From 5d901b5e3f033e8b04e53420d68626cbd87431c8 Mon Sep 17 00:00:00 2001
From: 648540858 <648540858@qq.com>
Date: 星期五, 06 五月 2022 10:12:34 +0800
Subject: [PATCH] 使用阿里代码规范。规范代码写法
---
src/main/java/com/genersoft/iot/vmp/gb28181/auth/DigestServerAuthenticationHelper.java | 201 +++++++++++++++++++++++++++++++++-----------------
1 files changed, 132 insertions(+), 69 deletions(-)
diff --git a/src/main/java/com/genersoft/iot/vmp/gb28181/auth/DigestServerAuthenticationHelper.java b/src/main/java/com/genersoft/iot/vmp/gb28181/auth/DigestServerAuthenticationHelper.java
index a754a76..f6284f5 100644
--- a/src/main/java/com/genersoft/iot/vmp/gb28181/auth/DigestServerAuthenticationHelper.java
+++ b/src/main/java/com/genersoft/iot/vmp/gb28181/auth/DigestServerAuthenticationHelper.java
@@ -1,28 +1,28 @@
/*
-* Conditions Of Use
-*
-* This software was developed by employees of the National Institute of
-* Standards and Technology (NIST), an agency of the Federal Government.
-* Pursuant to title 15 Untied States Code Section 105, works of NIST
-* employees are not subject to copyright protection in the United States
-* and are considered to be in the public domain. As a result, a formal
-* license is not needed to use the software.
-*
-* This software is provided by NIST as a service and is expressly
-* provided "AS IS." NIST MAKES NO WARRANTY OF ANY KIND, EXPRESS, IMPLIED
-* OR STATUTORY, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTY OF
-* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT
-* AND DATA ACCURACY. NIST does not warrant or make any representations
-* regarding the use of the software or the results thereof, including but
-* not limited to the correctness, accuracy, reliability or usefulness of
-* the software.
-*
-* Permission to use this software is contingent upon your acceptance
-* of the terms of this agreement
-*
-* .
-*
-*/
+ * Conditions Of Use
+ *
+ * This software was developed by employees of the National Institute of
+ * Standards and Technology (NIST), an agency of the Federal Government.
+ * Pursuant to title 15 Untied States Code Section 105, works of NIST
+ * employees are not subject to copyright protection in the United States
+ * and are considered to be in the public domain. As a result, a formal
+ * license is not needed to use the software.
+ *
+ * This software is provided by NIST as a service and is expressly
+ * provided "AS IS." NIST MAKES NO WARRANTY OF ANY KIND, EXPRESS, IMPLIED
+ * OR STATUTORY, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTY OF
+ * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT
+ * AND DATA ACCURACY. NIST does not warrant or make any representations
+ * regarding the use of the software or the results thereof, including but
+ * not limited to the correctness, accuracy, reliability or usefulness of
+ * the software.
+ *
+ * Permission to use this software is contingent upon your acceptance
+ * of the terms of this agreement
+ *
+ * .
+ *
+ */
package com.genersoft.iot.vmp.gb28181.auth;
import java.security.MessageDigest;
@@ -39,21 +39,25 @@
import javax.sip.message.Response;
import gov.nist.core.InternalErrorHandler;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
/**
* Implements the HTTP digest authentication method server side functionality.
- *
+ *
* @author M. Ranganathan
* @author Marc Bednarek
*/
public class DigestServerAuthenticationHelper {
-
+
+ private Logger logger = LoggerFactory.getLogger(DigestServerAuthenticationHelper.class);
+
private MessageDigest messageDigest;
-
+
public static final String DEFAULT_ALGORITHM = "MD5";
public static final String DEFAULT_SCHEME = "Digest";
-
+
@@ -63,11 +67,11 @@
/**
* Default constructor.
- * @throws NoSuchAlgorithmException
+ * @throws NoSuchAlgorithmException
*/
- public DigestServerAuthenticationHelper()
- throws NoSuchAlgorithmException {
- messageDigest = MessageDigest.getInstance(DEFAULT_ALGORITHM);
+ public DigestServerAuthenticationHelper()
+ throws NoSuchAlgorithmException {
+ messageDigest = MessageDigest.getInstance(DEFAULT_ALGORITHM);
}
public static String toHexString(byte b[]) {
@@ -79,7 +83,7 @@
}
return new String(c);
}
-
+
/**
* Generate the challenge string.
