devbox
小小林熬夜学编程
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

基于spring cloud的security权限认证（超详细）_springsecurity 登录权限验证

作者：小小林熬夜学编程 | 2024-03-03 18:25:50

赞

踩

springsecurity 登录权限验证

目录

一、前言

二、项目结构

 三、搭建security

四、搭建common-utils

五、登录实现（user-service）

六、使用方式

一、前言

在网上找了很多基于spring cloud的security权限认证，但是大概都是网关内嵌security、security OAuth2的方式。这里给大家推荐另一种方式。以我的实战项目为例。

二、项目结构

这里父工程为pzhxy，大家可以自己定义，Security为子工程。

 三、搭建security

（1）依赖

  1.  <dependency>
  2.             <groupId>org.springframework.cloud</groupId>
  3.             <artifactId>spring-cloud-starter-config</artifactId>
  4.         </dependency>
  5.         <dependency>
  6.             <groupId>org.springframework.boot</groupId>
  7.             <artifactId>spring-boot-starter-security</artifactId>
  8.         </dependency>
  9.         <dependency>
  10.             <groupId>com.fasterxml.jackson.core</groupId>
  11.             <artifactId>jackson-annotations</artifactId>
  12.         </dependency>
  13.         <dependency>
  14.             <groupId>javax.servlet</groupId>
  15.             <artifactId>javax.servlet-api</artifactId>
  16.         </dependency>
  17.         <dependency>
  18.             <groupId>org.springframework.data</groupId>
  19.             <artifactId>spring-data-redis</artifactId>
  20.         </dependency>
  21.         <dependency>
  22.             <groupId>io.jsonwebtoken</groupId>
  23.             <artifactId>jjwt-api</artifactId>
  24.             <version>0.10.7</version>
  25.             <scope>compile</scope>
  26.         </dependency>

 （2）SecurityConfig

  1. package com.pzhxy.security.config;
  2.  
  3.  
  4. import com.pzhxy.security.filter.JwtAuthenticationTokenFilter;
  5. import com.pzhxy.security.handler.AccessDeniedHandlerImpl;
  6. import com.pzhxy.security.handler.AuthenticationEntryPointImpl;
  7. import com.pzhxy.security.passwordencode.MyPasswordEncoder;
  8. import org.springframework.context.annotation.Bean;
  9. import org.springframework.context.annotation.Configuration;
  10. import org.springframework.security.authentication.AuthenticationManager;
  11. import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
  12. import org.springframework.security.config.annotation.web.builders.HttpSecurity;
  13. import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
  14. import org.springframework.security.config.http.SessionCreationPolicy;
  15. import org.springframework.security.crypto.password.PasswordEncoder;
  16. import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
  17. import org.springframework.security.web.firewall.HttpFirewall;
  18. import org.springframework.security.web.firewall.StrictHttpFirewall;
  19.  
  20. import javax.annotation.Resource;
  21.  
  22.  
  23. @Configuration
  24. @EnableGlobalMethodSecurity(prePostEnabled = true)
  25. public class SecurityConfig extends WebSecurityConfigurerAdapter {
  26.     @Resource
  27.     private JwtAuthenticationTokenFilter jwtAuthenticationTokenFilter;
  28.     @Resource
  29.     private AuthenticationEntryPointImpl authenticationEntryPoint;
  30.     @Resource
  31.     private AccessDeniedHandlerImpl accessDeniedHandler;
  32.  
  33.     @Override
  34.     protected void configure(HttpSecurity http) throws Exception {
  35.         http.csrf().disable()
  36.                 .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
  37.                 .and()
  38.                 .authorizeRequests()
  39.                 .antMatchers(
  40.                         "/",
  41.                         "/swagger-ui.html",
  42.                         "/user/login",
  43.                         "/user/hello",
  44.                         "/operate/**",
  45.                         "/webjars/**",
  46.                          "/v2/**",
  47.                         "/link/**",
  48.                         "/process/**",
  49.                         "/proProcess/**",
  50.                         "/project/**",
  51.                         "/mail/**",
  52.                         "/qiniuyun/**",
  53.                         "/comments/getpage/**",
  54.                         "/swagger-resources/**").permitAll()
  55.                 .anyRequest().authenticated();
  56.  
  57.  
  58.         http.addFilterBefore(jwtAuthenticationTokenFilter, UsernamePasswordAuthenticationFilter.class);
  59.  
  60.         //认证授权失败处理
  61.         http.exceptionHandling()
  62.                 .authenticationEntryPoint(authenticationEntryPoint)
  63.                 .accessDeniedHandler(accessDeniedHandler);
  64.         //允许跨域
  65.         http.cors();
  66.  
  67.     }
  68.  
  69.     @Bean
  70.     public PasswordEncoder passwordEncoder(){
  71.         return new MyPasswordEncoder();
  72.     }
  73.     
  74.  
  75.     @Bean
  76.     public AuthenticationManager authenticationManagerBean() throws Exception {
  77.         return super.authenticationManagerBean();
  78.     }
  79. }

