原薦 Android HTTP2 + Oauth2 + Jwt 介面認證例項

OAuth HTTP2 安卓開發 · 發表 2018-10-25 22:50:58

摘要：本文節選自《Netkiller Java 手札》 Netkiller Java 手札 Mr. Neo Chan, 陳景峰(BG7NYT) 中國廣東省深圳市望海路半島城邦三期 518067 +86 13113668890<[email protected]> ...

本文節選自《Netkiller Java 手札》

Netkiller Java 手札

Mr. Neo Chan, 陳景峰(BG7NYT)

中國廣東省深圳市望海路半島城邦三期 518067 +86 13113668890<[email protected]>

$Id: book.xml 606 2013-05-29 09:52:58Z netkiller $

版權宣告

轉載請與作者聯絡，轉載時請務必標明文章原始出處和作者資訊及本宣告。

ofollow,noindex" target="_blank">http://www.netkiller.cn
http://netkiller.github.io
http://netkiller.sourceforge.net

我的系列文件

程式語言

Netkiller Architect 手札	Netkiller Developer 手札	Netkiller Java 手札	Netkiller Spring 手札	Netkiller PHP 手札	Netkiller Python 手札
Netkiller Testing 手札	Netkiller Cryptography 手札	Netkiller Perl 手札	Netkiller Docbook 手札	Netkiller Project 手札	Netkiller Database 手札

34.10. Android Oauth2 + Jwt example

Oauth 返回資料，通過 Gson 的 fromJson 儲存到下面類中。

package cn.netkiller.okhttp.pojo;

public class Oauth {
private String access_token;
private String token_type;
private String refresh_token;
private String expires_in;
private String scope;
private String jti;

public String getAccess_token() {
return access_token;
}

public void setAccess_token(String access_token) {
this.access_token = access_token;
}

public String getToken_type() {
return token_type;
}

public void setToken_type(String token_type) {
this.token_type = token_type;
}

public String getRefresh_token() {
return refresh_token;
}

public void setRefresh_token(String refresh_token) {
this.refresh_token = refresh_token;
}

public String getExpires_in() {
return expires_in;
}

public void setExpires_in(String expires_in) {
this.expires_in = expires_in;
}

public String getScope() {
return scope;
}

public void setScope(String scope) {
this.scope = scope;
}

public String getJti() {
return jti;
}

public void setJti(String jti) {
this.jti = jti;
}

@Override
public String toString() {
return "Oauth{" +
"access_token='" + access_token + '\'' +
", token_type='" + token_type + '\'' +
", refresh_token='" + refresh_token + '\'' +
", expires_in='" + expires_in + '\'' +
", scope='" + scope + '\'' +
", jti='" + jti + '\'' +
'}';
}
}

Activity 檔案

package cn.netkiller.okhttp;

import android.support.v7.app.AppCompatActivity;
import android.os.Bundle;
import android.util.Log;
import android.widget.TextView;

import com.google.gson.Gson;

import java.io.IOException;

import cn.netkiller.okhttp.pojo.Oauth;
import okhttp3.Authenticator;
import okhttp3.Call;
import okhttp3.Callback;
import okhttp3.Credentials;
import okhttp3.FormBody;
import okhttp3.OkHttpClient;
import okhttp3.Request;
import okhttp3.RequestBody;
import okhttp3.Response;
import okhttp3.Route;

public class Oauth2jwtActivity extends AppCompatActivity {

private TextView token;

@Override
protected void onCreate(Bundle savedInstanceState) {
super.onCreate(savedInstanceState);
setContentView(R.layout.activity_oauth2jwt);

token = (TextView) findViewById(R.id.token);

try {
get();
} catch (IOException e) {
e.printStackTrace();
}

}


public static Oauth accessToken() throws IOException {


OkHttpClient client = new OkHttpClient.Builder().authenticator(
new Authenticator() {
public Request authenticate(Route route, Response response) {
String credential = Credentials.basic("api", "secret");
return response.request().newBuilder().header("Authorization", credential).build();
}
}
).build();

String url = "https://api.netkiller.cn/oauth/token";

RequestBody formBody = new FormBody.Builder()
.add("grant_type", "password")
.add("username", "blockchain")
.add("password", "123456")
.build();

Request request = new Request.Builder()
.url(url)
.post(formBody)
.build();

Response response = client.newCall(request).execute();
if (!response.isSuccessful()) {
throw new IOException("伺服器端錯誤: " + response);
}

Gson gson = new Gson();
Oauth oauth = gson.fromJson(response.body().string(), Oauth.class);
Log.i("oauth", oauth.toString());
return oauth;
}

public void get() throws IOException {


OkHttpClient client = new OkHttpClient.Builder().authenticator(
new Authenticator() {
public Request authenticate(Route route, Response response) throws IOException {
return response.request().newBuilder().header("Authorization", "Bearer " + accessToken().getAccess_token()).build();
}
}
).build();

