springboot+jwt+redis验证登录状态

springboot+jwt放入redis中
redis的安装教程可以看历史
https://blog.csdn.net/qq_39990869/article/details/108000226
设置一个用于标示是否需要验证的注解类

@Target({ElementType.METHOD, ElementType.TYPE})
@Retention(RetentionPolicy.RUNTIME)
public @interface AuthToken {

}

拦截器拦截所有的路径，再根据有上面注解的验证

@Configuration
public class WebAppConfiguration implements WebMvcConfigurer {
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        registry.addInterceptor(new AuthorizationInterceptor()).addPathPatterns("/**");
    }
}

controller类

@RestController
@Slf4j
@RequestMapping("/api/v1/")
public class UserController {
    @Autowired
    Md5TokenGenerator tokenGenerator;
    @Autowired
    TokenService tokenService;
    @Autowired
    UserMapper userMapper;
    @RequestMapping(value = "login", method = RequestMethod.POST)
    @ApiOperation("用户登录接口")
    public ResponseTemplate login( @RequestBody User user ) {
        String username = user.getUsername();
        String psd = user.getPassword();
        //判断是邮箱还是手机号的正则表达式
        String em = "^\\w+([-+.]\\w+)*@\\w+([-.]\\w+)*\\.\\w+([-.]\\w+)*$";
        String ph = "^[1][34578]\\d{9}$";
        JSONObject result = new JSONObject();
        //if(username.matches(ph)){//手机号登录
//            map.put("username", user);
//            map.put("password", psd);

//         User currentUser = users.get(0);
//             User user1=new User();


        if(user.getEmail()!=""&&user.getEmail()!=null){
            if(user.getEmail().matches(em)) {
                User users = userMapper.selectOne(user);
                if (users != null) {
                    Jedis jedis = new Jedis("172.16.238.157", 6379);
//jwt生成token存储到redis中
                    String token = tokenService.getToken(users);

                    jedis.set(users.getUsername(), token);
                    jedis.expire(users.getUsername(), ConstantKit.TOKEN_EXPIRE_TIME);
                    jedis.set(token, users.getUsername());
                    jedis.expire(token, ConstantKit.TOKEN_EXPIRE_TIME);
                    Long currentTime = System.currentTimeMillis();
                    jedis.set(token + users.getUsername(), currentTime.toString());
                    System.out.println(users.getUsername());
                    //用完关闭
                    jedis.close();
                    result.put("status", "登录成功");
                    result.put("token", token);
                } else {
                    result.put("status", "登录失败");
                }

            }
        }



        if(user.getPhone()!=""&&user.getPhone()!=null){
            if(user.getPhone().matches(ph)) {
                User users = userMapper.selectOne(user);
                if (users != null) {
                    Jedis jedis = new Jedis("172.16.238.157", 6379);
//jwt生成token存储到redis中
                    String token = tokenService.getToken(users);

                    jedis.set(users.getUsername(), token);
                    jedis.expire(users.getUsername(), ConstantKit.TOKEN_EXPIRE_TIME);
                    jedis.set(token, users.getUsername());
                    jedis.expire(token, ConstantKit.TOKEN_EXPIRE_TIME);
                    Long currentTime = System.currentTimeMillis();
                    jedis.set(token + users.getUsername(), currentTime.toString());
                    System.out.println(users.getUsername());
                    //用完关闭
                    jedis.close();
                    result.put("status", "登录成功");
                    result.put("token", token);
                } else {
                    result.put("status", "登录失败");
                }
            }

        }
        if(user.getUsername()!=""&&user.getUsername()!=null){
            User users = userMapper.selectOne(user);
        if (users != null) {
            Jedis jedis = new Jedis("172.16.238.157", 6379);
//jwt生成token存储到redis中
            String token = tokenService.getToken(user);

            jedis.set(username, token);
            jedis.expire(username, ConstantKit.TOKEN_EXPIRE_TIME);
            jedis.set(token, username);
            jedis.expire(token, ConstantKit.TOKEN_EXPIRE_TIME);
            Long currentTime = System.currentTimeMillis();
            jedis.set(token + username, currentTime.toString());
            System.out.println(users.getUsername());
            //用完关闭
            jedis.close();
            result.put("status", "登录成功");
            result.put("token", token);
        } else {
            result.put("status", "登录失败");
        }

