springboot 整合jwt
1、引入jwt的jar包
io.jsonwebtoken
jjwt
0.9.0
2、jwt工具类
package com.linhaijing.javaxxbjcommon.utils;
import io.jsonwebtoken.Claims;
import io.jsonwebtoken.Jwts;
import io.jsonwebtoken.SignatureAlgorithm;
import org.apache.commons.lang3.StringUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.stereotype.Component;
import java.util.Date;
import java.util.HashMap;
import java.util.Map;
/**
* add by linhaijing 2020年7月3日21:14:24
* JwtToken生成的工具类
* JWT token的格式：header.payload.signature
* header的格式（算法、token的类型）：
* {"alg": "HS512","typ": "JWT"}
* payload的格式（用户名、创建时间、生成时间）：
* {"sub":"wang","created":1489079981393,"exp":1489684781}
* signature的生成算法：
* HMACSHA256(base64UrlEncode(header) + "." +base64UrlEncode(payload),secret)
* https://github.com/shenzhuan/mallplus on 2018/4/26.
*/
@Component
public class JwtTokenUtil {
private static final Logger LOGGER = LoggerFactory.getLogger(JwtTokenUtil.class);
private static final String CLAIM_KEY_USERNAME = "sub";
private static final String CLAIM_KEY_CREATED = "created";
@Value("${jwt.secret}")
private String secret;
@Value("${jwt.expiration}")
private Long expiration;
/**
* 根据负责生成JWT的token
*/
private String generateToken(Map claims) {
return Jwts.builder()
.setClaims(claims)
.setExpiration(generateExpirationDate())
.signWith(SignatureAlgorithm.HS512, secret)
.compact();
}
/**
* 从token中获取JWT中的负载
*/
private Claims getClaimsFromToken(String token) {
Claims claims = null;
try {
claims = Jwts.parser()
.setSigningKey(secret)
.parseClaimsJws(token)
.getBody();
} catch (Exception e) {
LOGGER.error("JWT格式验证失败:{}", token);
}
return claims;
}
/**
* 生成token的过期时间
*/
private Date generateExpirationDate() {
return new Date(System.currentTimeMillis() + expiration * 1000);
}
/**
* 从token中获取登录用户名
*/
public String getUserNameFromToken(String token) {
String username;
try {
Claims claims = getClaimsFromToken(token);
username = claims.getSubject();
} catch (Exception e) {
username = null;
}
return username;
}
/**
* 验证token是否还有效
*
* @param token 客户端传入的token
* @param loginName 从数据库中查询出来的用户登录名
*/
public boolean validateToken(String token, String loginName) {
if (StringUtils.isNotBlank(loginName)) {
String username = getUserNameFromToken(token);
return username.equals(loginName) && !isTokenExpired(token);
}
return false;
}
/**
* 判断token是否已经失效
*/
public boolean isTokenExpired(String token) {
Date expiredDate = getExpiredDateFromToken(token);
return expiredDate.before(new Date());
}
/**
* 从token中获取过期时间
*/
private Date getExpiredDateFromToken(String token) {
Claims claims = getClaimsFromToken(token);
return claims.getExpiration();
}
/**
* 根据用户信息生成token
*/
// public String generateToken(String loginName) {
// Map claims = new HashMap<>();
// claims.put(CLAIM_KEY_USERNAME, loginName);
// claims.put(CLAIM_KEY_CREATED, new Date());
// return generateToken(claims);
// }
public String generateToken(String loginName) {
Map claims = new HashMap<>();
claims.put(CLAIM_KEY_USERNAME, loginName);
claims.put(CLAIM_KEY_CREATED, new Date());
return generateToken(claims);
}
/**
* 判断token是否可以被刷新
*/
public boolean canRefresh(String token) {
return !isTokenExpired(token);
}
/**
* 刷新token
*/
public String refreshToken(String token) {
Claims claims = getClaimsFromToken(token);
claims.put(CLAIM_KEY_CREATED, new Date());
return generateToken(claims);
}
} 3、登录时返回jwt的token
String token = jwtTokenUtil.generateToken("token中携带的用户信息，比如：id，username");
resultMap.put("token", tokenHead + token);4、前端保存token
c.request(c.config.loginSubmit, "post", JSON.stringify(userPO), "application/json", false, function (result) {
if(result.code == 200){
var data = result.data;
showMsg("登录成功");
//保存token
window.localStorage.setItem('token', data.token);
_this.login = false;
var url = window.location.href.split("targetPage=");
if(url.length == 2){
window.location.href = url[1];
}else{
window.location.href = "/index.html";
}
}else{
showMsg(result.msg);
_this.refreshCaptcha();
}
})5、前端请求接口时每个方法的header中携带token
c.request = function(url, get, data, contentType, async, callback) {
$.ajax({
url: url,
type: get ? get : post,
data: data,
async: async,
dataType: 'json',
contentType: contentType,
timeout: 100000,
cache:false,
processData: false,
headers: {
