Java Code Examples for org.springframework.util.AntPathMatcher#match()

@Override
public Mono<Resource> transform(ServerWebExchange serverWebExchange, Resource resource, ResourceTransformerChain resourceTransformerChain) {
	final AntPathMatcher antPathMatcher = new AntPathMatcher();

	try {
		boolean isIndexFound = antPathMatcher.match("**/swagger-ui/**/index.html", resource.getURL().toString());
		if (isIndexFound && hasDefaultTransformations()) {
			String html = defaultTransformations(resource.getInputStream());
			return Mono.just(new TransformedResource(resource, html.getBytes()));
		}
		else {
			return Mono.just(resource);
		}
	}
	catch (Exception e) {
		throw new SpringDocUIException("Failed to transform Index", e);
	}
}
 

@Override
public Resource transform(HttpServletRequest request, Resource resource,
		ResourceTransformerChain transformerChain) throws IOException {
	final AntPathMatcher antPathMatcher = new AntPathMatcher();
	boolean isIndexFound = antPathMatcher.match("**/swagger-ui/**/index.html", resource.getURL().toString());

	if (isIndexFound && hasDefaultTransformations()) {
		String html = defaultTransformations(resource.getInputStream());
		return new TransformedResource(resource, html.getBytes());
	}
	else
		return resource;
}
 

private boolean hasGroupIdPermission(String token, String groupId, String targetGroupId, String url, String method) {
    if (Strings.isNullOrEmpty(groupId)) {
        return false;
    }

    String adminAppids = configs.get("restapi.admin.appids");
    if (!Strings.isNullOrEmpty(adminAppids) && adminAppids.contains(groupId)) {//拥有超级权限，可以修改其他任何appid配置,不需要token
        return true;
    }

    checkToken(groupId, targetGroupId, token);//checktoken

    if (groupId.equalsIgnoreCase(targetGroupId)) {
        return true;
    }

    List<ApiPermission> apiPermissionList = apiPermissionService.queryByGroupIdAndTargetGroupId(groupId, targetGroupId);
    if (apiPermissionList == null || apiPermissionList.size() == 0) {
        return false;
    }

    AntPathMatcher antPathMatcher = new AntPathMatcher();

    for (ApiPermission apiPermission : apiPermissionList) {
        if (apiPermission.getMethod() != null
                && apiPermission.getMethod().equalsIgnoreCase(method)
                && antPathMatcher.match(apiPermission.getUrl(), url)) {
            return true;
        }
    }
    return false;
}
 

private boolean isExclusives(HttpServletRequest request) {
    List<String> exclusivePath = CHERRY.SPRING_CONTEXT.getBean(AdamProperties.class).getSecurity().getExclusivePath();
    AntPathMatcher antPathMatcher = new AntPathMatcher();
    String requestURI = request.getRequestURI();
    for (String exclusive : exclusivePath) {
        if (antPathMatcher.match(exclusive, requestURI)) {
            return true;
        }
    }
    return false;
}
 

/**
 * 过滤非认证URL
 * <p>和Spring Security的白名单类似</p>
 *
 * @param request req
 * @return 返回结果
 */
private boolean isExclusives(HttpServletRequest request) {
    List<String> exclusivePath = CHERRY.SPRING_CONTEXT.getBean(AdamProperties.class).getSecurity().getExclusivePath();
    AntPathMatcher antPathMatcher = new AntPathMatcher();
    String requestURI = request.getRequestURI();
    for (String exclusive : exclusivePath) {
        if (antPathMatcher.match(exclusive, requestURI)) {
            return true;
        }
    }
    return false;
}
 

