package jnpf.bizcommon.onlyoffice.service.impl;
|
|
import cn.hutool.core.net.URLEncodeUtil;
|
import cn.hutool.jwt.JWTUtil;
|
import jnpf.base.UserInfo;
|
import jnpf.bizcommon.onlyoffice.entity.OnlyOfficeCallbackParam;
|
import jnpf.bizcommon.onlyoffice.entity.OnlyOfficeConfigParam;
|
import jnpf.bizcommon.onlyoffice.entity.OnlyOfficeProperties;
|
import jnpf.constant.GlobalConst;
|
import jnpf.dmsEntity.compare.DmsCompareTicket;
|
import jnpf.dmsEntity.preview.vo.DmsFilePreviewTicketVO;
|
import jnpf.exception.DataException;
|
import jnpf.util.TicketUtil;
|
import org.springframework.stereotype.Service;
|
import java.nio.charset.StandardCharsets;
|
import java.util.LinkedHashMap;
|
import java.util.Map;
|
import java.util.UUID;
|
|
@Service
|
public class OnlyOfficeCompareService {
|
private final OnlyOfficeProperties properties;
|
private final DmsDocumentCompareConfigBuilder builder;
|
private final DmsOnlyOfficePreviewTicketValidator validator;
|
private final TicketReader tickets;
|
private final OnlyOfficeComparisonRenderer renderer;
|
|
@org.springframework.beans.factory.annotation.Autowired
|
public OnlyOfficeCompareService(OnlyOfficeProperties properties, DmsDocumentCompareConfigBuilder builder,
|
DmsOnlyOfficePreviewTicketValidator validator, OnlyOfficeComparisonRenderer renderer) {
|
this(properties, builder, validator, TicketUtil::parseTicket, renderer);
|
}
|
|
OnlyOfficeCompareService(OnlyOfficeProperties properties, DmsDocumentCompareConfigBuilder builder,
|
DmsOnlyOfficePreviewTicketValidator validator, TicketReader tickets, OnlyOfficeComparisonRenderer renderer) {
|
this.properties = properties;
|
this.builder = builder;
|
this.validator = validator;
|
this.tickets = tickets;
|
this.renderer = renderer;
|
}
|
|
public Map<String, Object> createConfig(String ticketValue, UserInfo user) {
|
DmsCompareTicket ticket;
|
try {
|
ticket = DmsCompareTicket.fromRaw(tickets.read(ticketValue));
|
} catch (RuntimeException e) {
|
throw new DataException("比较会话已过期，请重新选择版本");
|
}
|
String tenant = user == null || user.getTenantId() == null || user.getTenantId().trim().isEmpty()
|
? GlobalConst.DEFAULT_TENANT_VALUE : user.getTenantId().trim();
|
if (user == null || !ticket.getTenantId().equals(tenant) || !ticket.getUserId().equals(user.getUserId())) {
|
throw new DataException("比较票据与当前用户或租户不匹配");
|
}
|
validateSource(ticket.getHistorical(), user);
|
validateSource(ticket.getCurrent(), user);
|
String key = DmsDocumentCompareConfigBuilder.KEY_PREFIX + UUID.randomUUID();
|
String title = ticket.getCurrent().getFileName() + "｜" + ticket.getHistoricalLabel() + " → " + ticket.getCurrentLabel();
|
secret(); // Fail before invoking DS if signing is unavailable.
|
String resultPath = renderer.generate(sourceUrl(ticket.getHistorical()), sourceUrl(ticket.getCurrent()));
|
if (ticket.getExpiresAt() <= System.currentTimeMillis()) {
|
throw new DataException("比较会话已过期，请重新选择版本");
|
}
|
Map<String, Object> resultClaims = new LinkedHashMap<>();
|
resultClaims.put("scope", "dms:onlyoffice:compare-result");
|
resultClaims.put("key", key);
|
resultClaims.put("path", resultPath);
|
resultClaims.put("expiresAt", ticket.getExpiresAt());
|
String resultTicket = JWTUtil.createToken(resultClaims, secret());
|
String resultUrl = properties.getFileFetchBaseUrl() + "/api/biz/onlyoffice/compare/result?ticket="
|
+ URLEncodeUtil.encode(resultTicket, GlobalConst.DEFAULT_CHARSET);
|
Map<String, Object> config = builder.comparisonConfig(key, title, resultUrl,
|
properties.getCallbackBaseUrl() + "/api/biz/onlyoffice/compare/callback", user);
|
config.put("token", JWTUtil.createToken(config, secret()));
|
Map<String, Object> result = new LinkedHashMap<>();
|
result.put("config", config);
|
result.put("title", title);
|
result.put("expiresAt", ticket.getExpiresAt());
|
return result;
|
}
|
|
public byte[] readResult(String ticket) {
|
try {
|
if (ticket == null || !JWTUtil.verify(ticket, secret())) throw new IllegalArgumentException();
|
cn.hutool.json.JSONObject payload = JWTUtil.parseToken(ticket).getPayloads();
|
if (!"dms:onlyoffice:compare-result".equals(payload.getStr("scope"))
|
|| payload.getLong("expiresAt", 0L) <= System.currentTimeMillis()) {
|
throw new IllegalArgumentException();
|
}
|
return renderer.readResult(payload.getStr("path"));
|
} catch (Exception e) {
|
throw new DataException("比较结果票据无效或已过期");
|
}
|
}
|
|
/** No file/session repository or write-back dependency: DS owns and expires its temporary copy. */
|
public void acknowledgeCallback(OnlyOfficeCallbackParam body, String authorization) {
|
String token = authorization == null ? body.getToken()
|
: authorization.replaceFirst("^Bearer ", "").trim();
|
if (token == null || !JWTUtil.verify(token, secret())) throw new DataException("比较回调验签失败");
|
if (body.getKey() == null || !body.getKey().startsWith(DmsDocumentCompareConfigBuilder.KEY_PREFIX)) {
|
throw new DataException("无效的比较会话");
|
}
|
// Intentionally never download body.url or call the normal OnlyOffice save handler.
|
}
|
|
private void validateSource(DmsFilePreviewTicketVO source, UserInfo user) {
|
if (source.getFileName() == null || !source.getFileName().toLowerCase(java.util.Locale.ROOT).endsWith(".docx")) {
|
throw new DataException("版本比较目前仅支持 DOCX 文件");
|
}
|
OnlyOfficeConfigParam param = new OnlyOfficeConfigParam();
|
param.setFileId(source.getFileVersionId().toString());
|
param.setFileName(source.getFileName());
|
param.setDmsAccessTicket(source.getAccessTicket());
|
validator.validate(param, user);
|
}
|
|
private String sourceUrl(DmsFilePreviewTicketVO source) {
|
return properties.getFileFetchBaseUrl() + "/api/file/Dms/OnlyOffice/" + source.getFileVersionId()
|
+ "?ticket=" + URLEncodeUtil.encode(source.getAccessTicket(), GlobalConst.DEFAULT_CHARSET);
|
}
|
|
private byte[] secret() {
|
String value = properties.getJwtSecret();
|
if (value == null || value.trim().isEmpty() || value.contains("${")) {
|
throw new DataException("OnlyOffice 签名密钥未正确配置");
|
}
|
return value.getBytes(StandardCharsets.UTF_8);
|
}
|
|
@FunctionalInterface interface TicketReader { Object read(String ticket); }
|
}
|
