Spring boot 入门教程-token验证

在Spring Boot中实现Token验证，通常可以使用Spring Security和JWT（JSON Web Tokens）。以下是一个简单的例子：

1. 添加依赖到你的pom.xml：

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-security</artifactId>
</dependency>
<dependency>
    <groupId>io.jsonwebtoken</groupId>
    <artifactId>jjwt</artifactId>
    <version>0.9.1</version>
</dependency>

2. 配置Spring Security：

import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
 
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
 
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .csrf().disable() // 禁用CSRF保护
            .authorizeRequests()
            .anyRequest().authenticated() // 所有请求都需要验证
            .and()
            .addFilter(new TokenAuthenticationFilter(authenticationManager())); // 添加Token验证过滤器
    }
}

3. 创建TokenAuthenticationFilter：

import io.jsonwebtoken.Jwts;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.web.filter.OncePerRequestFilter;
 
import javax.servlet.FilterChain;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
 
public class TokenAuthenticationFilter extends OncePerRequestFilter {
 
    @Override
    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain chain) throws ServletException, IOException {
        String header = request.getHeader("Authorization");
 
        if (header == null || !header.startsWith("Bearer ")) {
            chain.doFilter(request, response);
            return;
        }
 
        String token = header.substring(7);
 
        try {
            String username = Jwts.parser()
                    .setSigningKey("your_secret_key")
                    .parseClaimsJws(token)
                    .getBody()
                    .getSubject();
 
            if (username != null) {
                UsernamePasswordAuthenticationToken auth = new Usern