jks中存储了一个密钥对,包括私钥和公钥.
在spring security 和 oauth2 的整合中,使用文件名为 oauth2.jks 的文件作为密钥对.
在登录时使用秘钥对的私钥加密jwt Token,那么在验证jwt时,就需要提供秘钥对的公钥,同时项目中已经存在该秘钥对的公钥,是以文件的方式存放.那么我们如何用这个公钥字符串文件来验证jwt?
private boolean verifyVisitsNumber(String value) {
ClassPathResource resource = new ClassPathResource("public.txt");
String publicKey = null;
try {
publicKey = IOUtils.toString(resource.getInputStream(), "UTF-8");
} catch (IOException e) {
e.printStackTrace();
}
PublicKey publicKey1=null;
try {
publicKey1 = pemToPublicKey(publicKey);
} catch (Exception e) {
e.printStackTrace();
}
Claims body = Jwts.parser()
.setSigningKey(publicKey1)
.parseClaimsJws(value)
.getBody();
Map<String,String> userInfo = (Map<String,String>)body.get("userInfo");
String uid = userInfo.get("uid");
if(StringUtils.equals(uid,"9")){
//超级管理员不计次数
return true;
}
//明天凌晨
DateTime dateTime = DateUtil.beginOfDay(DateUtil.tomorrow());
Date date = new Date();
//距离多少分钟到凌晨->到凌晨自动重置访问次数
long betweenMinutes = DateUtil.between(date, dateTime, DateUnit.MINUTE);
String o = (String)redisTemplate.opsForValue().get(visitsNumberPrefix + ":" + uid);
if(StringUtils.isBlank(o)){
redisTemplate.opsForValue().set(visitsNumberPrefix + ":" + uid,"1",betweenMinutes, TimeUnit.MINUTES);
o="1";
}else{
redisTemplate.opsForValue().set(visitsNumberPrefix + ":" + uid,String.valueOf(Integer.valueOf(o)+1),betweenMinutes, TimeUnit.MINUTES);
o=String.valueOf(Integer.valueOf(o)+1);
}
if(Integer.valueOf(o) > visitsNumber){
//该用户当前请求次数耗尽
return false;
}
return true;
}
/**
* 将PEM格式的RSA公钥字符串转换为PublicKey对象
*
* @param pubKeyPEM PEM格式的RSA公钥字符串
* @return PublicKey对象
* @throws Exception 如果转换过程中发生错误
*/
public static PublicKey pemToPublicKey(String pubKeyPEM) throws Exception {
String publicKeyPEMHeader = "-----BEGIN PUBLIC KEY-----";
String publicKeyPEMFooter = "-----END PUBLIC KEY-----";
// 移除PEM格式的头部和尾部
String pubKey = pubKeyPEM.replace(publicKeyPEMHeader, "").replace(publicKeyPEMFooter, "").replaceAll("\\s+", "");
// Base64解码
byte[] encoded = Base64.getDecoder().decode(pubKey);
// 创建X509EncodedKeySpec
X509EncodedKeySpec keySpec = new X509EncodedKeySpec(encoded);
// 获取RSA密钥工厂
KeyFactory keyFactory = KeyFactory.getInstance("RSA");
// 生成PublicKey
return keyFactory.generatePublic(keySpec);
}