生活随笔
收集整理的這篇文章主要介紹了
jwt的续期功能
小編覺得挺不錯的,現在分享給大家,幫大家做個參考.
JWT的TOKEN續期功能
import com.starmark.core.shiro.model.SecurityUser;
import javax.servlet.ServletRequest;
public class JwtAuthFilter extends AuthenticatingFilter {
@Override
protected boolean preHandle(ServletRequest request, ServletResponse response) throws Exception {HttpServletRequest httpServletRequest = WebUtils.toHttp(request);if (httpServletRequest.getMethod().equals(RequestMethod.OPTIONS.name())) //對于OPTION請求做攔截，不做token校驗return false;return super.preHandle(request, response);
}@Override
protected void postHandle(ServletRequest request, ServletResponse response) {request.setAttribute("jwtShiroFilter.FILTERED", true);
}@Override
protected boolean isAccessAllowed(ServletRequest request, ServletResponse response, Object mappedValue) {if (this.isLoginRequest(request, response)) {return true;}Boolean afterFiltered = (Boolean) (request.getAttribute("jwtShiroFilter.FILTERED"));if (BooleanUtils.isTrue(afterFiltered))return true;boolean allowed = false;try {allowed = executeLogin(request, response);} catch (IllegalStateException e) { //not found any tokenlog.error("Not found any token");} catch (Exception e) {log.error("Error occurs when login", e);}return allowed || super.isPermissive(mappedValue);
}@Override
protected AuthenticationToken createToken(ServletRequest servletRequest, ServletResponse servletResponse) {String jwtToken = getAuthzHeader(servletRequest);if (StringUtils.isNotBlank(jwtToken) && !JWTUtil.isTokenExpired(jwtToken))return UserLoginToken.buildPassword(jwtToken, null, "jwt");return null;
}@Override
protected boolean onAccessDenied(ServletRequest servletRequest, ServletResponse servletResponse) throws Exception {HttpServletResponse httpResponse = WebUtils.toHttp(servletResponse);httpResponse.sendRedirect("/unauth");return false;
}@Override
protected boolean onLoginSuccess(AuthenticationToken token, Subject subject, ServletRequest request, ServletResponse response) {HttpServletResponse httpResponse = WebUtils.toHttp(response);if (token instanceof UserLoginToken && "jwt".equalsIgnoreCase(((UserLoginToken) token).getLoginType())) {UserLoginToken jwtToken = (UserLoginToken) token;boolean shouldRefresh = shouldTokenRefresh(Objects.requireNonNull(JWTUtil.getIssuedAt(jwtToken.getUsername())));if (shouldRefresh) {//生成新的TOKENSecurityUser user = (SecurityUser) subject.getPrincipal();String newToken = JWTUtil.sign(user.getUserInfo().getId());httpResponse.setHeader("x-auth-token", newToken);}}return true;
}@Override
protected boolean onLoginFailure(AuthenticationToken token, AuthenticationException e, ServletRequest request, ServletResponse response) {log.error("Validate token fail, token:{}, error:{}", token.toString(), e.getMessage());return false;
}/*** 獲取TOKEN* @param request 請求* @return token*/
private String getAuthzHeader(ServletRequest request) {HttpServletRequest httpRequest = WebUtils.toHttp(request);String header = httpRequest.getHeader("x-auth-token");return StringUtils.removeStart(header, "Bearer ");
}/*** 判斷是否需要刷新TOKEN* @param issueAt token簽發日期* @return 是否需要刷新TOKEN*/
private boolean shouldTokenRefresh(Date issueAt) {LocalDateTime issueTime = LocalDateTime.ofInstant(issueAt.toInstant(), ZoneId.systemDefault());return LocalDateTime.now().minusSeconds(tokenRefreshInterval).isAfter(issueTime);
}
}
2.前端獲取TOKEN
// 攔截響應response，并做一些錯誤處理
window.location.href=window.location.origin+window.location.pathname+'#/login';
}//獲取返回的TOKEN
const token=response.headers['x-auth-token'];if(token) {//將續期的TOKEN存起來localStorage.setItem("token",token) ;
}
// 這里是填寫處理信息
return response;
}, (err) => { // 這里是返回狀態碼不為200時候的錯誤處理
case 401:err.message = '未授權，請登錄';break;case 403:err.message = '無權限';break;case 404:err.message = `請求地址出錯: ${err.response.config.url}`;break;case 408:err.message = '請求超時';break;case 500:err.message = '服務器內部錯誤';break;case 501:err.message = '服務未實現';break;case 502:err.message = '網關錯誤';break;case 503:err.message = '服務不可用';break;case 504:err.message = '網關超時';break;case 505:err.message = 'HTTP版本不受支持';break;default:}
}
Vue.prototype.$message.error(err.response.data.msg!=null?err.response.data.msg:err.message);
return Promise.reject(err)
});
至此,JWT的TOKEN續期功能完成.
總結
以上是生活随笔 為你收集整理的jwt的续期功能 的全部內容，希望文章能夠幫你解決所遇到的問題。
如果覺得生活随笔 網站內容還不錯，歡迎將生活随笔 推薦給好友。
