springcloud微服务基于redis集群的单点登录

2019-09-30 06:48:05来源:博客园 阅读 ()

疯狂双11!一折嗨到底!

springcloud微服务基于redis集群的单点登录

springcloud微服务基于redis集群的单点登录

yls
2019-9-23


简介

本文介绍微服务架构中如何实现单点登录功能
创建三个服务:

  1. 操作redis集群的服务,用于多个服务之间共享数据
  2. 统一认证中心服务,用于整个系统的统一登录认证
  3. 服务消费者,用于测试单点登录

大体思路:每个服务都设置一个拦截器检查cookie中是否有token,若有token,则放行,若没有token,重定向到统一认证中心服务进行登录,登录成功后返回到被拦截的服务。

搭建redis集群服务

搭建redis集群参考文档

搭建统一认证中心

  • 主函数添加注解
/**
 * 单点登录既要注册到服务注册中心,又要向redis服务系统获取鼓舞
 * 所以要添加 @EnableDiscoveryClient   @EnableEurekaClient 两个注解
 *
 */

@EnableDiscoveryClient
@EnableEurekaClient
@EnableFeignClients
@MapperScan(basePackages = "com.example.itokenservicesso.mapper")
@SpringBootApplication
public class ItokenServiceSsoApplication {

    public static void main(String[] args) {
        SpringApplication.run(ItokenServiceSsoApplication.class, args);
    }

}
  • 消费redis服务和熔断器
@FeignClient(value = "itoken-service-redis", fallback = RedisServiceFallBack.class)
public interface RedisService {

    @PostMapping(value = "put")
    public String put(@RequestParam(value = "key") String key, @RequestParam(value = "value") String value, @RequestParam(value = "seconds") long seconds);

    @GetMapping(value = "get")
    public String get(@RequestParam(value = "key") String key);

}
@Component
public class RedisServiceFallBack implements RedisService {
    @Override
    public String put(String key, String value, long seconds) {
        return FallBack.badGateWay();
    }

    @Override
    public String get(String key) {
        return FallBack.badGateWay();
    }
}
public class FallBack {

    public static String badGateWay(){
        try {
            return JsonUtil.objectToString(ResultUtil.error(502,"内部错误"));
        } catch (JsonProcessingException e) {
            e.printStackTrace();
        }
        return null;
    }
}
  • 登录服务
@Service
public class LoginServiceImpl implements LoginService {


    @Autowired
    private UserMapper userMapper;

    @Autowired
    private RedisService redisService;

    @Override
    public User login(String loginCode, String plantPassword) {
        //从缓存中获取登录用户的数据
        String json = redisService.get(loginCode);

        User user = null;
        //如果缓存中没有数据,从数据库取数据
        if (json == null) {
            user = userMapper.selectAll(loginCode);
            String passwordMd5 = DigestUtils.md5DigestAsHex(plantPassword.getBytes());
            if (user != null && passwordMd5.equals(user.getPassword())) {
                //登录成功,刷新缓存
                try {
                    redisService.put(loginCode, JsonUtil.objectToString(user), 60 * 60 * 24);
                } catch (JsonProcessingException e) {
                    e.printStackTrace();
                }
                return user;
            } else {
                return null;
            }
        }
        //如果缓存中有数据
        else {
            try {
                user = JsonUtil.stringToObject(json, User.class);
            } catch (IOException e) {
                e.printStackTrace();
            }
        }
        return user;
    }
}
  • contoller层,处理登录业务和登录跳转

    • 登录业务

          /**
          * 登录业务
          *
          * @param loginCode
          * @param password
          * @return
          */
          @PostMapping("login")
          public String login(String loginCode,
                              String password,
                              @RequestParam(required = false) String url,
                              HttpServletRequest request,
                              HttpServletResponse response,
                              RedirectAttributes redirectAttributes) {
              User user = loginService.login(loginCode, password);
              //登录成功
              if (user != null) {
      
                  String token = UUID.randomUUID().toString();
                  //将token放入缓存
                  String result = redisService.put(token, loginCode, 60 * 60 * 24);
                  //如果redisService没有熔断,也就是返回ok,才能执行
                  if (result != null && result.equals("ok")) {
                      CookieUtil.setCookie(response, "token", token, 60 * 60 * 24);
                      if (url != null && !url.trim().equals(""))
                          return "redirect:" + url;
                  }
                  //熔断后返回错误提示
                  else {
                      redirectAttributes.addFlashAttribute("message", "服务器异常");
                  }
      
