授權和微服務的相互認證

一授權

1課程服務是一個資源服務

在其某個controller中加preauthorize注解，

2同時配置文件中開啟

3.jwt令牌中包含對應權限信息才可以操作

XcUserExt userext = userClient.findUserInfo(username);

/*
        //獲取當前用戶的權限信息
        List<XcMenu> menuList = xcMenuMapper.findMenuList(xcUser.getId());
        xcUserExt.setPermissions(menuList);*/

 

select * from xc_menu where id in (select menu_id from xc_permission where role_id in(select role_id from xc_user_role where user_id ='49') )

 存到jwt令牌中

 

 

權限五張表阿帕奇的shrio和springsecurity都是基於

權限，權限角色roleid，resourceID，角色，用戶角色userid roleid，用戶，

查詢主表為權限，根據用戶id查roleid 查中間表

4.權限不足友好提示

import com.google.common.collect.ImmutableMap;
import com.xuecheng.filesystem.framework.model.response.CommonCode;
import com.xuecheng.filesystem.framework.model.response.ResponseResult;
import com.xuecheng.filesystem.framework.model.response.ResultCode;
import lombok.extern.slf4j.Slf4j;
import org.springframework.http.converter.HttpMessageNotReadableException;
import org.springframework.web.bind.annotation.ControllerAdvice;
import org.springframework.web.bind.annotation.ExceptionHandler;
import org.springframework.web.bind.annotation.ResponseBody;

//全局異常抓取類
@ControllerAdvice //增強controller
@Slf4j
public class ExceptionCatch {

    //ImmutableMap 線程安全，聲明之后內容不可變
    private static ImmutableMap<Class<? extends Throwable>,ResultCode> EXCEPTIONS;

    protected static ImmutableMap.Builder<Class<? extends Throwable>,ResultCode> builder = ImmutableMap.builder();

    //抓取自定義異常（可預知異常）
    @ExceptionHandler(CustomerException.class)
    @ResponseBody
    public ResponseResult customerException(CustomerException customerException){
        //給用戶返回友好信息
        ResultCode resultCode = customerException.getResultCode();

        ResponseResult responseResult = new ResponseResult(resultCode);
        return responseResult;
    }

    //抓取不可預知異常
    @ExceptionHandler(Exception.class)
    @ResponseBody
    public ResponseResult exception(Exception exception){

        log.error(exception.getMessage());

        if (EXCEPTIONS == null){
            EXCEPTIONS = builder.build();
        }
        ResultCode resultCode = EXCEPTIONS.get(exception.getClass());
        if (resultCode == null){
            return new ResponseResult(CommonCode.SERVER_ERROR);
        }else{
            return new ResponseResult(resultCode);
        }

    }

    static {
        builder.put(HttpMessageNotReadableException.class, CommonCode.INVALIDATE_PARAMS);
    }
}

權限不足，無權操作。

 

點擊“”管理課程“”沒信息回顯，發出查詢課程基礎信息請求，被攔截，