BJ_ZTEITS-Developers / parking-cloud-yudao

Commit 16b8f3ba9484cb936664c84bfbc6caae42d525f8

Authored by YunaiV
1 parent 1d00261c

【移除】移除 yudao-example 项目，统一到 https://gitee.com/yudaocode/yudao-demo

Inline Side-by-side
Showing 44 changed files with 0 additions and 2537 deletions
@@ -23,8 +23,6 @@ @@ -23,8 +23,6 @@
23 <!-- <module>yudao-module-mall</module>--> 23 <!-- <module>yudao-module-mall</module>-->
24 <!-- <module>yudao-module-crm</module>--> 24 <!-- <module>yudao-module-crm</module>-->
25 <!-- <module>yudao-module-erp</module>--> 25 <!-- <module>yudao-module-erp</module>-->
26 - <!-- 示例项目 -->  
27 -<!-- <module>yudao-example</module>-->  
28 </modules> 26 </modules>
29 27
30 <name>${project.artifactId}</name> 28 <name>${project.artifactId}</name>
yudao-example/pom.xml deleted
View file @1d00261
1 -<?xml version="1.0" encoding="UTF-8"?>  
2 -<project xmlns="http://maven.apache.org/POM/4.0.0"  
3 - xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"  
4 - xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">  
5 - <modelVersion>4.0.0</modelVersion>  
6 -  
7 - <!-- 由于方便大家拷贝，使用不使用 yudao 作为 Maven parent -->  
8 -  
9 - <groupId>cn.iocoder.boot</groupId>  
10 - <artifactId>yudao-example</artifactId>  
11 - <version>1.0.0-snapshot</version>  
12 - <packaging>pom</packaging>  
13 - <modules>  
14 - <module>yudao-sso-demo-by-code</module>  
15 - <module>yudao-sso-demo-by-password</module>  
16 - </modules>  
17 -  
18 - <name>${project.artifactId}</name>  
19 - <description>提供各种示例，例如说：SSO 单点登录</description>  
20 - <url>https://github.com/YunaiV/ruoyi-vue-pro</url>  
21 -  
22 -</project>  
yudao-example/yudao-sso-demo-by-code/pom.xml deleted
View file @1d00261
1 -<?xml version="1.0" encoding="UTF-8"?>  
2 -<project xmlns="http://maven.apache.org/POM/4.0.0"  
3 - xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"  
4 - xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">  
5 - <modelVersion>4.0.0</modelVersion>  
6 -  
7 - <!-- 由于方便大家拷贝，使用不使用 yudao 作为 Maven parent -->  
8 -  
9 - <groupId>cn.iocoder.boot</groupId>  
10 - <artifactId>yudao-sso-demo-by-code</artifactId>  
11 - <version>1.0.0-snapshot</version>  
12 - <packaging>jar</packaging>  
13 -  
14 - <name>${project.artifactId}</name>  
15 - <description>基于授权码模式，如何实现 SSO 单点登录？</description>  
16 - <url>https://github.com/YunaiV/ruoyi-vue-pro</url>  
17 -  
18 - <properties>  
19 - <!-- Maven 相关 -->  
20 - <maven.compiler.source>21</maven.compiler.source>  
21 - <maven.compiler.target>21</maven.compiler.target>  
22 - <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>  
23 - <!-- 统一依赖管理 -->  
24 - <spring.boot.version>3.2.0</spring.boot.version>  
25 - </properties>  
26 -  
27 - <dependencyManagement>  
28 - <dependencies>  
29 - <!-- 统一依赖管理 -->  
30 - <dependency>  
31 - <groupId>org.springframework.boot</groupId>  
32 - <artifactId>spring-boot-dependencies</artifactId>  
33 - <version>${spring.boot.version}</version>  
34 - <type>pom</type>  
35 - <scope>import</scope>  
36 - </dependency>  
37 - </dependencies>  
38 - </dependencyManagement>  
39 -  
40 - <dependencies>  
41 - <!-- Web 相关 -->  
42 - <dependency>  
43 - <groupId>org.springframework.boot</groupId>  
44 - <artifactId>spring-boot-starter-web</artifactId>  
45 - </dependency>  
46 -  
47 - <dependency>  
48 - <groupId>org.springframework.boot</groupId>  
49 - <artifactId>spring-boot-starter-security</artifactId>  
50 - </dependency>  
51 -  
52 - <dependency>  
53 - <groupId>cn.hutool</groupId>  
54 - <artifactId>hutool-all</artifactId>  
55 - <version>5.8.22</version>  
56 - </dependency>  
57 -  
58 - <dependency>  
59 - <groupId>org.projectlombok</groupId>  
60 - <artifactId>lombok</artifactId>  
61 - <optional>true</optional>  
62 - </dependency>  
63 - </dependencies>  
64 -  
65 -</project>  
yudao-example/yudao-sso-demo-by-code/src/main/java/cn/iocoder/yudao/ssodemo/SSODemoApplication.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo;  
2 -  
3 -import org.springframework.boot.SpringApplication;  
4 -import org.springframework.boot.autoconfigure.SpringBootApplication;  
5 -  
6 -@SpringBootApplication  
7 -public class SSODemoApplication {  
8 -  
9 - public static void main(String[] args) {  
10 - SpringApplication.run(SSODemoApplication.class, args);  
11 - }  
12 -  
13 -}  
yudao-example/yudao-sso-demo-by-code/src/main/java/cn/iocoder/yudao/ssodemo/client/OAuth2Client.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.client;  
2 -  
3 -import cn.iocoder.yudao.ssodemo.client.dto.CommonResult;  
4 -import cn.iocoder.yudao.ssodemo.client.dto.oauth2.OAuth2AccessTokenRespDTO;  
5 -import cn.iocoder.yudao.ssodemo.client.dto.oauth2.OAuth2CheckTokenRespDTO;  
6 -import org.springframework.core.ParameterizedTypeReference;  
7 -import org.springframework.http.*;  
8 -import org.springframework.stereotype.Component;  
9 -import org.springframework.util.Assert;  
10 -import org.springframework.util.Base64Utils;  
11 -import org.springframework.util.LinkedMultiValueMap;  
12 -import org.springframework.util.MultiValueMap;  
13 -import org.springframework.web.client.RestTemplate;  
14 -  
15 -import java.nio.charset.StandardCharsets;  
16 -  
17 -/**  
18 - * OAuth 2.0 客户端  
19 - *  
20 - * 对应调用 OAuth2OpenController 接口  
21 - */  
22 -@Component  
23 -public class OAuth2Client {  
24 -  
25 - private static final String BASE_URL = "http://127.0.0.1:48080/admin-api/system/oauth2";  
26 -  
27 - /**  
28 - * 租户编号  
29 - *  
30 - * 默认使用 1；如果使用别的租户，可以调整  
31 - */  
32 - public static final Long TENANT_ID = 1L;  
33 -  
34 - private static final String CLIENT_ID = "yudao-sso-demo-by-code";  
35 - private static final String CLIENT_SECRET = "test";  
36 -  
37 -  
38 -// @Resource // 可优化，注册一个 RestTemplate Bean，然后注入  
39 - private final RestTemplate restTemplate = new RestTemplate();  
40 -  
41 - /**  
42 - * 使用 code 授权码，获得访问令牌  
43 - *  
44 - * @param code 授权码  
45 - * @param redirectUri 重定向 URI  
46 - * @return 访问令牌  
47 - */  
48 - public CommonResult<OAuth2AccessTokenRespDTO> postAccessToken(String code, String redirectUri) {  
49 - // 1.1 构建请求头  
50 - HttpHeaders headers = new HttpHeaders();  
51 - headers.setContentType(MediaType.APPLICATION_FORM_URLENCODED);  
52 - headers.set("tenant-id", TENANT_ID.toString());  
53 - addClientHeader(headers);  
54 - // 1.2 构建请求参数  
55 - MultiValueMap<String, Object> body = new LinkedMultiValueMap<>();  
56 - body.add("grant_type", "authorization_code");  
57 - body.add("code", code);  
58 - body.add("redirect_uri", redirectUri);  
59 -// body.add("state", ""); // 选填；填了会校验  
60 -  
61 - // 2. 执行请求  
62 - ResponseEntity<CommonResult<OAuth2AccessTokenRespDTO>> exchange = restTemplate.exchange(  
63 - BASE_URL + "/token",  
64 - HttpMethod.POST,  
65 - new HttpEntity<>(body, headers),  
66 - new ParameterizedTypeReference<CommonResult<OAuth2AccessTokenRespDTO>>() {}); // 解决 CommonResult 的泛型丢失  
67 - Assert.isTrue(exchange.getStatusCode().is2xxSuccessful(), "响应必须是 200 成功");  
68 - return exchange.getBody();  
69 - }  
70 -  
71 - /**  
72 - * 校验访问令牌，并返回它的基本信息  
73 - *  
74 - * @param token 访问令牌  
75 - * @return 访问令牌的基本信息  
76 - */  
77 - public CommonResult<OAuth2CheckTokenRespDTO> checkToken(String token) {  
78 - // 1.1 构建请求头  
79 - HttpHeaders headers = new HttpHeaders();  
80 - headers.setContentType(MediaType.APPLICATION_FORM_URLENCODED);  
81 - headers.set("tenant-id", TENANT_ID.toString());  
82 - addClientHeader(headers);  
83 - // 1.2 构建请求参数  
84 - MultiValueMap<String, Object> body = new LinkedMultiValueMap<>();  
85 - body.add("token", token);  
86 -  
87 - // 2. 执行请求  
88 - ResponseEntity<CommonResult<OAuth2CheckTokenRespDTO>> exchange = restTemplate.exchange(  
89 - BASE_URL + "/check-token",  
90 - HttpMethod.POST,  
91 - new HttpEntity<>(body, headers),  
92 - new ParameterizedTypeReference<CommonResult<OAuth2CheckTokenRespDTO>>() {}); // 解决 CommonResult 的泛型丢失  
93 - Assert.isTrue(exchange.getStatusCode().is2xxSuccessful(), "响应必须是 200 成功");  
94 - return exchange.getBody();  
95 - }  
96 -  
97 - /**  
98 - * 使用刷新令牌，获得（刷新）访问令牌  
99 - *  
100 - * @param refreshToken 刷新令牌  
101 - * @return 访问令牌  
102 - */  
103 - public CommonResult<OAuth2AccessTokenRespDTO> refreshToken(String refreshToken) {  
104 - // 1.1 构建请求头  
105 - HttpHeaders headers = new HttpHeaders();  
106 - headers.setContentType(MediaType.APPLICATION_FORM_URLENCODED);  
107 - headers.set("tenant-id", TENANT_ID.toString());  
108 - addClientHeader(headers);  
109 - // 1.2 构建请求参数  
110 - MultiValueMap<String, Object> body = new LinkedMultiValueMap<>();  
111 - body.add("grant_type", "refresh_token");  
