使用Feign配置请求头以及支持Https协议
作者:Hubert-hui
这篇文章主要介绍了使用Feign配置请求头以及支持Https协议,具有很好的参考价值,希望对大家有所帮助。如有错误或未考虑完全的地方,望不吝赐教
Feign配置请求头及支持Https协议
背景
最近跟第三方对接,请求头需要特殊处理,同时是 Https 协议。
第三方提供的是使用 OkHttp 调用。同时呢,使用 OkHttp 封装了调用和返回值。
今天对项目代码进行审查的时候,想着还是把这个替换调吧,实现起来更加的优雅。
Feign配置请求头
FeignParamsInterceptor 这个类实现了 RequestInterceptor ,可以实现对请求进行拦截处理。
import com.alibaba.fastjson.JSON; import com.alibaba.fastjson.JSONObject; import feign.RequestInterceptor; import feign.RequestTemplate; import org.slf4j.Logger; import org.slf4j.LoggerFactory; import org.springframework.beans.factory.annotation.Value; import org.springframework.stereotype.Component; import java.io.UnsupportedEncodingException; /** * @Description feign参数拦截 */ @Component public class FeignParamsInterceptor implements RequestInterceptor { private static final Logger logger = LoggerFactory.getLogger(FeignParamsInterceptor.class); private static final String loanUrl = "x/"; private static final String accountUrl = "y/"; @Value("${xxxx}") private String clientSecret; @Value("${yyyy}") private String clientId; @Override public void apply(RequestTemplate requestTemplate) { String url = requestTemplate.url(); if (url.contains(loanUrl) || url.contains(accountUrl)) { //获取请求体 byte[] body = requestTemplate.body(); JSONObject params; try { params = JSON.parseObject(new String(body, requestTemplate.charset() == null ? "utf-8": requestTemplate.charset().name())); //设置请求体 requestTemplate.body(params.toJSONString()); requestTemplate.header("xx", CryptoEncrypt.signBytes(params.toJSONString().getBytes(), clientSecret.getBytes())); requestTemplate.header("yyyy", clientId); requestTemplate.header("Content-Type", "application/json;charset=utf-8"); } catch (UnsupportedEncodingException e) { logger.info(e.getMessage(), e); } } } }
Feign支持Https协议
如下 FeignHttpsConfig 类内容:这个方案呢,目前是可以实现效果的。具体的内容是否可以简化,优化。这个还没有具体的研究。
本文的解决方案是有问题的。请点击这里
import feign.Client; import feign.Feign; import feign.Logger; import org.apache.http.conn.ssl.NoopHostnameVerifier; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; import javax.net.ssl.*; import java.io.IOException; import java.io.InputStream; import java.net.InetAddress; import java.net.Socket; import java.security.KeyStore; import java.security.Principal; import java.security.PrivateKey; import java.security.SecureRandom; import java.security.cert.Certificate; import java.security.cert.X509Certificate; import java.util.Arrays; import java.util.LinkedHashMap; import java.util.Map; @Configuration public class FeignHttpsConfig { @Bean public Feign.Builder feignBuilder() { final Client trustSSLSockets = client(); return Feign.builder().client(trustSSLSockets); } @Bean public Client client(){ return new Client.Default( TrustingSSLSocketFactory.get(), new NoopHostnameVerifier()); } } class TrustingSSLSocketFactory extends SSLSocketFactory implements X509TrustManager, X509KeyManager { private static final Map<String, SSLSocketFactory> sslSocketFactories = new LinkedHashMap<String, SSLSocketFactory>(); private static final char[] KEYSTORE_PASSWORD = "password".toCharArray(); private final static String[] ENABLED_CIPHER_SUITES = {"TLS_RSA_WITH_AES_256_CBC_SHA"}; private final SSLSocketFactory delegate; private final String serverAlias; private final PrivateKey privateKey; private final X509Certificate[] certificateChain; private TrustingSSLSocketFactory(String serverAlias) { try { SSLContext sc = SSLContext.getInstance("SSL"); sc.init(new KeyManager[] {this}, new TrustManager[] {this}, new SecureRandom()); this.delegate = sc.getSocketFactory(); } catch (Exception e) { throw new RuntimeException(e); } this.serverAlias = serverAlias; if (serverAlias.isEmpty()) { this.privateKey = null; this.certificateChain = null; } else { try { KeyStore keyStore = loadKeyStore(TrustingSSLSocketFactory.class.getResourceAsStream("/keystore.jks")); this.privateKey = (PrivateKey) keyStore.getKey(serverAlias, KEYSTORE_PASSWORD); Certificate[] rawChain = keyStore.getCertificateChain(serverAlias); this.certificateChain = Arrays.copyOf(rawChain, rawChain.length, X509Certificate[].class); } catch (Exception e) { throw new RuntimeException(e); } } } public static SSLSocketFactory get() { return get(""); } public synchronized static SSLSocketFactory get(String serverAlias) { if (!sslSocketFactories.containsKey(serverAlias)) { sslSocketFactories.put(serverAlias, new TrustingSSLSocketFactory(serverAlias)); } return sslSocketFactories.get(serverAlias); } static Socket setEnabledCipherSuites(Socket socket) { SSLSocket.class.cast(socket).setEnabledCipherSuites(ENABLED_CIPHER_SUITES); return socket; } private static KeyStore loadKeyStore(InputStream inputStream) throws IOException { try { KeyStore keyStore = KeyStore.getInstance("JKS"); keyStore.load(inputStream, KEYSTORE_PASSWORD); return keyStore; } catch (Exception e) { throw new RuntimeException(e); } finally { inputStream.close(); } } @Override public String[] getDefaultCipherSuites() { return ENABLED_CIPHER_SUITES; } @Override public String[] getSupportedCipherSuites() { return ENABLED_CIPHER_SUITES; } @Override public Socket createSocket(Socket s, String host, int port, boolean autoClose) throws IOException { return setEnabledCipherSuites(delegate.createSocket(s, host, port, autoClose)); } @Override public Socket createSocket(String host, int port) throws IOException { return setEnabledCipherSuites(delegate.createSocket(host, port)); } @Override public Socket createSocket(InetAddress host, int port) throws IOException { return setEnabledCipherSuites(delegate.createSocket(host, port)); } @Override public Socket createSocket(String host, int port, InetAddress localHost, int localPort) throws IOException { return setEnabledCipherSuites(delegate.createSocket(host, port, localHost, localPort)); } @Override public Socket createSocket(InetAddress address, int port, InetAddress localAddress, int localPort) throws IOException { return setEnabledCipherSuites(delegate.createSocket(address, port, localAddress, localPort)); } @Override public X509Certificate[] getAcceptedIssuers() { return null; } @Override public void checkClientTrusted(X509Certificate[] certs, String authType) {} @Override public void checkServerTrusted(X509Certificate[] certs, String authType) {} @Override public String[] getClientAliases(String keyType, Principal[] issuers) { return null; } @Override public String chooseClientAlias(String[] keyType, Principal[] issuers, Socket socket) { return null; } @Override public String[] getServerAliases(String keyType, Principal[] issuers) { return null; } @Override public String chooseServerAlias(String keyType, Principal[] issuers, Socket socket) { return serverAlias; } @Override public X509Certificate[] getCertificateChain(String alias) { return certificateChain; } @Override public PrivateKey getPrivateKey(String alias) { return privateKey; } }
Feign client 设置请求头信息
Feign client端
@FeignClient(url = "${test.url}", name = "cclient",configuration= ClientConfiguration.class,fallback = APIClientFallback.class) public interface APIClient { @RequestMapping(method = RequestMethod.POST, value = "/check/test") String checkResult(@RequestParam("sendTelNo") String sendTelNo,@RequestParam("certType") String certType,@RequestParam("certCode") String certCode,@RequestParam("userName") String userName); @RequestMapping(method = RequestMethod.POST, value = "/userstaus/test") String inusetime(@RequestParam("sendTelNo") String sendTelNo); @RequestMapping(method = RequestMethod.POST, value = "/userstaus/test") String offnetIdentify(@RequestParam("sendTelNo") String sendTelNo,@RequestParam("date") String date);
配置文件 application-dev.yml
test: url: https://xxxxxx:8243/test tokenId: 11111112222222
feign configuration 这里配置全局的请求头和token
@Configuration public class ClientConfiguration { @Value("${test.tokenId}") private String tokenId; @Bean public RequestInterceptor headerInterceptor() { return new RequestInterceptor(){ @Override public void apply(RequestTemplate template) { List<String> authorizationList = Lists.newArrayList("Bearer "+tokenId); List<String> contentTypeList = Lists.newArrayList("application/x-www-form-urlencoded;charset=utf-8"); Map<String, Collection<String>> headers =ImmutableMap.of("Authorization", authorizationList,"Content-Type", contentTypeList); template.headers(headers); } }; }
feign 异常处理
@Component public class APIClientFallback implements APIClient{ @Override public String checkResult(String sendTelNo, String certType, String certCode, String userName) { return toJsonString(); } @Override public String inusetime(String sendTelNo) { return toJsonString(); } @Override public String offnetIdentify(String sendTelNo, String date) { return toJsonString(); } private String toJsonString() { BaseResult resultVo = new BaseResult(); resultVo.renderStatus(ResultTypeEnum.SERVICE_ERROR); ObjectMapper mapper = new ObjectMapper(); try { return mapper.writeValueAsString(resultVo); } catch (JsonProcessingException e) { e.printStackTrace(); } return null; } }
以上为个人经验,希望能给大家一个参考,也希望大家多多支持脚本之家。
您可能感兴趣的文章:
- Nexus使用nginx代理实现支持HTTPS协议
- Spring Boot项目如何同时支持HTTP和HTTPS协议的实现
- Spring Boot应用程序同时支持HTTP和HTTPS协议的实现方法
- SpringBoot2.0如何启用https协议
- 关于Https协议和HttpClient的实现详解
- startssl申请SSL证书 并且配置 iis 启用https协议
- Java获取http和https协议返回的json数据
- Linux下nginx配置https协议访问的方法
- iOS9苹果将原http协议改成了https协议的方法
- apache中使用mod_gnutls模块实现多个SSL站点配置(多个HTTPS协议的虚拟主机)
- https协议详解