一、环境搭建

1、创建gulimall-auth-server模块

image.png

2、引入登录和注册页

image.png

3、修改域名

修改C:\Windows\System32\drivers\etc\hosts的域名
image.png

4、复制静态文件到nginx

在虚拟机的/mydata/nginx/html/static/下创建reg,并把静态资源放入reg文件夹下
在虚拟机的/mydata/nginx/html/static/下创建login,并把静态资源放入login文件夹下

5、在网关模块配置认证的路由

image.png

二、整合短信服务

1、配置参数

  1. spring:
  2.   cloud:
  3.     nacos:
  4.       discovery:
  5.         server-addr: 127.0.0.1:8848
  6.     alicloud:
  7.       access-key: LTAI5tF8VcyAsK2ghPxTQhGF
  8.       secret-key:
  9.       oss:
  10.         endpoint: oss-cn-beijing.aliyuncs.com
  11.         bucket: gulimall-adverseq
  12.       sms:
  13.         accessKeyId: LTAI4G73Dewcd8U5pC1dppWk
  14.         secret: MSDVelqAqDtk9RW18ftGMrhC5TKzxs
  15.         templateCode: SMS_189520818
  16.         signName: 谷粒商城
  18.   application:
  19.     name: gulimall-third-party
  21. server:
  22.   port: 30000

2、SmsApiController

  1. package com.atguigu.gulimall.thirdpart.controller;
  3. @RestController
  4. @CrossOrigin
  5. @RequestMapping("/sms")
  6. public class SmsApiController {
  8.     @Autowired
  9.     private SendSms sendSms;
  11.     @Autowired
  12.     private MyAccess access;
  14.     @GetMapping("/sendcode")
  15.     public R sendCode(@RequestParam("phone") String phone,@RequestParam("code")String code){
  16.         sendSms.send(access,phone,code);
  17.         return R.ok();
  18.     }
  19. }
  22. // 获取配置文件参数
  23. package com.atguigu.gulimall.thirdpart.config;
  25. @ConfigurationProperties(prefix = "spring.cloud.alicloud.sms")
  26. @Component
  27. @Data
  28. public class MyAccess {
  29.     private String accessKeyId;
  30.     private String secret;
  31.     private String templateCode;
  32.     private String signName;
  33. }

3、SendSmsImpl

  1. package com.atguigu.gulimall.thirdpart.service.impl;
  3. @Service
  4. public class SendSmsImpl implements SendSms {
  6.     @Override
  7.     public boolean send(MyAccess access,String phoneNum,String code) {
  9.         //连接阿里云
  10.         DefaultProfile profile = DefaultProfile.getProfile("cn-qingdao", access.getAccessKeyId(), access.getSecret());
  11.         IAcsClient client = new DefaultAcsClient(profile);
  13.         //构建请求
  14.         CommonRequest request = new CommonRequest();
  15.         request.setSysMethod(MethodType.POST);
  16.         request.setSysDomain("dysmsapi.aliyuncs.com");
  17.         request.setSysVersion("2017-05-25");
  18.         request.setSysAction("SendSms");
  20.         //自定义参数(手机号,验证码,签名,模板)
  21.         request.putQueryParameter("PhoneNumbers", phoneNum);
  22.         request.putQueryParameter("SignName", access.getSignName());
  23.         request.putQueryParameter("TemplateCode", access.getTemplateCode());
  25.         //验证码
  26.         request.putQueryParameter("TemplateParam",JSONObject.toJSONString(code));
  27.         try {
  28.             CommonResponse response = client.getCommonResponse(request);
  29.             System.out.println(response.getData());
  30.             return response.getHttpResponse().isSuccess();
  31.         } catch (ServerException e) {
  32.             e.printStackTrace();
  33.         } catch (ClientException e) {
  34.             e.printStackTrace();
  35.         }
  36.         return false;
  37.     }
  38. }

4、创建验证码的常量类

  1. package com.atguigu.common.constant;
  3. public class AuthServerConstant {
  5.     // 验证码前置
  6.     public static final String SMS_CODE_CACHE_PREFIX="sms:code:";
  8. }

5、添加常量

  1.  添加验证码60秒内重复获取验证码的错误提示常量 
  1. public enum BizCodeEnume {
  3.     SMS_CODE_EXCEPTION(10002,"发送验证码太频繁,请稍后再试"),
  5.     private int code;
  6.     private String msg;
  7.     BizCodeEnume(int code, String msg){
  8.         this.code = code;
  9.         this.msg = msg;
  10.     }
  12.     public int getCode() {
  13.         return code;
  14.     }
  16.     public String getMsg() {
  17.         return msg;
  18.     }
  19. }