（3）LoginUser

注：User类定义在feign中

  1. package com.pzhxy.security.domain;
  2.  
  3. import com.baomidou.mybatisplus.annotation.TableField;
  4. import com.fasterxml.jackson.annotation.JsonIgnore;
  5. import com.pzhxy.feign.domain.User;
  6. import org.springframework.security.core.GrantedAuthority;
  7. import org.springframework.security.core.authority.SimpleGrantedAuthority;
  8. import org.springframework.security.core.userdetails.UserDetails;
  9.  
  10. import java.util.Collection;
  11. import java.util.List;
  12. import java.util.stream.Collectors;
  13.  
  14. /**
  15.  * 登录用户身份权限
  16.  *
  17.  * @author ruoyi
  18.  */
  19. public class LoginUser implements UserDetails
  20. {
  21.     private static final long serialVersionUID = 1L;
  22.  
  23.     /**
  24.      * 登录时间
  25.      */
  26.     private Long loginTime;
  27.     /**
  28.      * 权限列表
  29.      */
  30.     private List<String> permissions;
  31.     /**
  32.      * 用户信息
  33.      */
  34.     private User user;
  35.  
  36.  
  37.     @JsonIgnore
  38.     @TableField(exist = false)
  39.     private List<SimpleGrantedAuthority>authorities;
  40.  
  41.     //获取权限信息
  42.     @Override
  43.     public Collection<? extends GrantedAuthority> getAuthorities()
  44.     {
  45.         if(authorities!=null){
  46.             return authorities;
  47.         }
  48.         //把permissios封装成对象
  49.         authorities=permissions.stream()
  50.                 .map(SimpleGrantedAuthority::new)
  51.                 .collect(Collectors.toList());
  52.         return authorities;
  53.     }
  54.  
  55.     public LoginUser(){
  56.  
  57.     }
  58.  
  59.     public LoginUser(User user)
  60.     {
  61.         this.user = user;
  62.     }
  63.  
  64.     @JsonIgnore
  65.     @Override
  66.     public String getPassword()
  67.     {
  68.         return user.getPassword();
  69.     }
  70.  
  71.     @JsonIgnore
  72.     @Override
  73.     public String getUsername()
  74.     {
  75.         return user.getId();
  76.     }
  77.  
  78.     /**
  79.      * 账户是否未过期,过期无法验证
  80.      */
  81.     @JsonIgnore
  82.     @Override
  83.     public boolean isAccountNonExpired()
  84.     {
  85.         return true;
  86.     }
  87.  
  88.     /**
  89.      * 指定用户是否解锁,锁定的用户无法进行身份验证
  90.      *
  91.      * @return
  92.      */
  93.     @JsonIgnore
  94.     @Override
  95.     public boolean isAccountNonLocked()
  96.     {
  97.         return true;
  98.     }
  99.  
  100.     /**
  101.      * 指示是否已过期的用户的凭据(密码),过期的凭据防止认证
  102.      *
  103.      * @return
  104.      */
  105.     @JsonIgnore
  106.     @Override
  107.     public boolean isCredentialsNonExpired()
  108.     {
  109.         return true;
  110.     }
  111.  
  112.     /**
  113.      * 是否可用 ,禁用的用户不能身份验证
  114.      *
  115.      * @return
  116.      */
  117.     @JsonIgnore
  118.     @Override
  119.     public boolean isEnabled()
  120.     {
  121.         return true;
  122.     }
  123.  
  124.     public Long getLoginTime()
  125.     {
  126.         return loginTime;
  127.     }
  128.  
  129.     public void setLoginTime(Long loginTime)
  130.     {
  131.         this.loginTime = loginTime;
  132.     }
  133.  
  134.     public List<String> getPermissions()
  135.     {
  136.         return permissions;
  137.     }
  138.  
  139.     public void setPermissions(List<String> permissions)
  140.     {
  141.         this.permissions = permissions;
  142.     }
  143.  
  144.     public User getUser()
  145.     {
  146.         return user;
  147.     }
  148.  
  149.     public void setUser(User user)
  150.     {
  151.         this.user = user;
  152.     }
  153.  
  154.  
  155. }

（4）JwtAuthenticationTokenFilter

  1. package com.pzhxy.security.filter;
  2.  
  3.  
  4. import com.pzhxy.redis.utils.JwtUtil;
  5. import com.pzhxy.redis.utils.RedisUtil;
  6.  
  7. import com.pzhxy.security.domain.LoginUser;
  8. import io.jsonwebtoken.Claims;
  9. import org.springframework.beans.factory.annotation.Autowired;
  10. import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
  11. import org.springframework.security.core.context.SecurityContextHolder;
  12. import org.springframework.stereotype.Component;
  13. import org.springframework.util.StringUtils;
  14. import org.springframework.web.filter.OncePerRequestFilter;
  15.  
  16. import javax.servlet.FilterChain;
  17. import javax.servlet.ServletException;
  18. import javax.servlet.http.HttpServletRequest;
  19. import javax.servlet.http.HttpServletResponse;
  20. import java.io.IOException;
  21. import java.util.Objects;
  22.  
  23. @Component
  24. public class JwtAuthenticationTokenFilter extends OncePerRequestFilter {
  25.     @Autowired
  26.     private RedisUtil redisUtil;
  27.  
  28.     @Override
  29.     protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
  30.         String token = request.getHeader("Authorization");
  31.         if(!StringUtils.hasText(token)){
  32.             filterChain.doFilter(request,response);
  33.             return;
  34.         }
  35.         String userid;
  36.         try {
  37.             //JWT解析token,截取userID
  38.               Claims claims= JwtUtil.getClaim(token);
  39.               userid=claims.get("userId").toString();
  40.         }catch (Exception e){
  41.             e.printStackTrace();
  42.             throw new RuntimeException("token非法");
  43.         }
  44.         String redisKey="login:"+userid;
  45.         LoginUser loginUser =(LoginUser)redisUtil.get(redisKey);
  46.         System.out.println(loginUser);
  47.         if(Objects.isNull(loginUser)){
  48.             throw new RuntimeException("用户未登录");
  49.         }
  50.  
  51.  
  52.         //存入SecurityContextHolder,获取权限信息
  53.         UsernamePasswordAuthenticationToken usernamePasswordAuthenticationToken=new UsernamePasswordAuthenticationToken(loginUser,null, loginUser.getAuthorities());
  54.         SecurityContextHolder.getContext().setAuthentication(usernamePasswordAuthenticationToken);
  55.         filterChain.doFilter(request,response);
  56.     }
  57. }

（5）AccessDeniedHandlerImpl

  1. package com.pzhxy.security.handler;
  2.  
  3. import com.alibaba.fastjson.JSON;
  4. import com.pzhxy.constant.result.ResultBean;
  5. import org.springframework.http.HttpStatus;
  6. import org.springframework.security.access.AccessDeniedException;
  7. import org.springframework.security.web.access.AccessDeniedHandler;
  8. import org.springframework.stereotype.Component;
  9.  
  10. import javax.servlet.ServletException;
  11. import javax.servlet.http.HttpServletRequest;
  12. import javax.servlet.http.HttpServletResponse;
  13. import java.io.IOException;
  14.  
  15. /***
  16.  * 授权失败处理
  17.  *@Date:2022/6/4
  18.  * @Author: Liu
  19.  */
  20. @Component
  21. public class AccessDeniedHandlerImpl implements AccessDeniedHandler {
  22.     @Override
  23.     public void handle(HttpServletRequest request, HttpServletResponse response, AccessDeniedException accessDeniedException) throws IOException, ServletException {
  24.         ResultBean result=new ResultBean(HttpStatus.FORBIDDEN.value(),"您的权限不足");
  25.         String json= JSON.toJSONString(result);
  26.         response.setStatus(200);
  27.         response.setContentType("application/json");
  28.         response.setCharacterEncoding("utf-8");
  29.         response.getWriter().print(json);
  30.     }
  31. }

