微服务网关Zuul+Spring security+Oauth2.0+Jwt + 动态盐值实现权限控制，开放接口平台（3）

前言

接前面的内容，我们用zuul + spring security 来完成认证授权。

认证中心

pom.xml



    
        zuul-auth
        com.babaznkj.com
        1.0-SNAPSHOT
    
    4.0.0

    auth-center

    
        8
        8
    

    
        
            com.babaznkj.com
            common
        

        
        
            mysql
            mysql-connector-java
            ${mysql.version}
        

        
        
            org.mybatis.spring.boot
            mybatis-spring-boot-starter
            ${mybatis.starter.version}
        

        
        
            com.alibaba
            druid-spring-boot-starter
            ${druid.starter.version}

yml

server:
  port: 8090

baba:
  security:
    jwt:
      secret: otherpeopledontknowit
      url: /auth
      header: Authorization
      prefix: Bearer
      expiration: 86400
      language: CN

spring:
  application:
    name: auth
  datasource:
    name: test
    url: jdbc:mysql://localhost:3306/baba_icloud_test1?characterEncoding=utf-8&useSSL=false&serverTimezone=Asia/Shanghai
    username: root
    password: carry0610A
    # druid 连接池
    type: com.alibaba.druid.pool.DruidDataSource
    driver-class-name: com.mysql.jdbc.Driver
  main:
    allow-bean-definition-overriding: true # 这个表示允许我们覆盖OAuth2放在容器中的bean对象，一定要配置
  redis:
    host: 192.168.3.119
    port: 6379
    password: 123456

ribbon:
  ReadTimeout: 5000
  SocketTimeout: 5000

eureka:
  client:
    service-url:
      defaultZone: http://127.0.0.1:8761/eureka/
  instance:
    prefer-ip-address: false
management:
  endpoints:
    security:
      enabled: false
    web:
      exposure:
        include: "*"
mybatis:
  mapper-locations: classpath:mapper/*.xml    # mapper映射文件位置
  type-aliases-package: shuaicj.example.security.common.entity    # 实体类所在的位置
  configuration:
    log-impl: org.apache.ibatis.logging.stdout.StdOutImpl

SecurityConfig.java : 这里过滤器可以返回自定义异常。

package com.baba.security.auth.config;

import com.baba.security.auth.filter.JwtUsernamePasswordAuthenticationFilter;
import com.baba.security.auth.service.impl.MemberUserDetailsService;
import com.baba.security.common.config.JwtProperties;
import com.baba.security.common.exception.JWTAuthenticationEntryPoint;
import com.baba.security.common.handler.SimpleAccessDeniedHandler;
import com.baba.security.common.handler.SimpleAuthenticationEntryPoint;
import com.baba.security.common.utils.MD5Util;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Bean;
import org.springframework.http.HttpMethod;
import org.springframework.security.authentication.AuthenticationManager;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.config.http.SessionCreationPolicy;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
import javax.servlet.http.HttpServletResponse;

/**
 * Config login authentication.
 *
 * @author shuaicj 2017/10/18
 */
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

  @Autowired
  private MemberUserDetailsService memberUserDetailsService;

  @Autowired
  private JwtProperties jwtProperties;

  @Bean
  public JwtProperties jwtConfig() {
      return new JwtProperties();
  }

  @Autowired
  public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
      auth.userDetailsService(memberUserDetailsService).passwordEncoder(new PasswordEncoder() {
          /**
           * 对密码MD5
           * @param rawPassword
           * @return
           */
          @Override
          public String encode(CharSequence rawPassword) {
              return MD5Util.encode((String) rawPassword);
          }

          /**
           * rawPassword 用户输入的密码
           * encodedPassword 数据库DB的密码
           * @param rawPassword
           * @param encodedPassword
           * @return
           */
          @Override
          public boolean matches(CharSequence rawPassword, String encodedPassword) {
              String rawPass = MD5Util.encode((String) rawPassword);
              boolean result = rawPass.equals(encodedPassword);
              return result;
          }
      });
  }


  @Override
  protected void configure(HttpSecurity httpSecurity) throws Exception {

      httpSecurity
              .cors().
              and()
              .csrf().disable()
              .logout().disable()
//                .formLogin().disable()
              .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
              .and()
              .exceptionHandling().authenticationEntryPoint(
              (req, rsp, e) -> rsp.sendError(HttpServletResponse.SC_UNAUTHORIZED))
              .and()
//                .addFilterBefore(new WebSecurityCorsFilter(), ChannelProcessingFilter.class) // 保证跨域的过滤器首先触发
              .addFilterAfter(new JwtUsernamePasswordAuthenticationFilter(jwtProperties, authenticationManager()),
                      UsernamePasswordAuthenticationFilter.class)
              .authorizeRequests()
              .antMatchers(HttpMethod.OPTIONS).permitAll()
              .antMatchers(jwtProperties.getUrl()).permitAll()
              .anyRequest().authenticated()
//                // 加一句这个
              .and()
              .exceptionHandling().authenticationEntryPoint(new JWTAuthenticationEntryPoint())
              .accessDeniedHandler(new SimpleAccessDeniedHandler()).authenticationEntryPoint(new SimpleAuthenticationEntryPoint());