112 - body.add("refresh_token", refreshToken);  
113 -  
114 - // 2. 执行请求  
115 - ResponseEntity<CommonResult<OAuth2AccessTokenRespDTO>> exchange = restTemplate.exchange(  
116 - BASE_URL + "/token",  
117 - HttpMethod.POST,  
118 - new HttpEntity<>(body, headers),  
119 - new ParameterizedTypeReference<CommonResult<OAuth2AccessTokenRespDTO>>() {}); // 解决 CommonResult 的泛型丢失  
120 - Assert.isTrue(exchange.getStatusCode().is2xxSuccessful(), "响应必须是 200 成功");  
121 - return exchange.getBody();  
122 - }  
123 -  
124 - /**  
125 - * 删除访问令牌  
126 - *  
127 - * @param token 访问令牌  
128 - * @return 成功  
129 - */  
130 - public CommonResult<Boolean> revokeToken(String token) {  
131 - // 1.1 构建请求头  
132 - HttpHeaders headers = new HttpHeaders();  
133 - headers.setContentType(MediaType.APPLICATION_FORM_URLENCODED);  
134 - headers.set("tenant-id", TENANT_ID.toString());  
135 - addClientHeader(headers);  
136 - // 1.2 构建请求参数  
137 - MultiValueMap<String, Object> body = new LinkedMultiValueMap<>();  
138 - body.add("token", token);  
139 -  
140 - // 2. 执行请求  
141 - ResponseEntity<CommonResult<Boolean>> exchange = restTemplate.exchange(  
142 - BASE_URL + "/token",  
143 - HttpMethod.DELETE,  
144 - new HttpEntity<>(body, headers),  
145 - new ParameterizedTypeReference<CommonResult<Boolean>>() {}); // 解决 CommonResult 的泛型丢失  
146 - Assert.isTrue(exchange.getStatusCode().is2xxSuccessful(), "响应必须是 200 成功");  
147 - return exchange.getBody();  
148 - }  
149 -  
150 - private static void addClientHeader(HttpHeaders headers) {  
151 - // client 拼接，需要 BASE64 编码  
152 - String client = CLIENT_ID + ":" + CLIENT_SECRET;  
153 - client = Base64Utils.encodeToString(client.getBytes(StandardCharsets.UTF_8));  
154 - headers.add("Authorization", "Basic " + client);  
155 - }  
156 -  
157 -}  
yudao-example/yudao-sso-demo-by-code/src/main/java/cn/iocoder/yudao/ssodemo/client/UserClient.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.client;  
2 -  
3 -import cn.iocoder.yudao.ssodemo.client.dto.CommonResult;  
4 -import cn.iocoder.yudao.ssodemo.client.dto.user.UserInfoRespDTO;  
5 -import cn.iocoder.yudao.ssodemo.client.dto.user.UserUpdateReqDTO;  
6 -import cn.iocoder.yudao.ssodemo.framework.core.LoginUser;  
7 -import cn.iocoder.yudao.ssodemo.framework.core.util.SecurityUtils;  
8 -import org.springframework.core.ParameterizedTypeReference;  
9 -import org.springframework.http.*;  
10 -import org.springframework.stereotype.Component;  
11 -import org.springframework.util.Assert;  
12 -import org.springframework.util.LinkedMultiValueMap;  
13 -import org.springframework.util.MultiValueMap;  
14 -import org.springframework.web.client.RestTemplate;  
15 -  
16 -/**  
17 - * 用户 User 信息的客户端  
18 - *  
19 - * 对应调用 OAuth2UserController 接口  
20 - */  
21 -@Component  
22 -public class UserClient {  
23 -  
24 - private static final String BASE_URL = "http://127.0.0.1:48080/admin-api//system/oauth2/user";  
25 -  
26 - // @Resource // 可优化，注册一个 RestTemplate Bean，然后注入  
27 - private final RestTemplate restTemplate = new RestTemplate();  
28 -  
29 - public CommonResult<UserInfoRespDTO> getUser() {  
30 - // 1.1 构建请求头  
31 - HttpHeaders headers = new HttpHeaders();  
32 - headers.setContentType(MediaType.APPLICATION_FORM_URLENCODED);  
33 - headers.set("tenant-id", OAuth2Client.TENANT_ID.toString());  
34 - addTokenHeader(headers);  
35 - // 1.2 构建请求参数  
36 - MultiValueMap<String, Object> body = new LinkedMultiValueMap<>();  
37 -  
38 - // 2. 执行请求  
39 - ResponseEntity<CommonResult<UserInfoRespDTO>> exchange = restTemplate.exchange(  
40 - BASE_URL + "/get",  
41 - HttpMethod.GET,  
42 - new HttpEntity<>(body, headers),  
43 - new ParameterizedTypeReference<CommonResult<UserInfoRespDTO>>() {}); // 解决 CommonResult 的泛型丢失  
44 - Assert.isTrue(exchange.getStatusCode().is2xxSuccessful(), "响应必须是 200 成功");  
45 - return exchange.getBody();  
46 - }  
47 -  
48 - public CommonResult<Boolean> updateUser(UserUpdateReqDTO updateReqDTO) {  
49 - // 1.1 构建请求头  
50 - HttpHeaders headers = new HttpHeaders();  
51 - headers.setContentType(MediaType.APPLICATION_JSON);  
52 - headers.set("tenant-id", OAuth2Client.TENANT_ID.toString());  
53 - addTokenHeader(headers);  
54 - // 1.2 构建请求参数  
55 - // 使用 updateReqDTO 即可  
56 -  
57 - // 2. 执行请求  
58 - ResponseEntity<CommonResult<Boolean>> exchange = restTemplate.exchange(  
59 - BASE_URL + "/update",  
60 - HttpMethod.PUT,  
61 - new HttpEntity<>(updateReqDTO, headers),  
62 - new ParameterizedTypeReference<CommonResult<Boolean>>() {}); // 解决 CommonResult 的泛型丢失  
63 - Assert.isTrue(exchange.getStatusCode().is2xxSuccessful(), "响应必须是 200 成功");  
64 - return exchange.getBody();  
65 - }  
66 -  
67 -  
68 - private static void addTokenHeader(HttpHeaders headers) {  
69 - LoginUser loginUser = SecurityUtils.getLoginUser();  
70 - Assert.notNull(loginUser, "登录用户不能为空");  
71 - headers.add("Authorization", "Bearer " + loginUser.getAccessToken());  
72 - }  
73 -}  
yudao-example/yudao-sso-demo-by-code/src/main/java/cn/iocoder/yudao/ssodemo/client/dto/CommonResult.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.client.dto;  
2 -  
3 -import lombok.Data;  
4 -  
5 -import java.io.Serializable;  
6 -  
7 -/**  
8 - * 通用返回  
9 - *  
10 - * @param <T> 数据泛型  
11 - */  
12 -@Data  
13 -public class CommonResult<T> implements Serializable {  
14 -  
15 - /**  
16 - * 错误码  
17 - */  
18 - private Integer code;  
19 - /**  
20 - * 返回数据  
21 - */  
22 - private T data;  
23 - /**  
24 - * 错误提示，用户可阅读  
25 - */  
26 - private String msg;  
27 -  
28 -}  
yudao-example/yudao-sso-demo-by-code/src/main/java/cn/iocoder/yudao/ssodemo/client/dto/oauth2/OAuth2AccessTokenRespDTO.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.client.dto.oauth2;  
2 -  
3 -import com.fasterxml.jackson.annotation.JsonProperty;  
4 -import lombok.AllArgsConstructor;  
5 -import lombok.Data;  
6 -import lombok.NoArgsConstructor;  
7 -  
8 -/**  
9 - * 访问令牌 Response DTO  
10 - */  
11 -@Data  
12 -@NoArgsConstructor  
13 -@AllArgsConstructor  
14 -public class OAuth2AccessTokenRespDTO {  
15 -  
16 - /**  
17 - * 访问令牌  
18 - */  
19 - @JsonProperty("access_token")  
20 - private String accessToken;  
21 -  
22 - /**  
23 - * 刷新令牌  
24 - */  
25 - @JsonProperty("refresh_token")  
26 - private String refreshToken;  
27 -  
28 - /**  
29 - * 令牌类型  
30 - */  
31 - @JsonProperty("token_type")  
32 - private String tokenType;  
33 -  
34 - /**  
35 - * 过期时间；单位：秒  
36 - */  
37 - @JsonProperty("expires_in")  
38 - private Long expiresIn;  
39 -  
40 - /**  
41 - * 授权范围；如果多个授权范围，使用空格分隔  
42 - */  
43 - private String scope;  
44 -  
45 -}  
yudao-example/yudao-sso-demo-by-code/src/main/java/cn/iocoder/yudao/ssodemo/client/dto/oauth2/OAuth2CheckTokenRespDTO.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.client.dto.oauth2;  
2 -  
3 -import com.fasterxml.jackson.annotation.JsonProperty;  
4 -import lombok.AllArgsConstructor;  
5 -import lombok.Data;  
6 -import lombok.NoArgsConstructor;  
7 -  
8 -import java.util.List;  
9 -  
10 -/**  
11 - * 校验令牌 Response DTO  
12 - *  
13 - * @author 芋道源码  
14 - */  
15 -@Data  
16 -@NoArgsConstructor  
17 -@AllArgsConstructor  
18 -public class OAuth2CheckTokenRespDTO {  
19 -  
20 - /**  
21 - * 用户编号  
22 - */  
23 - @JsonProperty("user_id")  
24 - private Long userId;  
25 - /**  
26 - * 用户类型  
27 - */  
28 - @JsonProperty("user_type")  
29 - private Integer userType;  
30 - /**  
31 - * 租户编号  
32 - */  
33 - @JsonProperty("tenant_id")  
34 - private Long tenantId;  
35 -  
36 - /**  
37 - * 客户端编号  
38 - */  
39 - @JsonProperty("client_id")  
40 - private String clientId;  
41 - /**  
42 - * 授权范围  
43 - */  
44 - private List<String> scopes;  
45 -  
46 - /**  
47 - * 访问令牌  
48 - */  
49 - @JsonProperty("access_token")  
50 - private String accessToken;  
51 -  
52 - /**  
53 - * 过期时间  
54 - *  
55 - * 时间戳 / 1000，即单位：秒  
56 - */  
57 - private Long exp;  
58 -  
59 -}  
yudao-example/yudao-sso-demo-by-code/src/main/java/cn/iocoder/yudao/ssodemo/client/dto/user/UserInfoRespDTO.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.client.dto.user;  
2 -  
3 -import lombok.AllArgsConstructor;  
4 -import lombok.Data;  
5 -import lombok.NoArgsConstructor;  
6 -  
7 -import java.util.List;  
8 -  
9 -/**  
10 - * 获得用户基本信息 Response dto  
11 - */  
12 -@Data  
13 -@NoArgsConstructor  
14 -@AllArgsConstructor  
15 -public class UserInfoRespDTO {  
16 -  
17 - /**  
18 - * 用户编号  
19 - */  
20 - private Long id;  
21 -  
22 - /**  
23 - * 用户账号  
24 - */  
25 - private String username;  
26 -  
27 - /**  
28 - * 用户昵称  
29 - */  
30 - private String nickname;  
31 -  
32 - /**  
