devbox
凡人多烦事01
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

Springboot3.0+Security6.0+jwt+jdk17登陆认证_springboot3.0+security6.0+redis+jdk17

作者：凡人多烦事01 | 2024-04-08 22:37:29

赞

踩

springboot3.0+security6.0+redis+jdk17

集各位大佬的精华，弄出来的一套基于jdk17，Springboot3.0，SpringSecurity6.0，jwt的登陆及接口拦截体系。

1.先贴依赖：

  1.  <parent>
  2.      <groupId>org.springframework.boot</groupId>
  3.      <artifactId>spring-boot-starter-parent</artifactId>
  4.      <version>3.0.0</version>
  5.      <relativePath/> 
  6.  </parent>
  1.  
  2.    
  3.         <dependency>
  4.             <groupId>org.springframework.boot</groupId>
  5.             <artifactId>spring-boot-starter-jdbc</artifactId>
  6.         </dependency>
  7.         <dependency>
  8.             <groupId>org.springframework.boot</groupId>
  9.             <artifactId>spring-boot-starter-security</artifactId>
  10.         </dependency>
  11.         <dependency>
  12.             <groupId>org.springframework.boot</groupId>
  13.             <artifactId>spring-boot-starter-web</artifactId>
  14.         </dependency>
  15.         <dependency>
  16.             <groupId>org.springframework.boot</groupId>
  17.             <artifactId>spring-boot-starter-test</artifactId>
  18.             <scope>test</scope>
  19.         </dependency>
  20.         <dependency>
  21.             <groupId>org.springframework.security</groupId>
  22.             <artifactId>spring-security-test</artifactId>
  23.             <scope>test</scope>
  24.         </dependency>
  25.  
  26.         <!-- jwt -->
  27.         <dependency>
  28.             <groupId>com.nimbusds</groupId>
  29.             <artifactId>nimbus-jose-jwt</artifactId>
  30.             <version>9.31</version>
  31.         </dependency>
  32.         <dependency>
  33.             <groupId>org.projectlombok</groupId>
  34.             <artifactId>lombok</artifactId>
  35.             <optional>true</optional>
  36.         </dependency>
  37.  
  38.  
  39.         <!-- mybatis-plus -->
  40.         <dependency>
  41.             <groupId>com.baomidou</groupId>
  42.             <artifactId>mybatis-plus-boot-starter</artifactId>
  43.             <version>3.5.3.1</version>
  44.         </dependency>
  45.         <dependency>
  46.             <groupId>com.baomidou</groupId>
  47.             <artifactId>mybatis-plus-generator</artifactId>
  48.             <version>3.5.3.1</version>
  49.             <exclusions>
  50.                 <exclusion>
  51.                     <artifactId>mybatis</artifactId>
  52.                     <groupId>org.mybatis</groupId>
  53.                 </exclusion>
  54.             </exclusions>
  55.         </dependency>
  56.  
  57.         <dependency>
  58.             <groupId>log4j</groupId>
  59.             <artifactId>log4j</artifactId>
  60.             <version>1.2.17</version>
  61.         </dependency>
  62.  
  63.         <dependency>
  64.             <groupId>junit</groupId>
  65.             <artifactId>junit</artifactId>
  66.             <version>4.12</version>
  67.             <scope>test</scope>
  68.         </dependency>
  69.         <dependency>
  70.             <groupId>com.alibaba.fastjson2</groupId>
  71.             <artifactId>fastjson2</artifactId>
  72.             <version>2.0.26</version>
  73.         </dependency>
  74.  
  75.

