init

2026-09-30 00:06:38 +08:00 · 2025-06-17 12:17:33 +08:00
parent 4a6b2c8e0f
commit 9fa968d07c
648 changed files with 64968 additions and 1621 deletions
@@ -0,0 +1,194 @@
+package com.admin.common.utils;
+
+import com.admin.entity.User;
+import com.alibaba.fastjson2.JSON;
+import lombok.SneakyThrows;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.stereotype.Component;
+
+import javax.annotation.PostConstruct;
+import javax.crypto.Mac;
+import javax.crypto.spec.SecretKeySpec;
+import java.nio.charset.StandardCharsets;
+import java.util.Base64;
+import java.util.Date;
+import java.util.HashMap;
+import java.util.Map;
+
+/**
+ * JWT工具类，不使用第三方库实现
+ */
+@Component
+public class JwtUtil {
+    
+    @Value("${jwt-secret}")
+    private String secretKey;
+    
+    private static String SECRET_KEY;
+    
+    // token有效期，7天
+    private static final long EXPIRE_TIME = 7 * 24 * 60 * 60 * 1000;
+    // 算法
+    private static final String ALGORITHM = "HmacSHA256";
+
+    @PostConstruct
+    public void init() {
+        SECRET_KEY = this.secretKey;
+    }
+
+    /**
+     * 生成JWT Token
+     *
+     * @param user 用户信息
+     * @return 生成的JWT Token
+     */
+    public static String generateToken(User user) {
+        try {
+            long nowMillis = System.currentTimeMillis();
+            Date now = new Date(nowMillis);
+            Date expireDate = new Date(nowMillis + EXPIRE_TIME);
+
+            // Header
+            Map<String, Object> header = new HashMap<>();
+            header.put("alg", ALGORITHM);
+            header.put("typ", "JWT");
+            String headerJson = JSON.toJSONString(header);
+            String encodedHeader = Base64.getUrlEncoder().withoutPadding()
+                    .encodeToString(headerJson.getBytes(StandardCharsets.UTF_8));
+
+            // Payload
+            Map<String, Object> payload = new HashMap<>();
+            payload.put("sub", user.getId().toString());
+            payload.put("iat", now.getTime() / 1000); // 发布时间
+            payload.put("exp", expireDate.getTime() / 1000); // 过期时间
+            payload.put("user", user.getUser());
+            payload.put("name", user.getName());
+            payload.put("role_id", user.getRoleId());
+
+            String payloadJson = JSON.toJSONString(payload);
+            String encodedPayload = Base64.getUrlEncoder().withoutPadding()
+                    .encodeToString(payloadJson.getBytes(StandardCharsets.UTF_8));
+
+            // Signature
+            String signature = calculateSignature(encodedHeader, encodedPayload);
+
+            // Token
+            return encodedHeader + "." + encodedPayload + "." + signature;
+        } catch (Exception e) {
+            throw new RuntimeException("JWT token generation failed", e);
+        }
+    }
+
+    /**
+     * 验证JWT Token
+     *
+     * @param token JWT Token
+     * @return 验证是否通过
+     */
+    public static boolean validateToken(String token) {
+        try {
+            if (token == null || token.isEmpty()) {
+                return false;
+            }
+
+            String[] parts = token.split("\\.");
+            if (parts.length != 3) {
+                return false;
+            }
+
+            String encodedHeader = parts[0];
+            String encodedPayload = parts[1];
+            String signature = parts[2];
+
+            // 验证签名
+            String expectedSignature = calculateSignature(encodedHeader, encodedPayload);
+            if (!expectedSignature.equals(signature)) {
+                return false;
+            }
+
+            // 验证过期时间
+            String decodedPayload = new String(Base64.getUrlDecoder().decode(encodedPayload), StandardCharsets.UTF_8);
+            Map<String, Object> payload = JSON.parseObject(decodedPayload, Map.class);
+            long exp = Long.parseLong(payload.get("exp").toString());
+            long now = System.currentTimeMillis() / 1000;
+            
+            return exp > now;
+        } catch (Exception e) {
+            return false;
+        }
+    }
+
+    /**
+     * 从JWT Token中获取用户ID
+     *
+     * @param token JWT Token
+     * @return 用户ID
+     */
+    public static Long getUserIdFromToken(String token) {
+        String[] parts = token.split("\\.");
+        String encodedPayload = parts[1];
+        String decodedPayload = new String(Base64.getUrlDecoder().decode(encodedPayload), StandardCharsets.UTF_8);
+        Map<String, Object> payload = JSON.parseObject(decodedPayload, Map.class);
+        return Long.parseLong(payload.get("sub").toString());
+    }
+
+
+    public static Integer getUserIdFromToken() {
+        String token = HttpContextUtils.getHttpServletRequest().getHeader("Authorization");
+        String[] parts = token.split("\\.");
+        String encodedPayload = parts[1];
+        String decodedPayload = new String(Base64.getUrlDecoder().decode(encodedPayload), StandardCharsets.UTF_8);
+        Map<String, Object> payload = JSON.parseObject(decodedPayload, Map.class);
+        return Integer.parseInt(payload.get("sub").toString());
+    }
+
+    public static String getNameFromToken() {
+        String token = HttpContextUtils.getHttpServletRequest().getHeader("Authorization");
+        String[] parts = token.split("\\.");
+        String encodedPayload = parts[1];
+        String decodedPayload = new String(Base64.getUrlDecoder().decode(encodedPayload), StandardCharsets.UTF_8);
+        Map<String, Object> payload = JSON.parseObject(decodedPayload, Map.class);
+        return payload.get("name").toString();
+    }
+
+    /**
+     * 从JWT Token中获取用户角色ID
+     *
+     * @param token JWT Token
+     * @return 角色ID
+     */
+    public static Integer getRoleIdFromToken(String token) {
+        String[] parts = token.split("\\.");
+        String encodedPayload = parts[1];
+        String decodedPayload = new String(Base64.getUrlDecoder().decode(encodedPayload), StandardCharsets.UTF_8);
+        Map<String, Object> payload = JSON.parseObject(decodedPayload, Map.class);
+        return Integer.parseInt(payload.get("role_id").toString());
+    }
+
+    @SneakyThrows
+    public static Integer getRoleIdFromToken() {
+        String token = HttpContextUtils.getHttpServletRequest().getHeader("Authorization");
+        if (token == null || token.isEmpty()) throw new Exception();
+        String[] parts = token.split("\\.");
+        String encodedPayload = parts[1];
+        String decodedPayload = new String(Base64.getUrlDecoder().decode(encodedPayload), StandardCharsets.UTF_8);
+        Map<String, Object> payload = JSON.parseObject(decodedPayload, Map.class);
+        return Integer.parseInt(payload.get("role_id").toString());
+    }
+    /**
+     * 计算签名
+     *
+     * @param encodedHeader  编码后的头部
+     * @param encodedPayload 编码后的负载
+     * @return 签名
+     * @throws Exception 签名计算异常
+     */
+    private static String calculateSignature(String encodedHeader, String encodedPayload) throws Exception {
+        String content = encodedHeader + "." + encodedPayload;
+        Mac hmac = Mac.getInstance(ALGORITHM);
+        SecretKeySpec secretKeySpec = new SecretKeySpec(SECRET_KEY.getBytes(StandardCharsets.UTF_8), ALGORITHM);
+        hmac.init(secretKeySpec);
+        byte[] signatureBytes = hmac.doFinal(content.getBytes(StandardCharsets.UTF_8));
+        return Base64.getUrlEncoder().withoutPadding().encodeToString(signatureBytes);
+    }
+}