springboot整合jwt(Json Web Token) 令牌授权 demo代码

一、pom文件引入jwt依赖

<!--JWT 令牌token -->
<dependency>
    <groupId>io.jsonwebtoken</groupId>
    <artifactId>jjwt</artifactId>
    <version>0.9.0</version>
</dependency>

二、用户表vo类

/**
 * 描述:
 * 用户表vo类
 * @author 闲走天涯
 * @create 2021/8/11 17:00
 */
@Data
public class Member {
    private Long id;
    private String username;//用户名
    private String headImg;//头像链接
    private String account;//账号
    private String password;//密码

    private String token;//令牌
}

三、编写jwt工具类

/**
 * 描述:
 * jwt工具类
 * @author 闲走天涯
 * @create 2021/8/11 16:49
 */
@Slf4j
@Component
public class JwtTokenUtil implements Serializable {

    private static final String CLAIM_KEY_USERNAME = "sub";

    /**
     * 过期时间
     * 30天(毫秒)
     */
    private static final long EXPIRATION_TIME = 2592000000L;
//    private static final long EXPIRATION_TIME = 120000L;
    /**
     * JWT密码
     */
    private static final String SECRET = "secret";


    /**
     * 签发JWT
     * @param member
     * @return
     */
    public String generateToken(Member member) {
        Map<String, Object> claims = new HashMap<>(16);
        claims.put(CLAIM_KEY_USERNAME, member.getAccount());
        return Jwts.builder()
                .setClaims(claims)
                .setExpiration(new Date(Instant.now().toEpochMilli() + EXPIRATION_TIME))
                .signWith(SignatureAlgorithm.HS512, SECRET)
                .compact();
    }

    /**
     * 验证JWT
     * @param token
     * @param member
     * @return
     */
    public Boolean validateToken(String token, Member member) {
        String account = getAccountFromToken(token);
        return (account.equals(member.getAccount()) && !isTokenExpired(token));
    }

    /**
     * 获取token是否过期
     * @param token
     * @return
     */
    public Boolean isTokenExpired(String token) {
        Date expiration = getExpirationDateFromToken(token);
        if (expiration == null) {
            return false;
        }
        return expiration.before(new Date());
    }

    /**
     * 根据token获取account
     * @param token
     * @return
     */
    public String getAccountFromToken(String token) {
        try {
            return Objects.requireNonNull(getClaimsFromToken(token)).getSubject();
        } catch (Exception e) {
            e.printStackTrace();
            log.error("JWT出错了" + e.getMessage());
            return "";
        }
    }

    /**
     * 获取token的过期时间
     * @param token
     * @return
     */
    public Date getExpirationDateFromToken(String token) {
        try {
            return Objects.requireNonNull(getClaimsFromToken(token)).getExpiration();
        } catch (Exception e) {
            e.printStackTrace();
            log.error("JWT出错了" + e.getMessage());
            return null;
        }
    }

    /**
     * 解析JWT
     * @param token
     * @return
     */
    private Claims getClaimsFromToken(String token) {
        try {
            return Jwts.parser().setSigningKey(SECRET).parseClaimsJws(token).getBody();
        } catch (Exception e) {
            e.printStackTrace();
            log.error("JWT出错了" + e.getMessage());
            return null;
        }
    }
}

四、编写jwt过滤器，用于token验证

/**
 * 描述:
 * jwt 过滤器
 * @author 闲走天涯
 * @create 2021/8/11 16:31
 */
@Component
public class jwtTokenFilter extends OncePerRequestFilter {
    //jwt工具类
    @Autowired
    private JwtTokenUtil jwtTokenUtil;

    @Autowired
    private MemberDao memberDao;
    /**
     * 存放Token的Header Key
     */
    public static final String HEADER_STRING = "authorization";

    @Override
    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain chain)
            throws ServletException, IOException{
        //获取请求头的token
        String token = request.getHeader(HEADER_STRING);
        //根据路径判断是否检验token
        if(filterPath(request.getServletPath())){
            chain.doFilter(request,response);
            return;
        }
        if(!StringUtils.isEmpty(token)){
            //获取account
            String account = jwtTokenUtil.getAccountFromToken(token);
            //查询member表中account
            List<Member> list = memberDao.selectMemberByAccount(account);
            if(list!=null && list.size()>0){
                Member member = list.get(0);
                if(jwtTokenUtil.validateToken(token,member)){
                    //有效token
                    //将account、member保存在request中，需要的可以从request中获取
                    request.setAttribute("account",account);
                    request.setAttribute("member",JSONObject.toJSONString(member));
                    chain.doFilter(request,response);
                    return;
                }
            }

