基于elementUI和springboot搭建的游戏后台管理系统（源码+数据库） 包含权限管理，玩家查询，服务器管理等

package jforgame.admin.security; import jforgame.admin.utils.DateUtil; import io.jsonwebtoken.Claims; import io.jsonwebtoken.Jwts; import io.jsonwebtoken.SignatureAlgorithm; import org.slf4j.Logger; import org.slf4j.LoggerFactory; import org.springframework.security.core.Authentication; import org.springframework.security.core.GrantedAuthority; import org.springframework.util.StringUtils; import javax.servlet.http.HttpServletRequest; import java.io.Serializable; import java.util.*; /** * @Author: Kinson * @Date: 2019/10/26 10:54 */ public class JwtTokenUtils implements Serializable { private final static Logger logger = LoggerFactory.getLogger(JwtTokenUtils.class.getName()); private static final long serialVersionUID = 1L; /** * 用户名称 */ private static final String USERNAME = Claims.SUBJECT; /** * 创建时间 */ private static final String CREATED = "created"; /** * 权限列表 */ private static final String AUTHORITIES = "authorities"; /** * 密钥 */ private static final String SECRET = UUID.randomUUID().toString(); /** * 有效期12小时 */ private static final long EXPIRE_TIME = 31 * DateUtil.ONE_DAY; /** * 生成令牌 * * @return 令牌 */ public static String generateToken(Authentication authentication) { Map<String, Object> claims = new HashMap<>(); claims.put(USERNAME, SecurityUtils.getUsername(authentication)); claims.put(CREATED, new Date()); claims.put(AUTHORITIES, authentication.getAuthorities()); return generateToken(claims); } /** * 从数据声明生成令牌 * * @param claims 数据声明 * @return 令牌 */ private static String generateToken(Map<String, Object> claims) { Date expirationDate = new Date(System.currentTimeMillis() + EXPIRE_TIME); return Jwts.builder().setClaims(claims).setExpiration(expirationDate).signWith(SignatureAlgorithm.HS512, SECRET).compact(); } /** * 从令牌中获取用户名 * * @param token 令牌 * @return 用户名 */ public static String getUsernameFromToken(String token) { String username; try { Claims claims = getClaimsFromToken(token); username = claims.getSubject(); } catch (Exception e) { username = null; } return username; } /** * 根据请求令牌获取登录认证信息 * * @return 用户名 */ public static Authentication getAuthenticationFromToken(HttpServletRequest request) { Authentication authentication = null; // 获取请求携带的令牌 String token = JwtTokenUtils.getToken(request); if (token != null) { // 请求令牌不能为空 if (SecurityUtils.getAuthentication() == null) { // 上下文中Authentication为空 Claims claims = getClaimsFromToken(token); if (claims == null) { return null; } String username = claims.getSubject(); if (username == null) { return null; } if (isTokenExpired(token)) { return null; } refreshToken(token); Object authors = claims.get(AUTHORITIES); List<GrantedAuthority> authorities = new ArrayList<>(); if (authors != null && authors instanceof List) { for (Object object : (List) authors) { authorities.add(new GrantedAuthorityImpl((String) ((Map) object).get("authority"))); } } authentication = new JwtAuthenticationToken(username, null, authorities, token); } else { if (validateToken(token, SecurityUtils.getUsername())) { // 如果上下文中Authentication非空，且请求令牌合法，直接返回当前登录认证信息 authentication = SecurityUtils.getAuthentication(); refreshToken(token); } } } return authentication; } /** * 从令牌中获取数据声明 * * @param token 令牌 * @return 数据声明 */ private static Claims getClaimsFromToken(String token) { Claims claims; try { claims = Jwts.parser().setSigningKey(SECRET).parseClaimsJws(token).getBody(); } catch (Exception e) { claims = null; } return claims; } /** * 验证令牌 * * @param token * @param name * @return */ public static Boolean validateToken(String token, String name) { if (StringUtils.isEmpty(name)) { return false; } String userName = getUsernameFromToken(token); return name.equals(userName) && !isTokenExpired(token); } /** * 刷新令牌 * * @param token * @return */ public static void refreshToken(String token) { Date expirationDate = new Date(System.currentTimeMillis() + EXPIRE_TIME); Claims claims = getClaimsFromToken(token); if (claims != null) { claims.setExpiration(expirationDate); } } /** * 判断令牌是否过期 * * @param token 令牌 * @return 是否过期 */ public static Boolean isTokenExpired(String token) { try { Claims claims = getClaimsFromToken(token); Date expiration = claims.getExpiration(); return expiration.before(new Date()); } catch (Exception e) { logger.error("", e); return true; } } /** * 获取请求token * * @param request * @return */ public static String getToken(HttpServletRequest request) { String token = request.getHeader("Authorization"); String tokenHead = "Bearer "; if (token == null) { token = request.getHeader("token"); } else if (token.contains(tokenHead)) { token = token.substring(tokenHead.length()); } if ("".equals(token)) { token = null; } return token; } }