校验JWT

最新推荐文章于 2025-05-31 17:12:28 发布

原创最新推荐文章于 2025-05-31 17:12:28 发布 · 213 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#java

这是一个Java实现的JWT验证过滤器，用于校验请求中的JWT令牌。当请求路径包含'/login'时，过滤器放行；否则，从请求头中获取token进行有效性检查。如果token不存在或者过期，响应状态设为UNAUTHORIZED。验证通过后，将用户ID存储在header中并继续处理请求。

import com.heima.app.gateway.util.AppJwtUtil;
import io.jsonwebtoken.Claims;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang.StringUtils;
import org.springframework.cloud.gateway.filter.GatewayFilterChain;
import org.springframework.cloud.gateway.filter.GlobalFilter;
import org.springframework.core.Ordered;
import org.springframework.http.HttpStatus;
import org.springframework.http.server.reactive.ServerHttpRequest;
import org.springframework.http.server.reactive.ServerHttpResponse;
import org.springframework.stereotype.Component;
import org.springframework.web.server.ServerWebExchange;
import reactor.core.publisher.Mono;

@Component
@Slf4j
public class AuthorizeFilter implements Ordered, GlobalFilter {
@Override
public Mono<Void> filter(ServerWebExchange exchange, GatewayFilterChain chain) {
//1.获取request和response对象
ServerHttpRequest request = exchange.getRequest();
ServerHttpResponse response = exchange.getResponse();

//2.判断是否是登录
if(request.getURI().getPath().contains("/login")){
//放行
return chain.filter(exchange);
}

//3.获取token
String token = request.getHeaders().getFirst("token");

//4.判断token是否存在
if(StringUtils.isBlank(token)){
response.setStatusCode(HttpStatus.UNAUTHORIZED);
return response.setComplete();
}

//5.判断token是否有效
try {
Claims claimsBody = AppJwtUtil.getClaimsBody(token);
//是否是过期
int result = AppJwtUtil.verifyToken(claimsBody);
if(result == 1 || result == 2){
response.setStatusCode(HttpStatus.UNAUTHORIZED);
return response.setComplete();
}

//获取用户信息
Object userId = claimsBody.get("id");

//存储header中
ServerHttpRequest serverHttpRequest = request.mutate().headers(httpHeaders -> {
httpHeaders.add("userId", userId + "");
}).build();
//重置请求
exchange.mutate().request(serverHttpRequest);
} catch (Exception e) {
e.printStackTrace();
}

//6.放行
return chain.filter(exchange);
}

/**
* 优先级设置值越小优先级越高
* @return
*/
@Override
public int getOrder() {
return 0;
}
}