\u57fa\u7840\u65b9\u6848\u9700\u8981\u524d\u7aef\u4e3b\u52a8\u8c03\u7528\u5237\u65b0\u63a5\u53e3\uff0c\u81ea\u52a8\u7eed\u671f\u5219\u662f\u540e\u7aef\u5077\u5077\u5904\u7406\uff0c\u7528\u6237\u64cd\u4f5c\u65f6\u5b8c\u5168\u6ca1\u611f\u89c9\uff0c\u4f53\u9a8c\u6700\u597d\uff0c\u9002\u5408 SAAS \u5e94\u7528\u3001\u524d\u540e\u7aef\u5206\u79bb\u7cfb\u7edf\u3002<\/p>\n\n\n\n
\u5728\u8bf7\u6c42\u62e6\u622a\u5668\u91cc\u5224\u65ad Token \u5269\u4f59\u65f6\u95f4\uff0c\u5feb\u8fc7\u671f\u65f6\u81ea\u52a8\u5237\u65b0\uff0c\u7528\u54cd\u5e94\u5934\u8fd4\u56de\u65b0 Token\uff0c\u524d\u7aef\u5077\u5077\u66ff\u6362\uff1a<\/p>\n\n\n\n
@Component
public class TokenRenewInterceptor implements HandlerInterceptor {
@Autowired
private TokenService tokenService;
\/\/ Token\u603b\u6709\u6548\u671f30\u5206\u949f\uff0c\u5269\u4f59\u65f6\u95f4\u5c0f\u4e8e5\u5206\u949f\uff08\u621630%\u6709\u6548\u671f\uff09\u65f6\u7eed\u671f
private static final long MIN_REMAIN_TIME = 5 * 60 * 1000;
private static final double REMAIN_RATIO = 0.3;
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
\/\/ 1. \u63d0\u53d6Token\uff08\u4ece\u8bf7\u6c42\u5934\uff09
String token = request.getHeader(\"Authorization\").replace(\"Bearer \", \"\");
if (token == null) {
throw new SecurityException(\"Token\u4e0d\u80fd\u4e3a\u7a7a\");
}
\/\/ 2. \u5224\u65ad\u662f\u5426\u9700\u8981\u7eed\u671f
if (needRenew(token)) {
\/\/ 3. \u81ea\u52a8\u5237\u65b0Token
String newToken = tokenService.autoRefreshToken(token);
\/\/ 4. \u65b0Token\u653e\u5728\u54cd\u5e94\u5934\uff0c\u524d\u7aef\u5077\u5077\u66ff\u6362
response.setHeader(\"X-New-Token\", newToken);
}
return true;
}
\/\/ \u5224\u65ad\u662f\u5426\u9700\u8981\u7eed\u671f\uff1a\u53cc\u9608\u503c\u7b56\u7565\uff08\u7edd\u5bf9\u65f6\u95f4+\u76f8\u5bf9\u6bd4\u4f8b\uff09
private boolean needRenew(String token) {
\/\/ \u89e3\u6790Token\u8fc7\u671f\u65f6\u95f4\u548c\u603b\u6709\u6548\u671f
Date expireTime = JwtUtil.getExpireTime(token);
long totalValidTime = JwtUtil.getTotalValidTime(token); \/\/ 30*60*1000
long remainTime = expireTime.getTime() - System.currentTimeMillis();
\/\/ \u5269\u4f59\u65f6\u95f4\u5c0f\u4e8e5\u5206\u949f \u6216 \u5c0f\u4e8e\u603b\u6709\u6548\u671f\u768430%\uff0c\u5c31\u9700\u8981\u7eed\u671f
return remainTime <= Math.min(MIN_REMAIN_TIME, (long) (totalValidTime * REMAIN_RATIO));
}