        }
        //输出错误
        errorWrite(request,response);
    }

    /**
     * 输出错误json
     * @param request
     * @param response
     * @throws IOException
     */
    private void errorWrite(HttpServletRequest request, HttpServletResponse response) throws IOException{
        JsonBean<String> jsonBean = new JsonBean<>(false,"签名错误，请重新登录",0l,null,null,true);
        response.setContentType("application/json; charset=utf-8");
        response.setCharacterEncoding("UTF-8");
        String userJson = convertObjectToJson(jsonBean);
        OutputStream out = response.getOutputStream();
        out.write(userJson.getBytes("UTF-8"));
        out.flush();
    }

    /**
     * 将对象格式化成json
     * @param object
     * @return
     * @throws JsonProcessingException
     */
    private static String convertObjectToJson(Object object) throws JsonProcessingException {
        if (object == null) {
            return null;
        }
        ObjectMapper mapper = new ObjectMapper();
        return mapper.writeValueAsString(object);
    }

    /**
     * 进行判断路径是否通过
     * feign不通过，其余通过
     * @param path
     * @return
     */
    protected boolean filterPath(String path){
        //过滤含 /feign 字符串的接口路径
        if(path.contains("/feign")){
            return false;
        }
        return true;
    }
}

五、mysql 数据表member

CREATE TABLE `member` (
  `ID` bigint(10) NOT NULL AUTO_INCREMENT,
  `ACCOUNT` varchar(50) DEFAULT NULL COMMENT '账号',
  `HEAD_IMG` varchar(255) DEFAULT NULL,
  `USERNAME` varchar(50) DEFAULT NULL,
  `PASSWORD` varchar(100) DEFAULT NULL,
  PRIMARY KEY (`ID`)
) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8mb4;

INSERT INTO `sql_test`.`member`(`ID`, `ACCOUNT`, `HEAD_IMG`, `USERNAME`, `PASSWORD`) VALUES (1, 'cmw123', 'logo', 'cmw', '114466a7c5300d5e33caeb4e1bdbae54');

六、登录签名，获取令牌token

/**
 * 描述:
 * jwt登录获取令牌token
 * 登录签名
 * @author 闲走天涯
 * @create 2021/8/11 17:49
 */
@Slf4j
@RestController
@RequestMapping("/jwt")
public class jwtLoginController {

    @Autowired
    private MemberDao memberDao;

    @Autowired
    private JwtTokenUtil jwtTokenUtil;

    @RequestMapping("/login")
    public JsonBean<Member> login(String account, String password){
        try {
            if (StringUtils.isEmpty(account) || StringUtils.isEmpty(password)) {
                return new JsonBean<>(false, "账号或密码输入错误", 0l, null);
            }
            List<Member> list = memberDao.selectMemberByAccount(account);
            if (list != null && list.size() > 0) {
                Member member = list.get(0);
                //密码MD5加密
                String newPwd = new Md5Hash(password, account, 2).toString();
                int count = memberDao.checkMemberAccount(member.getAccount(), newPwd);
                if (count > 0) {
                    log.info("登录成功");
                    String token = jwtTokenUtil.generateToken(member);
                    member.setToken(token);
                    return new JsonBean<>(true, "登录成功", 1l, member);
                } else {
                    return new JsonBean<>(false, "密码错误,请重试", 0l, null);
                }
            } else {
                return new JsonBean<>(false, "账号错误,请重试", 0l, null);
            }
        }catch (Exception e){
            return new JsonBean<>(false,"登录失败,请重试",0l,null);
        }
    }
}

七、测试

登录，获取token： http://127.0.0.1:1234/jwt/login?account=cmw123&password=123456

访问：http://127.0.0.1:1234/feign/basic?id=8229

Headers中authorization令牌

去除Headers中authorization令牌