From 0b57a8711fb4e577eaa022b7362a0b9b1f2e45bf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=BB=96=E5=BF=A0=E7=BE=8E?=
<14203604+liao-zhongmei@user.noreply.gitee.com>
Date: Sun, 23 Jun 2024 20:45:58 +0800
Subject: [PATCH] =?UTF-8?q?=E7=99=BB=E9=99=86=E6=88=90=E5=8A=9F=E8=BF=94?=
=?UTF-8?q?=E5=9B=9Etoken,=E5=B9=B6=E8=83=BD=E5=88=B7=E6=96=B0token,permis?=
=?UTF-8?q?sion=E6=8E=A7=E5=88=B6=E5=B1=82=E5=BE=85=E6=B5=8B=E8=AF=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
---
.idea/inspectionProfiles/Project_Default.xml | 68 ++++++++
.idea/misc.xml | 5 +-
.idea/workspace.xml | 153 ++++++++----------
etl-auth/etl-auth-common/pom.xml | 10 ++
.../auth/common/entity/PathPermission.java | 33 ++++
.../auth/common/entity/RolesPermission.java | 24 +++
.../com/auth/common/entity/UserAccount.java | 23 +++
.../common/enums/PermissionConstants.java | 8 +
etl-auth/etl-auth-server/pom.xml | 31 +++-
.../auth/server/EtlAuthServerApplication.java | 3 +
.../com/auth/server/config/ShiroConfig.java | 3 +
.../server/controller/LoginControler.java | 91 +++++++++--
.../controller/PermissionController.java | 54 +++++++
.../auth/server/entity/RolesPermission.java | 10 --
.../com/auth/server/entity/UserAccount.java | 11 --
.../com/auth/server/mapper/PathMapper.java | 8 +
.../auth/server/mapper/PermissionMapper.java | 4 +-
.../auth/server/mapper/UserMangeMapper.java | 4 +-
.../com/auth/server/service/PathService.java | 9 ++
.../server/service/PermissionService.java | 6 +-
.../server/service/UserManageService.java | 5 +-
.../server/service/impl/PathServiceImpl.java | 16 ++
.../service/impl/PermissionServiceImpl.java | 10 +-
.../service/impl/UserManageServiceImpl.java | 7 +-
.../java/com/auth/server/util/UserRealm.java | 3 +-
.../src/main/resources/bootstrap.yml | 14 +-
.../src/main/resources/mapper/PathMapper.xml | 6 +
.../target/classes/bootstrap.yml | 14 +-
.../server/EtlAuthServerApplication.class | Bin 818 -> 1040 bytes
.../com/auth/server/config/ShiroConfig.class | Bin 2813 -> 2813 bytes
.../server/controller/LoginControler.class | Bin 4246 -> 6701 bytes
.../controller/PermissionController.class | Bin 0 -> 3600 bytes
.../auth/server/entity/RolesPermission.class | Bin 2402 -> 0 bytes
.../com/auth/server/entity/UserAccount.class | Bin 2781 -> 0 bytes
.../com/auth/server/mapper/PathMapper.class | Bin 0 -> 310 bytes
.../auth/server/mapper/PermissionMapper.class | Bin 323 -> 323 bytes
.../auth/server/mapper/UserMangeMapper.class | Bin 317 -> 317 bytes
.../com/auth/server/service/PathService.class | Bin 0 -> 321 bytes
.../server/service/PermissionService.class | Bin 283 -> 466 bytes
.../server/service/UserManageService.class | Bin 330 -> 330 bytes
.../server/service/impl/PathServiceImpl.class | Bin 0 -> 888 bytes
.../service/impl/PermissionServiceImpl.class | Bin 2863 -> 2872 bytes
.../service/impl/UserManageServiceImpl.class | Bin 726 -> 920 bytes
.../com/auth/server/util/UserRealm.class | Bin 3560 -> 3560 bytes
.../target/classes/mapper/PathMapper.xml | 6 +
...T.jar => etl-auth-server-1.0-SNAPSHOT.jar} | Bin 17465 -> 17607 bytes
.../target/maven-archiver/pom.properties | 6 +-
.../auth/common/entity/PathPermission.class | Bin 0 -> 4351 bytes
.../auth/common/entity/RolesPermission.class | Bin 0 -> 2923 bytes
.../com/auth/common/entity/UserAccount.class | Bin 0 -> 3149 bytes
.../common/enums/PermissionConstants.class | Bin 0 -> 528 bytes
.../etl/common/enums/ResponseCodeEnum.java | 29 ++++
.../com/etl/common/result/CommonResult.java | 22 +++
.../etl/common/enums/ResponseCodeEnum.class | Bin 0 -> 2176 bytes
.../com/etl/common/result/CommonResult.class | Bin 0 -> 3845 bytes