33 - * 用户邮箱  
34 - */  
35 - private String email;  
36 - /**  
37 - * 手机号码  
38 - */  
39 - private String mobile;  
40 -  
41 - /**  
42 - * 用户性别  
43 - */  
44 - private Integer sex;  
45 -  
46 - /**  
47 - * 用户头像  
48 - */  
49 - private String avatar;  
50 -  
51 - /**  
52 - * 所在部门  
53 - */  
54 - private Dept dept;  
55 -  
56 - /**  
57 - * 所属岗位数组  
58 - */  
59 - private List<Post> posts;  
60 -  
61 - /**  
62 - * 部门  
63 - */  
64 - @Data  
65 - public static class Dept {  
66 -  
67 - /**  
68 - * 部门编号  
69 - */  
70 - private Long id;  
71 -  
72 - /**  
73 - * 部门名称  
74 - */  
75 - private String name;  
76 -  
77 - }  
78 -  
79 - /**  
80 - * 岗位  
81 - */  
82 - @Data  
83 - public static class Post {  
84 -  
85 - /**  
86 - * 岗位编号  
87 - */  
88 - private Long id;  
89 -  
90 - /**  
91 - * 岗位名称  
92 - */  
93 - private String name;  
94 -  
95 - }  
96 -  
97 -}  
yudao-example/yudao-sso-demo-by-code/src/main/java/cn/iocoder/yudao/ssodemo/client/dto/user/UserUpdateReqDTO.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.client.dto.user;  
2 -  
3 -import lombok.AllArgsConstructor;  
4 -import lombok.Data;  
5 -import lombok.NoArgsConstructor;  
6 -  
7 -/**  
8 - * 更新用户基本信息 Request DTO  
9 - */  
10 -@Data  
11 -@NoArgsConstructor  
12 -@AllArgsConstructor  
13 -public class UserUpdateReqDTO {  
14 -  
15 - /**  
16 - * 用户昵称  
17 - */  
18 - private String nickname;  
19 -  
20 - /**  
21 - * 用户邮箱  
22 - */  
23 - private String email;  
24 -  
25 - /**  
26 - * 手机号码  
27 - */  
28 - private String mobile;  
29 -  
30 - /**  
31 - * 用户性别  
32 - */  
33 - private Integer sex;  
34 -  
35 -}  
yudao-example/yudao-sso-demo-by-code/src/main/java/cn/iocoder/yudao/ssodemo/controller/AuthController.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.controller;  
2 -  
3 -import cn.hutool.core.util.StrUtil;  
4 -import cn.iocoder.yudao.ssodemo.client.OAuth2Client;  
5 -import cn.iocoder.yudao.ssodemo.client.dto.CommonResult;  
6 -import cn.iocoder.yudao.ssodemo.client.dto.oauth2.OAuth2AccessTokenRespDTO;  
7 -import cn.iocoder.yudao.ssodemo.framework.core.util.SecurityUtils;  
8 -import org.springframework.web.bind.annotation.PostMapping;  
9 -import org.springframework.web.bind.annotation.RequestMapping;  
10 -import org.springframework.web.bind.annotation.RequestParam;  
11 -import org.springframework.web.bind.annotation.RestController;  
12 -  
13 -import jakarta.annotation.Resource;  
14 -import jakarta.servlet.http.HttpServletRequest;  
15 -  
16 -@RestController  
17 -@RequestMapping("/auth")  
18 -public class AuthController {  
19 -  
20 - @Resource  
21 - private OAuth2Client oauth2Client;  
22 -  
23 - /**  
24 - * 使用 code 访问令牌，获得访问令牌  
25 - *  
26 - * @param code 授权码  
27 - * @param redirectUri 重定向 URI  
28 - * @return 访问令牌；注意，实际项目中，最好创建对应的 ResponseVO 类，只返回必要的字段  
29 - */  
30 - @PostMapping("/login-by-code")  
31 - public CommonResult<OAuth2AccessTokenRespDTO> loginByCode(@RequestParam("code") String code,  
32 - @RequestParam("redirectUri") String redirectUri) {  
33 - return oauth2Client.postAccessToken(code, redirectUri);  
34 - }  
35 -  
36 - /**  
37 - * 使用刷新令牌，获得（刷新）访问令牌  
38 - *  
39 - * @param refreshToken 刷新令牌  
40 - * @return 访问令牌；注意，实际项目中，最好创建对应的 ResponseVO 类，只返回必要的字段  
41 - */  
42 - @PostMapping("/refresh-token")  
43 - public CommonResult<OAuth2AccessTokenRespDTO> refreshToken(@RequestParam("refreshToken") String refreshToken) {  
44 - return oauth2Client.refreshToken(refreshToken);  
45 - }  
46 -  
47 - /**  
48 - * 退出登录  
49 - *  
50 - * @param request 请求  
51 - * @return 成功  
52 - */  
53 - @PostMapping("/logout")  
54 - public CommonResult<Boolean> logout(HttpServletRequest request) {  
55 - String token = SecurityUtils.obtainAuthorization(request, "Authorization");  
56 - if (StrUtil.isNotBlank(token)) {  
57 - return oauth2Client.revokeToken(token);  
58 - }  
59 - // 返回成功  
60 - return new CommonResult<>();  
61 - }  
62 -  
63 -}  
yudao-example/yudao-sso-demo-by-code/src/main/java/cn/iocoder/yudao/ssodemo/controller/UserController.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.controller;  
2 -  
3 -import cn.iocoder.yudao.ssodemo.client.UserClient;  
4 -import cn.iocoder.yudao.ssodemo.client.dto.CommonResult;  
5 -import cn.iocoder.yudao.ssodemo.client.dto.user.UserInfoRespDTO;  
6 -import cn.iocoder.yudao.ssodemo.client.dto.user.UserUpdateReqDTO;  
7 -import org.springframework.web.bind.annotation.*;  
8 -  
9 -import jakarta.annotation.Resource;  
10 -  
11 -@RestController  
12 -@RequestMapping("/user")  
13 -public class UserController {  
14 -  
15 - @Resource  
16 - private UserClient userClient;  
17 -  
18 - /**  
19 - * 获得当前登录用户的基本信息  
20 - *  
21 - * @return 用户信息；注意，实际项目中，最好创建对应的 ResponseVO 类，只返回必要的字段  
22 - */  
23 - @GetMapping("/get")  
24 - public CommonResult<UserInfoRespDTO> getUser() {  
25 - return userClient.getUser();  
26 - }  
27 -  
28 - /**  
29 - * 更新当前登录用户的昵称  
30 - *  
31 - * @param nickname 昵称  
32 - * @return 成功  
33 - */  
34 - @PutMapping("/update")  
35 - public CommonResult<Boolean> updateUser(@RequestParam("nickname") String nickname) {  
36 - UserUpdateReqDTO updateReqDTO = new UserUpdateReqDTO(nickname, null, null, null);  
37 - return userClient.updateUser(updateReqDTO);  
38 - }  
39 -  
40 -}  
yudao-example/yudao-sso-demo-by-code/src/main/java/cn/iocoder/yudao/ssodemo/framework/config/SecurityConfiguration.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.framework.config;  
2 -  
3 -import cn.iocoder.yudao.ssodemo.framework.core.filter.TokenAuthenticationFilter;  
4 -import cn.iocoder.yudao.ssodemo.framework.core.handler.AccessDeniedHandlerImpl;  
5 -import org.springframework.context.annotation.Bean;  
6 -import org.springframework.context.annotation.Configuration;  
7 -import org.springframework.http.HttpMethod;  
8 -import org.springframework.security.config.Customizer;  
9 -import org.springframework.security.config.annotation.web.builders.HttpSecurity;  
10 -import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;  
11 -import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;  
12 -import org.springframework.security.web.AuthenticationEntryPoint;  
13 -import org.springframework.security.web.SecurityFilterChain;  
14 -import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;  
15 -  
16 -import jakarta.annotation.Resource;  
17 -  
18 -@Configuration(proxyBeanMethods = false)  
19 -@EnableWebSecurity  
20 -public class SecurityConfiguration{  
21 -  
22 - @Resource  
23 - private TokenAuthenticationFilter tokenAuthenticationFilter;  
24 -  
25 - @Resource  
26 - private AccessDeniedHandlerImpl accessDeniedHandler;  
27 - @Resource  
28 - private AuthenticationEntryPoint authenticationEntryPoint;  
29 -  
30 - @Bean  
31 - protected SecurityFilterChain filterChain(HttpSecurity httpSecurity) throws Exception {  
32 - // 设置 URL 安全权限  
33 - httpSecurity  
34 - // 开启跨域  
35 - .cors(Customizer.withDefaults())  
36 - // CSRF 禁用，因为不使用 Session  
37 - .csrf(AbstractHttpConfigurer::disable)  
38 - // 一堆自定义的 Spring Security 处理器  
39 - .exceptionHandling(c -> c.authenticationEntryPoint(authenticationEntryPoint)  
40 - .accessDeniedHandler(accessDeniedHandler));  
41 -  
42 - // 设置每个请求的权限  
43 - httpSecurity.authorizeHttpRequests(c -> c  
44 - // 1. 静态资源，可匿名访问  
45 - .requestMatchers(HttpMethod.GET, "/*.html", "/*.html", "/*.css", "/*.js").permitAll()  
46 - // 2. 登录相关的接口，可匿名访问  
47 - .requestMatchers("/auth/login-by-code").permitAll()  
48 - .requestMatchers("/auth/refresh-token").permitAll()  
49 - .requestMatchers("/auth/logout").permitAll())  
50 - // 3. 兜底规则，必须认证  
51 - .authorizeHttpRequests(c -> c.anyRequest().authenticated());  
52 -  
53 - // 添加 Token Filter  
54 - httpSecurity.addFilterBefore(tokenAuthenticationFilter, UsernamePasswordAuthenticationFilter.class);  
55 - return httpSecurity.build();  
56 - }  
57 -  
58 -}  
yudao-example/yudao-sso-demo-by-code/src/main/java/cn/iocoder/yudao/ssodemo/framework/core/LoginUser.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.framework.core;  
2 -  
3 -import lombok.Data;  
4 -  
5 -import java.util.List;  
6 -  
7 -/**  
8 - * 登录用户信息  
9 - *  
10 - * @author 芋道源码  
11 - */  
12 -@Data  
13 -public class LoginUser {  
14 -  
15 - /**  
16 - * 用户编号  
17 - */  
18 - private Long id;  
19 - /**  
20 - * 用户类型  
21 - */  
22 - private Integer userType;  
23 - /**  
24 - * 租户编号  
25 - */  
26 - private Long tenantId;  
27 - /**  
28 - * 授权范围  
29 - */  
30 - private List<String> scopes;  
31 -  
32 - /**  
33 - * 访问令牌  
34 - */  
35 - private String accessToken;  
36 -  
37 -}  