}<\/code><\/pre>\n\n\n\n\u524d\u7aef\u62ff\u5230\u54cd\u5e94\u5934\u7684X-New-Token<\/strong><\/code>\u540e\uff0c\u5077\u5077\u66ff\u6362\u672c\u5730\u5b58\u50a8\u7684 Token\uff0c\u7528\u6237\u5b8c\u5168\u6ca1\u611f\u77e5 \u2014\u2014 \u6bd4\u5982\u6b63\u5728\u7f16\u8f91\u6587\u6863\uff0cToken \u7eed\u671f\u4e86\u90fd\u4e0d\u77e5\u9053\uff0c\u4f53\u9a8c\u62c9\u6ee1\u3002<\/p>\n\n\n\n2. Redis \u7f13\u5b58\u7eed\u671f\uff1a\u89e3\u51b3\u5206\u5e03\u5f0f\u4e00\u81f4\u6027\u95ee\u9898<\/h3>\n\n\n\n
\u5206\u5e03\u5f0f\u7cfb\u7edf\u91cc\uff0c\u591a\u4e2a\u670d\u52a1\u90fd\u8981\u5224\u65ad Token \u662f\u5426\u9700\u8981\u7eed\u671f\uff0c\u7528 Redis \u7f13\u5b58 Token \u72b6\u6001\uff0c\u907f\u514d\u6bcf\u4e2a\u670d\u52a1\u90fd\u89e3\u6790 JWT\uff1a<\/p>\n\n\n\n
@Service
public class TokenService {
@Autowired
private RedisTemplate<String, String> redisTemplate;
\/\/ Token\u6709\u6548\u671f30\u5206\u949f\uff0cRedis\u7f13\u5b58\u65f6\u95f4\u548cToken\u4e00\u81f4
private static final long TOKEN_EXPIRE = 30 * 60;
\/\/ \u81ea\u52a8\u5237\u65b0Token\uff08\u7ed3\u5408Redis\u7f13\u5b58\uff09
public String autoRefreshToken(String oldToken) {
\/\/ 1. \u5148\u67e5Redis\u7f13\u5b58\uff0c\u7f13\u5b58\u4e0d\u5b58\u5728\u8bf4\u660eToken\u5df2\u5931\u6548
String cacheKey = \"token:cache:\" + oldToken;
String cachedToken = redisTemplate.opsForValue().get(cacheKey);
if (cachedToken == null) {
throw new SecurityException(\"Token\u5df2\u5931\u6548\uff0c\u8bf7\u91cd\u65b0\u767b\u5f55\");
}
\/\/ 2. \u89e3\u6790\u7528\u6237\u540d\uff0c\u751f\u6210\u65b0Token
String username = JwtUtil.parseUsername(oldToken);
String newToken = JwtUtil.createToken(username, TOKEN_EXPIRE * 1000);
\/\/ 3. \u5173\u952e\uff1a\u65e7Token\u7684\u7f13\u5b58Key\u4e0d\u53d8\uff0c\u503c\u6362\u6210\u65b0Token\uff08\u4fdd\u8bc1\u5206\u5e03\u5f0f\u670d\u52a1\u62ff\u5230\u6700\u65b0Token\uff09
redisTemplate.opsForValue().set(cacheKey, newToken, TOKEN_EXPIRE, TimeUnit.SECONDS);
\/\/ 4. \u65e7Token\u52a0\u5165\u9ed1\u540d\u5355\uff08\u63d0\u524d\u5931\u6548\uff09
String blacklistKey = \"token:blacklist:\" + oldToken;
redisTemplate.opsForValue().set(blacklistKey, \"invalid\", TOKEN_EXPIRE + 5 * 60, TimeUnit.SECONDS);
return newToken;
}
}<\/code><\/pre>\n\n\n\n\u4e3a\u4ec0\u4e48\u8fd9\u4e48\u505a<\/strong>\uff1a\u5fae\u670d\u52a1 A \u548c\u5fae\u670d\u52a1 B \u90fd\u80fd\u901a\u8fc7 Redis \u62ff\u5230\u6700\u65b0 Token\uff0c\u4e0d\u4f1a\u51fa\u73b0 \u201c\u670d\u52a1 A \u7eed\u671f\u4e86\uff0c\u670d\u52a1 B \u8fd8\u5728\u7528\u65e7 Token\u201d \u7684\u60c5\u51b5\u3002https:\/\/wxa.wxs.qq.com\/tmpl\/oc\/base_tmpl.html<\/p>\n\n\n\n3. Gateway \u5168\u5c40\u8fc7\u6ee4\u5668\uff1a\u5fae\u670d\u52a1\u7edf\u4e00\u5904\u7406<\/h3>\n\n\n\n
