SpringCloud整合SpringSecurity - JWT進行認證 ,鑑權

阿新 • • 發佈：2021-12-02

一. 建立認證微服務AuthenticationService

1.1 pom.xml

點選檢視程式碼

<dependencies>
        <!--mysql驅動-->
        <dependency>
            <groupId>mysql</groupId>
            <artifactId>mysql-connector-java</artifactId>
            <scope>runtime</scope>
        </dependency>
        <!--mybatis-dynamic-sql , 可以使用mybatis plus或者自己寫sql-->
        <dependency>
            <groupId>org.mybatis.dynamic-sql</groupId>
            <artifactId>mybatis-dynamic-sql</artifactId>
            <version>1.2.1</version>
        </dependency>
        <!--mybatis-->
        <dependency>
            <groupId>org.mybatis.spring.boot</groupId>
            <artifactId>mybatis-spring-boot-starter</artifactId>
            <version>2.1.4</version>
        </dependency>
        <!-- lombok -->
        <dependency>
            <groupId>org.projectlombok</groupId>
            <artifactId>lombok</artifactId>
            <optional>true</optional>
        </dependency>
        <!-- jwt -->
        <dependency>
            <groupId>com.nimbusds</groupId>
            <artifactId>nimbus-jose-jwt</artifactId>
        </dependency>
        <!-- ssm spring boot -->
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-security</artifactId>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-data-redis</artifactId>
        </dependency>
        <!-- spring cloud -->
        <!-- spring cloud alibba -->
        <dependency>
            <groupId>com.alibaba.cloud</groupId>
            <artifactId>spring-cloud-starter-alibaba-nacos-config</artifactId>
        </dependency>
        <dependency>
            <groupId>com.alibaba.cloud</groupId>
            <artifactId>spring-cloud-starter-alibaba-nacos-discovery</artifactId>
        </dependency>
        <!-- test -->
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-test</artifactId>
            <scope>test</scope>
            <exclusions>
                <exclusion>
                    <groupId>org.junit.vintage</groupId>
                    <artifactId>junit-vintage-engine</artifactId>
                </exclusion>
            </exclusions>
        </dependency>
        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-test</artifactId>
            <scope>test</scope>
        </dependency>
    </dependencies>

    <dependencyManagement>
        <dependencies>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-dependencies</artifactId>
                <version>${spring-boot.version}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
            <dependency>
                <groupId>com.alibaba.cloud</groupId>
                <artifactId>spring-cloud-alibaba-dependencies</artifactId>
                <version>${spring-cloud-alibaba.version}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
        </dependencies>
    </dependencyManagement>

1.2 建立SimpleUserDetailsService 實現 UserDetailsService介面

作用：將資料查到的使用者資訊和許可權放進UserDetails物件，用於SpringSecurity進行認證

@Component
@Slf4j
public class SimpleUserDetailsService implements UserDetailsService {
    @Autowired
    private UserService userService;
    private final PasswordEncoder passwordEncoder;

    public SimpleUserDetailsService(PasswordEncoder passwordEncoder) {
        this.passwordEncoder = passwordEncoder;
    }

    @Override
    public UserDetails loadUserByUsername(String s) throws UsernameNotFoundException {
        //從資料庫獲取使用者資訊
        UserEntity userEntity = userService.getByUsername(s);
        //從資料庫獲取使用者的角色許可權
        List<UserRoles> userRolesList = userService.getRolesByUsername(s);
        StringBuilder authorityBuilder = new StringBuilder();
        //將角色資訊放進StringBuilder中
        userRolesList.forEach(r-> {
            authorityBuilder.append("ROLE_").append(r.getRoleName().toUpperCase()).append(",");
            //從資料庫獲取使用者資源許可權
            List<RolePermissions> permissionsList = userService.getPermissionsByRole(r.getRoleName());
            permissionsList.forEach(p->authorityBuilder.append(p.getPermission()).append(","));
        });
        //獲取使用者密碼
        String password = userEntity.getPassword();
        log.info("password->"+password);
        log.info("authorities->"+authorityBuilder.toString());
        //返回UserDetails物件
        return new User(s,passwordEncoder.encode(password), AuthorityUtils.commaSeparatedStringToAuthorityList(authorityBuilder.toString()));
    }
}

