java restful token_restful风格请求,基于token鉴权实例

╰+哭是因爲堅強的太久メ 2022-11-12 02:41 160阅读 0赞

点赞再看，养成习惯

开发环境：

jdk 8

intellij idea

maven 3.6

所用技术：

springboot

restful

项目介绍

基于restful风格做的设计实例，即可jwt做token效验，实现增删查改,同时搭配自定义注解，方便过滤token验证

自定义注解

1.需要做验证的注解

@Target(\{ElementType.METHOD, ElementType.TYPE\})

@Retention(RetentionPolicy.RUNTIME)

public @interface UserLoginToken \{

boolean required() default true;

//Interceptor类(AuthenticationInterceptor)代码

public boolean preHandle(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object object) throws Exception \{

String token = httpServletRequest.getHeader("token");// 从 http 请求头中取出 token

// 如果不是映射到方法直接通过

if(!(object instanceof HandlerMethod))\{

return true;

HandlerMethod handlerMethod=(HandlerMethod)object;

Method method=handlerMethod.getMethod();

//检查是否有passtoken注释，有则跳过认证

if (method.isAnnotationPresent(PassToken.class)) \{

PassToken passToken = method.getAnnotation(PassToken.class);

if (passToken.required()) \{

return true;

//检查有没有需要用户权限的注解

if (method.isAnnotationPresent(UserLoginToken.class)) \{

UserLoginToken userLoginToken = method.getAnnotation(UserLoginToken.class);

if (userLoginToken.required()) \{

// 执行认证

if (token == null) \{

throw new RuntimeException("无token，请重新登录");

// 获取 token 中的 user id

String userId;

try \{

userId = JWT.decode(token).getAudience().get(0);

\} catch (JWTDecodeException j) \{

throw new RuntimeException("token error");

String user = jedis.get(userId);

if (user == null) \{

throw new RuntimeException("用户不存在，请重新登录");

// 验证 token

JSONObject jsonObject1=JSONObject.parseObject(user);

JWTVerifier jwtVerifier = JWT.require(Algorithm.HMAC256(jsonObject1.getString("planType"))).build();

try \{

jwtVerifier.verify(token);

\} catch (JWTVerificationException e) \{

throw new RuntimeException("token error");

return true;

项目结构

请求列表图片

![dfda32d40ab636fd2ee56bc927d82d39.png][]

项目结构图片

![d8998ae7a84511f188231e67f3fd3171.png][]

运行效果

token 获取

![a2d0becb5ca5230c87e08f8d675c07fc.png][]

@GetMapping("/token")

public JSONObject token(HttpServletResponse response )\{

Date timeOut=DateUtil.offsetMinute(new Date(),time);//过期时间

JSONObject jsonObject=new JSONObject();

String usecase = new JWTController().getFile("usecase.json");

JSONObject jsonObject1=JSONObject.parseObject(usecase);

String token=JWT.create().withExpiresAt(timeOut).withAudience(jsonObject1.getString("objectId"))

.sign(Algorithm.HMAC256(jsonObject1.getString("planType")));

response.setStatus(200);

jsonObject.put("token", token);

jedis.set(jsonObject1.getString("objectId"), usecase);

return jsonObject;

验证token

![7fcfb606851c9cf6beb631d8dd3d316b.png][]

//主要@UserLoginToken发挥验证作用，否则验证成功

@UserLoginToken

@GetMapping("/authToken")

public String getMessage()\{

return "身份验证成功 ";

get 请求

![2a33d853fdf8bf1e9099a9779c0c49cc.png][]

@UserLoginToken

@GetMapping(value="/plan/\{id\}")

public String getPlan(@PathVariable String id, HttpServletResponse response) \{

jedis.connect();

if (jedis.get(id) == null) \{

response.setStatus(404);

return "No such record";

response.setStatus(200);

return jedis.get(id);

post 请求

![080a1c983f4c849348ee669545202f61.png][]

@UserLoginToken

@ResponseBody

@PostMapping(path="/plan")

public String addPlan(@RequestBody JSONObject jsonObject, HttpServletResponse response) throws IOException, ProcessingException \{

