SpringBoot-JWT生成Token和拦截器的使用(访问受限资源)

< dependency >

     < groupId >com.auth0</ groupId >

     < artifactId >java-jwt</ artifactId >

     < version >3.10.3</ version >

</ dependency >

< dependency >

     < groupId >io.jsonwebtoken</ groupId >

     < artifactId >jjwt</ artifactId >

     < version >0.9.1</ version >

</ dependency >

JwtBuilder builder = Jwts.builder();

String token = builder.setSubject( "userName" )

         .setIssuedAt( new Date()) //设置token生成时间

         .setId(u.getUserId() + "" ) //设置tokenID

         .setExpiration( new Date(System.currentTimeMillis() + 24 * 60 * 60 * 1000 )) //设置过期时间,现在为设置 一天

         .signWith(SignatureAlgorithm.HS256, "123456" ) //设置token密码，解析token需要使用

         测试数据pact();

var operator = "=" ;

//取出cookie

function getCookieValue(keyStr){

     var value = null ;

     var s = window.document.cookie;

     var arr = s.split( "; " );

     for (var i= 0 ; i<arr.length; i++){

         var str = arr[i];

         var k = str.split(operator)[ 0 ];

         var v = str.split(operator)[ 1 ];

         if (k == keyStr){

             value = v;

             break ;

         }

     }

     return value;

}

//设置cookie

function setCookieValue(key,value){

     document.cookie = key+operator+value;

}

import lombok.AllArgsConstructor;

import lombok.Data;

import lombok.NoArgsConstructor;

@Data

@AllArgsConstructor

@NoArgsConstructor

public class ResultVO {

     @ApiModelProperty ( "响应状态码" )

     private Integer code;

     @ApiModelProperty ( "响应信息" )

     private String msg;

     @ApiModelProperty ( "响应数据" )

     private Object Data;

}

public class ResStatus {

     public static Integer OK = 10000 ;

     public static Integer NO = 10001 ;

     public static Integer PASS = 20002 ;

}

@Component

public class CheckTokenInterceptor implements HandlerInterceptor {

     @Override

     public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {

     //因为是在请求头中发送token，所以第一次请求的方法为"OPTIONS"，具体可以看TCP/IP协议

         String method = request.getMethod();

         if ( "OPTIONS" .equalsIgnoreCase(method)){

             return true ;

         }

         String token = request.getHeader( "token" );

         System.out.println( "token:" +token);

         if (token == null ){

             ResultVO resultVO = new ResultVO(ResStatus.NO, "请先登录" , null );

             doResponse(response,resultVO);

         } else {

             try {

                 //在jwt中，只要token不合法或者验证不通过就会抛出异常

                 JwtParser parser = Jwts.parser();

                 parser.setSigningKey( "123456" );

                 Jws<Claims> claimsJws = parser.parseClaimsJws(token);

                 return true ;

             } catch (ExpiredJwtException e1) {

                 ResultVO resultVO = new ResultVO(ResStatus.PASS, "登录过期，请重新登录" , null );

                 doResponse(response,resultVO);

             } catch (UnsupportedJwtException e2){

                 ResultVO resultVO = new ResultVO(ResStatus.NO, "Token不合法,已记录恶意IP" , null );

                 doResponse(response,resultVO);

             } catch (Exception e3){

                 ResultVO resultVO = new ResultVO(ResStatus.NO, "请先登录" , null );

                 doResponse(response,resultVO);

             }

         }

         return false ;

     }

     @SneakyThrows

     private void doResponse(HttpServletResponse response, ResultVO resultVO) {

         response.setContentType( "application/json" );

         response.setCharacterEncoding( "utf-8" );

         PrintWriter out = response.getWriter();

         String s = new ObjectMapper().writeValueAsString(resultVO);

         out.print(s);

         out.flush();

         out.close();

     }

}

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.context.annotation.Configuration;

import org.springframework.web.servlet.config.annotation.InterceptorRegistry;

import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;

import javax.annotation.Resource;

@Configuration

public class InterceptorConfig implements WebMvcConfigurer {

     @Resource

     private CheckTokenInterceptor checkTokenInterceptor;

     @Override

     public void addInterceptors(InterceptorRegistry registry) {

         registry.addInterceptor(checkTokenInterceptor)

                 .addPathPatterns( "/shopcart/**" )

                 .excludePathPatterns( "/user/**" );

     }

}