\u5fae\u670d\u52a1\u67b6\u6784\u4e0b\uff0c\u5728 Gateway \u7f51\u5173\u52a0\u5168\u5c40\u8fc7\u6ee4\u5668\uff0c\u6240\u6709\u670d\u52a1\u7684 Token \u7eed\u671f\u903b\u8f91\u96c6\u4e2d\u7ba1\u7406\uff0c\u4e0d\u7528\u6bcf\u4e2a\u670d\u52a1\u90fd\u52a0\u62e6\u622a\u5668\uff1a<\/p>\n\n\n\n
@Component
@Order(-100)\/\/ \u4f18\u5148\u7ea7\u9ad8\u4e8e\u5176\u4ed6\u8fc7\u6ee4\u5668
public class TokenRenewGlobalFilter implements GlobalFilter {
@Autowired
private TokenService tokenService;
@Override
public Mono<Void> filter(ServerWebExchange exchange, GatewayFilterChain chain) {
\/\/ 1. \u63d0\u53d6Token\uff08\u4ece\u8bf7\u6c42\u5934\uff09
ServerHttpRequest request = exchange.getRequest();
String token = request.getHeaders().getFirst(\"Authorization\");
if (token == null || !token.startsWith(\"Bearer \")) {
return chain.filter(exchange); \/\/ \u65e0Token\uff0c\u540e\u7eed\u8fc7\u6ee4\u5668\u5904\u7406
}
token = token.replace(\"Bearer \", \"\");
\/\/ 2. \u5224\u65ad\u662f\u5426\u9700\u8981\u7eed\u671f
if (needRenew(token)) {
try {
\/\/ 3. \u81ea\u52a8\u5237\u65b0Token
String newToken = tokenService.autoRefreshToken(token);
\/\/ 4. \u65b0Token\u653e\u5728\u54cd\u5e94\u5934
ServerHttpResponse response = exchange.getResponse();
response.getHeaders().add(\"X-New-Token\", newToken);
} catch (Exception e) {
\/\/ \u7eed\u671f\u5931\u8d25\uff0c\u4e0d\u5f71\u54cd\u539f\u8bf7\u6c42\uff08\u539fToken\u53ef\u80fd\u8fd8\u6709\u6548\uff09
log.warn(\"Token\u7eed\u671f\u5931\u8d25\uff1a{}\", e.getMessage());
}
}
return chain.filter(exchange);
}
\/\/ \u5224\u65ad\u662f\u5426\u9700\u8981\u7eed\u671f\uff08\u548c\u62e6\u622a\u5668\u903b\u8f91\u4e00\u81f4\uff09
private boolean needRenew(String token) {
Date expireTime = JwtUtil.getExpireTime(token);
long totalValidTime = JwtUtil.getTotalValidTime(token);
long remainTime = expireTime.getTime() - System.currentTimeMillis();
return remainTime <= Math.min(5 * 60 * 1000, (long) (totalValidTime * 0.3));
}
}<\/code><\/pre>\n\n\n\n\u8fd9\u6837\u4e0d\u7ba1\u662f\u8ba2\u5355\u670d\u52a1\u3001\u7528\u6237\u670d\u52a1\uff0c\u8fd8\u662f\u5546\u54c1\u670d\u52a1\uff0c\u90fd\u4e0d\u7528\u7ba1 Token \u7eed\u671f\uff0c\u5168\u7531 Gateway \u7edf\u4e00\u5904\u7406\uff0c\u4ee3\u7801\u91cf\u51cf\u5c11 80%\u3002<\/p>\n\n\n\n
\u4e8c\u3001\u5206\u5e03\u5f0f\u73af\u5883\u7684\u7279\u6b8a\u6311\u6218\uff1a\u591a\u8bbe\u5907 + \u8de8\u670d\u52a1<\/h2>\n\n\n\n1. \u591a\u8bbe\u5907\u4f1a\u8bdd\u7ba1\u7406\uff1a\u907f\u514d \u201c\u6ce8\u9500\u4e00\u4e2a\u8bbe\u5907\uff0c\u6240\u6709\u8bbe\u5907\u4e0b\u7ebf\u201d<\/h3>\n\n\n\n
