IP黑白名单

最新推荐文章于 2024-09-23 18:21:10 发布

高级盘丝洞

最新推荐文章于 2024-09-23 18:21:10 发布

阅读量138

点赞数

文章标签： tcp/ip servlet java

本文链接：https://blog.csdn.net/weixin_42023748/article/details/129822021

版权

本文介绍了如何使用Java进行TCP/IP通信，并通过Servlet拦截器实现IP黑白名单的过滤机制。文章中包含了两个工具类的详细实现，帮助开发者有效地控制网络请求的来源。

摘要由CSDN通过智能技术生成

拦截器

package com.rebuild.core.interceptor;

import cn.devezhao.persist4j.Entity;
import cn.devezhao.persist4j.engine.ID;
import com.alibaba.fastjson.JSONObject;
import com.rebuild.api.RespBody;
import com.rebuild.core.Application;
import com.rebuild.core.UserContextHolder;
import com.rebuild.core.metadata.EntityHelper;
import com.rebuild.core.metadata.MetadataHelper;
import lombok.extern.slf4j.Slf4j;
import org.springframework.util.StreamUtils;
import org.springframework.web.method.HandlerMethod;
import org.springframework.web.servlet.HandlerInterceptor;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.io.PrintWriter;
import java.util.*;


@Slf4j
public class IPInterceptor implements HandlerInterceptor {

  /*  @Autowired
    private ProjectTableDao projectTableDao;*/

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        log.info("---------- 判断相关ip");

        if (handler instanceof HandlerMethod) {

            String queryString = request.getQueryString();
            //获取请求body
            byte[] bodyBytes = StreamUtils.copyToByteArray(request.getInputStream());
            String body = new String(bodyBytes, request.getCharacterEncoding());

            // 记录信息:Controller路径</br>对应方法名</br>请求参数信息</br>请求相对路径</br>请求处理时长
            HandlerMethod h = (HandlerMethod) handler;
            StringBuilder sb = new StringBuilder(1000);
            sb.append("Controller: ").append(h.getBean().getClass().getName()).append("\n");
            sb.append("Method    : ").append(h.getMethod().getName()).append("\n");
            sb.append("Params    : ").append(getParamString(request.getParameterMap())).append("\n");
            sb.append("URI       : ").append(request.getRequestURI()).append("\n");
            System.out.println(sb.toString());


            ID userId = UserContextHolder.getUser();
            if (request.getRequestURI().equals("/user/user-login")) {
                String user = request.getParameterMap().get("user")[0];
                Entity entity = MetadataHelper.getEntity(EntityHelper.User);

                String sql = String.format("select %s from %s where %s = '%s'",
                        "USER_ID",
                        "user",
                        "LOGIN_NAME",
                        user
                );
                Object[] objects = Application.getQueryFactory().createNativeQuery(sql)
                        .unique();


                userId = (ID) objects[0];
            }

        }


        //先获取相关需要验证的ip列表
        //过滤ip,若用户在白名单内，则放行
        String ipAddress = IPUtils.getRealIP(request);
        //所用需要验证的ip,暂时批量验证
        Set<String> listIps = getL