using Microsoft.AspNetCore.Mvc;
|
using System;
|
using System.Collections.Generic;
|
using System.Net.Http;
|
using System.Security.Cryptography;
|
using Newtonsoft.Json;
|
using System.Text;
|
using System.Net;
|
using Microsoft.AspNetCore.DataProtection;
|
using Microsoft.Extensions.Hosting;
|
|
namespace NewPdaSqlServer.Controllers
|
{
|
[Route("api/[controller]")]
|
[ApiController]
|
public class AuthController : ControllerBase
|
{
|
// 以下常量建议放在appsettings.json配置文件中
|
private const string APPID = "303233EF-AC39-40C1-8364-AC989C6258A5";
|
private const string SECRET = "30b41949-bcfb-48f8-9847-feb6e043fe72";
|
// private const string SPK = "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApobID/gwmD9OofMG1gEcE94NCMeTYUq1cam/7ADZmxHCVpF143GaHWhqDdY0TTVbcUElsQ71DzAG2j3itWlIJBK5fVGwCo3sPpAvUDdKMh+Uivcp7yxdy/IDRA/PS4JARuEyM4cVJLhIOU2KnSlbIkheeoDkDgfaxu9kKrWnozJLiYraVTVDz9PdRX7fQdP+Zu/xB9txAGw4kvOm9HwgrzaSRdZEhisTJ5yyoNW/dLXtWKXA0cKhKOOIFu12TOrv/It6hl1ShTUuy79Pa51M9Oc2dEfVs1tluNXPWo1uFXQbBaJxdqZEJJlK7iW2uQFIao2O4XFHYThwy2+6116LtwIDAQAB";
|
private const string HOST = "http://192.168.1.149:8099";
|
|
private const string SPK = @"-----BEGIN PUBLIC KEY-----
|
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApobID/gwmD9OofMG1gEc
|
E94NCMeTYUq1cam/7ADZmxHCVpF143GaHWhqDdY0TTVbcUElsQ71DzAG2j3itWlI
|
JBK5fVGwCo3sPpAvUDdKMh+Uivcp7yxdy/IDRA/PS4JARuEyM4cVJLhIOU2KnSlb
|
IkheeoDkDgfaxu9kKrWnozJLiYraVTVDz9PdRX7fQdP+Zu/xB9txAGw4kvOm9Hwg
|
rzaSRdZEhisTJ5yyoNW/dLXtWKXA0cKhKOOIFu12TOrv/It6hl1ShTUuy79Pa51M
|
9Oc2dEfVs1tluNXPWo1uFXQbBaJxdqZEJJlK7iW2uQFIao2O4XFHYThwy2+6116L
|
twIDAQAB
|
-----END PUBLIC KEY-----";
|
|
[HttpGet("token")]
|
public ActionResult<string> GetToken()
|
{
|
var http = new HttpManager();
|
var headers = new Dictionary<string, string>
|
{
|
["appid"] = APPID,
|
["secret"] = RsaHelper.Encrypt(SECRET, SPK)
|
};
|
|
try
|
{
|
var response = http.PostDataSSL($"{HOST}/api/ec/dev/auth/applytoken",
|
new Dictionary<string, string>(), headers);
|
|
if (!string.IsNullOrEmpty(response))
|
{
|
var res = JsonConvert.DeserializeObject<dynamic>(response);
|
if (res.status == "true")
|
{
|
return res.token.ToString();
|
}
|
}
|
return BadRequest("Failed to get token");
|
}
|
catch (Exception ex)
|
{
|
// 建议使用ILogger记录日志
|
return StatusCode(500, ex.Message);
|
}
|
}
|
|
|
[HttpPost("getUserId")]
|
public ActionResult<string> GetUserId()
|
{
|
var http = new HttpManager();
|
var tokenResult = http.GetToken();
|
if (tokenResult is not null)
|
{
|
Uri url = new Uri($"{HOST}/api/T100/GetSecretUserId");
|
return http.GetOaKqInfo(url, tokenResult, "DQ000344");
|
}
|
return BadRequest("无法获取有效Token");
|
}
|
|
|
|
[HttpPost("createWorkflow")]
|
public ActionResult<string> CreateWorkflowRequest([FromBody] WorkflowRequestDto request)
|
{
|
try
|
{
|
// 加密用户ID
|
var encryptedUserId = RsaHelper.Encrypt(request.UserId, SPK);
|
var token = GetToken().ToString();
|
// 设置请求头
|
var headers = new Dictionary<string, string>
|
{
|
["token"] = token,
|
["appid"] = APPID,
|
["userid"] = encryptedUserId
|
};
|
|
// 构建请求参数
|
var parameters = new Dictionary<string, string>
|
{
|
["mainData"] = JsonConvert.SerializeObject(request.MainData),
|
["workflowId"] = "",
|