2.jwtUtil  

  1.  
  2.  
  3. import com.alibaba.fastjson2.JSON;
  4. import com.nimbusds.jose.*;
  5. import com.nimbusds.jose.crypto.MACSigner;
  6. import com.nimbusds.jose.crypto.MACVerifier;
  7. import com.zy.common.ResponseEntity;
  8. import com.zy.entity.security.Claims;
  9.  
  10. import java.text.ParseException;
  11. import java.util.Date;
  12. import java.util.UUID;
  13.  
  14. /**
  15.  * @author : zy
  16.  * JWT工具类
  17.  */
  18. public class JWTUtil {
  19.     //密钥
  20.     private static final String secret = "xpo1xgnl5ksinxkgu1nb6vcx3zaq1wsxvv";
  21.  
  22.     // 1000 * 60 * 60 * 24 * 1  一天
  23.     //过期时间12h，单位毫秒
  24.     private static final long EXPIRE = 1000 * 60 * 60 * 12;
  25.     // 测试时为1min
  26.     // private static final long EXPIRE = 1000 * 60 * 1;
  27.  
  28.     /**
  29.      * 创建token
  30.      *
  31.      * @param claims 用户信息
  32.      * @return 令牌
  33.      */
  34.     public static String createToken(Claims claims) {
  35.         try {
  36.             //对密钥进行签名
  37.             JWSSigner jwsSigner = new MACSigner(secret);
  38.  
  39.             //准备JWS header
  40.             JWSHeader jwsHeader = new JWSHeader
  41.                     .Builder(JWSAlgorithm.HS256)
  42.                     .type(JOSEObjectType.JWT)
  43.                     .build();
  44.  
  45.             //准备JWS payload
  46.             claims.setJti(UUID.randomUUID().toString());
  47.             claims.setIat(new Date().getTime());
  48.             claims.setExp(new Date(System.currentTimeMillis() + EXPIRE).getTime());
  49.  
  50.             Payload payload = new Payload(JSON.toJSONString(claims));
  51.  
  52.             //封装JWS对象
  53.             JWSObject jwsObject = new JWSObject(jwsHeader, payload);
  54.  
  55.             //签名
  56.             jwsObject.sign(jwsSigner);
  57.  
  58.             return jwsObject.serialize();
  59.  
  60.         } catch (KeyLengthException e) {
  61.             e.printStackTrace();
  62.         } catch (JOSEException e) {
  63.             e.printStackTrace();
  64.         }
  65.         return null;
  66.     }
  67.  
  68.     /**
  69.      * 验证并获取用户信息
  70.      *
  71.      * @param token 令牌
  72.      * @return 解析后用户信息
  73.      */
  74.     public static ResponseEntity verifyToken(String token) {
  75.         JWSObject jwsObject;
  76.         ResponseEntity response = new ResponseEntity<>();
  77.         try {
  78.             jwsObject = JWSObject.parse(token);
  79.  
  80.             //HMAC验证器
  81.             JWSVerifier jwsVerifier = new MACVerifier(secret);
  82.             if (!jwsObject.verify(jwsVerifier)) {
  83.                 response.setCode(10008).setErrorMsg("token无效");
  84.                 return response;
  85.             }
  86.  
  87.             String payload = jwsObject.getPayload().toString();
  88.             Claims claims = JSON.parseObject(payload, Claims.class);
  89.             if (claims.getExp() < new Date().getTime()) {
  90.                 response.setCode(10008).setErrorMsg("token无效");
  91.                 return response;
  92.             }
  93.  
  94.             response.setCode(200).setData(claims).setMessage("解析成功");
  95.             return response;
  96.         } catch (ParseException | JOSEException e) {
  97.             e.printStackTrace();
  98.         }
  99.         response.setCode(10008).setErrorMsg("token无效");
  100.         return response;
  101.     }
  102. }