6、远程调用验证码接口

  1. package com.atguigu.gulimall.auth.feign.ThirdPartFeignService;
  3. @FeignClient("gulimall-thrid-party")
  4. public interface ThirdPartFeignService {
  6.     @GetMapping("/sms/sendcode")
  7.     public R sendCode(@RequestParam("phone") String phone, @RequestParam("code") String code);
  8. }

7、接口防刷

  1. 由于发送验证码的接口暴露，为了防止恶意攻击，我们不能随意让接口被调用。<br />    1）在redis中以phone-code将电话号码和验证码进行存储并将当前时间与code一起存储<br />    2）如果调用时以当前phone取出的v不为空且当前时间在存储时间的60s以内，说明60s内该号码已经调用过，返回错误信息<br />    3）60s以后再次调用，需要删除之前存储的phone-code<br />    4）code存在一个过期时间，我们设置为10min，10min内验证该验证码有效

8、LoginController

  1. /**
  2.  * 发送手机验证码
  3.  */
  4. @ResponseBody
  5. @GetMapping("/sms/sendcode")
  6. public R sendCode(@RequestParam("phone") String phone) {
  8.     //TODO 接口防刷
  9.     if(!StringUtils.isEmpty(phone) & phone != null) {
  10.         String redisCode = stringRedisTemplate.opsForValue().get(AuthServerConstant.SMS_CODE_CACHE_PREFIX + phone);
  11.         if (!StringUtils.isEmpty(redisCode)) {
  12.             long time = Long.parseLong(redisCode.split("_")[1]);
  13.             if (System.currentTimeMillis() - time < 60000) {
  14.                 // 60秒内不能再发
  15.                 return R.error(BizCodeEnume.SMS_CODE_EXCEPTION.getCode(), BizCodeEnume.SMS_CODE_EXCEPTION.getMsg());
  16.             }
  17.         }
  18.         // 2.验证码的再次校验。redis：key->phone  value->code  sms:code:18312345678->45678
  19.         // 防止同一个手机号在60秒内再次发送验证码，加时间戳后缀
  20.         // String code1 = UUID.randomUUID().toString().substring(0, 5)+"_"+System.currentTimeMillis();
  21.         String code = "123456" + "_" + System.currentTimeMillis();
  23.         // redis缓存验证码
  24.         stringRedisTemplate.opsForValue().set(AuthServerConstant.SMS_CODE_CACHE_PREFIX + phone, code, 10, TimeUnit.MINUTES);
  26.         // 远程调用第三方服务发送验证码
  27.         // thirdPartFeignService.sendCode(phone,code1);
  28.         return R.ok();
  29.     }else {
  30.         return R.error(BizCodeEnume.PHONE_NULL_EXCEPTION.getCode(), BizCodeEnume.PHONE_NULL_EXCEPTION.getMsg());
  31.     }
  32. }

9、测试

image.png
image.png

三、用户注册

1、添加视图控制器

image.png

2、导入参数校验依赖

  1. <dependency>
  2.    <groupId>org.springframework.boot</groupId>
  3.    <artifactId>spring-boot-starter-validation</artifactId>
  4. </dependency>

1）若JSR303校验未通过，则通过BindingResult封装错误信息，并重定向至注册页面
2）若通过JSR303校验，则需要从redis中取值判断验证码是否正确，正确的话通过会员服务注册
3）会员服务调用成功则重定向至登录页，否则封装远程服务返回的错误信息返回至注册页面

3、UserRegistVo

  1. @Data
  2. public class UserRegistVo {
  4.     @NotEmpty(message = "用户名不能为空")
  5.     @Length(min =6, max = 18, message = "用户名必须是6~18位字符")
  6.     private String userName;
  8.     @NotEmpty(message = "密码不能为空")
  9.     @Length(min =6, max = 18, message  = "密码必须是6~18位字符")
  10.     private String password;
  12.     @NotEmpty(message = "手机号不能为空")
  13.     @Pattern(regexp = "^[1]([3-9])[0-9]{9}$", message = "手机号码格式不正确")
  14.     private String phone;
  16.     @NotEmpty(message = "验证码不能为空")
  17.     private String code;
  18. }