etl-common/target/etl-common-1.0-SNAPSHOT.jar | Bin 23060 -> 23060 bytes
.../target/maven-archiver/pom.properties | 2 +-
etl-gateway/pom.xml | 14 ++
.../etl/gateway/EtlGatewayApplication.java | 2 +
.../gateway/filters/JwtAuthCheckFilter.java | 136 ++++++++++++++++
.../com/etl/gateway/filters/LogFilter.java | 6 +-
etl-gateway/src/main/resources/bootstrap.yml | 2 +-
.../com/etl/jwt/config/AuthJwtProperties.java | 2 +
.../java/com/etl/jwt/util/JwtTokenUtil.java | 3 +-
.../etl/jwt/config/AuthJwtProperties.class | Bin 5180 -> 5180 bytes
.../com/etl/jwt/util/JwtTokenUtil.class | Bin 8412 -> 8412 bytes
.../target/etl-jwt-manage-1.0-SNAPSHOT.jar | Bin 8958 -> 8961 bytes
.../target/maven-archiver/pom.properties | 2 +-
68 files changed, 720 insertions(+), 145 deletions(-)
create mode 100644 etl-auth/etl-auth-common/src/main/java/com/auth/common/entity/PathPermission.java
create mode 100644 etl-auth/etl-auth-common/src/main/java/com/auth/common/entity/RolesPermission.java
create mode 100644 etl-auth/etl-auth-common/src/main/java/com/auth/common/entity/UserAccount.java
create mode 100644 etl-auth/etl-auth-common/src/main/java/com/auth/common/enums/PermissionConstants.java
create mode 100644 etl-auth/etl-auth-server/src/main/java/com/auth/server/controller/PermissionController.java
delete mode 100644 etl-auth/etl-auth-server/src/main/java/com/auth/server/entity/RolesPermission.java
delete mode 100644 etl-auth/etl-auth-server/src/main/java/com/auth/server/entity/UserAccount.java
create mode 100644 etl-auth/etl-auth-server/src/main/java/com/auth/server/mapper/PathMapper.java
create mode 100644 etl-auth/etl-auth-server/src/main/java/com/auth/server/service/PathService.java
create mode 100644 etl-auth/etl-auth-server/src/main/java/com/auth/server/service/impl/PathServiceImpl.java
create mode 100644 etl-auth/etl-auth-server/src/main/resources/mapper/PathMapper.xml
create mode 100644 etl-auth/etl-auth-server/target/classes/com/auth/server/controller/PermissionController.class
delete mode 100644 etl-auth/etl-auth-server/target/classes/com/auth/server/entity/RolesPermission.class
delete mode 100644 etl-auth/etl-auth-server/target/classes/com/auth/server/entity/UserAccount.class
create mode 100644 etl-auth/etl-auth-server/target/classes/com/auth/server/mapper/PathMapper.class
create mode 100644 etl-auth/etl-auth-server/target/classes/com/auth/server/service/PathService.class
create mode 100644 etl-auth/etl-auth-server/target/classes/com/auth/server/service/impl/PathServiceImpl.class
create mode 100644 etl-auth/etl-auth-server/target/classes/mapper/PathMapper.xml
rename etl-auth/etl-auth-server/target/{etl-auth-server-0.0.1-SNAPSHOT.jar => etl-auth-server-1.0-SNAPSHOT.jar} (52%)
create mode 100644 etl-auth/etl-auth-server/target/production/etl-auth-common/com/auth/common/entity/PathPermission.class
create mode 100644 etl-auth/etl-auth-server/target/production/etl-auth-common/com/auth/common/entity/RolesPermission.class
create mode 100644 etl-auth/etl-auth-server/target/production/etl-auth-common/com/auth/common/entity/UserAccount.class
create mode 100644 etl-auth/etl-auth-server/target/production/etl-auth-common/com/auth/common/enums/PermissionConstants.class
create mode 100644 etl-common/src/main/java/com/etl/common/enums/ResponseCodeEnum.java
create mode 100644 etl-common/src/main/java/com/etl/common/result/CommonResult.java
create mode 100644 etl-common/target/classes/com/etl/common/enums/ResponseCodeEnum.class
create mode 100644 etl-common/target/classes/com/etl/common/result/CommonResult.class
create mode 100644 etl-gateway/src/main/java/com/etl/gateway/filters/JwtAuthCheckFilter.java
