cookie\u548cspring-gateway\u7ed3\u5408\u505a\u7528\u6237\u8ba4\u8bc1\u670d\u52a1<\/a>\uff0c\u8fd9\u4e2a\u662f\u901a\u8fc7cookie\u548cset-cookie\u6765\u8fbe\u5230token\u4f20\u9012\u7684\u6548\u679c\uff0c\u540e\u9762\u5355\u72ec\u5199\u4e00\u7bc7\u6587\u7ae0\u8bb2\u89e3\u3002<\/p>\n2\u3001\u5c01\u88c5\u7528\u6237\u4fe1\u606f\u5230Context\u4e2d
\u6ce8\u610f\uff1a\u5c01\u88c5\u597d\u7684Context\u53ef\u4ee5\u5355\u72ec\u653e\u5230context\u5305\u4e2d\uff0c\u5e76\u4e14\u6bcf\u4e2a\u5fae\u670d\u52a1\u90fd\u5fc5\u987b\u52a0\u3002<\/p>\n
\u5982\u4f55\u6765\u5c01\u88c5\u5462\uff1f\u5176\u5b9e\u6211\u4ee3\u7801\u5df2\u7ecf\u5199\u597d\u4e86\uff0c\u5927\u5bb6\u53ef\u4ee5\u53c2\u8003\u4f7f\u7528\u3002
![\"image.png\"](\"https:\/\/segmentfault.com\/img\/bVc487Z\" "\\"image.png\\"")
UserContext.java<\/p>\n
@Component\npublic class UserContext {\n public static final String CORRELATION_ID = "correlation-id";\n public static final String AUTH_TOKEN = "authorization";\n public static final String USER = "user";\n\n private static final ThreadLocal<String> correlationId = new ThreadLocal<String>();\n private static final ThreadLocal<String> authToken = new ThreadLocal<String>();\n private static final ThreadLocal<LoginUser> user = new ThreadLocal<>();\n\n public static String getCorrelationId() {\n return correlationId.get();\n }\n\n public static void setCorrelationId(String cid) {\n correlationId.set(cid);\n }\n\n public static String getAuthToken() {\n return authToken.get();\n }\n\n public static void setAuthToken(String token) {\n authToken.set(token);\n }\n\n public static LoginUser getUser() {\n return user.get();\n }\n\n public static void setUser(LoginUser u) {\n user.set(u);\n }\n\n\n public static HttpHeaders getHttpHeaders() {\n HttpHeaders httpHeaders = new HttpHeaders();\n httpHeaders.set(CORRELATION_ID, getCorrelationId());\n\n return httpHeaders;\n }\n}\n<\/code><\/pre>\nUserContextFilter.java<\/p>\n
@Component\npublic class UserContextFilter implements Filter {\n private static final Logger logger = LoggerFactory.getLogger(UserContextFilter.class);\n\n @Override\n public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain)\n throws IOException, ServletException {\n\n\n HttpServletRequest httpServletRequest = (HttpServletRequest) servletRequest;\n ObjectMapper mapper = new ObjectMapper();\n String userJson = httpServletRequest.getHeader(UserContext.USER);\n if(StringUtils.hasLength(userJson)){\n LoginUser userMap = mapper.readValue(userJson, LoginUser.class);\n UserContextHolder.getContext().setUser(userMap);\n }\n UserContextHolder.getContext().setCorrelationId( httpServletRequest.getHeader(UserContext.CORRELATION_ID) );\n UserContextHolder.getContext().setAuthToken( httpServletRequest.getHeader(UserContext.AUTH_TOKEN) );\n\n\n logger.debug("---Incoming Correlation id: {}---" ,UserContextHolder.getContext().getCorrelationId());\n\/\/ logger.debug("---Incoming Authorization token: {}---" ,UserContextHolder.getContext().getAuthToken());\n\n filterChain.doFilter(httpServletRequest, servletResponse);\n }\n\n @Override\n public void init(FilterConfig filterConfig) throws ServletException {}\n\n @Override\n public void destroy() {}\n}\n<\/code><\/pre>\nUserContextHolder.java<\/p>\n
public class UserContextHolder {\n private static final ThreadLocal<UserContext> userContext = new ThreadLocal<UserContext>();\n\n public static final UserContext getContext(){\n UserContext context = userContext.get();\n\n if (context == null) {\n context = createEmptyContext();\n userContext.set(context);\n\n }\n return userContext.get();\n }\n\n public static final void setContext(UserContext context) {\n Assert.notNull(context, "Only non-null UserContext instances are permitted");\n userContext.set(context);\n }\n\n public static final UserContext createEmptyContext(){\n return new UserContext();\n }\n}\n<\/code><\/pre>\nUserContextInterceptor.java<\/p>\n