*
@@ -91,8 +95,10 @@
long time = date.getTime();
Random rand = new Random();
long pad = rand.nextLong();
- String nonceString = (new Long(time)).toString()
- + (new Long(pad)).toString();
+ // String nonceString = (new Long(time)).toString()
+ // + (new Long(pad)).toString();
+ String nonceString = Long.valueOf(time).toString()
+ + Long.valueOf(pad).toString();
byte mdbytes[] = messageDigest.digest(nonceString.getBytes());
// Convert the mdbytes array into a hex string.
return toHexString(mdbytes);
@@ -103,13 +109,10 @@
WWWAuthenticateHeader proxyAuthenticate = headerFactory
.createWWWAuthenticateHeader(DEFAULT_SCHEME);
proxyAuthenticate.setParameter("realm", realm);
+ proxyAuthenticate.setParameter("qop", "auth");
proxyAuthenticate.setParameter("nonce", generateNonce());
-
- proxyAuthenticate.setParameter("opaque", "");
- proxyAuthenticate.setParameter("stale", "FALSE");
proxyAuthenticate.setParameter("algorithm", DEFAULT_ALGORITHM);
-// proxyAuthenticate.setParameter("qop", "auth");
response.setHeader(proxyAuthenticate);
} catch (Exception ex) {
InternalErrorHandler.handleException(ex);
@@ -121,34 +124,36 @@
*
* @param request - the request to authenticate.
* @param hashedPassword -- the MD5 hashed string of username:realm:plaintext password.
- *
+ *
* @return true if authentication succeded and false otherwise.
*/
public boolean doAuthenticateHashedPassword(Request request, String hashedPassword) {
- AuthorizationHeader authHeader = (AuthorizationHeader) request.getHeader(AuthorizationHeader.NAME);
- if ( authHeader == null ) return false;
+ AuthorizationHeader authHeader = (AuthorizationHeader) request.getHeader(AuthorizationHeader.NAME);
+ if ( authHeader == null ) {
+ return false;
+ }
String realm = authHeader.getRealm();
String username = authHeader.getUsername();
-
+
if ( username == null || realm == null ) {
return false;
}
-
+
String nonce = authHeader.getNonce();
URI uri = authHeader.getURI();
if (uri == null) {
return false;
}
-
-
+
+
String A2 = request.getMethod().toUpperCase() + ":" + uri.toString();
String HA1 = hashedPassword;
-
+
byte[] mdbytes = messageDigest.digest(A2.getBytes());
String HA2 = toHexString(mdbytes);
-
+
String cnonce = authHeader.getCNonce();
String KD = HA1 + ":" + nonce;
if (cnonce != null) {
@@ -158,7 +163,7 @@
mdbytes = messageDigest.digest(KD.getBytes());
String mdString = toHexString(mdbytes);
String response = authHeader.getResponse();
-
+
return mdString.equals(response);
}
@@ -168,12 +173,14 @@
*
* @param request - the request to authenticate.
* @param pass -- the plain text password.
- *
+ *
* @return true if authentication succeded and false otherwise.
*/
public boolean doAuthenticatePlainTextPassword(Request request, String pass) {
- AuthorizationHeader authHeader = (AuthorizationHeader) request.getHeader(AuthorizationHeader.NAME);
- if ( authHeader == null ) return false;
+ AuthorizationHeader authHeader = (AuthorizationHeader) request.getHeader(AuthorizationHeader.NAME);
+ if ( authHeader == null ) {
+ return false;
+ }
String realm = authHeader.getRealm().trim();
String username = authHeader.getUsername().trim();
@@ -184,36 +191,37 @@
String nonce = authHeader.getNonce();
URI uri = authHeader.getURI();
if (uri == null) {
- return false;
+ return false;
}
// qop 淇濇姢璐ㄩ噺 鍖呭惈auth锛堥粯璁ょ殑锛夊拰auth-int锛堝鍔犱簡鎶ユ枃瀹屾暣鎬ф娴嬶級涓ょ绛栫暐
String qop = authHeader.getQop();
// 瀹㈡埛绔殢鏈烘暟锛岃繖鏄竴涓笉閫忔槑鐨勫瓧绗︿覆鍊硷紝鐢卞鎴风鎻愪緵锛屽苟涓斿鎴风鍜屾湇鍔″櫒閮戒細浣跨敤锛屼互閬垮厤鐢ㄦ槑鏂囨枃鏈��
// 杩欎娇寰楀弻鏂归兘鍙互鏌ラ獙瀵规柟鐨勮韩浠斤紝骞跺娑堟伅鐨勫畬鏁存�ф彁渚涗竴浜涗繚鎶�
- String cNonce = authHeader.getCNonce();
+ String cnonce = authHeader.getCNonce();
// nonce璁℃暟鍣紝鏄竴涓�16杩涘埗鐨勬暟鍊硷紝琛ㄧず鍚屼竴nonce涓嬪鎴风鍙戦�佸嚭璇锋眰鐨勬暟閲�
int nc = authHeader.getNonceCount();
- String ncStr = new DecimalFormat("00000000").format(nc);
-// String ncStr = new DecimalFormat("00000000").format(Integer.parseInt(nc + "", 16));
