springboot篇-基于session和github-oauth2实现登录注册验证

以下是一个简化的代码示例，展示了如何在Spring Boot应用程序中使用session和GitHub OAuth2实现登录和注册功能：

import org.springframework.web.bind.annotation.*;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.http.ResponseEntity;
import org.springframework.web.servlet.mvc.support.RedirectAttributes;
import javax.servlet.http.HttpSession;
 
@RestController
public class AuthController {
 
    @Autowired
    private GitHubOAuth2Service gitHubOAuth2Service;
 
    // 启动GitHub OAuth2认证流程
    @GetMapping("/login")
    public String login(HttpSession session) {
        String authorizationUrl = gitHubOAuth2Service.getAuthorizationUrl();
        session.setAttribute("state", gitHubOAuth2Service.generateState());
        return "redirect:" + authorizationUrl;
    }
 
    // OAuth2认证回调处理
    @GetMapping("/callback")
    public String callback(@RequestParam("code") String code, @RequestParam("state") String state,
                          HttpSession session, RedirectAttributes redirectAttributes) {
        if (!gitHubOAuth2Service.validateState(state, (String) session.getAttribute("state"))) {
            redirectAttributes.addFlashAttribute("error", "State validation failed");
            return "redirect:/login";
        }
 
        try {
            String accessToken = gitHubOAuth2Service.getAccessToken(code);
            User user = gitHubOAuth2Service.getUser(accessToken);
            // 在这里实现登录逻辑，比如将用户信息存储在session中
            session.setAttribute("user", user);
            return "redirect:/home";
        } catch (Exception e) {
            redirectAttributes.addFlashAttribute("error", e.getMessage());
            return "redirect:/login";
        }
    }
 
    // 注册新用户
    @PostMapping("/register")
    public ResponseEntity<?> registerUser(@RequestBody User user) {
        // 在这里实现注册逻辑
        // ...
        return ResponseEntity.ok().build();
    }
 
    // 登出用户
    @GetMapping("/logout")
    public String logout(HttpSession session) {
        session.invalidate();
        return "redirect:/login";
    }
}
 
class GitHubOAuth2Service {
    // 省略GitHubOAu