网关服务-调整过滤器返回方式

gateWay_server/src/main/java/com/bjtdba/gateWay/filter/ApiAuthFilter.java

@@ -1,21 +1,26 @@
 package com.bjtdba.gateWay.filter;
-// ApiAuthFilter.java
+
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.cloud.gateway.filter.GatewayFilter;
 import org.springframework.cloud.gateway.filter.factory.AbstractGatewayFilterFactory;
+import org.springframework.core.io.buffer.DataBuffer;
 import org.springframework.http.HttpStatus;
+import org.springframework.http.MediaType;
 import org.springframework.stereotype.Component;
 import org.springframework.util.DigestUtils;
 import org.springframework.web.server.ServerWebExchange;
 import reactor.core.publisher.Mono;
 
+import java.nio.charset.StandardCharsets;
+import java.util.HashMap;
+import java.util.Map;
+
 @Component
 public class ApiAuthFilter extends AbstractGatewayFilterFactory<ApiAuthFilter.Config> {
 
     @Value("${external.api.secret}")
-    private String apiSecret;  // 从配置文件注入密钥
-
-    private static final long TIMESTAMP_THRESHOLD = 300000;  // 5分钟有效期
+    private String apiSecret;
+    private static final long TIMESTAMP_THRESHOLD = 300000;
 
     public ApiAuthFilter() {
         super(Config.class);
@@ -24,47 +29,80 @@ public class ApiAuthFilter extends AbstractGatewayFilterFactory<ApiAuthFilter.Co
     @Override
     public GatewayFilter apply(Config config) {
         return (exchange, chain) -> {
-            // 仅处理/external路径的请求
             if (!exchange.getRequest().getPath().value().startsWith("/external")) {
                 return chain.filter(exchange);
             }
 
-            // 1. 获取认证头信息
             String apiKey = exchange.getRequest().getHeaders().getFirst("X-API-KEY");
             String timestamp = exchange.getRequest().getHeaders().getFirst("X-TIMESTAMP");
             String signature = exchange.getRequest().getHeaders().getFirst("X-SIGNATURE");
 
-            // 2. 验证必要头信息存在
             if (apiKey == null || timestamp == null || signature == null) {
-                return unauthorized(exchange, "Missing authentication headers");
+                return createErrorResponse(exchange, 401, "Missing authentication headers", HttpStatus.UNAUTHORIZED);
             }
 
-            // 3. 验证时间戳有效性
             try {
                 long requestTime = Long.parseLong(timestamp);
                 long currentTime = System.currentTimeMillis();
 
                 if (Math.abs(currentTime - requestTime) > TIMESTAMP_THRESHOLD) {
-                    return unauthorized(exchange, "Timestamp expired");
+                    return createErrorResponse(exchange, 401, "Timestamp expired", HttpStatus.UNAUTHORIZED);
                 }
             } catch (NumberFormatException e) {
-                return unauthorized(exchange, "Invalid timestamp format");
+                return createErrorResponse(exchange, 400, "Invalid timestamp format", HttpStatus.BAD_REQUEST);
             }
 
-            // 4. 生成并验证签名
             String expectedSignature = generateSignature(apiKey, timestamp);
             if (!expectedSignature.equalsIgnoreCase(signature)) {
-                return unauthorized(exchange, "Invalid signature");
+                return createErrorResponse(exchange, 401, "Invalid signature", HttpStatus.UNAUTHORIZED);
             }
-            System.out.println("Forwarding to: " + exchange.getRequest().getURI());
+
             return chain.filter(exchange);
         };
     }
 
-    private Mono<Void> unauthorized(ServerWebExchange exchange, String reason) {
-        exchange.getResponse().setStatusCode(HttpStatus.UNAUTHORIZED);
-        exchange.getResponse().getHeaders().add("X-Auth-Error", reason);
-        return exchange.getResponse().setComplete();
+    /**
+     * 创建标准错误响应
+     *
+     * @param exchange 请求上下文
+     * @param code 业务错误码
+     * @param message 错误消息
+     * @param httpStatus HTTP状态码
+     * @return Mono<Void>
+     */
+    private Mono<Void> createErrorResponse(ServerWebExchange exchange, int code,
+                                           String message, HttpStatus httpStatus) {
+        exchange.getResponse().setStatusCode(httpStatus);
+        exchange.getResponse().getHeaders().setContentType(MediaType.APPLICATION_JSON);
+
+        // 构建标准响应格式
+        Map<String, Object> responseMap = new HashMap<>();
+        responseMap.put("code", code);
+        responseMap.put("message", message);
+        responseMap.put("data", null);
+
+        // 手动序列化JSON
+        String jsonResponse = "{\"code\":" + code +
+                ",\"message\":\"" + escapeJson(message) +
+                "\",\"data\":null}";
+
+        byte[] bytes = jsonResponse.getBytes(StandardCharsets.UTF_8);
+        DataBuffer buffer = exchange.getResponse().bufferFactory().wrap(bytes);
+
+        return exchange.getResponse().writeWith(Mono.just(buffer));
+    }
+
+    /**
+     * 转义JSON字符串中的特殊字符
+     */
+    private String escapeJson(String input) {
+        return input.replace("\"", "\\\"")
+                .replace("\\", "\\\\")
+                .replace("\b", "\\b")
+                .replace("\f", "\\f")
+                .replace("\n", "\\n")
+                .replace("\r", "\\r")
+                .replace("\t", "\\t");
     }
 
     private String generateSignature(String apiKey, String timestamp) {