union-ark-web 1.0.1

package/ark-control/pom.xml

@@ -0,0 +1,142 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+
+    <parent>
+        <groupId>org.springframework.boot</groupId>
+        <artifactId>spring-boot-starter-parent</artifactId>
+        <version>1.5.22.RELEASE</version>
+        <relativePath/>
+    </parent>
+
+    <groupId>com.union</groupId>
+    <artifactId>ark-control</artifactId>
+    <version>1.0.0</version>
+    <name>ark-control Dubbo provider</name>
+
+    <properties>
+        <java.version>1.8</java.version>
+        <mysql.version>8.0.33</mysql.version>
+    </properties>
+
+    <dependencies>
+        <dependency>
+            <groupId>com.union</groupId>
+            <artifactId>ark-control-facade</artifactId>
+            <version>1.0.0</version>
+        </dependency>
+        <dependency>
+            <groupId>com.alibaba</groupId>
+            <artifactId>dubbo</artifactId>
+            <version>2.6.9</version>
+            <exclusions>
+                <exclusion><groupId>org.jboss.netty</groupId><artifactId>netty</artifactId></exclusion>
+                <exclusion><groupId>org.springframework</groupId><artifactId>spring</artifactId></exclusion>
+                <exclusion><groupId>org.slf4j</groupId><artifactId>slf4j-log4j12</artifactId></exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>io.netty</groupId><artifactId>netty-all</artifactId><version>4.1.25.Final</version>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.curator</groupId><artifactId>curator-framework</artifactId><version>2.12.0</version>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.zookeeper</groupId><artifactId>zookeeper</artifactId><version>3.4.13</version>
+            <exclusions>
+                <exclusion><groupId>io.netty</groupId><artifactId>netty</artifactId></exclusion>
+                <exclusion><groupId>org.slf4j</groupId><artifactId>slf4j-log4j12</artifactId></exclusion>
+                <exclusion><groupId>log4j</groupId><artifactId>log4j</artifactId></exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-web</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-jdbc</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-data-redis</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.mybatis.spring.boot</groupId>
+            <artifactId>mybatis-spring-boot-starter</artifactId>
+            <version>1.3.2</version>
+        </dependency>
+        <dependency>
+            <groupId>com.mysql</groupId>
+            <artifactId>mysql-connector-j</artifactId>
+            <version>${mysql.version}</version>
+            <scope>runtime</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-test</artifactId>
+            <scope>test</scope>
+        </dependency>
+    </dependencies>
+
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>org.springframework.boot</groupId>
+                <artifactId>spring-boot-maven-plugin</artifactId>
+                <configuration>
+                    <mainClass>com.union.control.ArkControlApplication</mainClass>
+                </configuration>
+            </plugin>
+        </plugins>
+    </build>
+
+    <profiles>
+        <profile>
+            <id>local-sensitive-compat</id>
+            <activation>
+                <activeByDefault>true</activeByDefault>
+            </activation>
+            <dependencies>
+                <dependency>
+                    <groupId>org.projectlombok</groupId>
+                    <artifactId>lombok</artifactId>
+                    <version>1.18.8</version>
+                    <scope>provided</scope>
+                </dependency>
+                <dependency>
+                    <groupId>commons-codec</groupId>
+                    <artifactId>commons-codec</artifactId>
+                </dependency>
+                <dependency>
+                    <groupId>com.alibaba</groupId>
+                    <artifactId>fastjson</artifactId>
+                    <version>1.2.83</version>
+                </dependency>
+            </dependencies>
+            <build>
+                <plugins>
+                    <plugin>
+                        <groupId>org.codehaus.mojo</groupId>
+                        <artifactId>build-helper-maven-plugin</artifactId>
+                        <version>3.5.0</version>
+                        <executions>
+                            <execution>
+                                <id>add-local-sensitive-compat</id>
+                                <phase>generate-sources</phase>
+                                <goals><goal>add-source</goal></goals>
+                                <configuration>
+                                    <sources>
+                                        <source>src/local-mock/java</source>
+                                    </sources>
+                                </configuration>
+                            </execution>
+                        </executions>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+    </profiles>
+
+</project>

package/ark-control/src/local-mock/java/com/epcc/commons/securityproxy/api/SecurityResult.java