4、LoginController

  1. /**
  2.  * 用户注册
  3.  * 重定向携带数据，利用session原理。将数据放在session中。只要跳到下一个页面，取出数据以后，
  4.  * session里面的数据就会删掉
  5.  *
  6.  * @param vo
  7.  * @param result
  8.  * @param redirectAttributes  模拟重定向携带数据
  9.  * @return  注册成功回到首页，或回到登录页
  10.  */
  11. @PostMapping("/regist")
  12. public String regist(@Valid UserRegistVo vo, BindingResult result,
  13.                             RedirectAttributes redirectAttributes) {
  14.     if (result.hasErrors()) {
  15.         /**
  16.          * 方法一
  17.          * Map<String, String> errors = result.getFieldErrors().stream().map(fieldError ->{
  18.          *                 String field = fieldError.getField();
  19.          *                 String defaultMessage = fieldError.getDefaultMessage();
  20.          *                 errors.put(field,defaultMessage);
  21.          *                 return errors;
  22.          *             }).collect(Collector.asList());
  23.          */
  24.         // 方法二：
  25.         // 1.1 如果校验不通过，则封装校验结果
  26.         Map<String, String> errors = result.getFieldErrors().stream().collect(Collectors.toMap(fieldError -> {
  27.             return fieldError.getField();             // Map的键
  28.         }, fieldError -> {
  29.             return fieldError.getDefaultMessage();  // Map的值
  30.         }));
  31.         // 1.2 将错误信息封装到session中，并在重定向的时候携带过去
  32.         redirectAttributes.addFlashAttribute("errors", errors);
  34.         /**
  35.          * 使用 return "forward:/reg.html"; 会出现
  36.          * 问题：Request method 'POST' not supported的问题
  37.          * 原因：用户注册-> /regist[post] ------>转发/reg.html (路径映射默认都是get方式访问的)
  38.          */
  39.         // return "reg";    //转发会出现重复提交的问题，不要以转发的方式
  40.         // 1.3 如果校验出错，重定向到注册页(转发会重复提交表单)。但面临着数据不能携带的问题，就用RedirectAttributes可解决
  41.         return "redirect:http://auth.gulimall.com/reg.html";
  42.     }
  43.     // 2 校验验证码
  44.     String code = vo.getCode();
  45.     String s = stringRedisTemplate.opsForValue().get(AuthServerConstant.SMS_CODE_CACHE_PREFIX + vo.getPhone());
  46.     if (!StringUtils.isEmpty(s)) {
  47.         if (code.equals(s.split("_")[0])) {
  48.             // 验证码通过
  49.             // 删除验证码，令牌机制
  50.             stringRedisTemplate.delete(AuthServerConstant.SMS_CODE_CACHE_PREFIX + vo.getPhone());
  51.             // 调用远程服务，注册
  52.             R r = memberFeignService.regist(vo);
  53.             if (r.getCode() == 0) {
  54.                 //注册成功回到登录页
  55.                 return "redirect:http://auth.gulimall.com/login.html";
  56.             } else {
  57.                 Map<String, String> errors = new HashMap<>();
  58.                 errors.put("msg", r.getData2("msg", new TypeReference<String>() { }));
  59.                 redirectAttributes.addFlashAttribute("errors", errors);
  60.                 return "redirect:http://auth.gulimall.com/reg.html";
  61.             }
  62.         } else {
  63.             Map<String, String> errors = new HashMap<>();
  64.             errors.put("code", "验证码错误");
  65.             redirectAttributes.addFlashAttribute("errors", errors);
  66.             return "redirect:http://auth.gulimall.com/reg.html";
  67.         }
  68.     } else {
  69.         Map<String, String> errors = new HashMap<>();
  70.         errors.put("code", "验证码错误");
  71.         redirectAttributes.addFlashAttribute("errors", errors);
  72.         // 校验出错转发到注册页
  73.         return "redirect:http://auth.gulimall.com/reg.html";
  74.     }
  75. }

5、远程调用会员服务注册用户接口

  1. package com.atguigu.gulimall.auth.feign;
  3. @FeignClient("gulimall-member")
  4. public interface MemberFeignService {
  6.     /**
  7.      * 远程调用member的用户注册接口
  8.      * @param vo
  9.      * @return
  10.      */
  11.     @PostMapping("/member/member/regist")
  12.     R regist(@RequestBody UserRegistVo vo);
  13. }

6、gulimall-member服务的MemberController

  1. /**
  2.  * 用户注册
  3.  * @param vo
  4.  * @return
  5.  */
  6. @PostMapping("/regist")
  7. public R regist(@RequestBody MemberRegistVo vo) {
  9.     try {
  10.         memberService.regist(vo);
  11.     // 通过异常机制判断当前注册会员名和电话号码是否已经注册，如果已经注册，则抛出对应的自定义异常，并在返回时封装对应的错误信息
  12.     } catch (PhoneExistException e) {
  13.         return R.error(BizCodeEnume.PHONE_EXIST_EXCEPTION.getCode(), BizCodeEnume.PHONE_EXIST_EXCEPTION.getMsg());
  14.     } catch (UserNameExistException e) {
  15.         return R.error(BizCodeEnume.USER_EXIST_EXCEPTION.getCode(), BizCodeEnume.USER_EXIST_EXCEPTION.getMsg());
  16.     }
  17.     return R.ok();
  18. }