  }

  @Bean
  @Override
  public AuthenticationManager authenticationManagerBean() throws Exception {
      return super.authenticationManagerBean();
  }


}

PermissionMapper.java

package com.baba.security.auth.dao;


import com.baba.security.auth.entity.Permission;
import com.baba.security.auth.entity.PermissionEntity;

import java.util.List;

public interface PermissionMapper {
  /**
   * delete by primary key
   *
   * @param id primaryKey
   * @return deleteCount
   */
  int deleteByPrimaryKey(Long id);

  /**
   * insert record to table
   *
   * @param record the record
   * @return insert count
   */
  int insert(Permission record);

  /**
   * insert record to table selective
   *
   * @param record the record
   * @return insert count
   */
  int insertSelective(Permission record);

  /**
   * select by primary key
   *
   * @param id primary key
   * @return object by primary key
   */
  Permission selectByPrimaryKey(Long id);

  /**
   * update record selective
   *
   * @param record the updated record
   * @return update count
   */
  int updateByPrimaryKeySelective(Permission record);

  /**
   * update record
   *
   * @param record the updated record
   * @return update count
   */
  int updateByPrimaryKey(Permission record);

  List findByAll(Permission permission);

  List findPermissionEntity(Permission permission);

  List findPermissionByUsername(String username);

}

RoleMapper.java

package com.baba.security.auth.dao;


import com.baba.security.auth.entity.Role;

import java.util.List;

public interface RoleMapper {
  /**
   * delete by primary key
   * @param id primaryKey
   * @return deleteCount
   */
  int deleteByPrimaryKey(Integer id);

  /**
   * insert record to table
   * @param record the record
   * @return insert count
   */
  int insert(Role record);

  /**
   * insert record to table selective
   * @param record the record
   * @return insert count
   */
  int insertSelective(Role record);

  /**
   * select by primary key
   * @param id primary key
   * @return object by primary key
   */
  Role selectByPrimaryKey(Integer id);

  /**
   * update record selective
   * @param record the updated record
   * @return update count
   */
  int updateByPrimaryKeySelective(Role record);

  /**
   * update record
   * @param record the updated record
   * @return update count
   */
  int updateByPrimaryKey(Role record);

  List findByAll(Role role);
}

RolePermissionMapper.java

package com.baba.security.auth.dao;


import com.baba.security.auth.entity.RolePermission;

import java.util.List;

public interface RolePermissionMapper {
  /**
   * insert record to table
   * @param record the record
   * @return insert count
   */
  int insert(RolePermission record);

  /**
   * insert record to table selective
   * @param record the record
   * @return insert count
   */
  int insertSelective(RolePermission record);

  List findByAll(RolePermission rolePermission);
}

UserMapper.java

package com.baba.security.auth.dao;


import com.baba.security.auth.entity.User;

import java.util.List;

public interface UserMapper {
  /**
   * delete by primary key
   *
   * @param id primaryKey
   * @return deleteCount
   */
  int deleteByPrimaryKey(Long id);

  /**
   * insert record to table
   *
   * @param record the record
   * @return insert count
   */
  int insert(User record);

  /**
   * insert record to table selective
   *
   * @param record the record
   * @return insert count
   */
  int insertSelective(User record);

  /**
   * select by primary key
   *
   * @param id primary key
   * @return object by primary key
   */
  User selectByPrimaryKey(Long id);

  User findByUsername(String username);


  /**
   * update record selective
   *
   * @param record the updated record
   * @return update count
   */
  int updateByPrimaryKeySelective(User record);

  /**
   * update record
   *
   * @param record the updated record
   * @return update count
   */
  int updateByPrimaryKey(User record);

  List findByAll(User user);

}

Permission.java

package com.baba.security.auth.entity;

import lombok.Getter;
import lombok.Setter;
import lombok.ToString;

import java.io.Serializable;
import java.util.Date;

@Getter
@Setter
@ToString
public class Permission implements Serializable {
  /**
   * 主鍵id
   */
  private Long id;

  /**
   * 父级权限id
   */
  private Long pid;

  /**
   * 中文导航栏名称
   */
  private String name;

  /**
   * 英文导航栏名称
   */
  private String eName;

  /**
   * 权限标记
   */
  private String tag;

  /**
   * 权限值
   */
  private String value;

  /**
   * 图标
   */
  private String icon;

  /**
   * 权限类型：0->目录；1->菜单；2->按钮（接口绑定权限）
   */
  private Integer type;

  /**
   * 请求url
   */
  private String url;

  /**
   * 启用状态；0 正常 1删除
   */
  private Integer status;

  /**
   * 排序
   */
  private Integer sort;

  /**
   * 创建时间
   */
  private Date createTime;

  /**
   * 更新时间
   */
  private Date updateTime;

  /**
   * 创建人
   */
  private String createdBy;

  /**
   * 修改人
   */
  private String updatedBy;

  private static final long serialVersionUID = 1L;
}

PermissionEntity.java

package com.baba.security.auth.entity;

import lombok.Data;