@@ -0,0 +1,14 @@
+package com.epcc.commons.securityproxy.api;
+
+/** Local compile-time compatibility stub. Production supplies this class. */
+public final class SecurityResult {
+    private final byte[] content;
+
+    public SecurityResult(byte[] content) {
+        this.content = content;
+    }
+
+    public byte[] getContent() {
+        return content;
+    }
+}

package/ark-control/src/local-mock/java/com/epcc/commons/securityproxy/api/SymmetricalSecurityService.java

@@ -0,0 +1,11 @@
+package com.epcc.commons.securityproxy.api;
+
+import com.epcc.dubbo.result.Result;
+
+/** Local compile-time compatibility stub. Production supplies this interface. */
+public interface SymmetricalSecurityService {
+    enum Algorithm { AES256 }
+
+    Result<SecurityResult> encryptByFixedKey(Algorithm algorithm, byte[] plaintext);
+    Result<SecurityResult> decryptByFixedKey(Algorithm algorithm, byte[] ciphertext);
+}

package/ark-control/src/local-mock/java/com/epcc/dubbo/result/Result.java

@@ -0,0 +1,29 @@
+package com.epcc.dubbo.result;
+
+/** Local compile-time compatibility stub. Production supplies this class. */
+public final class Result<T> {
+    private final boolean success;
+    private final T result;
+    private final String errorCode;
+    private final String errorMsg;
+
+    private Result(boolean success, T result, String errorCode, String errorMsg) {
+        this.success = success;
+        this.result = result;
+        this.errorCode = errorCode;
+        this.errorMsg = errorMsg;
+    }
+
+    public static <T> Result<T> success(T result) {
+        return new Result<>(true, result, null, null);
+    }
+
+    public static <T> Result<T> failure(String errorCode, String errorMsg) {
+        return new Result<>(false, null, errorCode, errorMsg);
+    }
+
+    public boolean isSuccess() { return success; }
+    public T getResult() { return result; }
+    public String getErrorCode() { return errorCode; }
+    public String getErrorMsg() { return errorMsg; }
+}

package/ark-control/src/local-mock/java/com/nucc/channel/ark/common/annotation/EnDecryptField.java

@@ -0,0 +1,16 @@
+package com.nucc.channel.ark.common.annotation;
+
+import org.springframework.stereotype.Component;
+
+import java.lang.annotation.ElementType;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import java.lang.annotation.Target;
+
+/** Local compatibility copy. Production keeps its existing annotation unchanged. */
+@Component
+@Retention(RetentionPolicy.RUNTIME)
+@Target(ElementType.FIELD)
+public @interface EnDecryptField {
+    String value() default "";
+}

package/ark-control/src/local-mock/java/com/nucc/channel/ark/common/annotation/EnDecryptFieldLong.java

@@ -0,0 +1,17 @@
+package com.nucc.channel.ark.common.annotation;
+
+import org.springframework.stereotype.Component;
+
+import java.lang.annotation.ElementType;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import java.lang.annotation.Target;
+
+/** Local compatibility copy. Production keeps its existing annotation unchanged. */
+@Component
+@Retention(RetentionPolicy.RUNTIME)
+@Target(ElementType.FIELD)
+public @interface EnDecryptFieldLong {
+    String value() default "";
+    int chunkSize() default 0;
+}

package/ark-control/src/local-mock/java/com/nucc/channel/ark/common/annotation/EnDecryptFieldWithTag.java

@@ -0,0 +1,16 @@
+package com.nucc.channel.ark.common.annotation;
+
+import org.springframework.stereotype.Component;
+
+import java.lang.annotation.ElementType;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import java.lang.annotation.Target;
+
+/** Local compatibility copy. Production keeps its existing annotation unchanged. */
+@Component
+@Retention(RetentionPolicy.RUNTIME)
+@Target(ElementType.FIELD)
+public @interface EnDecryptFieldWithTag {
+    String value() default "";
+}

package/ark-control/src/local-mock/java/com/nucc/channel/ark/common/exception/BaseDataErrorCode.java

@@ -0,0 +1,26 @@
+package com.nucc.channel.ark.common.exception;
+
+/** Local compatibility subset. Production uses its existing enum unchanged. */
+public enum BaseDataErrorCode implements ErrorCode {
+    SYSTEM_INNER_ERROR("SYSTEM_INNER_ERROR", "系统内部错误");
+
+    private final String code;
+    private final String desc;
+
+    BaseDataErrorCode(String code, String desc) {
+        this.code = code;
+        this.desc = desc;
+    }
+
+    @Override
+    public String getCode() { return code; }
+
+    @Override
+    public String getDesc() { return desc; }
+
+    @Override
+    public ErrorCode getErrorCode() { return this; }
+
+    @Override
+    public Throwable getThrowable() { return null; }
+}

package/ark-control/src/local-mock/java/com/nucc/channel/ark/common/exception/CheckException.java

