org.frameworkset.security.session.SessionUtil Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of bboss-security Show documentation
Show all versions of bboss-security Show documentation
support session share between application cluster nodes and cross domain application nodes.support good application session monitor and session data statitic module.demo site http://session.bbossgroups.com/
package org.frameworkset.security.session;
import com.frameworkset.util.SimpleStringUtil;
import com.frameworkset.util.StringUtil;
import org.frameworkset.security.session.domain.App;
import org.frameworkset.security.session.domain.CrossDomain;
import org.frameworkset.security.session.impl.*;
import org.frameworkset.security.session.statics.AttributeInfo;
import org.frameworkset.security.session.statics.NullSessionStaticManagerImpl;
import org.frameworkset.security.session.statics.SessionConfig;
import org.frameworkset.security.session.statics.SessionStaticManager;
import org.frameworkset.spi.BaseApplicationContext;
import org.frameworkset.spi.DefaultApplicationContext;
import org.frameworkset.spi.SPIException;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import javax.servlet.ServletContext;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import java.util.ArrayList;
import java.util.HashMap;
import java.util.List;
import java.util.Map;
public class SessionUtil {
private static Logger log = LoggerFactory.getLogger(SessionUtil.class);
private static SessionManager sessionManager;
private static SessionStaticManager sessionStaticManager;
private static boolean inited = false;
private static final String dianhaochar = "____";
private static final String moneychar = "_____";
private static final int msize = moneychar.length();
public SessionUtil() {
// TODO Auto-generated constructor stub
}
public static void init(String contextpath){
if(inited)
return ;
synchronized(SessionUtil.class)
{
if(inited)
return ;
try
{
BaseApplicationContext context = DefaultApplicationContext.getApplicationContext("sessionconf.xml");
SessionManager sessionManager = context.getTBeanObject("sessionManager", SessionManager.class);
SessionStaticManager sessionStaticManager = null;
String monitorScope = null;
if(sessionManager != null)
{
if(!sessionManager.usewebsession())
{
sessionStaticManager = context.getTBeanObject("sessionStaticManager", SessionStaticManager.class);
monitorScope = sessionStaticManager.getMonitorScope();
}
else
sessionStaticManager = new NullSessionStaticManagerImpl();
if(monitorScope == null)
monitorScope = SessionStaticManager.MONITOR_SCOPE_SELF;
sessionManager.initSessionConfig(contextpath,monitorScope);
SessionUtil.sessionManager = sessionManager;
SessionUtil.sessionStaticManager = sessionStaticManager;
}
}
catch(SPIException e)
{
log.info("初始化bboss session结果:"+e.getMessage(),e);
}
catch(Exception e)
{
log.info("初始化bboss session结果:"+e.getMessage(),e);
}
catch(Throwable e)
{
log.info("初始化bboss session结果:"+e.getMessage(),e);
}
finally
{
inited = true;
}
}
}
public static Object convertValue(String value,AttributeInfo attributeInfo)
{
if(attributeInfo.getType().equals("String"))
return value;
else if(attributeInfo.getType().equals("int"))
return Integer.parseInt(value);
else if(attributeInfo.getType().equals("long"))
return Long.parseLong(value);
else if(attributeInfo.getType().equals("double"))
return Double.parseDouble(value);
else if(attributeInfo.getType().equals("float"))
return Float.parseFloat(value);
else if(attributeInfo.getType().equals("boolean"))
return Boolean.parseBoolean(value);
return value;
}
public static Map parserExtendAttributes(HttpServletRequest request,SessionConfig sessionConfig )
{
AttributeInfo[] monitorAttributeArray = sessionConfig.getExtendAttributeInfos();
if(monitorAttributeArray == null || monitorAttributeArray.length == 0)
{
return null;
}
Map datas = new HashMap();
for(AttributeInfo attributeInfo : monitorAttributeArray)
{
String value = request.getParameter(attributeInfo.getName());
if(value != null )
{
if(value.trim().equals("") )
{
if(attributeInfo.isEnableEmptyValue())
{
String enableEmptyValue = request.getParameter(attributeInfo.getName()+"_enableEmptyValue");
if(enableEmptyValue != null)
{
try {
attributeInfo = attributeInfo.clone();