Authorization: window.localStorage.getItem("token")
},
success: function(data) {
if (typeof callback == "function") {
(function() {
layer.close(index);
callback(data);
})();
}
},
error: function(XMLHttpRequest, textStatus, errorThrown) {
if(XMLHttpRequest.responseText == 403){
showMsg("登录已过期，请重新登录");
// setTimeout(function () {
window.location.href = "/login.html";
// },1500);
}
layer.close(index);
},
//请求之前
beforeSend: function() {
// index = layer.load(2, {time: 10*1000});
index =layer.load();
},
complete: function(XMLHttpRequest, status) {
if (status == 'timeout') {
layer.close(index);
} else if (status == 'error') {
layer.close(index);
}
}
});
};6、后端对需要登录的接口进行拦截，并校验token是否过期，以及校验后端对应的用户信息缓存中是否存在，即判断登录是否过期
import com.linhaijing.javaxxbjcommon.utils.JwtTokenUtil;
import com.linhaijing.javaxxbjpcweb.util.GetGlobalUserBeanUtil;
import com.linhaijing.javaxxbjssoapi.po.UserPO;
import lombok.extern.slf4j.Slf4j;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
/**
* 功能描述：登录拦截器
*
* @Author : 林海静
* @CreateTime: 2019/12/30 18:05
*/
@Slf4j
public class LoginInterceptor extends HandlerInterceptorAdapter {
@Value("${jwt.tokenHeader}")
private String tokenHeader;
@Autowired
private JwtTokenUtil jwtTokenUtil;
public LoginInterceptor(){}
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
//判断jwt token
UserPO userPO = GetGlobalUserBeanUtil.getGlobalUserBean();
if(userPO == null){
log.info("LoginInterceptor->jwt为空");
if (this.ajaxHandleFail(request, response)) {
return false;
}
response.sendRedirect("/index.html");
return false;
}
return true;
}
/**
* 功能描述：判断是否是ajax请求
* @Author: 林海静
* @CreateTime: 2019/12/30 18:23
* <>
* @params:
* @return:
* @Exception:
*/
private boolean ajaxHandleFail(HttpServletRequest request, HttpServletResponse response) throws Exception {
if ("XMLHttpRequest".equalsIgnoreCase(request.getHeader("X-Requested-With"))) {
response.setStatus(403);
response.getWriter().write("403");
log.info("ajax请求session超时了");
response.getWriter().close();
return true;
} else {
return false;
}
}
}
@Autowired
public static UserPO getGlobalUserBean() {
RequestAttributes requestAttributes = RequestContextHolder.currentRequestAttributes();
HttpServletRequest request = ((ServletRequestAttributes) requestAttributes).getRequest();
String tokenPre = tokenHeader;
String authHeader = request.getHeader(tokenPre);
log.info("getGlobalUserBean()---->authHeader=" + authHeader);
if (authHeader != null && authHeader.startsWith("Bearer")) {
String authToken = authHeader.substring("Bearer".length());
//校验token时间是否过期
if (StringUtils.isNotBlank(authToken) && !jwtTokenUtil.isTokenExpired(authToken)) {
String loginName = jwtTokenUtil.getUserNameFromToken(authToken);
log.info("获取 "+loginName+" 的信息");
String key = GlobalConstants.JAVAXXBJ_USER_SESSION + ":" + loginName;
return userServiceFeign.getBySessionKey(key);
}
log.info("getGlobalUserBean()---->jwt token已过期");
return null;
}
log.info("getGlobalUserBean()---->用户未登录，获取当前用户信息：null");
return null;
}7、如果过期，则返回403，前端跳转到登录界面
c.request = function(url, get, data, contentType, async, callback) {
$.ajax({
url: url,
type: get ? get : post,
data: data,
async: async,
dataType: 'json',
contentType: contentType,
timeout: 100000,
cache:false,
processData: false,
headers: {
Authorization: window.localStorage.getItem("token")
},
success: function(data) {
if (typeof callback == "function") {
(function() {
layer.close(index);
callback(data);
})();
}
},
error: function(XMLHttpRequest, textStatus, errorThrown) {
if(XMLHttpRequest.responseText == 403){
showMsg("登录已过期，请重新登录");
window.location.href = "/login.html";
}
layer.close(index);
},
//请求之前
beforeSend: function() {
// index = layer.load(2, {time: 10*1000});
index =layer.load();
},
complete: function(XMLHttpRequest, status) {
if (status == 'timeout') {
layer.close(index);
} else if (status == 'error') {
layer.close(index);
}
}
});
};8、系统退出时，删除redis中的用户信息，则表示服务端用户信息已经过期，即使前端token还存在，但也不能进行登录
@Override
@Transactional
public ResultObject logout(UserPO userPO, String session) {
String key = GlobalConstants.JAVAXXBJ_USER_SESSION + ":" + userPO.getLoginName();
Boolean delReturn = jedisClient.del(key);
if(!delReturn) throw new SysException("退出失败，请重试");
return ResultObject.ok();
}