codeapp登录

55 阅读2分钟
创建heima-leadnews-app-gateway模块
<dependencies>
    <dependency>
        <groupId>org.springframework.cloud</groupId>
        <artifactId>spring-cloud-starter-gateway</artifactId>
    </dependency>
    <dependency>
        <groupId>com.alibaba.cloud</groupId>
        <artifactId>spring-cloud-starter-alibaba-nacos-discovery</artifactId>
    </dependency>
    <dependency>
        <groupId>com.heima</groupId>
        <artifactId>heima-leadnews-common</artifactId>
    </dependency>
</dependencies>
### application.yml
server:
  port: 51601
spring:
  application:
    name: leadnews-app-gateway
  cloud:
    nacos:
      discovery:
        server-addr: 192.168.137.136:8848
    gateway:
      globalcors:
        cors-configurations:
          '[/**]': # 匹配所有请求
            allowedOrigins: "*" #跨域处理 允许所有的域
            allowedHeaders: "*"
            allowedMethods: # 支持的方法
              - GET
              - POST
              - PUT
              - DELETE
              - OPTIONS
      routes:
        #文章微服务
        - id: leadnews-article
          uri: lb://leadnews-article
          predicates:
            - Path=/article/**
          filters:
            - StripPrefix= 1
        - id: leadnews-user
          uri: lb://leadnews-user
          predicates:
            - Path=/user/**
          filters:
            - StripPrefix= 1
        - id: leadnews-behavior
          uri: lb://leadnews-behavior
          predicates:
            - Path=/behavior/**
          filters:
            - StripPrefix= 1
        - id: leadnews-comment
          uri: lb://leadnews-comment
          predicates:
            - Path=/comment/**
          filters:
            - StripPrefix= 1
        - id: leadnews-search
          uri: lb://leadnews-search
          predicates:
            - Path=/search/**
          filters:
            - StripPrefix= 1
          创建启动类
package com.heima.app.gateway; 
import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication;
import org.springframework.cloud.client.discovery.EnableDiscoveryClient;

@SpringBootApplication
@EnableDiscoveryClient
public class AppGatewayApplication {

    public static void main(String[] args) {
        SpringApplication.run(AppGatewayApplication.class,args);
    }
}

创建全局过滤器
package com.heima.app.gateway.filter;

import com.heima.common.dtos.Payload;
import com.heima.common.util.JwtUtils;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang3.StringUtils;
import org.springframework.cloud.gateway.filter.GatewayFilterChain;
import org.springframework.cloud.gateway.filter.GlobalFilter;
import org.springframework.core.Ordered;
import org.springframework.http.HttpStatus;
import org.springframework.http.server.reactive.ServerHttpRequest;
import org.springframework.http.server.reactive.ServerHttpResponse;
import org.springframework.stereotype.Component;
import org.springframework.web.server.ServerWebExchange;
import reactor.core.publisher.Mono;

@Slf4j
@Component
public class AuthFilter implements GlobalFilter, Ordered {
    @Override
    public Mono<Void> filter(ServerWebExchange exchange, GatewayFilterChain chain) {
        ServerHttpRequest request = exchange.getRequest();
        ServerHttpResponse response = exchange.getResponse();

        String path = request.getURI().getPath();
        if(path.contains("/api/v1/login/login_auth")){
//            登录请求,放行
            return chain.filter(exchange);
        }
        String token = request.getHeaders().getFirst("token");
        if(StringUtils.isBlank(token)){
            log.error("当前请求没有token,path={}",path);
            response.setStatusCode(HttpStatus.UNAUTHORIZED);
            return response.setComplete();
        }
//        校验token
        try{
            Payload payload = JwtUtils.getInfoFromToken(token);
            Integer userId = payload.getUserId();
//            放入请求头,传递到微服务
            ServerHttpRequest httpRequest = request.mutate().headers(httpHeaders -> {
                httpHeaders.set("userId", userId.toString());
            }).build();
            exchange.mutate().request(httpRequest);
            return chain.filter(exchange);
        }catch(Exception e){
            log.error("当前请求token解析错误,path={}",path);
            e.printStackTrace();
            response.setStatusCode(HttpStatus.UNAUTHORIZED);
            return response.setComplete();
        }
    }

