kazelee
2025-06-09 fe3167683576e5dd943fd5acc52e713652365def
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
using System.Linq;
using System.Net.Http;
using System.Net;
using System.Text;
using System.Web.Http;
 
using Newtonsoft.Json;
 
using static HH.WCS.Mobox3.AnGang.api.OtherModel;
using System.Threading.Tasks;
 
namespace HH.WCS.Mobox3.AnGang.api {
    /// <summary>
    /// ERP 调用的接口
    /// </summary>
    [RoutePrefix("api")]
    public class ErpController : ApiController {
        /// <summary>
        /// 入库数据同步(ERP)
        /// </summary>
        /// <param name="model"></param>
        /// <returns></returns>
        [HttpPost]
        [Route("InboundDataSync")]
        public IHttpActionResult InboundDataSync(InboundDataSyncInfo model) {
            LogHelper.Info("触发API:入库数据同步" + JsonConvert.SerializeObject(model), "API");
 
            //var headers = Request.Headers; // 暂不考虑对请求HTTP进行校验,默认发来的请求格式都正确
 
            //return new ErpResult { errCode = 1, errMsg = "测试" };
            //return CreateSuccessResponse(new ErpResult { errCode = 1, errMsg = "测试"});
 
            //var headers = Request.Headers;
            //return ProcessInboundData(headers, model);
 
            //return ApiHelper.InboundDataSync(model);
            return NormalProcessInboundData(model); // 暂时使用原本的逻辑
        }
 
        /// <summary>
        /// 出库发料同步(ERP)
        /// </summary>
        /// <param name="model"></param>
        /// <returns></returns>
        [HttpPost]
        [Route("OutboundDataSync")]
        public IHttpActionResult OutboundDataSync(OutboundDataSyncInfo model) {
            LogHelper.Info("触发API:出库发料同步" + JsonConvert.SerializeObject(model), "API");
 
            //var headers = Request.Headers;
            //return ProcessOutboundData(headers, model);
 
            //return ApiHelper.OutboundDataSync(model);
            return NormalProcessOutboundData(model); // 暂时使用原本的逻辑
        }
 
        private IHttpActionResult NormalProcessInboundData(InboundDataSyncInfo model) {
            var data = ApiHelper.InboundDataSync(model);
            return ResponseMessage(new HttpResponseMessage(HttpStatusCode.OK) {
                Headers = { },
                Content = new StringContent(JsonConvert.SerializeObject(data), Encoding.UTF8, "application/json")
            });
        }
 
        private IHttpActionResult NormalProcessOutboundData(OutboundDataSyncInfo model) {
            var data = ApiHelper.OutboundDataSync(model);
            return ResponseMessage(new HttpResponseMessage(HttpStatusCode.OK) {
                Headers = { },
                Content = new StringContent(JsonConvert.SerializeObject(data), Encoding.UTF8, "application/json")
            });
        }
 
        private IHttpActionResult ProcessInboundData(System.Net.Http.Headers.HttpRequestHeaders headers, InboundDataSyncInfo model) {
            // 必须字段验证
            if (!headers.Contains("sourceAppCode") || !headers.Contains("serviceId") || !headers.Contains("msgSendTime")) {
                return CreateErrorResponse("2003", "缺少必要请求头参数");
            }
 
            var headerModel = new {
                SourceAppCode = headers.GetValues("sourceAppCode").First(),
                Password = headers.Contains("password") ? headers.GetValues("password").First() : null,
                ServiceId = headers.GetValues("serviceId").First(),
                MsgToken = headers.Contains("msgToken") ? headers.GetValues("msgToken").First() : null,
                MsgSendTime = headers.GetValues("msgSendTime").First()
            };
 
            // 2. 验证Header
            var validationResult = ValidateHeaders(headerModel);
            if (validationResult != null) {
                return validationResult;
            }
 
            // 3. 读取Body
            //string requestBody = await Request.Content.ReadAsStringAsync(); // 不需要异步读取,直接用model
 
            // 4. 验证Body
            if (Request.Content.Headers.ContentLength > 2 * 1024 * 1024) {
                return CreateErrorResponse("2102", "消息内容过长,超过2M");
            }
 
            // 5. 处理业务逻辑
            var result = ApiHelper.InboundDataSync(model);
 
            // 6. 返回成功响应
            return CreateSuccessResponse(result);
        }
 
        private IHttpActionResult ProcessOutboundData(System.Net.Http.Headers.HttpRequestHeaders headers, OutboundDataSyncInfo model) {
            // 必须字段验证
            if (!headers.Contains("sourceAppCode") || !headers.Contains("serviceId") || !headers.Contains("msgSendTime")) {
                return CreateErrorResponse("2003", "缺少必要请求头参数");
            }
 
            var headerModel = new {
                SourceAppCode = headers.GetValues("sourceAppCode").First(),
                Password = headers.Contains("password") ? headers.GetValues("password").First() : null,
                ServiceId = headers.GetValues("serviceId").First(),
                MsgToken = headers.Contains("msgToken") ? headers.GetValues("msgToken").First() : null,
                MsgSendTime = headers.GetValues("msgSendTime").First()
            };
 
            // 2. 验证Header
            var validationResult = ValidateHeaders(headerModel);
            if (validationResult != null) {
                return validationResult;
            }
 
            // 3. 读取Body
            //string requestBody = await Request.Content.ReadAsStringAsync();
 
            // 4. 验证Body
            if (Request.Content.Headers.ContentLength > 2 * 1024 * 1024) {
                return CreateErrorResponse("2102", "消息内容过长,超过2M");
            }
 
            // 5. 处理业务逻辑
            var result = ApiHelper.OutboundDataSync(model);
 
            // 6. 返回成功响应
            return CreateSuccessResponse(result);
        }
 
        private IHttpActionResult CreateSuccessResponse(object data) {
            return ResponseMessage(new HttpResponseMessage(HttpStatusCode.OK) {
                Headers = { { "returnCode", "0" } },
                Content = new StringContent(JsonConvert.SerializeObject(data), Encoding.UTF8, "application/json")
            });
        }
 
        private IHttpActionResult CreateErrorResponse(string code, string message) {
            return ResponseMessage(new HttpResponseMessage(HttpStatusCode.OK) {
                Headers = { { "returnCode", code } },
                Content = new StringContent(message)
            });
        }
 
        private IHttpActionResult ValidateHeaders(dynamic headers) {
            // 实现所有Header验证逻辑
            if (!IsRegisteredApp(headers.SourceAppCode, headers.Password)) {
                return CreateErrorResponse("2201", "源调用系统未注册");
            }
 
            if (!IsValidService(headers.ServiceId)) {
                return CreateErrorResponse("2202", "代理服务未注册");
            }
 
            if (!IsValidDateTime(headers.MsgSendTime)) {
                return CreateErrorResponse("2101", "时间格式校验失败");
            }
 
            if (!string.IsNullOrEmpty(headers.MsgToken) && headers.MsgToken.Length > 32) {
                return CreateErrorResponse("2104", "消息令牌过长,超过32位");
            }
 
            return null;
        }
 
        private bool IsRegisteredApp(string appId, string password) {
            return true;
        }
 
        private bool IsValidService(string serviceId) {
            return true;
        }
 
        private bool IsValidDateTime(string dataTime) {
            return true;
        }
    }
}