7、自定义异常

  1. package com.atguigu.gulimall.member.exception;
  3. public class PhoneExistException extends RuntimeException {
  5.     public PhoneExistException(){
  6.         super("该手机号码已注册");
  7.     }
  8. }
  1. package com.atguigu.gulimall.member.exception;
  3. public class UserNameExistException extends RuntimeException {
  5.     public UserNameExistException(){
  6.         super("用户名已存在");
  7.     }
  8. }

8、MD5&MD5盐值与BCrypt加密

image.png

9、MemberServiceImpl

  1. @Override
  2. public void regist(MemberRegistVo vo) {
  4.     MemberDao dao = this.baseMapper;
  5.     MemberEntity entity = new MemberEntity();
  6.     // 设置默认用户等级
  7.     MemberLevelEntity levelEntity = memberLevelDao.getDefaultLevel();
  8.     entity.setLevelId(levelEntity.getId());
  10.     // 检查数据是否唯一，为了让controller感知异常，异常机制
  11.     checkPhoneUnique(vo.getPhone());
  12.     checkUserNameUnique(vo.getUserName());
  13.     entity.setMobile(vo.getPhone());
  14.     entity.setUsername(vo.getUserName());
  15.     entity.setNickname(vo.getUserName());
  16.     // 密码加密存储
  17.     BCryptPasswordEncoder passwordEncoder = new BCryptPasswordEncoder();
  18.     String encode = passwordEncoder.encode(vo.getPassword());
  19.     entity.setPassword(encode);
  20.     dao.insert(entity);
  21.     // 其它默认信息
  22. }
  24. @Override
  25. public void checkPhoneUnique(String phone) throws PhoneExistException {
  26.     MemberDao dao = this.baseMapper;
  27.     Integer mobile = dao.selectCount(new QueryWrapper<MemberEntity>().eq("mobile", phone));
  28.     if (mobile > 0) {
  29.         throw new PhoneExistException();
  30.     }
  31. }
  32. @Override
  33. public void checkUserNameUnique(String userName) throws UserNameExistException {
  34.     MemberDao dao = this.baseMapper;
  35.     Integer cout = dao.selectCount(new QueryWrapper<MemberEntity>().eq("username", userName));
  36.     if (cout > 0) {
  37.         throw new UserNameExistException();
  38.     }
  39. }

四、用户名密码登录

1、UserLoginVo

  1. package com.atguigu.gulimall.auth.vo;
  3. @Data
  4. public class UserLoginVo {
  6.     private String loginacct;
  8.     private String password;
  9. }

2、LoginController

  1. @PostMapping("/login")
  2. // 前端传来k,v参数不需要加@RequestBody
  3. public String login(UserLoginVo vo, 
  4.                     RedirectAttributes redirectAttributes, 
  5.                     HttpSession session) {
  7.     //远程登录
  8.     R r = memberFeignService.login(vo);
  9.     if (r.getCode() == 0) {
  10.         MemberRespVo data = r.getData(new TypeReference<MemberRespVo>() { });
  11.         session.setAttribute(AuthServerConstant.LOGIN_USER, data);
  12.         return "redirect:http://gulimall.com";
  13.     } else {
  14.         Map<String,String>  errors = new HashMap<>();
  15.         errors.put("msg",r.getData2("msg",new TypeReference<String>(){}));
  16.         redirectAttributes.addFlashAttribute("errors",errors);
  17.         return "redirect:http://auth.gulimall.com/login.html";
  18.     }
  19. }

04：商业业务-认证服务 - 图9

3、远程调用member的用户登录接口

  1. package com.atguigu.gulimall.auth.feign;
  3. @FeignClient("gulimall-member")
  4. public interface MemberFeignService {
  6.     /**
  7.      * 远程调用member的用户登录接口
  8.      * @param vo
  9.      * @return
  10.      */
  11.     @PostMapping("/member/member/login")
  12.     R login(@RequestBody UserLoginVo vo);
  13. }

4、会员服务的MemberController

  1. @PostMapping("/login")
  2. public R login(@RequestBody MemberLoginVo vo) {
  4.     MemberEntity memberEntity = memberService.login(vo);
  5.     if (memberEntity != null) {
  6.         return R.ok().setData(memberEntity);
  7.     } else {
  8.         return R.error(BizCodeEnume.LOGINACCT_PASSWORD_INVAILD_EXCEPTION.getCode(), BizCodeEnume.LOGINACCT_PASSWORD_INVAILD_EXCEPTION.getMsg());
  9.     }
  10. }
  1. package com.atguigu.common.exception;
  3. public enum BizCodeEnume {
  5.     LOGINACCT_PASSWORD_INVAILD_EXCEPTION(15002,"账号或密码错误");
  7.     private int code;
  8.     private String msg;
  9.     BizCodeEnume(int code, String msg){
  10.         this.code = code;
  11.         this.msg = msg;
  12.     }
  14.     public int getCode() {
  15.         return code;
  16.     }
  18.     public String getMsg() {
  19.         return msg;
  20.     }
  21. }

