对象插入时计算 mac

This commit is contained in:
cheney 2026-05-18 16:46:51 +08:00
parent 12778d938d
commit d860bc078a
5 changed files with 145 additions and 0 deletions

View File

@ -118,6 +118,13 @@
<version>1.10.0</version> <version>1.10.0</version>
</dependency> </dependency>
<dependency>
<groupId>cn.hutool</groupId>
<artifactId>hutool-all</artifactId>
<version>5.8.26</version>
</dependency>
<dependency> <dependency>
<groupId>com.sunyard.cisd</groupId> <groupId>com.sunyard.cisd</groupId>
<artifactId>device-fingerprint-tool</artifactId> <artifactId>device-fingerprint-tool</artifactId>

View File

@ -0,0 +1,12 @@
package com.cisd.tms.modules.datamac.entity;
import com.baomidou.mybatisplus.annotation.FieldFill;
import com.baomidou.mybatisplus.annotation.TableField;
import lombok.Data;
@Data
public class DataMacEntity {
// 标记此字段在插入和更新时都需要自动填充
@TableField(fill = FieldFill.INSERT_UPDATE)
private String mac;
}

View File

@ -0,0 +1,45 @@
package com.cisd.tms.modules.datamac.hanlder;
import com.baomidou.mybatisplus.core.handlers.MetaObjectHandler;
import com.cisd.tms.modules.datamac.helper.Sm3MacCalculator;
import org.apache.ibatis.reflection.MetaObject;
import org.springframework.stereotype.Component;
@Component
public class DataMacMetaObjectHandler implements MetaObjectHandler {
@Override
public void insertFill(MetaObject metaObject) {
// 插入时直接基于当前实体对象计算 MAC
Object entity = metaObject.getOriginalObject();
String mac = Sm3MacCalculator.calculateForEntity(entity);
this.strictInsertFill(metaObject, "mac", String.class, mac);
}
@Override
public void updateFill(MetaObject metaObject) {
}
// @Override
// public void updateFill(MetaObject metaObject) {
// // 更新时需要先获取 ID再查询完整数据
// Object entity = metaObject.getOriginalObject();
// Object id = this.getFieldValByName("id", metaObject);
// if (id == null) {
// // 若没有 ID则降级使用当前对象中的字段不完整
// String mac = Sm3MacCalculator.calculateForEntity(entity);
// this.strictUpdateFill(metaObject, "mac", String.class, mac);
// return;
// }
//
// // 通过 AOP 或手动调用 Service在此处获取完整实体
// Object fullEntity = fetchFullEntityFromService(entity.getClass(), id);
// if (fullEntity != null) {
// // 将当前更新内容合并到完整实体
// mergeChanges(fullEntity, entity);
// String mac = Sm3MacCalculator.calculateForEntity(fullEntity);
// this.strictUpdateFill(metaObject, "mac", String.class, mac);
// }
// }
}

View File

@ -0,0 +1,39 @@
package com.cisd.tms.modules.datamac.helper;
import cn.hutool.crypto.SmUtil;
import cn.hutool.core.util.ArrayUtil;
import java.lang.reflect.Field;
import java.util.Arrays;
import java.util.Comparator;
public class Sm3MacCalculator {
public static String calculateForEntity(Object entity) {
// 1. 获取所有字段并按字段名排序保证不同实体计算的顺序一致
Field[] fields = entity.getClass().getDeclaredFields();
Arrays.sort(fields, Comparator.comparing(Field::getName));
// 2. 构建待摘要的数据
StringBuilder dataBuilder = new StringBuilder();
for (Field field : fields) {
// 排除 mac 字段自身
if ("mac".equals(field.getName())) {
continue;
}
try {
field.setAccessible(true);
Object value = field.get(entity);
dataBuilder.append(field.getName()).append("=")
.append(value != null ? value.toString() : "null")
.append(";");
} catch (IllegalAccessException e) {
// 适当的日志记录
throw new RuntimeException("Failed to read field: " + field.getName(), e);
}
}
// 3. 生成最终的 SM3 哈希值
return SmUtil.sm3(dataBuilder.toString());
}
}

View File

@ -0,0 +1,42 @@
package com.cisd.tms.modules.datamac.interceptor;
import com.cisd.tms.modules.datamac.entity.DataMacEntity;
import com.cisd.tms.modules.datamac.helper.Sm3MacCalculator;
import org.apache.ibatis.executor.resultset.ResultSetHandler;
import org.apache.ibatis.plugin.Interceptor;
import org.apache.ibatis.plugin.Intercepts;
import org.apache.ibatis.plugin.Invocation;
import org.apache.ibatis.plugin.Signature;
import org.springframework.stereotype.Component;
import java.sql.Statement;
import java.util.List;
@Intercepts(@Signature(type = ResultSetHandler.class, method = "handleResultSets", args = {Statement.class}))
@Component
public class MacValidationInterceptor implements Interceptor {
@Override
public Object intercept(Invocation invocation) throws Throwable {
Object result = invocation.proceed();
if (result instanceof List) {
((List<?>) result).forEach(this::validateEntity);
} else {
validateEntity(result);
}
return result;
}
private void validateEntity(Object obj) {
if (obj instanceof DataMacEntity) {
DataMacEntity entity = (DataMacEntity) obj;
String storedMac = entity.getMac();
String calculatedMac = Sm3MacCalculator.calculateForEntity(entity);
if (!storedMac.equals(calculatedMac)) {
throw new RuntimeException("Data integrity validation failed. The data has been tampered with.");
}
}
}
}