springboot token签名

使用JWT(JSON WEB TOKEN)工具， <artifactId>jjwt</artifactId>

 

生成token方式

package com.travelsky.auto.token;

import com.travelsky.config.TokenConfig;
import io.jsonwebtoken.*;
import lombok.extern.slf4j.Slf4j;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.authentication.BadCredentialsException;
import org.springframework.stereotype.Component;

import java.sql.Date;
import java.time.LocalDateTime;
import java.time.ZoneId;

/**
 * token工厂
 */
@Component
@Slf4j
public class TokenFactory {

    @Autowired
    private TokenConfig tokenConfig;

    /**
     * 生成token
     * @param key
     * @return
     */
    public TokenContent createToken(final String key) {
        final LocalDateTime now = LocalDateTime.now();
        // Claims保存主题信息
        final Claims claims = Jwts.claims().setSubject(tokenConfig.getSubject());
        final String token = Jwts.builder()
                // 设置信息
                .setClaims(claims)
                // 设置主体
                .setIssuer(tokenConfig.getIssuer())
                // 设置创建时间
                .setIssuedAt(Date.from(now.atZone(ZoneId.systemDefault()).toInstant()))
                // 设置过期时间
                .setExpiration(Date.from(now.plusMinutes(tokenConfig.getExpiration()).atZone(ZoneId.systemDefault()).toInstant()))
                // 使用HS512加密
                .signWith(SignatureAlgorithm.HS512, key)
                // 生成字符串token
                .compact();
        return new TokenContent(token, claims);
    }

 

根据前端取回的token进行验证方式

package com.travelsky.auto.token;

import com.travelsky.config.TokenConfig;
import io.jsonwebtoken.*;
import lombok.extern.slf4j.Slf4j;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.authentication.BadCredentialsException;
import org.springframework.stereotype.Component;

import java.sql.Date;
import java.time.LocalDateTime;
import java.time.ZoneId;

/**
 * token工厂
 */
@Component
@Slf4j
public class TokenFactory {

    @Autowired
    private TokenConfig tokenConfig;
/**
     * 验证token
     * @param key 与subject一致
     * @param token 页面传回的token字符串
     */
    void parser(final String key, final String token) {
        try {
            // 验证token
            Jwts.parser().setSigningKey(key).parseClaimsJws(token);
        } catch (UnsupportedJwtException | MalformedJwtException | IllegalArgumentException | SignatureException ex) {
            log.error("不可用Invalid Token", ex);
            throw new BadCredentialsException("验证失败，Token不可用：Invalid token: ", ex);
        } catch (ExpiredJwtException expiredEx) {
            log.info("过期Token is expired", expiredEx);
            throw new ExpiredTokenException("token过期", expiredEx);
        }
    }
}

 

token配置类

package com.travelsky.config;

import lombok.Data;
import org.springframework.boot.context.properties.ConfigurationProperties;
import org.springframework.context.annotation.Configuration;

@Configuration
@Data
@ConfigurationProperties(prefix = "token")
public class TokenConfig {

    private String issuer;

    private Long expiration;

    private String subject;
}

 

token配置文件

token:
  issuer: antlord
  expiration: 20
  subject: token