blue
3 years ago
committed by
Gitee
Gitee
19 changed files with 408 additions and 251 deletions
@ -0,0 +1,36 @@ |
|||||
|
package com.bx.implatform.config; |
||||
|
|
||||
|
import com.bx.implatform.interceptor.AuthInterceptor; |
||||
|
import org.springframework.context.annotation.Bean; |
||||
|
import org.springframework.context.annotation.Configuration; |
||||
|
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; |
||||
|
import org.springframework.security.crypto.password.PasswordEncoder; |
||||
|
import org.springframework.web.servlet.config.annotation.InterceptorRegistry; |
||||
|
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer; |
||||
|
|
||||
|
|
||||
|
@Configuration |
||||
|
public class MvcConfig implements WebMvcConfigurer { |
||||
|
|
||||
|
|
||||
|
@Override |
||||
|
public void addInterceptors(InterceptorRegistry registry) { |
||||
|
registry.addInterceptor(authInterceptor()) |
||||
|
.addPathPatterns("/**") |
||||
|
.excludePathPatterns( "/image/upload","/login","/logout","/register","/refreshToken", |
||||
|
"/swagger-resources/**", "/webjars/**", "/v2/**", "/swagger-ui.html/**"); |
||||
|
} |
||||
|
|
||||
|
|
||||
|
@Bean |
||||
|
public AuthInterceptor authInterceptor() { |
||||
|
return new AuthInterceptor(); |
||||
|
} |
||||
|
|
||||
|
@Bean |
||||
|
public PasswordEncoder passwordEncoder(){ |
||||
|
// 使用BCrypt加密密码
|
||||
|
return new BCryptPasswordEncoder(); |
||||
|
} |
||||
|
|
||||
|
} |
||||
@ -1,172 +0,0 @@ |
|||||
package com.bx.implatform.config; |
|
||||
|
|
||||
import com.alibaba.fastjson.JSON; |
|
||||
import com.bx.implatform.enums.ResultCode; |
|
||||
import com.bx.implatform.result.Result; |
|
||||
import com.bx.implatform.result.ResultUtils; |
|
||||
import com.bx.implatform.service.IUserService; |
|
||||
import com.bx.implatform.session.UserSession; |
|
||||
import com.fasterxml.jackson.databind.ObjectMapper; |
|
||||
import lombok.extern.slf4j.Slf4j; |
|
||||
import org.springframework.beans.factory.annotation.Autowired; |
|
||||
import org.springframework.beans.factory.annotation.Qualifier; |
|
||||
import org.springframework.context.annotation.Bean; |
|
||||
import org.springframework.context.annotation.Configuration; |
|
||||
import org.springframework.security.authentication.*; |
|
||||
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; |
|
||||
import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity; |
|
||||
import org.springframework.security.config.annotation.web.builders.HttpSecurity; |
|
||||
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; |
|
||||
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; |
|
||||
import org.springframework.security.core.userdetails.User; |
|
||||
import org.springframework.security.core.userdetails.UserDetailsService; |
|
||||
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; |
|
||||
import org.springframework.security.crypto.password.PasswordEncoder; |
|
||||
import org.springframework.security.web.AuthenticationEntryPoint; |
|
||||
import org.springframework.security.web.authentication.AuthenticationFailureHandler; |
|
||||
import org.springframework.security.web.authentication.AuthenticationSuccessHandler; |
|
||||
import org.springframework.security.web.authentication.logout.LogoutSuccessHandler; |
|
||||
|
|
||||
import java.io.PrintWriter; |
|
||||
|
|
||||
/* |
|
||||
* SpringSecurity安全框架配置 |
|
||||
* |
|
||||
* @Author Blue |
|
||||
* @Date 2022/10/21 |
