import org.springside.modules.utils.Encodes; //导入依赖的package包/类
/**
 * 获取微信JS-SDK使用权限签名。
 * 
 * @param url
 * @return
 * 
 * @since 1.0.0
 * @version 1.0.0
 */
public static String getJsApiSignature(final String url) {
    String jsApiTicket = getJsApiTicket();
    String noncestr = RandomStringUtils.randomAlphanumeric(16);
    long timestamp = System.currentTimeMillis() / 1000;

    String temp = String.format("jsapi_ticket=%s&noncestr=%s&timestamp=%s&url=%s", jsApiTicket, noncestr, timestamp, url);

    // DigestUtils.sha1(temp.getBytes())
    byte[] shaSignature = Digests.sha1(temp.getBytes());
    String signature = Encodes.encodeHex(shaSignature);

    Map<String, Object> data = new HashMap<>(4);
    data.put("appId", appId);
    data.put("nonceStr", noncestr);
    data.put("timestamp", timestamp);
    data.put("signature", signature);

    return jsonMapper.toJson(data);
}
 

import org.springside.modules.utils.Encodes; //导入依赖的package包/类
/**
 * 设置让浏览器弹出下载对话框的Header.
 * 
 * @param fileName 下载后的文件名.
 */
public static void setFileDownloadHeader(HttpServletRequest request, HttpServletResponse response, String fileName) {
	// 中文文件名支持
	String encodedfileName = null;
	// 替换空格，否则firefox下有空格文件名会被截断,其他浏览器会将空格替换成+号
	encodedfileName = fileName.trim().replaceAll(" ", "_");
	String agent = request.getHeader("User-Agent");
	boolean isMSIE = (agent != null && agent.toUpperCase().indexOf("MSIE") != -1);
	if (isMSIE) {
		encodedfileName = Encodes.urlEncode(fileName);
	} else {
		encodedfileName = new String(fileName.getBytes(), Charsets.ISO_8859_1);
	}

	response.setHeader(HttpHeaders.CONTENT_DISPOSITION, "attachment; filename=\"" + encodedfileName + "\"");

}
 

import org.springside.modules.utils.Encodes; //导入依赖的package包/类
@Test
public void aesWithIV() {
	byte[] key = Cryptos.generateAesKey();
	byte[] iv = Cryptos.generateIV();
	assertThat(key).hasSize(16);
	assertThat(iv).hasSize(16);
	String input = "foo message";

	byte[] encryptResult = Cryptos.aesEncrypt(input.getBytes(), key, iv);
	String descryptResult = Cryptos.aesDecrypt(encryptResult, key, iv);

	System.out.println("aes key in hex            :" + Encodes.encodeHex(key));
	System.out.println("iv in hex                 :" + Encodes.encodeHex(iv));
	System.out.println("aes encrypt in hex result :" + Encodes.encodeHex(encryptResult));
	assertThat(descryptResult).isEqualTo(input);
}
 

import org.springside.modules.utils.Encodes; //导入依赖的package包/类
/**
 * 认证回调函数,登录时调用.
 */
@Override
protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authcToken) throws AuthenticationException {
	UsernamePasswordToken token = (UsernamePasswordToken) authcToken;
	User user = accountService.findUserByLoginName(token.getUsername());
	if (user != null) {
		byte[] salt = Encodes.decodeHex(user.getSalt());
		return new SimpleAuthenticationInfo(new ShiroUser(user.getId(), user.getLoginName(), user.getName()),
				user.getPassword(), ByteSource.Util.bytes(salt), getName());
	} else {
		return null;
	}
}
 

import org.springside.modules.utils.Encodes; //导入依赖的package包/类
/**
 * 设定安全的密码，生成随机的salt并经过1024次 sha-1 hash
 */
private void entryptPassword(User user) {
	byte[] salt = Digests.generateSalt(SALT_SIZE);
	user.setSalt(Encodes.encodeHex(salt));

	byte[] hashPassword = Digests.sha1(user.getPlainPassword().getBytes(), salt, HASH_INTERATIONS);
	user.setPassword(Encodes.encodeHex(hashPassword));
}
 

import org.springside.modules.utils.Encodes; //导入依赖的package包/类
@Test
public void mac() {
	String input = "foo message";

	// key可为任意字符串
	// byte[] key = "a foo key".getBytes();
	byte[] key = Cryptos.generateHmacSha1Key();
	assertThat(key).hasSize(20);

	byte[] macResult = Cryptos.hmacSha1(input.getBytes(), key);
	System.out.println("hmac-sha1 key in hex      :" + Encodes.encodeHex(key));
	System.out.println("hmac-sha1 in hex result   :" + Encodes.encodeHex(macResult));

	assertThat(Cryptos.isMacValid(macResult, input.getBytes(), key)).isTrue();
}
 

import org.springside.modules.utils.Encodes; //导入依赖的package包/类
@Test
public void aes() {
	byte[] key = Cryptos.generateAesKey();
	assertThat(key).hasSize(16);
	String input = "foo message";

	byte[] encryptResult = Cryptos.aesEncrypt(input.getBytes(), key);
	String descryptResult = Cryptos.aesDecrypt(encryptResult, key);

