AK环境下的Key登录模拟调试(单点登录-websocket标准接口模拟服务)

 

一、在AK环境下的Key登录模拟调试之前，首先需要插入密钥或使用单点登录-websocket标准接口模拟服务.rar工具进行模拟 

单点登录-websocket标准接口模拟服务使用说明：解压压缩包启动ws_server-soft.exe程序，如无法启动可参考“ws_server-soft.exe无法打开的问题.txt”，如需替换密钥请参考“替换密钥说明.txt”，（请确保30318端口未被占用）

二、在登录页的jsp中添加ByWebSocket()函数,用于连接websocket接口,发送请求并返回密钥信息，其中ws.onmessage = function (evt){}函数为处理响应消息的回调函数，可以在方法体内读取并处理密钥信息

请求获取密钥

function ByWebSocket() {         var me = this;         var ws = null;         ws = new WebSocket("ws://127.0.0.1:30318/"); //访问url         //打开连接         ws.onopen = function () {             var str = "<?xml version=\"1.0\" encoding=\"UTF-8\"?><getsignandtoken version=\"1\"><challenge>7DbgT65HZFiNEQ5rK3X7eQ==</challenge></getsignandtoken>";             //str 为固定发送数据，不需要应用修改             ws.send(str);         };               ws.onerror=function(e){             //当读取密钥失败时的回调函数             secretKeyFlag = false;             $("#errorinfo").show().html("未读取到密钥信息,请插入密钥后重试!");             $('#form').submit();         }         //处理响应消息         ws.onmessage = function (evt) {             try{                 //try-catch整个获取密钥信息的代码,如报错则处理错误情况                 var received_msg = evt.data;                 //received_msg为单点登录接口返回的票据数据xml格式，应用根据格式解析。                 //返回成功时从该票据格式中解析出用户标识，异步发送给服务端，判断后台数据库中是否存在该用户，用户存在则允许进入系统，用户不存在则提示错误。                 var result = jQuery(received_msg).find("result").text();                 // 0 返回用户标识成功                 if (result == "0") {                     var tokeninfo = jQuery(received_msg).find("tokeninfo").text();                     var jieMiTokeninfo = jQuery.base64.decode(tokeninfo);//base64解码                     var newJieMiTokeninfo = jieMiTokeninfo.substring(jieMiTokeninfo.indexOf("<?xml"));                     newJieMiTokeninfo = newJieMiTokeninfo.substring(0, newJieMiTokeninfo.indexOf("</ticket>") + 8);                     var ticketinfo = jQuery(newJieMiTokeninfo).find("ticketinfo").text();                     var jieMi = "";                     var userid = "";                     try{                         jieMi = jQuery.base64.decode(ticketinfo);//base64解码                         userid = jQuery(jieMi).find("rmsid").text();                     }catch(e){                         jieMi = "";//如解码失败,则处理错误情况                         userid = null;                     }                     if (userid) {                         alert("读卡成功！");                         me.rmsid = userid;                     }                 } else if (result == "1") {                     // 得到错误信息                     var errorinfo = jQuery(received_msg).find("errorinfo").text();                     alert(errorinfo);                 } else {                     alert("请确认已经插入有效Key！");                 }             }catch(e){                 var jieMi = "";                 var userid = "";                 try{                     jieMi = jQuery.base64.decode(ticketinfo);                     userid = jQuery(jieMi).find("rmsid").text();                 }catch(e){                     jieMi = "";                     userid = null;                 }                 if (userid) {                     me.rmsid = userid;                 }             }           //获取成功,调用登录             var flag = me.verifySecretKey("huiDiao");         };         //连接关闭消息，可不处理，或者打印调试日志         ws.onclose = function () {           };     }

三、获取到密钥信息后，在正常登录（即账号密码验证）之前，添加账号与密钥匹配判断

1. 前台方法如下：

   获取密钥,请求成功后发送Ajax获取密钥匹配是否成功

   function verifySecretKey(lx) {     var me = this;     var msg = '';     if(lx != "huiDiao"){         ByWebSocket();//当初次调用时请求获取密钥信息     }     else if(lx == "huiDiao"){         //WebSocket onmessage回调函数完成后再次调用时,走以下程序         var UserName = $("#userName").val();         var SecretKey = rmsid;         $.ajax({             url:"/portal/home/mainpage/verifySecretKey",             type:"get",             data:{userName:UserName,secretKey:SecretKey},             dataType:"json",             async:false,             success:function(result){                 //var jsonResult = JSON.parse(result);                 var obj = eval(result);                 if(obj.success==true){                     msg = obj.msg;                     secretKeyFlag=true;                 }else{                     msg = obj.msg;                     secretKeyFlag=false;                 }             },             error:function(){                               }         });         if(!secretKeyFlag){                   $("#errorinfo").show().html(msg); //显示错误信息         }         else {             $("#errorinfo").html("").hide();         }         //提交         $('#form').submit();//开始用户名和密码的校验         return secretKeyFlag;     } }

2. 后台方法如下：

   后台校验密钥方法

   /**      * 登录时校验密钥      * @return      */     @Action     public String verifySecretKey() {         ActionContext ac = ActionContext.getActionContext();         HttpServletRequest reqeust = ac.getHttpServletRequest();         HttpServletResponse resp = ActionContext.getActionContext().getHttpServletResponse();         Map<String,Object> rtnMap = new HashMap<String, Object>();         String loginWithSecretKey = System.getProperty("loginWithSecretKey");         if("true".equals(loginWithSecretKey)) {             String secretKey = reqeust.getParameter("secretKey");             String userName = reqeust.getParameter("userName");             Map<String,Object>params = new HashMap<String, Object>();             params.put("rmsid", secretKey);             params.put("userName", userName);             if (null != secretKey && secretKey.trim().length() > 0) {                 //匹配                 int checkSecretKey = this.bdsoftMybatisUtils.selectOne("repository.portal.navigate.CheckSecretKey",params);                 if(checkSecretKey==1) {                     rtnMap.put("success", true);                     rtnMap.put("msg", "密钥与账号匹配成功!");                 }else {                     rtnMap.put("success", false);                     rtnMap.put("msg", "登录失败,请检查用户名、密码、密钥是否正确!");                 }             }else {                 //未读取到密钥信息,请插入密钥后重试                 rtnMap.put("success", false);                 rtnMap.put("msg", "未读取到密钥信息,请插入密钥后重试!");             }         }else {             //无需匹配             rtnMap.put("success", true);             rtnMap.put("msg", "未开启需要伴随密钥登录配置项,跳过密钥检测!");         }         return Json.encode(rtnMap);     }

四、由全局变量secretKeyFlag判断当前的密钥校验是否通过，并将secretKeyFlag变量添加到登录函数(form的submit函数中),即if(secretKeyFlag==false||$('#userName').val() == '')则禁止登录

前台限制密钥校验失败禁止登录

$('#form').bind('submit',function(){     if(secretKeyFlag==false||$('#userName').val() == '') {         return false;     } });