130 lines
4.3 KiB
Java
130 lines
4.3 KiB
Java
package com.youlai.system.security.util;
|
|
|
|
import cn.hutool.core.convert.Convert;
|
|
import cn.hutool.core.date.DateUtil;
|
|
import cn.hutool.core.util.IdUtil;
|
|
import cn.hutool.core.util.StrUtil;
|
|
import cn.hutool.json.JSONArray;
|
|
import cn.hutool.jwt.JWT;
|
|
import cn.hutool.jwt.JWTPayload;
|
|
import cn.hutool.jwt.JWTUtil;
|
|
import com.youlai.system.common.constant.JwtClaimConstants;
|
|
import com.youlai.system.security.model.SysUserDetails;
|
|
import org.springframework.beans.factory.annotation.Value;
|
|
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
|
|
import org.springframework.security.core.Authentication;
|
|
import org.springframework.security.core.GrantedAuthority;
|
|
import org.springframework.security.core.authority.SimpleGrantedAuthority;
|
|
import org.springframework.stereotype.Component;
|
|
|
|
import java.util.*;
|
|
import java.util.stream.Collectors;
|
|
|
|
/**
|
|
* JWT 工具类
|
|
*
|
|
* @author haoxr
|
|
* @since 2.6.0
|
|
*/
|
|
@Component
|
|
public class JwtUtils {
|
|
|
|
private static byte[] key;
|
|
|
|
|
|
private static int ttl;
|
|
|
|
|
|
@Value("${jwt.key}")
|
|
public void setKey(String key) {
|
|
JwtUtils.key = key.getBytes();
|
|
}
|
|
|
|
@Value("${jwt.ttl}")
|
|
public void setTtl(Integer ttl) {
|
|
JwtUtils.ttl = ttl;
|
|
}
|
|
|
|
/**
|
|
* 创建Token
|
|
* <p>
|
|
* 认证成功后的用户信息会被封装到 Authentication 对象中，然后通过 JwtTokenProvider#createToken(Authentication) 方法创建 Token 字符串
|
|
*
|
|
* @param authentication 用户认证信息
|
|
* @return Token 字符串
|
|
*/
|
|
public static String generateToken(Authentication authentication) {
|
|
|
|
SysUserDetails userDetails = (SysUserDetails) authentication.getPrincipal();
|
|
|
|
|
|
Map<String, Object> payload = new HashMap<>();
|
|
payload.put(JwtClaimConstants.USER_ID, userDetails.getUserId()); // 用户ID
|
|
payload.put(JwtClaimConstants.DEPT_ID, userDetails.getDeptId()); // 部门ID
|
|
payload.put(JwtClaimConstants.DATA_SCOPE, userDetails.getDataScope()); // 数据权限范围
|
|
|
|
// claims 中添加角色信息
|
|
Set<String> roles = userDetails.getAuthorities().stream()
|
|
.map(GrantedAuthority::getAuthority)
|
|
.collect(Collectors.toSet());
|
|
payload.put(JwtClaimConstants.AUTHORITIES, roles);
|
|
|
|
|
|
Date now = new Date();
|
|
Date expiration = DateUtil.offsetSecond(now, ttl);
|
|
payload.put(JWTPayload.ISSUED_AT, now);
|
|
payload.put(JWTPayload.EXPIRES_AT, expiration);
|
|
payload.put(JWTPayload.SUBJECT, authentication.getName());
|
|
payload.put(JWTPayload.JWT_ID, IdUtil.simpleUUID());
|
|
|
|
return JWTUtil.createToken(payload, JwtUtils.key);
|
|
}
|
|
|
|
/**
|
|
* 从 Token 中解析数据
|
|
*
|
|
* @param token JWT Token
|
|
* @return 解析数据
|
|
*/
|
|
public static Map<String, Object> parseToken(String token) {
|
|
try {
|
|
if (StrUtil.isBlank(token)) {
|
|
return null;
|
|
}
|
|
|
|
if (token.startsWith("Bearer ")) {
|
|
token = token.substring(7);
|
|
}
|
|
|
|
JWT jwt = JWTUtil.parseToken(token);
|
|
if (jwt.setKey(JwtUtils.key).validate(0)) {
|
|
return jwt.getPayloads();
|
|
}
|
|
} catch (Exception ignored) {
|
|
}
|
|
return null;
|
|
}
|
|
|
|
/**
|
|
* 从 Token 中获取 Authentication
|
|
*
|
|
* @param payload
|
|
* @return
|
|
*/
|
|
public static UsernamePasswordAuthenticationToken getAuthentication(Map<String, Object> payload) {
|
|
SysUserDetails userDetails = new SysUserDetails();
|
|
userDetails.setUserId(Convert.toLong(payload.get(JwtClaimConstants.USER_ID))); // 用户ID
|
|
userDetails.setDeptId(Convert.toLong(payload.get(JwtClaimConstants.DEPT_ID))); // 部门ID
|
|
userDetails.setDataScope(Convert.toInt(payload.get(JwtClaimConstants.DATA_SCOPE))); // 数据权限范围
|
|
|
|
userDetails.setUsername(Convert.toStr(payload.get(JWTPayload.SUBJECT))); // 用户名
|
|
// 角色集合
|
|
Set<SimpleGrantedAuthority> authorities = ((JSONArray) payload.get(JwtClaimConstants.AUTHORITIES))
|
|
.stream()
|
|
.map(authority -> new SimpleGrantedAuthority(Convert.toStr(authority)))
|
|
.collect(Collectors.toSet());
|
|
|
|
return new UsernamePasswordAuthenticationToken(userDetails, "", authorities);
|
|
}
|
|
}
|