| | |
| | | package com.ruoyi.framework.web.service; |
| | | |
| | | import java.util.HashMap; |
| | | import java.util.Map; |
| | | import java.util.concurrent.TimeUnit; |
| | | import javax.servlet.http.HttpServletRequest; |
| | | import org.springframework.beans.factory.annotation.Autowired; |
| | | import org.springframework.beans.factory.annotation.Value; |
| | | import org.springframework.stereotype.Component; |
| | | import cn.hutool.core.util.IdUtil; |
| | | import cn.hutool.http.useragent.UserAgent; |
| | | import cn.hutool.http.useragent.UserAgentUtil; |
| | | import com.ruoyi.common.constant.Constants; |
| | | import com.ruoyi.common.core.domain.model.LoginUser; |
| | | import com.ruoyi.common.core.redis.RedisCache; |
| | | import com.ruoyi.common.utils.ServletUtils; |
| | | import com.ruoyi.common.utils.StringUtils; |
| | | import com.ruoyi.common.utils.ip.AddressUtils; |
| | | import com.ruoyi.common.utils.ip.IpUtils; |
| | | import com.ruoyi.common.utils.uuid.IdUtils; |
| | | import eu.bitwalker.useragentutils.UserAgent; |
| | | import com.ruoyi.framework.config.properties.TokenProperties; |
| | | import io.jsonwebtoken.Claims; |
| | | import io.jsonwebtoken.Jwts; |
| | | import io.jsonwebtoken.SignatureAlgorithm; |
| | | import org.springframework.beans.factory.annotation.Autowired; |
| | | import org.springframework.stereotype.Component; |
| | | |
| | | import javax.servlet.http.HttpServletRequest; |
| | | import java.util.HashMap; |
| | | import java.util.Map; |
| | | import java.util.concurrent.TimeUnit; |
| | | |
| | | /** |
| | | * token验证处理 |
| | | * |
| | | * @author ruoyi |
| | | * |
| | | * @author Lion Li |
| | | */ |
| | | @Component |
| | | public class TokenService |
| | | { |
| | | // 令牌自定义标识 |
| | | @Value("${token.header}") |
| | | private String header; |
| | | |
| | | // 令牌秘钥 |
| | | @Value("${token.secret}") |
| | | private String secret; |
| | | |
| | | // 令牌有效期(默认30分钟) |
| | | @Value("${token.expireTime}") |
| | | private int expireTime; |
| | | public class TokenService { |
| | | |
| | | protected static final long MILLIS_SECOND = 1000; |
| | | |
| | |
| | | @Autowired |
| | | private RedisCache redisCache; |
| | | |
| | | @Autowired |
| | | private TokenProperties tokenProperties; |
| | | |
| | | /** |
| | | * 获取用户身份信息 |
| | | * |
| | | * |
| | | * @return 用户信息 |
| | | */ |
| | | public LoginUser getLoginUser(HttpServletRequest request) |
| | | { |
| | | public LoginUser getLoginUser(HttpServletRequest request) { |
| | | // 获取请求携带的令牌 |
| | | String token = getToken(request); |
| | | if (StringUtils.isNotEmpty(token)) |
| | | { |
| | | Claims claims = parseToken(token); |
| | | // 解析对应的权限以及用户信息 |
| | | String uuid = (String) claims.get(Constants.LOGIN_USER_KEY); |
| | | String userKey = getTokenKey(uuid); |
| | | LoginUser user = redisCache.getCacheObject(userKey); |
| | | return user; |
| | | if (StringUtils.isNotEmpty(token)) { |
| | | try { |
| | | Claims claims = parseToken(token); |
| | | // 解析对应的权限以及用户信息 |
| | | String uuid = (String) claims.get(Constants.LOGIN_USER_KEY); |
| | | String userKey = getTokenKey(uuid); |
| | | LoginUser user = redisCache.getCacheObject(userKey); |
| | | return user; |
| | | } catch (Exception e) { |
| | | |
| | | } |
| | | } |
| | | return null; |
| | | } |
| | |
| | | /** |
| | | * 设置用户身份信息 |
| | | */ |
| | | public void setLoginUser(LoginUser loginUser) |
| | | { |
| | | if (StringUtils.isNotNull(loginUser) && StringUtils.isNotEmpty(loginUser.getToken())) |
| | | { |
| | | public void setLoginUser(LoginUser loginUser) { |
| | | if (StringUtils.isNotNull(loginUser) && StringUtils.isNotEmpty(loginUser.getToken())) { |
| | | refreshToken(loginUser); |
| | | } |
| | | } |
| | |
| | | /** |
| | | * 删除用户身份信息 |
| | | */ |
| | | public void delLoginUser(String token) |
| | | { |
| | | if (StringUtils.isNotEmpty(token)) |
| | | { |
| | | public void delLoginUser(String token) { |
| | | if (StringUtils.isNotEmpty(token)) { |
| | | String userKey = getTokenKey(token); |
| | | redisCache.deleteObject(userKey); |
| | | } |
| | |
| | | |
| | | /** |
| | | * 创建令牌 |
| | | * |
| | | * |
| | | * @param loginUser 用户信息 |
| | | * @return 令牌 |
| | | */ |
| | | public String createToken(LoginUser loginUser) |
| | | { |
| | | String token = IdUtils.fastUUID(); |