|
||||
*/ |
|
||||
@Slf4j |
|
||||
@Configuration |
|
||||
@EnableWebSecurity |
|
||||
@EnableGlobalMethodSecurity(prePostEnabled=true) |
|
||||
public class WebSecurityConfg extends WebSecurityConfigurerAdapter { |
|
||||
|
|
||||
|
|
||||
|
|
||||
@Qualifier("securityUserDetailsServiceImpl") |
|
||||
@Autowired |
|
||||
private UserDetailsService userDetailsService; |
|
||||
|
|
||||
@Autowired |
|
||||
private IUserService userService; |
|
||||
|
|
||||
@Override |
|
||||
protected void configure(HttpSecurity http) throws Exception { |
|
||||
http.authorizeRequests() |
|
||||
.antMatchers("/image/upload","/login","/logout","/register","/swagger-resources/**", "/webjars/**", "/v2/**", "/swagger-ui.html/**") |
|
||||
.permitAll() |
|
||||
.anyRequest() //任何其它请求
|
|
||||
.authenticated() //都需要身份认证
|
|
||||
.and() |
|
||||
// 登录配置表单认证方式
|
|
||||
.formLogin() |
|
||||
.usernameParameter("username")//设置登录账号参数，与表单参数一致
|
|
||||
.passwordParameter("password")//设置登录密码参数，与表单参数一致
|
|
||||
.loginProcessingUrl("/login")//配置默认登录入口
|
|
||||
.successHandler(successHandler()) |
|
||||
.failureHandler(failureHandler()) |
|
||||
.and() |
|
||||
// 注销
|
|
||||
.logout() |
|
||||
.logoutUrl("/logout") |
|
||||
.logoutSuccessHandler(logoutHandler()) |
|
||||
.permitAll() |
|
||||
.and() |
|
||||
// session管理
|
|
||||
.sessionManagement() |
|
||||
.and() |
|
||||
// 禁用跨站csrf攻击防御
|
|
||||
.csrf() |
|
||||
.disable() |
|
||||
.exceptionHandling() |
|
||||
.authenticationEntryPoint(entryPoint()); |
|
||||
|
|
||||
} |
|
||||
|
|
||||
@Bean |
|
||||
AuthenticationFailureHandler failureHandler(){ |
|
||||
return (request, response, exception) -> { |
|
||||
response.setContentType("application/json;charset=utf-8"); |
|
||||
PrintWriter out = response.getWriter(); |
|
||||
Result result = ResultUtils.error(ResultCode.LOGIN_ERROR,exception.getMessage()); |
|
||||
if (exception instanceof LockedException) { |
|
||||
result =ResultUtils.error(ResultCode.LOGIN_ERROR,"账户被锁定，请联系管理员!"); |
|
||||
} else if (exception instanceof CredentialsExpiredException) { |
|
||||
result = ResultUtils.error(ResultCode.LOGIN_ERROR,"密码过期，请联系管理员!"); |
|
||||
} else if (exception instanceof AccountExpiredException) { |
|
||||
result =ResultUtils.error(ResultCode.LOGIN_ERROR,"账户过期，请联系管理员!"); |
|
||||
} else if (exception instanceof DisabledException) { |
|
||||
result = ResultUtils.error(ResultCode.LOGIN_ERROR,"账户被禁用，请联系管理员!"); |
|
||||
} else if (exception instanceof BadCredentialsException) { |
|
||||
result =ResultUtils.error(ResultCode.LOGIN_ERROR,"用户名或者密码输入错误，请重新输入!"); |
|
||||
} |
|
||||
out.write(new ObjectMapper().writeValueAsString(result)); |
|
||||
out.flush(); |
|
||||
out.close(); |
|
||||
}; |
|
||||
} |
|
||||
|
|
||||
@Bean |
|
||||
AuthenticationSuccessHandler successHandler(){ |
|
||||
return (request, response, authentication) -> { |
|
||||
User useDetail = (User)authentication.getPrincipal(); |
|
||||
String strJson = useDetail.getUsername(); |
|
||||
UserSession userSession = JSON.parseObject(strJson,UserSession.class); |
|
||||
log.info("用户 '{}' 登录,id:{},昵称:{}",userSession.getUserName(),userSession.getId(),userSession.getNickName()); |
|
||||
// 响应
|
|
||||
response.setContentType("application/json;charset=utf-8"); |
|
||||
PrintWriter out = response.getWriter(); |
|
||||
Result result = ResultUtils.success(); |
|
||||
out.write(new ObjectMapper().writeValueAsString(result)); |
|
||||
out.flush(); |
|
