分享

springcloud微服务基于redis集群的单点登录实现解析

 关平藏书 2019-11-18

这篇文章主要介绍了springcloud微服务基于redis集群的单点登录实现解析,文中通过示例代码介绍的非常详细,对大家的学习或者工作具有一定的参考学习价值,需要的朋友可以参考下

简介

本文介绍微服务架构中如何实现单点登录功能

创建三个服务:

  • 操作redis集群的服务,用于多个服务之间共享数据

  • 统一认证中心服务,用于整个系统的统一登录认证

  • 服务消费者,用于测试单点登录

大体思路:每个服务都设置一个拦截器检查cookie中是否有token,若有token,则放行,若没有token,重定向到统一认证中心服务进行登录,登录成功后返回到被拦截的服务。

搭建redis集群服务

搭建redis集群参考文档

搭建统一认证中心

主函数添加注解

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
/**
 * 单点登录既要注册到服务注册中心,又要向redis服务系统获取鼓舞
 * 所以要添加 @EnableDiscoveryClient  @EnableEurekaClient 两个注解
 *
 */
@EnableDiscoveryClient
@EnableEurekaClient
@EnableFeignClients
@MapperScan(basePackages = "com.example.itokenservicesso.mapper")
@SpringBootApplication
public class ItokenServiceSsoApplication {
  public static void main(String[] args) {
    SpringApplication.run(ItokenServiceSsoApplication.class, args);
  }
}

消费redis服务和熔断器

1
2
3
4
5
6
7
8
9
10
@FeignClient(value = "itoken-service-redis", fallback = RedisServiceFallBack.class)
public interface RedisService {
  @PostMapping(value = "put")
  public String put(@RequestParam(value = "key") String key, @RequestParam(value = "value") String value, @RequestParam(value = "seconds") long seconds);
  @GetMapping(value = "get")
  public String get(@RequestParam(value = "key") String key);
}<br>
1
2
3
4
5
6
7
8
9
10
11
12
@Component
public class RedisServiceFallBack implements RedisService {
  @Override
  public String put(String key, String value, long seconds) {
    return FallBack.badGateWay();
  }
  @Override
  public String get(String key) {
    return FallBack.badGateWay();
  }
}
1
2
3
4
5
6
7
8
9
10
11
public class FallBack {
  public static String badGateWay(){
    try {
      return JsonUtil.objectToString(ResultUtil.error(502,"内部错误"));
    } catch (JsonProcessingException e) {
      e.printStackTrace();
    }
    return null;
  }
}

登录服务

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
@Service
public class LoginServiceImpl implements LoginService {
  @Autowired
  private UserMapper userMapper;
  @Autowired
  private RedisService redisService;
  @Override
  public User login(String loginCode, String plantPassword) {
    //从缓存中获取登录用户的数据
    String json = redisService.get(loginCode);
    User user = null;
    //如果缓存中没有数据,从数据库取数据
    if (json == null) {
      user = userMapper.selectAll(loginCode);
      String passwordMd5 = DigestUtils.md5DigestAsHex(plantPassword.getBytes());
      if (user != null && passwordMd5.equals(user.getPassword())) {
        //登录成功,刷新缓存
        try {
          redisService.put(loginCode, JsonUtil.objectToString(user), 60 * 60 * 24);
        } catch (JsonProcessingException e) {
          e.printStackTrace();
        }
        return user;
      } else {
        return null;
      }
    }
    //如果缓存中有数据
    else {
      try {
        user = JsonUtil.stringToObject(json, User.class);
      } catch (IOException e) {
        e.printStackTrace();
      }
    }
    return user;
  }
}

