锋迷商城 P119~122

一.基于token的用户认证的实现

ResultVO

import io.swagger.annotations.ApiModel;
import io.swagger.annotations.ApiModelProperty;
import lombok.AllArgsConstructor;
import lombok.Data;
import lombok.NoArgsConstructor;

@NoArgsConstructor
@AllArgsConstructor
@Data
@ApiModel(value = "ResultVO对象",description = "封装接口返回给前端的数据")
public class ResultVO {
    @ApiModelProperty(value="响应状态码",dataType = "int")
    private int code;

    @ApiModelProperty(value = "响应提示信息")
    private String msg;

    @ApiModelProperty(value = "响应数据")
    private Object data;
}

用于加密用的帮助类

import java.util.Base64;

//base64 加密 解密 激活邮件的时候 为 邮箱地址 code验证码 进行加密
//当 回传回来后 进行邮箱地址 和 code 的解密
public class Base64Utils {
	//加密
	public static String encode(String msg){
		return Base64.getEncoder().encodeToString(msg.getBytes());
	}
	//解密
	public static String decode(String msg){
		return new String(Base64.getDecoder().decode(msg));
	}
}

UserServiceImpl

public class UserServiceImpl implements UserService {
    @Resource
    private UsersMapper usersMapper;
    @Override
    public ResultVO checkLogin(String name, String pwd) {
        Example example = new Example(Users.class);
        Example.Criteria criteria = example.createCriteria();
        criteria.andEqualTo("username",name);

        List<Users> users = usersMapper.selectByExample(example);

        if(users.size()==0){
            return new ResultVO(ResStatus.NO,"用户名不存在",null);
        }else{
            //String md5Pwd=MD5Utils.md5(pwd);
            if(pwd.equals(users.get(0).getPassword())){//如果登录成功,则需要生成令牌token
                String token= Base64Utils.encode(name+123456);
                return new ResultVO(ResStatus.OK,token,users.get(0));
            }else{
                return new ResultVO(ResStatus.NO,"密码错误",null);
            }
        }
    }

login.html

						axios.get(url,
						   {	
							   params:{
							   username:vm.username,
							   password:vm.password,
							   }
						   }).then((res)=>{
							   var vo=res.data;
							   console.log(vo.msg);<!--打印生成的token-->
							   if(vo.code=10000){
								   //window.location.href="index.html";
							   }else{
								   vm.tips="账号或密码错误";
							   }
						   });

控制台打印的token:
YWFhYTEyMzQ1Ng==

login.html

						axios.get(url,
						   {	
							   params:{
							   username:vm.username,
							   password:vm.password,
							   }
						   }).then((res)=>{
							   var vo=res.data;
							   setCookieValue("token",vo.msg);
							   if(vo.code=10000){
								   window.location.href="index.html";
							   }else{
								   vm.tips="账号或密码错误";
							   }
						   });

ShopcartController

import com.qfedu.fmmall.vo.ResStatus;
import com.qfedu.fmmall.vo.ResultVO;
import io.swagger.annotations.Api;
import io.swagger.annotations.ApiImplicitParam;
import org.springframework.web.bind.annotation.CrossOrigin;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;

@RestController
@CrossOrigin
@RequestMapping("/shopcart")
@Api(value="提供购物车业务相关接口",tags = "用户管理")
public class ShopcartController {
    @GetMapping("/list")

    @ApiImplicitParam(dataType = "string",name = "token",value="令牌",required = true)
    public ResultVO listCarts(String token){
        return new ResultVO(ResStatus.OK,"success",null);
    }
}

shopcart.html

<script>
			var baseUrl="http://localhost:8080/";
			var vm=new Vue({
				el:"#container",
				data:{
					token:""
				},
				created:function(){
					this.token=getCookieValue("token");
					console.log("token:"+this.token);
					axios({
						method:"get",
						url:baseUrl+"shopcart/list",
						params:{
							token:this.token
						}
					}).then(function(res){
						console.log(res);
					});
				}
			});
		</script>

ShopcartController

import com.qfedu.fmmall.utils.Base64Utils;
import com.qfedu.fmmall.vo.ResStatus;
import com.qfedu.fmmall.vo.ResultVO;
import io.swagger.annotations.Api;
import io.swagger.annotations.ApiImplicitParam;
import org.springframework.web.bind.annotation.CrossOrigin;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;

@RestController
@CrossOrigin
@RequestMapping("/shopcart")
@Api(value="提供购物车业务相关接口",tags = "用户管理")
public class ShopcartController {
    @GetMapping("/list")