@Data
public class PermissionEntity {
  private Integer id;
  // 权限名称
  private String permName;
  // 权限标识
  private String permTag;
  // 请求url
  private String url;
}

Role.java

package com.baba.security.auth.entity;

import lombok.Getter;
import lombok.Setter;
import lombok.ToString;

import java.io.Serializable;
import java.util.Date;

@Getter
@Setter
@ToString
public class Role implements Serializable {
  private Integer id;

  /**
  * 用户id
  */
  private Long userId;

  /**
  * 角色名称
  */
  private String roleName;

  /**
  * 角色描述
  */
  private String roleDesc;

  /**
  * 创建时间
  */
  private Date createTime;

  /**
  * 更新时间
  */
  private Date updateTime;

  /**
  * 创建人
  */
  private String createdBy;

  /**
  * 修改人
  */
  private String updatedBy;

  private static final long serialVersionUID = 1L;
}

RolePermission.java

package com.baba.security.auth.entity;

import lombok.Getter;
import lombok.Setter;
import lombok.ToString;

import java.io.Serializable;

@Getter
@Setter
@ToString
public class RolePermission implements Serializable {
  private Integer roleId;

  private Integer permId;

  private static final long serialVersionUID = 1L;
}

User: 实现UserDetails

package com.baba.security.auth.entity;

import lombok.Getter;
import lombok.Setter;
import lombok.ToString;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.userdetails.UserDetails;

import java.io.Serializable;
import java.util.ArrayList;
import java.util.Collection;
import java.util.Date;
import java.util.List;

@Getter
@Setter
@ToString
public class User implements UserDetails, Serializable {
  /**
   * 主键id
   */
  private Long id;

  /**
   * 子用户ID
   */
  private Long pid;

  /**
   * 租户id
   */
  private Long tenantId;

  /**
   * 名称
   */
  private String username;

  /**
   * 密码
   */
  private String password;

  /**
   * 昵称
   */
  private String nick;

  /**
   * 性别(男/女)
   */
  private int gender;

  /**
   * 年龄
   */
  private Integer age;

  /**
   * 头像地址
   */
  private String headImg;

  /**
   * 电话号码
   */
  private String phone;

  /**
   * 0：禁用/1：启用
   */
  private Integer state;

  /**
   * 友盟推送认证token
   */
  private String pushToken;

  /**
   * app端盐值
   */
  private String appSalt;

  /**
   * web端盐值
   */
  private String webSalt;

  /**
   * 当前账户是否可用
   */
  private boolean enabled= true;

  /**
   * 当前账户是否过期
   */
  private boolean accountNonExpired = true;

  /**
   * 当前账户是否锁定
   */
  private boolean accountNonLocked= true;

  /**
   * 当前账户凭证是否过期
   */
  private boolean credentialsNonExpired= true;

  /**
   * 创建时间
   */
  private Date createTime;

  /**
   * 更新时间
   */
  private Date updateTime;

  /**
   * 创建人
   */
  private String createBy;

  /**
   * 修改人
   */
  private String updateBy;

  /**
   * 秘钥
   */
  private String secretKey;

  private static final long serialVersionUID = 1L;

  /**
   * 权限列表
   */
  private List authorities = new ArrayList();

  public Collection getAuthorities() {
      return authorities;
  }


  public void setAuthorities(List authorities) {
      this.authorities = authorities;
  }
}

JwtUsernamePasswordAuthenticationFilter.java :这里也要放行【config.getUrl()】登录接口，成功和失败的方法调用。token的生成，动态颜值处理。

package com.baba.security.auth.filter;

import com.baba.security.auth.dao.UserMapper;
import com.baba.security.auth.entity.User;
import com.baba.security.common.config.JwtProperties;
import com.baba.security.common.constant.RedisConstant;
import com.baba.security.common.enums.ResultCode;
import com.baba.security.common.exception.DefinitException;
import com.baba.security.common.utils.JwtUtils;
import com.baba.security.common.utils.RedisUtils;
import com.baba.security.common.utils.SaltUtils;
import com.fasterxml.jackson.databind.ObjectMapper;
import org.apache.commons.lang.StringUtils;
import org.springframework.context.ApplicationContext;
import org.springframework.http.MediaType;
import org.springframework.security.authentication.AuthenticationManager;
import org.springframework.security.authentication.InternalAuthenticationServiceException;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter;
import org.springframework.security.web.util.matcher.AntPathRequestMatcher;
import org.springframework.web.context.support.WebApplicationContextUtils;
import org.springframework.web.servlet.HandlerExceptionResolver;

import javax.servlet.FilterChain;
import javax.servlet.ServletContext;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.util.Collections;
import java.util.HashMap;
import java.util.concurrent.TimeUnit;

/**
 * Authenticate the request to url /login by POST with json body '{ username, password }'.
 * If successful, response the client with header 'Authorization: Bearer jwt-token'.
 *
 * @author shuaicj 2017/10/18
 */
public class JwtUsernamePasswordAuthenticationFilter extends AbstractAuthenticationProcessingFilter {