(6)AuthenticationEntryPointImpl

  1. package com.pzhxy.security.handler;
  2.  
  3. import com.alibaba.fastjson.JSON;
  4. import com.pzhxy.constant.result.ResultBean;
  5. import org.springframework.http.HttpStatus;
  6. import org.springframework.security.core.AuthenticationException;
  7. import org.springframework.security.web.AuthenticationEntryPoint;
  8. import org.springframework.stereotype.Component;
  9.  
  10. import javax.servlet.ServletException;
  11. import javax.servlet.http.HttpServletRequest;
  12. import javax.servlet.http.HttpServletResponse;
  13. import java.io.IOException;
  14.  
  15. /**
  16.  * 认证失败处理
  17.  *@Date:2022/6/4
  18.  * @Author: Liu
  19.  */
  20. @Component
  21. public class AuthenticationEntryPointImpl implements AuthenticationEntryPoint {
  22.     @Override
  23.     public void commence(HttpServletRequest request, HttpServletResponse response, AuthenticationException authException) throws IOException, ServletException {
  24.         ResultBean result=new ResultBean(HttpStatus.UNAUTHORIZED.value(),"用户认证失败请查询登录");
  25.         String json= JSON.toJSONString(result);
  26.         response.setStatus(200);
  27.         response.setContentType("application/json");
  28.         response.setCharacterEncoding("utf-8");
  29.         response.getWriter().print(json);
  30.     }
  31.  
  32. }

(7)MyPasswordEncoder(自定义加密方式)

  1. package com.pzhxy.security.passwordencode;
  2.  
  3. import com.pzhxy.security.utils.MD5Util;
  4. import org.springframework.security.crypto.password.PasswordEncoder;
  5.  
  6.  
  7. import java.util.Objects;
  8.  
  9. public class MyPasswordEncoder implements PasswordEncoder {
  10.     @Override
  11.     public String encode(CharSequence charSequence) {
  12.         return MD5Util.encode((String) charSequence);
  13.     }
  14.  
  15.     //加密验证方法
  16.     @Override
  17.     public boolean matches(CharSequence rawPassword, String encodedPassword) {
  18.         return Objects.equals(rawPassword, encodedPassword);
  19.     }
  20. }
  21.  
  22.

（8）MD5Util(MD5加密方式)

  1. package com.pzhxy.security.utils;
  2. import java.security.MessageDigest;
  3. /**
  4.  * @author 言曌
  5.  * @date 2018/2/9 下午6:11
  6.  */
  7. public class MD5Util {
  8.     private static final String SALT = "liuyanzhao.com";
  9.     /**
  10.      * MD5加盐加密
  11.      *
  12.      * @param password
  13.      * @return
  14.      */
  15.     public static String encode(String password) {
  16.         password = password + SALT;
  17.         MessageDigest md5 = null;
  18.         try {
  19.             md5 = MessageDigest.getInstance("MD5");
  20.         } catch (Exception e) {
  21.             throw new RuntimeException(e);
  22.         }
  23.         char[] charArray = password.toCharArray();
  24.         byte[] byteArray = new byte[charArray.length];
  25.         for (int i = 0; i < charArray.length; i++)
  26.             byteArray[i] = (byte) charArray[i];
  27.         byte[] md5Bytes = md5.digest(byteArray);
  28.         StringBuffer hexValue = new StringBuffer();
  29.         for (int i = 0; i < md5Bytes.length; i++) {
  30.             int val = ((int) md5Bytes[i]) & 0xff;
  31.             if (val < 16) {
  32.                 hexValue.append("0");
  33.             }
  34.             hexValue.append(Integer.toHexString(val));
  35.         }
  36.         return hexValue.toString();
  37.     }
  38.  
  39.     public static void main(String[] args) {
  40.         String hashPass = MD5Util.encode("123456");
  41.         System.out.println(MD5Util.encode("123456"));//08dc78d36d1512e5a81ef05b01a37860
  42.         System.out.println("08dc78d36d1512e5a81ef05b01a37860".equals(hashPass));//true
  43.     }
  44. }

四、搭建common-utils

(1)common-utils结构

 (2)搭建feign

这里只需要自定义的User类，大家按自己需求写。

依赖

  1.  <dependencies>
  2.         <dependency>
  3.             <groupId>org.springframework.cloud</groupId>
  4.             <artifactId>spring-cloud-starter-openfeign</artifactId>
  5.         </dependency>
  6.         <dependency>
  7.             <groupId>org.example</groupId>
  8.             <artifactId>common-base</artifactId>
  9.             <version>1.0-SNAPSHOT</version>
  10.             <scope>compile</scope>
  11.         </dependency>
  12.         
  13.     </dependencies>

（3）搭建common-base

这里只需要ResultBean封装结果，大家可以自己定义

  1. package com.pzhxy.constant.result;
  2.  
  3. import lombok.Data;
  4.  
  5. import java.util.HashMap;
  6. import java.util.Map;
  7.  
  8. /***
  9.  * 返回结果的统一封装
  10.  */
  11.  
  12. @Data
  13. public class ResultBean<T> {
  14.  
  15.     private Boolean success;  //是否成功
  16.  
  17.     private Integer code;     //返回状态码
  18.  
  19.     private String message;   //返回消息提示
  20.  
  21.     private T data;
  22.  
  23.     private ResultBean(){}
  24.  
  25.     public static ResultBean ok(){
  26.         ResultBean r = new ResultBean();
  27.         r.setSuccess(true);
  28.         r.setCode(ResultCode.SUCCESS);
  29.         r.setMessage("成功");
  30.         return r;
  31.     }
  32.  
  33.     public static ResultBean error(){
  34.         ResultBean r = new ResultBean();
  35.         r.setSuccess(false);
  36.         r.setCode(ResultCode.ERROR);
  37.         r.setMessage("失败");
  38.         return r;
  39.     }
  40.  
  41.     public ResultBean(Integer code, String message) {
  42.         this.code = code;
  43.         this.message = message;
  44.     }
  45.  
  46.     public ResultBean success(Boolean success){
  47.         this.setSuccess(success);
  48.         return this;
  49.     }
  50.  
  51.     public ResultBean message(String message){
  52.         this.setMessage(message);
  53.         return this;
  54.     }
  55.  
  56.     public ResultBean code(Integer code){
  57.         this.setCode(code);
  58.         return this;
  59.     }
  60.  
  61.     public ResultBean(Integer code, String message, T data) {
  62.         this.code = code;
  63.         this.message = message;
  64.         this.data = data;
  65.     }
  66. }
  67.  
  68.