5、MemberServiceImpl

  1. @Override
  2. public MemberEntity login(MemberLoginVo vo) {
  4.     String loginacct = vo.getLoginacct();
  5.     String password = vo.getPassword();
  6.     //1.数据库查询
  7.     MemberDao dao = this.baseMapper;
  8.     QueryWrapper<MemberEntity> wrapper = new QueryWrapper<>();
  9.     wrapper.eq("username", loginacct)
  10.             .or()
  11.             .eq("mobile", loginacct);
  12.     MemberEntity entity = dao.selectOne(wrapper);
  13.     if (entity == null) {
  14.         return null;
  15.     } else {
  16.         String passwordDb = entity.getPassword();
  17.         BCryptPasswordEncoder passwordEncoder = new BCryptPasswordEncoder();
  18.         //密码匹配
  19.         boolean matches = passwordEncoder.matches(password, passwordDb);
  20.         if (matches) {
  21.             return entity;
  22.         } else {
  23.             return null;
  24.         }
  25.     }
  26. }

五、社交登录

社交登录流程.png

六、SpringSession

1、session原理

image.png

2、分布式下session共享问题

image.png

3、Session共享问题解决

3.1 session复制

image.png

3.2 客户端存储

image.png

3.3 hash一致性

image.png

3.4 统一存储

image.png

3.5 不同服务、子域session共享

jsessionid这个cookie默认是当前系统域名的。当我们分拆服务，不同域名部署的时候，我们可以使用如下解决方案：
04：商业业务-认证服务 - 图17

4、整合SpringSession

4.1 导入依赖

  1. <dependency>
  2.     <groupId>org.springframework.session</groupId>
  3.     <artifactId>spring-session-data-redis</artifactId>
  4. </dependency>

4.2 设置session的保存类型

  1. spring.session.store-type=redis            session的保存类型
  2. server.servlet.session.timeout=30m        session的过期时间

4.3 配置redis连接信息

  1. spring.redis.host=192.168.195.128
  2. spring.redis.port=6379

4.4 主配置类添加注解

  1. package com.atguigu.gulimall.auth;
  3. @EnableDiscoveryClient
  4. @SpringBootApplication
  5. // 整合redis存储session
  6. // 创建了一个springSessionRepositoryFilter
  7. // 负责将原生HttpSession替换为Spring Session的实现
  8. @EnableRedisHttpSession         
  9. @EnableFeignClients
  10. public class GulimallAuthServerApplication {
  12.     public static void main(String[] args) {
  13.         SpringApplication.run(GulimallAuthServerApplication.class, args);
  14.     }
  15. }

image.png

4.5 自定义配置

  • 由于默认使用jdk进行序列化，通过导入RedisSerializer修改为json序列化
  • 并且通过修改CookieSerializer扩大session的作用域至**.gulimall.com ```java package com.atguigu.gulimall.auth.config;

@Configuration public class GulimallSessionConfig {

  1. // Cookie序列化器
  2. @Bean
  3. public CookieSerializer cookieSerializer(){
  4.     DefaultCookieSerializer cookieSerializer = new DefaultCookieSerializer();
  5.     // 设置session作用域
  6.     cookieSerializer.setDomainName("gulimall.com");
  7.     // 设置Cookie的名称
  8.     cookieSerializer.setCookieName("GULISESSION");
  9.     return cookieSerializer;
  10. }
  12. @Bean
  13. public RedisSerializer<Object> springSessionDefaultRedisSerializer(){
  14.     // 序列化机制
  15.     return new GenericJackson2JsonRedisSerializer();
  16. }

