gfwleak/enderbyendera-realtime-protection
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

1. 重构审核状态，将其转换为状态模式，添加Using状态（使用中）

Browse Source 
2. 策略模板添加方法，通过反射判断防护等级中是否有字段为true
This commit is contained in:
EnderByEndera
2024-04-17 14:01:46 +08:00
parent de6437b8b0
commit 7e990754b9
33 changed files with 411 additions and 94 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
src/main/java/com/realtime/protection/configuration/utils/NonEmptyFieldFetcher.java Normal file
View File

@@ -0,0 +1,30 @@
package com.realtime.protection.configuration.utils;
import java.lang.reflect.Field;
import java.util.ArrayList;
import java.util.List;
public class NonEmptyFieldFetcher {
public static List<Field> getNonEmptyFields(Object object) throws IllegalAccessException {
List<Field> nonEmptyFields = new ArrayList<>();
Class<?> clazz = object.getClass();
// 获取类中所有的字段，包括继承的字段
Field[] fields = clazz.getDeclaredFields();
for (Field field : fields) {
// 打开字段的访问权限
field.setAccessible(true);
// 获取字段的值
Object value = field.get(object);
// 检查字段是否非空
if (value != null) {
nonEmptyFields.add(field);
}
}
return nonEmptyFields;
}
}

67
src/main/java/com/realtime/protection/configuration/utils/enums/RuleEnum.java Normal file
View File

@@ -0,0 +1,67 @@
package com.realtime.protection.configuration.utils.enums;
import com.realtime.protection.configuration.entity.rule.staticrule.StaticRuleObject;
import com.realtime.protection.configuration.utils.NonEmptyFieldFetcher;
import java.lang.reflect.Field;
import java.util.*;
public enum RuleEnum {
// 不带掩码规则的五元组规则类型对应表
SIP_SPORT_DIP_PROTOCOL("SIP_SPORT_DIP_PROTOCOL"),
SIP_DIP_DPORT_PROTOCOL("SIP_DIP_DPORT_PROTOCOL"),
SIP_SPORT_PROTOCOL("SIP_SPORT_PROTOCOL"),
SIP_DIP_PROTOCOL("SIP_DIP_PROTOCOL"),
SIP_DPORT_PROTOCOL("SIP_DPORT_PROTOCOL"),
SPORT_DIP_PROTOCOL("SPORT_DIP_PROTOCOL"),
DIP_DPORT_PROTOCOL("DIP_DPORT_PROTOCOL"),
SIP_DIP("SIP_DIP"),
SIP_PROTOCOL("SIP_PROTOCOL"),
DIP_PROTOCOL("DIP_PROTOCOL"),
SIP("SIP"),
DIP("DIP"),
// 带掩码规则的五元组规则类型对应表
DIP_MDIP("DIP_MDIP"),
DIP_MDIP_PROTOCOL_MPROTOCOL("DIP_MDIP_PROTOCOL_MPROTOCOL"),
DIP_MDIP_DPORT_MDPORT_PROTOCOL_MPROTOCOL("DIP_MDIP_DPORT_MDPORT_PROTOCOL_MPROTOCOL"),
SPORT_MSPORT_DIP_MDIP_PROTOCOL_MPROTOCOL("SPORT_MSPORT_DIP_MDIP_PROTOCOL_MPROTOCOL"),
SPORT_MSPORT_DIP_MDIP_DPORT_MDPORT_PROTOCOL_MPROTOCOL("SPORT_MSPORT_DIP_MDIP_DPORT_MDPORT_PROTOCOL_MPROTOCOL"),
SIP_MSIP("SIP_MSIP"),
SIP_MSIP_PROTOCOL_MPROTOCOL("SIP_MSIP_PROTOCOL_MPROTOCOL"),
SIP_MSIP_DPORT_MDPORT_PROTOCOL_MPROTOCOL("SIP_MSIP_DPORT_MDPORT_PROTOCOL_MPROTOCOL"),
SIP_MSIP_SPORT_MSPORT_PROTOCOL_MPROTOCOL("SIP_MSIP_SPORT_MSPORT_PROTOCOL_MPROTOCOL"),
SIP_MSIP_SPORT_MSPORT_DPORT_MDPORT_PROTOCOL_MPROTOCOL("SIP_MSIP_SPORT_MSPORT_DPORT_MDPORT_PROTOCOL_MPROTOCOL"),
SIP_MSIP_DIP_MDIP("SIP_MSIP_DIP_MDIP"),
SIP_MSIP_DIP_MDIP_PROTOCOL_MPROTOCOL("SIP_MSIP_DIP_MDIP_PROTOCOL_MPROTOCOL"),
SIP_MSIP_DIP_MDIP_DPORT_MDPORT_PROTOCOL_MPROTOCOL("SIP_MSIP_DIP_MDIP_DPORT_MDPORT_PROTOCOL_MPROTOCOL"),
SIP_MSIP_SPORT_MSPORT_DIP_MDIP_PROTOCOL_MPROTOCOL("SIP_MSIP_SPORT_MSPORT_DIP_MDIP_PROTOCOL_MPROTOCOL"),
SIP_MSIP_SPORT_MSPORT_DIP_MDIP_DPORT_MDPORT_PROTOCOL_MPROTOCOL("SIP_MSIP_SPORT_MSPORT_DIP_MDIP_DPORT_MDPORT_PROTOCOL_MPROTOCOL")
;
private final Set<String> rule;
private static final List<Set<String>> ruleEnumList = new ArrayList<>();
static {
for (RuleEnum ruleEnum : RuleEnum.values()) {
ruleEnumList.add(ruleEnum.rule);
}
}
RuleEnum(String ruleName) {
this.rule = new HashSet<>(Arrays.stream(ruleName.split("_")).toList());
}
public static Boolean checkValidate(StaticRuleObject staticRuleObject) throws IllegalAccessException {
List<Field> nonEmptyFields = NonEmptyFieldFetcher.getNonEmptyFields(staticRuleObject);
List<String> fieldNames = new java.util.ArrayList<>(List.of());
for (Field field : nonEmptyFields) {
String fieldName = field.getName().toUpperCase().replace("STATICRULE", "");
// 将合理的非空字段加入fieldNames中
// 需要去掉STATICRULE字段，仅保留后面的字段
if (fieldName.contains("IP")
|| fieldName.contains("PORT")
|| fieldName.contains("PROTOCOL")) fieldNames.add(fieldName);
}
return ruleEnumList.stream().anyMatch(rule -> rule.equals(new HashSet<>(fieldNames)));
}
}