yudao-example/yudao-sso-demo-by-code/src/main/java/cn/iocoder/yudao/ssodemo/framework/core/filter/TokenAuthenticationFilter.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.framework.core.filter;  
2 -  
3 -import cn.iocoder.yudao.ssodemo.client.OAuth2Client;  
4 -import cn.iocoder.yudao.ssodemo.client.dto.CommonResult;  
5 -import cn.iocoder.yudao.ssodemo.client.dto.oauth2.OAuth2CheckTokenRespDTO;  
6 -import cn.iocoder.yudao.ssodemo.framework.core.LoginUser;  
7 -import cn.iocoder.yudao.ssodemo.framework.core.util.SecurityUtils;  
8 -import org.springframework.stereotype.Component;  
9 -import org.springframework.util.StringUtils;  
10 -import org.springframework.web.filter.OncePerRequestFilter;  
11 -  
12 -import jakarta.annotation.Resource;  
13 -import jakarta.servlet.FilterChain;  
14 -import jakarta.servlet.ServletException;  
15 -import jakarta.servlet.http.HttpServletRequest;  
16 -import jakarta.servlet.http.HttpServletResponse;  
17 -import java.io.IOException;  
18 -  
19 -/**  
20 - * Token 过滤器，验证 token 的有效性  
21 - * 验证通过后，获得 {@link LoginUser} 信息，并加入到 Spring Security 上下文  
22 - *  
23 - * @author 芋道源码  
24 - */  
25 -@Component  
26 -public class TokenAuthenticationFilter extends OncePerRequestFilter {  
27 -  
28 - @Resource  
29 - private OAuth2Client oauth2Client;  
30 -  
31 - @Override  
32 - protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response,  
33 - FilterChain filterChain) throws ServletException, IOException {  
34 - // 1. 获得访问令牌  
35 - String token = SecurityUtils.obtainAuthorization(request, "Authorization");  
36 - if (StringUtils.hasText(token)) {  
37 - // 2. 基于 token 构建登录用户  
38 - LoginUser loginUser = buildLoginUserByToken(token);  
39 - // 3. 设置当前用户  
40 - if (loginUser != null) {  
41 - SecurityUtils.setLoginUser(loginUser, request);  
42 - }  
43 - }  
44 -  
45 - // 继续过滤链  
46 - filterChain.doFilter(request, response);  
47 - }  
48 -  
49 - private LoginUser buildLoginUserByToken(String token) {  
50 - try {  
51 - CommonResult<OAuth2CheckTokenRespDTO> accessTokenResult = oauth2Client.checkToken(token);  
52 - OAuth2CheckTokenRespDTO accessToken = accessTokenResult.getData();  
53 - if (accessToken == null) {  
54 - return null;  
55 - }  
56 - // 构建登录用户  
57 - return new LoginUser().setId(accessToken.getUserId()).setUserType(accessToken.getUserType())  
58 - .setTenantId(accessToken.getTenantId()).setScopes(accessToken.getScopes())  
59 - .setAccessToken(accessToken.getAccessToken());  
60 - } catch (Exception exception) {  
61 - // 校验 Token 不通过时，考虑到一些接口是无需登录的，所以直接返回 null 即可  
62 - return null;  
63 - }  
64 - }  
65 -  
66 -}  
yudao-example/yudao-sso-demo-by-code/src/main/java/cn/iocoder/yudao/ssodemo/framework/core/handler/AccessDeniedHandlerImpl.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.framework.core.handler;  
2 -  
3 -import cn.iocoder.yudao.ssodemo.client.dto.CommonResult;  
4 -import cn.iocoder.yudao.ssodemo.framework.core.util.SecurityUtils;  
5 -import cn.iocoder.yudao.ssodemo.framework.core.util.ServletUtils;  
6 -import lombok.extern.slf4j.Slf4j;  
7 -import org.springframework.http.HttpStatus;  
8 -import org.springframework.security.access.AccessDeniedException;  
9 -import org.springframework.security.web.access.AccessDeniedHandler;  
10 -import org.springframework.security.web.access.ExceptionTranslationFilter;  
11 -import org.springframework.stereotype.Component;  
12 -  
13 -import jakarta.servlet.FilterChain;  
14 -import jakarta.servlet.ServletException;  
15 -import jakarta.servlet.http.HttpServletRequest;  
16 -import jakarta.servlet.http.HttpServletResponse;  
17 -import java.io.IOException;  
18 -  
19 -/**  
20 - * 访问一个需要认证的 URL 资源，已经认证（登录）但是没有权限的情况下，返回 {@link GlobalErrorCodeConstants#FORBIDDEN} 错误码。  
21 - *  
22 - * 补充：Spring Security 通过 {@link ExceptionTranslationFilter#handleAccessDeniedException(HttpServletRequest, HttpServletResponse, FilterChain, AccessDeniedException)} 方法，调用当前类  
23 - *  
24 - * @author 芋道源码  
25 - */  
26 -@Component  
27 -@SuppressWarnings("JavadocReference")  
28 -@Slf4j  
29 -public class AccessDeniedHandlerImpl implements AccessDeniedHandler {  
30 -  
31 - @Override  
32 - public void handle(HttpServletRequest request, HttpServletResponse response, AccessDeniedException e)  
33 - throws IOException, ServletException {  
34 - // 打印 warn 的原因是，不定期合并 warn，看看有没恶意破坏  
35 - log.warn("[commence][访问 URL({}) 时，用户({}) 权限不够]", request.getRequestURI(),  
36 - SecurityUtils.getLoginUserId(), e);  
37 - // 返回 403  
38 - CommonResult<Object> result = new CommonResult<>();  
39 - result.setCode(HttpStatus.FORBIDDEN.value());  
40 - result.setMsg("没有该操作权限");  
41 - ServletUtils.writeJSON(response, result);  
42 - }  
43 -  
44 -}  
yudao-example/yudao-sso-demo-by-code/src/main/java/cn/iocoder/yudao/ssodemo/framework/core/handler/AuthenticationEntryPointImpl.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.framework.core.handler;  
2 -  
3 -import cn.iocoder.yudao.ssodemo.client.dto.CommonResult;  
4 -import cn.iocoder.yudao.ssodemo.framework.core.util.ServletUtils;  
5 -import lombok.extern.slf4j.Slf4j;  
6 -import org.springframework.http.HttpStatus;  
7 -import org.springframework.security.core.AuthenticationException;  
8 -import org.springframework.security.web.AuthenticationEntryPoint;  
9 -import org.springframework.security.web.access.ExceptionTranslationFilter;  
10 -import org.springframework.stereotype.Component;  
11 -  
12 -import jakarta.servlet.FilterChain;  
13 -import jakarta.servlet.http.HttpServletRequest;  
14 -import jakarta.servlet.http.HttpServletResponse;  
15 -  
16 -/**  
17 - * 访问一个需要认证的 URL 资源，但是此时自己尚未认证（登录）的情况下，返回 {@link GlobalErrorCodeConstants#UNAUTHORIZED} 错误码，从而使前端重定向到登录页  
18 - *  
19 - * 补充：Spring Security 通过 {@link ExceptionTranslationFilter#sendStartAuthentication(HttpServletRequest, HttpServletResponse, FilterChain, AuthenticationException)} 方法，调用当前类  
20 - */  
21 -@Component  
22 -@Slf4j  
23 -@SuppressWarnings("JavadocReference") // 忽略文档引用报错  
24 -public class AuthenticationEntryPointImpl implements AuthenticationEntryPoint {  
25 -  
26 - @Override  
27 - public void commence(HttpServletRequest request, HttpServletResponse response, AuthenticationException e) {  
28 - log.debug("[commence][访问 URL({}) 时，没有登录]", request.getRequestURI(), e);  
29 - // 返回 401  
30 - CommonResult<Object> result = new CommonResult<>();  
31 - result.setCode(HttpStatus.UNAUTHORIZED.value());  
32 - result.setMsg("账号未登录");  
33 - ServletUtils.writeJSON(response, result);  
34 - }  
35 -  
36 -}  
yudao-example/yudao-sso-demo-by-code/src/main/java/cn/iocoder/yudao/ssodemo/framework/core/util/SecurityUtils.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.framework.core.util;  
2 -  
3 -import cn.iocoder.yudao.ssodemo.framework.core.LoginUser;  
4 -import org.springframework.lang.Nullable;  
5 -import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;  
6 -import org.springframework.security.core.Authentication;  
7 -import org.springframework.security.core.context.SecurityContext;  
8 -import org.springframework.security.core.context.SecurityContextHolder;  
9 -import org.springframework.security.web.authentication.WebAuthenticationDetailsSource;  
10 -import org.springframework.util.StringUtils;  
11 -  
12 -import jakarta.servlet.http.HttpServletRequest;  
13 -import java.util.Collections;  
14 -  
15 -/**  
16 - * 安全服务工具类  
17 - *  
18 - * @author 芋道源码  
19 - */  
20 -public class SecurityUtils {  
21 -  
22 - public static final String AUTHORIZATION_BEARER = "Bearer";  
23 -  
24 - private SecurityUtils() {}  
25 -  
26 - /**  
27 - * 从请求中，获得认证 Token  
28 - *  
29 - * @param request 请求  
30 - * @param header 认证 Token 对应的 Header 名字  
31 - * @return 认证 Token  
32 - */  
33 - public static String obtainAuthorization(HttpServletRequest request, String header) {  
34 - String authorization = request.getHeader(header);  
35 - if (!StringUtils.hasText(authorization)) {  
36 - return null;  
37 - }  
38 - int index = authorization.indexOf(AUTHORIZATION_BEARER + " ");  
39 - if (index == -1) { // 未找到  
40 - return null;  
41 - }  
42 - return authorization.substring(index + 7).trim();  
43 - }  
44 -  
45 - /**  
46 - * 获得当前认证信息  
47 - *  
48 - * @return 认证信息  
49 - */  
50 - public static Authentication getAuthentication() {  
51 - SecurityContext context = SecurityContextHolder.getContext();  
52 - if (context == null) {  
53 - return null;  
54 - }  
55 - return context.getAuthentication();  
56 - }  
57 -  
58 - /**  
59 - * 获取当前用户  
60 - *  
61 - * @return 当前用户  
62 - */  
63 - @Nullable  
64 - public static LoginUser getLoginUser() {  