3.jwtAuthenticationFilter

  1.  
  2.  
  3. import com.baomidou.mybatisplus.core.toolkit.ObjectUtils;
  4. import com.baomidou.mybatisplus.core.toolkit.StringUtils;
  5. import com.zy.common.ResponseEntity;
  6. import com.zy.config.security.JWTUtil;
  7. import com.zy.entity.security.Claims;
  8. import jakarta.servlet.FilterChain;
  9. import jakarta.servlet.ServletException;
  10. import jakarta.servlet.http.HttpServletRequest;
  11. import jakarta.servlet.http.HttpServletResponse;
  12. import org.springframework.stereotype.Component;
  13. import org.springframework.web.filter.OncePerRequestFilter;
  14.  
  15. import java.io.IOException;
  16. import java.util.logging.Logger;
  17.  
  18. /**
  19.  * @author : zy
  20.  *
  21.  * 自定义jwt全局过滤器
  22.  * 1.没有携带token放行
  23.  * 2.携带token,将用户信息添加至security上下文中
  24.  */
  25. @Component
  26. public class JWTAuthenticationFilter extends OncePerRequestFilter {
  27.     private static final Logger logger = Logger.getLogger(JWTAuthenticationFilter.class.toString());
  28.  
  29.     @Override
  30.     protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
  31.         //获取当前请求的uri
  32.         String uri = request.getRequestURI();
  33.         logger.info("请求路径:" + uri);
  34.         //判断是否是认证请求路径
  35.         //是：直接放行
  36.         if (uri.endsWith("/auth/login") || uri.endsWith("/auth/logout") || uri.startsWith("/swagger-ui")
  37.                 || uri.endsWith("doc.html") || uri.startsWith("/webjars/css") || uri.startsWith("/webjars/js")
  38.                 || uri.startsWith("/v3/api-docs") || uri.startsWith("/favicon.ico")
  39.                 || uri.startsWith("**/*.html") || uri.endsWith("/webjars/springfox-swagger-ui")
  40.                 || uri.startsWith("/swagger-resources")) {
  41.             filterChain.doFilter(request, response);
  42.             return;
  43.         }
  44.  
  45.         //否：获取请求头中携带的token
  46.         String authorization = request.getHeader("Authorization");
  47.         logger.info("携带authorization:" + authorization);
  48.  
  49.         //判断是否携带token
  50.         //否：抛出异常
  51.         if (StringUtils.isBlank(authorization)) {
  52.             logger.info("未查询到token");
  53.             return;
  54.         }
  55.  
  56.         String realToken = authorization.replace("Bearer ", "");
  57.  
  58.  
  59.         //是：校验jwt有效性
  60.         ResponseEntity responseE = JWTUtil.verifyToken(realToken);
  61.         Claims data = (Claims) responseE.getData();
  62.  
  63.         if (ObjectUtils.isEmpty(data)) {
  64.             logger.info("token失效");
  65.             return;
  66.         }
  67.  
  68.         // 验证token对象是否存在及验证token是否过期
  69.         if (ObjectUtils.isEmpty(data)) {
  70.             logger.info("token无效或者已经失效");
  71.             return;
  72.         }
  73.         if (responseE.getCode() != 200) {
  74.             logger.info("token无效");
  75.             return;
  76.         }
  77.  
  78.         filterChain.doFilter(request, response);
  79.     }
  80. }

4.SecurityConfig

注：此处.requestMatchers("/**").permitAll()应该是把所有接口都放开，在jwtAuthenticationFilter中实现接口拦截，因为不写/**，其余接口直接访问不到，才疏学浅不知道为啥，大家可以试试，改正。

