SpringBoot与Redis的令牌主动失效机制实现

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-data-redis</artifactId>
</dependency>
<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-web</artifactId>
</dependency>

spring:
  redis:
    host: localhost
    port: 6379
    timeout: 6000ms
    lettuce:
      pool:
        max-active: 8
        max-idle: 2
        min-idle: 1
        max-wait: -1ms

@Autowired
private StringRedisTemplate stringRedisTemplate;

public String login(String username, String password) {
    // 生成Token
    String token = UUID.randomUUID().toString();
    // 将Token存储到Redis中，有效期1小时
    ValueOperations<String, String> operations = stringRedisTemplate.opsForValue();
    operations.set(token, token, 1, TimeUnit.HOURS);
    // 返回给用户的响应中包含Token
    return token;
}

public class LoginInterceptor implements HandlerInterceptor {

    @Autowired
    private StringRedisTemplate stringRedisTemplate;

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        // 从请求头中获取Token
        String token = request.getHeader("Authorization");
        if (token == null || token.isEmpty()) {
            throw new RuntimeException("缺少令牌");
        }

        // 从Redis中查询Token
        ValueOperations<String, String> operations = stringRedisTemplate.opsForValue();
        String redisToken = operations.get(token);

        if (redisToken == null) {
            // Token不存在或已过期，抛出异常
            throw new RuntimeException("无效的令牌");
        }
        // Token有效，继续处理请求
        return true;
    }
}

public void changePassword(String username, String newPassword) {
    // 假设用户验证通过并修改了密码
    // 删除Redis中的旧Token
    String token = getCurrentTokenForUser(username); // 从上下文或数据库中获取当前用户的Token
    ValueOperations<String, String> operations = stringRedisTemplate.opsForValue();
    operations.getOperations().delete(token);
}

@SpringBootTest
class RedisTest {

    @Autowired
    private StringRedisTemplate stringRedisTemplate;

    @Test
    public void testSet() {
        ValueOperations<String, String> operations = stringRedisTemplate.opsForValue();
        operations.set("username", "zhangsan");
        operations.set("id", "1", 15, TimeUnit.SECONDS);

        // 检查存储的值
        String username = operations.get("username");
        System.out.println("用户名：" + username);
    }
}