想那么多干嘛，用這個工具類改完配置引數，直接調getUserInfo（）方法就可以完工了，懶人都是這么玩的，不廢話，直接上代碼：
這個是工具類：
package com.zjtx.util;
import com.alibaba.fastjson.JSONArray;
import com.alibaba.fastjson.JSONObject;
import com.auth0.jwk.Jwk;
import com.zjtx.dto.AppleReturnTokenDTO;
import com.zjtx.util.exception.ServiceException;
import io.jsonwebtoken.*;
import org.apache.commons.codec.binary.Base64;
import org.apache.commons.lang3.StringUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.http.HttpEntity;
import org.springframework.http.HttpHeaders;
import org.springframework.http.MediaType;
import org.springframework.http.ResponseEntity;
import org.springframework.util.LinkedMultiValueMap;
import org.springframework.util.MultiValueMap;
import org.springframework.web.client.RestTemplate;
import java.math.BigInteger;
import java.security.KeyFactory;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.RSAPublicKeySpec;
import java.util.HashMap;
import java.util.Map;
/**
* 蘋果登錄工具類
* @author WangDeyu (汪德宇)
* @date 2020-09-08 16:10:22
* */
public class AppleThirdUtils {
@Autowired
static RestTemplate restTemplate;
private static final Logger logger = LoggerFactory.getLogger(AppleThirdUtils.class);
/**
* client_id (應用id,從蘋果注冊應用獲取)
* */
private static final String APPLICATION_ID = "";
/**
* 密鑰key(從txt檔案中獲取)
* */
private static final String SECRET_KEY = "";
/**
* p8檔案中獲取的kid
* */
private static final String FILE_KID = "";
/**
* p8檔案中獲取的team_id
* */
private static final String TEAM_ID = "";
/**
* 固定值（用于驗證token介面）
* */
private static final String GRANT_TYPE = "authorization_code";
/**
* 獲取公鑰地址
* */
private static final String PUBLIC_KEY_URL = "https://appleid.apple.com/auth/keys";
/**
* 獲取驗證token地址
* */
private static final String GET_ID_TOKEN = "https://appleid.apple.com/auth/token";
/**
* 蘋果官網地址
* */
private static final String APPLE_URL = "https://appleid.apple.com";
/**
* 蘋果驗證成功后回傳的用戶資訊中的登錄時間
* */
private static final String AUTH_TIME = "auth_time";
/**
* 獲取驗證的code
* */
private static String getValidateCode(String code){
restTemplate = new RestTemplate();
//請求蘋果驗證介面
ResponseEntity<String> response = restTemplate.postForEntity(GET_ID_TOKEN, AppleThirdUtils.getRequestParams(code), String.class);
return response.getBody();
}
/**
* 構建驗證登錄引數
* @author WangDeyu
* */
private static HttpEntity<MultiValueMap<String, String>> getRequestParams(String code){
//構建請求引數
HttpHeaders headers = new HttpHeaders();
MultiValueMap<String, String> map= new LinkedMultiValueMap<>();
headers.setContentType(MediaType.APPLICATION_FORM_URLENCODED);
map.add("client_id", APPLICATION_ID);
map.add("client_secret", getSecretKey());
map.add("code", code);
map.add("grant_type", GRANT_TYPE);
return new HttpEntity<>(map, headers);
}
/**
* 讀取檔案中的密鑰key,解密
* */
private static byte[] readKey() {
return Base64.decodeBase64(SECRET_KEY);
}
/**
* 獲取秘鑰
* */
private static String getSecretKey(){
try {
Map<String, Object> header = new HashMap<>(16);
// 參考后臺配置kid
header.put("kid", FILE_KID);
Map<String, Object> claims = new HashMap<>(16);
// 參考后臺配置 team id
claims.put("iss", TEAM_ID);
long now = System.currentTimeMillis() / 1000;
claims.put("iat", now);
// 最長半年，單位秒
claims.put("exp", now + 86400 * 30);
// 蘋果官網網址
claims.put("aud", APPLE_URL);
// client_id (應用id)
claims.put("sub", APPLICATION_ID);
PKCS8EncodedKeySpec pkcs8EncodedKeySpec = new PKCS8EncodedKeySpec(readKey());
KeyFactory keyFactory = KeyFactory.getInstance("EC");
PrivateKey privateKey = keyFactory.generatePrivate(pkcs8EncodedKeySpec);
return Jwts.builder().setHeader(header).setClaims(claims).signWith(SignatureAlgorithm.ES256, privateKey).compact();
}catch (Exception e){
logger.error("獲取apple密鑰失敗:",e);
throw new ServiceException("獲取apple密鑰失敗:",e);
}
}
/**
* 解密個人資訊
*
* @param identityToken APP獲取的identityToken
* @return 解密引數：失敗回傳null
*/
private static String verify(String identityToken) {
try {
if (identityToken.split("\\.").length <= 1) {
return null;
}
String firstDate = new String(Base64.decodeBase64(identityToken.split("\\.")[0]), "UTF-8");