attributeInfo.setValue("");
datas.put(attributeInfo.getName(), attributeInfo);
} catch (CloneNotSupportedException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}
}
}
}
else
{
try {
attributeInfo = attributeInfo.clone();
attributeInfo.setValue( convertValue( value, attributeInfo));
datas.put(attributeInfo.getName(), attributeInfo);
} catch (CloneNotSupportedException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}
}
}
}
return datas;
}
public static void evalqueryfields(AttributeInfo[] monitorAttributeArray, List keys)
{
if(monitorAttributeArray != null && monitorAttributeArray.length > 0)
{
for(AttributeInfo attr:monitorAttributeArray)
{
keys.add(attr.getName());
}
}
}
public static boolean filter(String key) {
return key.equals("maxInactiveInterval") || key.equals("creationTime")
|| key.equals("lastAccessedTime") || key.equals("referip")
|| key.equals("_validate") || key.equals("sessionid")
|| key.equals("_id") || key.equals("appKey")
|| key.equals("host")
|| key.equals("secure")
|| key.equals("httpOnly")
|| key.equals("requesturi")
|| key.equals("lastAccessedUrl")
|| key.equals("lastAccessedHostIP");
}
public static String recoverSpecialChar(String attribute) {
if (attribute.startsWith(moneychar)) {
attribute = "$" + attribute.substring(msize);
}
attribute = attribute.replace(dianhaochar, ".");
return attribute;
}
public static String converterSpecialChar(String attribute)
{
attribute = attribute.replace(".", dianhaochar);
if(attribute.startsWith("$"))
{
if(attribute.length() == 1)
{
attribute = moneychar;
}
else
{
attribute = moneychar + attribute.substring(1);
}
}
return attribute;
}
public static boolean haveSessionListener()
{
return sessionManager.haveSessionListener();
}
public static Session getSession(String appkey,String contextPath, String sessionid) {
// TODO Auto-generated method stub
return sessionManager.getSessionStore().getSession(appkey,contextPath, sessionid);
}
private static Object dummy = new Object();
public static void writeSessionIDCookies(HttpServletRequest request,HttpServletResponse response,String cookieName,SessionID sessionid ){
writeCookies_( request, response, cookieName, sessionid.getSignSessionId() );
}
public static void writeCookies_(HttpServletRequest request,HttpServletResponse response,String cookieName,String sessionid )
{
int cookielivetime = -1;
CrossDomain crossDomain = SessionUtil.getSessionManager().getCrossDomain() ;
if(crossDomain == null)
{
boolean secure = SessionUtil.getSessionManager().isSecure();
if(!request.isSecure())
secure = false;
StringUtil.addCookieValue(request, response, cookieName, sessionid, cookielivetime,SessionUtil.getSessionManager().isHttpOnly(),
secure,SessionUtil.getSessionManager().getDomain());
}
else
{
String currentDomain = request.getServerName();
if(crossDomain.getRootDomain() == null || crossDomain.getRootDomain().equals("")){
boolean secure = SessionUtil.getSessionManager().isSecure();
if(!request.isSecure())
secure = false;
StringUtil.addCookieValue(request, response, cookieName, sessionid, cookielivetime,SessionUtil.getSessionManager().isHttpOnly(),
secure,SessionUtil.getSessionManager().getDomain());
return;
}
if(!currentDomain.equals(crossDomain.getRootDomain()) && !currentDomain.endsWith("."+crossDomain.getRootDomain()))//非跨域访问，则直接写应用的session cookieid,解决通过非共享域方式无法访问系统的问题
{
boolean secure = SessionUtil.getSessionManager().isSecure();
if(!request.isSecure())
secure = false;
StringUtil.addCookieValue(request, response, cookieName, sessionid, cookielivetime,SessionUtil.getSessionManager().isHttpOnly(),
secure,SessionUtil.getSessionManager().getDomain());
return;
}
List apps = crossDomain.getDomainApps();
if(crossDomain.get_paths() != null)
{
boolean secure = SessionUtil.getSessionManager().isSecure();
if(!request.isSecure())
secure = false;
for(String path:crossDomain.get_paths())
{
StringUtil.addCookieValue(request, path,
response,
cookieName,
sessionid, cookielivetime,
SessionUtil.getSessionManager().isHttpOnly(),
secure,
crossDomain.getRootDomain());
}
}
else
{
boolean secure = SessionUtil.getSessionManager().isSecure();
if(!request.isSecure())
secure = false;
Map setted = new HashMap();
for(App app:apps)
{
if(app.getPath() == null)
{
