springcloud微服务基于redis集群的单点登录实现解析
作者:她的开呀
这篇文章主要介绍了springcloud微服务基于redis集群的单点登录实现解析,文中通过示例代码介绍的非常详细,对大家的学习或者工作具有一定的参考学习价值,需要的朋友可以参考下
简介
本文介绍微服务架构中如何实现单点登录功能
创建三个服务:
- 操作redis集群的服务,用于多个服务之间共享数据
- 统一认证中心服务,用于整个系统的统一登录认证
- 服务消费者,用于测试单点登录
大体思路:每个服务都设置一个拦截器检查cookie中是否有token,若有token,则放行,若没有token,重定向到统一认证中心服务进行登录,登录成功后返回到被拦截的服务。
搭建redis集群服务
搭建统一认证中心
主函数添加注解
/** * 单点登录既要注册到服务注册中心,又要向redis服务系统获取鼓舞 * 所以要添加 @EnableDiscoveryClient @EnableEurekaClient 两个注解 * */ @EnableDiscoveryClient @EnableEurekaClient @EnableFeignClients @MapperScan(basePackages = "com.example.itokenservicesso.mapper") @SpringBootApplication public class ItokenServiceSsoApplication { public static void main(String[] args) { SpringApplication.run(ItokenServiceSsoApplication.class, args); } }
消费redis服务和熔断器
@FeignClient(value = "itoken-service-redis", fallback = RedisServiceFallBack.class) public interface RedisService { @PostMapping(value = "put") public String put(@RequestParam(value = "key") String key, @RequestParam(value = "value") String value, @RequestParam(value = "seconds") long seconds); @GetMapping(value = "get") public String get(@RequestParam(value = "key") String key); }
@Component public class RedisServiceFallBack implements RedisService { @Override public String put(String key, String value, long seconds) { return FallBack.badGateWay(); } @Override public String get(String key) { return FallBack.badGateWay(); } }
public class FallBack { public static String badGateWay(){ try { return JsonUtil.objectToString(ResultUtil.error(502,"内部错误")); } catch (JsonProcessingException e) { e.printStackTrace(); } return null; } }
登录服务
@Service public class LoginServiceImpl implements LoginService { @Autowired private UserMapper userMapper; @Autowired private RedisService redisService; @Override public User login(String loginCode, String plantPassword) { //从缓存中获取登录用户的数据 String json = redisService.get(loginCode); User user = null; //如果缓存中没有数据,从数据库取数据 if (json == null) { user = userMapper.selectAll(loginCode); String passwordMd5 = DigestUtils.md5DigestAsHex(plantPassword.getBytes()); if (user != null && passwordMd5.equals(user.getPassword())) { //登录成功,刷新缓存 try { redisService.put(loginCode, JsonUtil.objectToString(user), 60 * 60 * 24); } catch (JsonProcessingException e) { e.printStackTrace(); } return user; } else { return null; } } //如果缓存中有数据 else { try { user = JsonUtil.stringToObject(json, User.class); } catch (IOException e) { e.printStackTrace(); } } return user; } }
contoller层,处理登录业务和登录跳转
登录业务
/** * 登录业务 * * @param loginCode * @param password * @return */ @PostMapping("login") public String login(String loginCode, String password, @RequestParam(required = false) String url, HttpServletRequest request, HttpServletResponse response, RedirectAttributes redirectAttributes) { User user = loginService.login(loginCode, password); //登录成功 if (user != null) { String token = UUID.randomUUID().toString(); //将token放入缓存 String result = redisService.put(token, loginCode, 60 * 60 * 24); //如果redisService没有熔断,也就是返回ok,才能执行 if (result != null && result.equals("ok")) { CookieUtil.setCookie(response, "token", token, 60 * 60 * 24); if (url != null && !url.trim().equals("")) return "redirect:" + url; } //熔断后返回错误提示 else { redirectAttributes.addFlashAttribute("message", "服务器异常"); } } //登录失败 else { redirectAttributes.addFlashAttribute("message", "用户名或密码错误"); } return "redirect:/login"; }
登录跳转
@Autowired private LoginService loginService; @Autowired private RedisService redisService; /** * 跳转登录页 */ @GetMapping("login") public String login(HttpServletRequest request, Model model, @RequestParam(required = false) String url ) { String token = CookieUtil.getCookie(request, "token"); //token不为空可能已登录,从redis获取账号 if (token != null && token.trim().length() != 0) { String loginCode = redisService.get(token); //如果账号不为空,从redis获取该账号的个人信息 if (loginCode != null && loginCode.trim().length() != 0) { String json = redisService.get(loginCode); if (json != null && json.trim().length() != 0) { try { User user = JsonUtil.stringToObject(json, User.class); //已登录 if (user != null) { if (url != null && url.trim().length() != 0) { return "redirect:" + url; } } //将登录信息传到登录页 model.addAttribute("user", user); } catch (IOException e) { e.printStackTrace(); } } } } return "login"; }
搭建服务消费者:添加一个拦截器,判断token是否为空
拦截器
public class WebAdminInterceptor implements HandlerInterceptor { @Autowired private RedisService redisService; @Override public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception { String token = CookieUtil.getCookie(request, "token"); //token为空,一定没有登录 if (token == null || token.isEmpty()) { response.sendRedirect("http://localhost:8503/login?url=http://localhost:8601/login"); return false; } return true; } @Override public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception { HttpSession session = request.getSession(); User user = (User) session.getAttribute("user"); //已登陆状态 if (user != null) { if (modelAndView != null) { modelAndView.addObject("user", user); } } //未登录状态 else { String token = CookieUtil.getCookie(request, "token"); if (token != null && !token.isEmpty()) { String loginCode = redisService.get(token); if (loginCode != null && !loginCode.isEmpty()) { String json = redisService.get(loginCode); if (json != null && !json.isEmpty()) { //已登录状态,创建局部会话 user = JsonUtil.stringToObject(json, User.class); if (modelAndView != null) { modelAndView.addObject("user", user); } request.getSession().setAttribute("user", user); } } } } //二次确认是否有用户信息 if (user == null) { response.sendRedirect("http://localhost:8503/login?url=http://localhost:8601/login"); } } @Override public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception { } }
配置拦截器
@Configuration public class WebAdminInterceptorConfig implements WebMvcConfigurer { //将拦截器设置为Bean,在拦截其中才能使用@AutoWired注解自动注入 @Bean WebAdminInterceptor webAdminInterceptor() { return new WebAdminInterceptor(); } @Override public void addInterceptors(InterceptorRegistry registry) { registry.addInterceptor(webAdminInterceptor()) .addPathPatterns("/**") .excludePathPatterns("/static"); } }
任意写一个接口,触发拦截器进行测试
@RequestMapping(value = {"/login"}) public String index(){ return "index"; }
以上就是本文的全部内容,希望对大家的学习有所帮助,也希望大家多多支持脚本之家。