1.3 建立JWTAuthenticationSuccessHandler 實現 AuthenticationSuccessHandler介面

作用：自定義登入成功請求返回的結果，SpringSecurity預設登入成功後跳轉到登入前url或者"/"，前後端分離專案需要登入成功後返回jwt-token

@Component
public class JWTAuthenticationSuccessHandler implements AuthenticationSuccessHandler {
    //json
    private final ObjectMapper objectMapper = new ObjectMapper();
    //操作redis
    private final HashOperations<String, String, String> operations;

    // 構造注入
    public JWTAuthenticationSuccessHandler(RedisTemplate<String, String> redisTemplate) {
        this.operations = redisTemplate.opsForHash();
    }

    @Override
    public void onAuthenticationSuccess(HttpServletRequest req, HttpServletResponse resp,
                                        Authentication authentication)
            throws IOException, ServletException {

        // authentication 物件攜帶了當前登陸使用者名稱等相關資訊
        User user = (User) authentication.getPrincipal();
        resp.setContentType("application/json;charset=UTF-8");
        try {
            StringBuffer buffer = new StringBuffer();
            user.getAuthorities().forEach(item -> {
                buffer.append(item.getAuthority());
                buffer.append(",");
            });
            buffer.deleteCharAt(buffer.length()-1);

            // 使用者的 username 和他所具有的許可權存入 redis 中。
            operations.put(JWTUtil.REDIS_HASH_KEY, user.getUsername(), buffer.toString());

            // 在 jwt-token-string 的荷載（payload）中存上當前使用者的名字.
            String jwtStr = JWTUtil.createJWT(user.getUsername());

            Map<String, String> map = new HashMap<>();
            map.put("code", "10000");
            map.put("msg", "success");
            map.put("jwt-token", jwtStr);

            PrintWriter out = resp.getWriter();
            out.write(objectMapper.writeValueAsString(map));
            out.flush();
            out.close();
        } catch (Exception e) {
            e.printStackTrace();
        }
    }
}

1.4 配置SpringSecurity，將JWTAuthenticationSuccessHandler的返回結果替換預設返回結果

@EnableWebSecurity(debug = false)
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Resource
    private SimpleUserDetailsService userDetailsService;

    @Resource
    private JWTAuthenticationSuccessHandler successHandler;

    @Bean
    public PasswordEncoder passwordEncoder() {
        return NoOpPasswordEncoder.getInstance();   // 這是一個空的、假的密碼加密器。在加密時啥事沒幹。
    }

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        //任何請求都需要認證
        http.authorizeRequests().anyRequest().authenticated(); 
        //登入框登入,登入成功後使用自定義的JWTAuthenticationSuccessHandler
        http.formLogin().successHandler(successHandler);
        //禁用跨域過濾器
        http.csrf().disable();
        //禁用session過濾器
        http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS);
    }


    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.userDetailsService(userDetailsService)
                .passwordEncoder(passwordEncoder());
    }
}

1.5 將服務註冊進nacos

啟動類上新增@EnableDiscoveryClient註解

@SpringBootApplication
@EnableDiscoveryClient
public class AuthenticationServiceApplication {
    public static void main(String[] args) {
        SpringApplication.run(AuthenticationServiceApplication.class, args);
    }
}

配置bootstrap.yml

點選檢視程式碼

spring:
  cloud:
    nacos:
      discovery:
        server-addr: 192.172.0.24:8848
        password: nacos
        username: nacos
        group: Dracarys
      config:
        contextPath: /nacos
        server-addr: ${spring.cloud.nacos.discovery.server-addr}
        username: ${spring.cloud.nacos.discovery.username}
        password: ${spring.cloud.nacos.discovery.password}
        group: ${spring.cloud.nacos.discovery.group}

配置application.yml

點選檢視程式碼

server:
  port: 8080
spring:
  application:
    name: authentication-service
  datasource:
    driver-class-name: com.mysql.cj.jdbc.Driver
    password: 123root456
    url: jdbc:mysql://114.55.6.86:3306/security_db?serverTimezone=UTC
    username: root
  redis:
    host: 114.55.6.86
    port: 6379
    password: 123

二. 建立普通需要鑑權的微服務SecurityService

2.1 pom.xml

點選檢視程式碼

<dependencies>
        <!--jwt-->
        <dependency>
            <groupId>com.nimbusds</groupId>
            <artifactId>nimbus-jose-jwt</artifactId>
            <version>9.11.1</version>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-data-redis</artifactId>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-security</artifactId>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>
        <dependency>
            <groupId>com.alibaba.cloud</groupId>
            <artifactId>spring-cloud-starter-alibaba-nacos-discovery</artifactId>
        </dependency>