@@ -0,0 +1,33 @@
+package com.nucc.channel.ark.common.exception;
+
+/** Local compatibility copy of the production checked exception contract. */
+public class CheckException extends Exception implements ErrorCode {
+    private final ErrorCode errorCode;
+    private final String extraMsg;
+
+    public CheckException(ErrorCode errorCode, String message) {
+        super(errorCode.getCode() + "|" + message);
+        this.errorCode = errorCode;
+        this.extraMsg = message;
+    }
+
+    @Override
+    public String getCode() {
+        return errorCode.getCode();
+    }
+
+    @Override
+    public String getDesc() {
+        return extraMsg;
+    }
+
+    @Override
+    public ErrorCode getErrorCode() {
+        return errorCode;
+    }
+
+    @Override
+    public Throwable getThrowable() {
+        return getCause();
+    }
+}

package/ark-control/src/local-mock/java/com/nucc/channel/ark/common/exception/ErrorCode.java

@@ -0,0 +1,9 @@
+package com.nucc.channel.ark.common.exception;
+
+/** Local compatibility subset. Production uses its existing interface. */
+public interface ErrorCode {
+    String getCode();
+    String getDesc();
+    ErrorCode getErrorCode();
+    Throwable getThrowable();
+}

package/ark-control/src/local-mock/java/com/nucc/channel/ark/common/redis/RedisCacheService.java

@@ -0,0 +1,131 @@
+package com.nucc.channel.ark.common.redis;
+
+import com.nucc.channel.ark.common.util.ResultUtil;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+import redis.clients.jedis.Jedis;
+import redis.clients.jedis.JedisSentinelPool;
+import redis.clients.jedis.Pipeline;
+import redis.clients.jedis.Response;
+
+/**
+ * 使用Jedis原生连接redis哨兵
+ *
+ */
+@Slf4j
+@Service
+public class RedisCacheService {
+
+    //模拟redis是否可用。 true:redis可用；false:redis不可用。
+    private static boolean redisFlag = true;
+
+    /**
+     * 用于xml注入
+     */
+    private JedisSentinelPool jedisSentinelPool;
+
+    public void setJedisSentinelPool(JedisSentinelPool jedisSentinelPool) {
+        this.jedisSentinelPool = jedisSentinelPool;
+    }
+
+    /**
+     * 设置redis指定过期时间
+     * @param key
+     * @param time
+     * @param value
+     * @return
+     */
+    public String setex(String key, int time, String value) {
+        try {
+            Jedis jedis = jedisSentinelPool.getResource();
+            String ret = jedis.setex(key,time,value);
+            log.info("setex result={}", ret);
+            jedis.close();
+            return ResultUtil.SUCCESS_RESULT;
+        } catch (Exception e) {
+            log.error("setex to redis error,key={},e={} ",key,e);
+        }
+        return ResultUtil.FAIL_RESULT;
+    }
+
+    public String get(String key) {
+        try {
+            if (!redisFlag){
+                log.info("mock get redis is not ok");
+                return ResultUtil.FAIL_RESULT;
+            }
+            Jedis jedis = jedisSentinelPool.getResource();
+            String ret = jedis.get(key);
+            jedis.close();
+            return ret;
+        } catch (Exception e) {
+            log.error("get from redis error,{} ", e);
+        }
+        return ResultUtil.FAIL_RESULT;
+    }
+
+    public String del(String key){
+        try {
+            Jedis jedis = jedisSentinelPool.getResource();
+            jedis.del(key);
+            jedis.close();
+            return ResultUtil.SUCCESS_RESULT;
+        } catch (Exception e) {
+            log.error("del to redis error,key={},e={} ",key,e);
+        }
+        return ResultUtil.FAIL_RESULT;
+    }
+
+    /**
+     * 设置redis 存储值+increment
+     * @param key
+     * @param increment
+     * @return
+     */
+    public Long incrBy(String key, Long increment) {
+        Long ret=Long.valueOf(-1L);
+        try {
+            Jedis jedis = jedisSentinelPool.getResource();
+
+            if(increment==null){
+                ret = jedis.incr(key);
+            }else{
+                ret = jedis.incrBy(key,increment);
+            }
+            log.info("incrBy result={}", ret);
+            jedis.close();
+            return ret;
+        } catch (Exception e) {
+            log.error("incrBy to redis error,key={},e={} ",key,e);
+        }
+        return ret;
+    }
+
+    /**
+     * 此方法大并发时不生效，system本地时间有误差,此方法兼容redis出现故障，故障时直接返回true
+     * @param key
+     * @param circle 周期 单位秒
+     * @param count 计数
+     * @return
+     */
+    public boolean ratelimit(String key, Long circle,Long count) {
+        Long now=System.currentTimeMillis();
+        Response<Long> exsitCnt=null;
+        try {
+            Jedis jedis = jedisSentinelPool.getResource();
+            Pipeline pipeline=jedis.pipelined();
+            pipeline.zadd(key,now,String.valueOf(now));
+            pipeline.zremrangeByScore(key,0,now-circle*1000);
+            exsitCnt=pipeline.zcard(key);
+            pipeline.expire(key,circle.intValue());
+            pipeline.sync();
+            log.info("exsitCnt result={}", exsitCnt.get());
+            jedis.close();
+            return exsitCnt==null?true:exsitCnt.get()<=count;
+        } catch (Exception e) {
+            log.error("ratelimit redis error,key={} ",key,e);
+        }
+        return true;
+    }
+}
+

