/**
* 基础云和 Vms之间的http传输的http client代理
*
* @author WangYongJian
* @version 1
.0
* @since 2023/2/3 16
:47
*/
@Slf4j
@Component
public class HttpClientProxy {
/**
* 云对外设备接口client，注入CloudSDK
*/
private ApiHttpClient apiHttpClient;
/**
* 云对外APP接口client，注入CloudSDK
*/
private AppHttpClient appHttpClient;
/**
* 云端控制器信息存储服务，在本地存储控制器信息，构建了数据库
*/
private CloudInfoRepository cloudInfoRepository;
private static final String KEY_TRUST_STORE_PATH = "
javax
.net.ssl
.trustStore";
private static final String KEY_TRUST_STORE_PASS = "
javax
.net.ssl
.trustStorePassword";
/**
* 构造器，同时构造ApiHttpClient和AppHttpClient http客户端代理
*
* @param cloudInfoRepository 云设备信息响应服务
*
*/
@Autowired
private HttpClientProxy
(CloudInfoRepository cloudInfoRepository,
CloudOwnerCache cloudOwnerCache, VmsInternalApiService settingsService
) {
String vmsHome = AppHomeUtils
.getConfPath
();
String keyStorePath = vmsHome + "tplinknbu
.jks";
System
.setProperty
(CLOUDACCESS_SEF_ENTRY,CLOUDACCESS_SEF_ENTRY_URL
);
System
.setProperty
(CLOUDACCESS_DEVICE_ENTRY,CLOUDACCESS_DEVICE_ENTRY_URL
);
System
.setProperty
(CLOUDACCESS_WAP_ENTRY,CLOUDACCESS_WAP_ENTRY_URL
);
System
.setProperty
(CLOUDACCESS_API_ENTRY,CLOUDACCESS_API_ENTRY_URL
);
System
.setProperty
(KEY_TRUST_STORE_PATH, keyStorePath
);
System
.setProperty
(KEY_TRUST_STORE_PASS, "
nettyNbu"
);
IDeviceMgmt deviceMgmt = new VmsDevice
(cloudInfoRepository, cloudOwnerCache, settingsService
);
this
.cloudInfoRepository = cloudInfoRepository;
/*
* 'validate' request to API server must use returned validateHost's value of 'applySoftwareDeviceId' request
* before first binding account successfully, then 'validate' request can use default host once bound
* successfully
.
*/
if
(this
.cloudInfoRepository
.checkDeviceIdIsRaw
()) {
// rawId is true, current deviceId has never bound to a user account
// 从本地数据库中 获取 validateHost
String validateHost = this
.cloudInfoRepository
.getValidateHostBeforeBind
();
if
(Objects
.isNull
(validateHost
)) {
apiHttpClient = new ApiHttpClient
(deviceMgmt
);
} else {
// 使用 validateHost 初始化创建一个 apiHttpClient
apiHttpClient = new ApiHttpClient
(validateHost, deviceMgmt
);
}
} else {
apiHttpClient = new ApiHttpClient
(deviceMgmt
);
}
appHttpClient = new AppHttpClient
(deviceMgmt
);
}
/**
* Send post request to API cloud server
. <br> It uses default connection timeout
(15s
) and read timeout
(15s
) for per
* request
. If current deviceToken is expired, validate request will be sent automatically to get new deviceToken;
*
* @param leafPath points out the method name of URL
.
* @param request API request
.
* @return response from API server
.
*/
@SneakyThrows
public JSONObject sendPostRequest
(String leafPath, JSONObject request
) {
return apiHttpClient
.sendPostRequest
(leafPath, request
);
}
/**
* Send post request to API cloud server
. <br> It uses default connection timeout
(15s
) and read timeout
(15s
).
*
* @param leafPath points out the method name of URL
.
* @param deviceToken device token from validateHost
.
* @param request API request
.
* @return response from API server
.