        <dependency>
            <groupId>mysql</groupId>
            <artifactId>mysql-connector-java</artifactId>
            <scope>runtime</scope>
        </dependency>
        <dependency>
            <groupId>org.projectlombok</groupId>
            <artifactId>lombok</artifactId>
            <optional>true</optional>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-test</artifactId>
            <scope>test</scope>
            <exclusions>
                <exclusion>
                    <groupId>org.junit.vintage</groupId>
                    <artifactId>junit-vintage-engine</artifactId>
                </exclusion>
            </exclusions>
        </dependency>
        <dependency>
            <groupId>io.projectreactor</groupId>
            <artifactId>reactor-test</artifactId>
            <scope>test</scope>
        </dependency>
        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-test</artifactId>
            <scope>test</scope>
        </dependency>
    </dependencies>

    <dependencyManagement>
        <dependencies>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-dependencies</artifactId>
                <version>${spring-boot.version}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
            <dependency>
                <groupId>com.alibaba.cloud</groupId>
                <artifactId>spring-cloud-alibaba-dependencies</artifactId>
                <version>${spring-cloud-alibaba.version}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
        </dependencies>
    </dependencyManagement>

2.2 自定義JwtFilter過濾器，攔截請求，新增UseranmePasswordAuthenticationToken

@Slf4j
@Component
public class JwtFilter extends OncePerRequestFilter {
    //操作redis
    private final HashOperations<String, String, String> operations;
    //構造注入
    public JwtFilter(RedisTemplate<String, String> redisTemplate) {
        this.operations = redisTemplate.opsForHash();
    }

    @Override
    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response,
                                    FilterChain filterChain) throws ServletException, IOException {
        Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
        //如果security_context_holder中有authentication
        if(authentication != null){
            log.info("security_context_holder中有authentication");
            filterChain.doFilter(request,response);
            return;
        }
//        String jwtStr = request.getHeader("x-jwt-token");
        String username = request.getHeader("x-username");
        //如果請求頭裡沒有token
        if(StringUtils.isEmpty(username)){
            log.info("沒有username");
            filterChain.doFilter(request,response);
            return;
        }
        //jwtStr驗證不通過
        /*if(!JwtUtils.verify(jwtStr)){
            log.info("jwtStr驗證不通過");
            filterChain.doFilter(request,response);
            return;
        }
        String username = JwtUtils.getUsernameFromJWT(jwtStr);*/
        //根據使用者名稱從redis中獲取許可權
        log.info("username->"+username);
        String authorities =  operations.get("jwt-token",username);
        log.info("authorities->"+operations.get("jwt-token",username));
        //將許可權存進token中
        UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(
                username, null, AuthorityUtils.commaSeparatedStringToAuthorityList(authorities));
        SecurityContextHolder.getContext().setAuthentication(authenticationToken);
        filterChain.doFilter(request,response);
    }
}

2.3 配置SpringSecurity，將自定義的JwtFilter過濾器新增進SpringSecurity過濾器鏈

@EnableWebSecurity
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {

    @Resource
    private JwtFilter jwtFilter;

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests().anyRequest().authenticated()
                .and()
                //將自定義的Jwt過濾器新增到UsernamePasswordAuthenticationFilter後面
                .formLogin().and().addFilterAfter(jwtFilter, UsernamePasswordAuthenticationFilter.class);
    }
}

2.4 將服務註冊到Nacos

啟動類上新增@EnableDiscoveryClient註解

@SpringBootApplication
@EnableDiscoveryClient
public class SecurityServiceDemo1Application {
    public static void main(String[] args) {
        SpringApplication.run(SecurityServiceDemo1Application.class, args);
    }
}

application.yml

點選檢視程式碼

#日誌
logging:
    level:
        root: INFO
        com.wn: DEBUG
    pattern:
        console: "${CONSOLE_LOG_PATTERN:%clr(${LOG_LEVEL_PATTERN:%5p}) %clr(|){faint} %clr(%-40.40logger{39}){cyan} %clr(:){faint} %m%n${LOG_EXCEPTION_CONVERSION_WORD:%wEx}}"
server:
    port: 9000
spring:
    application:
        name: security-service-demo1
    cloud:
        nacos:
            discovery:
                group: Dracarys
                namespace: public
                password: nacos
                server-addr: 192.172.0.24:8848
                username: nacos
    redis:
        port: 6379
        host: 114.55.6.86