  //    private final JwtAuthenticationConfig config;
  private final JwtProperties config;
  private final ObjectMapper mapper;

  public JwtUsernamePasswordAuthenticationFilter(JwtProperties config, AuthenticationManager authManager) {
      super(new AntPathRequestMatcher(config.getUrl(), "POST"));
      setAuthenticationManager(authManager);
      this.config = config;
      this.mapper = new ObjectMapper();

  }


  // 接收并解析用户凭证
  @Override
  public Authentication attemptAuthentication(HttpServletRequest req, HttpServletResponse rsp)
          throws AuthenticationException, IOException {
      try {
          User user = mapper.readValue(req.getInputStream(), User.class);
          return getAuthenticationManager().authenticate(
                  new UsernamePasswordAuthenticationToken(
                          user.getUsername(),
                          user.getPassword(),
                          Collections.emptyList()
                  )
          );
      } catch (InternalAuthenticationServiceException e) {
          ServletContext context = req.getServletContext();
          ApplicationContext ctx = WebApplicationContextUtils.getWebApplicationContext(context);
          HandlerExceptionResolver resolver = ctx.getBean("handlerExceptionResolver", HandlerExceptionResolver.class);
          resolver.resolveException(req, rsp, null, new DefinitException(ResultCode.USER_NOT_FOUND));
          return null;
//            throw new DefinitException(ResultCode.USER_NOT_FOUND);
      }

  }


  // 用户成功登录后，这个方法会被调用，我们在这个方法里生成token
  @Override
  protected void successfulAuthentication(HttpServletRequest req, HttpServletResponse rsp, FilterChain chain,
                                          Authentication auth) throws IOException {
      User user = (User) auth.getPrincipal();
      // filter过滤器使用Autowired注入Bean为null
      ServletContext context = req.getServletContext();
      ApplicationContext ctx = WebApplicationContextUtils.getWebApplicationContext(context);
      RedisUtils redisUtil = ctx.getBean(RedisUtils.class);
      UserMapper userMapper = ctx.getBean(UserMapper.class);
      User updateSalt = new User();
      updateSalt.setId(user.getId());
      //1.生成随机盐
      String salt = SaltUtils.getSalt(8);
      String userAgent = req.getHeader("user-agent").toLowerCase();
      String language = req.getHeader("language");
      if (userAgent.indexOf("micromessenger") != -1) {
          //微信
      } else if (userAgent.indexOf("android") != -1
              || userAgent.indexOf("iphone") != -1 || userAgent.indexOf("ipad") != -1 || userAgent.indexOf("ipod") != -1) {
          //安卓 或者 苹果
          //2.将随机盐保存到Redis
          redisUtil.setEx(RedisConstant.PREFIX_APP + user.getId(), salt, 1, TimeUnit.DAYS);
          updateSalt.setAppSalt(salt);
      } else {
          //电脑
          //2.将随机盐保存到Redis
          redisUtil.setEx(RedisConstant.PREFIX_WEB + user.getId(), salt, 1, TimeUnit.DAYS);
          updateSalt.setWebSalt(salt);
      }
      //3.更新Mysql随机盐值
      userMapper.updateByPrimaryKeySelective(updateSalt);
      user.setSecretKey(salt);
      if (StringUtils.isEmpty(language)) {
          language = config.getLanguage();
      }
      String token = JwtUtils.generateJsonWebToken(auth, salt, language);
      redisUtil.setEx(token, user.getId().toString(), 2, TimeUnit.HOURS);
      rsp.addHeader(config.getHeader(), config.getPrefix() + " " + token);
      HashMap map = new HashMap<>(2);
      map.put("code", ResultCode.USER_AUTH_SUCCESS.getCode());
      map.put("msg", ResultCode.USER_AUTH_SUCCESS.getMessage());
      rsp.setStatus(HttpServletResponse.SC_OK);
      rsp.setCharacterEncoding("utf-8");
      rsp.setContentType(MediaType.APPLICATION_JSON_VALUE);
      rsp.getWriter().write(new ObjectMapper().writeValueAsString(map));
  }

  @Override
  protected void unsuccessfulAuthentication(HttpServletRequest request, HttpServletResponse response, AuthenticationException failed) throws IOException, ServletException {
//        response.getWriter().write("authentication failed, reason: " + failed.getMessage());
      System.out.println(failed.getMessage());
      ServletContext context = request.getServletContext();
      ApplicationContext ctx = WebApplicationContextUtils.getWebApplicationContext(context);
      HandlerExceptionResolver resolver = ctx.getBean("handlerExceptionResolver", HandlerExceptionResolver.class);
      resolver.resolveException(request, response, null, new DefinitException(ResultCode.LOGIN_METHOD_WROND));
  }
}

MemberUserDetailsService.java : 查询的tag必须拼接前缀"ROLE_"，而不能在数据库中添加。

package com.baba.security.auth.service.impl;

import com.baba.security.auth.entity.PermissionEntity;
import com.baba.security.auth.entity.User;
import com.baba.security.auth.service.PermissionService;
import com.baba.security.auth.service.UserService;
import lombok.extern.slf4j.Slf4j;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.authority.SimpleGrantedAuthority;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.stereotype.Component;

import java.util.ArrayList;
import java.util.List;