package/ark-control/src/local-mock/java/com/nucc/channel/ark/common/util/Constant.java

@@ -0,0 +1,24 @@
+package com.nucc.channel.ark.common.util;
+
+import java.util.HashMap;
+import java.util.Map;
+
+/** Local compatibility subset. Production keeps its existing Constant class unchanged. */
+public final class Constant {
+    private Constant() {}
+
+    @SuppressWarnings("rawtypes")
+    public static final Map flagMap = new HashMap();
+
+    public static final String REGEX_MOBILE = "(?<!\\d)1[3-9]\\d{9}(?!\\d)";
+    public static final String REGEX_EMAIL = "[a-zA-Z0-9.%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}";
+    public static final String REGEX_TELEPHONE = "(?<!\\d)0\\d{2,3}-?\\d{7,8}(?!\\d)";
+    public static final String ENCRYPT_START = "#[";
+    public static final String ENCRYPT_END = "]";
+    public static final String REGEX_DECRYPT_TAG = "#\\[([^#\\]]*)\\]";
+    public static final String INTERCEPTOR_ITEMS =
+            "SensitiveDataDemoMapper,AnnounceAddressBookRecordMapper,ReformTrackMapper,"
+                    + "QuestionnaireMapper,"
+                    + "AnnounceMailSendMapper,AnnounceMailMapper,AppealMapper,TicketMapper,"
+                    + "NotifyMapper,MailDetailMapper";
+}

package/ark-control/src/local-mock/java/com/nucc/channel/ark/common/util/ResultUtil.java

@@ -0,0 +1,9 @@
+package com.nucc.channel.ark.common.util;
+
+/** Local compatibility copy of the production Redis result constants. */
+public final class ResultUtil {
+    public static final String SUCCESS_RESULT = "OK";
+    public static final String FAIL_RESULT = "FAIL_RESULT";
+
+    private ResultUtil() {}
+}

package/ark-control/src/local-mock/java/com/union/control/local/sensitive/LocalMockSensitiveProxy.java

@@ -0,0 +1,40 @@
+package com.union.control.local.sensitive;
+
+import com.epcc.commons.securityproxy.api.SecurityResult;
+import com.epcc.commons.securityproxy.api.SymmetricalSecurityService;
+import com.epcc.dubbo.result.Result;
+import com.nucc.channel.ark.common.exception.BaseDataErrorCode;
+import com.nucc.channel.ark.common.exception.CheckException;
+
+import java.nio.charset.StandardCharsets;
+import java.util.Arrays;
+
+/**
+ * Local-only stand-in for the unavailable sensitiveProxy AES256 service.
+ * It is intentionally recognizable and must never be used as production cryptography.
+ */
+public final class LocalMockSensitiveProxy implements SymmetricalSecurityService {
+    private static final byte[] PREFIX = "LOCAL_MOCK_ONLY:".getBytes(StandardCharsets.US_ASCII);
+
+    @Override
+    public Result<SecurityResult> encryptByFixedKey(Algorithm algorithm, byte[] plaintext) {
+        byte[] result = Arrays.copyOf(PREFIX, PREFIX.length + plaintext.length);
+        System.arraycopy(plaintext, 0, result, PREFIX.length, plaintext.length);
+        return Result.success(new SecurityResult(result));
+    }
+
+    @Override
+    public Result<SecurityResult> decryptByFixedKey(Algorithm algorithm, byte[] ciphertext) {
+        if (ciphertext.length < PREFIX.length) return invalid();
+        for (int i = 0; i < PREFIX.length; i++) {
+            if (ciphertext[i] != PREFIX[i]) return invalid();
+        }
+        return Result.success(new SecurityResult(
+                Arrays.copyOfRange(ciphertext, PREFIX.length, ciphertext.length)));
+    }
+
+    private static Result<SecurityResult> invalid() {
+        return Result.failure(BaseDataErrorCode.SYSTEM_INNER_ERROR.getCode(),
+                "Local mock ciphertext rejected");
+    }
+}

