SpringBoot登录接口+Token+拦截器编写超详细

在Spring Boot中实现登录接口、Token和拦截器的步骤如下：

1. 引入依赖（pom.xml）：

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-web</artifactId>
</dependency>
<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-data-jpa</artifactId>
</dependency>
<dependency>
    <groupId>com.auth0</groupId>
    <artifactId>java-jwt</artifactId>
    <version>3.10.3</version>
</dependency>

2. 配置JWT（JwtUtil.java）：

import com.auth0.jwt.JWT;
import com.auth0.jwt.algorithms.Algorithm;
import java.util.Date;
 
public class JwtUtil {
    private static final String SECRET = "your_secret_key";
 
    public static String generateToken(String username) {
        return JWT.create()
                .withSubject(username)
                .withIssuedAt(new Date())
                .sign(Algorithm.HMAC_SHA_256(SECRET));
    }
 
    public static String getUsernameFromToken(String token) {
        return JWT.require(Algorithm.HMAC_SHA_256(SECRET))
                .build()
                .verify(token)
                .getSubject();
    }
}

3. 创建拦截器（JwtInterceptor.java）：

import org.springframework.web.servlet.HandlerInterceptor;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
 
public class JwtInterceptor implements HandlerInterceptor {
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) {
        final String authHeader = request.getHeader("Authorization");
        if (authHeader != null && authHeader.startsWith("Bearer ")) {
            String token = authHeader.substring(7);
            try {
                String username = JwtUtil.getUsernameFromToken(token);
                // 验证token有效性，例如检查是否过期等
                // ...
                return true;
            } catch (Exception e) {
                // 无效token处理
                // ...
                return false;
            }
        }
        return false;
    }