/**
 * @ClassName MemberUserDetailsService
 * @Author wulongbo
 * @Version V1.0
 **/
@Component
@Slf4j
public class MemberUserDetailsService implements UserDetailsService {
  @Autowired
  private UserService userService;

  @Autowired
  private PermissionService permissionService;

  /**
   * loadUserByUserName
   *
   * @param username
   * @return
   * @throws UsernameNotFoundException
   */
  @Override
  public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
      // 1.根据该用户名称查询在数据库中是否存在
      User userEntity = userService.findByUsername(username);
      if (userEntity == null) {
          return null;
      }
      // 2.查询对应的用户权限
      List listPermission = permissionService.findPermissionByUsername(username);
      List authorities = new ArrayList();

      listPermission.forEach(user -> {
          authorities.add(new SimpleGrantedAuthority("ROLE_" + user.getPermTag()));
      });
      // 3.将该权限添加到security
      userEntity.setAuthorities(authorities);
      return userEntity;
  }

}

PermissionServiceImpl.java

package com.baba.security.auth.service.impl;

import com.baba.security.auth.dao.PermissionMapper;
import com.baba.security.auth.entity.Permission;
import com.baba.security.auth.entity.PermissionEntity;
import com.baba.security.auth.service.PermissionService;
import org.springframework.stereotype.Service;

import javax.annotation.Resource;
import java.util.List;

@Service
public class PermissionServiceImpl implements PermissionService {

  @Resource
  private PermissionMapper permissionMapper;

  @Override
  public int deleteByPrimaryKey(Long id) {
      return permissionMapper.deleteByPrimaryKey(id);
  }

  @Override
  public int insert(Permission record) {
      return permissionMapper.insert(record);
  }

  @Override
  public int insertSelective(Permission record) {
      return permissionMapper.insertSelective(record);
  }

  @Override
  public Permission selectByPrimaryKey(Long id) {
      return permissionMapper.selectByPrimaryKey(id);
  }

  @Override
  public int updateByPrimaryKeySelective(Permission record) {
      return permissionMapper.updateByPrimaryKeySelective(record);
  }

  @Override
  public int updateByPrimaryKey(Permission record) {
      return permissionMapper.updateByPrimaryKey(record);
  }

  @Override
  public List findByAll(Permission permission) {
      return permissionMapper.findByAll(permission);
  }

  @Override
  public List findPermissionEntity(Permission permission) {
      return permissionMapper.findPermissionEntity(permission);
  }

  @Override
  public List findPermissionByUsername(String username) {
      return permissionMapper.findPermissionByUsername(username);
  }

}

UserServiceImpl.java

package com.baba.security.auth.service.impl;

import com.baba.security.auth.dao.UserMapper;
import com.baba.security.auth.entity.User;
import com.baba.security.auth.service.UserService;
import org.springframework.stereotype.Service;

import javax.annotation.Resource;
import java.util.List;

@Service
public class UserServiceImpl implements UserService {

 @Resource
 private UserMapper userMapper;

 @Override
 public int deleteByPrimaryKey(Long id) {
     return userMapper.deleteByPrimaryKey(id);
 }

 @Override
 public int insert(User record) {
     return userMapper.insert(record);
 }

 @Override
 public int insertSelective(User record) {
     return userMapper.insertSelective(record);
 }

 @Override
 public User selectByPrimaryKey(Long id) {
     return userMapper.selectByPrimaryKey(id);
 }

 @Override
 public int updateByPrimaryKeySelective(User record) {
     return userMapper.updateByPrimaryKeySelective(record);
 }

 @Override
 public int updateByPrimaryKey(User record) {
     return userMapper.updateByPrimaryKey(record);
 }

 @Override
 public List findByAll(User user) {
     return userMapper.findByAll(user);
 }

 @Override
 public User findByUsername(String username) {
     return userMapper.findByUsername(username);
 }

}

PermissionService.java

package com.baba.security.auth.service;


import com.baba.security.auth.entity.Permission;
import com.baba.security.auth.entity.PermissionEntity;

import java.util.List;

public interface PermissionService {

  int deleteByPrimaryKey(Long id);

  int insert(Permission record);

  int insertSelective(Permission record);

  Permission selectByPrimaryKey(Long id);

  int updateByPrimaryKeySelective(Permission record);

  int updateByPrimaryKey(Permission record);

  List findByAll(Permission permission);

  List findPermissionEntity(Permission permission);

  List findPermissionByUsername(String username);
}

UserService.java

package com.baba.security.auth.service;


import com.baba.security.auth.entity.User;

import java.util.List;

public interface UserService {


  int deleteByPrimaryKey(Long id);

  int insert(User record);

  int insertSelective(User record);

  User selectByPrimaryKey(Long id);

  int updateByPrimaryKeySelective(User record);

  int updateByPrimaryKey(User record);

  List findByAll(User user);

  User findByUsername(String username);

}

PermissionMapper.xml




  
      
      
      
