parent
148e0318f1
commit
2c8c6c2d87
15 changed files with 594 additions and 68 deletions
@ -0,0 +1,51 @@ |
||||
package cc.bnblogs.springdatajpa.config; |
||||
|
||||
import cc.bnblogs.springdatajpa.config.filter.JwtAuthenticationTokenFilter; |
||||
import org.springframework.beans.factory.annotation.Autowired; |
||||
import org.springframework.context.annotation.Bean; |
||||
import org.springframework.context.annotation.Configuration; |
||||
import org.springframework.http.HttpMethod; |
||||
import org.springframework.security.authentication.AuthenticationManager; |
||||
import org.springframework.security.config.annotation.web.builders.HttpSecurity; |
||||
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; |
||||
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; |
||||
import org.springframework.security.config.http.SessionCreationPolicy; |
||||
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; |
||||
import org.springframework.security.crypto.password.PasswordEncoder; |
||||
import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter; |
||||
|
||||
/** |
||||
* @description: |
||||
* @author: zfp@bnblogs.cc |
||||
* @date: 2023/3/8 17:06 |
||||
*/ |
||||
@Configuration |
||||
@EnableWebSecurity |
||||
public class SecurityConfig extends WebSecurityConfigurerAdapter { |
||||
@Autowired |
||||
private JwtAuthenticationTokenFilter jwtAuthenticationTokenFilter; |
||||
|
||||
@Bean |
||||
public PasswordEncoder passwordEncoder() { |
||||
return new BCryptPasswordEncoder(); |
||||
} |
||||
|
||||
@Bean |
||||
@Override |
||||
public AuthenticationManager authenticationManagerBean() throws Exception { |
||||
return super.authenticationManagerBean(); |
||||
} |
||||
|
||||
@Override |
||||
protected void configure(HttpSecurity http) throws Exception { |
||||
http.csrf().disable() |
||||
.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS) |
||||
.and() |
||||
.authorizeRequests() |
||||
.antMatchers("/user/account/token/", "/user/account/register/").permitAll() |
||||
.antMatchers(HttpMethod.OPTIONS).permitAll() |
||||
.anyRequest().authenticated(); |
||||
|
||||
http.addFilterBefore(jwtAuthenticationTokenFilter, UsernamePasswordAuthenticationFilter.class); |
||||
} |
||||
} |
||||
@ -0,0 +1,61 @@ |
||||
package cc.bnblogs.springdatajpa.config.filter; |
||||
|
||||
import cc.bnblogs.springdatajpa.mapper.UserMapper; |
||||
import cc.bnblogs.springdatajpa.pojo.User; |
||||
import cc.bnblogs.springdatajpa.service.impl.security.UserDetailsImpl; |
||||
import cc.bnblogs.springdatajpa.utils.JwtUtil; |
||||
import com.sun.istack.internal.NotNull; |
||||
import io.jsonwebtoken.Claims; |
||||
import org.springframework.beans.factory.annotation.Autowired; |
||||
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; |
||||
import org.springframework.security.core.context.SecurityContextHolder; |
||||
import org.springframework.stereotype.Component; |
||||
import org.springframework.util.StringUtils; |
||||
import org.springframework.web.filter.OncePerRequestFilter; |
||||
|
||||
import javax.servlet.FilterChain; |
||||
import javax.servlet.ServletException; |
||||
import javax.servlet.http.HttpServletRequest; |
||||
import javax.servlet.http.HttpServletResponse; |
||||
import java.io.IOException; |
||||
|
||||
@Component |
||||
public class JwtAuthenticationTokenFilter extends OncePerRequestFilter { |
||||
@Autowired |
||||
private UserMapper userMapper; |
||||
|
||||
@Override |
||||
protected void doFilterInternal(HttpServletRequest request, @NotNull HttpServletResponse response, @NotNull FilterChain filterChain) throws ServletException, IOException { |
||||
String token = request.getHeader("Authorization"); |
||||
|
||||
if (!StringUtils.hasText(token) || !token.startsWith("Bearer ")) { |
||||
filterChain.doFilter(request, response); |
||||
return; |
||||
} |
||||
|
||||
token = token.substring(7); |
||||
|
||||
String userid; |
||||
try { |
||||
Claims claims = JwtUtil.parseJWT(token); |
||||
userid = claims.getSubject(); |
||||
} catch (Exception e) { |
||||