  1.  
  2. import com.zy.config.security.filter.JWTAuthenticationFilter;
  3. import com.zy.entity.SysUser;
  4. import com.zy.entity.security.LoginUser;
  5. import com.zy.mapper.SysUserMapper;
  6. import org.springframework.beans.factory.annotation.Autowired;
  7. import org.springframework.context.annotation.Bean;
  8. import org.springframework.context.annotation.Configuration;
  9. import org.springframework.http.HttpMethod;
  10. import org.springframework.security.authentication.AuthenticationManager;
  11. import org.springframework.security.authentication.AuthenticationProvider;
  12. import org.springframework.security.authentication.LockedException;
  13. import org.springframework.security.authentication.ProviderManager;
  14. import org.springframework.security.authentication.dao.DaoAuthenticationProvider;
  15. import org.springframework.security.config.annotation.web.builders.HttpSecurity;
  16. import org.springframework.security.config.http.SessionCreationPolicy;
  17. import org.springframework.security.core.userdetails.UserDetailsService;
  18. import org.springframework.security.core.userdetails.UsernameNotFoundException;
  19. import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
  20. import org.springframework.security.crypto.password.PasswordEncoder;
  21. import org.springframework.security.web.SecurityFilterChain;
  22. import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
  23.  
  24. /**
  25.  * @author zy
  26.  */
  27. @Configuration
  28. public class SecurityConfig {
  29.  
  30.     @Autowired
  31.     private SysUserMapper sysUserMapper;
  32.  
  33.     @Autowired
  34.     private JWTAuthenticationFilter jwtAuthenticationFilter;
  35.  
  36.  
  37.     @Bean
  38.     public PasswordEncoder passwordEncoder() {
  39.         return new BCryptPasswordEncoder();
  40.     }
  41.  
  42.  
  43.     @Bean
  44.     public UserDetailsService userDetailsService() {
  45.         return username -> {
  46.             SysUser user = sysUserMapper.selectByName(username);
  47.             if (user == null) {
  48.                 throw new UsernameNotFoundException("用户不存在");
  49.             }
  50.             Integer status = user.getStatus();
  51.             if (status != 0){
  52.                 throw new LockedException("用户已停用");
  53.             }
  54.             return new LoginUser(user);
  55.         };
  56.     }
  57.  
  58.     @Bean
  59.     public AuthenticationProvider authenticationProvider() {
  60.         DaoAuthenticationProvider authenticationProvider = new DaoAuthenticationProvider();
  61.         authenticationProvider.setUserDetailsService(userDetailsService());
  62.         authenticationProvider.setPasswordEncoder(passwordEncoder());
  63.         authenticationProvider.setHideUserNotFoundExceptions(false);
  64.         return authenticationProvider;
  65.     }
  66.  
  67.     @Bean
  68.     public AuthenticationManager authenticationManager() {
  69.         return new ProviderManager(authenticationProvider());
  70.     }
  71.  
  72.     @Bean
  73.     public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
  74.  
  75.         http
  76.                 .csrf().disable()
  77.                 .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
  78.                 .and()
  79.                 .authenticationProvider(authenticationProvider())
  80.                 .addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class)
  81.                 .authorizeHttpRequests()
  82.                 .requestMatchers(HttpMethod.OPTIONS).permitAll()
  83.                 .requestMatchers("/**").permitAll()
  84.                 .requestMatchers("/auth/login").permitAll()
  85.                 .requestMatchers("/auth/logout").permitAll()
  86.                 .requestMatchers("/swagger-ui.html").permitAll()
  87.                 .requestMatchers("/doc.html").permitAll()
  88.                 .requestMatchers("/webjars/springfox-swagger-ui/**").permitAll()
  89.                 .requestMatchers("/swagger-resources").permitAll()
  90.                 .requestMatchers("/v3/api-docs/**").permitAll()
  91.                 .requestMatchers("/favicon.ico").permitAll()
  92.                 .requestMatchers("/error").permitAll()
  93.                 .anyRequest()
  94.                 .authenticated();
  95.         return http.build();
  96.     }
  97. }

