Springboot中JWT登录校验及其拦截器实现方法

        <dependency>
            <groupId>com.auth0</groupId>
            <artifactId>java-jwt</artifactId>
            <version>3.10.3</version>
        </dependency>

    public static String getToken(String userId, String password){

        long EXPIRE_TIME = 60 * 60 * 1000;  //过期时间 60 分钟
        Date date = new Date(System.currentTimeMillis() + EXPIRE_TIME);
        String token = JWT.create().withAudience(userId) // 将 userId 保存到 token 里面
                .withExpiresAt(date) //60分钟后token过期
                .sign(Algorithm.HMAC256(password));  //使用用户id和password进行token生成
        return token;  //返回加密后的token密钥

    }

public class JwtInterceptor implements HandlerInterceptor {
    @Autowired
    private UserService userService;

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) {

        //通过预检请求
       if(request.getMethod().equals("OPTION")){
           return true;
       }
       //从请求头中获取Token，xxx为前端请求头中value为Token密钥的key
       String token = request.getHeader("xxx");
        // 如果不是映射到方法直接通过
        if(!(handler instanceof HandlerMethod)){
            return true;
        }
        //ServiceException是自定义的异常
        if(token == null){
            throw new ServiceException(Constants.CODE_401,"请登录");
        }

        String userId;
        try {
            //对Token密钥进行解密，获取用户id
            userId = JWT.decode(token).getAudience().get(0);
        } catch (JWTDecodeException j) {
            //Token密钥有误，无法解密
            throw new ServiceException(Constants.CODE_401,"请登录");
        }

        //通过解密后获取的用户id进行数据库查询，判断是否有该id的用户
        User user = userService.getUser(userId);
        if (user == null) {
            //没有该用户
            throw new ServiceException(Constants.CODE_401,"请登录");
        }
        //获取从数据库查询出来的用户密码，对前端带过来的Token密钥进行进一步验证
        JWTVerifier jwtVerifier = JWT.require(Algorithm.HMAC256(user.getPassword())).build();
        try {
            jwtVerifier.verify(token);
        } catch (JWTVerificationException e) {
            //Token密钥有误
            throw new ServiceException(Constants.CODE_401,"请登录");
        }


        return true;
    }
}

@Configuration
public class InterceptorConfig implements WebMvcConfigurer {
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        //"/user/login","/xxx","/yyy/**" 为JWT拦截器不拦截，直接放行的接口
        registry.addInterceptor(jwtInterceptor())
        .addPathPatterns("/**").excludePathPatterns("/user/login","/xxx","/yyy/**");
    }

    @Bean
    public JwtInterceptor jwtInterceptor(){
        return new JwtInterceptor();
    }
}