65 - Authentication authentication = getAuthentication();  
66 - if (authentication == null) {  
67 - return null;  
68 - }  
69 - return authentication.getPrincipal() instanceof LoginUser ? (LoginUser) authentication.getPrincipal() : null;  
70 - }  
71 -  
72 - /**  
73 - * 获得当前用户的编号，从上下文中  
74 - *  
75 - * @return 用户编号  
76 - */  
77 - @Nullable  
78 - public static Long getLoginUserId() {  
79 - LoginUser loginUser = getLoginUser();  
80 - return loginUser != null ? loginUser.getId() : null;  
81 - }  
82 -  
83 - /**  
84 - * 设置当前用户  
85 - *  
86 - * @param loginUser 登录用户  
87 - * @param request 请求  
88 - */  
89 - public static void setLoginUser(LoginUser loginUser, HttpServletRequest request) {  
90 - // 创建 Authentication，并设置到上下文  
91 - Authentication authentication = buildAuthentication(loginUser, request);  
92 - SecurityContextHolder.getContext().setAuthentication(authentication);  
93 - }  
94 -  
95 - private static Authentication buildAuthentication(LoginUser loginUser, HttpServletRequest request) {  
96 - // 创建 UsernamePasswordAuthenticationToken 对象  
97 - UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(  
98 - loginUser, null, Collections.emptyList());  
99 - authenticationToken.setDetails(new WebAuthenticationDetailsSource().buildDetails(request));  
100 - return authenticationToken;  
101 - }  
102 -  
103 -}  
yudao-example/yudao-sso-demo-by-code/src/main/java/cn/iocoder/yudao/ssodemo/framework/core/util/ServletUtils.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.framework.core.util;  
2 -  
3 -import cn.hutool.extra.servlet.JakartaServletUtil;  
4 -import cn.hutool.extra.servlet.ServletUtil;  
5 -import cn.hutool.json.JSONUtil;  
6 -import org.springframework.http.MediaType;  
7 -  
8 -import jakarta.servlet.http.HttpServletResponse;  
9 -  
10 -/**  
11 - * 客户端工具类  
12 - *  
13 - * @author 芋道源码  
14 - */  
15 -public class ServletUtils {  
16 -  
17 - /**  
18 - * 返回 JSON 字符串  
19 - *  
20 - * @param response 响应  
21 - * @param object 对象，会序列化成 JSON 字符串  
22 - */  
23 - @SuppressWarnings("deprecation") // 必须使用 APPLICATION_JSON_UTF8_VALUE，否则会乱码  
24 - public static void writeJSON(HttpServletResponse response, Object object) {  
25 - String content = JSONUtil.toJsonStr(object);  
26 - JakartaServletUtil.write(response, content, MediaType.APPLICATION_JSON_UTF8_VALUE);  
27 - }  
28 -  
29 - public static void write(HttpServletResponse response, String text, String contentType) {  
30 - JakartaServletUtil.write(response, text, contentType);  
31 - }  
32 -  
33 -}  
yudao-example/yudao-sso-demo-by-code/src/main/resources/application.yaml deleted
View file @1d00261
1 -server:  
2 - port: 18080  
yudao-example/yudao-sso-demo-by-code/src/main/resources/static/callback.html deleted
View file @1d00261
1 -<!DOCTYPE html>  
2 -<html lang="en">  
3 -<head>  
4 - <meta charset="UTF-8">  
5 - <title>SSO 授权后的回调页</title>  
6 - <!-- jQuery：操作 dom、发起请求等 -->  
7 - <script src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/2.1.2/jquery.min.js" type="application/javascript"></script>  
8 - <!-- 工具类 -->  
9 - <script type="application/javascript">  
10 - (function ($) {  
11 - /**  
12 - * 获得 URL 的指定参数的值  
13 - *  
14 - * @param name 参数名  
15 - * @returns 参数值  
16 - */  
17 - $.getUrlParam = function (name) {  
18 - const reg = new RegExp("(^|&)" + name + "=([^&]*)(&|$)");  
19 - const r = window.location.search.substr(1).match(reg);  
20 - if (r != null) return unescape(r[2]); return null;  
21 - }  
22 - })(jQuery);  
23 - </script>  
24 -  
25 - <script type="application/javascript">  
26 - $(function () {  
27 - // 获得 code 授权码  
28 - const code = $.getUrlParam('code');  
29 - if (!code) {  
30 - alert('获取不到 code 参数，请排查！')  
31 - return;  
32 - }  
33 -  
34 - // 提交  
35 - const redirectUri = 'http://127.0.0.1:18080/callback.html'; // 需要修改成，你回调的地址，就是在 index.html 拼接的 redirectUri  
36 - $.ajax({  
37 - url: "http://127.0.0.1:18080/auth/login-by-code?code=" + code  
38 - + '&redirectUri=' + redirectUri,  
39 - method: 'POST',  
40 - success: function( result ) {  
41 - if (result.code !== 0) {  
42 - alert('获得访问令牌失败，原因：' + result.msg)  
43 - return;  
44 - }  
45 - alert('获得访问令牌成功！点击确认，跳转回首页')  
46 -  
47 - // 设置到 localStorage 中  
48 - localStorage.setItem('ACCESS-TOKEN', result.data.access_token);  
49 - localStorage.setItem('REFRESH-TOKEN', result.data.refresh_token);  
50 -  
51 - // 跳转回首页  
52 - window.location.href = '/index.html';  
53 - }  
54 - })  
55 - })  
56 - </script>  
57 -</head>  
58 -<body>  
59 -正在使用 code 授权码，进行 accessToken 访问令牌的获取  
60 -</body>  
61 -</html>  
yudao-example/yudao-sso-demo-by-code/src/main/resources/static/index.html deleted
View file @1d00261
1 -<!DOCTYPE html>  
2 -<html lang="en">  
3 -<head>  
4 - <meta charset="UTF-8">  
5 - <title>首页</title>  
6 - <!-- jQuery：操作 dom、发起请求等 -->  
7 - <script src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/2.1.2/jquery.min.js" type="application/javascript"></script>  
8 -  
9 - <script type="application/javascript">  
10 -  
11 - /**  
12 - * 跳转单点登录  
13 - */  
14 - function ssoLogin() {  
15 - const clientId = 'yudao-sso-demo-by-code'; // 可以改写成，你的 clientId  
16 - const redirectUri = encodeURIComponent('http://127.0.0.1:18080/callback.html'); // 注意，需要使用 encodeURIComponent 编码地址  
17 - const responseType = 'code'; // 1）授权码模式，对应 code；2）简化模式，对应 token  
18 - window.location.href = 'http://127.0.0.1:1024/sso?client_id=' + clientId  
19 - + '&redirect_uri=' + redirectUri  
20 - + '&response_type=' + responseType;  
21 - }  
22 -  
23 - /**  
24 - * 修改昵称  
25 - */  
26 - function updateNickname() {  
27 - const nickname = prompt("请输入新的昵称", "");  
28 - if (!nickname) {  
29 - return;  
30 - }  
31 - // 更新用户的昵称  
32 - const accessToken = localStorage.getItem('ACCESS-TOKEN');  
33 - $.ajax({  
34 - url: "http://127.0.0.1:18080/user/update?nickname=" + nickname,  
35 - method: 'PUT',  
36 - headers: {  
37 - 'Authorization': 'Bearer ' + accessToken  
38 - },  
39 - success: function (result) {  
40 - if (result.code !== 0) {  
41 - alert('更新昵称失败，原因：' + result.msg)  
42 - return;  
43 - }  
44 - alert('更新昵称成功！');  
45 - $('#nicknameSpan').html(nickname);  
46 - }  
47 - });  
48 - }  
49 -  
50 - /**  
51 - * 刷新令牌  
52 - */  
53 - function refreshToken() {  
54 - const refreshToken = localStorage.getItem('REFRESH-TOKEN');  
55 - if (!refreshToken) {  
56 - alert("获取不到刷新令牌");  
57 - return;  
58 - }  
59 - $.ajax({  
60 - url: "http://127.0.0.1:18080/auth/refresh-token?refreshToken=" + refreshToken,  
61 - method: 'POST',  
62 - success: function (result) {  
63 - if (result.code !== 0) {  
64 - alert('刷新访问令牌失败，原因：' + result.msg)  
65 - return;  
66 - }  
67 - alert('更新访问令牌成功！');  
68 - $('#accessTokenSpan').html(result.data.access_token);  
69 -  
70 - // 设置到 localStorage 中  
71 - localStorage.setItem('ACCESS-TOKEN', result.data.access_token);  
72 - localStorage.setItem('REFRESH-TOKEN', result.data.refresh_token);  
73 - }  
74 - });  
75 - }  
76 -  
77 - /**  
78 - * 登出，删除访问令牌  
79 - */  
80 - function logout() {  
81 - const accessToken = localStorage.getItem('ACCESS-TOKEN');  
82 - if (!accessToken) {  
83 - location.reload();  
84 - return;  
85 - }  
86 - $.ajax({  
87 - url: "http://127.0.0.1:18080/auth/logout",  
88 - method: 'POST',  
89 - headers: {  
90 - 'Authorization': 'Bearer ' + accessToken  
91 - },  
92 - success: function (result) {  
93 - if (result.code !== 0) {  
94 - alert('退出登录失败，原因：' + result.msg)  
95 - return;  
96 - }  
97 - alert('退出登录成功！');  
98 - // 删除 localStorage 中  
99 - localStorage.removeItem('ACCESS-TOKEN');  
100 - localStorage.removeItem('REFRESH-TOKEN');  
101 -  
102 - location.reload();  
103 - }  
104 - });  
105 - }  
106 -  
107 - $(function () {  
108 - const accessToken = localStorage.getItem('ACCESS-TOKEN');  
109 - // 情况一：未登录  
110 - if (!accessToken) {  
111 - $('#noLoginDiv').css("display", "block");  
112 - return;  
113 - }  
114 -  
115 - // 情况二：已登录  
116 - $('#yesLoginDiv').css("display", "block");  
117 - $('#accessTokenSpan').html(accessToken);  
118 - // 获得登录用户的信息  
119 - $.ajax({  
120 - url: "http://127.0.0.1:18080/user/get",  
121 - method: 'GET',  
122 - headers: {  
123 - 'Authorization': 'Bearer ' + accessToken  
124 - },  
125 - success: function (result) {  
126 - if (result.code !== 0) {  
127 - alert('获得个人信息失败，原因：' + result.msg)  
128 - return;  
129 - }  
130 - $('#nicknameSpan').html(result.data.nickname);  
131 - }  
132 - });  
133 - })  
134 - </script>  
135 -</head>  
136 -<body>  
137 -<!-- 情况一：未登录：1）跳转 ruoyi-vue-pro 的 SSO 登录页 -->  
138 -<div id="noLoginDiv" style="display: none">  
139 - 您未登录，点击 <a href="#" onclick="ssoLogin()">跳转 </a> SSO 单点登录  