String claim = new String(Base64.decodeBase64(identityToken.split("\\.")[1]));
String kid = JSONObject.parseObject(firstDate).get("kid").toString();
String aud = JSONObject.parseObject(claim).get("aud").toString();
String sub = JSONObject.parseObject(claim).get("sub").toString();
String response = verify(getPublicKey(kid), identityToken, aud, sub);
return "SUCCESS".equals(response) ? claim : null;
} catch (Exception e) {
logger.error("解密TOKEN失敗", e);
throw new ServiceException("解密TOKEN失敗", e);
}
}
/**
* 驗證token
* */
private static String verify(PublicKey key, String jwt, String audience, String subject) throws Exception {
String result = "FAIL";
JwtParser jwtParser = Jwts.parser().setSigningKey(key);
jwtParser.requireIssuer(APPLE_URL);
jwtParser.requireAudience(audience);
jwtParser.requireSubject(subject);
try {
Jws<Claims> claim = jwtParser.parseClaimsJws(jwt);
if (claim != null && claim.getBody().containsKey(AUTH_TIME)) {
result = "SUCCESS";
return result;
}
} catch (ExpiredJwtException e) {
logger.error("蘋果token過期", e);
throw new Exception("蘋果token過期", e);
} catch (SignatureException e) {
logger.error("蘋果token非法", e);
throw new Exception("蘋果token非法", e);
}
return result;
}
/**
* 獲取蘋果公鑰
*
* @param kid (公鑰的id)
* @return PublicKey
*/
private static PublicKey getPublicKey(String kid) {
try {
restTemplate = new RestTemplate();
//請求蘋果驗證介面
String response = restTemplate.getForObject(PUBLIC_KEY_URL, String.class);
if (StringUtils.isBlank(response)){
return null;
}
JSONObject data = JSONObject.parseObject(response);
JSONArray jsonArray = data.getJSONArray("keys");
if (jsonArray.isEmpty()) {
return null;
}
//通過kid,n和e的值獲取蘋果公鑰字串
for (Object object : jsonArray) {
JSONObject json = ((JSONObject) object);
//公鑰有多個，只取第一個會報SignatureException例外，得根據token的kid取
if (json.getString("kid").equals(kid)) {
String n = json.getString("n");
String e = json.getString("e");
BigInteger modulus = new BigInteger(1, Base64.decodeBase64(n));
BigInteger publicExponent = new BigInteger(1, Base64.decodeBase64(e));
RSAPublicKeySpec spec = new RSAPublicKeySpec(modulus, publicExponent);
KeyFactory kf = KeyFactory.getInstance("RSA");
return kf.generatePublic(spec);
}
}
} catch (Exception e) {
logger.error("getPublicKey例外！ {}", e.getMessage());
e.printStackTrace();
}
return null;
}
/**
* 獲取用戶資訊 (直接調這個介面，配好引數一步搞定)
* */
public static String getUserInfo(String code){
//獲取用戶資訊
JSONObject jsonObject = JSONObject.parseObject(getValidateCode(code));
AppleReturnTokenDTO appleReturnTokenDTO = JSONObject.toJavaObject(jsonObject, AppleReturnTokenDTO.class);
String idToken = appleReturnTokenDTO.getId_token();
return AppleThirdUtils.verify(idToken);
}
}
這個是物體類：
package com.zjtx.dto;
/**
* 蘋果登錄回傳的引數
* @author WangDeyu
* */
public class AppleReturnTokenDTO {
private String access_token;
private String token_type;
private Integer expires_in;
private String refresh_token;
private String id_token;
public String getAccess_token() {
return access_token;
}
public void setAccess_token(String access_token) {
this.access_token = access_token;
}
public String getToken_type() {
return token_type;
}
public void setToken_type(String token_type) {
this.token_type = token_type;
}
public Integer getExpires_in() {
return expires_in;
}
public void setExpires_in(Integer expires_in) {
this.expires_in = expires_in;
}
public String getRefresh_token() {
return refresh_token;
}
public void setRefresh_token(String refresh_token) {
this.refresh_token = refresh_token;
}
public String getId_token() {
return id_token;
}
public void setId_token(String id_token) {
this.id_token = id_token;
}
}
maven依賴：
<dependency>
<groupId>io.jsonwebtoken</groupId>
<artifactId>jjwt</artifactId>
<version>0.9.1</version>
</dependency>
<dependency>
<groupId>com.auth0</groupId>
<artifactId>jwks-rsa</artifactId>
<version>0.9.0</version>
</dependency>
<dependency>
<groupId>org.apache.httpcomponents</groupId>
<artifactId>httpclient</artifactId>
<version>4.5.6</version>
</dependency>
轉載請註明出處，本文鏈接：https://www.uj5u.com/qianduan/38207.html
標籤：應用服務器