spring - 2 带有代理和证书的 RestTemplate

curl --location --request POST 'https://mycompany.auth.eu-west-1.amazoncognito.com/oauth2/token?grant_type=client_credentials' --header 'Content-Type: application/x-www-form-urlencoded' --header 'Authorization: Basic oneHashcode=='

curl --noproxy '*' --location \ --request GET 'https://mycompany.net/service/v1/evenements/releves?codeDI=D00BPYN-01&codeDI=D00DIIR-01&dateDebut=2021-01-01&dateFin=2021-03-01' \ --header 'Authorization: myAuthorisation' \ --header 'scope: energy/all.read' \ --header 'x-api-key: aHead'

package mycompany.microservice.ws; import mycompany.microservice.tools.PropertiesExtractor; import mycompany.microservice.business.Energy4BisRequest; import mycompany.microservice.ws.models.EnergyV1ConsumptionReading; import lombok.Data; import lombok.extern.slf4j.Slf4j; import org.apache.http.conn.ssl.SSLConnectionSocketFactory; import org.apache.http.conn.ssl.TrustSelfSignedStrategy; import org.apache.http.impl.client.CloseableHttpClient; import org.apache.http.impl.client.HttpClients; import org.apache.http.ssl.SSLContextBuilder; import org.json.JSONException; import org.json.JSONObject; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Qualifier; import org.springframework.beans.factory.annotation.Value; import org.springframework.boot.web.client.RestTemplateBuilder; import org.springframework.context.annotation.Bean; import org.springframework.http.*; import org.springframework.http.client.HttpComponentsClientHttpRequestFactory; import org.springframework.http.client.SimpleClientHttpRequestFactory; import org.springframework.stereotype.Component; import org.springframework.util.LinkedMultiValueMap; import org.springframework.util.MultiValueMap; import org.springframework.util.ResourceUtils; import org.springframework.util.StringUtils; import org.springframework.web.client.RestTemplate; import org.springframework.web.util.UriComponentsBuilder; import javax.net.ssl.SSLContext; import javax.net.ssl.TrustManager; import javax.net.ssl.X509TrustManager; import java.io.*; import java.net.*; import java.security.*; import java.security.cert.CertificateException; import java.security.cert.X509Certificate; import java.util.LinkedHashMap; import java.util.Map; import java.util.Set; @Component @Slf4j @Data public class EnergyWSConsumer { public static final String AUTHORIZATION = "Authorization"; public static final String ACCESS_TOKEN = "access_token"; @Autowired @Qualifier("SSLRestTemplate") private RestTemplate sslRestTemplate; @Autowired @Qualifier("ProxifiedRestTemplate") private RestTemplate proxifiedRestTemplate; @Value("${energy.api.url}") private String energyApiUrl; @Value("${energy.token.request.url}") private String tokenRequestUrl; @Value("${energy.token.username}") private String username; @Value("${energy.token.password}") private String password; private String token; @Bean(name = "SSLRestTemplate") public RestTemplate sslRestTemplate() throws KeyStoreException, IOException, UnrecoverableKeyException, NoSuchAlgorithmException, CertificateException, KeyManagementException { log.info("Init ssl rest template with jks"); KeyStore clientStore = KeyStore.getInstance("PKCS12"); clientStore.load(new FileInputStream("/usr/lib/jvm/spring-java-runtime/bin/mykeystore.jks"), "myPassword".toCharArray()); SSLContextBuilder sslContextBuilder = new SSLContextBuilder(); sslContextBuilder.setProtocol("SSL"); sslContextBuilder.loadKeyMaterial(clientStore, "myPassword".toCharArray()); sslContextBuilder.loadTrustMaterial(new TrustSelfSignedStrategy()); SSLConnectionSocketFactory sslConnectionSocketFactory = new SSLConnectionSocketFactory(sslContextBuilder.build()); CloseableHttpClient httpClient = HttpClients.custom() .setSSLSocketFactory(sslConnectionSocketFactory) .build(); HttpComponentsClientHttpRequestFactory requestFactory = new HttpComponentsClientHttpRequestFactory(httpClient); RestTemplate restTemplate = new RestTemplate(requestFactory); log.info("SSL rest template correctly initialized: {}", restTemplate); return restTemplate; } @Bean(name = "ProxifiedRestTemplate") public RestTemplate proxifiedRestTemplate() { SimpleClientHttpRequestFactory requestFactory = new SimpleClientHttpRequestFactory(); String proxyUrl = PropertiesExtractor.getProperty("service.proxy.url"); if(StringUtils.hasText(proxyUrl)) { log.info("Init rest template with {} http proxy find in HTTPS_HOST env variable", proxyUrl); String[] parts = proxyUrl.replace("http://", "").split(":"); Proxy proxy = new Proxy(Proxy.Type.HTTP, new InetSocketAddress(parts[0], Integer.parseInt(parts[1]))); requestFactory.setProxy(proxy); } else { log.info("No defined proxy in HTTPS_PROXY variable"); } RestTemplate restTemplate = new RestTemplate(requestFactory); log.info("Proxified rest template correctly initialized: {}", restTemplate); return restTemplate; } public Set<EnergyV1ConsumptionReading> getEvementsReleves(Energy4BisRequest energy4BisRequest) throws JSONException, IOException { // check if the token is empty and if // request a generation if (!StringUtils.hasText(token)) { log.debug("Token must be generated"); generateRemoteToken(); } // build the url with params UriComponentsBuilder builder = UriComponentsBuilder.fromHttpUrl(energyApiUrl); MultiValueMap<String, String> paramMap = new LinkedMultiValueMap<>(); paramMap.add("dateDebut", energy4BisRequest.getStartDate()); paramMap.add("dateFin", energy4BisRequest.getEndDate()); energy4BisRequest.getDiCodes().forEach(codeDi -> { paramMap.add("codeDI", codeDi); }); // build the headers Map<String, String> headers = new LinkedHashMap<>(); headers.put("Authorization", "Bearer " + token); log.debug("GetEvementsReleves requesting: {}", builder.toUriString()); HttpEntity<EnergyV1ConsumptionReading[]> energyV1ConsumptionReadingArrayEntity = sslRestTemplate.exchange(builder.toUriString(), HttpMethod.GET, new HttpEntity<>(headers), EnergyV1ConsumptionReading[].class); log.info(energyV1ConsumptionReadingArrayEntity.toString()); return null; } public void generateRemoteToken() throws JSONException { log.debug("Request for token generation"); // build the url with params UriComponentsBuilder builder = UriComponentsBuilder.fromHttpUrl(tokenRequestUrl); MultiValueMap<String, String> paramMap = new LinkedMultiValueMap<>(); paramMap.add("grant_type", "client_credentials"); // build the headers HttpHeaders httpHeaders = new HttpHeaders(); httpHeaders.setBasicAuth(username, password); httpHeaders.setContentType(MediaType.APPLICATION_FORM_URLENCODED); HttpEntity<MultiValueMap<String, String>> requestHttpEntity = new HttpEntity<>(paramMap, httpHeaders); log.info("GenerateRemoteTokenURI requesting: {}", builder.toUriString()); ResponseEntity<String> tokenHttpEntity = proxifiedRestTemplate.postForEntity(builder.build(paramMap), requestHttpEntity, String.class); log.debug("token response recovered: {}", tokenHttpEntity); // extract the access_token from the response JSONObject response = new JSONObject(tokenHttpEntity.getBody()); if (response.has(ACCESS_TOKEN)) { this.token = response.getString(ACCESS_TOKEN); log.debug("Token generated"); } else { log.warn("No token found in the oauth2 token response: {}", tokenHttpEntity.getBody()); } } }