140 -</div>  
141 -  
142 -<!-- 情况二：已登录：1）展示用户信息；2）刷新访问令牌；3）退出登录 -->  
143 -<div id="yesLoginDiv" style="display: none">  
144 - 您已登录！<button onclick="logout()">退出登录</button> <br />  
145 - 昵称：<span id="nicknameSpan"> 加载中... </span> <button onclick="updateNickname()">修改昵称</button> <br />  
146 - 访问令牌：<span id="accessTokenSpan"> 加载中... </span> <button onclick="refreshToken()">刷新令牌</button> <br />  
147 -</div>  
148 -</body>  
149 -<style>  
150 - body { /** 页面居中 */  
151 - border-radius: 20px;  
152 - height: 350px;  
153 - position: absolute;  
154 - left: 50%;  
155 - top: 50%;  
156 - transform: translate(-50%,-50%);  
157 - }  
158 -</style>  
159 -</html>  
yudao-example/yudao-sso-demo-by-password/pom.xml deleted
View file @1d00261
1 -<?xml version="1.0" encoding="UTF-8"?>  
2 -<project xmlns="http://maven.apache.org/POM/4.0.0"  
3 - xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"  
4 - xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">  
5 - <modelVersion>4.0.0</modelVersion>  
6 -  
7 - <!-- 由于方便大家拷贝，使用不使用 yudao 作为 Maven parent -->  
8 -  
9 - <groupId>cn.iocoder.boot</groupId>  
10 - <artifactId>yudao-sso-demo-by-password</artifactId>  
11 - <version>1.0.0-snapshot</version>  
12 - <packaging>jar</packaging>  
13 -  
14 - <name>${project.artifactId}</name>  
15 - <description>基于密码模式，如何实现 SSO 单点登录？</description>  
16 - <url>https://github.com/YunaiV/ruoyi-vue-pro</url>  
17 -  
18 - <properties>  
19 - <!-- Maven 相关 -->  
20 - <maven.compiler.source>21</maven.compiler.source>  
21 - <maven.compiler.target>21</maven.compiler.target>  
22 - <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>  
23 - <!-- 统一依赖管理 -->  
24 - <spring.boot.version>3.2.0</spring.boot.version>  
25 - </properties>  
26 -  
27 - <dependencyManagement>  
28 - <dependencies>  
29 - <!-- 统一依赖管理 -->  
30 - <dependency>  
31 - <groupId>org.springframework.boot</groupId>  
32 - <artifactId>spring-boot-dependencies</artifactId>  
33 - <version>${spring.boot.version}</version>  
34 - <type>pom</type>  
35 - <scope>import</scope>  
36 - </dependency>  
37 - </dependencies>  
38 - </dependencyManagement>  
39 -  
40 - <dependencies>  
41 - <!-- Web 相关 -->  
42 - <dependency>  
43 - <groupId>org.springframework.boot</groupId>  
44 - <artifactId>spring-boot-starter-web</artifactId>  
45 - </dependency>  
46 -  
47 - <dependency>  
48 - <groupId>org.springframework.boot</groupId>  
49 - <artifactId>spring-boot-starter-security</artifactId>  
50 - </dependency>  
51 -  
52 - <dependency>  
53 - <groupId>cn.hutool</groupId>  
54 - <artifactId>hutool-all</artifactId>  
55 - <version>5.8.22</version>  
56 - </dependency>  
57 -  
58 - <dependency>  
59 - <groupId>org.projectlombok</groupId>  
60 - <artifactId>lombok</artifactId>  
61 - <optional>true</optional>  
62 - </dependency>  
63 - </dependencies>  
64 -  
65 -</project>  
yudao-example/yudao-sso-demo-by-password/src/main/java/cn/iocoder/yudao/ssodemo/SSODemoApplication.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo;  
2 -  
3 -import org.springframework.boot.SpringApplication;  
4 -import org.springframework.boot.autoconfigure.SpringBootApplication;  
5 -  
6 -@SpringBootApplication  
7 -public class SSODemoApplication {  
8 -  
9 - public static void main(String[] args) {  
10 - SpringApplication.run(SSODemoApplication.class, args);  
11 - }  
12 -  
13 -}  
yudao-example/yudao-sso-demo-by-password/src/main/java/cn/iocoder/yudao/ssodemo/client/OAuth2Client.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.client;  
2 -  
3 -import cn.iocoder.yudao.ssodemo.client.dto.CommonResult;  
4 -import cn.iocoder.yudao.ssodemo.client.dto.oauth2.OAuth2AccessTokenRespDTO;  
5 -import cn.iocoder.yudao.ssodemo.client.dto.oauth2.OAuth2CheckTokenRespDTO;  
6 -import org.springframework.core.ParameterizedTypeReference;  
7 -import org.springframework.http.*;  
8 -import org.springframework.stereotype.Component;  
9 -import org.springframework.util.Assert;  
10 -import org.springframework.util.Base64Utils;  
11 -import org.springframework.util.LinkedMultiValueMap;  
12 -import org.springframework.util.MultiValueMap;  
13 -import org.springframework.web.client.RestTemplate;  
14 -  
15 -import java.nio.charset.StandardCharsets;  
16 -  
17 -/**  
18 - * OAuth 2.0 客户端  
19 - *  
20 - * 对应调用 OAuth2OpenController 接口  
21 - */  
22 -@Component  
23 -public class OAuth2Client {  
24 -  
25 - private static final String BASE_URL = "http://127.0.0.1:48080/admin-api/system/oauth2";  
26 -  
27 - /**  
28 - * 租户编号  
29 - *  
30 - * 默认使用 1；如果使用别的租户，可以调整  
31 - */  
32 - public static final Long TENANT_ID = 1L;  
33 -  
34 - private static final String CLIENT_ID = "yudao-sso-demo-by-password";  
35 - private static final String CLIENT_SECRET = "test";  
36 -  
37 -  
38 -// @Resource // 可优化，注册一个 RestTemplate Bean，然后注入  
39 - private final RestTemplate restTemplate = new RestTemplate();  
40 -  
41 - /**  
42 - * 校验访问令牌，并返回它的基本信息  
43 - *  
44 - * @param token 访问令牌  
45 - * @return 访问令牌的基本信息  
46 - */  
47 - public CommonResult<OAuth2CheckTokenRespDTO> checkToken(String token) {  
48 - // 1.1 构建请求头  
49 - HttpHeaders headers = new HttpHeaders();  
50 - headers.setContentType(MediaType.APPLICATION_FORM_URLENCODED);  
51 - headers.set("tenant-id", TENANT_ID.toString());  
52 - addClientHeader(headers);  
53 - // 1.2 构建请求参数  
54 - MultiValueMap<String, Object> body = new LinkedMultiValueMap<>();  
55 - body.add("token", token);  
56 -  
57 - // 2. 执行请求  
58 - ResponseEntity<CommonResult<OAuth2CheckTokenRespDTO>> exchange = restTemplate.exchange(  
59 - BASE_URL + "/check-token",  
60 - HttpMethod.POST,  
61 - new HttpEntity<>(body, headers),  
62 - new ParameterizedTypeReference<CommonResult<OAuth2CheckTokenRespDTO>>() {}); // 解决 CommonResult 的泛型丢失  
63 - Assert.isTrue(exchange.getStatusCode().is2xxSuccessful(), "响应必须是 200 成功");  
64 - return exchange.getBody();  
65 - }  
66 -  
67 - /**  
68 - * 使用刷新令牌，获得（刷新）访问令牌  
69 - *  
70 - * @param refreshToken 刷新令牌  
71 - * @return 访问令牌  
72 - */  
73 - public CommonResult<OAuth2AccessTokenRespDTO> refreshToken(String refreshToken) {  
74 - // 1.1 构建请求头  
75 - HttpHeaders headers = new HttpHeaders();  
76 - headers.setContentType(MediaType.APPLICATION_FORM_URLENCODED);  
77 - headers.set("tenant-id", TENANT_ID.toString());  
78 - addClientHeader(headers);  
79 - // 1.2 构建请求参数  
80 - MultiValueMap<String, Object> body = new LinkedMultiValueMap<>();  
81 - body.add("grant_type", "refresh_token");  
82 - body.add("refresh_token", refreshToken);  
83 -  
84 - // 2. 执行请求  
85 - ResponseEntity<CommonResult<OAuth2AccessTokenRespDTO>> exchange = restTemplate.exchange(  
86 - BASE_URL + "/token",  
87 - HttpMethod.POST,  
88 - new HttpEntity<>(body, headers),  
89 - new ParameterizedTypeReference<CommonResult<OAuth2AccessTokenRespDTO>>() {}); // 解决 CommonResult 的泛型丢失  
90 - Assert.isTrue(exchange.getStatusCode().is2xxSuccessful(), "响应必须是 200 成功");  
91 - return exchange.getBody();  
92 - }  
93 -  
94 - /**  
95 - * 删除访问令牌  
96 - *  
97 - * @param token 访问令牌  
98 - * @return 成功  
99 - */  
100 - public CommonResult<Boolean> revokeToken(String token) {  
101 - // 1.1 构建请求头  
102 - HttpHeaders headers = new HttpHeaders();  
103 - headers.setContentType(MediaType.APPLICATION_FORM_URLENCODED);  
104 - headers.set("tenant-id", TENANT_ID.toString());  
105 - addClientHeader(headers);  
106 - // 1.2 构建请求参数  
107 - MultiValueMap<String, Object> body = new LinkedMultiValueMap<>();  
108 - body.add("token", token);  
109 -  
110 - // 2. 执行请求  
111 - ResponseEntity<CommonResult<Boolean>> exchange = restTemplate.exchange(  
112 - BASE_URL + "/token",  
113 - HttpMethod.DELETE,  
114 - new HttpEntity<>(body, headers),  
115 - new ParameterizedTypeReference<CommonResult<Boolean>>() {}); // 解决 CommonResult 的泛型丢失  
116 - Assert.isTrue(exchange.getStatusCode().is2xxSuccessful(), "响应必须是 200 成功");  
117 - return exchange.getBody();  
118 - }  
119 -  
120 - private static void addClientHeader(HttpHeaders headers) {  
121 - // client 拼接，需要 BASE64 编码  
122 - String client = CLIENT_ID + ":" + CLIENT_SECRET;  
123 - client = Base64Utils.encodeToString(client.getBytes(StandardCharsets.UTF_8));  
124 - headers.add("Authorization", "Basic " + client);  
125 - }  
126 -  
127 -}  
yudao-example/yudao-sso-demo-by-password/src/main/java/cn/iocoder/yudao/ssodemo/client/UserClient.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.client;  
2 -  
3 -import cn.iocoder.yudao.ssodemo.client.dto.CommonResult;  
4 -import cn.iocoder.yudao.ssodemo.client.dto.user.UserInfoRespDTO;  
5 -import cn.iocoder.yudao.ssodemo.client.dto.user.UserUpdateReqDTO;  
