自定义注解鉴权

秒速五厘米 2023-09-28 22:27 159阅读 0赞

## 自定义注解鉴权 ##

> 编写注解

@Documented
    @Retention(RetentionPolicy.RUNTIME)
    @Target(value = ElementType.METHOD)
    public @interface BlogAuthentication {
        
    
        String[] value();
    
    }

> 编写配置拦截规则

@Component
    public class WebConfig implements WebMvcConfigurer {
        
    
        @Override
        public void addCorsMappings(CorsRegistry registry) {
        
            registry.addMapping("/**")
                    .allowedOriginPatterns("*")
                    .allowedHeaders("*")
                    .allowedMethods("GET", "POST", "DELETE", "PUT")
                    .allowCredentials(true)
                    .maxAge(3600);
        }
    
        @Override
        public void addInterceptors(InterceptorRegistry registry) {
        
            // 添加放行的路径
            String[] addPath = {
        "/**"};
            String[] excludePath = {
        "/user/login",
                    "/static/**","/css/*.css",
                    "/fonts/**","*.html","/*.html","*.ico","/*.ico/",
                    "/js/**","/img/**","/*.ico","/*.css","/images/**"
            };
            registry.addInterceptor(new BlogConfig()).addPathPatterns(addPath).excludePathPatterns(excludePath);
        }
    
    
        private CorsConfiguration buildConfig() {
        
            CorsConfiguration corsConfiguration = new CorsConfiguration();
            corsConfiguration.addAllowedOrigin("*");
            corsConfiguration.addAllowedHeader("*");
            corsConfiguration.addAllowedMethod("*");
            corsConfiguration.addExposedHeader("token");
            return corsConfiguration;
        }
    
        @Bean
        public CorsFilter corsFilter() {
        
            UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
            source.registerCorsConfiguration("/**", buildConfig());
            return new CorsFilter(source);
        }
    }

> 开始鉴权

@Component
    @Slf4j
    public class BlogConfig  implements HandlerInterceptor {
        
    
    
        @Override
        public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        
            String token = request.getHeader("token");
            Map<String,Object> infoMap = new HashMap<>();
            boolean state = false;
            try{
        
                //token验证
                DecodedJWT tokenInfo = JwtUtil.getTokenInfo(token);
                String userId = tokenInfo.getClaim("userId").asString();
                BlogUserServiceImpl blogUserService = InterceptorBeanUtil.getBean(BlogUserServiceImpl.class, request);
                BlogUser blogUser = blogUserService.getById(userId);
                // 鉴权
                state = authentication(infoMap,blogUser,handler,blogUserService);
            }catch (SignatureVerificationException e){
        
                e.printStackTrace();
                infoMap.put("code", BlogResult.ERROR);
                infoMap.put("msg","网站签名验证异常");
            }catch (TokenExpiredException e){
        
                infoMap.put("code", BlogResult.ERROR);
                infoMap.put("msg","token已过期");
            }catch (AlgorithmMismatchException e){
        
                infoMap.put("code", BlogResult.ERROR);
                infoMap.put("msg","算法不一致");
            }catch (Exception e){
        
                infoMap.put("code", BlogResult.ERROR);
                infoMap.put("msg","程序异常");
            }
            if (state){
        
                return true;
            }else {
        
                response.setCharacterEncoding("UTF-8");
                response.setContentType("application/json; charset=utf-8");
                PrintWriter out = response.getWriter();
                out.write(JSONUtil.parse(infoMap).toString());
                out.flush();
                out.close();
                return false;
            }
        }
    
    
        private boolean authentication(Map<String,Object> infoMap, BlogUser blogUser, Object handler,BlogUserServiceImpl blogUserService){
        
            //添加返回信息
            if (handler instanceof HandlerMethod){
        
                HandlerMethod method = (HandlerMethod) handler;
                BlogAuthentication methodAnnotation = method.getMethodAnnotation(BlogAuthentication.class);
    
                if (blogUser.getUserType() == 1){
        
                    if (blogUser.getSurvivalTime().getTime() < new Date().getTime()) {
        
                        blogUserService.lambdaUpdate().set(BlogUser::getUserStatus,2).eq(BlogUser::getUid,blogUser.getUid()).update();
                        infoMap.put("code", BlogResult.USER_ERROR);
                        infoMap.put("msg","当前卡密已失效");
                        return false;
                    }
                }
    
                // 禁用和失效
                if (blogUser.getUserStatus() == 0){
        
                    infoMap.put("code", BlogResult.ERROR);
                    infoMap.put("msg","当前卡密已禁用");
                    return false;
                }
                if (blogUser.getUserStatus() == 2){
        
                    infoMap.put("code", BlogResult.ERROR);
                    infoMap.put("msg","当前卡密已失效");
                    return false;
                }
    
                if (methodAnnotation == null){
        
                    // 没有当前注解则都可以访问
                    infoMap.put("code", BlogResult.SUCCESS_CODE);
                    infoMap.put("msg","验证成功");
                    return true;
                }else {
        
                    // userType = 0
                    Integer userType = blogUser.getUserType();
                    boolean contains = Arrays.stream(methodAnnotation.value()).collect(Collectors.toList()).contains(String.valueOf(userType));
                    if (contains){
        
                        infoMap.put("code", BlogResult.SUCCESS_CODE);
                        infoMap.put("msg","验证成功");
                        return true;
                    }else {
        
                        infoMap.put("code", BlogResult.ERROR);
                        infoMap.put("msg","当前卡密权限不足");
                        return false;
                    }
                }
            }
            return false;
        }
    
    }

> 工具类

public class InterceptorBeanUtil<T> {
        
    
    
        public static <T> T getBean(Class<T> cls, HttpServletRequest request){
        
            WebApplicationContext applicationContext = WebApplicationContextUtils.getRequiredWebApplicationContext(request.getServletContext());
            return applicationContext.getBean(cls);
        }
    
    }

public class JwtUtil {
        
    
        //properties
        private static final String SIGN="asd0asdkak~dasdkaowppaldpw;-dlak";
    
        public static String genereteToken(Map<String,String> mapinfo){
        
            Calendar instance = Calendar.getInstance();
            //有效期为24小时
            instance.add(Calendar.MINUTE,60*24);
            //map用户存储claim——声明的信息
            Map<String,Object> map=new HashMap<>();
            //生成token
            JWTCreator.Builder builder = JWT.create();
            //添加payload
            mapinfo.forEach((k,v)->{
        
                builder.withClaim(k,v);
            });
            //指定令牌过期时间
            builder.withExpiresAt(instance.getTime());
            //指定算法-生成token
            String token = builder.sign(Algorithm.HMAC256(SIGN));
            return token;
        }
    
        /**
         * 验证token的合法性
         * @param token token令牌值
         * throw 抛出异常-表示验证失败
         */
        public synchronized static void decodeToken(String token){
        
            JWT.require(Algorithm.HMAC256(SIGN)).build().verify(token);
        }
    
        /**
         * 获取token信息的方法
         * @param token token令牌值
         * @return DecodedJWT对象
         * throw 抛出异常-表示验证失败
         */
        public synchronized static DecodedJWT getTokenInfo(String token){
        
            DecodedJWT decodedJWT = JWT.require(Algorithm.HMAC256(SIGN)).build().verify(token);
            return decodedJWT;
        }
    
        public static String getUserId(HttpServletRequest request){
        
            String token = request.getHeader("token");
            return getTokenInfo(token).getClaim("userId").asString();
        }
    
    }