}

  1. ![](https://cdn.nlark.com/yuque/0/2021/png/22523384/1635259497746-0a25e38c-95b2-41fa-b3a3-71b92f5f7093.png#crop=0&crop=0&crop=1&crop=1&from=url&id=kpuhM&margin=%5Bobject%20Object%5D&originHeight=845&originWidth=1387&originalType=binary&ratio=1&rotation=0&showTitle=false&status=done&style=none&title=)
  2. <a name="yjVep"></a>
  3. ## 5、SpringSession核心原理
  4. ![](https://cdn.nlark.com/yuque/0/2021/png/22523384/1635259549526-c1cccb01-5650-4ed3-a618-b1dcc5e611e1.png#crop=0&crop=0&crop=1&crop=1&from=url&id=E1bOB&margin=%5Bobject%20Object%5D&originHeight=398&originWidth=1355&originalType=binary&ratio=1&rotation=0&showTitle=false&status=done&style=none&title=)<br />![image.png](https://cdn.nlark.com/yuque/0/2021/png/22523384/1638880698213-d8956a2f-2c8a-46b7-9691-b21605a83991.png#clientId=uaad33c5d-2462-4&crop=0&crop=0&crop=1&crop=1&from=paste&height=441&id=u03922f28&margin=%5Bobject%20Object%5D&name=image.png&originHeight=441&originWidth=997&originalType=binary&ratio=1&rotation=0&showTitle=false&size=424651&status=done&style=none&taskId=u4d07aa3b-2349-47b8-a135-a804e60c85b&title=&width=997)
  5. <a name="DNPZS"></a>
  6. ## 6、分布式登录总结
  7. 首先判断session中是否有loginUser对象<br />1）没有loginUser对象，渲染login.html页面<br />    用户输入账号密码后发送给url：auth.gulimall.com/login。根据表单传过来的VO对象，远程调用memberFeignService验证密码<br />        如果验证失败，取出远程调用返回的错误信息，放到新的请求域，重定向到登录url<br />        如果验证成功，远程服务就返回了对应的MemberRespVo对象，然后放到分布式redis-session中，key为"loginUser"，重定向到首页gulimall.com，同时也会带着的GULISESSIONID<br />            重定向到非auth项目后，先经过拦截器看session里有没有loginUser对象<br />            有，放到静态threadLocal中，这样就可以操作本地内存，无需远程调用session<br />            没有，重定向到登录页<br />2）有loginUser对象，代表登录过了，重定向到首页，session数据还依靠sessionID持有着
  9. 额外说明：<br />问题1：我们有sessionId不就可以了吗？为什么还要在session中放到User对象？<br />为了其他服务可以根据这个user查数据库，只有session的话不能再次找到登录session的用户
  11. 问题2：threadlocal的作用？<br />它是为了放到当前session的线程里，threadlocal就是这个作用，随着线程创建和消亡。把threadlocal定义为static的，这样当前会话的线程中任何代码地方都可以获取到。如果只是在session中的话，一是每次还得去redis查询，二是去调用service还得传入session参数，多麻烦啊
  13. 问题3：cookie怎么回事？不是在config中定义了cookie的key和序列化器？<br />序列化器没什么好讲的，就是为了易读和来回转换。而cookie的key其实是无所谓的，只要两个项目里的key相同，然后访问同一个域名都带着该cookie即可。
  14. <a name="O7tgw"></a>
  15. # 七、单点登录
  16. ![image.png](https://cdn.nlark.com/yuque/0/2021/png/22523384/1638881435012-3a138b67-0055-4477-97c4-ac05b553daf9.png#clientId=uaad33c5d-2462-4&crop=0&crop=0&crop=1&crop=1&from=paste&height=391&id=u23d1380b&margin=%5Bobject%20Object%5D&name=image.png&originHeight=391&originWidth=934&originalType=binary&ratio=1&rotation=0&showTitle=false&size=64031&status=done&style=none&taskId=u18aae456-3c13-416e-8072-cb712334571&title=&width=934)<br />![image.png](https://cdn.nlark.com/yuque/0/2021/png/22523384/1638965838676-952143e1-cb05-4830-9743-01d1f42d877b.png#clientId=ub0e8ea8c-09a0-4&crop=0&crop=0&crop=1&crop=1&from=paste&height=492&id=u40c8bdd5&margin=%5Bobject%20Object%5D&name=image.png&originHeight=492&originWidth=784&originalType=binary&ratio=1&rotation=0&showTitle=false&size=230765&status=done&style=none&taskId=u08470274-ad09-4f9c-b89b-5cc0daaff8d&title=&width=784)<br />![单点登录流程.png](https://cdn.nlark.com/yuque/0/2021/png/22523384/1638884900298-48a5fde5-807a-43a3-ae27-7cadd1696030.png#clientId=uaad33c5d-2462-4&crop=0&crop=0&crop=1&crop=1&from=paste&height=1167&id=u79587eb2&margin=%5Bobject%20Object%5D&name=%E5%8D%95%E7%82%B9%E7%99%BB%E5%BD%95%E6%B5%81%E7%A8%8B.png&originHeight=1167&originWidth=1002&originalType=binary&ratio=1&rotation=0&showTitle=false&size=160122&status=done&style=none&taskId=ud43f6f4d-6c47-4653-ad7e-0d15f7751c7&title=&width=1002)
  17. <a name="Z2yFB"></a>
  18. ## 1、gulimall-test-sso-server
  19. <a name="Pg6wk"></a>
  20. ### 1.1 导入依赖
  21. ```java
  22. <?xml version="1.0" encoding="UTF-8"?>
  23. <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  24.     xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
  25.     <modelVersion>4.0.0</modelVersion>
  26.     <parent>
  27.         <groupId>org.springframework.boot</groupId>
  28.         <artifactId>spring-boot-starter-parent</artifactId>
  29.         <version>2.2.11.RELEASE</version>
  30.         <relativePath/> <!-- lookup parent from repository -->
  31.     </parent>
  32.     <groupId>com.atguigu</groupId>
  33.     <artifactId>gulimall-test-sso-server</artifactId>
  34.     <version>0.0.1-SNAPSHOT</version>
  35.     <name>gulimall-test-sso-server</name>
  36.     <properties>
  37.         <java.version>1.8</java.version>
  38.     </properties>
  39.     <dependencies>
  40.         <dependency>
  41.             <groupId>org.springframework.boot</groupId>
  42.             <artifactId>spring-boot-starter-thymeleaf</artifactId>
  43.         </dependency>
  44.         <dependency>
  45.             <groupId>org.springframework.boot</groupId>
  46.             <artifactId>spring-boot-starter-web</artifactId>
  47.         </dependency>
  49.         <dependency>
  50.             <groupId>org.projectlombok</groupId>
  51.             <artifactId>lombok</artifactId>
  52.             <optional>true</optional>
  53.         </dependency>
  54.     </dependencies>
  56.     <build>
  57.         <plugins>
  58.             <plugin>
  59.                 <groupId>org.springframework.boot</groupId>
  60.                 <artifactId>spring-boot-maven-plugin</artifactId>
  61.                 <configuration>
  62.                     <excludes>
  63.                         <exclude>
  64.                             <groupId>org.projectlombok</groupId>
  65.                             <artifactId>lombok</artifactId>
  66.                         </exclude>
  67.                     </excludes>
  68.                 </configuration>
  69.             </plugin>
  70.         </plugins>
  71.     </build>
  72. </project>

