Spring cloud gateway+JWT+服务间鉴权实战

梦里梦外; 2021-07-25 00:23 619阅读 0赞

**一 代码位置**

[https://github.com/cakin24/spring-cloud-code/tree/master/ch][https_github.com_cakin24_spring-cloud-code_tree_master_ch]15-1

**二 流程**

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70][]

**三 测试**

1 启动 eureka-service

2 启动 gateway

3 启动 client-service

4 启动 provider-service

5 测试设计

代码中写死了3个用户：admin（具有client-service和provider-service访问权限），spring（具有client-service访问权限），cloud（无任何权限）

6 用一个不存在的用户abc进行测试

6.1 获取token： postman调用： localhost:9001/getToken/abc

token如下：

Bearer eyJhbGciOiJIUzUxMiJ9.eyJpZCI6ODMzMDI5MTgxLCJ1c2VyIjoiYWJjIn0.-5o9G5fR3knrjq-xTYhZdKPLztJpnTyP7WwSzWsEUYn5rURGuBjvz8qzdD97FGXjt70NRNO1a3_ipFIL8-pvfg

6.2 访问client-service的 /test

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 1][]

7 用cloud用户进行测试

7.1 获取token： postman调用： localhost:9001/getToken/cloud

token如下

Bearer eyJhbGciOiJIUzUxMiJ9.eyJpZCI6LTg2NzQwMDY5MSwidXNlciI6ImNsb3VkIn0.IX0JJCiL1oODrfE_W4uA1scdYq7zWWDTp3sJlr-_KlOKl0BKe3N8n6ARdELeDXoKyXjXJVUZhTYSr0nZ1bSHOQ

7.2 访问client-service的 /test

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 2][]

8 用spring用户进行测试

8.1 获取token：postman调用： localhost:9001/getToken/spring

token如下

Bearer eyJhbGciOiJIUzUxMiJ9.eyJpZCI6LTIwNjgzMjM5MiwidXNlciI6InNwcmluZyJ9.LRWHzPvprHMDfpg3BZTeM9lGwjZb-Mvd-wTSHiUbRZCDwrM_YMj7ln_OK4ZX0Bs6y7E4bJeE3KBraMG8ZAAttg

8.2 访问client-service的 /test

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 3][]

8.3 访问client-service的 / accessProvider

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 4][]

9 用admin用户进行测试

9.1 获取token：postman调用： localhost:9001/getToken/admin

token如下

Bearer eyJhbGciOiJIUzUxMiJ9.eyJpZCI6NzE1Njg3MDU0LCJ1c2VyIjoiYWRtaW4ifQ.lQ4gO-MGbg3OV-8uW9FXcOK7iX4VoxOflMPRg1FTxQywe17lv_RWlLl73_G8GiEkDsSBrjCUk5ItaWM6410Dnw

9.2 访问 client-service的 / accessProvider

权限通过。

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 5][]

[https_github.com_cakin24_spring-cloud-code_tree_master_ch]: https://github.com/cakin24/spring-cloud-code/tree/master/ch6-1
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70]: /images/20210724/f276f6baa1da460aaf5e9f0d2987e162.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 1]: /images/20210724/0da343a12a4a499886d84ef14c3a3530.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 2]: /images/20210724/d46063abcd6343438556b6d14cb0f136.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 3]: /images/20210724/462d570aee6347a892d664302a800729.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 4]: /images/20210724/6435067e653a4004949e997f0f784060.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 5]: /images/20210724/92d6017bfaf542d682e1fd6d0fbef2f4.png