为实现Jwt简单的权限管理,我们需要用Jwt工具来生成token,也需要用Jwt来解码token,同时需要添加Jwt拦截器来决定放行还是拦截。下面来实现:
1、gradle引入Jwt、hutool插件
implementation 'com.auth0:java-jwt:3.10.3'
implementation 'cn.hutool:hutool-all:5.3.7'
2、Jwt工具类,提供静态方法生成token,和根据请求携带的token查找user信息
package com.zzz.simple_blog_backend.utils;
import ......
@Component
public class JwtTokenUtils {
@Autowired
private UserService userService;
private static UserService userServiceStatic;
@PostConstruct//在spring容器初始化后执行该方法
public void setUserService() {
userServiceStatic = userService;
}
//生成Token
public static String genToken(String userId,String passwordSign) {
return JWT.create().withAudience(userId)//放入载荷
.withExpiresAt(DateUtil.offsetHour(new Date(), 2))//2小时后过期
.sign(Algorithm.HMAC256(passwordSign));//密码签名作为密钥
}
//通过token获取当前登录用户信息
public static User getCurrentUser() {
String token = null;
HttpServletRequest request = ((ServletRequestAttributes)RequestContextHolder.getRequestAttributes()).getRequest();
//1、获取token
token = request.getHeader("token");
if (StrUtil.isBlank(token)) {
token = request.getParameter("token");
}
if

最低0.47元/天 解锁文章
2057