||||
out.close(); |
|
||||
|
|
||||
}; |
|
||||
} |
|
||||
|
|
||||
|
|
||||
@Bean |
|
||||
LogoutSuccessHandler logoutHandler(){ |
|
||||
return (request, response, authentication) -> { |
|
||||
User useDetail = (User)authentication.getPrincipal(); |
|
||||
String strJson = useDetail.getUsername(); |
|
||||
UserSession userSession = JSON.parseObject(strJson,UserSession.class); |
|
||||
log.info("用户 '{}' 退出,id:{},昵称:{}",userSession.getUserName(),userSession.getId(),userSession.getNickName()); |
|
||||
// 响应
|
|
||||
response.setContentType("application/json;charset=utf-8"); |
|
||||
PrintWriter out = response.getWriter(); |
|
||||
Result result = ResultUtils.success(); |
|
||||
out.write(new ObjectMapper().writeValueAsString(result)); |
|
||||
out.flush(); |
|
||||
out.close(); |
|
||||
}; |
|
||||
} |
|
||||
|
|
||||
@Bean |
|
||||
AuthenticationEntryPoint entryPoint(){ |
|
||||
return (request, response, exception) -> { |
|
||||
response.setContentType("application/json;charset=utf-8"); |
|
||||
PrintWriter out = response.getWriter(); |
|
||||
Result result = ResultUtils.error(ResultCode.NO_LOGIN); |
|
||||
out.write(new ObjectMapper().writeValueAsString(result)); |
|
||||
out.flush(); |
|
||||
out.close(); |
|
||||
}; |
|
||||
} |
|
||||
|
|
||||
|
|
||||
|
|
||||
@Bean |
|
||||
public PasswordEncoder passwordEncoder(){ |
|
||||
// 使用BCrypt加密密码
|
|
||||
return new BCryptPasswordEncoder(); |
|
||||
} |
|
||||
|
|
||||
|
|
||||
@Override |
|
||||
protected void configure(AuthenticationManagerBuilder auth) throws Exception { |
|
||||
auth.userDetailsService(userDetailsService).passwordEncoder(passwordEncoder()); |
|
||||
} |
|
||||
|
|
||||
|
|
||||
} |
|
||||
@ -0,0 +1,48 @@ |
|||||
|
package com.bx.implatform.controller; |
||||
|
|
||||
|
|
||||
|
import com.bx.implatform.result.Result; |
||||
|
import com.bx.implatform.result.ResultUtils; |
||||
|
import com.bx.implatform.service.IUserService; |
||||
|
import com.bx.implatform.dto.LoginDTO; |
||||
|
import com.bx.implatform.dto.RegisterDTO; |
||||
|
import com.bx.implatform.vo.LoginVO; |
||||
|
import io.swagger.annotations.Api; |
||||
|
import io.swagger.annotations.ApiOperation; |
||||
|
import org.springframework.beans.factory.annotation.Autowired; |
||||
|
import org.springframework.web.bind.annotation.*; |
||||
|
|
||||
|
import javax.validation.Valid; |
||||
|
|
||||
|
|
||||
|
|
||||
|
@Api(tags = "用户登录和注册") |
||||
|
@RestController |
||||
|
public class LoginController { |
||||
|
|
||||
|
@Autowired |
||||
|
private IUserService userService; |
||||
|
|
||||
|
@PostMapping("/login") |
||||
|
@ApiOperation(value = "用户注册",notes="用户注册") |
||||
|
public Result register(@Valid @RequestBody LoginDTO dto){ |
||||
|
LoginVO vo = userService.login(dto); |
||||
|
return ResultUtils.success(vo); |
||||
|
} |
||||
|
|
||||
|
|
||||
|
@PutMapping("/refreshToken") |
||||
|
@ApiOperation(value = "刷新token",notes="用refreshtoken换取新的token") |
||||
|
public Result refreshToken(@RequestHeader("refreshToken")String refreshToken){ |
||||
|
LoginVO vo = userService.refreshToken(refreshToken); |
||||
|
return ResultUtils.success(vo); |
||||
|
} |
||||
|
|
||||
|
|
||||
|
@PostMapping("/register") |
||||
|
@ApiOperation(value = "用户注册",notes="用户注册") |
||||
|
public Result register(@Valid @RequestBody RegisterDTO dto){ |
||||
|
userService.register(dto); |
||||
|
return ResultUtils.success(); |
||||
|
} |
||||
|
} |
||||
@ -1,32 +0,0 @@ |
|||||
