android代码示例,Android 代码示例

Android 代码示例

12/10/2018

本文内容

重要

弃用2020年3月之前发布的 Microsoft Rights Management Service SDK 版本;必须将使用早期版本的应用程序更新为使用三月2020版。 有关完整详细信息，请参阅 弃用通知。

不会为 Microsoft Rights Management 服务 SDK 规划进一步的增强功能。 我们强烈建议采用 Microsoft Information PROTECTION SDK 进行分类、标记和保护服务。

本文介绍了如何为 Android 版 RMS SDK 编码元素。

注意： 在本文中，MSIPC (Microsoft Information Protection and Control) 一词是指客户端流程。

使用 Microsoft Rights Management SDK 4.2 - 重要方案

这些代码示例摘自较大的示例应用，即对熟悉此 SDK 十分重要的开发方案。 它们展示了如何使用以下对象：

Microsoft 受保护的文件格式(亦称为“受保护的文件”。

自定义受保护的文件格式

自定义用户界面 (UI) 控件

MSIPCSampleApp 示例应用可与适用于 Android 操作系统的此 SDK 配合使用。 若要了解详细信息，请参阅 rms-sdk-ui-for-android。

方案：使用受 RMS 保护的文件

源：MsipcAuthenticationCallback.java

说明：实例化 ProtectedFileInputStream 对象，并实现服务身份验证。 使用 AuthenticationRequestCallback 获取令牌，具体是通过将 AuthenticationRequestCallback 实例作为参数 mRmsAuthCallback 传递到 MSIPC API。 请参阅以下示例代码节结尾附近的 ProtectedFileInputStream.create 调用。

public void startContentConsumptionFromPtxtFileFormat(InputStream inputStream)

{

CreationCallback protectedFileInputStreamCreationCallback =

new CreationCallback()

{

@Override

public Context getContext()

{

…

}

@Override

public void onCancel()

{

…

}

@Override

public void onFailure(ProtectionException e)

{

…

}

@Override

public void onSuccess(ProtectedFileInputStream protectedFileInputStream)

{

…

…

byte[] dataChunk = new byte[16384];

try

{

while ((nRead = protectedFileInputStream.read(dataChunk, 0,

dataChunk.length)) != -1)

{

…

}

…

protectedFileInputStream.close();

}

catch (IOException e)

{

…

}

}

};

try

{

…

ProtectedFileInputStream.create(inputStream, null, mRmsAuthCallback,

PolicyAcquisitionFlags.NONE,

protectedFileInputStreamCreationCallback);

}

catch (com.microsoft.rightsmanagement.exceptions.InvalidParameterException e)

{

…

}

}

第 2 步：使用 Active Directory Authentication Library (ADAL) 设置身份验证。

源： msipcauthenticationcallback.java。

class MsipcAuthenticationCallback implements AuthenticationRequestCallback

{

…

@Override

public void getToken(Map authenticationParametersMap,

final AuthenticationCompletionCallback authenticationCompletionCallbackToMsipc)

{

String authority = authenticationParametersMap.get("oauth2.authority");

String resource = authenticationParametersMap.get("oauth2.resource");

String userId = authenticationParametersMap.get("userId");

final String userHint = (userId == null)? "" : userId;

AuthenticationContext authenticationContext = App.getInstance().getAuthenticationContext();

if (authenticationContext == null || !authenticationContext.getAuthority().equalsIgnoreCase(authority))

{

try

{

authenticationContext = new AuthenticationContext(App.getInstance().getApplicationContext(), authority, …);

App.getInstance().setAuthenticationContext(authenticationContext);

}

catch (NoSuchAlgorithmException e)

{

…

authenticationCompletionCallbackToMsipc.onFailure();

}

catch (NoSuchPaddingException e)

{

…

authenticationCompletionCallbackToMsipc.onFailure();

}

}

App.getInstance().getAuthenticationContext().acquireToken(mParentActivity, resource, mClientId, mRedirectURI, userId, mPromptBehavior,

"&USERNAME=" + userHint, new AuthenticationCallback()

{

@Override

public void onError(Exception exc)

{

…

if (exc instanceof AuthenticationCancelError)

{

…

authenticationCompletionCallbackToMsipc.onCancel();

}

else

{

…

authenticationCompletionCallbackToMsipc.onFailure();

}

}

@Override

public void onSuccess(AuthenticationResult result)

{

…

if (result == null || result.getAccessToken() == null

|| result.getAccessToken().isEmpty())