diff --git a/.idea/inspectionProfiles/Project_Default.xml b/.idea/inspectionProfiles/Project_Default.xml
index e69de29..ee9f695 100644
--- a/.idea/inspectionProfiles/Project_Default.xml
+++ b/.idea/inspectionProfiles/Project_Default.xml
@@ -0,0 +1,68 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/.idea/misc.xml b/.idea/misc.xml
index 53bb56e..0711d5b 100644
--- a/.idea/misc.xml
+++ b/.idea/misc.xml
@@ -1,4 +1,3 @@
-
@@ -22,5 +21,7 @@
-
+
+
+
\ No newline at end of file
diff --git a/.idea/workspace.xml b/.idea/workspace.xml
index 351a24d..9b79cc1 100644
--- a/.idea/workspace.xml
+++ b/.idea/workspace.xml
@@ -4,90 +4,54 @@
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
+
+
+
+
+
+
+
+
+
@@ -106,6 +70,12 @@
+
+
+
+
+
\ No newline at end of file
diff --git a/etl-auth/etl-auth-common/pom.xml b/etl-auth/etl-auth-common/pom.xml
index 819a14f..7c9a605 100644
--- a/etl-auth/etl-auth-common/pom.xml
+++ b/etl-auth/etl-auth-common/pom.xml
@@ -16,6 +16,10 @@
2.6.13
+
+ com.baomidou
+ mybatis-plus-boot-starter
+
org.springframework.boot
spring-boot-starter-jdbc
@@ -36,6 +40,12 @@
spring-boot-starter-test
test
+
+ io.swagger
+ swagger-annotations
+ 1.6.6
+ compile
+
diff --git a/etl-auth/etl-auth-common/src/main/java/com/auth/common/entity/PathPermission.java b/etl-auth/etl-auth-common/src/main/java/com/auth/common/entity/PathPermission.java
new file mode 100644
index 0000000..43726c2
--- /dev/null
+++ b/etl-auth/etl-auth-common/src/main/java/com/auth/common/entity/PathPermission.java
@@ -0,0 +1,33 @@
+package com.auth.common.entity;
+
+import com.baomidou.mybatisplus.annotation.IdType;
+import com.baomidou.mybatisplus.annotation.TableId;
+import com.baomidou.mybatisplus.annotation.TableName;
+import io.swagger.annotations.ApiModelProperty;
+import lombok.AllArgsConstructor;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@AllArgsConstructor
+@NoArgsConstructor
+@TableName("t_data_source")
+public class PathPermission {
+ @TableId(value = "id",type = IdType.AUTO)
+ private Integer id;
+
+ @ApiModelProperty(value = "权限代号")
+ private String permissionCode;
+
+ @ApiModelProperty(value = "路由层次")
+ private String hierarchy;
+
+ @ApiModelProperty(value = "路由")
+ private String path;
+
+ @ApiModelProperty(value = "功能描述")
+ private String description;
+
+ @ApiModelProperty(value = "状态 0-废弃 1-正在使用")
+ private boolean status;
+}
diff --git a/etl-auth/etl-auth-common/src/main/java/com/auth/common/entity/RolesPermission.java b/etl-auth/etl-auth-common/src/main/java/com/auth/common/entity/RolesPermission.java
new file mode 100644
index 0000000..7860c7d
--- /dev/null
+++ b/etl-auth/etl-auth-common/src/main/java/com/auth/common/entity/RolesPermission.java
@@ -0,0 +1,24 @@
+package com.auth.common.entity;
+
+import com.baomidou.mybatisplus.annotation.IdType;
+import com.baomidou.mybatisplus.annotation.TableId;
+import com.baomidou.mybatisplus.annotation.TableName;
+import io.swagger.annotations.ApiModelProperty;
+import lombok.AllArgsConstructor;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@TableName("t_role_source")
+@AllArgsConstructor
+@NoArgsConstructor
+public class RolesPermission {
+ @TableId(value = "id",type = IdType.AUTO)
+ private Integer id;
+
+ @ApiModelProperty(value = "权限代号")
+ private String permissionCode;
+
+ @ApiModelProperty(value = "角色")
+ private String role;
+}
diff --git a/etl-auth/etl-auth-common/src/main/java/com/auth/common/entity/UserAccount.java b/etl-auth/etl-auth-common/src/main/java/com/auth/common/entity/UserAccount.java
new file mode 100644
index 0000000..897184c
