Java轻松实现权限认证管理的示例代码

-- 创建Roles表
CREATE TABLE Roles (
    id INT AUTO_INCREMENT PRIMARY KEY,
    user_id INT NOT NULL,
    role_name VARCHAR(255) NOT NULL
);
 
-- 创建Permissions表
CREATE TABLE Permissions (
    id INT AUTO_INCREMENT PRIMARY KEY,
    user_roles VARCHAR(255) NOT NULL,
    permission VARCHAR(255) NOT NULL
);

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-aop</artifactId>
</dependency>

@Target(ElementType.METHOD)
@Retention(RetentionPolicy.RUNTIME)
public @interface DbmAuthority {
    String value(); // 权限字符串，格式为"功能:角色:权限"
}

@Data
public class User {
    private String id; //用户ID
    private List<String> roles; //角色
    private List<String> permissions; //权限
}

public interface UserRepository {
    User getUserById(String userId);
}

public class UserRepositoryimpl implements UserRepository{
 
    @Resource
    private RolesMapper rolesMapper;
 
    @Resource
    private Permissions permissionsMapper;
 
    @Override
    public User getUserById(String userId) {
        //根据id获取该用户扮演的角色
        List<String> roles = rolesMapper.selectAll(userId);
        //根据id获取该用户拥有的权限 
        List<String> permissions = new ArrayList<>();  
         roles.stream().forEach(a->{
         List<String> permission =permissionsMapper.selectAll(a);   
         permission.stream().forEach(a->{
         permissions.add(a);
         });
        });       
        User user= new User(userId,roles,permissions);
        return user;
    }
}

SELECT R.id AS id, 
       GROUP_CONCAT(R.role_name) AS role_list,
       GROUP_CONCAT(P.permission) AS permission_list
FROM Roles R
LEFT JOIN Permissions P ON R.role_name = P.user_roles
WHERE R.id = 1; -- 你的特定id
GROUP BY R.id;

@Aspect
@Component
public class DbmAuthorityAspect {
 
    @Resource
    private UserRepositoryimpl userRepositoryimpl;
 
    @Resource
    private RedisUtils redisutils;
 
    @Pointcut("@annotation(com.dabaimao.DbmAuthority)")
    public void authorityCheckPointcut(JoinPoint joinPoint) {
    }
 
    @Before("@annotation(com.dabaimao.DbmAuthority)")
    public void checkDbmAuthority(JoinPoint joinPoint) {
      try {
        // 获取当前用户的ID（从Redis中获取）
        String userId = getUserIdFromRedis(); 
 
        // 根据用户ID查询用户信息
        User user = userRepositoryimpl.getUserById(userId);
        
        // 获取注解类对象
        Signature signature = point.getSignature();
        MethodSignature methodSignature = (MethodSignature) signature;
        Method method = methodSignature.getMethod();
        DbmAuthority annotation = method.getAnnotation(DbmAuthority.class);
 
        // 检查用户是否具有所需的角色和权限
        if (userHasRequiredAuthority(user, annotation.value())) {
            // 用户具有权限，允许访问
        } else {
            throw new SecurityException("权限不够，拒绝访问");
        }
       } catch (Exception ex) {
           throw new RuntimeException("权限处理异常");
       }
    }
 
    private boolean userHasRequiredAuthority(User user, String requiredAuthority) {
        // 实际权限检查逻辑，需要根据用户的角色和权限信息以及 requiredAuthority 判断
        // 这里只是一个示例，实际逻辑可能更复杂
        return user.getRoles().contains(requiredAuthority) || user.getPermissions().contains(requiredAuthority);
    }
 
    private String getUserIdFromRedis() {
        // 实际从Redis中获取用户ID的逻辑
        // redisutils.getkey...
        return "user123"; // 示例
    }
}

@RestController
public class MyController {
 
    @DbmAuthority("功能:角色:权限") //访问这个功能登录用户所需要的角色和权限
    @GetMapping("/protectedEndpoint")
    public ResponseEntity<String> protectedEndpoint() {
        // 执行需要权限验证的操作
        return ResponseEntity.ok("访问成功");
    }
}