mirror of https://github.com/jumpserver/jumpserver
78 lines
3.7 KiB
Java
78 lines
3.7 KiB
Java
import java.net.URI;
|
||
import java.net.http.HttpClient;
|
||
import java.net.http.HttpRequest;
|
||
import java.net.http.HttpResponse;
|
||
import java.nio.charset.StandardCharsets;
|
||
import java.time.ZonedDateTime;
|
||
import java.time.format.DateTimeFormatter;
|
||
import java.util.Base64;
|
||
import javax.crypto.Mac;
|
||
import javax.crypto.spec.SecretKeySpec;
|
||
import java.net.URLEncoder;
|
||
|
||
public class Demo {
|
||
private static final String API_URL = System.getenv().getOrDefault("API_URL", "http://127.0.0.1:8080");
|
||
private static final String KEY_ID = System.getenv().getOrDefault("API_KEY_ID", "72b0b0aa-ad82-4182-a631-ae4865e8ae0e");
|
||
private static final String KEY_SECRET = System.getenv().getOrDefault("API_KEY_SECRET", "6fuSO7P1m4cj8SSlgaYdblOjNAmnxDVD7tr8");
|
||
private static final String ORG_ID = System.getenv().getOrDefault("ORG_ID", "00000000-0000-0000-0000-000000000002");
|
||
|
||
public static void main(String[] args) throws Exception {
|
||
APIClient client = new APIClient();
|
||
String result = client.getAccountSecret("ubuntu_docker", "root");
|
||
System.out.println(result);
|
||
}
|
||
|
||
static class APIClient {
|
||
private final HttpClient httpClient = HttpClient.newHttpClient();
|
||
|
||
public String getAccountSecret(String asset, String account) throws Exception {
|
||
// 编码 URL 参数
|
||
String queryString = "asset=" + URLEncoder.encode(asset, StandardCharsets.UTF_8) +
|
||
"&account=" + URLEncoder.encode(account, StandardCharsets.UTF_8);
|
||
|
||
// 完整的 URL（带参数）
|
||
String url = API_URL + "/api/v1/accounts/integration-applications/account-secret/?" + queryString;
|
||
|
||
// 获取当前 UTC 时间
|
||
String date = ZonedDateTime.now().format(DateTimeFormatter.RFC_1123_DATE_TIME);
|
||
|
||
// 构造 (request-target)，包括查询参数
|
||
String requestTarget = "get /api/v1/accounts/integration-applications/account-secret/?" + queryString;
|
||
|
||
// 生成签名字符串
|
||
String signingString = "(request-target): " + requestTarget + "\n" +
|
||
"accept: application/json\n" +
|
||
"date: " + date + "\n" +
|
||
"x-jms-org: " + ORG_ID;
|
||
String signature = sign(signingString, KEY_SECRET);
|
||
|
||
// 构造 HTTP 请求
|
||
HttpRequest request = HttpRequest.newBuilder()
|
||
.uri(URI.create(url))
|
||
.header("Accept", "application/json")
|
||
.header("Date", date)
|
||
.header("X-JMS-ORG", ORG_ID)
|
||
.header("X-Source", "jms-pam")
|
||
.header("Authorization", "Signature keyId=\"" + KEY_ID + "\",algorithm=\"hmac-sha256\",headers=\"(request-target) accept date x-jms-org\",signature=\"" + signature + "\"")
|
||
.build();
|
||
|
||
// 发送请求
|
||
HttpResponse<String> response = httpClient.send(request, HttpResponse.BodyHandlers.ofString());
|
||
if (response.statusCode() == 200) {
|
||
return response.body();
|
||
} else {
|
||
System.err.println("API 请求失败: " + response.statusCode());
|
||
return null;
|
||
}
|
||
}
|
||
|
||
// HMAC-SHA256 签名计算
|
||
private String sign(String data, String key) throws Exception {
|
||
Mac mac = Mac.getInstance("HmacSHA256");
|
||
SecretKeySpec secretKeySpec = new SecretKeySpec(key.getBytes(StandardCharsets.UTF_8), "HmacSHA256");
|
||
mac.init(secretKeySpec);
|
||
byte[] rawHmac = mac.doFinal(data.getBytes(StandardCharsets.UTF_8));
|
||
return Base64.getEncoder().encodeToString(rawHmac);
|
||
}
|
||
}
|
||
} |