bu'ybuyshenglombok
<dependency><groupId>org.projectlombok</groupId><artifactId>lombok</artifactId></dependency>添加依赖 lombok
package com.example.demo.pojo;import lombok.AllArgsConstructor;
import lombok.Data;
import lombok.NoArgsConstructor;
//注解了解
@NoArgsConstructor
@AllArgsConstructor
public class Result<T> {private Integer code;//业务状态码 0 成功 1失败private String message;//提示信息private T dataa;//响应数据public static <E> Result<E> success(E data){return new Result<>(0,"操作成功",data);}public static Result success(Integer code, String message) {return new Result(0,"操作成功",null);}public static Result error(Integer code, String message) {return new Result(1,message,null);}
}
@Insert("insert into users(password,username) values(#{possword},#{username})")void add(@Param("possword")String possword, @Param("username")String username);如果找不到要用Param参数
<!--validation 依赖--><dependency><groupId>org.springframework.boot</groupId><artifactId>spring-boot-starter-validation</artifactId></dependency>校验依赖
import com.example.demo.pojo.Result;
import org.springframework.util.StringUtils;
import org.springframework.web.bind.annotation.ExceptionHandler;
import org.springframework.web.bind.annotation.RestControllerAdvice;//处理全局的异常
@RestControllerAdvice
public class GlobbalExceptionHandler {@ExceptionHandler(value = Exception.class)public Result handleException(Exception e) {e.printStackTrace();return Result.error(StringUtils.hasLength(e.getMessage())?e.getMessage():"参数不正确");}
}处理全局异常
登录认证
JWT令牌
{}
数字签名 token
第一部分 头部 第二部分 payload有效荷载 第三部分 签名 确保安全
login生成令牌
验证令牌
<dependency><groupId>com.auth0</groupId><artifactId>java-jwt</artifactId><version>4.2.1</version></dependency><dependency><groupId>org.springframework.boot</groupId><artifactId>spring-boot-starter-test</artifactId></dependency>
public void test() {Map<String,Object> map = new HashMap<>();map.put("id",1);map.put("username","张三");
// 生成jwtString token = JWT.create().withClaim("user",map).withExpiresAt(new Date(System.currentTimeMillis()+1000*60))//过期时间 60分钟.sign(Algorithm.HMAC256("123456"));//指定算法，密钥System.out.println(token);}生成密钥token
public void test2() {String token = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyIjp7ImlkIjoxLCJ1c2VybmFtZSI6IuW8oOS4iSJ9LCJleHAiOjE3MTQ5MTY0ODN9.eGbO7aZ5MFlr_mt0h5-Nn0Nl7nXdgIMCQroDngmOB50";JWTVerifier jwtVerifier = JWT.require(Algorithm.HMAC256("123456")).build();DecodedJWT jwt = jwtVerifier.verify(token);//验证tokenMap<String, Claim> map = jwt.getClaims();System.out.println(map.get("user"));}获取解析密钥
package com.example.demo.utils;import com.auth0.jwt.JWT;
import com.auth0.jwt.algorithms.Algorithm;
import com.auth0.jwt.interfaces.Claim;import java.util.Date;
import java.util.Map;public class JwtUtil {private static final String Key = "123456";public static String genToken(Map<String,Object> map){
// Map<String,Object> map = new HashMap<>();
// map.put("id",1);
// map.put("username","张三");
// 生成jwtreturn JWT.create().withClaim("user",map).withExpiresAt(new Date(System.currentTimeMillis()+1000*60*60))//过期时间 60分钟.sign(Algorithm.HMAC256(Key));//指定算法，密钥
// System.out.println(token);}public static Map<String, Claim> parseToken(String token){return JWT.require(Algorithm.HMAC256(Key)).build().verify(token).getClaims();}
}
Map<String,Object> map = new HashMap<>();map.put("username",username);map.put("password",password);String token = JwtUtil.genToken(map);生成token
@PostMapping("/login")public Result login(@RequestParam("username") String username,@RequestParam("password") String password) {System.out.println(username+"登录,"+password);Map<String,Object> map = new HashMap<>();map.put("username",username);map.put("password",password);String token = JwtUtil.genToken(map);System.out.println("生成的：：："+token);Users u = usersService.findByUserNameAndPwd(username,password);if (u != null) {return Result.success(u);}else{return Result.error("不存在");}}@GetMapping("/gettoken")public Result gettoken(@RequestHeader(name = "Authorization")String token, HttpServletResponse response) {System.out.println("jinrule ma ????"+token);
// return Result.success("所有的数据----------");try {Map<String, Claim> claim = JwtUtil.parseToken(token);response.setStatus(200);System.out.println("jinrule ma ????"+claim);return Result.success("所有的数据----------");} catch (Exception e) {response.setStatus(401);
// throw new RuntimeException(e);return Result.success("未登录");}}
}
拦截器进行拦截
统一的
编写拦截器，统一拦截
package com.example.demo.config;import com.example.demo.interceptors.LoginInterceptor;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;@Configuration
public class WebConfig implements WebMvcConfigurer {@Autowiredprivate LoginInterceptor loginInterceptor;@Overridepublic void addInterceptors(InterceptorRegistry registry) {
// WebMvcConfigurer.super.addInterceptors(registry);
// 登录接口和注册接口不拦截registry.addInterceptor(loginInterceptor).excludePathPatterns("/user/login","/user/logout","/user/register");}
}
//实现拦截器 注册拦截器
@Component //注入Ioc容器中
public class LoginInterceptor implements HandlerInterceptor {@Overridepublic boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
// 令牌验证String token = request.getHeader("Authorization");
// 解析tokentry {Map<String, Claim> claim = JwtUtil.parseToken(token);response.setStatus(200);System.out.println("拦截器????"+claim);return true;} catch (Exception e) {response.setStatus(401);
// throw new RuntimeException(e);return false;}}
}
拦截和注册
public class JwtUtil {private static final String Key = "123456";public static String genToken(Map<String,Object> map){
// Map<String,Object> map = new HashMap<>();
// map.put("id",1);
// map.put("username","张三");
// 生成jwtreturn JWT.create().withClaim("user",map).withExpiresAt(new Date(System.currentTimeMillis()+1000*60*60))//过期时间 60分钟.sign(Algorithm.HMAC256(Key));//指定算法，密钥
// System.out.println(token);}public static Map<String, Object> parseToken(String token){return JWT.require(Algorithm.HMAC256(Key)).build().verify(token).getClaim("cliams").asMap();}
}
public class JwtUtil {private static final String Key = "123456";public static String genToken(Map<String,Object> map){
// Map<String,Object> map = new HashMap<>();
// map.put("id",1);
// map.put("username","张三");
// 生成jwtreturn JWT.create().withClaim("user",map).withExpiresAt(new Date(System.currentTimeMillis()+1000*60*60))//过期时间 60分钟.sign(Algorithm.HMAC256(Key));//指定算法，密钥
// System.out.println(token);}public static Map<String, Object> parseToken(String token){return JWT.require(Algorithm.HMAC256(Key)).build().verify(token).getClaim("user").asMap();}
}