*/
@SneakyThrows
public JSONObject sendPostRequest
(String leafPath, String deviceToken, JSONObject request
) {
return apiHttpClient
.sendPostRequest
(leafPath, deviceToken, request
);
}
/**
* Send post request to API cloud server
. <br>
*
* @param leafPath points out the method name of URL
.
* @param deviceToken device token from validateHost
.
* @param request API request
.
* @param connTimeout connection timeout
. Valid range is 1-30
.
* @param readTimeout read timeout
. Valid range is 1-30
.
* @return response from API server
.
*/
@SneakyThrows
public JSONObject sendPostRequest
(String leafPath, String deviceToken, JSONObject request,
int connTimeout, int readTimeout
) {
return apiHttpClient
.sendPostRequest
(leafPath, deviceToken, request, connTimeout, readTimeout
);
}
/**
* Restores host to validate device legality for 'validate' request to the default value
. <br>
* 将主机还原为默认值，以验证“validate”请求的设备合法性。
*/
public void restoreValidateHost
() {
apiHttpClient
.restoreValidateHost
();
}
/**
* 向基础云申请VMS Local的软件ID
* <p>
* Apply device id to APP cloud server and updates member 'validateHost' of member 'apiHttpClient', this method can
* only be called by software EAP Controller
.<br>
* 将设备ID申请到APP云服务器，并更新成员变量'apiHttpClient'的成员变量'validateHost'，该方法只能由软件EAP控制器调用。 This function can login automatically
* to get user token
.
* <B>Note
:</B> 'validate' request to API server must use returned validateHost's value of this request before
* first binding account successfully, then 'validate' request can use default host once bound successfully
.<br>
*
* @param urlParams parameters included in URL; the key stores the parameter name, the value stores the
* parameter value
.
* @param cloudUserName cloud account that applies device id
.
* @param cloudPassword password of cloud account
.
* @return response from APP cloud server
.
*/
@SneakyThrows
public JSONObject applySoftwareDeviceId
(Map<String, String> urlParams, String cloudUserName, String cloudPassword
) {
if
(CollectionUtil
.isEmpty
(urlParams
) || StringUtil
.isBlank
(cloudUserName
) || StringUtil
.isBlank
(
cloudPassword
)) {
log
.error
("[applySoftwareDeviceId] param invalid cloudUsername {}", CustomPIIMaskUtil
.hash
(cloudUserName
));
return null;
}
JSONObject response = GrpcRetryUtil
.executeWithRetry
(()->appHttpClient
.applySoftwareDeviceId
(urlParams, cloudUserName,cloudPassword
));
/*
* parse validateHost and update API validateHost
.
* 解析
*
*/
if
((response != null
) && CloudUtils
.hasKey
(response, AppHttpClient
.KEY_ERROR_CODE
) && response
.getInt
(AppHttpClient
.KEY_ERROR_CODE
) == 0
) {
if
(CloudUtils
.hasKey
(response, AppHttpClient
.KEY_RESULT
)) {
JSONObject result = response
.getJSONObject
(AppHttpClient
.KEY_RESULT
);
// 从result中获取新的 DeviceId
// 从result中获取新的 validateHost
String newDeviceId = result
.getString
(CloudConstant
.DEVICE_ID
);
String validateHost = result
.getString
(AppHttpClient
.KEY_VALIDATE_HOST
);
if
(!Objects
.isNull
(validateHost
)) {
// 给cloud sdk 设置 validateHost
apiHttpClient
.setValidateHost
(validateHost
);
// 给 本地数据库 设置 validateHost
cloudInfoRepository
.setValidateHostBeforeBind
(validateHost
);
} else {
log
.error
("Value of {} is not valid
.", AppHttpClient
.KEY_VALIDATE_HOST
);
}
cloudInfoRepository
.saveDeviceId
(newDeviceId
);
}
}
return response;
}
}
本文介绍了ASP.NET中客户端提交的潜在危险值导致的请求验证异常，并提供了.NET Framework 2.0中的解决方法，即禁用请求验证或显式检查所有输入。
扫一扫
2048
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