--- /dev/null
+++ b/etl-auth/etl-auth-common/src/main/java/com/auth/common/entity/UserAccount.java
@@ -0,0 +1,23 @@
+package com.auth.common.entity;
+
+import com.baomidou.mybatisplus.annotation.IdType;
+import com.baomidou.mybatisplus.annotation.TableId;
+import com.baomidou.mybatisplus.annotation.TableName;
+import io.swagger.annotations.ApiModelProperty;
+import lombok.Data;
+
+@Data
+@TableName("t_user")
+public class UserAccount {
+ @TableId(value = "id",type = IdType.AUTO)
+ private Integer id;
+
+ @ApiModelProperty("角色")
+ private String roles;
+
+ @ApiModelProperty("名称")
+ private String username;
+
+ @ApiModelProperty("密码/")
+ private String password;
+}
diff --git a/etl-auth/etl-auth-common/src/main/java/com/auth/common/enums/PermissionConstants.java b/etl-auth/etl-auth-common/src/main/java/com/auth/common/enums/PermissionConstants.java
new file mode 100644
index 0000000..a9c314c
--- /dev/null
+++ b/etl-auth/etl-auth-common/src/main/java/com/auth/common/enums/PermissionConstants.java
@@ -0,0 +1,8 @@
+package com.auth.common.enums;
+
+public class PermissionConstants {
+ public static final String ROLES = "roles";
+ public static final String CODE_LIST = "codeList";
+ public static final String ROLE = "role";
+ public static final String PERMISSION_CODE = "permission_code";
+}
diff --git a/etl-auth/etl-auth-server/pom.xml b/etl-auth/etl-auth-server/pom.xml
index 0018d6c..ad9687d 100644
--- a/etl-auth/etl-auth-server/pom.xml
+++ b/etl-auth/etl-auth-server/pom.xml
@@ -2,11 +2,12 @@
4.0.0
- com.auth.server
+
+ com.bwie
+ etl-auth
+ 1.0-SNAPSHOT
+
etl-auth-server
- 0.0.1-SNAPSHOT
- etl-auth-server
- etl-auth-server
1.8
UTF-8
@@ -15,10 +16,32 @@
2021.0.5.0
+
+
+ org.apache.shiro
+ shiro-spring
+ 1.4.0
+
+
+ io.springfox
+ springfox-swagger2
+ 3.0.0
+
com.bwie
etl-jwt-manage
1.0-SNAPSHOT
+
+
+ servlet-api
+ javax.servlet
+
+
+
+
+ com.bwie
+ etl-auth-common
+ 1.0-SNAPSHOT
com.bwie
diff --git a/etl-auth/etl-auth-server/src/main/java/com/auth/server/EtlAuthServerApplication.java b/etl-auth/etl-auth-server/src/main/java/com/auth/server/EtlAuthServerApplication.java
index af67fbb..c4c4638 100644
--- a/etl-auth/etl-auth-server/src/main/java/com/auth/server/EtlAuthServerApplication.java
+++ b/etl-auth/etl-auth-server/src/main/java/com/auth/server/EtlAuthServerApplication.java
@@ -3,9 +3,12 @@ package com.auth.server;
import org.mybatis.spring.annotation.MapperScan;
import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.context.annotation.ComponentScan;
@SpringBootApplication
@MapperScan("com.auth.server.mapper")
+@ComponentScan(basePackages = {"com.etl.jwt.util", "com.etl.jwt.config",
+ "com.auth.server.controller","com.auth.server.service","com.auth.server.service.impl"})
public class EtlAuthServerApplication {
public static void main(String[] args) {
diff --git a/etl-auth/etl-auth-server/src/main/java/com/auth/server/config/ShiroConfig.java b/etl-auth/etl-auth-server/src/main/java/com/auth/server/config/ShiroConfig.java
index 5acdff3..ced631e 100644
--- a/etl-auth/etl-auth-server/src/main/java/com/auth/server/config/ShiroConfig.java
+++ b/etl-auth/etl-auth-server/src/main/java/com/auth/server/config/ShiroConfig.java
@@ -3,6 +3,8 @@ package com.auth.server.config;
import com.auth.server.util.UserRealm;
import org.apache.shiro.authc.credential.HashedCredentialsMatcher;
+import org.apache.shiro.mgt.DefaultSecurityManager;
+import org.apache.shiro.realm.Realm;
import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
@@ -66,4 +68,5 @@ public class ShiroConfig {
return hashedCredentialsMatcher;
}
+
}