1.1 LoginController

  1. package com.atguigu.gulimall.ssoserver.controller;
  3. @Controller
  4. public class LoginController {
  6.     @Autowired
  7.     StringRedisTemplate redisTemplate;
  9.     @GetMapping("/userInfo")
  10.     @ResponseBody
  11.     public String userInfo(@RequestParam("token") String token){
  13.         String s = redisTemplate.opsForValue().get(token);
  14.         return s;
  15.     }
  17.     @GetMapping("/login.html")
  18.     public String loginPage(@RequestParam("redirect_url") String url, 
  19.                             @CookieValue(value = "sso_token",required = false) String sso_token,
  20.                             Model model) {
  21.         // 判断是否登录过？依据是否拥有cookie sso_token，如果有直接返回之前的页面
  22.         if(!StringUtils.isEmpty(sso_token)){
  23.            return "redirect:" + url + "?token=" + sso_token;
  24.        }
  25.         model.addAttribute("url", url);
  26.         return "login";
  27.     }
  29.     @PostMapping("/doLogin")
  30.     public String doLogin(@RequestParam("username") String username, 
  31.                           @RequestParam("password") String password,
  32.                           @RequestParam("url") String url, 
  33.                           HttpServletResponse response) {
  34.         // 登录成功跳转,跳回之前的页面
  35.         if (!StringUtils.isEmpty(username) && !StringUtils.isEmpty(password)) {
  36.             // 保存登录成功的用户，例如redis
  37.             String uuid = UUID.randomUUID().toString().replace("-", "");
  38.             redisTemplate.opsForValue().set(uuid, username, 30, TimeUnit.MINUTES);
  39.             Cookie sso_token = new Cookie("sso_token",uuid);
  40.             response.addCookie(sso_token);
  41.             return "redirect:" + url + "?token=" + uuid;
  42.         }
  43.         // 登录失败，展示登录页
  44.         return "login";
  45.     }
  46. }

1.2 login.html

  1. <!DOCTYPE html>
  2. <html lang="en" xmlns:th="http://www.thymeleaf.org">
  3. <head>
  4.     <meta charset="UTF-8">
  5.     <title>Title</title>
  6. </head>
  7. <body>
  8. <form action="/doLogin" method="post">
  9.    用户名: <input name="username" type="text"><br/>
  10.    密码: <input name="password" type="password"> <br/>
  11.     <input type="hidden" name="url" th:value="${url}">
  12.     <input type="submit" value="登录">
  13. </form>
  14. </body>
  15. </html>

2、gulimall-test-sso-client

  1. package com.atguigu.gulimall.ssoclient;
  3. @SpringBootApplication
  4. public class GulimallTestSsoClient2Application {
  6.     public static void main(String[] args) {
  7.         SpringApplication.run(GulimallTestSsoClient2Application.class, args);
  8.     }
  9. }

