微服务网关：spring cloud gateway实现jwt统一认证

    
        org.springframework.cloud
        spring-cloud-starter-gateway
    
    
        org.springframework.cloud
        spring-cloud-starter-netflix-eureka-client
    
    
        org.springframework.boot
        spring-boot-starter-test
        test
        
            
                org.junit.vintage
                junit-vintage-engine
            
        
    

server:
  port: 8020
spring:
  application:
    name: gateway-server
  cloud:
    gateway:
      discovery:
        locator:
          enabled: true //启用网关服务发关
          lower-case-service-id: true //支持小写字母的服务名称（注册到eureka的服务）
ek:
  username: eureka
  password: 123456
  eureka-url: 127.0.0.1
  eureka-port: 8765
eureka:
  client:
    service-url:
      defaultZone:
        http://${ek.username}:${ek.password}@${ek.eureka-url}:${ek.eureka-port}/eureka  //Eureka注册地址
  instance:
    prefer-ip-address: true  //启用优先IP地址注册
    instance-id: ${spring.application.name}@${spring.cloud.client.ip-address}@${server.port} //本网关注册到Eureka的实例id

"Identity": {
   "Jwt": {
     "Key": "1234567890123456",
     "Domain": "kingsun.mico"
   }
 }

public void ConfigureServices(IServiceCollection services)
    {
        services.Configure(Configuration.GetSection("Identity"));
        services.AddControllers();
    }

[Route("api/[controller]")]
    [ApiController]
    public class TokenController : ControllerBase
    {
        JwtConfig config;
        public TokenController(IOptions< JwtConfig > config)
        {
            this.config = config.Value;
        }
        public class GetTokenRequest
        {
            [Required]
            public string Name { get; set; }
            [Required]
            public string Password { get; set; }
        }
        public class GetTokenRespone
        {
            public int Code { get; set; }
            public string Msg { get; set; }
            public string Data { get; set; }
        }
        [HttpPost("GetToken")]
        public object GetToken([FromBody] GetTokenRequest data)
        {
            GetTokenRespone respone = new GetTokenRespone()
            {
                Code = 0
            };
            if (!ModelState.IsValid)
            {
                respone.Msg = "用户名或密码不能为空";
                return respone;
            }
            //验证密码逻辑
            //....
 
            //jwt中payload键值对内容
            List claims = new List()
            {
                //用户名
                new Claim("name",data.Name)
            };
            var key = new SymmetricSecurityKey(System.Text.Encoding.UTF8.GetBytes(config.Jwt.Key));
            var creds = new SigningCredentials(key,SecurityAlgorithms.HmacSha256);
            var token = new JwtSecurityToken(
                 issuer: "liujb", audience: config.Jwt.Domain, claims: claims, signingCredentials: creds, expires:DateTime.Now.AddDays(1),notBefore:DateTime.Now
                );
            respone.Code = 1;
            respone.Msg = "请求成功";
            respone.Data = new JwtSecurityTokenHandler().WriteToken(token);
            return respone;
        }
    }

{
    "code": 1,
    "msg": "请求成功",
    "data": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYW1lIjoibGl1amIiLCJuYmYiOiIxNjAyODE3NjY1MjMwIiwiZXhwIjoiMTYwMjkwNDA2NTIzMCIsImlzcyI6ImxpdWpiIiwiYXVkIjoia2luZ3N1bi5taWNvIn0.5pIrNumEEy280-sCWp4d0K05Skc2Ptn1sK732Rw-L-A"
}

           com.auth0
           java-jwt
           3.11.0
       

@Component
public class JwtFilter implements GlobalFilter, Ordered {
    @Value("${jwt.key}")
    public String jwtKey;
    Logger logger=null;
    public JwtFilter(){
        logger= LoggerFactory.getLogger("JwtFilter");
    }
    @Override
    public Mono filter(ServerWebExchange exchange, GatewayFilterChain chain) {
        String requestUrl=exchange.getRequest().getPath().toString();
        ServerHttpResponse response = exchange.getResponse();
        /*过滤掉获取token的接口*/
        if(requestUrl.toLowerCase().equals("/eureka-identity/api/token/gettoken")){
            return chain.filter(exchange);
        }
        //获取token
        String token=exchange.getRequest().getHeaders().getFirst("Authorization");
        //没有token返回未认证
        if(token==null||token==""){
            response.setStatusCode(HttpStatus.UNAUTHORIZED);
            return response.setComplete();
        }
        try{
            this.getJwtByToken(token,jwtKey,null);
            return chain.filter(exchange);
        }
        catch(Exception ex){
            logger.error(ex.getMessage());
            response.setStatusCode(HttpStatus.UNAUTHORIZED);
            return response.setComplete();
        }
    }
 
    @Override
    public int getOrder() {
        return 0;
    }
    private DecodedJWT getJwtByToken(String token, String key, Map claims) throws Exception{
        Algorithm algorithm = Algorithm.HMAC256(key);
        Verification verifier= JWT.require(algorithm)
                .withIssuer("liujb");
        if(claims!=null){
            claims.forEach((mapKey,mapValue)->{
                verifier.withClaim(mapKey,mapValue);
            });}
        JWTVerifier ver= verifier.build();
        DecodedJWT jwt=ver.verify(token);
        return jwt;
    }
}