java微信小程序登录查MySQL_微信小程序登录JAVA后台

最新推荐文章于 2024-08-12 02:04:50 发布

勃恩泽

最新推荐文章于 2024-08-12 02:04:50 发布

阅读量438

点赞数

文章标签： java微信小程序登录查MySQL

本文链接：https://blog.csdn.net/weixin_32491317/article/details/113478776

版权

本文介绍了使用Java SpringBoot后台实现微信小程序登录的过程，包括项目结构、配置、依赖管理、登录流程、权限配置以及相关实体类和接口。通过微信官方API获取登录凭证，结合Redis存储会话信息，实现用户身份验证。

摘要由CSDN通过智能技术生成

登录流程时序登录流程时序

L3Byb3h5L2h0dHBzL21wLndlaXhpbi5xcS5jb20vZGVidWcvd3hhZG9jL2Rldi9pbWFnZS9hcGktbG9naW4uanBnP3Q9MjAxODMxNQ==.jpg

具体的登录说明查看小程序官方API

项目的结构图：

springboot项目搭建

使用idea作为开发工具，由gradle构建项目，搭建springboot项目，对这块儿不熟悉的可以自行去学习，此处不多赘述。下面是核心的配置文件。application.yml中配置springboot默认的参数，application.properties配置自定义的参数，可以统一配置在一个文件中，依据个人习惯。

buidle.gradle配置

buildscript {

ext {

springBootVersion = '1.5.10.RELEASE'

}

repositories {

mavenLocal()

maven { url 'http://maven.aliyun.com/nexus/content/groups/public' }

mavenCentral()

}

dependencies {

classpath("org.springframework.boot:spring-boot-gradle-plugin:${springBootVersion}")

}

apply plugin: 'java'

apply plugin: 'org.springframework.boot'

group = 'xin.yangmj'

version = '1.0.1'

sourceCompatibility = 1.8

repositories {

mavenLocal()

maven { url 'http://maven.aliyun.com/nexus/content/groups/public' }

mavenCentral()

}

dependencies {

compile('org.springframework.boot:spring-boot-starter-cache')

compile('org.springframework.boot:spring-boot-starter-data-redis')

compile('org.mybatis.spring.boot:mybatis-spring-boot-starter:1.3.1')

compile('org.springframework.boot:spring-boot-starter-security')

compile('org.springframework.boot:spring-boot-starter-web')

compile('mysql:mysql-connector-java')

compile('org.springframework.security:spring-security-test')

testCompile('org.springframework.boot:spring-boot-starter-test')

compile group: 'org.apache.commons', name: 'commons-lang3', version: '3.7'

}

application.yml

logging:

level:

root: DEBUG

spring:

datasource:

url: jdbc:mysql://localhost/remindme?allowMultiQueries=true&useUnicode=true&characterEncoding=UTF-8

username: root

password: root

driver-class-name: com.mysql.jdbc.Driver

redis:

host: localhost

password:

port: 6379

mybatis:

mapperLocations: classpath:mapper/*.xml

configuration:

mapUnderscoreToCamelCase: true

default-enum-type-handler: org.apache.ibatis.type.EnumOrdinalTypeHandler

application.properties

# JWT相关配置

jwt.header=Authorization

# 过期时间

jwt.expiration=864000

# 注意有一个空格

jwt.tokenHead=Bearer

# wechat Auth

auth.wechat.sessionHost=https://api.weixin.qq.com/sns/jscode2session

auth.wechat.appId=***

auth.wechat.secret=***

auth.wechat.grantType=authorization_code

权限相关的配置

WebSecurityConfig.java

@Configuration

@EnableWebSecurity

@EnableGlobalMethodSecurity(prePostEnabled = true)

public class WebSecurityConfig extends WebSecurityConfigurerAdapter {

@Autowired

private JwtAuthenticationEntryPoint unauthorizedHandler;

@Bean

public ThirdSessionAuthFilter authenticationTokenFilterBean() throws Exception {

return new ThirdSessionAuthFilter();

}

@Override

protected void configure(HttpSecurity httpSecurity) throws Exception {

httpSecurity

// 由于使用的是JWT，我们这里不需要csrf

.csrf().disable()

.exceptionHandling().authenticationEntryPoint(unauthorizedHandler).and()

// 基于token，所以不需要session

.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and()

.authorizeRequests()

// 允许对test的无授权访问

.antMatchers(HttpMethod.GET, "/test").permitAll()

// 对于获取token的rest api要允许匿名访问

.antMatchers("/auth").permitAll();

// 添加本地地三方session filter

httpSecurity

.addFilterBefore(authenticationTokenFilterBean(), UsernamePasswordAuthenticationFilter.class);

// 禁用缓存

httpSecurity.headers().cacheControl();

}

ThirdSessionAuthFilter.java

@Component

public class ThirdSessionAuthFilter extends OncePerRequestFilter {

@Value("${jwt.header}")

private String tokenHeader;

@Value("${jwt.tokenHead}")

private String tokenHead;

@Autowired

private StringRedisTemplate stringRedisTemplate;

@Autowired

private ConsumerMapper consumerMapper;

@Override

protected void doFilterInternal(HttpServletRequest request,

HttpServletResponse response,

FilterChain chain) throws ServletException, IOException {

//获取请求头部分的Authorization

String authHeader = request.getHeader(this.tokenHeader);

//如果请求路径为微信通知后台支付结果则不需要token(之后会在具体的controller中，对双方签名进行验证防钓鱼)

String url = request.getRequestURI().substring(request.getContextPath().length());

if (url.equals("/auth") || url.equals("/test")) {

chain.doFilter(request, response);

return;

}

if (null == authHeader || !authHeader.startsWith("Bearer")) {

throw new RuntimeException("非法访问用户");

}

// The part after "Bearer "

final String thirdSessionId = authHeader.substring(tokenHead.length());

String wxSessionObj = stringRedisTemplate.opsForValue().get(thirdSessionId);

if (StringUtils.isEmpty(wxSessionObj)) {

throw new RuntimeException("用户身份已过期");

}

// 设置当前登录用户

try (AppContext appContext = new AppContext(wxSessionObj.substring(wxSessionObj.indexOf("#") + 1))) {

chain.doFilter(request, response);

}

AppContext.java

public class AppContext implements AutoCloseable {

private static final ThreadLocal CURRENT_CONSUMER_WECHAT_OPENID = new ThreadLocal<>();

public AppContext(String wechatOpenid) {

CURRENT_CONSUMER_WECHAT_OPENID.set(wechatOpenid);

}

@Override

public void close() {

CURRENT_CONSUMER_WECHAT_OPENID.remove();

}

public static String getCurrentUserWechatOpenId() {

return CURRENT_CONSUMER_WECHAT_OPENID.get();

}

JwtAuthenticationEntryPoint.java

@Component

public class JwtAuthenticationEntryPoint implements AuthenticationEntryPoint, Serializable {

private static final long serialVersionUID = -8970718410437077606L;

@Override

public void commence(HttpServletRequest request,

HttpServletResponse response,

AuthenticationException authException) throws IOException {

response.sendError(HttpServletResponse.SC_UNAUTHORIZED, "Unauthorized");

}

WechatAuthProperties.java

@Component

public class WechatAuthProperties {

@Value("${auth.wechat.sessionHost}")

private String sessionHost;

@Value("${auth.wechat.appId}")

private String appId;

@Value("${auth.wechat.secret}")

private String secret;

@Value("${auth.wechat.grantType}")

private String grantType;

//省略getter setter

}