5.返回类型 ResponseEntity

  1.  
  2. import io.swagger.v3.oas.annotations.media.Schema;
  3. import lombok.Data;
  4.  
  5. import java.util.HashMap;
  6.  
  7.  
  8. /**
  9.  * @author zy
  10.  */
  11. @Schema(description = "返回响应数据")
  12. @Data
  13. public class ResponseEntity<T> {
  14.     @Schema(description = "编码")
  15.     private int code = 200;
  16.  
  17.     @Schema(description = "基本信息")
  18.     private String message = "成功";
  19.  
  20.     @Schema(description = "错误信息")
  21.     private String errorMsg = "";
  22.  
  23.     @Schema(description = "返回对象")
  24.     private T data;
  25.  
  26.     /**
  27.      * 成功状态码
  28.      */
  29.     public static final Integer SUCCESS = 200;
  30.  
  31.     /**
  32.      * 失败状态码
  33.      */
  34.     public static final Integer ERROR = 500;
  35.  
  36.  
  37.     private static HashMap<Integer, String> ERROR_CODE = new HashMap<Integer, String>() {
  38.         {
  39.             put(100, "暂无数据");
  40.             put(200, "成功");
  41.             put(300, "失败");
  42.             put(500, "失败状态码");
  43.             put(10000, "通用错误");
  44.             ///用户类
  45.             put(10001, "用户名或密码错误");
  46.             put(10002, "登录状态已过期");
  47.             put(10003, "注册用户已存在");
  48.             put(10004, "账号已被锁定,请在一小时后重试");
  49.             put(10005, "旧密码错误");
  50.             put(10006, "用户名已存在");
  51.             put(10007, "ip没有权限");
  52.             put(10008, "token无效");
  53.             put(10009, "token失效");
  54.  
  55.             ///操作权限类
  56.             put(20001, "无操作权限");
  57.             ///参数类
  58.             put(30001, "非法参数");
  59.             put(30002, "缺少必要参数");
  60.             数据操作类
  61.             put(40001, "添加数据失败");
  62.             put(40002, "更新数据失败");
  63.             put(40003, "删除数据失败");
  64.             put(40004, "添加数据失败,对象已经存在，建议修改或者删除");
  65.             put(50001, "不存在的对象");
  66.             put(99999, "无任何资源权限");
  67.  
  68.             put(990000, "系统错误");
  69.         }
  70.     };
  71.  
  72.  
  73.     public ResponseEntity() {
  74.     }
  75.  
  76.     public ResponseEntity(T date) {
  77.         this.data = date;
  78.     }
  79.  
  80.     public int getCode() {
  81.         return code;
  82.     }
  83.  
  84.     public ResponseEntity setCode(int code) {
  85.         this.code = code;
  86.         if (ERROR_CODE.containsKey(code)) {
  87.             setMessage(ERROR_CODE.get(code));
  88.         }
  89.         return this;
  90.     }
  91.  
  92.  
  93.     public String getMessage() {
  94.         return message;
  95.     }
  96.  
  97.     public void setMessage(String message) {
  98.         this.message = message;
  99.     }
  100.  
  101.     public T getData() {
  102.         return data;
  103.     }
  104.  
  105.     public ResponseEntity setData(T data) {
  106.         this.data = data;
  107.         return this;
  108.     }
  109.  
  110.     public static <T> ResponseEntity<T> def(Class<T> clazz) {
  111.         return new ResponseEntity<>();
  112.     }
  113.  
  114.     public ResponseEntity<T> ok() {
  115.         setCode(200);
  116.         return this;
  117.     }
  118.  
  119.     public ResponseEntity<T> error(int code) {
  120.         setCode(code);
  121.         return this;
  122.     }
  123.  
  124.     public ResponseEntity<T> message(String message) {
  125.         setMessage(message);
  126.         return this;
  127.     }
  128.  
  129.     public ResponseEntity<T> data(T data) {
  130.         setData(data);
  131.         return this;
  132.     }
  133.  
  134.     public ResponseEntity<T> back(int code, String message, T data) {
  135.         setCode(code);
  136.         setMessage(message);
  137.         setData(data);
  138.         return this;
  139.     }
  140.  
  141.     public static <T> Boolean isError(ResponseEntity<T> r) {
  142.         return !isSuccess(r);
  143.     }
  144.  
  145.     public static <T> Boolean isSuccess(ResponseEntity<T> r) {
  146.         return ResponseEntity.SUCCESS == r.getCode();
  147.     }
  148. }

