, type);if (!StringUtils.isEmpty(json)) {byte[] writebytes =json.getBytes();connection.setRequestProperty("Content-Length",String.valueOf(writebytes.length));OutputStream outwritestream = connection.getOutputStream();outwritestream.write(json.getBytes());outwritestream.flush();outwritestream.close();}if (connection.getResponseCode() == 200 || connection.getResponseCode() == 201) {in = new BufferedReader(new InputStreamReader(connection.getInputStream()));String line;while ((line = in.readLine()) != null) {result.append(line);}} else {String errResult = formatResultInfo(connection, type);logger.info(errResult);return errResult;}nc = 0;} catch (Exception e) {nc = 0;throw new RuntimeException(e);} finally {try {if (in != null) in.close();} catch (Exception e2) {e2.printStackTrace();}}return result.toString();}/*** 向指定URL发送GET方法的请求* @param url 发送请求的URL* @param param 请求参数,请求参数应该是 name1=value1&name2=value2 的形式。* @param username 验证所需的用户名* @param password 验证所需的密码* @param type 返回xml和json格式数据,默认xml,传入json返回json数据* @return URL 所代表远程资源的响应结果*/public static String sendGet(String url, String param, String username, String password, String type) {StringBuilder result = new StringBuilder();BufferedReader in = null;try {String wwwAuth = sendGet(url, param); //发起一次授权请求if (wwwAuth.startsWith("WWW-Authenticate:")) {wwwAuth = wwwAuth.replaceFirst("WWW-Authenticate:", "");} else {return wwwAuth;}nc ++;String urlNameString = url + (StringUtils.isNotEmpty(param) ? "?" + param : "");URL realUrl = new URL(urlNameString);// 打开和URL之间的连接HttpURLConnection connection = (HttpURLConnection)realUrl.openConnection();// 设置通用的请求属性setRequestProperty(connection, wwwAuth,realUrl, username, password, GET, type);// 建立实际的连接// connection.connect();in = new BufferedReader(new InputStreamReader(connection.getInputStream()));String line;while ((line = in.readLine()) != null) {result.append(line);}nc = 0;} catch (Exception e) {nc = 0;throw new RuntimeException(e);} finally {try {if (in != null) in.close();} catch (Exception e2) {e2.printStackTrace();}}return result.toString();}/*** 生成授权信息* @param authorization 上一次调用返回401的WWW-Authenticate数据* @param username 用户名* @param password 密码* @return 授权后的数据, 应放在http头的Authorization里* @throws IOException 异常*/private static String getAuthorization(String authorization, String uri, String username, String password, String method) throws IOException {uri = StringUtils.isEmpty(uri) ? "/" : uri;// String temp = authorization.replaceFirst("Digest", "").trim();String temp = authorization.replaceFirst("Digest", "").trim().replace("MD5","\"MD5\"");// String json = "{\"" + temp.replaceAll("=", "\":").replaceAll(",", ",\"") + "}";String json = withdrawJson(authorization);// String json = "{ \"realm\": \"Wowza\", \" domain\": \"/\", \" nonce\": \"MTU1NzgxMTU1NzQ4MDo2NzI3MWYxZTZkYjBiMjQ2ZGRjYTQ3ZjNiOTM2YjJjZA==\", \" algorithm\": \"MD5\", \" qop\": \"auth\" }";JSONObject jsonObject = JSON.parseObject(json);String cnonce = Digests.generateSalt2(8);String ncstr = ("00000000" + nc).substring(Integer.toString(nc).length()); //认证的次数,第一次是1,第二次是2...// String algorithm = jsonObject.getString("algorithm");String algorithm = jsonObject.getString("algorithm");String qop = jsonObject.getString("qop");String nonce = jsonObject.getString("nonce");String realm = jsonObject.getString("realm");String response = Digests.http_da_calc_HA1(username, realm, password,nonce, ncstr, cnonce, qop,method, uri, algorithm);//组成响应authorizationauthorization = "Digest username=\"" + username + "\"," + temp;authorization += ",uri=\"" + uri+ "\",nc=\"" + ncstr+ "\",cnonce=\"" + cnonce+ "\",response=\"" + response+"\"";return authorization;}/*** 将返回的Authrization信息转成json* @param authorization authorization info* @return 返回authrization json格式数据 如:String json = "{ \"realm\": \"Wowza\", \" domain\": \"/\", \" nonce\": \"MTU1NzgxMTU1NzQ4MDo2NzI3MWYxZTZkYjBiMjQ2ZGRjYTQ3ZjNiOTM2YjJjZA==\", \" algorithm\": \"MD5\", \" qop\": \"auth\" }";*/private