依赖

  1.  <dependency>
  2.             <groupId>org.projectlombok</groupId>
  3.             <artifactId>lombok</artifactId>
  4.         </dependency>
  5.         <dependency>
  6.             <groupId>org.slf4j</groupId>
  7.             <artifactId>slf4j-api</artifactId>
  8.         </dependency>
  9.         <dependency>
  10.             <groupId>org.springframework</groupId>
  11.             <artifactId>spring-web</artifactId>
  12.         </dependency>
  13.         <dependency>
  14.             <groupId>org.springframework.boot</groupId>
  15.             <artifactId>spring-boot-autoconfigure</artifactId>
  16.         </dependency>

（4）搭建redis

  1.  <dependencies>
  2.         <!--        redis-->
  3.         <dependency>
  4.             <groupId>org.springframework.boot</groupId>
  5.             <artifactId>spring-boot-starter-data-redis</artifactId>
  6.         </dependency>
  7.         <dependency>
  8.             <groupId>com.fasterxml.jackson.datatype</groupId>
  9.             <artifactId>jackson-datatype-jsr310</artifactId>
  10.         </dependency>
  11.         <!--        JWT-->
  12.         <dependency>
  13.             <groupId>io.jsonwebtoken</groupId>
  14.             <artifactId>jjwt-api</artifactId>
  15.             <version>0.10.7</version>
  16.         </dependency>
  17.         <dependency>
  18.             <groupId>io.jsonwebtoken</groupId>
  19.             <artifactId>jjwt-impl</artifactId>
  20.             <version>0.10.7</version>
  21.             <scope>runtime</scope>
  22.         </dependency>
  23.         <dependency>
  24.             <groupId>io.jsonwebtoken</groupId>
  25.             <artifactId>jjwt-jackson</artifactId>
  26.             <version>0.10.7</version>
  27.             <scope>runtime</scope>
  28.         </dependency>
  29.         <dependency>
  30.             <groupId>org.apache.commons</groupId>
  31.             <artifactId>commons-pool2</artifactId>
  32.             <version>2.2</version>
  33.         </dependency>
  34.     </dependencies>
  1. package com.pzhxy.redis.config;
  2.  
  3.  
  4. import com.fasterxml.jackson.annotation.JsonAutoDetect;
  5. import com.fasterxml.jackson.annotation.PropertyAccessor;
  6. import com.fasterxml.jackson.databind.ObjectMapper;
  7. import org.springframework.context.annotation.Bean;
  8. import org.springframework.context.annotation.Configuration;
  9. import org.springframework.data.redis.connection.RedisConnectionFactory;
  10. import org.springframework.data.redis.core.RedisTemplate;
  11. import org.springframework.data.redis.serializer.Jackson2JsonRedisSerializer;
  12. import org.springframework.data.redis.serializer.StringRedisSerializer;
  13.  
  14. import java.net.UnknownHostException;
  15.  
  16. @Configuration
  17. public class RedisConfig {
  18.     //编写自己的redisTemplate
  19.     @Bean
  20.     @SuppressWarnings("all")
  21.     public RedisTemplate<String, Object> redisTemplate(RedisConnectionFactory redisConnectionFactory) throws UnknownHostException {
  22.         // 为了开发方便，直接使用<String, Object>
  23.         RedisTemplate<String, Object> template = new RedisTemplate();
  24.         template.setConnectionFactory(redisConnectionFactory);
  25.  
  26.         // Json 配置序列化
  27.         // 使用 jackson 解析任意的对象
  28.         Jackson2JsonRedisSerializer<Object> jackson2JsonRedisSerializer = new Jackson2JsonRedisSerializer<>(Object.class);
  29.         // 使用 objectMapper 进行转义
  30.         ObjectMapper objectMapper = new ObjectMapper();
  31.         objectMapper.setVisibility(PropertyAccessor.ALL, JsonAutoDetect.Visibility.ANY);
  32.         objectMapper.enableDefaultTyping(ObjectMapper.DefaultTyping.NON_FINAL);
  33.         jackson2JsonRedisSerializer.setObjectMapper(objectMapper);
  34.         // String 的序列化
  35.         StringRedisSerializer stringRedisSerializer = new StringRedisSerializer();
  36.  
  37.         // key 采用 String 的序列化方式
  38.         template.setKeySerializer(stringRedisSerializer);
  39.         // Hash 的 key 采用 String 的序列化方式
  40.         template.setHashKeySerializer(stringRedisSerializer);
  41.         // value 采用 jackson 的序列化方式
  42.         template.setValueSerializer(jackson2JsonRedisSerializer);
  43.         // Hash 的 value 采用 jackson 的序列化方式
  44.         template.setHashValueSerializer(jackson2JsonRedisSerializer);
  45.         // 把所有的配置 set 进 template
  46.         template.afterPropertiesSet();
  47.  
  48.         return template;
  49.     }
  50. }
  51.  
  52.  
  53.  
  1. package com.pzhxy.redis.utils;
  2.  
  3. import io.jsonwebtoken.*;
  4. import io.jsonwebtoken.security.Keys;
  5.  
  6. import javax.crypto.SecretKey;
  7. import java.text.SimpleDateFormat;
  8. import java.util.Base64;
  9. import java.util.Date;
  10. import java.util.HashMap;
  11. import java.util.Map;
  12.  
  13. /**
  14.  * @author:Tlimited
  15.  * 
  16.  */
  17. public class JwtUtil {
  18.  
  19.     private static final long EXPIRE = 60 * 1000 * 60 * 24; //过期时间
  20.     //密钥，动态生成的密钥
  21. //  public static final SecretKey key = Keys.secretKeyFor(SignatureAlgorithm.HS256);
  22.     //固定秘钥,非动态
  23.     public static String key = "LiuYangdejavawebtuanduidediyigexiangmujijiangwancheng";
  24.  
  25.     /**
  26.      * 生成token
  27.      *
  28.      * @param claims 要传送消息map
  29.      * @return
  30.      */
  31.     public static String generate(Map<String,Object> claims) {
  32.         Date nowDate = new Date();
  33.         //过期时间,设定为一分钟
  34.         Date expireDate = new Date(System.currentTimeMillis() + EXPIRE);
  35.         //头部信息,可有可无
  36.         Map<String, Object> header = new HashMap<>(2);
  37.         header.put("typ", "jwt");
  38.  
  39.         //更强的密钥,JDK11起才能用
  40.       //  KeyPair keyPair = Keys.keyPairFor(SignatureAlgorithm.RS256);
  41.       //  PrivateKey key1 =  keyPair.getPrivate();  // 私钥
  42.         //PublicKey key2 =  keyPair.getPublic();  //公钥
  43.  
  44.         return Jwts.builder().setHeader(header)
  45.                // .setSubject("weimi")//主题
  46.                // .setIssuer("weimi") //发送方
  47.                 .setClaims(claims)  //自定义claims
  48.                 .setIssuedAt(nowDate)//当前时间
  49.                 .setExpiration(expireDate) //过期时间
  50.                 .signWith(SignatureAlgorithm.HS256,key)//签名算法和key
  51.                 .compact();
  52.     }
  53.  
  54.     /**
  55.      * 生成token
  56.      * @param header  传入头部信息map
  57.      * @param claims  要传送消息map
  58.      * @return
  59.      */
  60.     public static String generate( Map<String, Object> header,Map<String,Object> claims) {
  61.         Date nowDate = new Date();
  62.         //过期时间,设定为一分钟
  63.         Date expireDate = new Date(System.currentTimeMillis() + EXPIRE);
  64.  
  65.         return Jwts.builder().setHeader(header)
  66.              // .setSubject("weimi")//主题
  67.           //    .setIssuer("weimi") //发送方
  68.                 .setClaims(claims)  //自定义claims
  69.                 .setIssuedAt(nowDate)//当前时间
  70.                 .setExpiration(expireDate) //过期时间
