package jnpf.bizcommon.onlyoffice.service.impl;
|
|
import cn.hutool.crypto.digest.DigestUtil;
|
import cn.hutool.jwt.JWTUtil;
|
import jnpf.base.ActionResult;
|
import jnpf.base.ActionResultCode;
|
import jnpf.base.model.uploadedit.UploadEditLease;
|
import jnpf.base.model.uploadedit.UploadEditSaveCommand;
|
import jnpf.bizcommon.onlyoffice.entity.OnlyOfficeCallbackParam;
|
import jnpf.bizcommon.onlyoffice.entity.OnlyOfficeSessionEntity;
|
import jnpf.exception.DataException;
|
import jnpf.onlinedev.UploadEditApi;
|
import lombok.RequiredArgsConstructor;
|
import org.springframework.stereotype.Component;
|
import java.util.Map;
|
import java.util.Objects;
|
|
@Component
|
@RequiredArgsConstructor
|
public class UploadEditSessionSupport {
|
private final UploadEditApi api;
|
private final UploadEditStorage storage;
|
|
public static boolean matches(OnlyOfficeSessionEntity session) {
|
return session != null && UploadEditSceneConfigBuilder.SCENE.equals(session.getBizScene())
|
&& UploadEditSceneConfigBuilder.MODULE.equals(session.getBizModule());
|
}
|
|
public void requireStatusAccess(String tenantId, String ownerId, String leaseId) {
|
if (!Boolean.TRUE.equals(require(api.canReadStatus(tenantId, ownerId, leaseId)))) {
|
throw new DataException("编辑租约已失效或不可访问");
|
}
|
}
|
|
public UploadEditLease lease(String tenantId, String ownerId, String leaseId) {
|
UploadEditLease lease = require(api.lease(tenantId, ownerId, leaseId));
|
if (lease == null || lease.getFile() == null) throw new DataException("附件编辑租约不可用");
|
return lease;
|
}
|
|
public void save(OnlyOfficeSessionEntity session, OnlyOfficeCallbackParam callback, byte[] candidate) {
|
// 回调到达时重新检查当前流程权限，不能复用打开时的权限结论。
|
UploadEditLease lease = lease(session.getTenantId(), session.getLockUserId(), session.getFileId());
|
// 普通未保存附件维持原行为；只有服务端核验的DMS修订来源可另存临时副本。
|
if (!lease.isTracked() && !lease.isRevisionTemporary()) return;
|
String operationId = DigestUtil.sha256Hex(callback.getKey() + "\n" + callback.getStatus() + "\n" + callback.getUrl());
|
if (operationId.equals(lease.getLastOperationId())) return;
|
Map<String, Object> file = storage.save(session.getTenantId(), session.getFileId(), savedFileName(session.getFileName(), callback.getFiletype()), candidate);
|
UploadEditSaveCommand command = new UploadEditSaveCommand();
|
command.setTenantId(session.getTenantId());
|
command.setOwnerId(lease.getOwnerId());
|
command.setLeaseId(lease.getLeaseId());
|
command.setOperationId(operationId);
|
command.setFile(file);
|
if (!Boolean.TRUE.equals(require(api.save(command)))) throw new DataException("附件已替换、放弃或采用，本次编辑产物不再生效");
|
}
|
|
static String savedFileName(String sourceName, String outputType) {
|
boolean sourceDoc = sourceName != null && sourceName.toLowerCase(java.util.Locale.ROOT).endsWith(".doc");
|
// DOC 可能由 Document Server 转成 DOCX；缺少实际输出类型时不能冒用源后缀。
|
if (outputType == null || outputType.isBlank()) {
|
if (sourceDoc) throw new DataException("DOC 编辑产物缺少输出格式，无法安全保存");
|
return sourceName;
|
}
|
String extension = outputType.toLowerCase(java.util.Locale.ROOT);
|
if ((!"docx".equals(extension) && !(sourceDoc && "doc".equals(extension))) || sourceName == null) {
|
throw new DataException("附件编辑产物格式不受支持");
|
}
|
if (sourceName.toLowerCase(java.util.Locale.ROOT).endsWith("." + extension)) return sourceName;
|
return sourceName.substring(0, sourceName.lastIndexOf('.')) + "." + extension;
|
}
|
|
/** 已经过签名验证；进一步绑定请求体，拒绝拿编辑器配置 JWT 冒充保存回调。 */
|
public static void requireBoundCallback(OnlyOfficeCallbackParam callback, String authorization) {
|
String token = authorization == null || authorization.isBlank() ? callback.getToken()
|
: authorization.startsWith("Bearer ") ? authorization.substring(7).trim() : authorization.trim();
|
Object payload = JWTUtil.parseToken(token).getPayload("payload");
|
Map<?, ?> claims = payload instanceof Map ? (Map<?, ?>) payload : JWTUtil.parseToken(token).getPayloads();
|
if (!Objects.equals(callback.getKey(), claims.get("key"))
|
|| !(claims.get("status") instanceof Number) || !Objects.equals(callback.getStatus(), ((Number) claims.get("status")).intValue())
|
|| !Objects.equals(callback.getUrl(), claims.get("url"))
|
|| !Objects.equals(callback.getFiletype(), claims.get("filetype"))) {
|
throw new DataException("保存回调与已签名内容不一致");
|
}
|
}
|
|
private static <T> T require(ActionResult<T> result) {
|
if (result == null || !ActionResultCode.SUCCESS.getCode().equals(result.getCode())) {
|
throw new DataException(result == null ? "附件编辑服务不可用" : result.getMsg());
|
}
|
return result.getData();
|
}
|
}
|