6 -import cn.iocoder.yudao.ssodemo.framework.core.LoginUser;  
7 -import cn.iocoder.yudao.ssodemo.framework.core.util.SecurityUtils;  
8 -import org.springframework.core.ParameterizedTypeReference;  
9 -import org.springframework.http.*;  
10 -import org.springframework.stereotype.Component;  
11 -import org.springframework.util.Assert;  
12 -import org.springframework.util.LinkedMultiValueMap;  
13 -import org.springframework.util.MultiValueMap;  
14 -import org.springframework.web.client.RestTemplate;  
15 -  
16 -/**  
17 - * 用户 User 信息的客户端  
18 - *  
19 - * 对应调用 OAuth2UserController 接口  
20 - */  
21 -@Component  
22 -public class UserClient {  
23 -  
24 - private static final String BASE_URL = "http://127.0.0.1:48080/admin-api//system/oauth2/user";  
25 -  
26 - // @Resource // 可优化，注册一个 RestTemplate Bean，然后注入  
27 - private final RestTemplate restTemplate = new RestTemplate();  
28 -  
29 - public CommonResult<UserInfoRespDTO> getUser() {  
30 - // 1.1 构建请求头  
31 - HttpHeaders headers = new HttpHeaders();  
32 - headers.setContentType(MediaType.APPLICATION_FORM_URLENCODED);  
33 - headers.set("tenant-id", OAuth2Client.TENANT_ID.toString());  
34 - addTokenHeader(headers);  
35 - // 1.2 构建请求参数  
36 - MultiValueMap<String, Object> body = new LinkedMultiValueMap<>();  
37 -  
38 - // 2. 执行请求  
39 - ResponseEntity<CommonResult<UserInfoRespDTO>> exchange = restTemplate.exchange(  
40 - BASE_URL + "/get",  
41 - HttpMethod.GET,  
42 - new HttpEntity<>(body, headers),  
43 - new ParameterizedTypeReference<CommonResult<UserInfoRespDTO>>() {}); // 解决 CommonResult 的泛型丢失  
44 - Assert.isTrue(exchange.getStatusCode().is2xxSuccessful(), "响应必须是 200 成功");  
45 - return exchange.getBody();  
46 - }  
47 -  
48 - public CommonResult<Boolean> updateUser(UserUpdateReqDTO updateReqDTO) {  
49 - // 1.1 构建请求头  
50 - HttpHeaders headers = new HttpHeaders();  
51 - headers.setContentType(MediaType.APPLICATION_JSON);  
52 - headers.set("tenant-id", OAuth2Client.TENANT_ID.toString());  
53 - addTokenHeader(headers);  
54 - // 1.2 构建请求参数  
55 - // 使用 updateReqDTO 即可  
56 -  
57 - // 2. 执行请求  
58 - ResponseEntity<CommonResult<Boolean>> exchange = restTemplate.exchange(  
59 - BASE_URL + "/update",  
60 - HttpMethod.PUT,  
61 - new HttpEntity<>(updateReqDTO, headers),  
62 - new ParameterizedTypeReference<CommonResult<Boolean>>() {}); // 解决 CommonResult 的泛型丢失  
63 - Assert.isTrue(exchange.getStatusCode().is2xxSuccessful(), "响应必须是 200 成功");  
64 - return exchange.getBody();  
65 - }  
66 -  
67 -  
68 - private static void addTokenHeader(HttpHeaders headers) {  
69 - LoginUser loginUser = SecurityUtils.getLoginUser();  
70 - Assert.notNull(loginUser, "登录用户不能为空");  
71 - headers.add("Authorization", "Bearer " + loginUser.getAccessToken());  
72 - }  
73 -}  
yudao-example/yudao-sso-demo-by-password/src/main/java/cn/iocoder/yudao/ssodemo/client/dto/CommonResult.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.client.dto;  
2 -  
3 -import lombok.Data;  
4 -  
5 -import java.io.Serializable;  
6 -  
7 -/**  
8 - * 通用返回  
9 - *  
10 - * @param <T> 数据泛型  
11 - */  
12 -@Data  
13 -public class CommonResult<T> implements Serializable {  
14 -  
15 - /**  
16 - * 错误码  
17 - */  
18 - private Integer code;  
19 - /**  
20 - * 返回数据  
21 - */  
22 - private T data;  
23 - /**  
24 - * 错误提示，用户可阅读  
25 - */  
26 - private String msg;  
27 -  
28 -}  
yudao-example/yudao-sso-demo-by-password/src/main/java/cn/iocoder/yudao/ssodemo/client/dto/oauth2/OAuth2AccessTokenRespDTO.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.client.dto.oauth2;  
2 -  
3 -import com.fasterxml.jackson.annotation.JsonProperty;  
4 -import lombok.AllArgsConstructor;  
5 -import lombok.Data;  
6 -import lombok.NoArgsConstructor;  
7 -  
8 -/**  
9 - * 访问令牌 Response DTO  
10 - */  
11 -@Data  
12 -@NoArgsConstructor  
13 -@AllArgsConstructor  
14 -public class OAuth2AccessTokenRespDTO {  
15 -  
16 - /**  
17 - * 访问令牌  
18 - */  
19 - @JsonProperty("access_token")  
20 - private String accessToken;  
21 -  
22 - /**  
23 - * 刷新令牌  
24 - */  
25 - @JsonProperty("refresh_token")  
26 - private String refreshToken;  
27 -  
28 - /**  
29 - * 令牌类型  
30 - */  
31 - @JsonProperty("token_type")  
32 - private String tokenType;  
33 -  
34 - /**  
35 - * 过期时间；单位：秒  
36 - */  
37 - @JsonProperty("expires_in")  
38 - private Long expiresIn;  
39 -  
40 - /**  
41 - * 授权范围；如果多个授权范围，使用空格分隔  
42 - */  
43 - private String scope;  
44 -  
45 -}  
yudao-example/yudao-sso-demo-by-password/src/main/java/cn/iocoder/yudao/ssodemo/client/dto/oauth2/OAuth2CheckTokenRespDTO.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.client.dto.oauth2;  
2 -  
3 -import com.fasterxml.jackson.annotation.JsonProperty;  
4 -import lombok.AllArgsConstructor;  
5 -import lombok.Data;  
6 -import lombok.NoArgsConstructor;  
7 -  
8 -import java.util.List;  
9 -  
10 -/**  
11 - * 校验令牌 Response DTO  
12 - *  
13 - * @author 芋道源码  
14 - */  
15 -@Data  
16 -@NoArgsConstructor  
17 -@AllArgsConstructor  
18 -public class OAuth2CheckTokenRespDTO {  
19 -  
20 - /**  
21 - * 用户编号  
22 - */  
23 - @JsonProperty("user_id")  
24 - private Long userId;  
25 - /**  
26 - * 用户类型  
27 - */  
28 - @JsonProperty("user_type")  
29 - private Integer userType;  
30 - /**  
31 - * 租户编号  
32 - */  
33 - @JsonProperty("tenant_id")  
34 - private Long tenantId;  
35 -  
36 - /**  
37 - * 客户端编号  
38 - */  
39 - @JsonProperty("client_id")  
40 - private String clientId;  
41 - /**  
42 - * 授权范围  
43 - */  
44 - private List<String> scopes;  
45 -  
46 - /**  
47 - * 访问令牌  
48 - */  
49 - @JsonProperty("access_token")  
50 - private String accessToken;  
51 -  
52 - /**  
53 - * 过期时间  
54 - *  
55 - * 时间戳 / 1000，即单位：秒  
56 - */  
57 - private Long exp;  
58 -  
59 -}  
yudao-example/yudao-sso-demo-by-password/src/main/java/cn/iocoder/yudao/ssodemo/client/dto/user/UserInfoRespDTO.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.client.dto.user;  
2 -  
3 -import lombok.AllArgsConstructor;  
4 -import lombok.Data;  
5 -import lombok.NoArgsConstructor;  
6 -  
7 -import java.util.List;  
8 -  
9 -/**  
10 - * 获得用户基本信息 Response dto  
11 - */  
12 -@Data  
13 -@NoArgsConstructor  
14 -@AllArgsConstructor  
15 -public class UserInfoRespDTO {  
16 -  
17 - /**  
18 - * 用户编号  
19 - */  
20 - private Long id;  
21 -  
22 - /**  
23 - * 用户账号  
24 - */  
25 - private String username;  
26 -  
27 - /**  
28 - * 用户昵称  
29 - */  
30 - private String nickname;  
31 -  
32 - /**  
33 - * 用户邮箱  
34 - */  
35 - private String email;  
36 - /**  
37 - * 手机号码  
38 - */  
39 - private String mobile;  
40 -  
41 - /**  
42 - * 用户性别  
43 - */  
44 - private Integer sex;  
45 -  
46 - /**  
47 - * 用户头像  
48 - */  
49 - private String avatar;  
50 -  
51 - /**  
52 - * 所在部门  
53 - */  
54 - private Dept dept;  
55 -  
56 - /**  
57 - * 所属岗位数组  
58 - */  
59 - private List<Post> posts;  
60 -  
61 - /**  
62 - * 部门  
63 - */  
64 - @Data  
65 - public static class Dept {  
66 -  
67 - /**  
68 - * 部门编号  
69 - */  
70 - private Long id;  
71 -  
72 - /**  
73 - * 部门名称  
74 - */  
75 - private String name;  
76 -  
77 - }  
78 -  
79 - /**  
80 - * 岗位  
81 - */  
82 - @Data  
83 - public static class Post {  
84 -  
85 - /**  
86 - * 岗位编号  
87 - */  
88 - private Long id;  
89 -  
90 - /**  
91 - * 岗位名称  
92 - */  
93 - private String name;  
94 -  
95 - }  
96 -  
97 -}  
yudao-example/yudao-sso-demo-by-password/src/main/java/cn/iocoder/yudao/ssodemo/client/dto/user/UserUpdateReqDTO.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.client.dto.user;  
2 -  
3 -import lombok.AllArgsConstructor;  
4 -import lombok.Data;  
5 -import lombok.NoArgsConstructor;  
6 -  
7 -/**  
8 - * 更新用户基本信息 Request DTO  
9 - */  
10 -@Data  
11 -@NoArgsConstructor  
12 -@AllArgsConstructor  
13 -public class UserUpdateReqDTO {  
14 -  
15 - /**  
16 - * 用户昵称  
17 - */  
18 - private String nickname;  
19 -  
20 - /**  
21 - * 用户邮箱  
22 - */  
23 - private String email;  
24 -  
25 - /**  
26 - * 手机号码  
27 - */  
28 - private String mobile;  
29 -  
30 - /**  
31 - * 用户性别  
32 - */  
33 - private Integer sex;  
34 -  
35 -}  
yudao-example/yudao-sso-demo-by-password/src/main/java/cn/iocoder/yudao/ssodemo/controller/AuthController.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.controller;  
2 -  
3 -import cn.hutool.core.util.StrUtil;  
4 -import cn.iocoder.yudao.ssodemo.client.OAuth2Client;  
5 -import cn.iocoder.yudao.ssodemo.client.dto.CommonResult;  
6 -import cn.iocoder.yudao.ssodemo.client.dto.oauth2.OAuth2AccessTokenRespDTO;  
7 -import cn.iocoder.yudao.ssodemo.framework.core.util.SecurityUtils;  