StringUtil.addCookieValue(request, response, cookieName, sessionid, cookielivetime,SessionUtil.getSessionManager().isHttpOnly(),
secure,crossDomain.getRootDomain());
}
else
{
if(!setted.containsKey(app.getPath()))
{
StringUtil.addCookieValue(request, app.getPath(),response, cookieName, sessionid, cookielivetime,SessionUtil.getSessionManager().isHttpOnly(),
secure,crossDomain.getRootDomain());
setted.put(app.getPath(), dummy);
}
else
{
}
}
}
setted = null;
}
}
}
public static String serial(Object value)
{
// if(value != null)
// {
// try {
// value = ObjectSerializable.toXML(value);
//// value = new String(((String)value).getBytes(Charset.defaultCharset()),"UTF-8");
// } catch (Exception e) {
// throw new RuntimeException(e);
// }
// }
// return value;
return sessionManager.getSessionSerial().serialize(value);
}
public static Object serial(Object value,String serialType)
{
// if(value != null)
// {
// try {
// value = ObjectSerializable.toXML(value);
//// value = new String(((String)value).getBytes(Charset.defaultCharset()),"UTF-8");
// } catch (Exception e) {
// throw new RuntimeException(e);
// }
// }
// return value;
return sessionManager.getSessionSerial(serialType).serialize(value);
}
public static String getLikeCondition(Object condition,String serialType)
{
return sessionManager.getSessionSerial(serialType).handleLikeCondition(condition);
}
public static Object unserial(String value)
{
return sessionManager.getSessionSerial().deserialize(value);
}
public static Object unserial(String value,String serialType)
{
return sessionManager.getSessionSerial( serialType).deserialize(value);
}
public static String wraperAttributeName(String appkey,String contextpath, String attribute)
{
CrossDomain crossDomain = sessionManager.getCrossDomain();
if(crossDomain == null)
return attribute;
return crossDomain.wraperAttributeName(appkey, contextpath, attribute);
}
public static String dewraperAttributeName(String appkey,String contextpath, String attribute)
{
CrossDomain crossDomain = sessionManager.getCrossDomain();
if(crossDomain == null)
return attribute;
return crossDomain.dewraperAttributeName(appkey, contextpath, attribute);
}
public static String getAppKey(HttpServletRequest request)
{
String appcode = getSessionManager().getAppcode();
if(appcode != null)
{
return appcode;
}
return getAppKeyFromRequest(request);
}
public static SessionConfig getSessionConfig(String appcode)
{
return sessionManager.getSessionConfig(appcode,true);
}
public static SessionConfig getSessionConfig(String appcode,boolean serialattributes)
{
return sessionManager.getSessionConfig(appcode, serialattributes);
}
public static void removeSession(String sessionId,HttpServletRequest request)
{
if(request instanceof SessionHttpServletRequestWrapper)
{
((SessionHttpServletRequestWrapper)request).removeSession(sessionId);
}
}
public static void removeSession(String sessionId,String appcode)
{
if( getSessionManager().usewebsession())
return;
HttpSession session = _getSession(appcode, sessionId);
if(session != null)
session.invalidate();
}
private static HttpSession _getSession(String appkey,String sessionid) {
if(getSessionManager() == null || getSessionManager().usewebsession())
{
return null;
}
HttpSessionImpl session = null;
if(sessionid == null)
{
return session;
}
else
{
// String appkey = SessionHelper.getAppKey(this);
Session session_ = getSession(appkey,null,sessionid);
if(session_ == null)//session不存在，创建新的session
{
return null;
}
else
{
session = new HttpSessionImpl(session_,null,null,null);
}
return session;
}
}
public static String getAppKeyFromRequest(HttpServletRequest request)
{
// String appcode = getSessionManager().getAppcode();
// if(appcode != null)
// {
// return appcode;
// }
if(request != null)
{
String appKey = request.getContextPath().replace("/", "");
if(appKey.equals(""))
appKey = "ROOT";
return appKey;
}
return null;
}
public static String getAppKeyFromServletContext(ServletContext context)
{
// String appcode = getSessionManager().getAppcode();
// if(appcode != null)
// {
// return appcode;
// }
if(context != null)
{
String appKey = context.getContextPath().replace("/", "");
if(appKey.equals(""))
appKey = "ROOT";
return appKey;
}
return null;
}
public static boolean hasMonitorPermission(String app, HttpServletRequest request)
{
