java-jwt工具类

3.9

utils

package com.sise.JWT;

import java.text.SimpleDateFormat;

import java.util.Base64;

import java.util.Date;

import java.util.HashMap;

import java.util.Map;

import io.jsonwebtoken.*;

import io.jsonwebtoken.security.Keys;

import org.apache.commons.lang3.StringUtils;

import javax.crypto.SecretKey;

/**

  • @author:Tlimited

*/

public class JwtUtil {

private static final long EXPIRE = 60 * 1000; //过期时间

public static final SecretKey key = Keys.secretKeyFor(SignatureAlgorithm.HS256);//密钥,动态生成的密钥

/**

  • 生成token

  • @param claims 要传送消息map

  • @return

*/

public static String generate(Map<String,Object> claims) {

Date nowDate = new Date();

//过期时间,设定为一分钟

Date expireDate = new Date(System.currentTimeMillis() + EXPIRE);

//头部信息,可有可无

Map<String, Object> header = new HashMap<>(2);

header.put(“typ”, “jwt”);

//更强的密钥,JDK11起才能用

// KeyPair keyPair = Keys.keyPairFor(SignatureAlgorithm.RS256);

// PrivateKey key1 = keyPair.getPrivate(); // 私钥

//PublicKey key2 = keyPair.getPublic(); //公钥

return Jwts.builder().setHeader(header)

// .setSubject(“weimi”)//主题

// .setIssuer(“weimi”) //发送方

.setClaims(claims) //自定义claims

.setIssuedAt(nowDate)//当前时间

.setExpiration(expireDate) //过期时间

.signWith(key)//签名算法和key

.compact();

}

/**

  • 生成token

  • @param header 传入头部信息map

  • @param claims 要传送消息map

  • @return

*/

public static String generate( Map<String, Object> header,Map<String,Object> claims) {

Date nowDate = new Date();

//过期时间,设定为一分钟

Date expireDate = new Date(System.currentTimeMillis() + EXPIRE);

return Jwts.builder().setHeader(header)

// .setSubject(“weimi”)//主题

// .setIssuer(“weimi”) //发送方

.setClaims(claims) //自定义claims

.setIssuedAt(nowDate)//当前时间

.setExpiration(expireDate) //过期时间

.signWith(key)//签名算法和key

.compact();

}

/**

  • 校验是不是jwt签名

  • @param token

  • @return

*/

public static boolean isSigned(String token){

return Jwts.parser()

.setSigningKey(key)

.isSigned(token);

}

/**

  • 校验签名是否正确

  • @param token

  • @return

*/

public static boolean verify(String token){

try {

Jwts.parser()

.setSigningKey(key)

.parseClaimsJws(token);

return true;

}catch (JwtException e){

System.out.println(e.getMessage());

return false;

}

}

/**

  • 获取payload 部分内容(即要传的信息)

  • 使用方法:如获取userId:getClaim(token).get(“userId”);

  • @param token

  • @return

*/

public static Claims getClaim(String token) {

Claims claims = null;

try {

claims = Jwts.parser()

.setSigningKey(key)

.parseClaimsJws(token)

.getBody();

} catch (Exception e) {

e.printStackTrace();

}

return claims;

}

/**

  • 获取头部信息map

  • 使用方法 : getHeader(token).get(“alg”);

  • @param token

  • @return

*/

public static JwsHeader getHeader(String token) {

JwsHeader header = null;

try {

header = Jwts.parser()

.setSigningKey(key)

.parseClaimsJws(token)

.getHeader();

} catch (Exception e) {

e.printStackTrace();

}

return header;

}

/**

  • 获取jwt发布时间

*/

public static Date getIssuedAt(String token) {

return getClaim(token).getIssuedAt();

}

/**

面试题总结

其它面试题(springboot、mybatis、并发、java中高级面试总结等)

  • 获取jwt发布时间

*/

public static Date getIssuedAt(String token) {

return getClaim(token).getIssuedAt();

}

/**

面试题总结

其它面试题(springboot、mybatis、并发、java中高级面试总结等)

[外链图片转存中…(img-wSMyz8iS-1714320778827)]

[外链图片转存中…(img-bWdOqYjr-1714320778829)]

[外链图片转存中…(img-X3VSGU2R-1714320778829)]