| | | public String createToken(LoginUser loginUser) { |
| | | String token = IdUtil.fastUUID(); |
| | | loginUser.setToken(token); |
| | | setUserAgent(loginUser); |
| | | refreshToken(loginUser); |
| | |
| | | |
| | | /** |
| | | * 验证令牌有效期,相差不足20分钟,自动刷新缓存 |
| | | * |
| | | * @param token 令牌 |
| | | * |
| | | * @param loginUser |
| | | * @return 令牌 |
| | | */ |
| | | public void verifyToken(LoginUser loginUser) |
| | | { |
| | | public void verifyToken(LoginUser loginUser) { |
| | | long expireTime = loginUser.getExpireTime(); |
| | | long currentTime = System.currentTimeMillis(); |
| | | if (expireTime - currentTime <= MILLIS_MINUTE_TEN) |
| | | { |
| | | if (expireTime - currentTime <= MILLIS_MINUTE_TEN) { |
| | | refreshToken(loginUser); |
| | | } |
| | | } |
| | | |
| | | /** |
| | | * 刷新令牌有效期 |
| | | * |
| | | * |
| | | * @param loginUser 登录信息 |
| | | */ |
| | | public void refreshToken(LoginUser loginUser) |
| | | { |
| | | public void refreshToken(LoginUser loginUser) { |
| | | loginUser.setLoginTime(System.currentTimeMillis()); |
| | | loginUser.setExpireTime(loginUser.getLoginTime() + expireTime * MILLIS_MINUTE); |
| | | loginUser.setExpireTime(loginUser.getLoginTime() + tokenProperties.getExpireTime() * MILLIS_MINUTE); |
| | | // 根据uuid将loginUser缓存 |
| | | String userKey = getTokenKey(loginUser.getToken()); |
| | | redisCache.setCacheObject(userKey, loginUser, expireTime, TimeUnit.MINUTES); |
| | | redisCache.setCacheObject(userKey, loginUser, tokenProperties.getExpireTime(), TimeUnit.MINUTES); |
| | | } |
| | | |
| | | |
| | | /** |
| | | * 设置用户代理信息 |
| | | * |
| | | * |
| | | * @param loginUser 登录信息 |
| | | */ |
| | | public void setUserAgent(LoginUser loginUser) |
| | | { |
| | | UserAgent userAgent = UserAgent.parseUserAgentString(ServletUtils.getRequest().getHeader("User-Agent")); |
| | | String ip = IpUtils.getIpAddr(ServletUtils.getRequest()); |
| | | public void setUserAgent(LoginUser loginUser) { |
| | | UserAgent userAgent = UserAgentUtil.parse(ServletUtils.getRequest().getHeader("User-Agent")); |
| | | String ip = ServletUtils.getClientIP(); |
| | | loginUser.setIpaddr(ip); |
| | | loginUser.setLoginLocation(AddressUtils.getRealAddressByIP(ip)); |
| | | loginUser.setBrowser(userAgent.getBrowser().getName()); |
| | | loginUser.setOs(userAgent.getOperatingSystem().getName()); |
| | | loginUser.setOs(userAgent.getOs().getName()); |
| | | } |
| | | |
| | | |
| | | /** |
| | | * 从数据声明生成令牌 |
| | | * |
| | | * @param claims 数据声明 |
| | | * @return 令牌 |
| | | */ |
| | | private String createToken(Map<String, Object> claims) |
| | | { |
| | | private String createToken(Map<String, Object> claims) { |
| | | String token = Jwts.builder() |
| | | .setClaims(claims) |
| | | .signWith(SignatureAlgorithm.HS512, secret).compact(); |
| | | .signWith(SignatureAlgorithm.HS512, tokenProperties.getSecret()).compact(); |
| | | return token; |
| | | } |
| | | |
| | |
| | | * @param token 令牌 |
| | | * @return 数据声明 |
| | | */ |
| | | private Claims parseToken(String token) |
| | | { |
| | | private Claims parseToken(String token) { |
| | | return Jwts.parser() |
| | | .setSigningKey(secret) |
| | | .setSigningKey(tokenProperties.getSecret()) |
| | | .parseClaimsJws(token) |
| | | .getBody(); |
| | | } |
| | |
| | | * @param token 令牌 |
| | | * @return 用户名 |
| | | */ |
| | | public String getUsernameFromToken(String token) |
| | | { |
| | | public String getUsernameFromToken(String token) { |
| | | Claims claims = parseToken(token); |
| | | return claims.getSubject(); |
| | | } |
| | |
| | | * @param request |
| | | * @return token |
| | | */ |
| | | private String getToken(HttpServletRequest request) |
| | | { |
| | | String token = request.getHeader(header); |
| | | if (StringUtils.isNotEmpty(token) && token.startsWith(Constants.TOKEN_PREFIX)) |
| | | { |
| | | private String getToken(HttpServletRequest request) { |
| | | String token = request.getHeader(tokenProperties.getHeader()); |
| | | if (StringUtils.isNotEmpty(token) && token.startsWith(Constants.TOKEN_PREFIX)) { |
| | | token = token.replace(Constants.TOKEN_PREFIX, ""); |
| | | } |
| | | return token; |
| | | } |
| | | |
| | | private String getTokenKey(String uuid) |
| | | { |
| | | private String getTokenKey(String uuid) { |
| | | return Constants.LOGIN_TOKEN_KEY + uuid; |
| | | } |
| | | } |