三. 建立Gateway微服務

3.1 pom.xml

點選檢視程式碼

<dependencies>
        <dependency>
            <groupId>org.projectlombok</groupId>
            <artifactId>lombok</artifactId>
        </dependency>
        <dependency>
            <groupId>com.nimbusds</groupId>
            <artifactId>nimbus-jose-jwt</artifactId>
        </dependency>
        <dependency>
            <groupId>com.alibaba.cloud</groupId>
            <artifactId>spring-cloud-starter-alibaba-nacos-discovery</artifactId>
        </dependency>
        <dependency>
            <groupId>org.springframework.cloud</groupId>
            <artifactId>spring-cloud-starter-gateway</artifactId>
        </dependency>

        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-test</artifactId>
            <scope>test</scope>
            <exclusions>
                <exclusion>
                    <groupId>org.junit.vintage</groupId>
                    <artifactId>junit-vintage-engine</artifactId>
                </exclusion>
            </exclusions>
        </dependency>
    </dependencies>

    <dependencyManagement>
        <dependencies>
            <dependency>
                <groupId>org.springframework.cloud</groupId>
                <artifactId>spring-cloud-dependencies</artifactId>
                <version>${spring-cloud.version}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-dependencies</artifactId>
                <version>${spring-boot.version}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
            <dependency>
                <groupId>com.alibaba.cloud</groupId>
                <artifactId>spring-cloud-alibaba-dependencies</artifactId>
                <version>${spring-cloud-alibaba.version}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
        </dependencies>
    </dependencyManagement>

3.2 自定義全域性過濾器GatewayFilter，將jwt-token解析，返回使用者名稱到請求頭

@Component
@Slf4j
public class GatewayFilter implements GlobalFilter {
    @Override
    public Mono<Void> filter(ServerWebExchange exchange, GatewayFilterChain chain) {

        HttpHeaders headers = exchange.getRequest().getHeaders();
        List<String> strings = headers.get("x-jwt-token");
        ServerHttpRequest mutateRequest = exchange.getRequest();
        //校驗token,成功拿到token中的username
        if(strings.size()>0 && JWTUtil.verify(strings.get(0))){
            String username = JWTUtil.getUsernameFromJWT(strings.get(0));
            //將username存進請求頭
            mutateRequest = exchange.getRequest().mutate().header("x-username", username).build();
            log.info("將使用者名稱存進請求頭"+username);
        }
        return chain.filter(exchange.mutate().request(mutateRequest).build());
    }
}

3.2 將服務註冊到nacos

啟動類上新增@EnableDiscoveryClient註解

application.yml

點選檢視程式碼

#日誌
logging:
  level:
    root: INFO
    com.wn: DEBUG
  pattern:
    console: "${CONSOLE_LOG_PATTERN:%clr(${LOG_LEVEL_PATTERN:%5p}) %clr(|){faint} %clr(%-40.40logger{39}){cyan} %clr(:){faint} %m%n${LOG_EXCEPTION_CONVERSION_WORD:%wEx}}"
server:
  port: 88
spring:
  application:
    name: gateway
  cloud:
    nacos:
      discovery:
        server-addr: 192.172.0.24:8848
        username: nacos
        password: nacos
        group: Dracarys
    #整合gateway和openFeign
    gateway:
      discovery:
        locator:
          enabled: true
          lower-case-service-id: true

四. JwtUtils

點選檢視程式碼

package com.wn.service.util;

import com.nimbusds.jose.*;
import com.nimbusds.jose.crypto.MACSigner;
import com.nimbusds.jose.crypto.MACVerifier;
import com.nimbusds.jose.shaded.json.JSONObject;
import lombok.SneakyThrows;
import lombok.extern.slf4j.Slf4j;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.util.StringUtils;

import java.util.Collection;
import java.util.Map;

@Slf4j
public class JwtUtils {

    private static final String usernameKey = "username";
    private static final String authoritiesKey = "authorities";

    public static final String secret = "hello world goodbye thank you very much see you next time";

    static {
        log.info("spring security jwt secret: {}", secret);
    }
    @SneakyThrows
    public static String createJWT(String username) {

        // jwt 頭
        JWSHeader jwsHeader = new JWSHeader.Builder(JWSAlgorithm.HS256).type(JOSEObjectType.JWT).build();

        // jwt 荷載
        JSONObject obj = new JSONObject();
        obj.put(usernameKey, username);
        Payload payload = new Payload(obj);