["requestName"] = request.RequestName
|
};
|
|
// 添加可选参数
|
if (request.DetailData != null)
|
parameters.Add("detailData", JsonConvert.SerializeObject(request.DetailData));
|
|
if (request.OtherParams != null)
|
parameters.Add("otherParams", JsonConvert.SerializeObject(request.OtherParams));
|
|
// 发送请求
|
var response = new HttpManager().PostDataSSL(
|
$"{HOST}/api/workflow/paService/doCreateRequest",
|
parameters,
|
headers);
|
|
dynamic res = JsonConvert.DeserializeObject(response);
|
if (res.code == "SUCCESS")
|
return Ok(res.data.requestid.ToString());
|
|
return BadRequest($"创建失败：{res.errMsg}");
|
}
|
catch (Exception ex)
|
{
|
return StatusCode(500, $"系统异常：{ex.Message}");
|
}
|
}
|
}
|
|
public static class RsaHelper
|
{
|
public static string Encrypt(string plainText, string publicKeyPem)
|
{
|
// 将PEM格式的公钥转换为XML格式
|
var rsa = RSA.Create();
|
rsa.ImportFromPem(publicKeyPem); // 使用.NET 5+ 内置PEM解析方法
|
|
var parameters = rsa.ExportParameters(false);
|
string publicKeyXml = $"<RSAKeyValue><Modulus>{Convert.ToBase64String(parameters.Modulus)}</Modulus><Exponent>{Convert.ToBase64String(parameters.Exponent)}</Exponent></RSAKeyValue>";
|
|
using var rsaProvider = new RSACryptoServiceProvider();
|
rsaProvider.FromXmlString(publicKeyXml); // 使用转换后的XML格式公钥
|
|
var data = Encoding.UTF8.GetBytes(plainText);
|
var encrypted = rsaProvider.Encrypt(data, false);
|
return Convert.ToBase64String(encrypted);
|
}
|
}
|
|
public class HttpManager
|
{
|
private readonly HttpClient _client = new HttpClient();
|
|
// 以下常量建议放在appsettings.json配置文件中
|
private const string APPID = "303233EF-AC39-40C1-8364-AC989C6258A5";
|
private const string SECRET = "30b41949-bcfb-48f8-9847-feb6e043fe72";
|
// private const string SPK = "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApobID/gwmD9OofMG1gEcE94NCMeTYUq1cam/7ADZmxHCVpF143GaHWhqDdY0TTVbcUElsQ71DzAG2j3itWlIJBK5fVGwCo3sPpAvUDdKMh+Uivcp7yxdy/IDRA/PS4JARuEyM4cVJLhIOU2KnSlbIkheeoDkDgfaxu9kKrWnozJLiYraVTVDz9PdRX7fQdP+Zu/xB9txAGw4kvOm9HwgrzaSRdZEhisTJ5yyoNW/dLXtWKXA0cKhKOOIFu12TOrv/It6hl1ShTUuy79Pa51M9Oc2dEfVs1tluNXPWo1uFXQbBaJxdqZEJJlK7iW2uQFIao2O4XFHYThwy2+6116LtwIDAQAB";
|
private const string HOST = "http://192.168.1.149:8099";
|
|
private const string SPK = @"-----BEGIN PUBLIC KEY-----
|
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApobID/gwmD9OofMG1gEc
|
E94NCMeTYUq1cam/7ADZmxHCVpF143GaHWhqDdY0TTVbcUElsQ71DzAG2j3itWlI
|
JBK5fVGwCo3sPpAvUDdKMh+Uivcp7yxdy/IDRA/PS4JARuEyM4cVJLhIOU2KnSlb
|
IkheeoDkDgfaxu9kKrWnozJLiYraVTVDz9PdRX7fQdP+Zu/xB9txAGw4kvOm9Hwg
|
rzaSRdZEhisTJ5yyoNW/dLXtWKXA0cKhKOOIFu12TOrv/It6hl1ShTUuy79Pa51M
|
9Oc2dEfVs1tluNXPWo1uFXQbBaJxdqZEJJlK7iW2uQFIao2O4XFHYThwy2+6116L
|
twIDAQAB
|
-----END PUBLIC KEY-----";
|
|
public string PostDataSSL(string url,
|
Dictionary<string, string> parameters,
|
Dictionary<string, string> headers)
|
{
|
var request = new HttpRequestMessage(HttpMethod.Post, url);
|
|
foreach (var header in headers)
|
{
|
request.Headers.Add(header.Key, header.Value);
|
}
|
|
// 如果需要表单参数
|
if (parameters.Count > 0)
|
{
|
request.Content = new FormUrlEncodedContent(parameters);
|
}
|
|
var response = _client.SendAsync(request).Result;
|
return response.Content.ReadAsStringAsync().Result;
|
}
|
|