+ String ncStr = String.format("%08x", nc).toUpperCase();
+ // String ncStr = new DecimalFormat("00000000").format(nc);
+ // String ncStr = new DecimalFormat("00000000").format(Integer.parseInt(nc + "", 16));
String A1 = username + ":" + realm + ":" + pass;
String A2 = request.getMethod().toUpperCase() + ":" + uri.toString();
byte mdbytes[] = messageDigest.digest(A1.getBytes());
String HA1 = toHexString(mdbytes);
- System.out.println("A1: " + A1);
- System.out.println("A2: " + A2);
+ logger.debug("A1: " + A1);
+ logger.debug("A2: " + A2);
mdbytes = messageDigest.digest(A2.getBytes());
String HA2 = toHexString(mdbytes);
- System.out.println("HA1: " + HA1);
- System.out.println("HA2: " + HA2);
- String cnonce = authHeader.getCNonce();
- System.out.println("nonce: " + nonce);
- System.out.println("nc: " + ncStr);
- System.out.println("cnonce: " + cnonce);
- System.out.println("qop: " + qop);
+ logger.debug("HA1: " + HA1);
+ logger.debug("HA2: " + HA2);
+ // String cnonce = authHeader.getCNonce();
+ logger.debug("nonce: " + nonce);
+ logger.debug("nc: " + ncStr);
+ logger.debug("cnonce: " + cnonce);
+ logger.debug("qop: " + qop);
String KD = HA1 + ":" + nonce;
if (qop != null && qop.equals("auth") ) {
@@ -226,13 +234,68 @@
KD += ":" + qop;
}
KD += ":" + HA2;
- System.out.println("KD: " + KD);
+ logger.debug("KD: " + KD);
mdbytes = messageDigest.digest(KD.getBytes());
String mdString = toHexString(mdbytes);
- System.out.println("mdString: " + mdString);
+ logger.debug("mdString: " + mdString);
String response = authHeader.getResponse();
- System.out.println("response: " + response);
+ logger.debug("response: " + response);
return mdString.equals(response);
-
+
}
+
+// public static void main(String[] args) throws NoSuchAlgorithmException {
+// String realm = "3402000000";
+// String username = "44010000001180008012";
+
+
+// String nonce = "07cab60999fbf643264ace27d3b7de8b";
+// String uri = "sip:34020000002000000001@3402000000";
+// // qop 淇濇姢璐ㄩ噺 鍖呭惈auth锛堥粯璁ょ殑锛夊拰auth-int锛堝鍔犱簡鎶ユ枃瀹屾暣鎬ф娴嬶級涓ょ绛栫暐
+// String qop = "auth";
+
+// // 瀹㈡埛绔殢鏈烘暟锛岃繖鏄竴涓笉閫忔槑鐨勫瓧绗︿覆鍊硷紝鐢卞鎴风鎻愪緵锛屽苟涓斿鎴风鍜屾湇鍔″櫒閮戒細浣跨敤锛屼互閬垮厤鐢ㄦ槑鏂囨枃鏈��
+// // 杩欎娇寰楀弻鏂归兘鍙互鏌ラ獙瀵规柟鐨勮韩浠斤紝骞跺娑堟伅鐨勫畬鏁存�ф彁渚涗竴浜涗繚鎶�
+// //String cNonce = authHeader.getCNonce();
+
+// // nonce璁℃暟鍣紝鏄竴涓�16杩涘埗鐨勬暟鍊硷紝琛ㄧず鍚屼竴nonce涓嬪鎴风鍙戦�佸嚭璇锋眰鐨勬暟閲�
+// int nc = 1;
+// String ncStr = new DecimalFormat("00000000").format(nc);
+// // String ncStr = new DecimalFormat("00000000").format(Integer.parseInt(nc + "", 16));
+// MessageDigest messageDigest = MessageDigest.getInstance(DEFAULT_ALGORITHM);
+// String A1 = username + ":" + realm + ":" + "12345678";
+// String A2 = "REGISTER" + ":" + uri;
+// byte mdbytes[] = messageDigest.digest(A1.getBytes());
+// String HA1 = toHexString(mdbytes);
+// System.out.println("A1: " + A1);
+// System.out.println("A2: " + A2);
+
+// mdbytes = messageDigest.digest(A2.getBytes());
+// String HA2 = toHexString(mdbytes);
+// System.out.println("HA1: " + HA1);
+// System.out.println("HA2: " + HA2);
+// String cnonce = "0a4f113b";
+// System.out.println("nonce: " + nonce);
+// System.out.println("nc: " + ncStr);
+// System.out.println("cnonce: " + cnonce);
+// System.out.println("qop: " + qop);
+// String KD = HA1 + ":" + nonce;
+
+// if (qop != null && qop.equals("auth") ) {
+// if (nc != -1) {
+// KD += ":" + ncStr;
+// }
+// if (cnonce != null) {
+// KD += ":" + cnonce;
+// }
+// KD += ":" + qop;
+// }
+// KD += ":" + HA2;
+// System.out.println("KD: " + KD);
+// mdbytes = messageDigest.digest(KD.getBytes());
+// String mdString = toHexString(mdbytes);
+// System.out.println("mdString: " + mdString);
+// String response = "4f0507d4b87cdecff04bdaf4c96348f0";
+// System.out.println("response: " + response);
+// }
}
--
Gitblit v1.8.0