      
      
      
      
      
      
      
      
      
      
      
      
      
      
  

  
      
      
      
      
  

  

  
      
      id, pid, `name`, e_name, tag, `value`, icon, `type`, url, `status`, sort,
      create_time, update_time, created_by, updated_by
  
  
  
      
      delete from tbl_permission
      where id = #{id,jdbcType=BIGINT}
  
  
      
      insert into tbl_permission (pid, `name`,
      e_name, tag, `value`,
      icon, `type`, url, `status`,
      sort, create_time, update_time,
      created_by, updated_by)
      values (#{pid,jdbcType=BIGINT},  #{name,jdbcType=VARCHAR},
      #{eName,jdbcType=VARCHAR}, #{tag,jdbcType=VARCHAR}, #{value,jdbcType=VARCHAR},
      #{icon,jdbcType=VARCHAR}, #{type,jdbcType=INTEGER}, #{url,jdbcType=VARCHAR}, #{status,jdbcType=INTEGER},
      #{sort,jdbcType=INTEGER}, #{createTime,jdbcType=TIMESTAMP}, #{updateTime,jdbcType=TIMESTAMP},
      #{createdBy,jdbcType=VARCHAR}, #{updatedBy,jdbcType=VARCHAR})
  
  
      
      insert into tbl_permission
      
          
              pid,
          
          
              `name`,
          
          
              e_name,
          
          
              tag,
          
          
              `value`,
          
          
              icon,
          
          
              `type`,
          
          
              url,
          
          
              `status`,
          
          
              sort,
          
          
              create_time,
          
          
              update_time,
          
          
              created_by,
          
          
              updated_by,
          
      
      
          
              #{pid,jdbcType=BIGINT},
          
          
              #{name,jdbcType=VARCHAR},
          
          
              #{eName,jdbcType=VARCHAR},
          
          
              #{tag,jdbcType=VARCHAR},
          
          
              #{value,jdbcType=VARCHAR},
          
          
              #{icon,jdbcType=VARCHAR},
          
          
              #{type,jdbcType=INTEGER},
          
          
              #{url,jdbcType=VARCHAR},
          
          
              #{status,jdbcType=INTEGER},
          
          
              #{sort,jdbcType=INTEGER},
          
          
              #{createTime,jdbcType=TIMESTAMP},
          
          
              #{updateTime,jdbcType=TIMESTAMP},
          
          
              #{createdBy,jdbcType=VARCHAR},
          
          
              #{updatedBy,jdbcType=VARCHAR},
          
      
  
  
      
      update tbl_permission
      
          
              pid = #{pid,jdbcType=BIGINT},
          
          
              `name` = #{name,jdbcType=VARCHAR},
          
          
              e_name = #{eName,jdbcType=VARCHAR},
          
          
              tag = #{tag,jdbcType=VARCHAR},
          
          
              `value` = #{value,jdbcType=VARCHAR},
          
          
              icon = #{icon,jdbcType=VARCHAR},
          
          
              `type` = #{type,jdbcType=INTEGER},
          
          
              url = #{url,jdbcType=VARCHAR},
          
          
              `status` = #{status,jdbcType=INTEGER},
          
          
              sort = #{sort,jdbcType=INTEGER},
          
          
              create_time = #{createTime,jdbcType=TIMESTAMP},
          
          
              update_time = #{updateTime,jdbcType=TIMESTAMP},
          
          
              created_by = #{createdBy,jdbcType=VARCHAR},
          
          
              updated_by = #{updatedBy,jdbcType=VARCHAR},
          
      
      where id = #{id,jdbcType=BIGINT}
  
  
      
      update tbl_permission
      set pid = #{pid,jdbcType=BIGINT},
      `name` = #{name,jdbcType=VARCHAR},
      e_name = #{eName,jdbcType=VARCHAR},
      tag = #{tag,jdbcType=VARCHAR},
      `value` = #{value,jdbcType=VARCHAR},
      icon = #{icon,jdbcType=VARCHAR},
      `type` = #{type,jdbcType=INTEGER},
      url = #{url,jdbcType=VARCHAR},
      `status` = #{status,jdbcType=INTEGER},
      sort = #{sort,jdbcType=INTEGER},
      create_time = #{createTime,jdbcType=TIMESTAMP},
      update_time = #{updateTime,jdbcType=TIMESTAMP},
      created_by = #{createdBy,jdbcType=VARCHAR},
      updated_by = #{updatedBy,jdbcType=VARCHAR}
      where id = #{id,jdbcType=BIGINT}

RoleMapper.xml





  
  
  
  
  
  
  
  
  
  


  
  id, user_id, role_name, role_desc, create_time, update_time, created_by, updated_by



  
  delete from tbl_role
  where id = #{id,jdbcType=INTEGER}


  
  insert into tbl_role (id, user_id, role_name, 
    role_desc, create_time, update_time, 
    created_by, updated_by)
  values (#{id,jdbcType=INTEGER}, #{userId,jdbcType=BIGINT}, #{roleName,jdbcType=VARCHAR}, 
    #{roleDesc,jdbcType=VARCHAR}, #{createTime,jdbcType=DATE}, #{updateTime,jdbcType=DATE}, 
    #{createdBy,jdbcType=VARCHAR}, #{updatedBy,jdbcType=VARCHAR})


  
  insert into tbl_role
  
    
      id,
    
    
      user_id,
    
    
      role_name,
    
    
      role_desc,
    
    
      create_time,
    
    
      update_time,
    
    
      created_by,
    
    
      updated_by,
    
  
  
