Examples with Hcr org.apache.servicecomb.demo.edge.authentication.encrypt.Hcr used on opensource projects

Example 1 with Hcr

use of org.apache.servicecomb.demo.edge.authentication.encrypt.Hcr in project java-chassis by ServiceComb.

the class EncryptEdgeDispatcher method onRequest.

protected void onRequest(RoutingContext context) {
    HttpServerRequest httpServerRequest = context.request();
    // queryUserId always success
    CompletableFuture<String> userIdFuture = queryUserId(httpServerRequest);
    queryHcr(httpServerRequest).thenCombine(userIdFuture, (hcr, userId) -> {
        // hcr and userId all success
        routeToBackend(context, hcr, userId);
        return null;
    }).whenComplete((v, e) -> {
        // failed to query hcr
        if (e != null) {
            context.response().end("failed to query hcr: " + e.getMessage());
            return;
        }
    });
}

Example 2 with Hcr

use of org.apache.servicecomb.demo.edge.authentication.encrypt.Hcr in project java-chassis by ServiceComb.

the class DecodeBodyFilter method afterReceiveRequest.

@Override
public Response afterReceiveRequest(Invocation invocation, HttpServletRequestEx requestEx) {
    EncryptContext encryptContext = (EncryptContext) invocation.getHandlerContext().get(EdgeConst.ENCRYPT_CONTEXT);
    if (encryptContext == null) {
        return null;
    }
    Hcr hcr = encryptContext.getHcr();
    String encodedBody = requestEx.getParameter("body");
    if (encodedBody == null) {
        return null;
    }
    encodedBody = encodedBody.substring(hcr.getBodyKey().length());
    try {
        Map<String, String[]> decodedBody = RestObjectMapperFactory.getRestObjectMapper().readValue(encodedBody, bodyType);
        requestEx.getParameterMap().putAll(decodedBody);
    } catch (Throwable e) {
        // should be a meaning exception response
        return Response.producerFailResp(e);
    }
    return null;
}

Example 3 with Hcr

use of org.apache.servicecomb.demo.edge.authentication.encrypt.Hcr in project incubator-servicecomb-java-chassis by apache.

the class EdgeSignatureResponseFilter method beforeSendResponse.

@Override
public void beforeSendResponse(Invocation invocation, HttpServletResponseEx responseEx) {
    if (invocation == null) {
        return;
    }
    EncryptContext encryptContext = (EncryptContext) invocation.getHandlerContext().get(EdgeConst.ENCRYPT_CONTEXT);
    if (encryptContext == null) {
        return;
    }
    Hcr hcr = encryptContext.getHcr();
    // bad practice: it's better to set signature in response header
    Buffer bodyBuffer = responseEx.getBodyBuffer();
    String body = bodyBuffer.toString();
    if (body.endsWith("}")) {
        Hasher hasher = Hashing.sha256().newHasher();
        hasher.putString(hcr.getSignatureKey(), StandardCharsets.UTF_8);
        hasher.putString(body, StandardCharsets.UTF_8);
        String signature = hasher.hash().toString();
        LOGGER.info("beforeSendResponse signature: {}", signature);
        body = body.substring(0, body.length() - 1) + ",\"signature\":\"" + signature + "\"}";
        responseEx.setBodyBuffer(Buffer.buffer(body));
    }
}

Example 4 with Hcr

use of org.apache.servicecomb.demo.edge.authentication.encrypt.Hcr in project incubator-servicecomb-java-chassis by apache.

the class EdgeSignatureRequestFilter method afterReceiveRequest.

@Override
public Response afterReceiveRequest(Invocation invocation, HttpServletRequestEx requestEx) {
    EncryptContext encryptContext = (EncryptContext) invocation.getHandlerContext().get(EdgeConst.ENCRYPT_CONTEXT);
    if (encryptContext == null) {
        return null;
    }
    Hcr hcr = encryptContext.getHcr();
    // signature for query and form
    List<String> names = Collections.list(requestEx.getParameterNames());
    names.sort(Comparator.naturalOrder());
    Hasher hasher = Hashing.sha256().newHasher();
    hasher.putString(hcr.getSignatureKey(), StandardCharsets.UTF_8);
    for (String name : names) {
        hasher.putString(name, StandardCharsets.UTF_8);
        hasher.putString(requestEx.getParameter(name), StandardCharsets.UTF_8);
    }
    LOGGER.info("afterReceiveRequest signature: {}", hasher.hash().toString());
    return null;
}

Example 5 with Hcr

use of org.apache.servicecomb.demo.edge.authentication.encrypt.Hcr in project java-chassis by ServiceComb.

the class EdgeSignatureResponseFilter method beforeSendResponse.

@Override
public void beforeSendResponse(Invocation invocation, HttpServletResponseEx responseEx) {
    if (invocation == null) {
        return;
    }
    EncryptContext encryptContext = (EncryptContext) invocation.getHandlerContext().get(EdgeConst.ENCRYPT_CONTEXT);
    if (encryptContext == null) {
        return;
    }
    Hcr hcr = encryptContext.getHcr();
    // bad practice: it's better to set signature in response header
    Buffer bodyBuffer = responseEx.getBodyBuffer();
    String body = bodyBuffer.toString();
    if (body.endsWith("}")) {
        Hasher hasher = Hashing.sha256().newHasher();
        hasher.putString(hcr.getSignatureKey(), StandardCharsets.UTF_8);
        hasher.putString(body, StandardCharsets.UTF_8);
        String signature = hasher.hash().toString();
        LOGGER.info("beforeSendResponse signature: {}", signature);
        body = body.substring(0, body.length() - 1) + ",\"signature\":\"" + signature + "\"}";
        responseEx.setBodyBuffer(Buffer.buffer(body));
    }
}