package/ark-control/src/local-mock/java/com/union/control/local/sensitive/LocalRedisCacheService.java

@@ -0,0 +1,45 @@
+package com.union.control.local.sensitive;
+
+import com.nucc.channel.ark.common.redis.RedisCacheService;
+import com.nucc.channel.ark.common.util.ResultUtil;
+
+import java.util.Map;
+import java.util.concurrent.ConcurrentHashMap;
+
+/** Local-only in-memory boundary for the production RedisCacheService contract. */
+public final class LocalRedisCacheService extends RedisCacheService {
+    private final Map<String, Value> values = new ConcurrentHashMap<>();
+
+    @Override
+    public String setex(String key, int time, String value) {
+        values.put(key, new Value(value, System.currentTimeMillis() + time * 1000L));
+        return ResultUtil.SUCCESS_RESULT;
+    }
+
+    @Override
+    public String get(String key) {
+        Value value = values.get(key);
+        if (value == null) return null;
+        if (value.expiresAt <= System.currentTimeMillis()) {
+            values.remove(key, value);
+            return null;
+        }
+        return value.text;
+    }
+
+    @Override
+    public String del(String key) {
+        values.remove(key);
+        return ResultUtil.SUCCESS_RESULT;
+    }
+
+    private static final class Value {
+        final String text;
+        final long expiresAt;
+
+        Value(String text, long expiresAt) {
+            this.text = text;
+            this.expiresAt = expiresAt;
+        }
+    }
+}

package/ark-control/src/local-mock/java/com/union/control/local/sensitive/LocalSensitiveHostConfiguration.java

@@ -0,0 +1,27 @@
+package com.union.control.local.sensitive;
+
+import com.nucc.channel.ark.common.redis.RedisCacheService;
+import com.union.control.mapper.interceptor.AESInterceptor;
+import org.mybatis.spring.boot.autoconfigure.ConfigurationCustomizer;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+
+/** Bridges this mock application's narrow component scan to production-compatible components. */
+@Configuration
+public class LocalSensitiveHostConfiguration {
+    @Bean
+    public RedisCacheService redisCacheService() {
+        return new LocalRedisCacheService();
+    }
+
+    @Bean
+    public AESInterceptor aesInterceptor() {
+        return new AESInterceptor();
+    }
+
+    @Bean
+    public ConfigurationCustomizer sensitiveInterceptorRegistration(
+            AESInterceptor interceptor) {
+        return configuration -> configuration.addInterceptor(interceptor);
+    }
+}

package/ark-control/src/local-mock/java/com/union/control/local/sensitive/LocalSensitiveProxyConfiguration.java

@@ -0,0 +1,16 @@
+package com.union.control.local.sensitive;
+
+import com.epcc.commons.securityproxy.api.SymmetricalSecurityService;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.context.annotation.Profile;
+
+/** Explicit local-only replacement for the unavailable production sensitiveProxy bean. */
+@Configuration
+@Profile({"default", "local-sensitive-mock"})
+public class LocalSensitiveProxyConfiguration {
+    @Bean(name = "sensitiveProxy")
+    public SymmetricalSecurityService localSensitiveProxy() {
+        return new LocalMockSensitiveProxy();
+    }
+}

package/ark-control/src/main/java/com/union/control/ArkControlApplication.java

@@ -0,0 +1,17 @@
+package com.union.control;
+
+import org.mybatis.spring.annotation.MapperScan;
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.context.annotation.ImportResource;
+import org.springframework.scheduling.annotation.EnableScheduling;
+
+@SpringBootApplication
+@MapperScan("com.union.control.mapper")
+@EnableScheduling
+@ImportResource("classpath:dubbo-provider.xml")
+public class ArkControlApplication {
+    public static void main(String[] args) {
+        SpringApplication.run(ArkControlApplication.class, args);
+    }
+}