Spring Boot项目如何安全接入学历验证服务？天远API Java SDK 实践

curl -X POST '<https://apitest.tianyuanapi.com/api/v1/IVYZ9A2B?t=1730505600000>' \\
-H 'Access-Id: YOUR_ACCESS_ID' \\
-H 'Content-Type: application/json' \\
-d '{"data": "UkVQTEFDRV9XSVRIX0VOQ1JZUFRFRF9EQVRB"}'

import org.bouncycastle.jce.provider.BouncyCastleProvider;
import com.fasterxml.jackson.databind.ObjectMapper;

import javax.crypto.Cipher;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.spec.SecretKeySpec;
import java.security.Security;
import java.util.Base64;
import java.nio.charset.StandardCharsets;
import java.time.Instant;
import java.util.Map;
import java.util.HashMap;
import org.springframework.http.*;
import org.springframework.web.client.RestTemplate;

public class TianYuanEducationApi {

    static {
        Security.addProvider(new BouncyCastleProvider());
    }

    private static final String ACCESS_ID = "your_access_id";
    private static final String ACCESS_KEY_HEX = "a1b2c3d4e5f67890a1b2c3d4e5f67890"; // 32位十六进制

    public static byte[] hexToBytes(String hex) {
        int len = hex.length();
        byte[] data = new byte[len / 2];
        for (int i = 0; i < len; i += 2) {
            data[i / 2] = (byte) ((Character.digit(hex.charAt(i), 16) << 4)
                                + Character.digit(hex.charAt(i + 1), 16));
        }
        return data;
    }

    public static String encrypt(String plainText, String hexKey) throws Exception {
        byte[] key = hexToBytes(hexKey);
        byte[] iv = new byte[16];
        new java.security.SecureRandom().nextBytes(iv);

        Cipher cipher = Cipher.getInstance("AES/CBC/PKCS7Padding", "BC");
        cipher.init(Cipher.ENCRYPT_MODE, new SecretKeySpec(key, "AES"), new IvParameterSpec(iv));
        byte[] encrypted = cipher.doFinal(plainText.getBytes(StandardCharsets.UTF_8));

        byte[] combined = new byte[iv.length + encrypted.length];
        System.arraycopy(iv, 0, combined, 0, iv.length);
        System.arraycopy(encrypted, 0, combined, iv.length, encrypted.length);
        return Base64.getEncoder().encodeToString(combined);
    }

    public static String decrypt(String base64Data, String hexKey) throws Exception {
        byte[] combined = Base64.getDecoder().decode(base64Data);
        byte[] iv = new byte[16];
        byte[] ciphertext = new byte[combined.length - 16];
        System.arraycopy(combined, 0, iv, 0, 16);
        System.arraycopy(combined, 16, ciphertext, 0, ciphertext.length);

        Cipher cipher = Cipher.getInstance("AES/CBC/PKCS7Padding", "BC");
        cipher.init(Cipher.DECRYPT_MODE, new SecretKeySpec(hexToBytes(hexKey), "AES"), new IvParameterSpec(iv));
        byte[] decrypted = cipher.doFinal(ciphertext);
        return new String(decrypted, StandardCharsets.UTF_8);
    }

    public static Map<String, Object> queryEducation(String name, String idCard) {
        String url = "<https://apitest.tianyuanapi.com/api/v1/IVYZ9A2B?t=>" + Instant.now().toEpochMilli();
        String jsonPayload = String.format("{\\"name\\":\\"%s\\",\\"id_card\\":\\"%s\\"}", name, idCard);

        try {
            String encryptedData = encrypt(jsonPayload, ACCESS_KEY_HEX);
            HttpHeaders headers = new HttpHeaders();
            headers.set("Access-Id", ACCESS_ID);
            headers.setContentType(MediaType.APPLICATION_JSON);
            HttpEntity<Map<String, String>> request = new HttpEntity<>(Map.of("data", encryptedData), headers);

            RestTemplate restTemplate = new RestTemplate();
            ResponseEntity<Map> response = restTemplate.postForEntity(url, request, Map.class);
            Map<String, Object> resp = response.getBody();

            if (!"200".equals(resp.get("err_code"))) {
                System.err.println("API业务错误: " + resp.get("err_msg"));
                return null;
            }

            String decrypted = decrypt((String) resp.get("data"), ACCESS_KEY_HEX);
            return new ObjectMapper().readValue(decrypted, Map.class);
        } catch (Exception e) {
            System.err.println("调用失败: " + e.getMessage());
            e.printStackTrace();
            return null;
        }
    }

    public static void main(String[] args) {
        Map<String, Object> result = queryEducation("张三", "110101199001011234");
        if (result != null) {
            System.out.println("学历查询成功: " + result);
        }
    }
}