String data = jsonObject.toString();

Boolean jsonValidity = Validator.isJSONValid(data);

if(jsonValidity) \{

String uuid = UUID.randomUUID().toString();

jedis.set(uuid, data);

return "Create Success" + "\\n" + uuid;

else \{

response.setStatus(400);

return "JSON Schema not valid!";

delete 请求

![ce69061060b86c4f85bded1af44435a8.png][]

@UserLoginToken

@DeleteMapping(value="/plan/\{id\}")

public String deletePlan(@PathVariable String id, HttpServletResponse response) \{

jedis.connect();

if (jedis.get(id) == null) \{

response.setStatus(404);

return "No such record";

jedis.del(id);

response.setStatus(200);

return "Deleted Success" + "\\n" + id;

patch 请求

![028e459924b2f3a78eab8099897e0191.png][]

@UserLoginToken

@PatchMapping(value="/plan/\{id\}")

public String patchPlan(@RequestBody JSONObject jsonObject, @PathVariable String id, HttpServletResponse response) \{

jedis.connect();

if (jedis.get(id) == null) \{

response.setStatus(404);

return "No such record";

String data = jsonObject.toString();

String redisDate=jedis.get(id);

Map redisData=JSONUtil.toBean(redisDate,Map.class);

Map map=JSONUtil.toBean(data,Map.class);

for(Object o:map.keySet())\{

redisData.put(o,map.get(o));

jedis.set(id, JSONUtil.toJsonStr(redisData));

response.setStatus(200);

return "Patched Success" + "\\n" + id;

put 请求

![aa95c9f0fe448ee0e83544f01822406c.png][]

@UserLoginToken

@PutMapping(value="/plan/\{id\}")

public String updatePlan(@RequestBody JSONObject jsonObject, @PathVariable String id, HttpServletResponse response) throws IOException, ProcessingException \{

jedis.connect();

if (jedis.get(id) == null) \{

response.setStatus(404);

return "No such record";

String data = jsonObject.toString();

if(Validator.isJSONValid(data)) \{

jedis.set(id, data);

response.setStatus(200);

return "Updated Success" + "\\n" + id;

else \{

response.setStatus(400);

return "Invalid JSON!";

项目总结

restful 结合jwt做token效验，所有请求的token放入headers中

项目还加入schema.json，Json Schema就是用来定义json数据约束的一个标准

其他有更好的简洁操作习惯，希望留言交流

程序有问题找程序帮

[dfda32d40ab636fd2ee56bc927d82d39.png]: /images/20221022/8250518ba5134c1abe79c8d4fca73312.png
[d8998ae7a84511f188231e67f3fd3171.png]: https://img-blog.csdnimg.cn/img_convert/d8998ae7a84511f188231e67f3fd3171.png
[a2d0becb5ca5230c87e08f8d675c07fc.png]: https://img-blog.csdnimg.cn/img_convert/a2d0becb5ca5230c87e08f8d675c07fc.png
[7fcfb606851c9cf6beb631d8dd3d316b.png]: https://img-blog.csdnimg.cn/img_convert/7fcfb606851c9cf6beb631d8dd3d316b.png
[2a33d853fdf8bf1e9099a9779c0c49cc.png]: https://img-blog.csdnimg.cn/img_convert/2a33d853fdf8bf1e9099a9779c0c49cc.png
[080a1c983f4c849348ee669545202f61.png]: https://img-blog.csdnimg.cn/img_convert/080a1c983f4c849348ee669545202f61.png
[ce69061060b86c4f85bded1af44435a8.png]: https://img-blog.csdnimg.cn/img_convert/ce69061060b86c4f85bded1af44435a8.png
[028e459924b2f3a78eab8099897e0191.png]: https://img-blog.csdnimg.cn/img_convert/028e459924b2f3a78eab8099897e0191.png
[aa95c9f0fe448ee0e83544f01822406c.png]: https://img-blog.csdnimg.cn/img_convert/aa95c9f0fe448ee0e83544f01822406c.png