throw new RuntimeException(e); |
||||
} |
||||
// 这里不同的ORM实现可能不同，这里用的是JPA
|
||||
// 就是根据用户id获取user
|
||||
User user = userMapper.findUserById(Integer.parseInt(userid)); |
||||
|
||||
if (user == null) { |
||||
throw new RuntimeException("用户名未登录"); |
||||
} |
||||
|
||||
UserDetailsImpl loginUser = new UserDetailsImpl(user); |
||||
UsernamePasswordAuthenticationToken authenticationToken = |
||||
new UsernamePasswordAuthenticationToken(loginUser, null, null); |
||||
|
||||
SecurityContextHolder.getContext().setAuthentication(authenticationToken); |
||||
|
||||
filterChain.doFilter(request, response); |
||||
} |
||||
} |
||||
@ -0,0 +1,30 @@ |
||||
package cc.bnblogs.springdatajpa.service.impl.security; |
||||
|
||||
import cc.bnblogs.springdatajpa.mapper.UserMapper; |
||||
import cc.bnblogs.springdatajpa.pojo.User; |
||||
import org.springframework.beans.factory.annotation.Autowired; |
||||
import org.springframework.security.core.userdetails.UserDetails; |
||||
import org.springframework.security.core.userdetails.UserDetailsService; |
||||
import org.springframework.security.core.userdetails.UsernameNotFoundException; |
||||
import org.springframework.stereotype.Service; |
||||
|
||||
/** |
||||
* @description: |
||||
* @author: zfp@bnblogs.cc |
||||
* @date: 2023/3/8 17:42 |
||||
*/ |
||||
|
||||
@Service |
||||
public class UserDetailServiceImpl implements UserDetailsService { |
||||
|
||||
@Autowired |
||||
private UserMapper userMapper; |
||||
@Override |
||||
public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { |
||||
User user = userMapper.getUserByName(username); |
||||
if (user==null) { |
||||
throw new RuntimeException("用户不存在"); |
||||
} |
||||
return new UserDetailsImpl(user); |
||||
} |
||||
} |
||||
@ -0,0 +1,56 @@ |
||||
package cc.bnblogs.springdatajpa.service.impl.security; |
||||
|
||||
import cc.bnblogs.springdatajpa.pojo.User; |
||||
import lombok.AllArgsConstructor; |
||||
import lombok.Data; |
||||
import org.springframework.security.core.GrantedAuthority; |
||||
import org.springframework.security.core.userdetails.UserDetails; |
||||
|
||||
import java.util.Collection; |
||||
|
||||
/** |
||||
* @description: |
||||
* @author: zfp@bnblogs.cc |
||||
* @date: 2023/3/8 17:51 |
||||
*/ |
||||
@Data |
||||
@AllArgsConstructor |
||||
public class UserDetailsImpl implements UserDetails { |
||||
|
||||
private User user; |
||||
@Override |
||||
public Collection<? extends GrantedAuthority> getAuthorities() { |
||||
return null; |
||||
} |
||||
|
||||
@Override |
||||
public String getPassword() { |
||||
return user.getPassword(); |
||||
} |
||||
|
||||
@Override |
||||
public String getUsername() { |
||||
return user.getName(); |
||||
} |
||||
|
||||
@Override |
||||
public boolean isAccountNonExpired() { |
||||
return true; |
||||
} |
||||
|
||||
@Override |
||||
public boolean isAccountNonLocked() { |
||||
return true; |
||||
} |
||||
|
||||
@Override |
||||
public boolean isCredentialsNonExpired() { |
||||
return true; |
||||
} |
||||
|
||||
@Override |
||||
public boolean isEnabled() { |
||||
return true; |
||||
} |
||||
|
||||
} |
||||
@ -0,0 +1,39 @@ |
||||
package cc.bnblogs.springdatajpa.service.impl.user; |
||||
|
||||
import cc.bnblogs.springdatajpa.pojo.User; |
||||
import cc.bnblogs.springdatajpa.service.impl.security.UserDetailsImpl; |
||||
import cc.bnblogs.springdatajpa.utils.JwtUtil; |
||||
import org.springframework.beans.factory.annotation.Autowired; |
||||
import org.springframework.security.authentication.AuthenticationManager; |
||||
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; |
||||
import org.springframework.security.core.Authentication; |
||||
import org.springframework.stereotype.Service; |
||||
|
||||
import java.util.HashMap; |
||||
import java.util.Map; |
||||
|
||||
/** |
||||
* @description: 根据用户名和密码返回一个jwt_token |
||||
* @author: zfp@bnblogs.cc |
||||
* @date: 2023/3/8 21:34 |
||||
*/ |
||||
@Service |
||||
public class LoginServiceImpl { |
||||
@Autowired |
||||
private AuthenticationManager authenticationManager; |