1
src/main/java/com/realtime/protection/configuration/utils/enums/StateEnum.java
View File

@@ -1,6 +1,5 @@
package com.realtime.protection.configuration.utils.enums;
import com.realtime.protection.configuration.utils.status.State;
import com.realtime.protection.server.task.status.states.*;
import lombok.Getter;

55
src/main/java/com/realtime/protection/configuration/utils/enums/audit/AuditStatusEnum.java Normal file
View File

@@ -0,0 +1,55 @@
package com.realtime.protection.configuration.utils.enums.audit;
import com.realtime.protection.configuration.utils.enums.audit.states.*;
import lombok.Getter;
import java.util.HashMap;
import java.util.Map;
@Getter
public enum AuditStatusEnum {
PENDING(0, new PendingState()), // 未审核状态
RETURNED(1, new ReturnedState()), // 退回状态
AUDITED(2, new AuditedState()), // 已审核状态
USING(3, new UsingState()); // 使用中状态
private final Integer num;
private final State state;
private static final Map<Integer, State> NumToStateMap = new HashMap<>();
private static final Map<State, Integer> StateToNumMap = new HashMap<>();
private static final Map<State, AuditStatusEnum> StateToAuditStatusEnumMap = new HashMap<>();
static {
for (AuditStatusEnum status : AuditStatusEnum.values()) {
NumToStateMap.put(status.getNum(), status.getState());
StateToNumMap.put(status.getState(), status.getNum());
StateToAuditStatusEnumMap.put(status.getState(), status);
}
}
AuditStatusEnum(int auditStatus, State state) {
this.num = auditStatus;
this.state = state;
}
public static State getStateByNum(Integer auditStatusNum) {
if (auditStatusNum == null) {
return null;
}
return NumToStateMap.get(auditStatusNum);
}
public static Integer getNumByState(State state) {
if (state == null) {
return null;
}
return StateToNumMap.get(state);
}
public static AuditStatusEnum getAuditStatusEnumByState(State state) {
if (state == null) {
return null;
}
return StateToAuditStatusEnumMap.get(state);
}
}

26
src/main/java/com/realtime/protection/configuration/utils/enums/audit/AuditStatusValidator.java Normal file
View File

@@ -0,0 +1,26 @@
package com.realtime.protection.configuration.utils.enums.audit;
import com.realtime.protection.configuration.utils.enums.audit.states.State;
import lombok.extern.slf4j.Slf4j;
@Slf4j
public class AuditStatusValidator {
private final State auditStatusOriginal;
public AuditStatusValidator(Integer auditStatusOriginal) {
this.auditStatusOriginal = AuditStatusEnum.getStateByNum(auditStatusOriginal);
}
public static AuditStatusValidator setOriginal(Integer auditStatusOriginal) {
return new AuditStatusValidator(auditStatusOriginal);
}
public Boolean checkValidate(Integer newAuditStatus) {
State newState = AuditStatusEnum.getStateByNum(newAuditStatus);
if (newState == null) {
return false;
}
return auditStatusOriginal.checkValidate(newState);
}
}

13
src/main/java/com/realtime/protection/configuration/utils/enums/audit/states/AuditedState.java Normal file
View File