  71.                 .signWith(SignatureAlgorithm.HS256,key)//签名算法和key
  72.                 .compact();
  73.     }
  74.  
  75.     /**
  76.      * 校验是不是jwt签名
  77.      * @param token
  78.      * @return
  79.      */
  80.     public static boolean isSigned(String token){
  81.         return  Jwts.parser()
  82.                 .setSigningKey(key)
  83.                 .isSigned(token);
  84.     }
  85.  
  86.     /**
  87.      * 校验签名是否正确
  88.      * @param token
  89.      * @return
  90.      */
  91.     public static boolean verify(String token){
  92.         try {
  93.             Jwts.parser()
  94.                     .setSigningKey(key)
  95.                     .parseClaimsJws(token);
  96.             return true;
  97.         }catch (JwtException e){
  98.             System.out.println(e.getMessage());
  99.             return false;
  100.         }
  101.     }
  102.  
  103.     /**
  104.      * 获取payload 部分内容（即要传的信息）
  105.      * 使用方法：如获取userId：getClaim(token).get("userId");
  106.      * @param token
  107.      * @return
  108.      */
  109.     public static Claims getClaim(String token) {
  110.         Claims claims = null;
  111.         try {
  112.             claims = Jwts.parser()
  113.                     .setSigningKey(key)
  114.                     .parseClaimsJws(token)
  115.                     .getBody();
  116.         } catch (Exception e) {
  117.             e.printStackTrace();
  118.         }
  119.         return claims;
  120.     }
  121.  
  122.     /**
  123.      * 获取头部信息map
  124.      * 使用方法 : getHeader(token).get("alg");
  125.      * @param token
  126.      * @return
  127.      */
  128.     public static JwsHeader getHeader(String token) {
  129.         JwsHeader header = null;
  130.         try {
  131.              header = Jwts.parser()
  132.                     .setSigningKey(key)
  133.                     .parseClaimsJws(token)
  134.                     .getHeader();
  135.         } catch (Exception e) {
  136.             e.printStackTrace();
  137.         }
  138.         return header;
  139.     }
  140.  
  141.     /**
  142.      * 获取jwt发布时间
  143.      */
  144.     public static Date getIssuedAt(String token) {
  145.         return getClaim(token).getIssuedAt();
  146.     }
  147.  
  148.     /**
  149.      * 获取jwt失效时间
  150.      */
  151.     public static Date getExpiration(String token) {
  152.         return getClaim(token).getExpiration();
  153.     }
  154.  
  155.     /**
  156.      * 验证token是否失效
  157.      *
  158.      * @param token
  159.      * @return true:过期   false:没过期
  160.      */
  161.     public static boolean isExpired(String token) {
  162.         try {
  163.             final Date expiration = getExpiration(token);
  164.             return expiration.before(new Date());
  165.         } catch (ExpiredJwtException expiredJwtException) {
  166.             return true;
  167.         }
  168.     }
  169.  
  170.     /**
  171.      * 直接Base64解密获取header内容
  172.      * @param token
  173.      * @return
  174.      */
  175.     public static String getHeaderByBase64(String token){
  176.         String header = null;
  177.         if (isSigned(token)){
  178.             try {
  179.                 byte[] header_byte = Base64.getDecoder().decode(token.split("\\.")[0]);
  180.                 header = new String(header_byte);
  181.             }catch (Exception e){
  182.                 e.printStackTrace();
  183.                 return null;
  184.             }
  185.         }
  186.         return header;
  187.     }
  188.  
  189.     /**
  190.      * 直接Base64解密获取payload内容
  191.      * @param token
  192.      * @return
  193.      */
  194.     public static String getPayloadByBase64(String token){
  195.         String payload = null;
  196.         if (isSigned(token)) {
  197.             try {
  198.                 byte[] payload_byte = Base64.getDecoder().decode(token.split("\\.")[1]);
  199.                 payload = new String(payload_byte);
  200.             }catch (Exception e){
  201.                 e.printStackTrace();
  202.                 return null;
  203.             }
  204.         }
  205.         return payload;
  206.     }
  207.  
  208.     public static void main(String[] args) {
  209.       //用户自定义信息claims
  210.         Map<String,Object> map = new HashMap<>();
  211.         map.put("userId","admin");
  212.        String token =  generate(map);
  213.         System.out.println(token);
  214.  
  215.         System.out.println("claim:" + getClaim(token).get("userId"));
  216.         System.out.println("header:" + getHeader(token));
  217.     //    System.out.println(getIssuedAt(token));
  218.         Claims claims=getClaim(token);
  219.  
  220.       //  System.out.println(getHeaderByBase64(token));
  221.         System.out.println(getPayloadByBase64(token));
  222.  
  223.         SimpleDateFormat sdf=new SimpleDateFormat("yyyy‐MM‐dd hh:mm:ss");
  224.         System.out.println("签发时间:"+sdf.format(claims.getIssuedAt()));
  225.         System.out.println("过期时间:"+sdf.format(claims.getExpiration()));
  226.         System.out.println("当前时间:"+sdf.format(new Date()) );
  227.  
  228.     }
  229. }
  230.  
  1. package com.pzhxy.redis.utils;
  2. import org.springframework.beans.factory.annotation.Autowired;
  3. import org.springframework.data.redis.core.RedisTemplate;
  4. import org.springframework.stereotype.Component;
  5. import org.springframework.util.CollectionUtils;
  6.  
  7. import javax.annotation.Resource;
  8. import java.util.List;
  9. import java.util.Map;
  10. import java.util.Set;
  11. import java.util.concurrent.TimeUnit;
  12. /**
  13.  * @author Zly
  14.  * @date 2019/8/7 0007 17:30
  15.  */
  16. @Component
  17. public class RedisUtil {
  18.     @Resource
  19.     private RedisTemplate<String, Object> redisTemplate;
  20.     // =============================common============================
  21.     /**
  22.      * 指定缓存失效时间
  23.      * @param key 键
  24.      * @param time 时间(秒)
  25.      * @return
  26.      */
  27.     public boolean expire(String key, long time) {
  28.         try {
  29.             if (time > 0) {
  30.                 redisTemplate.expire(key, time, TimeUnit.SECONDS);
  31.             }
  32.             return true;
  33.         } catch (Exception e) {
  34.             e.printStackTrace();
  35.             return false;
  36.         }
  37.     }
  38.     /**
  39.      * 根据key 获取过期时间
  40.      * @param key 键 不能为null
  41.      * @return 时间(秒) 返回0代表为永久有效
  42.      */
  43.     public long getExpire(String key) {
  44.         return redisTemplate.getExpire(key, TimeUnit.SECONDS);
  45.     }
  46.     /**
  47.      * 判断key是否存在
  48.      * @param key 键
  49.      * @return true 存在 false不存在
  50.      */
  51.     public boolean hasKey(String key) {
  52.         try {
  53.             return redisTemplate.hasKey(key);
  54.         } catch (Exception e) {
  55.             e.printStackTrace();
  56.             return false;
  57.         }
  58.     }
  59.     /**