        // jwt 頭 + 荷載 + 金鑰 = 簽名
        JWSSigner jwsSigner = new MACSigner(secret);
        JWSObject jwsObject = new JWSObject(jwsHeader, payload);
        // 進行簽名（根據前兩部分生成第三部分）
        jwsObject.sign(jwsSigner);

        // 獲得 jwt string
        return jwsObject.serialize();
    }

    @SneakyThrows
    public static String createJWT(String username, Collection<? extends GrantedAuthority> authorities) {

        // jwt 頭
        JWSHeader jwsHeader = new JWSHeader.Builder(JWSAlgorithm.HS256).type(JOSEObjectType.JWT).build();

        // jwt 荷載
        JSONObject obj = new JSONObject();
        obj.put(usernameKey, username);
        obj.put(authoritiesKey, StringUtils.collectionToCommaDelimitedString(authorities));  // "xxx,yyy,zzz,..."
        Payload payload = new Payload(obj);

        // jwt 頭 + 荷載 + 金鑰 = 簽名
        JWSSigner jwsSigner = new MACSigner(secret);
        JWSObject jwsObject = new JWSObject(jwsHeader, payload);
        // 進行簽名（根據前兩部分生成第三部分）
        jwsObject.sign(jwsSigner);

        // 獲得 jwt string
        return jwsObject.serialize();
    }

    @SneakyThrows
    public static boolean verify(String jwtString) {
        JWSObject jwsObject = JWSObject.parse(jwtString);
        JWSVerifier jwsVerifier = new MACVerifier(secret);
        return jwsObject.verify(jwsVerifier);
    }

    @SneakyThrows
    public static String getUsernameFromJWT(String jwtString) {
        JWSObject jwsObject = JWSObject.parse(jwtString);
        Map<String, Object> map = jwsObject.getPayload().toJSONObject();
        return (String) map.get(usernameKey);
    }

    @SneakyThrows
    public static String getAuthoritiesFromJwt(String jwtString) {
        JWSObject jwsObject = JWSObject.parse(jwtString);
        Map<String, Object> map = jwsObject.getPayload().toJSONObject();
        return (String) map.get(authoritiesKey);
    }

}

SpringCloud整合SpringSecurity - JWT進行認證 ,鑑權

一. 建立認證微服務AuthenticationService 1.1 pom.xml 點選檢視程式碼 <dependencies>

SpringBoot整合SpringSecurity和JWT做登陸鑑權的實現

廢話目前流行的前後端分離讓Java程式設計師可以更加專注的做好後臺業務邏輯的功能實現，提供如返回Json格式的資料介面就可以。SpringBoot的易用性和對其他框架的高度整合，用來快速開發一個小型應用是最佳的選擇。

springboot 整合 shiro 前後端分離返回認證鑑權JSON資料

自定義返回JSON資料主要配置如下地方：在ShiroConfig中修改如下： @Bean(name = \"shiroFilter\")public ShiroFilterFactoryBean shiroFilter(SecurityManager securityManager) {ShiroFilterFactoryBean shiroFilt

shiro學習四：使用springboot整合shiro，正常的企業級後端開發shiro認證鑑權流程。使用redis做token的過濾。md5做密碼的加密。

文章目錄前言前面都是對shiro的初級學習和分析，本次部落格就記錄springboot整合shiro框架。

security登入後位址列url未變化_僅需四步，整合SpringSecurity+JWT實現登入認證！

技術標籤：security登入後位址列url未變化學習過我的mall專案的應該知道，mall-admin模組是使用SpringSecurity+JWT來實現登入認證的，而mall-portal模組是使用的SpringSecurity基於Session的預設機制來實現登

關於Mongodb 認證鑑權你需要知道的一些事

前言本文主要給大家介紹了Mongodb認證鑑權的一些相關內容，通過設定認證鑑權會對大家的mongodb安全進一步的保障，下面話不多說了，來一起看看詳細的介紹吧。

.net core中使用jwt進行認證

JSON Web Token（JWT）是一個開放標準（RFC 7519），它定義了一種緊湊且自包含的方式，用於在各方之間作為JSON物件安全地傳輸資訊。由於此資訊是經過數字簽名的，因此可以被驗證和信任。可以使用祕密（使用HMAC演算法

【轉】 SpringBoot 整合SpringSecurity JWT

【轉】 SpringBoot 整合SpringSecurity JWT 目錄 1. 簡介 1.1 SpringSecurity 1.2 OAuth2 1.3 JWT 2. SpringBoot 整合 SpringSecurity