# ----------- # Custom Java Runtime # ----------- FROM adoptopenjdk/openjdk11:alpine as java-builder ARG SPRING_MODULES=java.base,java.datatransfer,java.desktop,java.instrument,java.logging,java.management,java.naming,java.sql,java.sql.rowset,java.xml,jdk.unsupported,java.security.jgss RUN jlink --no-header-files --no-man-pages --compress=2 --strip-debug --add-modules ${SPRING_MODULES} --output /usr/lib/jvm/spring-java-runtime # ----------- # Microservice Image # ----------- FROM debian:stretch-slim COPY --from=java-builder /usr/lib/jvm/spring-java-runtime /usr/lib/jvm/spring-java-runtime RUN ln -s /usr/lib/jvm/spring-java-runtime/bin/java /usr/bin/java COPY root.mycompany.net.crt /tmp/root.mycompany.net.crt RUN /usr/lib/jvm/spring-java-runtime/bin/keytool -import -trustcacerts -alias rootpfealias -file /tmp/root.mycompany.net.crt -keystore /usr/lib/jvm/spring-java-runtime/bin/mykeystore.jks -storepass myPassword -noprompt; ARG DEPENDENCY=target/dependency # Copy layered Jar COPY ${DEPENDENCY}/BOOT-INF/lib /app/BOOT-INF/lib COPY ${DEPENDENCY}/META-INF /app/META-INF COPY ${DEPENDENCY}/org /app/org COPY ${DEPENDENCY}/BOOT-INF/classes /app/BOOT-INF/classes # Java run CMD [ "java", "-XX:MaxRAMPercentage=80", "-cp","app:app/lib/*", "org.springframework.boot.loader.JarLauncher" ]