{

…

}

else

{

// request is successful

…

authenticationCompletionCallbackToMsipc.onSuccess(result.getAccessToken());

}

}

}

);

}

步骤 3：通过 UserPolicy.accessCheck 方法检查此用户对于该内容是否具有 Edit 权限。

源：TextEditorFragment.java

//check if user has edit rights and apply enforcements

if (!mUserPolicy.accessCheck(EditableDocumentRights.Edit))

{

mTextEditor.setFocusableInTouchMode(false);

mTextEditor.setFocusable(false);

mTextEditor.setEnabled(false);

…

}

方案：使用模板创建新的受保护文件

此方案首先获取模板列表，选择第一个模板以创建策略，然后创建并写入新的受保护的文件。

源：MsipcTaskFragment.java

CreationCallback> getTemplatesCreationCallback = new CreationCallback>()

{

@Override

public Context getContext()

{

…

}

@Override

public void onCancel()

{

…

}

@Override

public void onFailure(ProtectionException e)

{

…

}

@Override

public void onSuccess(List templateDescriptors)

{

…

}

};

try

{

…

mIAsyncControl = TemplateDescriptor.getTemplates(emailId, mRmsAuthCallback, getTemplatesCreationCallback);

}

catch (com.microsoft.rightsmanagement.exceptions.InvalidParameterException e)

{

…

}

步骤 2：使用列表中的第一个模板创建 UserPolicy。

源：MsipcTaskFragment.java

CreationCallback userPolicyCreationCallback = new CreationCallback()

{

@Override

public Context getContext()

{

…

}

@Override

public void onCancel()

{

…

}

@Override

public void onFailure(ProtectionException e)

{

…

}

@Override

public void onSuccess(final UserPolicy item)

{

…

}

};

try

{

…

mIAsyncControl = UserPolicy.create((TemplateDescriptor)selectedDescriptor, mEmailId, mRmsAuthCallback,

UserPolicyCreationFlags.NONE, userPolicyCreationCallback);

…

}

catch (InvalidParameterException e)

{

…

}

源：MsipcTaskFragment.java

private void createPTxt(final byte[] contentToProtect)

{

…

CreationCallback protectedFileOutputStreamCreationCallback = new CreationCallback()

{

@Override

public Context getContext()

{

…

}

@Override

public void onCancel()

{

…

}

@Override

public void onFailure(ProtectionException e)

{

…

}

@Override

public void onSuccess(ProtectedFileOutputStream protectedFileOutputStream)

{

try

{

// write to this stream

protectedFileOutputStream.write(contentToProtect);

protectedFileOutputStream.flush();

protectedFileOutputStream.close();

…

}

catch (IOException e)

{

…

}

}

};

try

{

File file = new File(filePath);

outputStream = new FileOutputStream(file);

mIAsyncControl = ProtectedFileOutputStream.create(outputStream, mUserPolicy, originalFileExtension,

protectedFileOutputStreamCreationCallback);

}

catch (FileNotFoundException e)

{

…

}

catch (InvalidParameterException e)

{

…

}

}

方案：打开自定义受保护的文件

步骤 1：从 serializedContentPolicy 创建 UserPolicy。

源：MsipcTaskFragment.java

CreationCallback userPolicyCreationCallbackFromSerializedContentPolicy = new CreationCallback()

{

@Override

public void onSuccess(UserPolicy userPolicy)

{

…

}

@Override

public void onFailure(ProtectionException e)

{

…

}

@Override

public void onCancel()

{

…

}

@Override

public Context getContext()

{

…

}

};

try

{

...

// Read the serializedContentPolicyLength from the inputStream.

long serializedContentPolicyLength = readUnsignedInt(inputStream);

// Read the PL bytes from the input stream using the PL size.

byte[] serializedContentPolicy = new byte[(int)serializedContentPolicyLength];

inputStream.read(serializedContentPolicy);

...

UserPolicy.acquire(serializedContentPolicy, null, mRmsAuthCallback, PolicyAcquisitionFlags.NONE,

userPolicyCreationCallbackFromSerializedContentPolicy);

}

catch (com.microsoft.rightsmanagement.exceptions.InvalidParameterException e)

{

...

}

catch (IOException e)

{

...

