东莞理工学院网络空间安全学院实验报告

static final String CLIENT_ID = "0a0e670f4ac34bf8c77711a61e13520a151e5188511350f211829bcb578756fc";
static final String CLIENT_SECRET = "980a02c97074b79f157bae9193cd01f1cf89ff689425cc993da4120240612fb5";

protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
            // 如果不是/oauth2/gitee请求，则继续下一个过滤器。
            if (!request.getRequestURI().endsWith(DEFAULT_AUTHORIZATION_REQUEST_BASE_URI)) {
                filterChain.doFilter(request, response);
                return;// 执行完安全过滤器链后不执行后面的代码。
            }
            /// 步骤二：编写重定向过滤器的业务逻辑。
            String redirectUrl = UriComponentsBuilder.fromUriString("https://gitee.com/oauth/authorize?client_id={client_id}&redirect_uri={redirect_uri}&response_type=code")
                    .encode()
                    .buildAndExpand(CLIENT_ID,REDIRECT_URI)
                    .toUriString();
            redirectUrl = response.encodeRedirectURL(redirectUrl);
            response.sendRedirect(redirectUrl);
}

private String getAccessToken(String code) {
            /// 步骤三：使用码云access_token API向码云认证服务器发送post请求获取access_token。
           URI accessUrl = UriComponentsBuilder.fromHttpUrl(ACCESS_TOKEN_API_URI)
                   .encode()
                   .buildAndExpand(code,CLIENT_ID,REDIRECT_URI,CLIENT_SECRET)
                   .toUri();

            RequestEntity<Void> requestEntity = RequestEntity
                    .post(accessUrl)
                    .header("User-agent","Chrome")
                    .build();

           String result = rest.exchange(requestEntity,String.class).getBody();
           Map<String,Object> stringObjectMap = new JacksonJsonParser().parseMap(result);
           return (String)stringObjectMap.get("access_token");
}

private Map<String, Object> getUserInfo(String accessToken) {
           /// 步骤四：使用码云API获取授权用户的资料。
    URI userUrl=UriComponentsBuilder.fromHttpUrl(USER_INFO_URI)
            .encode()
            .buildAndExpand(accessToken)
            .toUri();
    RequestEntity<Void> requestEntity = RequestEntity
            .get(userUrl)
            .header("User-agent","Chrome")
            .build();

    String result=rest.exchange(requestEntity,String.class).getBody();
    JacksonJsonParser jacksonJsonParser=new JacksonJsonParser();
    return jacksonJsonParser.parseMap(result);
}

public void configure(H http) {
     /// 步骤五：把自定义的两个Filter加进安全过滤链
     http.addFilterAfter(new GiteeOAuth2RedirectFilter(), SecurityContextPersistenceFilter.class);
     http.addFilterAfter(new GiteeOAuth2LoginAuthenticationFilter(), SecurityContextPersistenceFilter.class);
}

protected void configure(HttpSecurity http) throws Exception {
    // 不指定path,本安全过滤链会匹配所有请求。
    http
            .authorizeRequests()
            .antMatchers("/").permitAll()// 首页放行
            .anyRequest().hasAnyAuthority("USER").and()
            .formLogin()
            .loginPage("/user/login_frontend").permitAll()
            .defaultSuccessUrl("/user").and()
            .logout()
            .logoutUrl("/user/logout").permitAll()
            .logoutSuccessUrl("/user/login_frontend?logout").and()
            // 自定义访问拒绝异常处理逻辑
            .exceptionHandling().accessDeniedHandler(UserSecurityConfig::accessDeniedHandle)
            /// 步骤六：把我们自定义的SecurityConfigurer应用到安全过滤链
            .and()
            .apply(giteeOAuth2LoginConfigurer);
}

@GetMapping("/user")
public String userIndex(Model model) {
    /// 步骤七：改造/user接口，返回码云用户资料给前端；改造user.ftlh模板用于显示用户资料。
    Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
    UserDetails userDetail = (UserDetails) authentication.getPrincipal();
    model.addAttribute("userDetails",userDetail);
    return "user";
}

@Test
    @WithMockUser(username = "user",authorities = {"USER"})
public void test() throws Exception {
    /// 步骤八：模拟一个登录用户，访问受保护的接口/test，断言接口的返回内容body部分是否一致。
    mvc.perform(get("/test").header("User-Agent","Chrome"))
            .andExpect(status().isOk())
            .andExpect(content().string("欢迎您"));
}