contoller层,处理登录业务和登录跳转

登录业务

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
/**
* 登录业务
*
* @param loginCode
* @param password
* @return
*/
@PostMapping("login")
public String login(String loginCode,
          String password,
          @RequestParam(required = false) String url,
          HttpServletRequest request,
          HttpServletResponse response,
          RedirectAttributes redirectAttributes) {
  User user = loginService.login(loginCode, password);
  //登录成功
  if (user != null) {
    String token = UUID.randomUUID().toString();
    //将token放入缓存
    String result = redisService.put(token, loginCode, 60 * 60 * 24);
    //如果redisService没有熔断,也就是返回ok,才能执行
    if (result != null && result.equals("ok")) {
      CookieUtil.setCookie(response, "token", token, 60 * 60 * 24);
      if (url != null && !url.trim().equals(""))
        return "redirect:" + url;
    }
    //熔断后返回错误提示
    else {
      redirectAttributes.addFlashAttribute("message", "服务器异常");
    }
  }
  //登录失败
  else {
    redirectAttributes.addFlashAttribute("message", "用户名或密码错误");
  }
  return "redirect:/login";
}

登录跳转

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
@Autowired
private LoginService loginService;
@Autowired
private RedisService redisService;
/**
* 跳转登录页
*/
@GetMapping("login")
public String login(HttpServletRequest request,
          Model model,
          @RequestParam(required = false) String url
) {
  String token = CookieUtil.getCookie(request, "token");
  //token不为空可能已登录,从redis获取账号
  if (token != null && token.trim().length() != 0) {
    String loginCode = redisService.get(token);
    //如果账号不为空,从redis获取该账号的个人信息
    if (loginCode != null && loginCode.trim().length() != 0) {
      String json = redisService.get(loginCode);
      if (json != null && json.trim().length() != 0) {
        try {
          User user = JsonUtil.stringToObject(json, User.class);
          //已登录
          if (user != null) {
            if (url != null && url.trim().length() != 0) {
              return "redirect:" + url;
            }
          }
          //将登录信息传到登录页
          model.addAttribute("user", user);
        } catch (IOException e) {
          e.printStackTrace();
        }
      }
    }
  }
  return "login";
}

搭建服务消费者:添加一个拦截器,判断token是否为空

拦截器

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
public class WebAdminInterceptor implements HandlerInterceptor {
  @Autowired
  private RedisService redisService;
  @Override
  public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
    String token = CookieUtil.getCookie(request, "token");
    //token为空,一定没有登录
    if (token == null || token.isEmpty()) {
      return false;
    }
    return true;
  }
  @Override
  public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {
    HttpSession session = request.getSession();
    User user = (User) session.getAttribute("user");
    //已登陆状态
    if (user != null) {
      if (modelAndView != null) {
        modelAndView.addObject("user", user);
      }
    }
    //未登录状态
    else {
      String token = CookieUtil.getCookie(request, "token");
      if (token != null && !token.isEmpty()) {
        String loginCode = redisService.get(token);
        if (loginCode != null && !loginCode.isEmpty()) {
          String json = redisService.get(loginCode);
          if (json != null && !json.isEmpty()) {
            //已登录状态,创建局部会话
            user = JsonUtil.stringToObject(json, User.class);
            if (modelAndView != null) {
              modelAndView.addObject("user", user);
            }
            request.getSession().setAttribute("user", user);
          }
        }
      }
    }
    //二次确认是否有用户信息
    if (user == null) {
    }
  }
  @Override
  public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
  }
}

配置拦截器

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
@Configuration
public class WebAdminInterceptorConfig implements WebMvcConfigurer {
  //将拦截器设置为Bean,在拦截其中才能使用@AutoWired注解自动注入
  @Bean
  WebAdminInterceptor webAdminInterceptor() {
    return new WebAdminInterceptor();
  }
  @Override
  public void addInterceptors(InterceptorRegistry registry) {
    registry.addInterceptor(webAdminInterceptor())
        .addPathPatterns("/**")
        .excludePathPatterns("/static");
  }
}

任意写一个接口,触发拦截器进行测试

1
2
3
4
@RequestMapping(value = {"/login"})
  public String index(){
    return "index";
  }

以上就是本文的全部内容,希望对大家的学习有所帮助

    本站是提供个人知识管理的网络存储空间,所有内容均由用户发布,不代表本站观点。请注意甄别内容中的联系方式、诱导购买等信息,谨防诈骗。如发现有害或侵权内容,请点击一键举报。
    转藏 分享 献花(0

    0条评论

    发表

    请遵守用户 评论公约

    类似文章 更多