||||
|
||||
public Map<String, String> getToken(String username, String password) { |
||||
UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(username, password); |
||||
|
||||
Authentication authenticate = authenticationManager.authenticate(authenticationToken); |
||||
UserDetailsImpl loginUser = (UserDetailsImpl) authenticate.getPrincipal(); |
||||
User user = loginUser.getUser(); |
||||
String jwt = JwtUtil.createJWT(user.getId().toString()); |
||||
|
||||
Map<String, String> map = new HashMap<>(); |
||||
map.put("error_message", "success"); |
||||
map.put("token", jwt); |
||||
|
||||
return map; |
||||
} |
||||
} |
||||
@ -0,0 +1,87 @@ |
||||
package cc.bnblogs.springdatajpa.service.impl.user; |
||||
|
||||
import cc.bnblogs.springdatajpa.mapper.UserMapper; |
||||
import cc.bnblogs.springdatajpa.pojo.User; |
||||
import org.springframework.beans.factory.annotation.Autowired; |
||||
import org.springframework.security.crypto.password.PasswordEncoder; |
||||
import org.springframework.stereotype.Service; |
||||
|
||||
import java.util.HashMap; |
||||
import java.util.Map; |
||||
|
||||
/** |
||||
* @description: 用户注册 |
||||
* @author: zfp@bnblogs.cc |
||||
* @date: 2023/3/8 22:12 |
||||
*/ |
||||
@Service |
||||
public class RegisterServiceImpl { |
||||
|
||||
@Autowired |
||||
private UserMapper userMapper; |
||||
|
||||
@Autowired |
||||
private PasswordEncoder passwordEncoder; |
||||
|
||||
public Map<String, String> register(String username, String password, String confirmedPassword) { |
||||
Map<String, String> map = new HashMap<>(); |
||||
if (username == null) { |
||||
map.put("error_message", "用户名不能为空"); |
||||
return map; |
||||
} |
||||
|
||||
if (password == null || confirmedPassword == null) { |
||||
map.put("error_message", "密码不能为空"); |
||||
return map; |
||||
} |
||||
//删除首尾的空白字符
|
||||
username = username.trim(); |
||||
if (username.length() == 0) { |
||||
map.put("error_message", "用户名不能为空"); |
||||
return map; |
||||
} |
||||
|
||||
if (password.length() == 0 || confirmedPassword.length() == 0) { |
||||
map.put("error_message", "密码不能为空"); |
||||
return map; |
||||
} |
||||
|
||||
if (username.length() > 100) { |
||||
map.put("error_message", "用户名长度不能大于100"); |
||||
return map; |
||||
} |
||||
|
||||
if (password.length() > 100 || confirmedPassword.length() > 100) { |
||||
map.put("error_message", "密码不能大于100"); |
||||
return map; |
||||
} |
||||
|
||||
if (!password.equals(confirmedPassword)) { |
||||
map.put("error_message", "两次输入的密码不一致"); |
||||
return map; |
||||
} |
||||
|
||||
//查询用户名是否重复
|
||||
|
||||
User user = userMapper.getUserByName(username); |
||||
|
||||
if (user != null) { |
||||
map.put("error_message", "用户名已存在"); |
||||
return map; |
||||
} |
||||
|
||||
// 添加一个新用户
|
||||
String encodedPassword = passwordEncoder.encode(password); |
||||
|
||||
User u = new User(); |
||||
u.setName(username); |
||||
u.setAge(18); |
||||
u.setEmail("xxxxx"); |
||||
u.setPassword(encodedPassword); |
||||
userMapper.save(u); |
||||
|
||||
map.put("error_message", "success"); |
||||
return map; |
||||
} |
||||
} |
||||
|
||||
@ -0,0 +1,36 @@ |
||||
package cc.bnblogs.springdatajpa.service.impl.user; |
||||
|
||||
import cc.bnblogs.springdatajpa.pojo.User; |
||||
import cc.bnblogs.springdatajpa.service.impl.security.UserDetailsImpl; |
||||
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; |
||||
import org.springframework.security.core.context.SecurityContextHolder; |
||||
import org.springframework.stereotype.Service; |
||||
|
||||
import java.util.HashMap; |
||||
import java.util.Map; |
||||
|
||||
/** |
||||
* @description: 用户信息 |
||||
* @author: zfp@bnblogs.cc |
||||
* @date: 2023/3/8 22:12 |
||||
*/ |
||||
@Service |
||||
public class UserInfoServiceImpl { |
||||
|
||||
/** |
||||
* 根据token返回用户信息 |
||||
* @return map存储的信息 |
||||
*/ |
||||
public Map<String, String> getInfo() { |
||||
UsernamePasswordAuthenticationToken authentication = (UsernamePasswordAuthenticationToken) SecurityContextHolder.getContext().getAuthentication(); |
||||
|
||||