	System.out.println("aes key in hex            :" + Encodes.encodeHex(key));
	System.out.println("aes encrypt in hex result :" + Encodes.encodeHex(encryptResult));
	assertThat(descryptResult).isEqualTo(input);
}
 

import org.springside.modules.utils.Encodes; //导入依赖的package包/类
@Test
public void digestString() {
	String input = "user";
	byte[] sha1Result = Digests.sha1(input.getBytes());
	System.out.println("sha1 in hex result                               :" + Encodes.encodeHex(sha1Result));

	byte[] salt = Digests.generateSalt(8);
	System.out.println("salt in hex                                      :" + Encodes.encodeHex(salt));
	sha1Result = Digests.sha1(input.getBytes(), salt);
	System.out.println("sha1 in hex result with salt                     :" + Encodes.encodeHex(sha1Result));

	sha1Result = Digests.sha1(input.getBytes(), salt, 1024);
	System.out.println("sha1 in hex result with salt and 1024 interations:" + Encodes.encodeHex(sha1Result));

}
 

import org.springside.modules.utils.Encodes; //导入依赖的package包/类
@Test
public void digestFile() throws IOException {
	Resource resource = new ClassPathResource("/logback.xml");
	byte[] md5result = Digests.md5(resource.getInputStream());
	byte[] sha1result = Digests.sha1(resource.getInputStream());
	System.out.println("md5: " + Encodes.encodeHex(md5result));
	System.out.println("sha1:" + Encodes.encodeHex(sha1result));
}
 

import org.springside.modules.utils.Encodes; //导入依赖的package包/类
/**
 * 认证回调函数,登录时调用.
 */
@Override
protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authcToken) throws AuthenticationException {
	UsernamePasswordToken token = (UsernamePasswordToken) authcToken;
	User user = accountService.findUserByLoginName(token.getUsername());
	
	ServletRequest request = ((WebSubject)SecurityUtils.getSubject()).getServletRequest();
	HttpServletRequest trequest = (HttpServletRequest) request;   
	String captchaID = trequest.getSession().getId();     
	Boolean flag = false;
	flag = captchaService.validateResponseForID(captchaID, request.getParameter("j_captcha"));   
	if (flag.booleanValue()) { 
	    logger.debug("验证码正确");
		if (user != null) {
			if(isNomal(user))
			{
			byte[] salt = Encodes.decodeHex(user.getSalt());
			return new SimpleAuthenticationInfo(new ShiroUser(user.getId(), user.getLoginName(), user.getName()),
					user.getPassword(), ByteSource.Util.bytes(salt), getName());
			}
			return null;
		} else {
			return null;
		}
	}else{
		logger.debug("验证码错误");
    	return null;
	}

}
 

import org.springside.modules.utils.Encodes; //导入依赖的package包/类
/**
 * 认证回调函数,登录时调用.
 */
@Override
protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authcToken) throws AuthenticationException {
	UsernamePasswordToken token = (UsernamePasswordToken) authcToken;
	User user = accountService.findUserByLoginName(token.getUsername());
	System.out.println("user name:"+user.getName());
	if (user != null) {
		byte[] salt = Encodes.decodeHex(user.getSalt());
		return new SimpleAuthenticationInfo(new ShiroUser(user.getId(), user.getLoginName(), user.getName()),
				user.getPassword(), ByteSource.Util.bytes(salt), getName());
	} else {
		return null;
	}
}
 

import org.springside.modules.utils.Encodes; //导入依赖的package包/类
/**
 * 设定安全的密码，生成随机的salt并经过1024次 sha-1 hash
 */
private void entryptPassword(User user) {
    byte[] salt = Digests.generateSalt(SALT_SIZE);
    user.setSalt(Encodes.encodeHex(salt));

    byte[] hashPassword = Digests.sha1(user.getPlainPassword().getBytes(), salt, HASH_INTERATIONS);
    user.setPassword(Encodes.encodeHex(hashPassword));
}
 

import org.springside.modules.utils.Encodes; //导入依赖的package包/类
/**
 * 客户端对Http Basic验证的 Header进行编码.
 */
public static String encodeHttpBasic(String userName, String password) {
	String encode = userName + ":" + password;
	return "Basic " + Encodes.encodeBase64(encode.getBytes());
}