拦截器代码编写（springmvc的核心之一）（登录使用）SpringSecurity

渔阳镇节度使

已于 2023-08-11 11:39:31 修改

阅读量163

点赞数

分类专栏：工具类实际工作文章标签： java servlet 开发语言

于 2023-05-24 16:21:19 首次发布

本文链接：https://blog.csdn.net/Forbidden_City/article/details/130849754

版权

实际工作同时被 2 个专栏收录

23 篇文章 0 订阅

订阅专栏

工具类

9 篇文章 0 订阅

订阅专栏

该文章描述了一个实现JWT访问令牌验证的拦截器，通过检查请求头中的Authorization字段获取token，并使用Redis存储和校验token的有效性。当token无效或不匹配时，会返回错误信息。配置文件中定义了拦截器的路径规则，排除特定不受拦截的URL。JwtUtils工具类用于生成、解析和校验JWTtoken。

摘要由CSDN通过智能技术生成

public class JwtInterceptor implements HandlerInterceptor {

    @Autowired
    private StringRedisTemplate redisTemplate;

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {

        String token = request.getHeader("Authorization");
        boolean result = true;
        String resultString = "";

//        TokenResult tokenResult = JwtUtils.parseToken(token);
//        重置时间
//        redisTemplate.opsForValue().set(RedisPrefixuUils.getKey(""), token);

        TokenResult tokenResult = JwtUtils.checkToken(token);

        if (tokenResult == null) {
            result=false;
            resultString="access token invalid";
        }else {
            String phone = tokenResult.getPhone();
            String identity = tokenResult.getIdentity();
            String tokenKey = RedisPrefixuUils.generatorTokenKey(phone, identity, TokenConstants.ACCESS_TOKEN_TYPE);
            String tokenRedis = redisTemplate.opsForValue().get(tokenKey);
            if (StringUtils.isEmpty(tokenRedis)||!StringUtils.equalsIgnoreCase(token.trim(),tokenRedis.trim())){
                result=false;
                resultString="access token invalid";
            }
        }

        if (!result) {
            PrintWriter writer = response.getWriter();
            writer.println(JSONObject.fromObject(ResponseResult.fail(resultString)).toString());
        }

        return result;
    }
}

对应的配置文件编写

@Configuration
public class InterceptorConfig implements WebMvcConfigurer {

    @Bean
    public JwtInterceptor jwtInterceptor(){
        return new JwtInterceptor();
    }

    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        registry.addInterceptor(jwtInterceptor())
                .addPathPatterns("/**")//拦截的路径
                .excludePathPatterns("/noauthTest")//不拦截的路径
                .excludePathPatterns("/verification-code")//不拦截的路径
        ;

    }
}

JWT工具类

public class JwtUtils {
	//salt  盐
    public static final String SIGN = "CPFyuyang!@#$$";

    //生成token
    public static String generatorateToken(Map<String, String>map){

        JWTCreator.Builder builder = JWT.create();
        map.forEach((k,v)->{
            builder.withClaim(k,v);
        });

        //token时间设定
        Calendar instance = Calendar.getInstance();
        instance.add(Calendar.MINUTE,30);
        Date time = instance.getTime();
        builder.withExpiresAt(time);
        //生成token
        String sign = builder.sign(Algorithm.HMAC256(SIGN));

        return sign;
    }


	//解析token
    public static Map<String, Claim> parseToken(String token){
        DecodedJWT jwt = JWT.require(Algorithm.HMAC256(SIGN)).build().verify(token);
        String age = jwt.getClaim("age").asString();  //主题内容
        System.out.println("age = " + age);
        System.out.println("jwt.getToken() = " + jwt.getToken());
        System.out.println("jwt.getHeader() = " + jwt.getHeader());
        Map<String, Claim> claims = jwt.getClaims();
        System.out.println("claims = " + claims);
        return claims;

    }

	/**
     * 校验token
     * @param token
     * @return
     */
    public static TokenResult checkToken(String token){
        try {
            TokenResult tokenResult = JwtUtils.parseToken(token);
            return tokenResult;
        } catch (Exception e) {
            return null;
        }
    }
}