springboot+springsecurity+mybatis+JWT+Redis 实现前后端离（实战篇）_springboot+spring security+mybatis的纯后端项目-优快云博客

写在开头：这篇是实战篇，即默认各位看官具备相应的基础

一、springboot

1.新建项目

2.application.yml的配置

3.写一个小demo

二、druid

三、springsecurity

1.引入相关依赖

2.写了几个工具类

3.实现springsecurity各个核心接口，处理用户各种状态

2.权限访问控制

3.jwt生成token的工具类

4.springsecurity核心处理

一、springboot

1.新建项目

我是用idea，jdk选择1.8以上

各个名字自行命名

添加部分依赖，后面再往pom.xml加入（这里忘记改了，springboot的版本我使用的是1.5.3release版本！）

简单的项目搭建好了，下一步
2.application.yml的配置

数据源
spring:
datasource:
username: root
password: 123456
url: jdbc:mysql://localhost/springboot?characterEncoding=utf-8&useSSl=false
driver-class-name: com.mysql.jdbc.Driver
数据池用了druid，pom.xml加入依赖

com.alibaba druid 1.1.8 添加mabatis、druid，完整配置： spring: datasource: username: root password: 123456 url: jdbc:mysql://localhost/springboot?characterEncoding=utf-8&useSSl=false driver-class-name: com.mysql.jdbc.Driver type: com.alibaba.druid.pool.DruidDataSource #监控统计拦截的filters filters: stat,wall,log4j #druid配置 #配置初始化大小/最小/最大 initialSize: 5 minIdle: 5 maxActive: 20 #获取连接等待超时时间 maxWait: 60000 #间隔多久进行一次检测，检测需要关闭的空闲连接 timeBetweenEvictionRunsMillis: 60000 #一个连接在池中最小生存的时间 minEvictableIdleTimeMillis: 300000 validationQuery: SELECT 1 FROM DUAL testWhileIdle: true testOnBorrow: false testOnReturn: false #打开PSCache，并指定每个连接上PSCache的大小。oracle设为true，mysql设为false。分库分表较多推荐设置为false poolPreparedStatements: false maxPoolPreparedStatementPerConnectionSize: 20 # 通过connectProperties属性来打开mergeSql功能；慢SQL记录 connectionProperties: druid: stat: mergeSql: true slowSqlMillis: 5000

#mybatis是独立节点，需要单独配置
mybatis:
mapper-locations: classpath*:mapper/*.xml
type-aliases-package: com.deceen.demo.entity
configuration:
map-underscore-to-camel-case: true
3.写一个小demo

controller层
package com.deceen.demo.controller;

import com.deceen.demo.entity.DemoEntity;
import com.deceen.demo.service.DemoService;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;

import java.util.List;

/**

@author: zzx
@date: 2018/10/25 16:48
@description: demo
*/
@RestController
@RequestMapping("/test")
public class DemoController {

@Autowired
private DemoService orderService;

@RequestMapping("/getUser")
public List getUser(){
List result = orderService.getUser();
return result;
}

}
service层
package com.deceen.demo.service;

import com.deceen.demo.entity.DemoEntity;

import java.util.List;

/**

@author: zzx
@date: 2018/10/25 17:00
@description:
*/
public interface DemoService {

List getUser();

}
impl
package com.deceen.demo.service.impl;

import com.deceen.demo.dao.DemoMapper;
import com.deceen.demo.entity.DemoEntity;
import com.deceen.demo.service.DemoService;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;

import java.util.List;

/**

@author: zzx
@date: 2018/10/25 17:03
@description:
*/
@Service
public class DemoServiceImpl implements DemoService {

@Autowired
private DemoMapper demoMapper;

@Override
public List getUser() {
return demoMapper.getUser();
}
}
dao
package com.deceen.demo.dao;

import com.deceen.demo.entity.DemoEntity;
import org.springframework.stereotype.Component;

import java.util.List;

/**

@author: zzx
@date: 2018/10/25 17:05
@description:
*/
@Component
public interface DemoMapper {

List getUser();

}
entity
package com.deceen.demo.entity;

import lombok.Data;

/**

@author: zzx
@date: 2018/10/25 17:01
@description:
*/
@Data
public class DemoEntity {

private Integer id;

private Integer age;

private String name;

private Float height;

}
这里介绍一下lombok，感觉蛮好用的一个插件，DemoEntity这个类中的@Data注解就是其一，可以自动生成getset方法（编译的时候），后面也会用到。教程：https://blog.youkuaiyun.com/zhglance/article/details/54931430

mapper.xml

<?xml version="1.0" encoding="UTF-8" ?>

<select id="getUser" resultType="com.deceen.demo.entity.DemoEntity">
    SELECT * FROM girl
</select>

