SpringBoot通过token实现用户互踢功能(具体实现)

package org.example.untils;
import com.auth0.jwt.JWT;
import com.auth0.jwt.JWTVerifier;
import com.auth0.jwt.algorithms.Algorithm;
import com.auth0.jwt.exceptions.JWTDecodeException;
import com.auth0.jwt.exceptions.JWTVerificationException;
import java.util.Date;
import java.util.HashMap;
import java.util.Map;
public class Token {
    /**
     * 过期30分钟
     * */
    private static final long EXPIRE_TIME = 30 * 60 * 1000;
    /**
     * jwt密钥
     * */
    private static final String SECRET = "jwt_secret";
    public static Map<String,String> map=new HashMap<>();//存放token的map集合
    public static Map<String, String> getMap() {
        return map;
    }
    public static void setMap(Map<String, String> map) {
        Token.map = map;
    }
    /**
     * 生成jwt字符串，30分钟后过期  JWT(json web token)
     * @param account
     * @return
     * */
    public static String sign(String account) {//签发token
        try {
            Date date = new Date(System.currentTimeMillis() + EXPIRE_TIME);
            Algorithm algorithm = Algorithm.HMAC256(SECRET);
            return JWT.create()
                    //将account保存到token里面
                    .withAudience(account)
                    //五分钟后token过期
                    .withExpiresAt(date)
                    //token的密钥
                    .sign(algorithm);
        } catch (Exception e) {
            e.printStackTrace();
            return null;
        }
    }
    /**
     * 根据token获取account
     * @param token
     * @return
     * */
    public static String getAccount(String token) {
        try {
            String account = JWT.decode(token).getAudience().get(0);
            return account;
        }catch (JWTDecodeException e) {
            return null;
        }
    }
    /**
     * 校验token
     * @param token
     * @return
     * */
    public static boolean checkSign(String token) {
        try {
            Algorithm algorithm  = Algorithm.HMAC256(SECRET);
            JWTVerifier verifier = JWT.require(algorithm)
                    //.withClaim("username, username)
                    .build();
            verifier.verify(token);
            return true;
        } catch (JWTVerificationException e) {
            System.out.println("token无效");
            String account=Token.getAccount(token);//将该token从白名单内移除
            if(account!=null){
                Token.map.remove(account);//移出白名单
            }
            return false;//token无效
        }
    }
}
 

@GetMapping("/login")//用户登入
    public Result login(@Param("account") String account,@Param("password") String password){
        User user = userServiceImpl.login(account);
        if (user==null){
            return new Result(201,"账号不存在",null);
        } else if(user.getPassword().equals(password)){//密码正确
            Token.map.remove(account);//移除之前的token
            String token=Token.sign(account);//签发新的token
            Token.map.put(account,token);//将新的token移入有效token
            user.setPassword("");
            return new Result(200,token,user);
        } else {
            return new Result(201,"账号/密码错误",null);
        }
    }

package org.example.untils;
import org.springframework.web.servlet.HandlerInterceptor;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.util.Objects;
public class Interceptor implements HandlerInterceptor {
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)
            throws Exception {
        String token=request.getHeader("token");
        String account=Token.getAccount(token);//通过token获取用户账号
        String usingToken=Token.map.get(account);//获取该用户最新的有效token
        if(!Objects.equals(token, usingToken)){//该token已经失效
            response.setStatus(401);
            return false;
        }
        //检查token
        if(Token.checkSign(token)){
            return true;
        } else {
            response.setStatus(401);
            return false;
        }
    }
}
 

package org.example.untils;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
@Configuration//定义此类为配置类
public class InterceptorConfig implements WebMvcConfigurer {
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        //创建用户拦截器对象并指定其拦截的路径和排除的路径
        registry.addInterceptor(new Interceptor()).
            addPathPatterns("/**").excludePathPatterns("/user/login","/admin/login","/service/getAllServices",
                        "/shop/getShopById","/img/**");
    }
}