  60.      * 删除缓存
  61.      * @param key 可以传一个值 或多个
  62.      */
  63.     @SuppressWarnings("unchecked")
  64.     public void del(String... key) {
  65.         if (key != null && key.length > 0) {
  66.             if (key.length == 1) {
  67.                 redisTemplate.delete(key[0]);
  68.             } else {
  69.                 redisTemplate.delete(CollectionUtils.arrayToList(key));
  70.             }
  71.         }
  72.     }
  73.     // ============================String=============================
  74.     /**
  75.      * 普通缓存获取
  76.      * @param key 键
  77.      * @return 值
  78.      */
  79.     public Object get(String key) {
  80.         return key == null ? null : redisTemplate.opsForValue().get(key);
  81.     }
  82.     /**
  83.      * 普通缓存放入
  84.      * @param key 键
  85.      * @param value 值
  86.      * @return true成功 false失败
  87.      */
  88.     public boolean set(String key, Object value) {
  89.         try {
  90.             redisTemplate.opsForValue().set(key, value);
  91.             return true;
  92.         } catch (Exception e) {
  93.             e.printStackTrace();
  94.             return false;
  95.         }
  96.     }
  97.     /**
  98.      * 普通缓存放入并设置时间
  99.      * @param key 键
  100.      * @param value 值
  101.      * @param time 时间(秒) time要大于0 如果time小于等于0 将设置无限期
  102.      * @return true成功 false 失败
  103.      */
  104.     public boolean set(String key, Object value, long time) {
  105.         try {
  106.             if (time > 0) {
  107.                 redisTemplate.opsForValue().set(key, value, time, TimeUnit.SECONDS);
  108.             } else {
  109.                 set(key, value);
  110.             }
  111.             return true;
  112.         } catch (Exception e) {
  113.             e.printStackTrace();
  114.             return false;
  115.         }
  116.     }
  117.     /**
  118.      * 递增
  119.      * @param key 键
  120.      * @param delta 要增加几(大于0)
  121.      * @return
  122.      */
  123.     public long incr(String key, long delta) {
  124.         if (delta < 0) {
  125.             throw new RuntimeException("递增因子必须大于0");
  126.         }
  127.         return redisTemplate.opsForValue().increment(key, delta);
  128.     }
  129.     /**
  130.      * 递减
  131.      * @param key 键
  132.      * @param delta 要减少几(小于0)
  133.      * @return
  134.      */
  135.     public long decr(String key, long delta) {
  136.         if (delta < 0) {
  137.             throw new RuntimeException("递减因子必须大于0");
  138.         }
  139.         return redisTemplate.opsForValue().increment(key, -delta);
  140.     }
  141.     // ================================Map=================================
  142.     /**
  143.      * HashGet
  144.      * @param key 键 不能为null
  145.      * @param item 项 不能为null
  146.      * @return 值
  147.      */
  148.     public Object hget(String key, String item) {
  149.         return redisTemplate.opsForHash().get(key, item);
  150.     }
  151.     /**
  152.      * 获取hashKey对应的所有键值
  153.      * @param key 键
  154.      * @return 对应的多个键值
  155.      */
  156.     public Map<Object, Object> hmget(String key) {
  157.         return redisTemplate.opsForHash().entries(key);
  158.     }
  159.     /**
  160.      * HashSet
  161.      * @param key 键
  162.      * @param map 对应多个键值
  163.      * @return true 成功 false 失败
  164.      */
  165.     public boolean hmset(String key, Map<String, Object> map) {
  166.         try {
  167.             redisTemplate.opsForHash().putAll(key, map);
  168.             return true;
  169.         } catch (Exception e) {
  170.             e.printStackTrace();
  171.             return false;
  172.         }
  173.     }
  174.     /**
  175.      * HashSet 并设置时间
  176.      * @param key 键
  177.      * @param map 对应多个键值
  178.      * @param time 时间(秒)
  179.      * @return true成功 false失败
  180.      */
  181.     public boolean hmset(String key, Map<String, Object> map, long time) {
  182.         try {
  183.             redisTemplate.opsForHash().putAll(key, map);
  184.             if (time > 0) {
  185.                 expire(key, time);
  186.             }
  187.             return true;
  188.         } catch (Exception e) {
  189.             e.printStackTrace();
  190.             return false;
  191.         }
  192.     }
  193.     /**
  194.      * 向一张hash表中放入数据,如果不存在将创建
  195.      * @param key 键
  196.      * @param item 项
  197.      * @param value 值
  198.      * @return true 成功 false失败
  199.      */
  200.     public boolean hset(String key, String item, Object value) {
  201.         try {
  202.             redisTemplate.opsForHash().put(key, item, value);
  203.             return true;
  204.         } catch (Exception e) {
  205.             e.printStackTrace();
  206.             return false;
  207.         }
  208.     }
  209.     /**
  210.      * 向一张hash表中放入数据,如果不存在将创建
  211.      * @param key 键
  212.      * @param item 项
  213.      * @param value 值
  214.      * @param time 时间(秒) 注意:如果已存在的hash表有时间,这里将会替换原有的时间
  215.      * @return true 成功 false失败
  216.      */
  217.     public boolean hset(String key, String item, Object value, long time) {
  218.         try {
  219.             redisTemplate.opsForHash().put(key, item, value);
  220.             if (time > 0) {
  221.                 expire(key, time);
  222.             }
  223.             return true;
  224.         } catch (Exception e) {
  225.             e.printStackTrace();
  226.             return false;
  227.         }
  228.     }
  229.     /**
  230.      * 删除hash表中的值
  231.      * @param key 键 不能为null
  232.      * @param item 项 可以使多个 不能为null
  233.      */
  234.     public void hdel(String key, Object... item) {
  235.         redisTemplate.opsForHash().delete(key, item);
  236.     }
  237.     /**
  238.      * 判断hash表中是否有该项的值
  239.      * @param key 键 不能为null
  240.      * @param item 项 不能为null
  241.      * @return true 存在 false不存在
  242.      */
  243.     public boolean hHasKey(String key, String item) {
  244.         return redisTemplate.opsForHash().hasKey(key, item);
  245.     }
  246.     /**
  247.      * hash递增 如果不存在,就会创建一个 并把新增后的值返回
  248.      * @param key 键
  249.      * @param item 项
  250.      * @param by 要增加几(大于0)
  251.      * @return
  252.      */
  253.     public double hincr(String key, String item, double by) {
  254.         return redisTemplate.opsForHash().increment(key, item, by);
  255.     }
  256.     /**
  257.      * hash递减
  258.      * @param key 键
  259.      * @param item 项
  260.      * @param by 要减少记(小于0)
  261.      * @return
  262.      */
  263.     public double hdecr(String key, String item, double by) {
  264.         return redisTemplate.opsForHash().increment(key, item, -by);
  265.     }
  266.     // ============================set=============================
  267.     /**
  268.      * 根据key获取Set中的所有值
  269.      * @param key 键
  270.      * @return
  271.      */
  272.     public Set<Object> sGet(String key) {
  273.         try {
  274.             return redisTemplate.opsForSet().members(key);