（相关的数据库自己随便建，跟DemoEntity字段对上就好了。。。）

访问http://localhost:8080/test/getUser

成功

二、druid

上文提到druid，其实尚未真正可以使用，下面我们继续

1.druid参数配置

package com.deceen.common.config;

import com.alibaba.druid.pool.DruidDataSource;
import com.alibaba.druid.support.http.StatViewServlet;
import com.alibaba.druid.support.http.WebStatFilter;
import org.springframework.boot.context.properties.ConfigurationProperties;
import org.springframework.boot.web.servlet.FilterRegistrationBean;
import org.springframework.boot.web.servlet.ServletRegistrationBean;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.context.annotation.PropertySource;

import javax.sql.DataSource;

/**

druid参数配置
@author zzx
@date 2018/10/15 10:09
*/
@Configuration
@PropertySource(value = “classpath:application.yml”)
public class DruidConfiguration {

/**
- @author zzx
- @date 2018-10-15 11:28
- @todo 数据源配置
  */
  @Bean(destroyMethod = “close”, initMethod = “init”)
  @ConfigurationProperties(prefix = “spring.datasource”)
  public DataSource druidDataSource() {
  DruidDataSource druidDataSource = new DruidDataSource();
  return druidDataSource;
  }
/**
- druid
- 注册一个StatViewServlet
- @return
  /
  @Bean
  public ServletRegistrationBean druidStatViewServlet(){
  //org.springframework.boot.context.embedded.ServletRegistrationBean提供类的进行注册.
  ServletRegistrationBean servletRegistrationBean = new ServletRegistrationBean(new StatViewServlet(),"/druid/");
  
  //添加初始化参数：initParams
  //白名单：
  servletRegistrationBean.addInitParameter(“allow”,“127.0.0.1”);
  //IP黑名单 (存在共同时，deny优先于allow) : 如果满足deny的话提示:Sorry, you are not permitted to view this page.
  //servletRegistrationBean.addInitParameter(“deny”,“192.168.1.73”);
  //登录查看信息的账号密码.
  servletRegistrationBean.addInitParameter(“loginUsername”,“admin”);
  servletRegistrationBean.addInitParameter(“loginPassword”,“123456”);
  //是否能够重置数据.
  servletRegistrationBean.addInitParameter(“resetEnable”,“false”);
  return servletRegistrationBean;
  }
/**
- druid过滤器
- 注册一个：filterRegistrationBean
- @return
  /
  @Bean
  public FilterRegistrationBean druidStatFilter(){
  FilterRegistrationBean filterRegistrationBean = new FilterRegistrationBean(new WebStatFilter());
  //添加过滤规则.
  filterRegistrationBean.addUrlPatterns("/");
  //添加不需要忽略的格式信息.
  filterRegistrationBean.addInitParameter(“exclusions”,".js,.gif,.jpg,.png,.css,.ico,/druid/*");
  return filterRegistrationBean;
  }

}
访问http://localhost:8080/druid/login.html，账号密码为上面代码设置的

成功

三、springsecurity

1.引入相关依赖

org.springframework.boot spring-boot-starter-security com.alibaba fastjson 1.2.36 2.写了几个工具类

ResultEnum
package com.deceen.common.Enums;

import lombok.Getter;

/**

@author: zzx
@date: 2018/10/15 15:16
@description: 返回的错误码枚举类
*/
@Getter
public enum ResultEnum {

SUCCESS(101,“成功”),
FAILURE(102,“失败”),
USER_NEED_AUTHORITIES(201,“用户未登录”),
USER_LOGIN_FAILED(202,“用户账号或密码错误”),
USER_LOGIN_SUCCESS(203,“用户登录成功”),
USER_NO_ACCESS(204,“用户无权访问”),
USER_LOGOUT_SUCCESS(205,“用户登出成功”),
TOKEN_IS_BLACKLIST(206,“此token为黑名单”),
LOGIN_IS_OVERDUE(207,“登录已失效”),
;

private Integer code;

private String message;

ResultEnum(Integer code, String message) {
this.code = code;
this.message = message;
}

/**
- @author: zzx
- @date: 2018-10-15 16:26
- @deprecation:通过code返回枚举
  */
  public static ResultEnum parse(int code){
  ResultEnum[] values = values();
  for (ResultEnum value : values) {
  if(value.getCode() == code){
  return value;
  }
  }
  throw new RuntimeException(“Unknown code of ResultEnum”);
  }
  }
  ResultVO
  package com.deceen.common.VO;

import com.deceen.common.Enums.ResultEnum;

import java.io.Serializable;
import java.util.HashMap;
import java.util.Map;