    @ApiImplicitParam(dataType = "string",name = "token",value="令牌",required = true)
    public ResultVO listCarts(String token){
        if(token==null){
            return new ResultVO(ResStatus.NO,"请登录",null);
        }else{
            String decode= Base64Utils.decode(token);
            if (decode.endsWith("123456")) {
                return new ResultVO(ResStatus.OK,"success",null);
            }else{
                return new ResultVO(ResStatus.NO,"请重新登录",null);
            }
        }
    }
}

二.jwt的使用

在service子模块中添加如下依赖

		<dependency>
            <groupId>com.auth0</groupId>
            <artifactId>java-jwt</artifactId>
            <version>3.10.3</version>
        </dependency>
        <dependency>
            <groupId>io.jsonwebtoken</groupId>
            <artifactId>jjwt</artifactId>
            <version>0.9.1</version>
        </dependency>

在这里插入图片描述
UserServiceImpl

import com.qfedu.fmmall.dao.UsersMapper;
import com.qfedu.fmmall.entity.Users;
import com.qfedu.fmmall.service.UserService;
import com.qfedu.fmmall.utils.Base64Utils;
import com.qfedu.fmmall.vo.ResStatus;
import com.qfedu.fmmall.vo.ResultVO;
import io.jsonwebtoken.JwtBuilder;
import io.jsonwebtoken.Jwts;
import io.jsonwebtoken.SignatureAlgorithm;
import org.springframework.stereotype.Service;
import tk.mybatis.mapper.entity.Example;

import javax.annotation.Resource;
import java.util.Date;
import java.util.HashMap;
import java.util.List;

@Service
public class UserServiceImpl implements UserService {
    @Resource
    private UsersMapper usersMapper;
    @Override
    public ResultVO checkLogin(String name, String pwd) {
        Example example = new Example(Users.class);
        Example.Criteria criteria = example.createCriteria();
        criteria.andEqualTo("username",name);

        List<Users> users = usersMapper.selectByExample(example);

        if(users.size()==0){
            return new ResultVO(ResStatus.NO,"用户名不存在",null);
        }else{
            //String md5Pwd=MD5Utils.md5(pwd);
            if(pwd.equals(users.get(0).getPassword())){
                JwtBuilder builder= Jwts.builder();
                HashMap<String,Object> map=new HashMap<>();
                map.put("key1","value1");
                map.put("key2","value2");
                String token = builder.setSubject(name)//token中携带的数据
                        .setIssuedAt(new Date())
                        .setId(users.get(0).getUserId() + "")
                        .setClaims(map)
                        .setExpiration(new Date(System.currentTimeMillis() + 24*1000))//设置token过期时间
                        .signWith(SignatureAlgorithm.HS256, "QIANfeng6666")//设置加密方式和加密密码
                        .compact();
                return new ResultVO(ResStatus.OK,token,users.get(0));
            }else{
                return new ResultVO(ResStatus.NO,"密码错误",null);
            }
        }
    }

ShopcartController

import com.auth0.jwt.impl.JWTParser;
import com.qfedu.fmmall.utils.Base64Utils;
import com.qfedu.fmmall.vo.ResStatus;
import com.qfedu.fmmall.vo.ResultVO;
import io.jsonwebtoken.Claims;
import io.jsonwebtoken.Jws;
import io.jsonwebtoken.JwtParser;
import io.jsonwebtoken.Jwts;
import io.swagger.annotations.Api;
import io.swagger.annotations.ApiImplicitParam;
import org.springframework.web.bind.annotation.CrossOrigin;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;

@RestController
@CrossOrigin
@RequestMapping("/shopcart")
@Api(value="提供购物车业务相关接口",tags = "用户管理")
public class ShopcartController {
    @GetMapping("/list")

    @ApiImplicitParam(dataType = "string",name = "token",value="令牌",required = true)
    public ResultVO listCarts(String token){
        if(token==null){
            return new ResultVO(ResStatus.NO,"请登录",null);
        }else{
            JwtParser parser=Jwts.parser();
            parser.setSigningKey("QIANfeng6666");//解析token的SigningKey必须和生成token时设置密码一致

            try{
                Jws<Claims> claimsJws = parser.parseClaimsJws(token);
                Claims body = claimsJws.getBody();//获取token中用户数据
                String subject = body.getSubject();//获取生成token设置的subject
                String key1 = body.get("key1", String.class);

                return new ResultVO(ResStatus.OK,"success",null);
            }catch (Exception e){
                return new ResultVO(ResStatus.NO,"请重新登录",null);
            }
        }
    }
}

  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值