static String withdrawJson(String authorization) {String temp = authorization.replaceFirst("Digest", "").trim().replaceAll("\"","");// String noncetemp = temp.substring(temp.indexOf("nonce="), temp.indexOf("uri="));// String json = "{\"" + temp.replaceAll("=", "\":").replaceAll(",", ",\"") + "}";String[] split = temp.split(",");Map<String, String> map = new HashMap<>();Arrays.asList(split).forEach(c -> {String c1 = c.replaceFirst("=",":");String[] split1 = c1.split(":");map.put(split1[0].trim(), split1[1].trim());});return JSONObject.toJSONString(map);}/*** 向指定URL发送GET方法的请求* @param url 发送请求的URL* @param param 请求参数,请求参数应该是 name1=value1&name2=value2 的形式。* @return URL 所代表远程资源的响应结果*/public static String sendGet(String url, String param) {StringBuilder result = new StringBuilder();BufferedReader in = null;try {String urlNameString = url + (StringUtils.isNotEmpty(param) ? "?" + param : "");URL realUrl = new URL(urlNameString);// 打开和URL之间的连接URLConnection connection = realUrl.openConnection();// 设置通用的请求属性connection.setRequestProperty("accept", "*/*");connection.setRequestProperty("connection", "Keep-Alive");connection.setRequestProperty("user-agent","Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");connection.connect();//返回401时需再次用用户名和密码请求//此情况返回服务器的 WWW-Authenticate 信息if (((HttpURLConnection) connection).getResponseCode() == 401) {Map<String, List<String>> map = connection.getHeaderFields();return "WWW-Authenticate:" + map.get("WWW-Authenticate").get(0);}in = new BufferedReader(new InputStreamReader(connection.getInputStream()));String line;while ((line = in.readLine()) != null) {result.append(line);}} catch (Exception e) {throw new RuntimeException("get请求发送失败",e);}// 使用finally块来关闭输入流finally {try {if (in != null) in.close();} catch (Exception e2) {e2.printStackTrace();}}return result.toString();}/*** HTTP set request property** @param connection HttpConnection* @param wwwAuth 授权auth* @param realUrl 实际url* @param username 验证所需的用户名* @param password 验证所需的密码* @param method 请求方式* @param type 返回xml和json格式数据,默认xml,传入json返回json数据*/private static void setRequestProperty(HttpURLConnection connection, String wwwAuth, URL realUrl, String username, String password, String method, String type)throws IOException {if (type != null && type.equals("json")) {// 返回jsonconnection.setRequestProperty("accept", "application/json;charset=UTF-8");connection.setRequestProperty("Content-Type","application/json;charset=UTF-8");connection.setRequestProperty("connection", "Keep-Alive");connection.setRequestProperty("user-agent","Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");} else {// 返回xmlif (!method.equals(GET)) {connection.setRequestProperty("Content-Type","application/json;charset=UTF-8");}connection.setRequestProperty("accept", "*/*");connection.setRequestProperty("connection", "Keep-Alive");// connection.setRequestProperty("Cache-Control", "no-cache");connection.setRequestProperty("user-agent","Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");}//授权信息String authentication = getAuthorization(wwwAuth, realUrl.getPath(), username, password, method);connection.setRequestProperty("Authorization", authentication);}/*** 格式化请求返回信息,支持json和xml格式* @param connection HttpConnection* @param type 指定返回数据格式,json、xml,默认xml* @return 返回数据*/private static String formatResultInfo(HttpURLConnection connection, String type) throws IOException {String result = "";if (type != null && type.equals("json")) {result = String.format("{\"errCode\":%s, \"message\":%s}",connection.getResponseCode(),connection.getResponseMessage());} else {result = String.format(" <?xml version=\"1.0\" encoding=\"UTF-8\" ?> "+ " <wmsResponse>"+ " <errCode>%d</errCode>"+ " <message>%s</message>"+ " </wmsResponse>",connection.getResponseCode(),connection.getResponseMessage());}return result;}}
主要逻辑:
1.通过HttpURLConnection建立连接
2.生成授权信息
3.建立通信,发起请求。如果返回401,继续下一次请求。重新设置响应,并获取随机数,通过md5加密返回
4.响应输出,转换未xml或者json


















