retrofit 服务自定义签名认证

2017/11/29 23:23 - Posted By 起衣 - Tags: java,retrofit - Category: Code

因为用在一个不是特别主流的方案里，所以还是记录下。服务所有的请求通过 form data 格式传输，然后每一次的请求都需要使用服务端给客户端分配的密钥对请求参数进行签名，

直接基于 OkHttpClient 扩展 Interceptor 实现，如下：

public class SignInterceptor implements Interceptor {
private final Mac mac;
private final String clientId;
public SignInterceptor(String clientId, String clientKey) throws NoSuchAlgorithmException, InvalidKeyException {
this.clientId = clientId;
byte[] key = clientKey.getBytes(StandardCharsets.UTF_8);
SecretKeySpec keySpec = new SecretKeySpec(key, "HmacSHA256");
this.mac = Mac.getInstance("HmacSHA256");
this.mac.init(keySpec);
}
@Override
public Response intercept(Chain chain) throws IOException {
Request request = chain.request();
RequestBody requestBody = request.body();
if (requestBody instanceof FormBody) {
FormBody originFormBody = (FormBody) requestBody;
FormBody.Builder formBody = new FormBody.Builder();
List fields = new ArrayList<>(originFormBody.size());
int size = originFormBody.size();
for (int i = 0; i < size; i++) {
String encodedName = originFormBody.encodedName(i);
String encodedValue = originFormBody.encodedValue(i);
fields.add(encodedName + "=" + encodedValue);
formBody.addEncoded(encodedName, encodedValue);
}
Collections.sort(fields);
String baseString = String.join("&", fields);
Base64.Encoder encoder = Base64.getEncoder();
String signature = encoder.encodeToString(
mac.doFinal(baseString.getBytes(StandardCharsets.UTF_8)));
formBody.add("clientId", this.clientId);
formBody.add("signature", signature);
request = request.newBuilder()
.method(request.method(),
formBody.build())
.build();
}
return chain.proceed(request);
}
}

然后在构建服务的时候添加进去:

本文链接: http://isouth.org/archives/363.html , 转载请注明出处，此外还可以订阅我。