标签：String companyId mobile jwt Token 认证 token public

String token = JwtUtils.create(customer.getCompanyId(), customer.getId(), mobile);

需要认证的接口加上认证注解

@Auth
@RequestMapping("save")
@ResponseBody

@Auth注解

@Target({ElementType.METHOD})
@Retention(RetentionPolicy.RUNTIME)
@Documented
public @interface Auth {
    boolean login() default true;

    String code() default "";

    String name() default "";

    int version() default 0;

    ViewEnum response() default ViewEnum.JSON;
}

编写认证类继承父类拦截器

public class AuthExec extends AuthInterceptor {

    private static Logger log = LoggerFactory.getLogger(AuthExec.class);


    @Override
    public boolean exec(HttpServletRequest request, HttpServletResponse response, Method method) {

        if (StringUtils.isNotEmpty(SessionConstant.ACCESS_CONTROL)) {
            if ("0".equalsIgnoreCase(SessionConstant.ACCESS_CONTROL)) {
                throw Ex.build(UpdateExCode.AccessControl);
            } else if ("-1".equalsIgnoreCase(SessionConstant.ACCESS_CONTROL)) {
                throw Ex.build(UpdateExCode.ExAccessControl);
            }
        }
        String tokenStr = request.getHeader("token");// 从 http 请求头中取出 token
        Token token = null;
        if (StringUtils.isNotBlank(tokenStr)) {
//            log.error(request.getRequestURI() + "   token:" + tokenStr);
            token = JwtUtils.get(tokenStr);
        }
//如果存在Auth注解就进入判断校验token值
        if (method.isAnnotationPresent(Auth.class)) {
            Auth auth = method.getAnnotation(Auth.class);
            if (auth.login()) {
                if (StringUtils.isEmpty(tokenStr)) {
                    throw Ex.build(CnEx.No_Login);
                }

                if (token == null || token.getCompanyId() == null || token.getCustomerId() == null || StringUtils.isBlank(token.getMobile())) {
                    throw Ex.build(CnEx.No_Permission);
                }
                if (token.getDate().before(new Date())) {
                    throw Ex.build(CnEx.No_Login);
                }

            }
        }
        if (token != null) {
            JwtUtils.set(token);
        }
        return true;
    }

}

父类认证拦截器

public abstract class AuthInterceptor extends HandlerInterceptorAdapter {

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        HandlerMethod handlerMethod = (HandlerMethod) handler;
        Method method = handlerMethod.getMethod();
        Annotation[] annos = method.getAnnotations();
        if (annos == null || annos.length == 0) {
            return true;
        }
        exec(request, response, method);
        return true;
    }

    @Override
    public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {
        super.postHandle(request, response, handler, modelAndView);
    }

    @Override
    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
        super.afterCompletion(request, response, handler, ex);
    }

    public abstract boolean exec(HttpServletRequest request, HttpServletResponse response, Method method);


}

jwt工具类JwtUtils

public class JwtUtils {

    private static ThreadLocal<Token> threadLocal = new ThreadLocal<>();


    public static Token get() {
        return threadLocal.get();
    }


    public static void set(Token token) {
        threadLocal.set(token);
    }


    //过期时间设置(24h)
    private static final long EXPIRE_TIME = 24 * 60 * 60 * 1000;

    //私钥设置(随便乱写的)
    private static final String TOKEN_SECRET = "5xcJVrXNyQSwK1l2RS9nw";

    public static String getToken(Token token) {
        //过期时间和加密算法设置
        Date date = new Date(System.currentTimeMillis() + EXPIRE_TIME);
        Algorithm algorithm = Algorithm.HMAC256(TOKEN_SECRET);

        //头部信息
        Map<String, Object> header = new HashMap<>(2);
        header.put("typ", "JWT");
        header.put("alg", "HS256");

        return JWT.create()
                .withHeader(header)
                .withClaim("companyId", token.getCompanyId())
                .withClaim("customerId", token.getCustomerId())
                .withClaim("mobile", token.getMobile())
                .withClaim("date", token.getDate())
                .withExpiresAt(date)
                .sign(algorithm);

    }

    public static Token get(String token) {
        DecodedJWT jwt = JWT.decode(token);
        Token tk = new Token();
        tk.setCompanyId(jwt.getClaim("companyId").asInt());
        tk.setCustomerId(jwt.getClaim("customerId").asInt());
        tk.setMobile(jwt.getClaim("mobile").asString());
        tk.setDate(jwt.getExpiresAt());
        return tk;
    }

    public static String create(Integer companyId,Integer customerId, String mobile) {
        //这里是传入的是token对象，决定token的内容
        Token tk = new Token(companyId,customerId, mobile,new Date());
        //获取时间用
        //交给上面的实现类得到token
        return getToken(tk);
    }

}

token 对象

public class Token {

    private Integer companyId;

    private Integer customerId;

    private String mobile;

    private Date date;

    public Token() {
    }

    public Token(Integer companyId, Integer customerId, String mobile, Date date) {
        this.companyId = companyId;
        this.customerId = customerId;
        this.mobile = mobile;
        this.date = date;
    }

    public Integer getCompanyId() {
        return companyId;
    }

    public void setCompanyId(Integer companyId) {
        this.companyId = companyId;
    }

    public Integer getCustomerId() {
        return customerId;
    }

    public void setCustomerId(Integer customerId) {
        this.customerId = customerId;
    }

    public String getMobile() {
        return mobile;
    }

    public void setMobile(String mobile) {
        this.mobile = mobile;
    }

    public Date getDate() {
        return date;
    }

    public void setDate(Date date) {
        this.date = date;
    }
}

标签：String,companyId,mobile,jwt,Token,认证,token,public
来源： https://www.cnblogs.com/feizai-java/p/16197583.html

本站声明： 1. iCode9 技术分享网（下文简称本站）提供的所有内容，仅供技术学习、探讨和分享；
2. 关于本站的所有留言、评论、转载及引用，纯属内容发起人的个人观点，与本站观点和立场无关；
3. 关于本站的所有言论和文字，纯属内容发起人的个人观点，与本站观点和立场无关；
4. 本站文章均是网友提供，不完全保证技术分享内容的完整性、准确性、时效性、风险性和版权归属；如您发现该文章侵犯了您的权益，可联系我们第一时间进行删除；
5. 本站为非盈利性的个人网站，所有内容不会用来进行牟利，也不会利用任何形式的广告来间接获益，纯粹是为了广大技术爱好者提供技术内容和技术思想的分享性交流网站。