网关认证

import cn.hutool.http.HttpResponse;
import cn.hutool.http.HttpUtil;
import com.alibaba.fastjson.JSONObject;
import org.apache.commons.lang3.StringUtils;
import java.security.MessageDigest;
import java.util.HashMap;
import java.util.Map;
import java.util.Objects;
import java.util.UUID;

/**
 * 签名工具类
 */
public class OpenApiV1Demo {
    /**
     * 过期时间：5分钟
     */
    private static final Long AUTH_TIME_EXPIRED = 5 * 60 * 1000L;

    /**
     * 检验
     *
     * @param accessKey ak（用户传递）
     * @param secretKey sk（自己保存）
     * @param timestamp 时间戳（用户传递）
     * @param signature 签名串（用户传递）
     * @param param 字典序的参数字符串(例如:access_key=***&status=test&state=bobo188&timestamp=1571744445945)
     * @return Boolean
     * @throws Exception 鉴权错误信息
     */
    public static Boolean check(String accessKey, String secretKey, String timestamp, String signature,String param)
            throws Exception {
        if (StringUtils.isBlank(timestamp)) {
            System.err.println("鉴权参数不可为空, timestamp=" + timestamp);
            throw new IllegalArgumentException();
        }
        long time = 0;
        try {
            time = Long.parseLong(timestamp);
        } catch (NumberFormatException e) {
            throw new RuntimeException("鉴权参数异常！");
        }
        if (System.currentTimeMillis() - time > AUTH_TIME_EXPIRED) {
            throw new RuntimeException("鉴权时间过期！");
        }

        String sign = getSignature(accessKey, secretKey, timestamp,param);
        return StringUtils.equals(sign, signature);
    }

    /**
     * @param params
     * @return
     */
    public static String sortParamToString(Map<String, String> params) {
        StringBuilder sb = new StringBuilder();
        if (Objects.nonNull(params) && params.size() > 0) {
            params.entrySet()
                    .stream()
                    .sorted(Map.Entry.comparingByKey())
                    .forEach(paramEntry -> {
                        sb.append(paramEntry.getKey()).append("=").append(paramEntry.getValue()).append("#");
                    });
        }
        String res = sb.toString();
        return res;
    }

    /**
     * 获取签名串
     *
     * @param accessKey ak
     * @param secretKey sk
     * @param timestamp 时间戳
     * @param param     字典序的参数(例如:access_key=***&status=test&state=bobo188&timestamp=1571744445945)
     * @return 签名串
     */
    public static String getSignature(String accessKey, String secretKey, String timestamp, String param) {
        if (StringUtils.isAnyBlank(accessKey, secretKey,timestamp)) {
            System.err.println("鉴权参数不可为空, accessKey=" + accessKey + ", secretKey=" + secretKey + ",timestamp=" + timestamp);
            throw new IllegalArgumentException();
        }
        String needSignatureStr = secretKey + "$" + timestamp + "$" + accessKey + "$" + param;
        try {
            MessageDigest md5 = MessageDigest.getInstance("MD5");
            md5.update(needSignatureStr.getBytes("UTF-8"));
            byte[] summery = md5.digest();
            StringBuilder md5StrBuilder = new StringBuilder();

            for (byte aSummery : summery) {
                if (Integer.toHexString(255 & aSummery).length() == 1) {
                    md5StrBuilder.append("0").append(Integer.toHexString(255 & aSummery));
                } else {
                    md5StrBuilder.append(Integer.toHexString(255 & aSummery));
                }
            }
            return md5StrBuilder.toString();
        } catch (Exception e) {
            System.err.println("获取签名串失败" + e);
            return "";
        }
    }

    /**
     *
     * @param accessKey
     * @param secretKey
     * @param bizParam  map类型的业务业务参数名
     * @return  返回构造好的带有签名和参数的url
     */
    public static String getSignUrl(String accessKey, String secretKey, Map<String, String> bizParam){
        if(Objects.isNull(bizParam)||bizParam.size()==0){
            bizParam = new HashMap<>();
        }
        if(Objects.isNull(bizParam.get("sign_version"))){
            bizParam.put("sign_version","2.0");
        }
        if(Objects.isNull(bizParam.get("sign_nonce"))){
            bizParam.put("sign_nonce", UUID.randomUUID().toString().replace("-",""));
        }
        if(Objects.isNull(bizParam.get("sign_type"))){
            bizParam.put("sign_type","MD5");
        }
        String currentTime = String.valueOf(System.currentTimeMillis());
        if(Objects.isNull(bizParam.get("timestamp"))){
            bizParam.put("timestamp",currentTime);
        }
        //添加access_key
        bizParam.put("access_key",accessKey);
        //排序后的参数字符串
        String sortParam = sortParamToString(bizParam);
        //MD5加密环节
        String sign = getSignature(accessKey,secretKey,currentTime,sortParam);
        //构造url后续参数
        String url = getUrlParamsByMap(bizParam);
        String signUrl = url.concat("&signature=").concat(sign);
        return signUrl;
    }

    /**
     * 将map转换成url
     *
     * @param map
     * @return
     */
    public static String getUrlParamsByMap(Map<String, String> map) {
        if (map == null) {
            return "";
        }
        StringBuffer sb = new StringBuffer();
        for (Map.Entry<String, String> entry : map.entrySet()) {
            sb.append(entry.getKey() + "=" + entry.getValue());
            sb.append("&");
        }
        String s = sb.toString();
        if (s.endsWith("&")) {
            s = StringUtils.substringBeforeLast(s, "&");
        }
        return s;
    }


    /**
     * 获取url后拼接的参数，使用时在需要请求的url后拼接"?"和返回的参数
     * 本段代码返回样式如：
     *  sign_version=2.0&access_key=accessKey&sign_nonce=08b02b5b0e8243528369e1befddfbcef&sign_type=MD5&timestamp=1627456021388&signature=727faa633c944b3f756bef95d80df954
     * 拼接后的请求url为：
     *  http://api.shuwen.com/xxxxx/xxx?sign_version=2.0&access_key=accessKey&sign_nonce=08b02b5b0e8243528369e1befddfbcef&sign_type=MD5&timestamp=1627456021388&signature=727faa633c944b3f756bef95d80df954
     */
    public static void main(String args[]) {
        // todo 填充对应 aksk
        String ak = "";
        String sk = "";


        String auth = getSignUrl(ak, sk, null);
        System.out.println(auth);
    }
}