好的，这个问题属于技术问题，关于
Java结合SpringBoot给
登录写个
用户名和密码
JWT令牌验证，你可以参考以下步骤：
1. 在SpringBoot
项目的pom.xml文件
中添加
JWT依赖：
```
<dependency>
<groupId>io.jsonweb
token</groupId>
<artifactId>j
jwt</artifactId>
<version>0.9.1</version>
</dependency>
```
2. 编写一个
jwt工具类，该类用于生成和解析
JWT令牌：
```
public class
JwtUtils {
private static final long EXPIRE_TIME = 30 * 60 * 1000; // 过期时间为30分钟
private static final String SECRET_KEY = "your_secret_key"; // 自定义秘钥，用于签名和解密
public static String generate
Token(String username) {
Date now = new Date();
Date expireTime = new Date(now.getTime() + EXPIRE_TIME);
return
Jwts.builder()
.setSubject(username)
.setIssuedAt(now)
.setExpiration(expireTime)
.signWith(SignatureAlgorithm.HS256, SECRET_KEY)
.compact();
}
public static String getUsernameFrom
Token(String
token) {
Claims claims =
Jwts.parser()
.setSigningKey(SECRET_KEY)
.parseClaimsJws(
token)
.getBody();
return claims.getSubject();
}
public static boolean validate
Token(String
token) {
try {
Jwts.parser().setSigningKey(SECRET_KEY).parseClaimsJws(
token);
return true;
} catch (Exception e) {
return false;
}
}
}
```
3. 编写一个
登录接口，该接口接收
用户名和密码参数，并返回生成的
JWT令牌：
```
@RestController
public class LoginController {
@PostMapping("/login")
public RespBean login(@RequestParam("username") String username,
@RequestParam("password") String password) {
// TODO: 在此处
校验用户名和密码是否正确
String
token =
JwtUtils.generate
Token(username);
return RespBean.success(
token);
}
}
```
4. 在需要
验证访问权限的接口
中，
使用Spring Security和
JWT进行
验证：
```
@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
@Autowired
private UserDetailsService userDetailsService;
@Override
protected void configure(HttpSecurity http) throws Exception {
http.authorizeRequests()
.antMatchers("/login").permitAll()
.anyRequest().authenticated()
.and()
.addFilter(new
JwtAuthenticationFilter(authenticationManager()))
.addFilter(new
JwtAuthorizationFilter(authenticationManager(), userDetailsService));
}
@Override
protected void configure(AuthenticationManagerBuilder auth) throws Exception {
auth.userDetailsService(userDetailsService)
.passwordEncoder(passwordEncoder());
}
@Bean
public PasswordEncoder passwordEncoder() {
return new BCryptPasswordEncoder();
}
}
public class
JwtAuthenticationFilter extends UsernamePasswordAuthenticationFilter {
@Override
public Authentication attemptAuthentication(HttpServletRequest request,
HttpServletResponse response) throws AuthenticationException {
try {
String username = request.getParameter("username");
String password = request.getParameter("password");
Authentication authentication = new UsernamePasswordAuthentication
Token(
username, password, Collections.emptyList());
return getAuthenticationManager().authenticate(authentication);
} catch (Exception e) {
throw new RuntimeException(e);
}
}
}
public class
JwtAuthorizationFilter extends BasicAuthenticationFilter {
private final UserDetailsService userDetailsService;
public
JwtAuthorizationFilter(AuthenticationManager authenticationManager,
UserDetailsService userDetailsService) {
super(authenticationManager);
this.userDetailsService = userDetailsService;
}
@Override
protected void doFilterInternal(HttpServletRequest request,
HttpServletResponse response,
FilterChain chain) throws IOException, ServletException {
String header = request.getHeader("Authorization");
if (header == null || !header.startsWith("Bearer ")) {
chain.doFilter(request, response);
return;
}
String
token = header.replace("Bearer ", "");
if (
JwtUtils.validate
Token(
token)) {
String username =
JwtUtils.getUsernameFrom
Token(
token);
UserDetails userDetails = userDetailsService.loadUserByUsername(username);
UsernamePasswordAuthentication
Token authentication =
new UsernamePasswordAuthentication
Token(userDetails, null,
userDetails.getAuthorities());
SecurityContextHolder.getContext().setAuthentication(authentication);
}
chain.doFilter(request, response);
}
}
```
我希望上述内容对你有所帮助，如果需要了解更详细的内容，可以自行查询相关资料。
2900
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
