模拟博客园登录java实现

本人能力偏低，对于各种理论都理解不够深刻，通过查询资料，闲来无事写的一个博客园的登录模拟程序。希望各位提提建议。

import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.io.OutputStreamWriter;
import java.net.URL;
import java.security.GeneralSecurityException;
import java.util.List;

import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.X509TrustManager;

import com.dyf.test.LoginDemo;


public class MyBlong {

    private static String url;
    public static String realCookie;
    
    
    private X509TrustManager xtm = new TrustVer();
 
    //创建一个类去信任所有的（主机（个人觉得翻译成主机））
    private HostnameVerifier hnv = new HostnameVerifier() {
        public boolean verify(String hostname, SSLSession session) {
            return false;
        }
    }; 
 
    //这个方法中我们假定我们的系统是不太严格的校验和信任管理的。代码一旦执行，就会调用静态方法HttpsURLConnection();
    public MyBlong(String url) {
        this.url = url;
        SSLContext sslContext = null;
 
        try {
            sslContext = SSLContext.getInstance("TLS");
            X509TrustManager[] xtmArray = new X509TrustManager[] { xtm };
            sslContext.init(null, xtmArray, new java.security.SecureRandom());
        } catch(GeneralSecurityException gse) {
            gse.printStackTrace();
        }
 
        if(sslContext != null) {
            HttpsURLConnection.setDefaultSSLSocketFactory(sslContext.getSocketFactory());
        }
        HttpsURLConnection.setDefaultHostnameVerifier(hnv);
 
    }

    public MyBlong() {
　　　　//这个不写好像有个程序里面会报错，所以就加上了
    }

    public void getHtml(String url,String data) {
        new LoginDemo(url);
        //主要获取信息参考http://www.jianshu.com/p/2cd5ba0bd7b3
        try {
            
                //首先通过get方法获取返回的cookie 通过firebug看到的有两次请求 返回两个cookie的是有用的，
                //个人看了一下只是多了AspxAutoDetectCookieSupport=1，于是手动加上了
               HttpsURLConnection urlCon = (HttpsURLConnection) (new URL(url)).openConnection();

               String cookie = urlCon.getHeaderField("Set-Cookie");
               cookie = "AspxAutoDetectCookieSupport=1; "+cookie.substring(0,cookie.indexOf(";"));
               
               BufferedReader br = new BufferedReader(new InputStreamReader(urlCon.getInputStream(),"utf-8"));
               String str = "";
               String verificationToken = "";
               while((str=br.readLine())!=null){
                   //获取VerificationToken
                   if(str.contains("VerificationToken")){
                       verificationToken = str.substring(str.indexOf(":")+3,str.lastIndexOf("'"));
                   }
               }
               br.close();
               urlCon.disconnect();

               //查看请求头信息
//               Map<String, List<String>> headMap = urlCon.getHeaderFields();
               
//               Set<Map.Entry<String, List<String>>> headSet = headMap.entrySet();
//               Iterator<Entry<String, List<String>>> it = headSet.iterator();
//               while (it.hasNext()) {
//                System.out.println(it.next());
//               }
                   //post请求吧用户名和密码加密后和之前获取的cookie还有VerificationToken以及X-Requested-With（经证明这个也是必须的）一同发送给服务器
               HttpsURLConnection _urlCon = (HttpsURLConnection) (new URL(url)).openConnection();

               _urlCon.setDoInput(true);
               _urlCon.setDoOutput(true);
               _urlCon.setRequestProperty("VerificationToken", verificationToken);
               _urlCon.setRequestProperty("Cookie", cookie);
               _urlCon.setRequestProperty("X-Requested-With", "XMLHttpRequest");
               _urlCon.setRequestProperty("Content-Type", "application/json; charset=utf-8");
               OutputStreamWriter osw = new OutputStreamWriter(_urlCon.getOutputStream());
               osw.write(data);
               osw.flush();
               osw.close();
               
//               System.out.println("==================这段只是查看响应的东西==========");
//
//               
//               BufferedReader _br = new BufferedReader(new InputStreamReader(_urlCon.getInputStream(),"utf-8"));
//               String line = "";
//               StringBuilder sb = new StringBuilder();
//               while ((line = _br.readLine()) != null) {
//                    sb.append(line);
//                    sb.append("
");
//                }
//               _br.close();
//               
//               System.out.println(sb.toString());
               