本文已被CODING开源项目:【一线大厂Java面试题解析+核心总结学习笔记+最新讲解视频+实战项目源码】收录

  • 22
    点赞
  • 22
    收藏
    觉得还不错? 一键收藏
  • 2
    评论
可以通过以下步骤在Spring Boot中集成JWT: 1. 添加java-jwt依赖包到pom.xml文件中: ```xml <dependency> <groupId>com.auth0</groupId> <artifactId>java-jwt</artifactId> <version>3.18.1</version> </dependency> ``` 2. 创建一个JWT工具类来生成和验证JWT令牌: ```java import com.auth0.jwt.JWT; import com.auth0.jwt.algorithms.Algorithm; import com.auth0.jwt.exceptions.JWTVerificationException; import com.auth0.jwt.interfaces.DecodedJWT; import java.util.Date; public class JwtUtils { private static final long EXPIRATION_TIME = 86400000; // 24 hours private static final String SECRET = "mySecret"; private static final String ISSUER = "myIssuer"; public static String generateToken(String username) { Date now = new Date(); Date expiryDate = new Date(now.getTime() + EXPIRATION_TIME); return JWT.create() .withSubject(username) .withIssuer(ISSUER) .withIssuedAt(now) .withExpiresAt(expiryDate) .sign(Algorithm.HMAC512(SECRET)); } public static String getUsernameFromToken(String token) throws JWTVerificationException { DecodedJWT jwt = JWT.require(Algorithm.HMAC512(SECRET)) .withIssuer(ISSUER) .build() .verify(token); return jwt.getSubject(); } } ``` 3. 在Spring Security配置中添加JWT过滤器,以验证JWT令牌: ```java import org.springframework.beans.factory.annotation.Autowired; import org.springframework.context.annotation.Configuration; import org.springframework.core.annotation.Order; import org.springframework.http.HttpStatus; import org.springframework.security.authentication.AuthenticationManager; import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; import org.springframework.security.config.annotation.SecurityConfigurerAdapter; import org.springframework.security.config.annotation.web.builders.HttpSecurity; import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; import org.springframework.security.core.Authentication; import org.springframework.security.core.AuthenticationException; import org.springframework.security.web.authentication.HttpStatusEntryPoint; import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter; import javax.servlet.FilterChain; import javax.servlet.ServletException; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import java.io.IOException; @Configuration @Order(1) public class JwtConfig extends SecurityConfigurerAdapter<javax.servlet.Filter, HttpSecurity> { @Autowired private JwtAuthenticationProvider jwtAuthenticationProvider; @Override public void configure(HttpSecurity http) throws Exception { JwtAuthenticationFilter jwtAuthenticationFilter = new JwtAuthenticationFilter(); jwtAuthenticationFilter.setAuthenticationManager(http.getSharedObject(AuthenticationManager.class)); jwtAuthenticationFilter.setAuthenticationFailureHandler(new JwtAuthenticationFailureHandler()); http.addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class); } private class JwtAuthenticationFilter extends UsernamePasswordAuthenticationFilter { @Override public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response) throws AuthenticationException { String token = request.getHeader("Authorization"); if (token == null || !token.startsWith("Bearer ")) { throw new JwtAuthenticationException("Invalid JWT token"); } String username = JwtUtils.getUsernameFromToken(token.substring(7)); if (username == null) { throw new JwtAuthenticationException("Invalid JWT token"); } return jwtAuthenticationProvider.authenticate(new UsernamePasswordAuthenticationToken(username, "")); } @Override protected void successfulAuthentication(HttpServletRequest request, HttpServletResponse response, FilterChain chain, Authentication authResult) throws IOException, ServletException { super.successfulAuthentication(request, response, chain, authResult); chain.doFilter(request, response); } } private class JwtAuthenticationFailureHandler extends HttpStatusEntryPoint { @Override public void commence(HttpServletRequest request, HttpServletResponse response, AuthenticationException authException) throws IOException, ServletException { response.setStatus(HttpStatus.UNAUTHORIZED.value()); } } } ``` 4. 创建一个JwtAuthenticationProvider来验证用户名和密码: ```java import org.springframework.beans.factory.annotation.Autowired; import org.springframework.security.authentication.AuthenticationProvider; import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; import org.springframework.security.core.Authentication; import org.springframework.security.core.AuthenticationException; import org.springframework.security.core.userdetails.UserDetails; import org.springframework.security.core.userdetails.UserDetailsService; import org.springframework.security.crypto.password.PasswordEncoder; import org.springframework.stereotype.Component; @Component public class JwtAuthenticationProvider implements AuthenticationProvider { @Autowired private UserDetailsService userDetailsService; @Autowired private PasswordEncoder passwordEncoder; @Override public Authentication authenticate(Authentication authentication) throws AuthenticationException { String username = authentication.getName(); String password = (String) authentication.getCredentials(); UserDetails userDetails = userDetailsService.loadUserByUsername(username); if (!passwordEncoder.matches(password, userDetails.getPassword())) { throw new JwtAuthenticationException("Invalid username or password"); } return new UsernamePasswordAuthenticationToken(username, password, userDetails.getAuthorities()); } @Override public boolean supports(Class<?> authentication) { return authentication.equals(UsernamePasswordAuthenticationToken.class); } } ``` 5. 在Spring Security配置中添加JwtConfig: ```java import org.springframework.beans.factory.annotation.Autowired; import org.springframework.context.annotation.Configuration; import org.springframework.core.annotation.Order; import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; import org.springframework.security.config.annotation.web.builders.HttpSecurity; import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; @Configuration public class SecurityConfig extends WebSecurityConfigurerAdapter { @Autowired private JwtAuthenticationProvider jwtAuthenticationProvider; @Override protected void configure(AuthenticationManagerBuilder auth) throws Exception { auth.authenticationProvider(jwtAuthenticationProvider); } @Override protected void configure(HttpSecurity http) throws Exception { http.csrf().disable() .antMatcher("/**") .authorizeRequests() .antMatchers("/login").permitAll() .anyRequest().authenticated() .and() .apply(new JwtConfig()); } } ``` 现在你就可以在Spring Boot应用程序中使用JWT进行身份验证了。
评论 2
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值