2.1 application.properties

  1. server.port=8081
  2. sso.server.url=http://ssoserver.com:8080/login.html

2.2 HelloController

  1. package com.atguigu.gulimall.ssoclient.controller;
  3. @Controller
  4. public class HelloController {
  6.     @Value("${sso.server.url}")
  7.     String ssoServerUrl;
  9.     // 无需登录即可访问
  10.     @ResponseBody
  11.     @GetMapping("/hello")
  12.     public String hello(){
  13.         return "hello";
  14.     }
  16.     /**
  17.      * 可以感知登录服务器登录成功返回
  18.      * ssoserver登录成功返回就会带上token
  19.      * @return
  20.      */
  21.     @GetMapping("/employees")
  22.     public String emploees(Model model, HttpSession session,
  23.                            @RequestParam(value = "token",required = false) String token){
  24.         if(!StringUtils.isEmpty(token)){
  25.             // 去sso服务器获取当前token真正对应的用户信息
  26.             RestTemplate restTemplate = new RestTemplate();
  27.             ResponseEntity<String> forEntity = restTemplate.getForEntity("http://ssoserver.com:8080/userInfo?token=" + token, String.class);
  28.             String body = forEntity.getBody();
  29.             session.setAttribute("loginUser",body);
  30.         }
  31.         Object loginUser = session.getAttribute("loginUser");
  32.         if(loginUser == null){
  33.             // 没有登录，跳转到登录服务器进行登录
  34.             return "redirect:"+ssoServerUrl+"?redirect_url=http://client1.com:8081/employees";
  35.         }else {
  36.             List<String> emps = new ArrayList<String>();
  37.             emps.add("张三");
  38.             emps.add("李四");
  39.             emps.add("王五");
  40.             model.addAttribute("emps", emps);
  41.             return "list";
  42.         }
  43.     }
  44. }

2.3 list.html

  1. <!DOCTYPE html>
  2. <html lang="en" xmlns:th="http://www.thymeleaf.org">
  3. <head>
  4.     <meta charset="UTF-8">
  5.     <title>Title</title>
  6. </head>
  7. <body>
  8. <h1>[[${session.loginUser}]]</h1>
  9. <ul>
  10.     <li th:each="emp:${emps}">姓名:[[${emp}]]</li>
  11. </ul>
  12. </body>
  13. </html>

3、gulimall-test-sso-client2

  1. package com.atguigu.gulimall.ssoclient;
  3. @SpringBootApplication
  4. public class GulimallTestSsoClient2Application {
  6.     public static void main(String[] args) {
  7.         SpringApplication.run(GulimallTestSsoClient2Application.class, args);
  8.     }
  9. }

3.1 application.properties

  1. server.port=8082
  2. sso.server.url=http://ssoserver.com:8080/login.html

3.2 HelloController

  1. package com.atguigu.gulimall.ssoclient.controller;
  3. @Controller
  4. public class HelloController {
  6.     @Value("${sso.server.url}")
  7.     String ssoServerUrl;
  9.     // 无需登录即可访问
  10.     @ResponseBody
  11.     @GetMapping("/hello")
  12.     public String hello(){
  13.         return "hello";
  14.     }
  16.     /**
  17.      * 可以感知登录服务器登录成功返回
  18.      * ssoserver登录成功返回就会带上token
  19.      * @return
  20.      */
  21.     @GetMapping("/boss")
  22.     public String emploees(@RequestParam(value = "token",required = false) String token,
  23.                            Model model, HttpSession session){
  24.         if(!StringUtils.isEmpty(token)){
  25.             // 去sso服务器获取当前token真正对应的用户信息
  26.             RestTemplate restTemplate = new RestTemplate();
  27.             ResponseEntity<String> forEntity = restTemplate.getForEntity("http://ssoserver.com:8080/userInfo?token=" + token, String.class);
  28.             String body = forEntity.getBody();
  29.             session.setAttribute("loginUser",body);
  30.         }
  31.         Object loginUser = session.getAttribute("loginUser");
  32.         if(loginUser == null){
  33.             // 没有登录,跳转到登录服务器进行登录
  34.             return "redirect:" + ssoServerUrl + "?redirect_url=http://client2.com:8082/boss";
  35.         }else {
  36.             List<String> emps = new ArrayList<String>();
  37.             emps.add("Jack");
  38.             emps.add("Tom");
  39.             emps.add("Ada");
  40.             model.addAttribute("emps", emps);
  41.             return "list";
  42.         }
  43.     }
  44. }

3.3 list.html

  1. <!DOCTYPE html>
  2. <html lang="en" xmlns:th="http://www.thymeleaf.org">
  3. <head>
  4.     <meta charset="UTF-8">
  5.     <title>Title</title>
  6. </head>
  7. <body>
  8. <h1>欢迎：[[${session.loginUser}]]</h1>
  9. <ul>
  10.     <li th:each="emp:${emps}">姓名:[[${emp}]]</li>
  11. </ul>
  12. </body>
  13. </html>