UserDetailsImpl loginUser = (UserDetailsImpl) authentication.getPrincipal(); |
||||
User user = loginUser.getUser(); |
||||
|
||||
Map<String, String> map = new HashMap<>(); |
||||
map.put("error_message", "success"); |
||||
map.put("id", user.getId().toString()); |
||||
map.put("name", user.getName()); |
||||
return map; |
||||
} |
||||
} |
||||
@ -0,0 +1,68 @@ |
||||
package cc.bnblogs.springdatajpa.utils; |
||||
|
||||
/** |
||||
* @description: |
||||
* @author: zfp@bnblogs.cc |
||||
* @date: 2023/3/8 20:33 |
||||
*/ |
||||
|
||||
import io.jsonwebtoken.Claims; |
||||
import io.jsonwebtoken.JwtBuilder; |
||||
import io.jsonwebtoken.Jwts; |
||||
import io.jsonwebtoken.SignatureAlgorithm; |
||||
import org.springframework.stereotype.Component; |
||||
|
||||
import javax.crypto.SecretKey; |
||||
import javax.crypto.spec.SecretKeySpec; |
||||
import java.util.Base64; |
||||
import java.util.Date; |
||||
import java.util.UUID; |
||||
|
||||
@Component |
||||
public class JwtUtil { |
||||
public static final long JWT_TTL = 60 * 60 * 1000L * 24 * 14; // 有效期14天
|
||||
public static final String JWT_KEY = "SDFGjhdsfalshdfHFdsjkdsfds121232131afasdfac"; |
||||
|
||||
public static String getUUID() { |
||||
return UUID.randomUUID().toString().replaceAll("-", ""); |
||||
} |
||||
|
||||
public static String createJWT(String subject) { |
||||
JwtBuilder builder = getJwtBuilder(subject, null, getUUID()); |
||||
return builder.compact(); |
||||
} |
||||
|
||||
private static JwtBuilder getJwtBuilder(String subject, Long ttlMillis, String uuid) { |
||||
SignatureAlgorithm signatureAlgorithm = SignatureAlgorithm.HS256; |
||||
SecretKey secretKey = generalKey(); |
||||
long nowMillis = System.currentTimeMillis(); |
||||
Date now = new Date(nowMillis); |
||||
if (ttlMillis == null) { |
||||
ttlMillis = JwtUtil.JWT_TTL; |
||||
} |
||||
|
||||
long expMillis = nowMillis + ttlMillis; |
||||
Date expDate = new Date(expMillis); |
||||
return Jwts.builder() |
||||
.setId(uuid) |
||||
.setSubject(subject) |
||||
.setIssuer("sg") |
||||
.setIssuedAt(now) |
||||
.signWith(signatureAlgorithm, secretKey) |
||||
.setExpiration(expDate); |
||||
} |
||||
|
||||
public static SecretKey generalKey() { |
||||
byte[] encodeKey = Base64.getDecoder().decode(JwtUtil.JWT_KEY); |
||||
return new SecretKeySpec(encodeKey, 0, encodeKey.length, "HmacSHA256"); |
||||
} |
||||
|
||||
public static Claims parseJWT(String jwt) throws Exception { |
||||
SecretKey secretKey = generalKey(); |
||||
return Jwts.parserBuilder() |
||||
.setSigningKey(secretKey) |
||||
.build() |
||||
.parseClaimsJws(jwt) |
||||
.getBody(); |
||||
} |
||||
} |
||||
@ -0,0 +1,35 @@ |
||||
package cc.bnblogs.springdatajpa.config; |
||||
|
||||
import org.junit.jupiter.api.Test; |
||||
import org.springframework.boot.test.context.SpringBootTest; |
||||
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; |
||||
import org.springframework.security.crypto.password.PasswordEncoder; |
||||
import sun.security.util.Password; |
||||
|
||||
import static org.junit.jupiter.api.Assertions.*; |
||||
|
||||
/** |
||||
* @description: |
||||
* @author: zfp@bnblogs.cc |
||||
* @date: 2023/3/8 17:13 |
||||
*/ |
||||
@SpringBootTest |
||||
class SecurityConfigTest { |
||||
|
||||
@Test |
||||
void passwordEncoder() { |
||||
PasswordEncoder passwordEncoder = new BCryptPasswordEncoder(); |
||||
// 对明文加密
|
||||
System.out.println(passwordEncoder.encode("123456")); |
||||
System.out.println(passwordEncoder.encode("123456")); |
||||
System.out.println(passwordEncoder.encode("123456")); |
||||
System.out.println(passwordEncoder.encode("123456")); |
||||
System.out.println(passwordEncoder.encode("123456")); |
||||
|
||||
// 明文和密文匹配
|
||||
// true
|
||||
System.out.println(passwordEncoder.matches("123456","$2a$10$8ew9orusgSjo4fRBODHgBug6aOkJwaq3ikAOVRAtwPkCqVMVLJI.O")); |
||||
// false
|
||||
System.out.println(passwordEncoder.matches("1234567","$2a$10$8ew9orusgSjo4fRBODHgBug6aOkJwaq3ikAOVRAtwPkCqVMVLJI.O")); |
||||
} |
||||
} |
||||
Loading…
Reference in new issue