千峰商城-springboot项目搭建-55-通过Header传递token

前端但凡访问受限资源,都必须携带token发送请求。token可以通过请求行(params)、请求头(header)以及请求体(data)传递,但是习惯性使用header传递。
 
1.axios通过请求头传值
                   axios({
                        method:"get",
                        url:baseUrl+"shopcart/list",
                        headers:{
                            token:this.token
                        }
                    }).then(function(res){
                        console.log(res);
                    });

 

 
2.在拦截器中放行option请求
@Component
public class CheckTokenInterceptor implements HandlerInterceptor {
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        String method = request.getMethod();
        if ("OPTIONS".equalsIgnoreCase(method)){
            return true;//收到试探数据则放行(三次握手中的第一次试探)
        }
        String token = request.getHeader("token");

        //System.out.println("---------"+token);
        if (token == null) {
            ResultVO resultVO = new ResultVO(ResStatus.NO, "请先登录", null);
            //提示请先登录
            doResponse(response,resultVO);
            return false;
        } else {
            try {
                //验证token
                JwtParser parser = Jwts.parser();
                parser.setSigningKey("q666");//解析token时的SigningKey必须与设置token时设置的密码一致
                //如果token正确(密码正确,有效期内)则正常执行,否则抛出异常
                Jws<Claims> claimsJwt = parser.parseClaimsJws(token);


                return true;

            } catch (ExpiredJwtException e) {
                ResultVO resultVO = new ResultVO(ResStatus.NO, "登陆过期", null);
                doResponse(response,resultVO);
            } catch (UnsupportedJwtException e) {
                ResultVO resultVO = new ResultVO(ResStatus.NO, "token不合法,自重哈", null);
                doResponse(response,resultVO);
            } catch (Exception e) {
                ResultVO resultVO = new ResultVO(ResStatus.NO, "请先登录", null);
                doResponse(response,resultVO);
            }
            return false;

        }
    }
    private void doResponse(HttpServletResponse response,ResultVO resultVO) throws IOException {
        response.setContentType("application/json");
        response.setCharacterEncoding("utf-8");
        PrintWriter out = response.getWriter();
        String s = new ObjectMapper().writeValueAsString(resultVO);
        out.println(s);
        out.flush();
        out.close();
    }

}

 

 
 
 
 
posted @ 2022-07-14 11:42  临易  阅读(445)  评论(0编辑  收藏  举报