国网移动端接口网关调用方案

场景说明

在国网项目中，由于在线学习应用的移动接口不能外网直接访问，外网访问必须通过国网网关。在网关中，允许访问的应用请求必须配置白名单，且必须每个接口都需要配置，且接口无状态。

产品移动接口调用方案

将所有移动接口配置为免过滤，配置规则为：/mobile/**
定义统一servlet处理接口转发，请求固定参数如下：
- url ， encode后的实际接口请求地址，encode前示例：http://localhost:8080/gtiles/portal/test/a.json
- serialParams，encode后的实际参数序列，enocde前示例：ids=1&ids=2&name=宋慧青&age=12
- loginID（项目组自行定义接口），用户唯一标识

servlet实现示例(TODO部分需要项目实现)

package org.gtiles.solutions.partybuilding;

import java.io.IOException;
import java.net.URLDecoder;
import java.util.ArrayList;
import java.util.List;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import org.apache.http.HttpEntity;
import org.apache.http.HttpResponse;
import org.apache.http.NameValuePair;
import org.apache.http.client.ClientProtocolException;
import org.apache.http.client.HttpClient;
import org.apache.http.client.entity.UrlEncodedFormEntity;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.impl.client.HttpClientBuilder;
import org.apache.http.message.BasicNameValuePair;
import org.apache.http.util.EntityUtils;
public class MobileDispatcherServlet extends HttpServlet {

    private static final long serialVersionUID = 80042407974663204L;

    protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        doProcess(req, resp);
    }
    @Override
    protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        doProcess(req, resp);
    }
    private void doProcess(HttpServletRequest request, HttpServletResponse response) throws ClientProtocolException, IOException {
        String encode = "UTF-8";
        //urlEncode 后的url
        String url = request.getParameter("url");
        //需要urlEncode ids=1&ids=2&name=宋慧青&age=12
        String serialParams = request.getParameter("serialParams");
        String loginID = request.getParameter("loginID");
        url = URLDecoder.decode(url, encode);
        //TODO 根据传入用户唯一标识获取用户，如果用户不存在，则返回用户不存在状态提示信息，存在则创建用户session
        //TODO 模拟设置用户SESSION
        request.getSession().setAttribute("_user_session_", loginID);
//      String url = "http://localhost:8080/gtiles/portal/test/a.json";
        HttpClient httpClient = HttpClientBuilder.create().build();
        HttpPost httpPost = new HttpPost(url);
        List<NameValuePair> list = new ArrayList<NameValuePair>();
        //设置请求参数
        if(serialParams!=null && !"".equals(serialParams)) {
            serialParams = URLDecoder.decode(serialParams, encode);
            for(String s : serialParams.split("&")) {
                String[] params = s.split("=");
                list.add(new BasicNameValuePair(params[0], params[1]));
            }
        }
        httpPost.setEntity(new UrlEncodedFormEntity(list,encode));
        //设置消息头的sessionID 保持session同步
        httpPost.setHeader("Cookie", "JSESSIONID="+request.getSession().getId());
        HttpResponse httpRes = httpClient.execute(httpPost);//执行请求
        String jsonResult = "{}";//设置统一无数据或异常数据返回格式
        if(httpRes!=null) {
            HttpEntity entity = httpRes.getEntity();
            if(entity != null){  
                jsonResult = EntityUtils.toString(entity,encode);//获取请求结果
            }  
        }
        response.setContentType("application/json;charset="+encode);//设置输出内容类型
        response.getWriter().write(jsonResult);
    }

}

web.xml配置，对应的请求需要免过滤

  <servlet>
    <servlet-name>mobileDispatcherServlet</servlet-name>
    <servlet-class>org.gtiles.solutions.partybuilding.MobileDispatcherServlet</servlet-class>
  </servlet>
  <servlet-mapping>
    <servlet-name>mobileDispatcherServlet</servlet-name>
    <url-pattern>/mobileDispatcherServlet</url-pattern>
  </servlet-mapping>

klxedu / blog

国网移动端接口网关调用方案 #44

场景说明

产品移动接口调用方案

servlet实现示例(TODO部分需要项目实现)

web.xml配置，对应的请求需要免过滤