点赞再看，养成习惯

开发环境：

  1. jdk 8
  2. intellij idea
  3. maven 3.6

所用技术：

  1. springboot
  2. restful

我的项目介绍

基于restful格调做的设计实例，即可jwt做token效验，实现增删查改,同时搭配自定义注解，不便过滤token验证

自定义注解

1.须要做验证的注解

@Target({ElementType.METHOD, ElementType.TYPE})@Retention(RetentionPolicy.RUNTIME)public @interface UserLoginToken {    boolean required() default true;}//拦挡类(AuthenticationInterceptor)代码public boolean preHandle(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object object) throws Exception {    String token = httpServletRequest.getHeader("token");// 从 http 申请头中取出 token    // 如果不是映射到办法间接通过    if(!(object instanceof HandlerMethod)){        return true;    }    HandlerMethod handlerMethod=(HandlerMethod)object;    Method method=handlerMethod.getMethod();    //查看是否有passtoken正文，有则跳过认证    if (method.isAnnotationPresent(PassToken.class)) {        PassToken passToken = method.getAnnotation(PassToken.class);        if (passToken.required()) {            return true;        }    }    //查看有没有须要用户权限的注解    if (method.isAnnotationPresent(UserLoginToken.class)) {        UserLoginToken userLoginToken = method.getAnnotation(UserLoginToken.class);        if (userLoginToken.required()) {            // 执行认证            if (token == null) {                throw new RuntimeException("无token，请从新登录");            }            // 获取 token 中的 user id            String userId;            try {                userId = JWT.decode(token).getAudience().get(0);            } catch (JWTDecodeException j) {                throw new RuntimeException("token error");            }            String user = jedis.get(userId);            if (user == null) {                throw new RuntimeException("用户不存在，请从新登录");            }            // 验证 token            JSONObject jsonObject1=JSONObject.parseObject(user);            JWTVerifier jwtVerifier = JWT.require(Algorithm.HMAC256(jsonObject1.getString("planType"))).build();            try {                jwtVerifier.verify(token);            } catch (JWTVerificationException e) {                throw new RuntimeException("token error");            }            return true;        }    }    return true;}

我的项目构造

  • 申请列表图片

  • 我的项目构造图片

运行成果

  • token 获取

@GetMapping("/token")public JSONObject token(HttpServletResponse response ){    Date timeOut=DateUtil.offsetMinute(new Date(),time);    //过期工夫    JSONObject jsonObject=new JSONObject();    String usecase = new JWTController().getFile("usecase.json");    JSONObject jsonObject1=JSONObject.parseObject(usecase);    String token=JWT.create().withExpiresAt(timeOut).withAudience(jsonObject1.getString("objectId"))            .sign(Algorithm.HMAC256(jsonObject1.getString("planType")));    response.setStatus(200);    jsonObject.put("token", token);    jedis.set(jsonObject1.getString("objectId"), usecase);    return jsonObject;}
  • 验证token

//次要@UserLoginToken施展验证作用，否则验证胜利@UserLoginToken@GetMapping("/authToken")public String getMessage(){    return "身份验证胜利 ";}
  • get 申请

@UserLoginToken@GetMapping(value="/plan/{id}")public String getPlan(@PathVariable String id, HttpServletResponse response) {    jedis.connect();    if (jedis.get(id) == null) {        response.setStatus(404);        return "No such record";    }    response.setStatus(200);    return jedis.get(id);}
  • post 申请

@UserLoginToken@ResponseBody@PostMapping(path="/plan")public String addPlan(@RequestBody JSONObject jsonObject, HttpServletResponse response) throws IOException, ProcessingException {    String data = jsonObject.toString();    Boolean jsonValidity = Validator.isJSONValid(data);    if(jsonValidity) {        String uuid = UUID.randomUUID().toString();        jedis.set(uuid, data);        return "Create Success" + "\n" + uuid;    }    else {        response.setStatus(400);        return "JSON Schema not valid!";    }}
  • delete 申请

@UserLoginToken@DeleteMapping(value="/plan/{id}")public String deletePlan(@PathVariable String id, HttpServletResponse response) {    jedis.connect();    if (jedis.get(id) == null) {        response.setStatus(404);        return "No such record";    }    jedis.del(id);    response.setStatus(200);    return "Deleted Success" + "\n" + id;}
  • patch 申请

@UserLoginToken@PatchMapping(value="/plan/{id}")public String patchPlan(@RequestBody JSONObject jsonObject, @PathVariable String id, HttpServletResponse response) {    jedis.connect();    if (jedis.get(id) == null) {        response.setStatus(404);        return "No such record";    }    String data = jsonObject.toString();    String redisDate=jedis.get(id);    Map redisData=JSONUtil.toBean(redisDate,Map.class);    Map map=JSONUtil.toBean(data,Map.class);    for(Object o:map.keySet()){        redisData.put(o,map.get(o));    }    jedis.set(id, JSONUtil.toJsonStr(redisData));    response.setStatus(200);    return "Patched Success" + "\n" + id;}
  • put 申请

@UserLoginToken@PutMapping(value="/plan/{id}")public String updatePlan(@RequestBody JSONObject jsonObject, @PathVariable String id, HttpServletResponse response) throws IOException, ProcessingException {    jedis.connect();    if (jedis.get(id) == null) {        response.setStatus(404);        return "No such record";    }    String data = jsonObject.toString();    if(Validator.isJSONValid(data)) {        jedis.set(id, data);        response.setStatus(200);        return "Updated Success" + "\n" + id;    }    else {        response.setStatus(400);        return "Invalid JSON!";    }}

我的项目总结

  1. restful 联合jwt做token效验，所有申请的token放入headers中
  2. 我的项目还退出schema.json，Json Schema就是用来定义json数据束缚的一个规范
  3. 其余有更好的简洁操作习惯，心愿留言交换
  4. 程序有问题找程序帮