    
      #{id,jdbcType=INTEGER},
    
    
      #{userId,jdbcType=BIGINT},
    
    
      #{roleName,jdbcType=VARCHAR},
    
    
      #{roleDesc,jdbcType=VARCHAR},
    
    
      #{createTime,jdbcType=DATE},
    
    
      #{updateTime,jdbcType=DATE},
    
    
      #{createdBy,jdbcType=VARCHAR},
    
    
      #{updatedBy,jdbcType=VARCHAR},
    
  


  
  update tbl_role
  
    
      user_id = #{userId,jdbcType=BIGINT},
    
    
      role_name = #{roleName,jdbcType=VARCHAR},
    
    
      role_desc = #{roleDesc,jdbcType=VARCHAR},
    
    
      create_time = #{createTime,jdbcType=DATE},
    
    
      update_time = #{updateTime,jdbcType=DATE},
    
    
      created_by = #{createdBy,jdbcType=VARCHAR},
    
    
      updated_by = #{updatedBy,jdbcType=VARCHAR},
    
  
  where id = #{id,jdbcType=INTEGER}


  
  update tbl_role
  set user_id = #{userId,jdbcType=BIGINT},
    role_name = #{roleName,jdbcType=VARCHAR},
    role_desc = #{roleDesc,jdbcType=VARCHAR},
    create_time = #{createTime,jdbcType=DATE},
    update_time = #{updateTime,jdbcType=DATE},
    created_by = #{createdBy,jdbcType=VARCHAR},
    updated_by = #{updatedBy,jdbcType=VARCHAR}
  where id = #{id,jdbcType=INTEGER}

RolePermissionMapper.xml





  
  
  
  


  
  role_id, perm_id


  
  insert into tbl_role_permission (role_id, perm_id)
  values (#{roleId,jdbcType=INTEGER}, #{permId,jdbcType=INTEGER})


  
  insert into tbl_role_permission
  
    
      role_id,
    
    
      perm_id,
    
  
  
    
      #{roleId,jdbcType=INTEGER},
    
    
      #{permId,jdbcType=INTEGER},

UserMapper.xml





  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  




  
  id, pid, tenant_id, username, `password`, nick, gender, age, head_img, phone, `state`,
  push_token, app_salt, web_salt, enabled, accountNonExpired, accountNonLocked, credentialsNonExpired,
  create_time, update_time, create_by, update_by







  
  delete from tbl_user
  where id = #{id,jdbcType=BIGINT}


  
  insert into tbl_user (pid, tenant_id, username,
    `password`, nick, gender,
    age, head_img, phone,
    `state`, push_token, app_salt,
    web_salt, enabled, accountNonExpired,
    accountNonLocked, credentialsNonExpired,
    create_time, update_time, create_by,
    update_by)
  values (#{pid,jdbcType=BIGINT}, #{tenantId,jdbcType=BIGINT}, #{username,jdbcType=VARCHAR},
    #{password,jdbcType=VARCHAR}, #{nick,jdbcType=VARCHAR}, #{gender,jdbcType=INTEGER},
    #{age,jdbcType=INTEGER}, #{headImg,jdbcType=VARCHAR}, #{phone,jdbcType=VARCHAR},
    #{state,jdbcType=INTEGER}, #{pushToken,jdbcType=VARCHAR}, #{appSalt,jdbcType=VARCHAR},
    #{webSalt,jdbcType=VARCHAR}, #{enabled,jdbcType=BOOLEAN}, #{accountNonExpired,jdbcType=BOOLEAN},
    #{accountNonLocked,jdbcType=BOOLEAN}, #{credentialsNonExpired,jdbcType=BOOLEAN},
    #{createTime,jdbcType=DATE}, #{updateTime,jdbcType=DATE}, #{createBy,jdbcType=VARCHAR},
    #{updateBy,jdbcType=VARCHAR})


  
  insert into tbl_user
  
    
      pid,
    
    
      tenant_id,
    
    
      username,
    
    
      `password`,
    
    
      nick,
    
    
      gender,
    
    
      age,
    
    
      head_img,
    
    
      phone,
    
    
      `state`,
    
    
      push_token,
    
    
      app_salt,
    
    
      web_salt,
    
    
      enabled,
    
    
      accountNonExpired,
    
    
      accountNonLocked,
    
    
      credentialsNonExpired,
    
    
      create_time,
    
    
      update_time,
    
    
      create_by,
    
    
      update_by,
    
  
  
