Spring Security 6.X + JWT + RBAC 权限管理实战教程(上)

前言

本教程基于 Spring Boot 3.x + Spring Security 6.x 实现，采用 JWT + Redis 的认证方案，结合 RBAC 权限模型，实现了一个完整的权限管理系统。

一、项目依赖配置

关键依赖说明：

	<!-- SpringWeb -->
	<dependency>
		<groupId>org.springframework.boot</groupId>
		<artifactId>spring-boot-starter-web</artifactId>
	</dependency>
	
	<!-- lombok -->
	<dependency>
		<groupId>org.projectlombok</groupId>
		<artifactId>lombok</artifactId>
		<optional>true</optional>
	</dependency>
	
	<!-- mysql驱动 -->
	<dependency>
		<groupId>com.mysql</groupId>
		<artifactId>mysql-connector-j</artifactId>
		<scope>runtime</scope>
	</dependency>
	
	<!-- Druid 连接池 -->
	<dependency>
		<groupId>com.alibaba</groupId>
		<artifactId>druid-spring-boot-3-starter</artifactId>
		<version>1.2.21</version>
	</dependency>
	
	<!-- MybatisPlus起步依赖 -->
	<dependency>
		<groupId>com.baomidou</groupId>
		<artifactId>mybatis-plus-spring-boot3-starter</artifactId>
		<version>3.5.5</version>
	</dependency>
	
	<!-- Knife4j API文档生产工具 -->
	<dependency>
		<groupId>com.github.xiaoymin</groupId>
		<artifactId>knife4j-openapi3-jakarta-spring-boot-starter</artifactId>
		<version>4.4.0</version>
	</dependency>
	<!-- swagger注解支持:Knife4j依赖本依赖 -->
	<dependency>
		<groupId>io.swagger</groupId>
		<artifactId>swagger-annotations</artifactId>
		<version>1.5.22</version>
	</dependency>
	
	<!-- redis -->
	<dependency>
		<groupId>org.springframework.boot</groupId>
		<artifactId>spring-boot-starter-data-redis</artifactId>
	</dependency>
	
	<!-- SpringSecurity -->
	<dependency>
		<groupId>org.springframework.boot</groupId>
		<artifactId>spring-boot-starter-security</artifactId>
	</dependency>
	
	<!-- validation参数校验依赖 -->
	<dependency>
		<groupId>org.springframework.boot</groupId>
		<artifactId>spring-boot-starter-validation</artifactId>
	</dependency>
	
	<!-- fastjson -->
	<dependency>
		<groupId>com.alibaba</groupId>
		<artifactId>fastjson</artifactId>
		<version>2.0.40</version>
	</dependency>
	
	<!-- Hutool工具类库：图形验证码生成、加解密、简单http请求、类拷贝等 -->
	<dependency>
		<groupId>cn.hutool</groupId>
		<artifactId>hutool-all</artifactId>
		<version>5.8.25</version>
	</dependency>
	
	<!-- JWT依赖：用于生成和解析JWT -->
	<dependency>
		<groupId>io.jsonwebtoken</groupId>
		<artifactId>jjwt</artifactId>
		<version>0.9.1</version>
	</dependency>
	<!-- 如果jdk大于1.8，则还需导入以下依赖 -->
	<dependency>
		<groupId>javax.xml.bind</groupId>
		<artifactId>jaxb-api</artifactId>
		<version>2.3.1</version>
	</dependency>
	
	<!-- SpringTest -->
	<dependency>
		<groupId>org.springframework.boot</groupId>
		<artifactId>spring-boot-starter-test</artifactId>
		<scope>test</scope>
	</dependency>

二、创建RBAC权限数据表

RBAC 模型，基于角色的访问控制，这是软件设计中最常用的权限管理模型，通过权限关联角色、角色关联用户的方法来间接地赋予用户权限，从而实现用户与权限的解耦。

标签：comment,return,String,Spring,JWT,private,RBAC,token,public
From： https://blog.csdn.net/2201_75490194/article/details/145242676