  275.         } catch (Exception e) {
  276.             e.printStackTrace();
  277.             return null;
  278.         }
  279.     }
  280.     /**
  281.      * 根据value从一个set中查询,是否存在
  282.      * @param key 键
  283.      * @param value 值
  284.      * @return true 存在 false不存在
  285.      */
  286.     public boolean sHasKey(String key, Object value) {
  287.         try {
  288.             return redisTemplate.opsForSet().isMember(key, value);
  289.         } catch (Exception e) {
  290.             e.printStackTrace();
  291.             return false;
  292.         }
  293.     }
  294.     /**
  295.      * 将数据放入set缓存
  296.      * @param key 键
  297.      * @param values 值 可以是多个
  298.      * @return 成功个数
  299.      */
  300.     public long sSet(String key, Object... values) {
  301.         try {
  302.             return redisTemplate.opsForSet().add(key, values);
  303.         } catch (Exception e) {
  304.             e.printStackTrace();
  305.             return 0;
  306.         }
  307.     }
  308.     /**
  309.      * 将set数据放入缓存
  310.      * @param key 键
  311.      * @param time 时间(秒)
  312.      * @param values 值 可以是多个
  313.      * @return 成功个数
  314.      */
  315.     public long sSetAndTime(String key, long time, Object... values) {
  316.         try {
  317.             Long count = redisTemplate.opsForSet().add(key, values);
  318.             if (time > 0) {
  319.                 expire(key, time);
  320.             }
  321.             return count;
  322.         } catch (Exception e) {
  323.             e.printStackTrace();
  324.             return 0;
  325.         }
  326.     }
  327.     /**
  328.      * 获取set缓存的长度
  329.      * @param key 键
  330.      * @return
  331.      */
  332.     public long sGetSetSize(String key) {
  333.         try {
  334.             return redisTemplate.opsForSet().size(key);
  335.         } catch (Exception e) {
  336.             e.printStackTrace();
  337.             return 0;
  338.         }
  339.     }
  340.     /**
  341.      * 移除值为value的
  342.      * @param key 键
  343.      * @param values 值 可以是多个
  344.      * @return 移除的个数
  345.      */
  346.     public long setRemove(String key, Object... values) {
  347.         try {
  348.             Long count = redisTemplate.opsForSet().remove(key, values);
  349.             return count;
  350.         } catch (Exception e) {
  351.             e.printStackTrace();
  352.             return 0;
  353.         }
  354.     }
  355.     // ===============================list=================================
  356.     /**
  357.      * 获取list缓存的内容
  358.      * @param key 键
  359.      * @param start 开始
  360.      * @param end 结束 0 到 -1代表所有值
  361.      * @return
  362.      */
  363.     public List<Object> lGet(String key, long start, long end) {
  364.         try {
  365.             return redisTemplate.opsForList().range(key, start, end);
  366.         } catch (Exception e) {
  367.             e.printStackTrace();
  368.             return null;
  369.         }
  370.     }
  371.     /**
  372.      * 获取list缓存的长度
  373.      * @param key 键
  374.      * @return
  375.      */
  376.     public long lGetListSize(String key) {
  377.         try {
  378.             return redisTemplate.opsForList().size(key);
  379.         } catch (Exception e) {
  380.             e.printStackTrace();
  381.             return 0;
  382.         }
  383.     }
  384.     /**
  385.      * 通过索引 获取list中的值
  386.      * @param key 键
  387.      * @param index 索引 index>=0时， 0 表头，1 第二个元素，依次类推；index<0时，-1，表尾，-2倒数第二个元素，依次类推
  388.      * @return
  389.      */
  390.     public Object lGetIndex(String key, long index) {
  391.         try {
  392.             return redisTemplate.opsForList().index(key, index);
  393.         } catch (Exception e) {
  394.             e.printStackTrace();
  395.             return null;
  396.         }
  397.     }
  398.     /**
  399.      * 将list放入缓存
  400.      * @param key 键
  401.      * @param value 值
  402.      * @return
  403.      */
  404.     public boolean lSet(String key, Object value) {
  405.         try {
  406.             redisTemplate.opsForList().rightPush(key, value);
  407.             return true;
  408.         } catch (Exception e) {
  409.             e.printStackTrace();
  410.             return false;
  411.         }
  412.     }
  413.     /**
  414.      * 将list放入缓存
  415.      * @param key 键
  416.      * @param value 值
  417.      * @param time 时间(秒)
  418.      * @return
  419.      */
  420.     public boolean lSet(String key, Object value, long time) {
  421.         try {
  422.             redisTemplate.opsForList().rightPush(key, value);
  423.             if (time > 0) {
  424.                 expire(key, time);
  425.             }
  426.             return true;
  427.         } catch (Exception e) {
  428.             e.printStackTrace();
  429.             return false;
  430.         }
  431.     }
  432.     /**
  433.      * 将list放入缓存
  434.      * @param key 键
  435.      * @param value 值
  436.      * @return
  437.      */
  438.     public boolean lSet(String key, List<Object> value) {
  439.         try {
  440.             redisTemplate.opsForList().rightPushAll(key, value);
  441.             return true;
  442.         } catch (Exception e) {
  443.             e.printStackTrace();
  444.             return false;
  445.         }
  446.     }
  447.     /**
  448.      * 将list放入缓存
  449.      *
  450.      * @param key 键
  451.      * @param value 值
  452.      * @param time 时间(秒)
  453.      * @return
  454.      */
  455.     public boolean lSet(String key, List<Object> value, long time) {
  456.         try {
  457.             redisTemplate.opsForList().rightPushAll(key, value);
  458.             if (time > 0) {
  459.                 expire(key, time);
  460.             }
  461.             return true;
  462.         } catch (Exception e) {
  463.             e.printStackTrace();
  464.             return false;
  465.         }
  466.     }
  467.     /**
  468.      * 根据索引修改list中的某条数据
  469.      * @param key 键
  470.      * @param index 索引
  471.      * @param value 值
  472.      * @return
  473.      */
  474.     public boolean lUpdateIndex(String key, long index, Object value) {
  475.         try {
  476.             redisTemplate.opsForList().set(key, index, value);
  477.             return true;
  478.         } catch (Exception e) {
  479.             e.printStackTrace();
  480.             return false;
  481.         }
  482.     }
  483.     /**
  484.      * 移除N个值为value
  485.      * @param key 键
  486.      * @param count 移除多少个
  487.      * @param value 值
  488.      * @return 移除的个数
  489.      */
  490.     public long lRemove(String key, long count, Object value) {
  491.         try {
  492.             Long remove = redisTemplate.opsForList().remove(key, count, value);
  493.             return remove;
  494.         } catch (Exception e) {
  495.             e.printStackTrace();
  496.             return 0;
  497.         }
  498.     }
  499. }