String url = "https://api.netkiller.cn/misc/compatibility";

Request request = new Request.Builder()
.url(url)
.build();

client.newCall(request).enqueue(new Callback() {
@Override
public void onFailure(Call call, IOException e) {
call.cancel();
}

@Override
public void onResponse(Call call, Response response) throws IOException {

final String myResponse = response.body().string();

runOnUiThread(new Runnable() {
@Override
public void run() {
Log.i("oauth", myResponse);
token.setText(myResponse);
}
});

}
});
}

public void post() throws IOException {


OkHttpClient client = new OkHttpClient.Builder().authenticator(
new Authenticator() {
public Request authenticate(Route route, Response response) throws IOException {
return response.request().newBuilder().header("Authorization", "Bearer " + accessToken().getAccess_token()).build();
}
}
).build();

String url = "https://api.netkiller.cn/history/create";

String json = "{\n" +
"\"assetsId\": \"5bced71c432c001c6ea31924\",\n" +
"\"title\": \"新增資訊\",\n" +
"\"message\": \"資訊內容\",\n" +
"\"status\": \"錄入\"\n" +
"}";

final MediaType JSON = MediaType.parse("application/json; charset=utf-8");
RequestBody body = RequestBody.create(JSON, json);

Request request = new Request.Builder()
.url(url)
.post(body)
.build();

client.newCall(request).enqueue(new Callback() {
@Override
public void onFailure(Call call, IOException e) {
call.cancel();
}

@Override
public void onResponse(Call call, Response response) throws IOException {

final String myResponse = response.body().string();

runOnUiThread(new Runnable() {
@Override
public void run() {

//Gson gson = new Gson();
//Oauth oauth = gson.fromJson(myResponse, Oauth.class);
//Log.i("oauth", oauth.toString());

token.setText(myResponse);
}
});

}
});
}

}

上面的例子演示了，怎樣獲取 access token 以及 HTTP 基本操作 GET 和 POST，再Restful介面中還可能會用到 PUT, DELETE 等等，原來相同，這裡就不在演示。

34.11. HTTP/2

首先確認你的伺服器是支援 HTTP2，HTTP2配置方法可以參考《Netkiller Web 手札》

下面是我的例子僅供參考，Nginx 開啟 http2 代理後面的 Spring Cloud 介面。

server {
listen80;
listen 443 ssl http2;
server_nameapi.netkiller.cn;

ssl_certificate ssl/netkiller.cn.crt;
ssl_certificate_key ssl/netkiller.cn.key;
ssl_session_cache shared:SSL:20m;
ssl_session_timeout 60m;

charset utf-8;
access_log/var/log/nginx/api.netkiller.cn.access.log;

error_page497https://$host$uri?$args;

if ($scheme = http) {
return 301 https://$server_name$request_uri;
}

location / {
proxy_passhttp://127.0.0.1:8000;
proxy_http_version 1.1;
proxy_set_headerHost$host;
proxy_set_headerX-Forwarded-For $proxy_add_x_forwarded_for;
}

#error_page404/404.html;

# redirect server error pages to the static page /50x.html
#
error_page500 502 503 504/50x.html;
location = /50x.html {
root/usr/share/nginx/html;
}

# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
#location ~ /\.ht {
#denyall;
#}
}

安卓程式如下

String url = "https://api.netkiller.cn/member/json";

OkHttpClient client = new OkHttpClient();
Request request = new Request.Builder().url(url).build();
client.newCall(request).enqueue(new Callback() {
@Override
public void onFailure(Call call, IOException e) {
Log.d("okhttp", "Connect timeout. " + e.getMessage());
}

@Override
public void onResponse(Call call, Response response) throws IOException {
String text = response.body().string();
Log.d("okhttp", "HTTP Code " + response.code() + " TEXT " + text);
Log.d("okhttp", "Protocol: " + response.protocol());
}
});

執行結果

D/okhttp: HTTP Code 200 TEXT {"status":false,"reason":"","code":0,"data":{"id":null,"username":"12322228888","mobile":"12322228888","password":"123456","wechat":"微信ID","role":"Organization","captcha":null,"createDate":"2018-10-25 09:25:23","updateDate":null}}
Protocol: h2

輸出 h2 表示當前介面與伺服器連線是通過 http2 完成。

Oauth2 + Jwt 的 SpringBoot 實現方法可以參考作者的《Netkiller Spring Cloud 手札》

原 薦 Android HTTP2 + Oauth2 + Jwt 介面認證例項