    
      #{pid,jdbcType=BIGINT},
    
    
      #{tenantId,jdbcType=BIGINT},
    
    
      #{username,jdbcType=VARCHAR},
    
    
      #{password,jdbcType=VARCHAR},
    
    
      #{nick,jdbcType=VARCHAR},
    
    
      #{gender,jdbcType=INTEGER},
    
    
      #{age,jdbcType=INTEGER},
    
    
      #{headImg,jdbcType=VARCHAR},
    
    
      #{phone,jdbcType=VARCHAR},
    
    
      #{state,jdbcType=INTEGER},
    
    
      #{pushToken,jdbcType=VARCHAR},
    
    
      #{appSalt,jdbcType=VARCHAR},
    
    
      #{webSalt,jdbcType=VARCHAR},
    
    
      #{enabled,jdbcType=BOOLEAN},
    
    
      #{accountNonExpired,jdbcType=BOOLEAN},
    
    
      #{accountNonLocked,jdbcType=BOOLEAN},
    
    
      #{credentialsNonExpired,jdbcType=BOOLEAN},
    
    
      #{createTime,jdbcType=DATE},
    
    
      #{updateTime,jdbcType=DATE},
    
    
      #{createBy,jdbcType=VARCHAR},
    
    
      #{updateBy,jdbcType=VARCHAR},
    
  


  
  update tbl_user
  
    
      pid = #{pid,jdbcType=BIGINT},
    
    
      tenant_id = #{tenantId,jdbcType=BIGINT},
    
    
      username = #{username,jdbcType=VARCHAR},
    
    
      `password` = #{password,jdbcType=VARCHAR},
    
    
      nick = #{nick,jdbcType=VARCHAR},
    
    
      gender = #{gender,jdbcType=INTEGER},
    
    
      age = #{age,jdbcType=INTEGER},
    
    
      head_img = #{headImg,jdbcType=VARCHAR},
    
    
      phone = #{phone,jdbcType=VARCHAR},
    
    
      `state` = #{state,jdbcType=INTEGER},
    
    
      push_token = #{pushToken,jdbcType=VARCHAR},
    
    
      app_salt = #{appSalt,jdbcType=VARCHAR},
    
    
      web_salt = #{webSalt,jdbcType=VARCHAR},
    
    
      enabled = #{enabled,jdbcType=BOOLEAN},
    
    
      accountNonExpired = #{accountNonExpired,jdbcType=BOOLEAN},
    
    
      accountNonLocked = #{accountNonLocked,jdbcType=BOOLEAN},
    
    
      credentialsNonExpired = #{credentialsNonExpired,jdbcType=BOOLEAN},
    
    
      create_time = #{createTime,jdbcType=DATE},
    
    
      update_time = #{updateTime,jdbcType=DATE},
    
    
      create_by = #{createBy,jdbcType=VARCHAR},
    
    
      update_by = #{updateBy,jdbcType=VARCHAR},
    
  
  where id = #{id,jdbcType=BIGINT}


  
  update tbl_user
  set pid = #{pid,jdbcType=BIGINT},
    tenant_id = #{tenantId,jdbcType=BIGINT},
    username = #{username,jdbcType=VARCHAR},
    `password` = #{password,jdbcType=VARCHAR},
    nick = #{nick,jdbcType=VARCHAR},
    gender = #{gender,jdbcType=INTEGER},
    age = #{age,jdbcType=INTEGER},
    head_img = #{headImg,jdbcType=VARCHAR},
    phone = #{phone,jdbcType=VARCHAR},
    `state` = #{state,jdbcType=INTEGER},
    push_token = #{pushToken,jdbcType=VARCHAR},
    app_salt = #{appSalt,jdbcType=VARCHAR},
    web_salt = #{webSalt,jdbcType=VARCHAR},
    enabled = #{enabled,jdbcType=BOOLEAN},
    accountNonExpired = #{accountNonExpired,jdbcType=BOOLEAN},
    accountNonLocked = #{accountNonLocked,jdbcType=BOOLEAN},
    credentialsNonExpired = #{credentialsNonExpired,jdbcType=BOOLEAN},
    create_time = #{createTime,jdbcType=DATE},
    update_time = #{updateTime,jdbcType=DATE},
    create_by = #{createBy,jdbcType=VARCHAR},
    update_by = #{updateBy,jdbcType=VARCHAR}
  where id = #{id,jdbcType=BIGINT}

测试

访问 localhost:8080/auth

响应头中获取到 authorization 令牌。
我们输错地址看看有没有全局异常响应。

访问一下其他服务，在重新登录模拟挤号，在访问提示已在其他设备登录。

说明

后面，我们再使用Oauth2.0来集成开放接口平台

微服务网关Zuul+Spring security+Oauth2.0+Jwt + 动态盐值 实现权限控制，开放接口平台（3）

前言

认证中心

测试

说明

你可能感兴趣的:(微服务网关Zuul+Spring security+Oauth2.0+Jwt + 动态盐值 实现权限控制，开放接口平台（3）)

微服务网关Zuul+Spring security+Oauth2.0+Jwt + 动态盐值实现权限控制，开放接口平台（3）

你可能感兴趣的:(微服务网关Zuul+Spring security+Oauth2.0+Jwt + 动态盐值实现权限控制，开放接口平台（3）)