               List<String> temp_List = (_urlCon.getHeaderFields()).get("Set-Cookie");
               
              for (String s : temp_List) {
                  
                  //.CNBlogsCookie这个才是关键的cookie
                  if(s.contains(".CNBlogsCookie")){
                       realCookie = s.substring(s.indexOf("=")+1,s.indexOf(";"));
                       System.out.println(realCookie);
                   }
              }
               
              //只是查看请求头信息
//               Map<String, List<String>> headMap = _urlCon.getHeaderFields();
//               Set<Map.Entry<String, List<String>>> headSet = headMap.entrySet();
//               Iterator<Entry<String, List<String>>> it = headSet.iterator();
//               while (it.hasNext()) {
//                System.out.println(it.next());
//               }
               
               _urlCon.disconnect();
        } catch(Exception mue) {
            mue.printStackTrace();
        } 
    }
    
    //just a kidding
//    public static void main(String[] args) {
//        LoginDemo lg = new LoginDemo("https://passport.cnblogs.com/user/signin");
//        String userName = KeyDemo.myencode("风清扬dyf");
//        String password = KeyDemo.myencode("ssss");//我会告诉你我的密码吗
//        String jsonTest = "{"input1":"" + userName + "","input2":"" + password + "","remember":false}";
//        lg.getHtml("https://passport.cnblogs.com/user/signin",jsonTest); 
//    }
}

下面是类TrustVer

import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

import javax.net.ssl.X509TrustManager;
/*
*这个类是信任所有的证书
*/
public class TrustVer implements X509TrustManager{

    public void checkClientTrusted(X509Certificate[] chain, String authType)
            throws CertificateException {

    }

    public void checkServerTrusted(X509Certificate[] chain, String authType)
            throws CertificateException {

    }

    public X509Certificate[] getAcceptedIssuers() {
        return null;
    }

}

下面是类KeyDemo ,主要功能就是对输入的登录名和密码加密，公钥我是直接复制过来的

package com.dyf.test;

import java.security.KeyFactory;
import java.security.PublicKey;
import java.security.spec.X509EncodedKeySpec;

import javax.crypto.Cipher;

import sun.misc.BASE64Decoder;
import sun.misc.BASE64Encoder;


public class KeyDemo {
    
    private static final String publicKeyStr = "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCp0wHYbg/NOPO3nzMD3dndwS0MccuMeXCHgVlGOoYyFwLdS24Im2e7YyhB0wrUsyYf0/nhzCzBK8ZC9eCWqd0aHbdgOQT6CuFQBMjbyGYvlVYU2ZP7kG9Ft6YV6oc9ambuO7nPZh+bvXH0zDKfi02prknrScAKC0XhadTHT3Al0QIDAQAB";
    
    public static String myencode(String str) {
        String result = "";
            try {
                byte[] keyBytes = (new BASE64Decoder()).decodeBuffer(publicKeyStr);//这里可以换成其他的方法具体可以去网上查一查
                X509EncodedKeySpec keySpec = new X509EncodedKeySpec(keyBytes);
                KeyFactory keyFactory = KeyFactory.getInstance("RSA");
                PublicKey publicKey = keyFactory.generatePublic(keySpec);
                Cipher cipher = Cipher.getInstance("RSA");
                cipher.init(Cipher.ENCRYPT_MODE,publicKey);
                //这里获取字符串字节数组要标明编码类型不然会加密后的字符串会出错
                byte[] data = cipher.doFinal(str.getBytes("utf-8"));
                result = (new BASE64Encoder()).encode(data);//这里可以换成其他的方法具体可以去网上查一查
                
                
//                System.out.println("原文："+str);  
 //               System.out.println("加密："+result);  
                
            } catch (Exception e) {
                System.out.println("解码出错");
            } 
            return result;
    
    
    }

}

就只是简单实现了登录，返回值是true获取到了cookie值便于之后获取其他的信息，只是目前还没有完善

gui已经实现了客户端的编写，这里就不贴出来了，因为实在是太难看了。