/**
 * 过滤非认证URL
 * <p>和Spring Security的白名单类似</p>
 *
 * @param request req
 * @return 返回结果
 */
private boolean isExclusives(HttpServletRequest request) {
    List<String> exclusivePath = CHERRY.SPRING_CONTEXT.getBean(AdamProperties.class).getSecurity().getExclusivePath();
    AntPathMatcher antPathMatcher = new AntPathMatcher();
    String requestURI = request.getRequestURI();
    for (String exclusive : exclusivePath) {
        if (antPathMatcher.match(exclusive, requestURI)) {
            return true;
        }
    }
    return false;
}
 

private boolean isExclusives(HttpServletRequest request) {
    List<String> exclusivePath = CHERRY.SPRING_CONTEXT.getBean(AdamProperties.class).getSecurity().getExclusivePath();
    AntPathMatcher antPathMatcher = new AntPathMatcher();
    String requestURI = request.getRequestURI();
    for (String exclusive : exclusivePath) {
        if (antPathMatcher.match(exclusive, requestURI)) {
            return true;
        }
    }
    return false;
}
 

private boolean isExclusives(HttpServletRequest request) {
    List<String> exclusivePath = CHERRY.SPRING_CONTEXT.getBean(AdamProperties.class).getSecurity().getExclusivePath();
    AntPathMatcher antPathMatcher = new AntPathMatcher();
    String requestURI = request.getRequestURI();
    for (String exclusive : exclusivePath) {
        if (antPathMatcher.match(exclusive, requestURI)) {
            return true;
        }
    }
    return false;
}
 

@Test
public void testAntMatcher(){
	AntPathMatcher path = new AntPathMatcher();
	boolean rs = path.match("/user.*", "/user.json?aaa=bbb&cc=ddd");
	Assert.assertTrue(rs);
	//后缀的点号变成可选的写法？
	rs = path.match("/user.*", "/user");
	Assert.assertFalse(rs);
}
 

private boolean isBranchNotExcluded(String branchName) {
    AntPathMatcher matcher = new AntPathMatcher();
    for (String excludePattern : excludedBranches) {
        if (matcher.match(excludePattern, branchName)) {
            return false;
        }
    }
    return true;
}
 

private boolean isBranchIncluded(String branchName) {
    AntPathMatcher matcher = new AntPathMatcher();
    for (String includePattern : includedBranches) {
        if (matcher.match(includePattern, branchName)) {
            return true;
        }
    }
    return includedBranches.isEmpty();
}
 

public static void main(String[] args) {
    AntPathMatcher matcher = new AntPathMatcher();
    matcher.match("{a:[a-z]}{b:[1-9]}", "a3");
    SpringApplication.run(WxMenuTestApp.class, args);
}
 

@Test
public void testAntMatcher(){
	AntPathMatcher req = new AntPathMatcher();
	boolean res = req.match("/user.*", "/user.json");
	Assert.assertTrue(res);
	

	res = req.match("/**/api/**", "/service/api/user");
	res = req.match("/**/api/**", "/api/user");
	res = req.match("/**/api/**", "/api/user/1");
	res = req.match("/**/api/**", "/api/user/1?aa=bb&cc=dd");
	Assert.assertTrue(res);

	res = req.match("*zh.*", "user_zh.html");
	Assert.assertTrue(res);
	res = req.match("*zh.*", "/user_zh.html");
	Assert.assertFalse(res);
	res = req.match("**zh.*", "user_zh.html");
	Assert.assertTrue(res);
	res = req.match("**zh.*", "/user_zh.html");
	Assert.assertFalse(res);
	res = req.match("**/*zh.*", "/user_zh.html");
	Assert.assertFalse(res);
	res = req.match("/*zh.*", "/user_zh.html");
	Assert.assertTrue(res);
	
	res = req.match("/user*", "/user");
	Assert.assertTrue(res);
	res = req.match("/user*", "/user.json");
	Assert.assertTrue(res);
	res = req.match("/user*", "/userInfo");
	Assert.assertTrue(res);
	res = req.match("/user*", "/user/1");
	Assert.assertFalse(res);

	res = req.match("/user**", "/user");
	Assert.assertTrue(res);
	res = req.match("/user**", "/user.json");
	Assert.assertTrue(res);
	res = req.match("/user**", "/userInfo");
	Assert.assertTrue(res);
	res = req.match("/user*/**", "/userInfo");
	Assert.assertTrue(res);
	res = req.match("/user*/**", "/user/1.json");
	Assert.assertTrue(res);

