private void writeResponse(HttpServletResponse resp, String response, int responseCode) { try { resp.setContentType("text/javascript; charset=UTF-8"); resp.setStatus(responseCode); resp.getWriter().print(response); } catch (IOException e) { LOG.trace("输出API响应IO错误: " + e); } catch (Exception e) { if (!(e instanceof IllegalStateException)) { LOG.error("输出API响应时出现了未知错误", e); } } }
public String getSerializedApiError(ApiException ex) { String responseText = null; if (ex == null) { return "{ \"errorCode\" : " + HttpServletResponse.SC_INTERNAL_SERVER_ERROR + ", \"errorText\" : \"发生了内部错误\" }"; } try { responseText = getSerializedApiError(ex.getErrorCode().getHttpCode(), ex.getMessage()); } catch (Exception e) { LOG.error("响应HTTP请求出现错误", e); } return responseText; }
private void processRequest(HttpServletRequest req, HttpServletResponse resp) { StringBuffer auditTrailSb = new StringBuffer(); auditTrailSb.append(StringPool.SPACE + req.getRemoteAddr()); auditTrailSb.append(" -- " + req.getMethod() + " -- "); Map<String, Object[]> params = Maps.newHashMap(); params.putAll(req.getParameterMap()); Map<String, String> cookies = cookiesToMap(req.getCookies()); String sessionKey = cookies.get(ApiConstants.SESSION_KEY); String reqStr = auditTrailSb.toString(); LOG.debug("===START=== " + reqStr); try { Object[] commandObj = params.get("command"); if (commandObj != null && StringUtils.isNotBlank((String) commandObj[0])) { String command = (String) commandObj[0]; if (ApiConstants.LOGOUT_COMMAND.equalsIgnoreCase(command)) { _apiServer.userLogout(sessionKey); auditTrailSb.append("command=" + ApiConstants.LOGOUT_COMMAND); auditTrailSb.append(StringPool.SPACE + HttpServletResponse.SC_OK); writeResponse(resp, getLogoutResponse(), HttpServletResponse.SC_OK); return; } else if (ApiConstants.LOGIN_COMMAND.equalsIgnoreCase(command)) { auditTrailSb.append("command=" + ApiConstants.LOGIN_COMMAND); String[] username = (String[]) params.get("username"); String[] password = (String[]) params.get("password"); if (username != null) { String pwd = ((password == null) ? null : password[0]); try { String loginSessionKey = _apiServer.userLogin(username[0], pwd); writeResponse( resp, "{\" " + ApiConstants.SESSION_KEY + " \":\"" + loginSessionKey + "\"}", 200); return; } catch (ApolloAuthenticationException e) { auditTrailSb.append(e.getMessage() != null ? e.getMessage() : "无法验证用户,检查用户名/密码是正确的"); String serializedResponse = getSerializedApiError( ApiErrorCode.ACCOUNT_ERROR.getHttpCode(), e.getMessage() != null ? e.getMessage() : "无法验证用户,检查用户名/密码是正确的"); writeResponse(resp, serializedResponse, ApiErrorCode.ACCOUNT_ERROR.getHttpCode()); return; } } } } else { auditTrailSb.append(StringPool.SPACE + HttpServletResponse.SC_BAD_REQUEST + " command为空"); String serializedResponse = getSerializedApiError(HttpServletResponse.SC_BAD_REQUEST, "command为空"); writeResponse(resp, serializedResponse, HttpServletResponse.SC_BAD_REQUEST); return; } if (_apiServer.verifyUser(sessionKey)) { // 验证sessionKey是否为null if (StringUtils.isNotBlank(sessionKey)) { params.put(ApiConstants.SESSION_KEY, new String[] {sessionKey}); } if (_apiServer.verifyRequest(params)) { params.put(ApiConstants.HTTP_METHOD, new String[] {req.getMethod()}); String response; if (req.getContentType() != null && req.getContentType().toLowerCase(Locale.ENGLISH).startsWith(MULTIPART)) { // 包含文件 Map<String, String> fileMap = UploadFile.uploadFile(req, WORKPATH); response = _apiServer.handleFileRequest(params, auditTrailSb, fileMap); } else { response = _apiServer.handleRequest(params, auditTrailSb); } writeResponse(resp, response != null ? response : "", HttpServletResponse.SC_OK); } else { auditTrailSb.append( StringPool.SPACE + HttpServletResponse.SC_UNAUTHORIZED + " 无法验证用户凭证或没有命令执行权限"); String serializedResponse = getSerializedApiError(HttpServletResponse.SC_UNAUTHORIZED, "无法验证用户凭证或没有命令执行权限"); writeResponse(resp, serializedResponse, HttpServletResponse.SC_UNAUTHORIZED); } } else { auditTrailSb.append( StringPool.SPACE + HttpServletResponse.SC_UNAUTHORIZED + " sessionKey无效"); String serializedResponse = getSerializedApiError(HttpServletResponse.SC_UNAUTHORIZED, "sessionKey无效"); writeResponse(resp, serializedResponse, HttpServletResponse.SC_UNAUTHORIZED); } } catch (ApiException e) { String serializedResponseText = getSerializedApiError(e); resp.setHeader("X-Description", e.getMessage()); writeResponse(resp, serializedResponseText, e.getErrorCode().getHttpCode()); auditTrailSb.append(StringPool.SPACE + e.getErrorCode() + StringPool.SPACE + e.getMessage()); } catch (Exception e) { LOG.error("响应出现未知异常", e); auditTrailSb.append("响应出现未知异常"); } finally { ACCESS_LOG.info(auditTrailSb.toString()); LOG.debug("===END=== " + reqStr); } }