6.Claims

  1.  
  2. import lombok.Data;
  3.  
  4. import java.util.List;
  5.  
  6. /**
  7.  * jwt实体数据
  8.  */
  9. @Data
  10. public class Claims {
  11.     /**
  12.      * 主题
  13.      */
  14.     private String sub;
  15.  
  16.     /**
  17.      * 签发时间
  18.      */
  19.     private Long iat;
  20.  
  21.     /**
  22.      * 过期时间
  23.      */
  24.     private Long exp;
  25.  
  26.     /**
  27.      * JWT ID
  28.      */
  29.     private String jti;
  30.  
  31.     /**
  32.      * 用户id
  33.      */
  34.     private String userId;
  35.  
  36.     /**
  37.      * 用户名
  38.      */
  39.     private String username;
  40.  
  41.     /**
  42.      * 用户状态(1:正常;0:禁用)
  43.      */
  44.     private String status;
  45.  
  46.     /**
  47.      * 用户角色
  48.      */
  49.     private List<String> roles;
  50.  
  51.     /**
  52.      * 权限列表
  53.      */
  54.     private List<String> permissions;
  55.  
  56.     public Claims(String sub, Long iat, Long exp, String jti, String userId, String username, String status, List<String> roles, List<String> permissions) {
  57.         this.sub = sub;
  58.         this.iat = iat;
  59.         this.exp = exp;
  60.         this.jti = jti;
  61.         this.userId = userId;
  62.         this.username = username;
  63.         this.status = status;
  64.         this.roles = roles;
  65.         this.permissions = permissions;
  66.     }
  67.  
  68.     public String getSub() {
  69.         return sub;
  70.     }
  71.  
  72.     public void setSub(String sub) {
  73.         this.sub = sub;
  74.     }
  75.  
  76.     public Long getIat() {
  77.         return iat;
  78.     }
  79.  
  80.     public void setIat(Long iat) {
  81.         this.iat = iat;
  82.     }
  83.  
  84.     public Long getExp() {
  85.         return exp;
  86.     }
  87.  
  88.     public void setExp(Long exp) {
  89.         this.exp = exp;
  90.     }
  91.  
  92.     public String getJti() {
  93.         return jti;
  94.     }
  95.  
  96.     public void setJti(String jti) {
  97.         this.jti = jti;
  98.     }
  99.  
  100.     public String getUserId() {
  101.         return userId;
  102.     }
  103.  
  104.     public void setUserId(String userId) {
  105.         this.userId = userId;
  106.     }
  107.  
  108.     public String getUsername() {
  109.         return username;
  110.     }
  111.  
  112.     public void setUsername(String username) {
  113.         this.username = username;
  114.     }
  115.  
  116.     public String getStatus() {
  117.         return status;
  118.     }
  119.  
  120.     public void setStatus(String status) {
  121.         this.status = status;
  122.     }
  123.  
  124.     public List<String> getRoles() {
  125.         return roles;
  126.     }
  127.  
  128.     public void setRoles(List<String> roles) {
  129.         this.roles = roles;
  130.     }
  131.  
  132.     public List<String> getPermissions() {
  133.         return permissions;
  134.     }
  135.  
  136.     public void setPermissions(List<String> permissions) {
  137.         this.permissions = permissions;
  138.     }
  139.  
  140.     public static ClaimsBuilder builder() {
  141.         return new ClaimsBuilder();
  142.     }
  143.  
  144.     public static final class ClaimsBuilder {
  145.         //主题
  146.         private String sub;
  147.  
  148.         //签发时间
  149.         private Long iat;
  150.  
  151.         //过期时间
  152.         private Long exp;
  153.  
  154.         //JWT ID
  155.         private String jti;
  156.  
  157.         //用户id
  158.         private String userId;
  159.  
  160.         //用户名
  161.         private String username;
  162.  
  163.         private String status;
  164.  
  165.         //用户角色
  166.         private List<String> roles;
  167.  
  168.         private List<String> permissions;
  169.  
  170.         private ClaimsBuilder() {
  171.         }
  172.  
  173.         public ClaimsBuilder sub(String sub) {
  174.             this.sub = sub;
  175.             return this;
  176.         }
  177.  
  178.         public ClaimsBuilder iat(Long iat) {
  179.             this.iat = iat;
  180.             return this;
  181.         }
  182.  
  183.         public ClaimsBuilder exp(Long exp) {
  184.             this.exp = exp;
  185.             return this;
  186.         }
  187.  
  188.         public ClaimsBuilder jti(String jti) {
  189.             this.jti = jti;
  190.             return this;
  191.         }
  192.  
  193.         public ClaimsBuilder userId(String userId) {
  194.             this.userId = userId;
  195.             return this;
  196.         }
  197.  
  198.         public ClaimsBuilder username(String username) {
  199.             this.username = username;
  200.             return this;
  201.         }
  202.  
  203.         public ClaimsBuilder status(String status) {
  204.             this.status = status;
  205.             return this;
  206.         }
  207.  
  208.         public ClaimsBuilder roles(List<String> roles) {
  209.             this.roles = roles;
  210.             return this;
  211.         }
  212.  
  213.         public ClaimsBuilder permissions(List<String> permissions) {
  214.             this.permissions = permissions;
  215.             return this;
  216.         }
  217.  
  218.         public Claims build() {
  219.             return new Claims(
  220.                     this.sub,
  221.                     this.iat,
  222.                     this.exp,
  223.                     this.jti,
  224.                     this.userId,
  225.                     this.username,
  226.                     this.status,
  227.                     this.roles,
  228.                     this.permissions);
  229.         }
  230.     }
  231. }