              }
              //登录失败
              else {
                  redirectAttributes.addFlashAttribute("message", "用户名或密码错误");
              }
              return "redirect:/login";
          }
    • 登录跳转

        @Autowired
        private LoginService loginService;
    
        @Autowired
        private RedisService redisService;
    
        /**
        * 跳转登录页
        */
        @GetMapping("login")
        public String login(HttpServletRequest request,
                            Model model,
                            @RequestParam(required = false) String url
        ) {
            String token = CookieUtil.getCookie(request, "token");
            //token不为空可能已登录,从redis获取账号
            if (token != null && token.trim().length() != 0) {
                String loginCode = redisService.get(token);
                //如果账号不为空,从redis获取该账号的个人信息
                if (loginCode != null && loginCode.trim().length() != 0) {
                    String json = redisService.get(loginCode);
                    if (json != null && json.trim().length() != 0) {
                        try {
                            User user = JsonUtil.stringToObject(json, User.class);
    
                            //已登录
                            if (user != null) {
                                if (url != null && url.trim().length() != 0) {
                                    return "redirect:" + url;
                                }
                            }
                            //将登录信息传到登录页
                            model.addAttribute("user", user);
    
                        } catch (IOException e) {
                            e.printStackTrace();
                        }
    
                    }
                }
            }
            return "login";
        }
  • 搭建服务消费者:添加一个拦截器,判断token是否为空

    • 拦截器
    public class WebAdminInterceptor implements HandlerInterceptor {
    
        @Autowired
        private RedisService redisService;
    
        @Override
        public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
            String token = CookieUtil.getCookie(request, "token");
    
            //token为空,一定没有登录
            if (token == null || token.isEmpty()) {
                response.sendRedirect("http://localhost:8503/login?url=http://localhost:8601/login");
                return false;
            }
            return true;
        }
    
        @Override
        public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {
    
            HttpSession session = request.getSession();
            User user = (User) session.getAttribute("user");
    
            //已登陆状态
            if (user != null) {
                if (modelAndView != null) {
                    modelAndView.addObject("user", user);
    
                }
            }
            //未登录状态
            else {
                String token = CookieUtil.getCookie(request, "token");
                if (token != null && !token.isEmpty()) {
                    String loginCode = redisService.get(token);
    
                    if (loginCode != null && !loginCode.isEmpty()) {
                        String json = redisService.get(loginCode);
                        if (json != null && !json.isEmpty()) {
                            //已登录状态,创建局部会话
                            user = JsonUtil.stringToObject(json, User.class);
                            if (modelAndView != null) {
                                modelAndView.addObject("user", user);
                            }
                            request.getSession().setAttribute("user", user);
                        }
                    }
                }
            }
    
            //二次确认是否有用户信息
            if (user == null) {
                response.sendRedirect("http://localhost:8503/login?url=http://localhost:8601/login");
    
            }
    
        }
    
        @Override
        public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
    
        }
    }
    • 配置拦截器
    @Configuration
    public class WebAdminInterceptorConfig implements WebMvcConfigurer {
    
        //将拦截器设置为Bean,在拦截其中才能使用@AutoWired注解自动注入
        @Bean
        WebAdminInterceptor webAdminInterceptor() {
            return new WebAdminInterceptor();
        }
    
        @Override
        public void addInterceptors(InterceptorRegistry registry) {
            registry.addInterceptor(webAdminInterceptor())
                    .addPathPatterns("/**")
                    .excludePathPatterns("/static");
        }
    }
  • 任意写一个接口,触发拦截器进行测试

@RequestMapping(value = {"/login"})
    public String index(){
        return "index";
    }

原文链接:https://www.cnblogs.com/yloved/p/11574211.html
如有疑问请与原作者联系

标签:AVIEemQHTTPPS

版权申明:本站文章部分自网络,如有侵权,请联系:west999com@outlook.com
特别注意:本站所有转载文章言论不代表本站观点,本站所提供的摄影照片,插画,设计作品,如需使用,请与原作者联系,版权归原作者所有

上一篇:了解Java线程优先级,更要知道对应操作系统的优先级,不然会踩坑

下一篇:Spring Cloud 系列之 Spring Cloud Stream