diff --git a/etl-auth/etl-auth-server/src/main/java/com/auth/server/controller/LoginControler.java b/etl-auth/etl-auth-server/src/main/java/com/auth/server/controller/LoginControler.java
index 245c841..74b3da8 100644
--- a/etl-auth/etl-auth-server/src/main/java/com/auth/server/controller/LoginControler.java
+++ b/etl-auth/etl-auth-server/src/main/java/com/auth/server/controller/LoginControler.java
@@ -1,29 +1,33 @@
package com.auth.server.controller;
import com.alibaba.nacos.api.model.v2.Result;
-import com.auth.server.entity.UserAccount;
+import com.auth.common.entity.UserAccount;
import com.auth.server.service.UserManageService;
import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
+import com.etl.common.enums.ResponseCodeEnum;
+import com.etl.common.result.CommonResult;
import com.etl.jwt.util.JwtTokenUtil;
import io.swagger.annotations.Api;
import lombok.extern.slf4j.Slf4j;
+import org.apache.commons.lang3.StringUtils;
import org.apache.shiro.SecurityUtils;
-import org.apache.shiro.authc.AuthenticationException;
-import org.apache.shiro.authc.IncorrectCredentialsException;
-import org.apache.shiro.authc.UnknownAccountException;
-import org.apache.shiro.authc.UsernamePasswordToken;
+import org.apache.shiro.authc.*;
+import org.apache.shiro.mgt.DefaultSecurityManager;
+import org.apache.shiro.realm.SimpleAccountRealm;
import org.apache.shiro.subject.Subject;
import org.springframework.beans.factory.annotation.Autowired;
-import org.springframework.web.bind.annotation.PostMapping;
-import org.springframework.web.bind.annotation.RequestBody;
-import org.springframework.web.bind.annotation.RestController;
+import org.springframework.web.bind.annotation.*;
import javax.annotation.Resource;
import java.util.Map;
+/**
+ * 登录 controller层
+ */
@RestController
@Slf4j
@Api(tags = "登录-API")
+@RequestMapping("/user")
public class LoginControler {
@Autowired
private UserManageService userManageService;
@@ -35,15 +39,27 @@ public class LoginControler {
{
String username=user.getUsername();
String password=user.getPassword();
+
+ // 创建SimpleAccountRealm并添加账户信息
+ SimpleAccountRealm simpleAccountRealm = new SimpleAccountRealm();
+ // 确保这里添加的用户名和密码与用户提供的匹配
+ simpleAccountRealm.addAccount(username, password, user.getRoles());
+
+ // 配置SecurityManager并设置Realm
+ DefaultSecurityManager securityManager = new DefaultSecurityManager(simpleAccountRealm);
+ SecurityUtils.setSecurityManager(securityManager);
+
//shiro验证
Subject subject= SecurityUtils.getSubject();
+ log.info("!11"+subject);
//根据用户名密码生成一个令牌
- UsernamePasswordToken token=new UsernamePasswordToken(username,password);
+ AuthenticationToken token=new UsernamePasswordToken(username,password);
+
try {
//执行登录操作
subject.login(token);
} catch (UnknownAccountException e) {
- log.info("登录用户不存在");
+ log.info("登录用户不存在:{}",e);
return new Result<>(416,"用户不存在",username);
} catch (IncorrectCredentialsException e) {
log.info("登录密码错误");
@@ -61,4 +77,59 @@ public class LoginControler {
userManageService.getOne(new QueryWrapper().eq("username",username)).getRoles();
return Result.success(tokenMap);
}
+
+ /**
+ * 刷新JWT令牌,用旧的令牌换新的令牌
+ * 参数为需要刷新的令牌
+ * header中携带刷新令牌
+ */
+
+ /**
+ * 当认证服务返回给客户端的 JWT 也就是 access_token 过期后，客户端如果需要再次通过发送登录请求重新拿到 access_token会使得用户体验很不友好。
+ * 而JWT 生成后是不能篡改里面的内容，即使是 JWT 的有效期也不行。所以延长 access_token 有效期的做法并不适合，而且如果长期保持一个 access_token 有效，
+ * 也是不安全的。所以我们时常使用refresh token来进行token的刷新。
+ *
+ * 我们一般会把 refresh_token 设置的过期时间稍微长一点，比如两倍于 access_token，当 access_token 过期后，refresh_token 如果还没有过期，
+ * 就可以利用两者的过期时间差进行重新生成令牌的操作，也就是刷新令牌，同时删除掉redis中缓存的旧令牌。
+ * @param token
+ * @return
+ */
+ @GetMapping("/token/refresh")
+ public CommonResult