Ver Fonte

feature: 推送审计使用https

mazq há 1 ano atrás
pai
commit
e0c7f6ac8b

+ 23 - 0
dcuc-auth-service/src/main/java/com/dragoninfo/dcuc/auth/audit/common/SkipSslRestTemplateProvider.java

@@ -0,0 +1,23 @@
+package com.dragoninfo.dcuc.auth.audit.common;
+
+import com.dragoninfo.dcuc.common.http.SkipSslVerificationHttpRequestFactory;
+import com.dragonsoft.auditlog.collection.qmtj.provider.IRestTemplateProvider;
+import org.springframework.web.client.RestTemplate;
+
+/**
+ * <p>
+ * 忽略https请求客户端
+ * </p>
+ *
+ * @author huangzqa
+ * @date 2021/6/30
+ */
+public class SkipSslRestTemplateProvider implements IRestTemplateProvider {
+    @Override
+    public RestTemplate getRestTemplate() {
+        SkipSslVerificationHttpRequestFactory skipSslVerificationHttpRequestFactory
+                = new SkipSslVerificationHttpRequestFactory();
+
+        return new RestTemplate(skipSslVerificationHttpRequestFactory);
+    }
+}

+ 23 - 0
dcuc-auth-service/src/main/java/com/dragoninfo/dcuc/auth/audit/config/AuditRestTemplateConfig.java

@@ -0,0 +1,23 @@
+package com.dragoninfo.dcuc.auth.audit.config;
+
+import com.dragoninfo.dcuc.auth.audit.common.SkipSslRestTemplateProvider;
+import com.dragonsoft.auditlog.collection.qmtj.provider.IRestTemplateProvider;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+
+/**
+ * <p>
+ * 用户配置
+ * </p>
+ *
+ * @author huangzqa
+ * @date 2021/8/9
+ */
+@Configuration
+public class AuditRestTemplateConfig {
+
+    @Bean
+    public IRestTemplateProvider restTemplateProvider() {
+        return new SkipSslRestTemplateProvider();
+    }
+}

+ 1 - 1
dcuc-auth-service/src/main/java/com/dragoninfo/dcuc/auth/business/impl/zerotrust/AuthTokenBusinessImpl.java

@@ -178,7 +178,7 @@ public class AuthTokenBusinessImpl implements IAuthTokenBusiness {
         String generalNoticeSign = generalNoticeSign(receiveVo);
         String requestSign = receiveVo.getSign();
         if (!generalNoticeSign.equalsIgnoreCase(requestSign)) {
-            log.info("request Sign:{}, generalSign:{}", requestSign, generalNoticeSign);
+            log.info("令牌接收签名校验不通过, 请求中的签名:{}, 原文生成的签名:{}", requestSign, generalNoticeSign);
             return ZeroTrustMessageRespVO.messageEnumMessage(ZeroTrustBusinessRespEnum.OPERATE_FAIL);
         }