06-springboot整合jwt二

将我们的jwt验证放入我们的拦截器中实现
1、编写我们的拦截器

package com.study.interceptors;

import com.auth0.jwt.exceptions.AlgorithmMismatchException;
import com.auth0.jwt.exceptions.InvalidClaimException;
import com.auth0.jwt.exceptions.SignatureVerificationException;
import com.auth0.jwt.exceptions.TokenExpiredException;
import com.fasterxml.jackson.databind.ObjectMapper;
import com.study.util.JWTUtils;
import org.springframework.web.servlet.HandlerInterceptor;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.util.HashMap;
import java.util.Map;

public class JWTInterceptor implements HandlerInterceptor {
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        Map map = new HashMap<>();
        String token = request.getHeader("token");//从我们的请求头中获取我们的token

        try {
            JWTUtils.verify(token);//调用jwt工具类验证令牌
            return true;//验证成功----直接放行
        }catch (SignatureVerificationException e){
            e.printStackTrace();
            map.put("msg", "签名不一致");
        }catch (TokenExpiredException e){
            e.printStackTrace();
            map.put("msg", "令牌过期");
        }catch (AlgorithmMismatchException e){
            e.printStackTrace();
            map.put("msg", "算法不匹配");
        }catch (InvalidClaimException e){
            e.printStackTrace();
            map.put("msg", "失效的payload");
        }catch (Exception e){
            e.printStackTrace();
            map.put("msg", e.getMessage());
        }

        //验证不成功，为了让前端知道问题出在哪里，将map以json的格式返回
        map.put("state",false);//设置状态
        String json = new ObjectMapper().writeValueAsString(map);
        response.setContentType("application/json;charset=utf-8");
        response.getWriter().println(json);
        return false;
    }
}

2、编写拦截器配置文件类并继承 WebMvcConfigurer类，并重写其中的方法 addInterceptors并且在主类上加上注解 @Configuration

package com.study.config;

import com.study.interceptors.JWTInterceptor;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;

@Configuration
public class InterceptorConfig implements WebMvcConfigurer {

    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        registry.addInterceptor(new JWTInterceptor())
                .addPathPatterns("/user/test")
                .excludePathPatterns("/user/login");
        /**
         * 正常情况下，我们所有跟用户相关的操作都放行
         * 其他操作都保护，这里只是为了测试
         */
    }
}

3、测试