黑马点评——用redis存储code、token实现登录过程的bug
在UserServiceImpl中我已经把token返回，但是在登录后还是要重新登录，发现拦截器获取到的authorization值是[object Object]
代码放下面
@Service
@Slf4j
public class UserServiceImpl extends ServiceImpl<UserMapper, User> implements IUserService {
@Autowired
private UserMapper userMapper;
@Resource
private StringRedisTemplate stringRedisTemplate;
/*
* 发送验证码
* */
@Override
public Result sendCode(String phone, HttpSession session) {
//校验手机号
if(RegexUtils.isPhoneInvalid(phone)){
return Result.fail("手机号格式错误");
}
//生成验证码
String code = RandomUtil.randomNumbers(6);
//保存到redis
stringRedisTemplate.opsForValue().set(RedisConstants.LOGIN_CODE_KEY + phone, code,RedisConstants.LOGIN_CODE_TTL, TimeUnit.MINUTES);
//保存到session
//session.setAttribute("code",code);
//发送验证码
log.info("发送验证码成功：{}",code);
//ok
return Result.ok();
}
/*
* 校验验证码，用户信息
* */
@Override
public Result login(LoginFormDTO loginForm, HttpSession session) {
String phone = loginForm.getPhone();
Object cacheCode = stringRedisTemplate.opsForValue().get(RedisConstants.LOGIN_CODE_KEY + phone);
String code = loginForm.getCode();
//校验手机号
if(RegexUtils.isPhoneInvalid(phone)){
return Result.fail("手机号格式错误");
}
//校验验证码
if(cacheCode == null || !cacheCode.toString().equals(code)){
return Result.fail("验证码错误");
}
//根据手机号查询用户
User user = query().eq("phone",phone).one();
if (user == null) {
user = createNewUser(phone);
}
UserDTO userDTO = new UserDTO();
BeanUtils.copyProperties(user,userDTO);
//随机生成token
String token = UUID.randomUUID().toString();
//将userdto 存储到redis中
Map<String,Object> userMap = BeanUtil.beanToMap(userDTO,new HashMap<>(),
CopyOptions.create()
.setIgnoreNullValue(true)
.setFieldValueEditor((fieldName,fieldValue) -> fieldValue.toString())
);
//存到redis中
String tokenKey = RedisConstants.LOGIN_USER_KEY + token;
stringRedisTemplate.opsForHash().putAll(tokenKey,userMap);
//设置token有效期
stringRedisTemplate.expire(tokenKey,RedisConstants.LOGIN_USER_TTL,TimeUnit.MINUTES);
log.info("token:{}",token);
//session.setAttribute("user",userDTO);
return Result.ok(token);
}
private User createNewUser(String phone) {
User user = new User();
user.setPhone(phone);
user.setNickName("user_" + RandomUtil.randomString(10));
save(user);
log.info("创建新用户成功：{}",user);
return user;
}
}
拦截器
public class LoginInterceptor implements HandlerInterceptor {
private static final Logger log = LoggerFactory.getLogger(LoginInterceptor.class);
private StringRedisTemplate stringRedisTemplate;
public LoginInterceptor(StringRedisTemplate stringRedisTemplate) {
this.stringRedisTemplate = stringRedisTemplate;
}
/*@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
//获取session
HttpSession session = request.getSession();
//获取用户
Object user = session.getAttribute("user");
//判断用户是否存在
if (user == null){
response.setStatus(401);
return false;
}
//存在，保存用户信息到threadlocal
UserHolder.saveUser((UserDTO) user);
//放行
return true;
}
*/
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
//获取token
String token = request.getHeader("authorization");
// 去除 Bearer 前缀（如果存在）
if (token.startsWith("Bearer ")) {
token = token.substring(7);
}
String tokenKey = RedisConstants.LOGIN_USER_KEY + token;
log.info("token:{}",token);
log.info("tokenkey:{}",tokenKey);
if (StrUtil.isBlank(token)){
response.setStatus(401);
return false;
}
Map<Object,Object> userMap = stringRedisTemplate.opsForHash().entries(tokenKey);
if (userMap.isEmpty()){
response.setStatus(401);
return false;
}
//将查询到的结果转换为dto对象
UserDTO userDTO = new UserDTO();
BeanUtil.fillBeanWithMap(userMap,userDTO,false);
//保存用户信息到threadlocal
UserHolder.saveUser(userDTO);
//刷新token有效期
stringRedisTemplate.expire(tokenKey, RedisConstants.LOGIN_USER_TTL, TimeUnit.MINUTES);
//返回true
return true;
}
@Override
public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
UserHolder.removeUser();
}
}
注册拦截器
@Configuration
public class MvcConfig implements WebMvcConfigurer {
@Resource
private StringRedisTemplate stringRedisTemplate;
@Override
public void addInterceptors(InterceptorRegistry registry) {
//登录拦截器
registry.addInterceptor(new LoginInterceptor(stringRedisTemplate))
.excludePathPatterns(
"/shop/**",
"/voucher/**",
"/shop-type/**",
"/upload/**",
"/blog/hot",
"/user/code",
"/user/login"
);
}
}
controller
@PostMapping("/login")
public Result login(@RequestBody LoginFormDTO loginForm, HttpSession session){
// TODO 实现登录功能
return Result.ok(userService.login(loginForm,session));
}