        }
        //}
        return ResponseTemplate.builder()
                .data(result)
                .build();
    }

       @ApiOperation("测试token接口")
    @RequestMapping(value = "test", method = RequestMethod.GET)
    @AuthToken
    public ResponseTemplate test() {
        List<User> user = new User().selectAll();
        return ResponseTemplate.builder()
                .code(200)
                .message("Success")
                .data(user)
                .build();
    }
}

拦截后进行判断是否存在token

@Slf4j
public class AuthorizationInterceptor implements HandlerInterceptor {

@Autowired
    UserMapper userMapper;
    //存放鉴权信息的Header名称，默认是Authorization
    private String httpHeaderName = "Authorization";

    //鉴权失败后返回的错误信息，默认为401 unauthorized
    private String unauthorizedErrorMessage = "401 unauthorized";

    //鉴权失败后返回的HTTP错误码，默认为401
    private int unauthorizedErrorCode = HttpServletResponse.SC_UNAUTHORIZED;

    /**
     * 存放登录用户模型Key的Request Key
     */
    public static final String REQUEST_CURRENT_KEY = "REQUEST_CURRENT_KEY";


    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {

        if (!(handler instanceof HandlerMethod)) {
            return true;
        }
        HandlerMethod handlerMethod = (HandlerMethod) handler;
        Method        method        = handlerMethod.getMethod();
        // 如果打上了AuthToken注解则需要验证token
        if (method.getAnnotation(AuthToken.class) != null || handlerMethod.getBeanType().getAnnotation(AuthToken.class) != null) {


            String token = request.getHeader(httpHeaderName);
            log.info("token is {}", token);
            String username = "";
            Jedis  jedis    = new Jedis("172.16.238.157", 6379);
            if (token != null && token.length() != 0) {

                username = jedis.get(token);
              
                log.info("username is {}", username);

            }

            if (username != null && !username.trim().equals("")) {

                    //log.info("token birth time is: {}",jedis.get(username+token));
                    Long tokeBirthTime = Long.valueOf(jedis.get(token + username));
                    log.info("token Birth time is: {}", tokeBirthTime);
                    Long diff = System.currentTimeMillis() - tokeBirthTime;
                    log.info("token is exist : {} ms", diff);
                    if (diff > ConstantKit.TOKEN_RESET_TIME) {
                        jedis.expire(username, ConstantKit.TOKEN_EXPIRE_TIME);
                        jedis.expire(token, ConstantKit.TOKEN_EXPIRE_TIME);
                        log.info("Reset expire time success!");
                        Long newBirthTime = System.currentTimeMillis();
                        jedis.set(token + username, newBirthTime.toString());
                    }

                    //用完关闭
                    jedis.close();
                    request.setAttribute(REQUEST_CURRENT_KEY, username);
                    return true;


            } else {
                JSONObject jsonObject = new JSONObject();

                PrintWriter out = null;
                try {
                    response.setStatus(unauthorizedErrorCode);
                    response.setContentType(MediaType.APPLICATION_JSON_VALUE);

                    jsonObject.put("code", ((HttpServletResponse) response).getStatus());
                    jsonObject.put("message", HttpStatus.UNAUTHORIZED);
                    out = response.getWriter();
                    out.println(jsonObject);

                    return false;
                } catch (Exception e) {
                    e.printStackTrace();
                } finally {
                    if (null != out) {
                        out.flush();
                        out.close();
                    }
                }

            }

        }

        request.setAttribute(REQUEST_CURRENT_KEY, null);

        return true;
    }

    @Override
    public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {

    }

    @Override
    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {

    }
}

jwt生成

@Service
public class TokenServiceImpl implements  TokenService{
    @Autowired
    UserMapper userMapper;
    @Override
    public String getToken(User user) {
        Date start = new Date();
        long currentTime = System.currentTimeMillis() + 60* 60 * 1000;//一小时有效时间
        Date end = new Date(currentTime);

        String token = "";
//将username或者其他的表示放入token中这样就能够进行判断，放username或者id都行，只要是唯一标示
        token = JWT.create().withAudience(user.getUsername()).withIssuedAt(start).withExpiresAt(end)
                .sign(Algorithm.HMAC256(user.getPassword()));
        return token;
    }
}