return getSessionStaticManager().hasMonitorPermission(app, request);
}
public static boolean hasDeleteAppPermission(String app, HttpServletRequest request)
{
return getSessionStaticManager().hasMonitorPermission(app, request);
}
public static boolean deleteApp(String app) throws Exception
{
return getSessionStaticManager().deleteApp(app);
}
public static boolean isMonitorAll() throws Exception
{
return getSessionStaticManager().isMonitorAll();
}
/**
*
* @param monitorAttributes
* @return
*/
public static AttributeInfo[] getExtendAttributeInfos(String monitorAttributes)
{
if(StringUtil.isEmpty(monitorAttributes))
return null;
AttributeInfo[] monitorAttributeArray = SimpleStringUtil.json2Object(monitorAttributes,AttributeInfo[].class);
// AttributeInfo[] monitorAttributeArray = null;
// if(!StringUtil.isEmpty(monitorAttributes))
// {
// String[] monitorAttributeArray_ = monitorAttributes.split(",");
// monitorAttributeArray = new AttributeInfo[monitorAttributeArray_.length];
// AttributeInfo attributeInfo = null;
// for(int i = 0; i < monitorAttributeArray_.length; i ++)
// {
// String attr = monitorAttributeArray_[i];
// attributeInfo = new AttributeInfo();
// String attrinfo[] = attr.split(":");
// if(attrinfo.length > 2)
// {
// attributeInfo.setName(attrinfo[0]);
// attributeInfo.setType(attrinfo[1]);
// attributeInfo.setCname(attrinfo[2]);
// }
// else if(attrinfo.length > 1)
// {
// attributeInfo.setName(attrinfo[0]);
// attributeInfo.setType(attrinfo[1]);
// }
// else
// {
// attributeInfo.setName(attrinfo[0]);
// attributeInfo.setType("String");
// }
// monitorAttributeArray[i]=attributeInfo;
//
//
// }
//
// }
return monitorAttributeArray;
}
public static List evalqueryfiledsValue(AttributeInfo[] attributeInfos, List data, int offset,String serialType) {
List extendAttrs = null;
if(attributeInfos != null && attributeInfos.length > 0)
{
extendAttrs = new ArrayList();
AttributeInfo attrvalue = null;
for(int j = 0; j < attributeInfos.length; j ++ )
{
AttributeInfo attributeInfo = attributeInfos[j];
try {
attrvalue = attributeInfo.clone();
String value = data.get(j +offset);
// attrvalue.setValue(unserial( value,serialType));
attrvalue.setValue(value);
extendAttrs.add(attrvalue);
} catch (CloneNotSupportedException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}
}
}
return extendAttrs;
}
public static void destroy() {
sessionManager = null;
}
public static SessionManager getSessionManager() {
return sessionManager;
}
public static SessionStaticManager getSessionStaticManager()
{
return sessionStaticManager;
}
public static HttpSession createSession(SessionBasicInfo sessionBasicInfo,SessionBuilder invalidateCallback)
{
HttpSession session = sessionManager.getSessionStore().createHttpSession( sessionBasicInfo, invalidateCallback);
return session;
}
public static void dispatchEvent(SessionEventImpl sessionEvent)
{
sessionManager.dispatchEvent(sessionEvent);
}
/**
* 对sessionid进行签名
* paramenterSessionID 标识sessionID是否从参数传递过来，如果从参数传递过来则必须调用本方法，并且通过指定paramenterSessionID=true对sessionid进行加密签名，否则sessionid不起作用
* 如果显示指定sessionID必须加密签名或者paramenterSessionID为true，则会对sessionid进行加密签名
* @return
*/
public static String signParameterSessionID(String sessionid) throws SignSessionIDException{
return getSessionManager().getSignSessionIDGenerator().sign(sessionid, true);
}
/**
* 对sessionid进行签名
* paramenterSessionID 标识sessionID是否从参数传递过来，如果从参数传递过来则必须调用本方法，并且通过指定paramenterSessionID=true对sessionid进行加密签名，否则sessionid不起作用
* 如果显示指定sessionID必须加密签名或者paramenterSessionID为true，则会对sessionid进行加密签名
* @return
*/
public static String sign(String sessionid,boolean paramenterSessionID) throws SignSessionIDException{
return getSessionManager().getSignSessionIDGenerator().sign(sessionid, paramenterSessionID);
}
/**
* 生成签名的sessionID,session对象不存在时创建新的session
* @param request
* @return
*/
public static String signParameterSessionID(HttpServletRequest request){
return getSessionManager().signParameterSessionID(request);
}
/**
* 生成签名的sessionID,session对象不存在时创建新的session
* @param request
* @return
*/
public static String signParameterSessionID(HttpServletRequest request,boolean createSessionIfNotExist){
return getSessionManager().signParameterSessionID(request, createSessionIfNotExist);
}
}
© 2015 - 2025 Weber Informatics LLC | Privacy Policy