五、登录实现（user-service）

UserDetails
  1. package com.pzhxy.user.service.impl;
  2.  
  3. import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
  4.  
  5.  
  6. import com.pzhxy.feign.domain.User;
  7. import com.pzhxy.security.domain.LoginUser;
  8. import com.pzhxy.user.mapper.PermissionMapper;
  9. import com.pzhxy.user.mapper.UserMapper;
  10. import org.springframework.beans.factory.annotation.Autowired;
  11. import org.springframework.security.core.userdetails.UserDetails;
  12. import org.springframework.security.core.userdetails.UserDetailsService;
  13. import org.springframework.security.core.userdetails.UsernameNotFoundException;
  14. import org.springframework.stereotype.Service;
  15.  
  16. import java.util.List;
  17. import java.util.Objects;
  18.  
  19. @Service("userDetailsService")
  20. public class UserDetalisServiceImpl implements UserDetailsService {
  21.     /***
  22.      * 进行认证,认证是从数据库查询账号密码
  23.      *@Date:2022/5/22
  24.      * @Author: Liu
  25.      */
  26.     @Autowired
  27.     private UserMapper userMapper;
  28.     @Autowired
  29.     private PermissionMapper permissionMapper;
  30.     @Override
  31.     public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
  32.         //调用usermapper,实现数据库查询
  33.         QueryWrapper<User>wrapper=new QueryWrapper<>();
  34.         wrapper.eq("id",username);
  35.         User user = userMapper.selectOne(wrapper);
  36.             if(Objects.isNull(user)){
  37.             //数据库无该用户,认证失败
  38.             throw new RuntimeException("用户名不存在");
  39.         }
  40.          //授权
  41.         List<String> list = permissionMapper.selectPermsByUserId(user.getId());
  42.  
  43.         LoginUser loginUser=new LoginUser();
  44.         loginUser.setUser(user);
  45.         loginUser.setPermissions(list);
  46.         return loginUser;
  47.     }
  48. }
  1. package com.pzhxy.user.controller;
  2.  
  3. import com.pzhxy.constant.result.ResultBean;
  4. import com.pzhxy.feign.domain.User;
  5.  
  6.  
  7. import com.pzhxy.user.service.impl.LoginServiceImpl;
  8. import org.springframework.beans.factory.annotation.Autowired;
  9. import org.springframework.web.bind.annotation.*;
  10.  
  11.  
  12. @RestController
  13. @RequestMapping("/user")
  14. public class LoginController {
  15.     @Autowired
  16.     private LoginServiceImpl loginService;
  17.  
  18.  
  19.     @PostMapping("/login")
  20.     public ResultBean login(@RequestBody User user){
  21.         return loginService.login(user);
  22.     }
  23.  
  24.     @GetMapping("/logout")
  25.     public ResultBean loginout(){
  26.         return loginService.logout();
  27.     }
  28. }

六、使用方式

在其他微服务中导入你的security服务的依赖即可

例如user-servcie

本文内容由网友自发贡献，转载请注明出处：https://www.wpsshop.cn/w/小小林熬夜学编程/article/detail/185349
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号