	res = req.match("/user/*", "/user/1");
	Assert.assertTrue(res);
	res = req.match("/user/*", "/user/1.json");
	Assert.assertTrue(res);
	res = req.match("/user/*", "/user/aaa/1.json");
	Assert.assertFalse(res);

	res = req.match("/user/**", "/user/1.json");
	Assert.assertTrue(res);
	res = req.match("/user/**", "/user/aaa/1.json");
	Assert.assertTrue(res);

	res = req.match("/service/swagger**", "/service/swagger-resources");
	Assert.assertTrue(res);

	res = req.match("/service/swagger**/**", "/service/swagger-resources/configuration");
	Assert.assertTrue(res);
	res = req.match("/service/swagger**/**", "/service/swagger-resources");
	Assert.assertTrue(res);
	res = req.match("/service/swagger**", "/service/swagger-resources/configuration/ui");
	Assert.assertFalse(res);
	
	res = req.match("/service/webjars/**/**", "/service/webjars/springfox-swagger-ui/css/typography.css");
	Assert.assertTrue(res);
}
 

/**
 * Validate an internal redirect URL to avoid internal open redirect. (Use this function only if the use of internal url redirect keys is not possible. For
 * external url redirection control, use the plugin plugin-verifybackurl)
 * 
 * the url should : - not be blank (null or empty string or spaces) - not start with "http://" or "https://" or "//" OR match the base URL or any URL in the
 * pattern list
 * 
 * example with a base url "https://lutece.fr/ : - valid : myapp/jsp/site/Portal.jsp , Another.jsp , https://lutece.fr/myapp/jsp/site/Portal.jsp - invalid :
 * http://anothersite.com , https://anothersite.com , //anothersite.com , file://my.txt , ...
 * 
 * 
 * @param strUrl
 *            the Url to validate
 * @param request
 *            the current request (containing the baseUrl)
 * @param strAntPathMatcherPatterns
 *            a comma separated list of AntPathMatcher patterns, as "http://**.lutece.com,https://**.lutece.com"
 * @return true if valid
 */
public static boolean isInternalRedirectUrlSafe( String strUrl, HttpServletRequest request, String strAntPathMatcherPatterns )
{

    if ( StringUtils.isBlank( strUrl ) )
    {
        return true; // this is not a valid redirect Url, but it is not unsafe
    }

    // filter schemes
    boolean [ ] conditions = new boolean [ ] {
            !strUrl.startsWith( "//" ), !strUrl.startsWith( "http:" ), !strUrl.startsWith( "https:" ), !strUrl.contains( "://" ),
            !strUrl.startsWith( "javascript:" )
    };

    if ( BooleanUtils.and( conditions ) )
    {
        return true; // should be a relative path
    }

    // compare with current baseUrl
    if ( strUrl.startsWith( AppPathService.getBaseUrl( request ) ) )
    {
        return true;
    }

    // compare with allowed url patterns
    if ( !StringUtils.isBlank( strAntPathMatcherPatterns ) )
    {
        AntPathMatcher pathMatcher = new AntPathMatcher( );

        String [ ] strAntPathMatcherPatternsTab = strAntPathMatcherPatterns.split( CONSTANT_COMMA );
        for ( String pattern : strAntPathMatcherPatternsTab )
        {
            if ( pattern != null && pathMatcher.match( pattern, strUrl ) )
            {
                return true;
            }
        }
    }

    // the Url does not match the allowed patterns
    Logger logger = Logger.getLogger( LOGGER_NAME );
    logger.warn( "SECURITY WARNING : OPEN_REDIRECT DETECTED : " + dumpRequest( request ) );

    return false;

}
 

/**
 * 匹配路径
 *
 * @param request 请求
 * @param path    路径
 * @return 是否匹配
 */
private boolean matchPath(HttpServletRequest request, String path) {
	AntPathMatcher matcher = new AntPathMatcher();
	return matcher.match(path, request.getServletPath());
}