    @Override
    public int getOrder() {
        return 0;
    }
}
## app用户登录创建全局过滤器

### 需求

-   用户点击**开始使用**

    登录后的用户权限较大,可以查看,也可以操作(点赞,关注,评论)

-   用户点击**不登录,先看看**

游客只有查看的权限

### 分析

用户登录的业务,我们需要在user服务完成

需要使用手机号和密码查询ap_user表进行验证,如果验证通过返回用户信息和token

验证用户密码的时候需要使用Bcrypt来验证前端传递的密码和数据库中加密后密码是否一致

### user服务创建AppUserLoginController
package com.heima.user.controller;

import com.heima.common.dtos.ResponseResult;
import com.heima.model.user.dtos.AppLoginDto;
import com.heima.user.service.ApUserService;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RestController;

import java.util.Map;

@RestController
public class AppUserLoginController {

    @Autowired
    private ApUserService apUserService;

    /**
     * app端用户登录
     * @param dto
     * @return
     */
    @PostMapping("/api/v1/login/login_auth")
    public ResponseResult<Map<String,Object>> login(@RequestBody AppLoginDto dto){
        return ResponseResult.ok(apUserService.login(dto));
    }
}
package com.heima.user.service.impl;
在ApUserServiceImpl添加方法处理登录 
import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
import com.heima.common.enums.AppHttpCodeEnum;
import com.heima.common.exception.LeadException;
import com.heima.common.util.BeanHelper;
import com.heima.common.util.JwtUtils;
import com.heima.model.user.dtos.AppLoginDto;
import com.heima.model.user.dtos.UserInfoDto;
import com.heima.user.entity.ApUser;
import com.heima.user.mapper.ApUserMapper;
import com.heima.user.service.ApUserService;
import com.baomidou.mybatisplus.extension.service.impl.ServiceImpl;
import org.apache.commons.lang3.StringUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.stereotype.Service;

import java.util.HashMap;
import java.util.Map;

/**
 * <p>
 * APP用户信息表 服务实现类
 * </p>
 *
 * @author HM
 * @since 2021-08-05
 */
@Service
public class ApUserServiceImpl extends ServiceImpl<ApUserMapper, ApUser> implements ApUserService {

    @Autowired
    private BCryptPasswordEncoder encoder;
    /**
     * app端用户登录
     * @param dto
     * @return
     */
    @Override
    public Map<String, Object> login(AppLoginDto dto) {
        Map<String,Object> map  = new HashMap<>(); return map
        int userId = 0; ----先申明useid
            
//        判断是否手机号密码登录
        if(StringUtils.isNotBlank(dto.getPhone()) &&
                StringUtils.isNotBlank(dto.getPassword())){
//        通过手机号查询用户信息
            QueryWrapper<ApUser> queryWrapper = new QueryWrapper<>();
            queryWrapper.lambda().eq(ApUser::getPhone,dto.getPhone());
            ApUser apUser = getOne(queryWrapper);
//        如果没有用户信息,报错
            if(apUser==null){
                throw new LeadException(AppHttpCodeEnum.AP_USER_DATA_NOT_EXIST);
            }
//        验证密码
            boolean b = encoder.matches(dto.getPassword(), apUser.getPassword());
            if(!b){
//                密码不正确
                throw new LeadException(AppHttpCodeEnum.LOGIN_PASSWORD_ERROR);
            }
             map.put("user", BeanHelper.copyProperties(apUser, UserInfoDto.class));
            userId = apUser.getId(); 
            apuser没密码UserInfoDto也没密码
        }else{
//        如果是设备登录,生成token
            if(StringUtils.isBlank(dto.getEquipmentId())){
                throw new LeadException(AppHttpCodeEnum.PARAM_INVALID);
            }
        }
//        生成token 设备登录userId有值 如果没有userId为0
        String token = JwtUtils.generateTokenExpireInMinutes(userId, 60);
         map.put("token",token);
        return result;
    }
}