基于springboot+jwt+拦截器实现分布式环境下的认证和授权

package com.txc.ajaxheadersdemo.controller; import com.auth0.jwt.JWT; import com.auth0.jwt.JWTVerifier; import com.auth0.jwt.algorithms.Algorithm; import com.auth0.jwt.exceptions.JWTCreationException; import com.auth0.jwt.interfaces.DecodedJWT; import jakarta.servlet.http.HttpServletRequest; import jakarta.servlet.http.HttpServletResponse; import org.springframework.stereotype.Controller; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.RequestMethod; import org.springframework.web.bind.annotation.RequestParam; import org.springframework.web.bind.annotation.ResponseBody; import java.util.Date; import java.util.HashMap; import java.util.Map; @Controller public class TestController { @RequestMapping("/login") @ResponseBody public String login(@RequestParam String username, HttpServletResponse response, HttpServletRequest request){ System.out.println("=======login==========="+username); //创建map存放用户信息 Map<String,Object> map=new HashMap<>(); map.put("userid",1001); map.put("username",username); String token=null; try { //!@#$%^&123~:是我们使用的签名 Algorithm algorithm = Algorithm.HMAC256("!@#$%^&123~"); token = JWT.create() .withIssuer("auth0")//角色权限 .withClaim("userinfo",map) //设置token的过期时间为一个小时 .withExpiresAt(new Date(System.currentTimeMillis()+3600000)) .sign(algorithm); //将token信息添加到token中 response.addHeader("token",token); } catch (JWTCreationException exception){ System.out.println("=====程序异常======="); } return token; } @RequestMapping(value = "/getLoginToken",method = RequestMethod.POST) public String getLoginToken(@RequestParam("X-Custom-Header1111") String token){ //验证一个token try{ Algorithm algorithm=Algorithm.HMAC256("!@#$%^&123~"); JWTVerifier verifier=JWT.require(algorithm) .withIssuer("auth0") .build(); DecodedJWT jwt=verifier.verify(token); Map<String,Object> userinfo=jwt.getClaim("userinfo").asMap(); String username=userinfo.get("username").toString(); int userid=Integer.valueOf(userinfo.get("userid").toString()); Date exp=jwt.getExpiresAt(); return username+"==="+userid+"==="+exp; }catch(Exception e){ e.printStackTrace(); return "校验失败"; } } @RequestMapping("/test.do") @ResponseBody public String test(){ System.out.println("=====test.do========"); return "恭喜你资源访问成功。"; } @RequestMapping("/login1") @ResponseBody public String login1(@RequestParam String username, HttpServletResponse response, HttpServletRequest request){ System.out.println("=======login==========="+username); //创建map存放用户信息 Map<String,Object> map=new HashMap<>(); map.put("userid",1001); map.put("username",username); String token=null; try { //!@#$%^&123~:是我们使用的签名 Algorithm algorithm = Algorithm.HMAC256("!@#$%^&123~"); token = JWT.create() .withIssuer("auth0")//角色权限 .withClaim("userinfo",map) //设置token的过期时间为一个小时 .withExpiresAt(new Date(System.currentTimeMillis()+3600000)) .sign(algorithm); } catch (JWTCreationException exception){ System.out.println("=====程序异常======="); return "0";//如果返回值为0，表示失败。 } return "1";//如果返回值为1，表示成功。 } }