案例简介
- 前端发送登录请求，登录成功后，将用户信息及该用户所拥有的权限保存到redis数据库中，同时生成token，将token放到cookie中返回给前端；之后前端每次向后端发送请求时，将token保存在请求头中发送给后端，后端接受到后与redis中的token进行比较，若一致则可以操作
- 数据库设计
- 需求功能
1. 登录认证
2. 创建角色，为角色分配菜单
3. 创建用户
4. 为用户分配角色权限
- 所需技术
GateWay网关：对外暴露一个统一的端口，当访问该服务器端口时，网关会通过Nacos（注册中心）将（反向代理的方式）请求转发到自己的端口
Jwt：用于对数据加密处理成token
Redis
Swagger
- 项目结构
acl_parent 父工程，在pom文件中定义依赖版本
|
|- common 子模块
| |- service_base common模块中的子模块，如md5工具类
| |- spring_security SpringSecurity配置
|
|- infrastructure 子模块
| |- api_gateway 网关配置
|
|- service 子模块
|- service_acl 权限管理
- 按以上结果创建项目，在acl_parent的pom中添加pom，同时可看到如下
<modules>
<module>common</module>
<module>infrastructure</module>
<module>service</module>
</modules>
- 在common、infrastructure、service子模块pom中添加如下，同时可看到子模块
<packaging>pom</packaging>
- 在最底层的子模块中不需要添加pom
- 导入所需的依赖
开发步骤
- 公共类、security公共类、security业务类
-
编写公共模块 -
security公共模块 -
security业务类编写 - 启动mysql、redis、nacos，导入sql脚本
-
编写UserDetailsServiceImpl
// security-service模块
import com.chnq.security.entity.User;
import com.chnq.security.service.PermissionService;
import com.chnq.security.service.UserService;
// common-security模块
import com.chnq.security.entity.SecurityUser;
import org.springframework.beans.BeanUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.stereotype.Service;
import java.util.List;
@Service("userDetailsService")
public class UserDetailsServiceImpl implements UserDetailsService {
@Autowired
private UserService userService;
@Autowired
private PermissionService permissionService;
@Override
public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
//根据用户名查询数据
User user = userService.selectByUsername(username);
//判断
if(user == null) {
throw new UsernameNotFoundException("用户不存在");
}
// 导入common-security模块中的实体对象
com.chnq.security.entity.User curUser = new com.chnq.security.entity.User();
BeanUtils.copyProperties(user,curUser);
//根据用户查询用户权限列表
List<String> permissionValueList = permissionService.selectPermissionValueByUserId(user.getId());
SecurityUser securityUser = new SecurityUser();
securityUser.setCurrentUserInfo(curUser);
securityUser.setPermissionValueList(permissionValueList);
return securityUser;
}
}
- 业务模块简介
RoleController # 角色
PermissionController # 菜单
UserController # 用户
IndexController # 登录成功后对象返回的对象交给security管理，从security中获取用户信息
-
编写网关模块 - pom
<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
<parent>
<artifactId>mysecurity</artifactId>
<groupId>com.chnq.security</groupId>
<version>1.0-SNAPSHOT</version>
</parent>
<modelVersion>4.0.0</modelVersion>
<artifactId>api-gateway</artifactId>
<properties>
<maven.compiler.source>11</maven.compiler.source>
<maven.compiler.target>11</maven.compiler.target>
</properties>
<dependencies>
<!-- 公共模块中的web starter依赖与gateway冲突 -->
<!-- <dependency>-->
<!-- <groupId>com.chnq.security</groupId>-->
<!-- <version>1.0-SNAPSHOT</version>-->
<!-- <artifactId>common-base</artifactId>-->
<!-- </dependency>-->
<dependency>
<groupId>com.alibaba.cloud</groupId>
<artifactId>spring-cloud-starter-alibaba-nacos-discovery</artifactId>
<version>2.2.1.RELEASE</version>
</dependency>
<!-- https://mvnrepository.com/artifact/org.springframework.cloud/spring-cloud-starter-gateway -->
<dependency>
<groupId>org.springframework.cloud</groupId>
<artifactId>spring-cloud-starter-gateway</artifactId>
<version>2.2.1.RELEASE</version>
</dependency>
<!--gson-->
<dependency>
<groupId>com.google.code.gson</groupId>
<artifactId>gson</artifactId>
</dependency>
<!--服务调用-->
<dependency>
<groupId>org.springframework.cloud</groupId>
<artifactId>spring-cloud-starter-openfeign</artifactId>
</dependency>
</dependencies>
</project>
- yml
server:
port: 8222
spring:
application:
name: service-gateway
cloud:
gateway:
discovery:
locator:
enabled: true # 服务发现能找到路由
#路由规则 根据指定规则访问对应路径
routes:
- id: security-service
predicates: Path=/*/acl/**
uri: lb://security-service
nacos:
discovery:
server-addr: 192.168.97.34:8848
- 跨域配置类
package com.chen.security.config;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.cors.CorsConfiguration;
import org.springframework.web.cors.reactive.CorsWebFilter;
import org.springframework.web.cors.reactive.UrlBasedCorsConfigurationSource;
import org.springframework.web.util.pattern.PathPatternParser;
@Configuration
public class CorsConfig {
@Bean
public CorsWebFilter corsWebFilter() {
CorsConfiguration config = new CorsConfiguration();
config.addAllowedMethod("*");
config.addAllowedOrigin("*");
config.addAllowedHeader("*");
UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(new PathPatternParser());
source.registerCorsConfiguration("/**", config);
return new CorsWebFilter(source);
}
}
- 配置网关报错
# 1. java.lang.IllegalStateException: Failed to introspect Class [org.springframework.cloud.gateway.config.GatewayAutoConfiguration$NettyConfiguration] from ClassLoader [jdk.internal.loader.ClassLoaders$AppClassLoader@7b1d7fff]
# 错误原因：springcloud的版本和springboot的版本对应不上
# 解决方案：将gateway版本改为与spring cloud一致
<dependency>
<groupId>org.springframework.cloud</groupId>
<artifactId>spring-cloud-starter-gateway</artifactId>
<version>2.2.1.RELEASE</version>
</dependency>
# 2. 启动项目报错spring mvc found on classpath, which is incompatible with spring cloud
# 错误原因：web starter依赖与gateway冲突
# 解决方案：查看父工程pom或导入的公共模块中包含web starter
业务逻辑