代码提交

liusheng

2025-02-21 86e7cce6159d6d74bcc636327939ec9ea8d3009d

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
package com.smartor.common;
 
import com.fasterxml.jackson.databind.JsonNode;
import com.fasterxml.jackson.databind.json.JsonMapper;
import lombok.extern.slf4j.Slf4j;
import okhttp3.*;
 
import javax.net.ssl.*;
import java.io.IOException;
import java.net.URI;
import java.net.URLEncoder;
import java.nio.charset.StandardCharsets;
import java.security.SecureRandom;
import java.security.cert.X509Certificate;
import java.util.*;
import java.util.concurrent.locks.ReentrantLock;
 
@Slf4j
public class LyraTokenUtil {
 
    private static final List<LyraTokenUtil> cache = new ArrayList<>();
    private static final JsonMapper objectMapper = JsonMapper.builder().build();
    private final OkHttpClient client;
    private final URI url;
    private final String clientId;
    private final String clientSecret;
    private final ReentrantLock lock = new ReentrantLock();
    private Date expireTime;
    private String token;
    private final X509TrustManager trustManager;
 
    private LyraTokenUtil(URI url, String clientId, String clientSecret) {
        this.url = url;
        this.clientId = clientId;
        this.clientSecret = clientSecret;
 
        SSLContext sslContext;
        try {
            // 创建一个信任所有证书的 TrustManager
            TrustManager[] trustAllManagers = new TrustManager[]{new X509TrustManager() {
                @Override
                public void checkClientTrusted(X509Certificate[] chain, String authType) {
                }
 
                @Override
                public void checkServerTrusted(X509Certificate[] chain, String authType) {
                }
 
                @Override
                public X509Certificate[] getAcceptedIssuers() {
                    return new X509Certificate[0];
                }
            }};
 
            // 保存 TrustManager
            this.trustManager = (X509TrustManager) trustAllManagers[0];
 
            // 初始化 SSLContext
            sslContext = SSLContext.getInstance("TLS");
            sslContext.init(null, trustAllManagers, new SecureRandom());
        } catch (Exception e) {
            throw new IllegalStateException("Failed to initialize SSLContext", e);
        }
 
        // 创建 OkHttpClient，设置自定义的 SSLContext
        this.client = new OkHttpClient.Builder().sslSocketFactory(sslContext.getSocketFactory(), trustManager) // 直接使用保存的 TrustManager
                .hostnameVerifier((hostname, session) -> true) // 忽略主机名验证
                .build();
    }
 
    public static synchronized LyraTokenUtil createLyraTokenUtil(String url, String clientId, String clientSecret) {
        return cache.stream().filter(it -> it.url.equals(URI.create(url))).findFirst().orElseGet(() -> {
            LyraTokenUtil lyraTokenUtil = new LyraTokenUtil(URI.create(url), clientId, clientSecret);
            cache.add(lyraTokenUtil);
            return lyraTokenUtil;
        });
    }
 
    public String getToken() throws IOException {
        lock.lock();
        try {
            if (expireTime == null || expireTime.before(new Date())) {
                RequestBody formBody = new FormBody.Builder().add("grant_type", "client_credentials").add("client_id", clientId).add("client_secret", URLEncoder.encode(clientSecret, StandardCharsets.UTF_8.toString())).build();
 
                Request request = new Request.Builder().url(url.toURL()).post(formBody).build();
 
                try (Response response = client.newCall(request).execute()) {
                    if (response.isSuccessful()) {
                        ResponseBody body = response.body();
                        if (body != null) {
                            JsonNode jsonNode = objectMapper.readTree(body.string());
                            String accessToken = jsonNode.get("access_token").asText();
                            String tokenType = jsonNode.get("token_type").asText();
                            this.token = tokenType + " " + accessToken;
                            int expiresIn = jsonNode.get("expires_in").asInt();
                            this.expireTime = new Date(System.currentTimeMillis() + (expiresIn - 300) * 1000);
                        } else {
                            throw new RuntimeException("Response body is null");
                        }
                    } else {
                        throw new RuntimeException("Failed to get token, HTTP status: " + response.code());
                    }
                }
            }
            return token;
        } finally {
            lock.unlock();
        }
    }
}