@@ -0,0 +1,13 @@
package com.realtime.protection.configuration.utils.enums.audit.states;
import com.realtime.protection.configuration.utils.enums.audit.AuditStatusEnum;
public class AuditedState implements State {
@Override
public Boolean checkValidate(State newState) {
return switch (AuditStatusEnum.getAuditStatusEnumByState(newState)) {
case RETURNED -> false;
case PENDING, USING, AUDITED -> true;
};
}
}

13
src/main/java/com/realtime/protection/configuration/utils/enums/audit/states/PendingState.java Normal file
View File

@@ -0,0 +1,13 @@
package com.realtime.protection.configuration.utils.enums.audit.states;
import com.realtime.protection.configuration.utils.enums.audit.AuditStatusEnum;
public class PendingState implements State {
@Override
public Boolean checkValidate(State newState) {
return switch (AuditStatusEnum.getAuditStatusEnumByState(newState)) {
case USING -> false;
case PENDING, RETURNED, AUDITED -> true;
};
}
}

13
src/main/java/com/realtime/protection/configuration/utils/enums/audit/states/ReturnedState.java Normal file
View File

@@ -0,0 +1,13 @@
package com.realtime.protection.configuration.utils.enums.audit.states;
import com.realtime.protection.configuration.utils.enums.audit.AuditStatusEnum;
public class ReturnedState implements State {
@Override
public Boolean checkValidate(State newState) {
return switch (AuditStatusEnum.getAuditStatusEnumByState(newState)) {
case PENDING, RETURNED -> true;
case AUDITED, USING -> false;
};
}
}

5
src/main/java/com/realtime/protection/configuration/utils/enums/audit/states/State.java Normal file
View File

@@ -0,0 +1,5 @@
package com.realtime.protection.configuration.utils.enums.audit.states;
public interface State {
Boolean checkValidate(State newState);
}

13
src/main/java/com/realtime/protection/configuration/utils/enums/audit/states/UsingState.java Normal file
View File

@@ -0,0 +1,13 @@
package com.realtime.protection.configuration.utils.enums.audit.states;
import com.realtime.protection.configuration.utils.enums.audit.AuditStatusEnum;
public class UsingState implements State {
@Override
public Boolean checkValidate(State newState) {
return switch (AuditStatusEnum.getAuditStatusEnumByState(newState)) {
case AUDITED, USING -> true;
case PENDING, RETURNED -> false;
};
}
}

18
src/main/java/com/realtime/protection/configuration/utils/status/AuditStatus.java
View File

@@ -1,18 +0,0 @@
package com.realtime.protection.configuration.utils.status;
import lombok.Getter;
@Getter
public enum AuditStatus {
PENDING(0), // 未审核状态
RETURNED(1), // 退回状态
AUDITED(2), // 已审核状态
DRAFT(3); // 草稿
private final int auditStatus;
AuditStatus(int auditStatus) {
this.auditStatus = auditStatus;
}
}

32
src/main/java/com/realtime/protection/configuration/utils/status/AuditStatusValidator.java
View File

@@ -1,32 +0,0 @@
package com.realtime.protection.configuration.utils.status;
import lombok.extern.slf4j.Slf4j;
@Slf4j
public class AuditStatusValidator {
private final Integer auditStatusOriginal;
public AuditStatusValidator(Integer auditStatusOriginal) {
this.auditStatusOriginal = auditStatusOriginal;
}
public static AuditStatusValidator setOriginal(Integer auditStatusOriginal) {
return new AuditStatusValidator(auditStatusOriginal);
}
public Boolean checkValidate(Integer newAuditStatus) {
switch (newAuditStatus) {
case 0, 1 -> {
return auditStatusOriginal != 2;
}
case 2 -> {
return auditStatusOriginal != 1;
}
default -> {
log.debug("欲修改的审核状态不正确，需要使用正确的审核状态，当前的审核状态：{}", auditStatusOriginal);
return false;
}
}
}
}

9
src/main/java/com/realtime/protection/configuration/utils/status/State.java
View File

@@ -1,9 +0,0 @@
package com.realtime.protection.configuration.utils.status;
import com.realtime.protection.configuration.exception.DorisStartException;
import com.realtime.protection.server.command.CommandService;
import com.realtime.protection.server.task.TaskService;
public interface State {
Boolean handle(State newState, CommandService commandService, TaskService taskService, Long taskId) throws DorisStartException;
}

20
src/main/java/com/realtime/protection/configuration/utils/status/StateNum.java
View File

@@ -1,20 +0,0 @@
package com.realtime.protection.configuration.utils.status;
import lombok.Getter;
@Getter
public enum StateNum {
PENDING(0),
RUNNING(1),
PAUSED(2),
STOPPED(3),
FAILED(4),
FINISHED(5);
private final int stateNum;
StateNum(int stateNum) {
this.stateNum = stateNum;
}
}