Springboot+springsecurity+jwt實現認證授權和許可權管理

技術標籤：jwtjavaspring boot 原文： https://blog.csdn.net/ech13an/article/details/80779973 思路：

SpringSecurity+JWT登入認證

1. 簡要之前學習的認證方式，在伺服器驗證通過後，會在當前對話session中儲存資料，然後向客戶端返回一個session_id存在客戶端Cookie中，但是這種模式會存在問題就是擴充套件性不好，對於單機還好，如果是伺服器

SpringBoot 整合SpringSecurity示例實現前後分離許可權註解+JWT登入認證

一.說明 SpringSecurity是一個用於Java 企業級應用程式的安全框架,主要包含使用者認證和使用者授權兩個方面.相比較Shiro而言,Security功能更加的強大,它可以很容易地擴充套件以滿足更多安全控制方面的需求,但也相對它

SpringBoot整合Spring Security用JWT令牌實現登入和鑑權的方法

最近在做專案的過程中需要用JWT做登入和鑑權查了很多資料都不甚詳細有的是需要在application.yml裡進行jwt的配置但我在導包後並沒有相應的配置項因而並不適用

Koa2 使用 JWT 進行鑑權

前言在前後端分離的開發中，通過 Restful API 進行資料互動時，如果沒有對 API 進行保護，那麼別人就可以很容易地獲取並呼叫這些 API 進行操作。那麼伺服器端要如何進行鑑權呢？

SpringBoot中使用Shiro和JWT跟著就行的認證和鑑權

技術標籤：springbootshiro過濾器springjwt POM檔案中新增依賴 <dependency> <groupId>org.apache.shiro</groupId>

SpringSecurity整合jwt許可權認證的全流程講解

JWT 本文程式碼擷取自實際專案。 jwt（json Web Token），一個token，令牌。簡單流程：

理解JWT鑑權的應用場景及使用建議

作者：maotou叔叔 cnblogs.com/mantoudev/p/8994341.html 1. JWT 介紹 JSON Web Token（JWT）是一個開放式標準（RFC 7519），它定義了一種緊湊（Compact）且自包含（Self-contained）的方式，用於在各方之間以JSON

SpringSecurity動態載入使用者角色許可權實現登入及鑑權功能

很多人覺得Spring Security實現登入驗證很難，我最開始學習的時候也這樣覺得。因為我好久都沒看懂我該怎麼樣將自己寫的用於接收使用者名稱密碼的Controller與Spring Security結合使用，這是一個先入為主的誤區。後來

SpringCloud Zuul過濾器實現登陸鑑權程式碼例項

1.新建一個filter‘包 2.新建一個類，實現ZuulFilter，重寫裡面的方法 3.在頂部類添加註解，@Component，讓Spring掃描

Springboot+SpringSecurity+JWT實現使用者登入和許可權認證示例

如今，網際網路專案對於安全的要求越來越嚴格，這就是對後端開發提出了更多的要求，目前比較成熟的幾種大家比較熟悉的模式，像RBAC 基於角色許可權的驗證，shiro框架專門用於處理許可權方面的，另一個比較流行的後端

解析SpringSecurity+JWT認證流程實現

紙上得來終覺淺，覺知此事要躬行。楔子本文適合：對Spring Security有一點了解或者跑過簡單demo但是對整體執行流程不明白的同學，對SpringSecurity有興趣的也可以當作你們的入門教程，示例程式碼中也有很多註釋。

SpringCloud整合SpringSecurity - JWT進行認證 ,鑑權

一. 建立認證微服務AuthenticationService

1.1 pom.xml

1.2 建立SimpleUserDetailsService 實現 UserDetailsService介面

1.3 建立JWTAuthenticationSuccessHandler 實現 AuthenticationSuccessHandler介面

1.4 配置SpringSecurity，將JWTAuthenticationSuccessHandler的返回結果替換預設返回結果

1.5 將服務註冊進nacos

二. 建立普通需要鑑權的微服務SecurityService

2.1 pom.xml

2.2 自定義JwtFilter過濾器，攔截請求，新增UseranmePasswordAuthenticationToken

2.3 配置SpringSecurity，將自定義的JwtFilter過濾器新增進SpringSecurity過濾器鏈

2.4 將服務註冊到Nacos

三. 建立Gateway微服務

3.1 pom.xml

3.2 自定義全域性過濾器GatewayFilter，將jwt-token解析，返回使用者名稱到請求頭

3.2 將服務註冊到nacos

四. JwtUtils

相關推薦