public class UserContextInterceptor implements ClientHttpRequestInterceptor {\n private static final Logger logger = LoggerFactory.getLogger(UserContextInterceptor.class);\n\n @Override\n public ClientHttpResponse intercept(HttpRequest request, byte[] body, ClientHttpRequestExecution execution) throws IOException {\n\n HttpHeaders headers = request.getHeaders();\n headers.add(UserContext.CORRELATION_ID, UserContextHolder.getContext().getCorrelationId());\n headers.add(UserContext.AUTH_TOKEN, UserContextHolder.getContext().getAuthToken());\n LoginUser user = UserContextHolder.getContext().getUser();\n ObjectMapper mapper = new ObjectMapper();\n String userInfo = mapper.writeValueAsString(user);\n headers.add(UserContext.USER, userInfo);\n\n return execution.execute(request, body);\n }\n}<\/code><\/pre>\n\u4ee3\u7801\u5c31\u8fd9\u4e48\u591a\u4e86\uff0c\u63a5\u4e0b\u6765\u6211\u4eec\u770b\u4e0b\u5982\u4f55\u4f7f\u7528\uff1f<\/p>\n
XxxController.java<\/p>\n
public ResponseEntity<?> addLikeUrl(){\n LoginUser loginUser = UserContext.getUser();\n if (loginUser == null) {\n return ResponseEntity.ok(new ResultInfo<>(ResultStatus.USER_NOT_FOUND));\n }\n }<\/code><\/pre>\n\u8fd9\u91cc\u7684UserContext.getUser<\/code>\u65b9\u6cd5\u5c31\u53ef\u4ee5\u83b7\u53d6\u5230\u5168\u5c40\u7684\u767b\u5f55\u7684\u7528\u6237\u4e86\u3002<\/p>\n3\u3001\u5982\u679c\u4f60\u4e4b\u524d\u53c2\u8003\u4e86\u6211\u4e0a\u9762\u7684\u4e24\u7bc7\u6587\u7ae0\u6784\u5efa\u4e86\u8ba4\u8bc1\u548c\u8d44\u6e90\u670d\u52a1\uff0c\u90a3\u4e48\u4f60\u73b0\u5728\u53ef\u4ee5\u628a\u4e4b\u524d\u7684\u4ee3\u7801\u53bb\u6389\u4e86\uff0c\u5426\u5219\u7565\u8fc7\u8be5\u8fc7\u7a0b\u3002<\/p>\n
3.1\u3001\u53bb\u6389@EnableResourceServer<\/p>\n
@SpringBootApplication\n\/\/ \u8d44\u6e90\u4fdd\u62a4\u670d\u52a1\n@EnableResourceServer\n\/\/ \u670d\u52a1\u53d1\u73b0\n@EnableDiscoveryClient\n\/\/ \u542f\u7528feign\n@EnableFeignClients\n@RefreshScope\npublic class AccountServiceApplication {\n @Bean\n public BCryptPasswordEncoder passwordEncoder() {\n return new BCryptPasswordEncoder();\n }\n public static void main(String[] args) {\n SpringApplication.run(AccountServiceApplication.class,args);\n }\n}<\/code><\/pre>\n3.2\u3001\u53bb\u6389spring-cloud-security\u548cspring-cloud-starter-oauth2<\/p>\n
<dependency>\n <groupId>org.springframework.cloud<\/groupId>\n <artifactId>spring-cloud-security<\/artifactId>\n <version>2.2.5.RELEASE<\/version>\n<\/dependency>\n<dependency>\n <groupId>org.springframework.cloud<\/groupId>\n <artifactId>spring-cloud-starter-oauth2<\/artifactId>\n <version>2.2.5.RELEASE<\/version>\n<\/dependency><\/code><\/pre>\n3\u3001\u5220\u9664security\u5305
![\"image.png\"](\"https:\/\/segmentfault.com\/img\/bVc487X\" "\\"image.png\\"")
<\/p>\n
\u603b\u7ed3<\/h2>\n
1\u3001\u300aSpring\u5fae\u670d\u52a1\u5b9e\u6218\u300b\u662f\u672c\u597d\u4e66\uff0c\u4e0d\u8fc7\u5c31\u50cfhibernate\u4e00\u6837\uff0c\u5728\u56fd\u5916\u5f88\u706b\u5230\u4e86\u56fd\u5185\u5c31\u6709\u4e86\u81ea\u5df1\u7684\u7406\u89e3\u4e86\u3002
2\u3001\u300aSpring\u5fae\u670d\u52a1\u5b9e\u6218\u300b\u53d1\u5e03\u4e86\u7b2c\u4e8c\u7248\uff0c\u6709\u5174\u8da3\u7684\u53ef\u4ee5\u770b\u770b\u3002<\/p>\n
https:\/\/segmentfault.com\/a\/1190000043133367<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"\u524d\u8a00 \u4e4b\u524d\u901a\u8fc7\u9605\u8bfb\u300aSpring\u5fae\u670d\u52a1\u5b9e\u6218\u300b\u5199\u8fc7\u5173\u4e8espring-cloud+spring-security+ […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-10007001","post","type-post","status-publish","format-standard","hentry","category-share"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/itmax.cn\/index.php?rest_route=\/wp\/v2\/posts\/10007001","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/itmax.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/itmax.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/itmax.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/itmax.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=10007001"}],"version-history":[{"count":0,"href":"https:\/\/itmax.cn\/index.php?rest_route=\/wp\/v2\/posts\/10007001\/revisions"}],"wp:attachment":[{"href":"https:\/\/itmax.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=10007001"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/itmax.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=10007001"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/itmax.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=10007001"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}