7.LoginUser

  1.  
  2. import com.zy.entity.SysUser;
  3. import lombok.AllArgsConstructor;
  4. import lombok.Data;
  5. import lombok.NoArgsConstructor;
  6. import org.springframework.security.core.GrantedAuthority;
  7. import org.springframework.security.core.userdetails.UserDetails;
  8.  
  9. import java.util.ArrayList;
  10. import java.util.Collection;
  11.  
  12. @Data
  13. @NoArgsConstructor
  14. @AllArgsConstructor
  15. public class LoginUser implements UserDetails {
  16.     private SysUser user;
  17.  
  18.     @Override
  19.     public Collection<? extends GrantedAuthority> getAuthorities() {
  20.         return new ArrayList<>();
  21.     }
  22.  
  23.     @Override
  24.     public String getPassword() {
  25.         return user.getPassword();
  26.     }
  27.  
  28.     @Override
  29.     public String getUsername() {
  30.         return user.getUserName();
  31.     }
  32.  
  33.     @Override
  34.     public boolean isAccountNonExpired() {
  35.         return true;
  36.     }
  37.  
  38.     @Override
  39.     public boolean isAccountNonLocked() {
  40.         return true;
  41.     }
  42.  
  43.     @Override
  44.     public boolean isCredentialsNonExpired() {
  45.         return true;
  46.     }
  47.  
  48.     @Override
  49.     public boolean isEnabled() {
  50.         return true;
  51.     }
  52. }

8.login登陆

  1.  public ResponseEntity login(SysUser sysUser ) {
  2.         ResponseEntity<Object> response = new ResponseEntity<>();
  3.         // 获取用户密码
  4.         String username = sysUser.getUserName();
  5.         String password = sysUser.getPassword();
  6.  
  7.  
  8.         // 用户认证
  9.         UsernamePasswordAuthenticationToken usernamePasswordAuthenticationToken = new UsernamePasswordAuthenticationToken(username, password);
  10.         Authentication authenticate = authenticationManagerBuilder.getObject().authenticate(usernamePasswordAuthenticationToken);
  11.         
  12.      
  13.         // 认证成功后，返回用户信息及用户角色信息
  14.         SysUser byNameUser = sysUserMapper.selectByName(username);
  15.        
  16.  
  17.         LambdaQueryWrapper<SysUserRole> sysUserRoleLambdaQueryWrapper = new LambdaQueryWrapper<>();
  18.         sysUserRoleLambdaQueryWrapper.eq(SysUserRole::getUserId,userId);
  19.         List<SysUserRole> sysUserRoles = sysUserRoleMapper.selectList(sysUserRoleLambdaQueryWrapper);
  20.  
  21.         JSONObject data = new JSONObject();
  22.         data.put("user",byNameUser);
  23.  
  24.         // jwt实体数据
  25.         Claims claims = Claims.builder()
  26.                 .userId(userId)
  27.                 .username(byNameUser.getUserName())
  28.                 .roles(roles)
  29.                 .build();
  30.  
  31.         JWTUtil jwtUtil = new JWTUtil();
  32.         String token = jwtUtil.createToken(claims);
  33.  
  34.         data.put("token",token);
  35.  
  36.         response.setCode(200).setData(data);
  37.         return response;
  38.     }

9.sysUser是用户实体类，相关的代码就不贴了，可以根据自己数据库需求进行编写。

有什么疑问或者教导请指正，谢谢。

声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/凡人多烦事01/article/detail/388663
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号