public string GetToken()
|
{
|
|
|
var http = new HttpManager();
|
var headers = new Dictionary<string, string>
|
{
|
["appid"] = APPID,
|
["secret"] = RsaHelper.Encrypt(SECRET, SPK)
|
};
|
|
try
|
{
|
var response = http.PostDataSSL($"{HOST}/api/ec/dev/auth/applytoken",
|
new Dictionary<string, string>(), headers);
|
|
if (!string.IsNullOrEmpty(response))
|
{
|
var res = JsonConvert.DeserializeObject<dynamic>(response);
|
if (res.status == "true")
|
{
|
return res.token.ToString();
|
}
|
}
|
return "token不存在！";
|
}
|
catch (Exception ex)
|
{
|
// 建议使用ILogger记录日志
|
return ex.Message;
|
}
|
}
|
|
public string GetOaKqInfo(Uri url, string token, string userId)
|
{
|
try
|
{
|
ServicePointManager.ServerCertificateValidationCallback += (s, cert, chain, sslPolicyErrors) => true;
|
ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12;
|
|
var request = WebRequest.Create(url) as HttpWebRequest;
|
request.Method = "POST";
|
request.Timeout = 20000; // 20秒超时
|
request.ContentType = "application/x-www-form-urlencoded; charset=utf-8"; // 明确指定编码
|
|
// 添加调试头信息
|
request.Headers.Add("appid", APPID);
|
request.Headers.Add("token", token);
|
request.Headers.Add("userId", userId);
|
|
// 构建带时区的日期参数
|
var postData = new StringBuilder();
|
var dateParam = DateTime.Now.AddDays(-1).ToString("yyyy-MM-ddTHH:mm:sszzz");
|
postData.AppendFormat("KQSDATE={0}&KQEDATE={1}",
|
Uri.EscapeDataString(dateParam),
|
Uri.EscapeDataString(dateParam));
|
|
byte[] byteData = Encoding.UTF8.GetBytes(postData.ToString()); // 改用UTF8编码
|
|
// 更完善的请求写入
|
using (var stream = request.GetRequestStream())
|
{
|
stream.Write(byteData, 0, byteData.Length);
|
}
|
|
// 处理HTTP错误状态码
|
using (var response = request.GetResponse() as HttpWebResponse)
|
{
|
if (response.StatusCode != HttpStatusCode.OK)
|
{
|
throw new WebException($"服务器返回错误状态码: {(int)response.StatusCode} {response.StatusDescription}");
|
}
|
|
using (var stream = response.GetResponseStream())
|
using (var reader = new StreamReader(stream, Encoding.UTF8))
|
{
|
return reader.ReadToEnd();
|
}
|
}
|
}
|
catch (WebException ex) when (ex.Response is HttpWebResponse response)
|
{
|
// 记录详细错误信息
|
var errorStream = response.GetResponseStream();
|
using (var reader = new StreamReader(errorStream))
|
{
|
string errorDetails = reader.ReadToEnd();
|
throw new Exception($"请求失败 [Status: {response.StatusCode}]: {errorDetails}", ex);
|
}
|
}
|
catch (Exception ex)
|
{
|
throw new Exception($"请求异常: {ex.Message}", ex);
|
}
|
}
|
}
|
|
// 新增DTO类
|
public class WorkflowRequestDto
|
{
|
/// <summary>
|
/// 用户认证令牌
|
/// </summary>
|
public string Token { get; set; }
|
|
/// <summary>
|
/// 原始用户ID（加密前）
|
/// </summary>
|
public string UserId { get; set; }
|
|
/// <summary>
|
/// 流程ID（必填）
|
/// </summary>
|
public int WorkflowId { get; set; }
|
|
/// <summary>
|
/// 流程标题（必填）
|
/// </summary>
|
public string RequestName { get; set; }
|
|
/// <summary>
|
/// 主表数据（必填）
|
/// </summary>
|
public Dictionary<string, object> MainData { get; set; }
|
|
/// <summary>
|
/// 明细表数据（选填）
|
/// </summary>
|
public Dictionary<string, object> DetailData { get; set; }
|
|
/// <summary>
|
/// 其他参数（选填）
|
/// </summary>
|
public Dictionary<string, object> OtherParams { get; set; }
|
}
|
}
|