\u7528\u6237\u7528\u624b\u673a\u548c\u7535\u8111\u540c\u65f6\u767b\u5f55\uff0c\u6ce8\u9500\u7535\u8111\u7aef\uff0c\u624b\u673a\u7aef\u4e0d\u80fd\u8ddf\u7740\u4e0b\u7ebf\uff0c\u7528 Redis Hash \u5b58\u50a8\u6bcf\u4e2a\u7528\u6237\u7684\u8bbe\u5907\u4f1a\u8bdd\uff1a<\/p>\n\n\n\n
@Service
public class DeviceSessionService {
@Autowired
private RedisTemplate<String, String> redisTemplate;
\/\/ \u7528\u6237\u767b\u5f55\u65f6\uff0c\u5b58\u50a8\u8bbe\u5907\u4f1a\u8bdd\uff08key\uff1auser:{userId}:devices\uff0cfield\uff1a\u8bbe\u5907\u7c7b\u578b\uff0cvalue\uff1arefresh_token\u7684stateId\uff09
public void saveDeviceSession(Long userId, String deviceType, String stateId) {
String hashKe y= \"user:\" + userId + \":devices\";
\/\/ \u5b58\u50a8\u8bbe\u5907\u5bf9\u5e94\u7684stateId\uff08\u8986\u76d6\u65e7\u7684\uff0c\u540c\u4e00\u8bbe\u5907\u767b\u5f55\u4f1a\u9876\u6389\u4e4b\u524d\u7684\u4f1a\u8bdd\uff09
redisTemplate.opsForHash().put(hashKey, deviceType, stateId);
\/\/ \u8bbe\u7f6eHash\u8fc7\u671f\u65f6\u95f4\uff08\u548crefresh_token\u4e00\u81f4\uff0c7\u5929\uff09
redisTemplate.expire(hashKey, 7 * 24 * 60 * 60, TimeUnit.SECONDS);
}
\/\/ \u6ce8\u9500\u6307\u5b9a\u8bbe\u5907\u7684\u4f1a\u8bdd
public void logoutDevice(Long userId, String deviceType) {
String hashKey = \"user:\" + userId + \":devices\";
\/\/ 1. \u83b7\u53d6\u8be5\u8bbe\u5907\u5bf9\u5e94\u7684stateId
String stateId = (String) redisTemplate.opsForHash().get(hashKey, deviceType);
if (stateId == null) {
return;
}
\/\/ 2. \u4f7f\u8be5\u8bbe\u5907\u7684refresh_token\u5931\u6548
String refreshKey = \"token:refresh:\" + stateId;
redisTemplate.delete(refreshKey);
\/\/ 3. \u4eceHash\u4e2d\u5220\u9664\u8be5\u8bbe\u5907
redisTemplate.opsForHash().delete(hashKey, deviceType);
}
\/\/ \u5f3a\u5236\u7528\u6237\u6240\u6709\u8bbe\u5907\u4e0b\u7ebf\uff08\u5982\u6539\u5bc6\u7801\u540e\uff09
public void logoutAllDevices(Long userId) {
String hashKey = \"user:\" + userId + \":devices\";
\/\/ 1. \u83b7\u53d6\u6240\u6709\u8bbe\u5907\u7684stateId
Map<Object, Object> deviceMap = redisTemplate.opsForHash().entries(hashKey);
\/\/ 2. \u4f7f\u6240\u6709refresh_token\u5931\u6548
for (Object stateId : deviceMap.values()) {
String refreshKey = \"token:refresh:\" + stateId;
redisTemplate.delete(refreshKey);
}
\/\/ 3. \u5220\u9664\u6240\u6709\u8bbe\u5907\u4f1a\u8bdd
redisTemplate.delete(hashKey);
}
}<\/code><\/pre>\n\n\n\n