package com.bx.implatform.controller; |
|
||||
|
|
||||
|
|
||||
import com.bx.implatform.result.Result; |
|
||||
import com.bx.implatform.result.ResultUtils; |
|
||||
import com.bx.implatform.service.IUserService; |
|
||||
import com.bx.implatform.vo.RegisterVO; |
|
||||
import io.swagger.annotations.Api; |
|
||||
import io.swagger.annotations.ApiOperation; |
|
||||
import org.springframework.beans.factory.annotation.Autowired; |
|
||||
import org.springframework.web.bind.annotation.PostMapping; |
|
||||
import org.springframework.web.bind.annotation.RequestBody; |
|
||||
import org.springframework.web.bind.annotation.RestController; |
|
||||
|
|
||||
import javax.validation.Valid; |
|
||||
|
|
||||
|
|
||||
|
|
||||
@Api(tags = "用户注册") |
|
||||
@RestController |
|
||||
public class RegisterController { |
|
||||
|
|
||||
@Autowired |
|
||||
private IUserService userService; |
|
||||
|
|
||||
@PostMapping("/register") |
|
||||
@ApiOperation(value = "用户注册",notes="用户注册") |
|
||||
public Result register(@Valid @RequestBody RegisterVO dto){ |
|
||||
userService.register(dto); |
|
||||
return ResultUtils.success(); |
|
||||
} |
|
||||
} |
|
||||
@ -0,0 +1,22 @@ |
|||||
|
package com.bx.implatform.dto; |
||||
|
|
||||
|
import io.swagger.annotations.ApiModel; |
||||
|
import io.swagger.annotations.ApiModelProperty; |
||||
|
import lombok.Data; |
||||
|
import org.hibernate.validator.constraints.Length; |
||||
|
|
||||
|
import javax.validation.constraints.NotEmpty; |
||||
|
|
||||
|
@Data |
||||
|
@ApiModel("用户登录VO") |
||||
|
public class LoginDTO { |
||||
|
|
||||
|
//@NotEmpty(message="用户名不可为空")
|
||||
|
@ApiModelProperty(value = "用户名") |
||||
|
private String userName; |
||||
|
|
||||
|
// @NotEmpty(message="用户密码不可为空")
|
||||
|
@ApiModelProperty(value = "用户密码") |
||||
|
private String password; |
||||
|
|
||||
|
} |
||||
@ -0,0 +1,48 @@ |
|||||
|
package com.bx.implatform.interceptor; |
||||
|
|
||||
|
|
||||
|
import com.alibaba.fastjson.JSON; |
||||
|
import com.auth0.jwt.exceptions.JWTVerificationException; |
||||
|
import com.bx.implatform.contant.Constant; |
||||
|
import com.bx.implatform.enums.ResultCode; |
||||
|
import com.bx.implatform.exception.GlobalException; |
||||
|
import com.bx.implatform.session.UserSession; |
||||
|
import com.bx.implatform.util.JwtUtil; |
||||
|
import lombok.extern.slf4j.Slf4j; |
||||
|
import org.springframework.web.method.HandlerMethod; |
||||
|
import org.springframework.web.servlet.HandlerInterceptor; |
||||
|
import javax.servlet.http.HttpServletRequest; |
||||
|
import javax.servlet.http.HttpServletResponse; |
||||
|
; |
||||
|
|
||||
|
@Slf4j |
||||
|
public class AuthInterceptor implements HandlerInterceptor { |
||||
|
|
||||
|
|
||||
|
@Override |
||||
|
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception { |
||||
|
//如果不是映射到方法直接通过
|
||||
|
if (!(handler instanceof HandlerMethod)) { |
||||
|
return true; |
||||
|
} |
||||
|
//从 http 请求头中取出 token
|
||||
|
String token = request.getHeader("accessToken"); |
||||
|
if (token == null) { |
||||
|
log.error("未登陆，url:{}",request.getRequestURI()); |
||||
|
throw new GlobalException(ResultCode.NO_LOGIN); |
||||
|
} |
||||
|
try{ |
||||
|
//验证 token
|
||||
|
JwtUtil.checkSign(token, Constant.ACCESS_TOKEN_SECRET); |
||||
|
}catch ( |
||||
|
JWTVerificationException e) { |
||||
|
log.error("token已失效，url:{}",request.getRequestURI()); |
||||
|
throw new GlobalException(ResultCode.INVALID_TOKEN); |