/**

@author: zzx
@date: 2018/10/15 15:00
@description: 返回的格式
*/

public final class ResultVO implements Serializable {

private static final long serialVersionUID = 1725159680599612404L;

/**
* 返回msg，object，以及token
* 返回的code为默认
* @param message
* @param data
* @param jwtToken
* @return
*/
public final static Map<String, Object> success(String message, Object data,String jwtToken,Boolean success) {
Map<String, Object> map = new HashMap<>();
map.put(“jwtToken”,jwtToken);
map.put(“code”, ResultEnum.SUCCESS.getCode());
map.put(“message”, message);
map.put(“success”,success);
map.put(“data”, data);
return map;
}

/**
* 返回object，以及token
* 返回的msg，code为默认
* @param data
* @param jwtToken
* @return
*/
public final static Map<String, Object> success(Object data,String jwtToken) {
Map<String, Object> map = new HashMap<String, Object>();
map.put(“jwtToken”,jwtToken);
map.put(“code”, ResultEnum.SUCCESS.getCode());
map.put(“message”, ResultEnum.SUCCESS.getMessage());
map.put(“data”, data);
map.put(“success”,true);
return map;
}

/**
* 返回默认的信息
* @return
*/
public final static Map<String, Object> success() {
Map<String, Object> map = new HashMap<String, Object>();
map.put(“jwtToken”,null);
map.put(“code”, ResultEnum.SUCCESS.getCode());
map.put(“message”, ResultEnum.SUCCESS.getMessage());
map.put(“data”, null);
map.put(“success”,true);
return map;
}

public final static Map<String, Object> failure(int code, String message,Object data) {
Map<String, Object> map = new HashMap<String, Object>();
map.put(“code”, code);
map.put(“message”, message);
map.put(“data”, data);
map.put(“success”,false);
return map;
}

public final static Map<String, Object> failure(int code, String message) {
Map<String, Object> map = new HashMap<String, Object>();
map.put(“code”, code);
map.put(“message”, message);
map.put(“data”, null);
map.put(“success”,false);
return map;
}

public final static Map<String, Object> failure(ResultEnum respCode, Object data, Boolean success) {
return getStringObjectMap(respCode, data,success);
}

public final static Map<String, Object> failure(ResultEnum respCode, Boolean success) {
return getStringObjectMap(respCode,success);
}

成功返回特定的状态码和信息
*/
public final static Map<String, Object> result(ResultEnum respCode, Object data, Boolean success) {
return getStringObjectMap(respCode, data,success);
}

private static Map<String, Object> getStringObjectMap(ResultEnum respCode, Object data, Boolean success) {
Map<String, Object> map = new HashMap<String, Object>();
map.put(“code”, respCode.getCode());
map.put(“message”, respCode.getMessage());
map.put(“data”, data);
map.put(“success”,success);
return map;
}

/*
* 成功返回特定的状态码和信息
* */
public final static Map<String, Object> result(ResultEnum respCode, Boolean success) {
return getStringObjectMap(respCode,success);
}

private static Map<String, Object> getStringObjectMap(ResultEnum respCode, Boolean success) {
Map<String, Object> map = new HashMap<String, Object>();
map.put(“code”, respCode.getCode());
map.put(“message”, respCode.getMessage());
map.put(“data”, null);
map.put(“success”,success);
return map;
}

/*
* 成功返回特定的状态码和信息
* */
public final static Map<String, Object> result(ResultEnum respCode, String jwtToken, Boolean success) {
Map<String, Object> map = new HashMap<String, Object>();
map.put(“jwtToken”,jwtToken);
map.put(“code”, respCode.getCode());
map.put(“message”, respCode.getMessage());
map.put(“data”, null);
map.put(“success”,success);
return map;
}
}
可以看出来，我们后面是会集成jwt的token过来的，看得懂就行，后面根据需要改

下面就是springsecurity核心几个东西啦，具体我还没深入，等后面有时间再写一篇深入一点的（大体分析一下shiro和springsecurity吧。。。）

3.实现springsecurity各个核心接口，处理用户各种状态

实现AuthenticationEntryPoint接口，处理用户未登录
package com.deceen.common.security;

import com.alibaba.fastjson.JSON;
import com.deceen.common.Enums.ResultEnum;
import com.deceen.common.VO.ResultVO;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.web.AuthenticationEntryPoint;
import org.springframework.stereotype.Component;