}

源：MsipcTaskFragment.java

CreationCallback customProtectedInputStreamCreationCallback = new CreationCallback()

{

@Override

public Context getContext()

{

…

}

@Override

public void onCancel()

{

…

}

@Override

public void onFailure(ProtectionException e)

{

…

}

@Override

public void onSuccess(CustomProtectedInputStream customProtectedInputStream)

{

…

byte[] dataChunk = new byte[16384];

try

{

while ((nRead = customProtectedInputStream.read(dataChunk, 0, dataChunk.length)) != -1)

{

…

}

…

customProtectedInputStream.close();

}

catch (IOException e)

{

…

}

…

}

};

try

{

...

// Retrieve the encrypted content size.

long encryptedContentLength = readUnsignedInt(inputStream);

updateTaskStatus(new TaskStatus(TaskState.Starting, "Consuming content", true));

CustomProtectedInputStream.create(userPolicy, inputStream,

encryptedContentLength,

customProtectedInputStreamCreationCallback);

}

catch (com.microsoft.rightsmanagement.exceptions.InvalidParameterException e)

{

...

}

catch (IOException e)

{

...

}

步骤 3：将内容从 CustomProtectedInputStream 读取到 mDecryptedContent 中，然后关闭。

源：MsipcTaskFragment.java

@Override

public void onSuccess(CustomProtectedInputStream customProtectedInputStream)

{

mUserPolicy = customProtectedInputStream.getUserPolicy();

ByteArrayOutputStream buffer = new ByteArrayOutputStream();

int nRead;

byte[] dataChunk = new byte[16384];

try

{

while ((nRead = customProtectedInputStream.read(dataChunk, 0,

dataChunk.length)) != -1)

{

buffer.write(dataChunk, 0, nRead);

}

buffer.flush();

mDecryptedContent = new String(buffer.toByteArray(), Charset.forName("UTF-8"));

buffer.close();

customProtectedInputStream.close();

}

catch (IOException e)

{

...

}

}

方案：使用自定义策略创建自定义受保护的文件

步骤 1：在用户提供了电子邮件地址的情况下，创建策略描述符。

源：MsipcTaskFragment.java

说明：实际上，将使用用户在设备界面中输入的内容创建以下对象；UserRights 和 PolicyDescriptor。

// create userRights list

UserRights userRights = new UserRights(Arrays.asList("consumer@domain.com"),

Arrays.asList( CommonRights.View, EditableDocumentRights.Print));

ArrayList usersRigthsList = new ArrayList();

usersRigthsList.add(userRights);

// Create PolicyDescriptor using userRights list

PolicyDescriptor policyDescriptor = PolicyDescriptor.createPolicyDescriptorFromUserRights(

usersRigthsList);

policyDescriptor.setOfflineCacheLifetimeInDays(10);

policyDescriptor.setContentValidUntil(new Date());

步骤 2：通过策略描述符 selectedDescriptor 创建自定义 UserPolicy。

源：MsipcTaskFragment.java

mIAsyncControl = UserPolicy.create((PolicyDescriptor)selectedDescriptor,

mEmailId, mRmsAuthCallback, UserPolicyCreationFlags.NONE, userPolicyCreationCallback);

源：MsipcTaskFragment.java

File file = new File(filePath);

final OutputStream outputStream = new FileOutputStream(file);

CreationCallback customProtectedOutputStreamCreationCallback = new CreationCallback()

{

@Override

public Context getContext()

{

…

}

@Override

public void onCancel()

{

…

}

@Override

public void onFailure(ProtectionException e)

{

…

}

@Override

public void onSuccess(CustomProtectedOutputStream protectedOutputStream)

{

try

{

// write serializedContentPolicy

byte[] serializedContentPolicy = mUserPolicy.getSerializedContentPolicy();

writeLongAsUnsignedIntToStream(outputStream, serializedContentPolicy.length);

outputStream.write(serializedContentPolicy);

// write encrypted content

if (contentToProtect != null)

{

writeLongAsUnsignedIntToStream(outputStream,

CustomProtectedOutputStream.getEncryptedContentLength(contentToProtect.length,

protectedOutputStream.getUserPolicy()));

protectedOutputStream.write(contentToProtect);

protectedOutputStream.flush();

protectedOutputStream.close();

}

else

{

outputStream.flush();

outputStream.close();

}

…

}

catch (IOException e)

{

…

}

}

};

try

{

mIAsyncControl = CustomProtectedOutputStream.create(outputStream, mUserPolicy,

customProtectedOutputStreamCreationCallback);

}

catch (InvalidParameterException e)

{

…

}