||||
|
} |
||||
|
// 存放session
|
||||
|
String strJson = JwtUtil.getInfo(token); |
||||
|
UserSession userSession = JSON.parseObject(strJson,UserSession.class); |
||||
|
request.setAttribute("session",userSession); |
||||
|
return true; |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,80 @@ |
|||||
|
package com.bx.implatform.util; |
||||
|
|
||||
|
import com.auth0.jwt.JWT; |
||||
|
import com.auth0.jwt.JWTVerifier; |
||||
|
import com.auth0.jwt.algorithms.Algorithm; |
||||
|
import com.auth0.jwt.exceptions.JWTDecodeException; |
||||
|
import java.util.Date; |
||||
|
|
||||
|
|
||||
|
public class JwtUtil { |
||||
|
|
||||
|
/** |
||||
|
* 生成jwt字符串，30分钟后过期 JWT(json web token) |
||||
|
* @param userId |
||||
|
* @param info |
||||
|
* @param expireIn |
||||
|
* @param secret |
||||
|
* @return |
||||
|
* */ |
||||
|
public static String sign(Long userId, String info,long expireIn,String secret) { |
||||
|
try { |
||||
|
Date date = new Date(System.currentTimeMillis() + expireIn*1000); |
||||
|
Algorithm algorithm = Algorithm.HMAC256(secret); |
||||
|
return JWT.create() |
||||
|
//将userId保存到token里面
|
||||
|
.withAudience(userId.toString()) |
||||
|
//存放自定义数据
|
||||
|
.withClaim("info", info) |
||||
|
//五分钟后token过期
|
||||
|
.withExpiresAt(date) |
||||
|
//token的密钥
|
||||
|
.sign(algorithm); |
||||
|
} catch (Exception e) { |
||||
|
e.printStackTrace(); |
||||
|
return null; |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
/** |
||||
|
* 根据token获取userId |
||||
|
* @param token |
||||
|
* @return |
||||
|
* */ |
||||
|
public static Long getUserId(String token) { |
||||
|
try { |
||||
|
String userId = JWT.decode(token).getAudience().get(0); |
||||
|
return Long.parseLong(userId); |
||||
|
}catch (JWTDecodeException e) { |
||||
|
return null; |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
/** |
||||
|
* 根据token获取自定义数据info |
||||
|
* @param token |
||||
|
* @return |
||||
|
* */ |
||||
|
public static String getInfo(String token) { |
||||
|
try { |
||||
|
return JWT.decode(token).getClaim("info").asString(); |
||||
|
}catch (JWTDecodeException e) { |
||||
|
return null; |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
/** |
||||
|
* 校验token |
||||
|
* @param token |
||||
|
* @param secret |
||||
|
* @return |
||||
|
* */ |
||||
|
public static boolean checkSign(String token,String secret) { |
||||
|
Algorithm algorithm = Algorithm.HMAC256(secret); |
||||
|
JWTVerifier verifier = JWT.require(algorithm) |
||||
|
//.withClaim("username, username)
|
||||
|
.build(); |
||||
|
verifier.verify(token); |
||||
|
return true; |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,22 @@ |
|||||
|
package com.bx.implatform.vo; |
||||
|
|
||||
|
import io.swagger.annotations.ApiModel; |
||||
|
import io.swagger.annotations.ApiModelProperty; |
||||
|
import lombok.Data; |
||||
|
|
||||
|
@Data |
||||
|
@ApiModel("用户登录VO") |
||||
|
public class LoginVO { |
||||
|
|
||||
|
@ApiModelProperty(value = "每次请求都必须在header中携带accessToken") |
||||
|
private String accessToken; |
||||
|
|
||||
|
@ApiModelProperty(value = "accessToken过期时间(秒)") |
||||
|
private Integer accessTokenExpiresIn; |
||||
|
|
||||
|
@ApiModelProperty(value = "accessToken过期后，通过refreshToken换取新的token") |
||||
|
private String refreshToken; |
||||
|
|
||||
|
@ApiModelProperty(value = "refreshToken过期时间(秒)") |
||||
|
private Integer refreshTokenExpiresIn; |
||||
|
} |
||||
Loading…
Reference in new issue