8 -import org.springframework.web.bind.annotation.PostMapping;  
9 -import org.springframework.web.bind.annotation.RequestMapping;  
10 -import org.springframework.web.bind.annotation.RequestParam;  
11 -import org.springframework.web.bind.annotation.RestController;  
12 -  
13 -import jakarta.annotation.Resource;  
14 -import jakarta.servlet.http.HttpServletRequest;  
15 -  
16 -@RestController  
17 -@RequestMapping("/auth")  
18 -public class AuthController {  
19 -  
20 - @Resource  
21 - private OAuth2Client oauth2Client;  
22 -  
23 - /**  
24 - * 使用刷新令牌，获得（刷新）访问令牌  
25 - *  
26 - * @param refreshToken 刷新令牌  
27 - * @return 访问令牌；注意，实际项目中，最好创建对应的 ResponseVO 类，只返回必要的字段  
28 - */  
29 - @PostMapping("/refresh-token")  
30 - public CommonResult<OAuth2AccessTokenRespDTO> refreshToken(@RequestParam("refreshToken") String refreshToken) {  
31 - return oauth2Client.refreshToken(refreshToken);  
32 - }  
33 -  
34 - /**  
35 - * 退出登录  
36 - *  
37 - * @param request 请求  
38 - * @return 成功  
39 - */  
40 - @PostMapping("/logout")  
41 - public CommonResult<Boolean> logout(HttpServletRequest request) {  
42 - String token = SecurityUtils.obtainAuthorization(request, "Authorization");  
43 - if (StrUtil.isNotBlank(token)) {  
44 - return oauth2Client.revokeToken(token);  
45 - }  
46 - // 返回成功  
47 - return new CommonResult<>();  
48 - }  
49 -  
50 -}  
yudao-example/yudao-sso-demo-by-password/src/main/java/cn/iocoder/yudao/ssodemo/controller/UserController.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.controller;  
2 -  
3 -import cn.iocoder.yudao.ssodemo.client.UserClient;  
4 -import cn.iocoder.yudao.ssodemo.client.dto.CommonResult;  
5 -import cn.iocoder.yudao.ssodemo.client.dto.user.UserInfoRespDTO;  
6 -import cn.iocoder.yudao.ssodemo.client.dto.user.UserUpdateReqDTO;  
7 -import org.springframework.web.bind.annotation.*;  
8 -  
9 -import jakarta.annotation.Resource;  
10 -  
11 -@RestController  
12 -@RequestMapping("/user")  
13 -public class UserController {  
14 -  
15 - @Resource  
16 - private UserClient userClient;  
17 -  
18 - /**  
19 - * 获得当前登录用户的基本信息  
20 - *  
21 - * @return 用户信息；注意，实际项目中，最好创建对应的 ResponseVO 类，只返回必要的字段  
22 - */  
23 - @GetMapping("/get")  
24 - public CommonResult<UserInfoRespDTO> getUser() {  
25 - return userClient.getUser();  
26 - }  
27 -  
28 - /**  
29 - * 更新当前登录用户的昵称  
30 - *  
31 - * @param nickname 昵称  
32 - * @return 成功  
33 - */  
34 - @PutMapping("/update")  
35 - public CommonResult<Boolean> updateUser(@RequestParam("nickname") String nickname) {  
36 - UserUpdateReqDTO updateReqDTO = new UserUpdateReqDTO(nickname, null, null, null);  
37 - return userClient.updateUser(updateReqDTO);  
38 - }  
39 -  
40 -}  
yudao-example/yudao-sso-demo-by-password/src/main/java/cn/iocoder/yudao/ssodemo/framework/config/SecurityConfiguration.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.framework.config;  
2 -  
3 -import cn.iocoder.yudao.ssodemo.framework.core.filter.TokenAuthenticationFilter;  
4 -import cn.iocoder.yudao.ssodemo.framework.core.handler.AccessDeniedHandlerImpl;  
5 -import org.springframework.context.annotation.Bean;  
6 -import org.springframework.context.annotation.Configuration;  
7 -import org.springframework.http.HttpMethod;  
8 -import org.springframework.security.config.Customizer;  
9 -import org.springframework.security.config.annotation.web.builders.HttpSecurity;  
10 -import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;  
11 -import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;  
12 -import org.springframework.security.web.AuthenticationEntryPoint;  
13 -import org.springframework.security.web.SecurityFilterChain;  
14 -import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;  
15 -  
16 -import jakarta.annotation.Resource;  
17 -  
18 -@Configuration(proxyBeanMethods = false)  
19 -@EnableWebSecurity  
20 -public class SecurityConfiguration {  
21 -  
22 - @Resource  
23 - private TokenAuthenticationFilter tokenAuthenticationFilter;  
24 -  
25 - @Resource  
26 - private AccessDeniedHandlerImpl accessDeniedHandler;  
27 - @Resource  
28 - private AuthenticationEntryPoint authenticationEntryPoint;  
29 -  
30 - @Bean  
31 - protected SecurityFilterChain filterChain(HttpSecurity httpSecurity) throws Exception {  
32 - // 设置 URL 安全权限  
33 - httpSecurity  
34 - // 开启跨域  
35 - .cors(Customizer.withDefaults())  
36 - // CSRF 禁用，因为不使用 Session  
37 - .csrf(AbstractHttpConfigurer::disable)  
38 - // 一堆自定义的 Spring Security 处理器  
39 - .exceptionHandling(c -> c.authenticationEntryPoint(authenticationEntryPoint)  
40 - .accessDeniedHandler(accessDeniedHandler));  
41 -  
42 - // 设置每个请求的权限  
43 - httpSecurity.authorizeHttpRequests(c -> c  
44 - // 1. 静态资源，可匿名访问  
45 - .requestMatchers(HttpMethod.GET, "/*.html", "/*.html", "/*.css", "/*.js").permitAll()  
46 - // 2. 登录相关的接口，可匿名访问  
47 - .requestMatchers("/auth/login-by-code").permitAll()  
48 - .requestMatchers("/auth/refresh-token").permitAll()  
49 - .requestMatchers("/auth/logout").permitAll())  
50 - // 3. 兜底规则，必须认证  
51 - .authorizeHttpRequests(c -> c.anyRequest().authenticated());  
52 -  
53 - // 添加 Token Filter  
54 - httpSecurity.addFilterBefore(tokenAuthenticationFilter, UsernamePasswordAuthenticationFilter.class);  
55 - return httpSecurity.build();  
56 - }  
57 -  
58 -}  
yudao-example/yudao-sso-demo-by-password/src/main/java/cn/iocoder/yudao/ssodemo/framework/core/LoginUser.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.framework.core;  
2 -  
3 -import lombok.Data;  
4 -  
5 -import java.util.List;  
6 -  
7 -/**  
8 - * 登录用户信息  
9 - *  
10 - * @author 芋道源码  
11 - */  
12 -@Data  
13 -public class LoginUser {  
14 -  
15 - /**  
16 - * 用户编号  
17 - */  
18 - private Long id;  
19 - /**  
20 - * 用户类型  
21 - */  
22 - private Integer userType;  
23 - /**  
24 - * 租户编号  
25 - */  
26 - private Long tenantId;  
27 - /**  
28 - * 授权范围  
29 - */  
30 - private List<String> scopes;  
31 -  
32 - /**  
33 - * 访问令牌  
34 - */  
35 - private String accessToken;  
36 -  
37 -}  
yudao-example/yudao-sso-demo-by-password/src/main/java/cn/iocoder/yudao/ssodemo/framework/core/filter/TokenAuthenticationFilter.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.framework.core.filter;  
2 -  
3 -import cn.iocoder.yudao.ssodemo.client.OAuth2Client;  
4 -import cn.iocoder.yudao.ssodemo.client.dto.CommonResult;  
5 -import cn.iocoder.yudao.ssodemo.client.dto.oauth2.OAuth2CheckTokenRespDTO;  
6 -import cn.iocoder.yudao.ssodemo.framework.core.LoginUser;  
7 -import cn.iocoder.yudao.ssodemo.framework.core.util.SecurityUtils;  
8 -import org.springframework.stereotype.Component;  
9 -import org.springframework.util.StringUtils;  
10 -import org.springframework.web.filter.OncePerRequestFilter;  
11 -  
12 -import jakarta.annotation.Resource;  
13 -import jakarta.servlet.FilterChain;  
14 -import jakarta.servlet.ServletException;  
15 -import jakarta.servlet.http.HttpServletRequest;  
16 -import jakarta.servlet.http.HttpServletResponse;  
17 -import java.io.IOException;  
18 -  
19 -/**  
20 - * Token 过滤器，验证 token 的有效性  
21 - * 验证通过后，获得 {@link LoginUser} 信息，并加入到 Spring Security 上下文  
22 - *  
23 - * @author 芋道源码  
24 - */  
25 -@Component  
26 -public class TokenAuthenticationFilter extends OncePerRequestFilter {  
27 -  
28 - @Resource  
29 - private OAuth2Client oauth2Client;  
30 -  
31 - @Override  
32 - protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response,  
33 - FilterChain filterChain) throws ServletException, IOException {  
34 - // 1. 获得访问令牌  
35 - String token = SecurityUtils.obtainAuthorization(request, "Authorization");  
36 - if (StringUtils.hasText(token)) {  
37 - // 2. 基于 token 构建登录用户  
38 - LoginUser loginUser = buildLoginUserByToken(token);  
39 - // 3. 设置当前用户  
40 - if (loginUser != null) {  
41 - SecurityUtils.setLoginUser(loginUser, request);  
42 - }  
43 - }  
44 -  
45 - // 继续过滤链  
46 - filterChain.doFilter(request, response);  
47 - }  
48 -  
49 - private LoginUser buildLoginUserByToken(String token) {  
50 - try {  
51 - CommonResult<OAuth2CheckTokenRespDTO> accessTokenResult = oauth2Client.checkToken(token);  
52 - OAuth2CheckTokenRespDTO accessToken = accessTokenResult.getData();  
53 - if (accessToken == null) {  
54 - return null;  
55 - }  
56 - // 构建登录用户  
57 - return new LoginUser().setId(accessToken.getUserId()).setUserType(accessToken.getUserType())  
58 - .setTenantId(accessToken.getTenantId()).setScopes(accessToken.getScopes())  
59 - .setAccessToken(accessToken.getAccessToken());  
60 - } catch (Exception exception) {  
61 - // 校验 Token 不通过时，考虑到一些接口是无需登录的，所以直接返回 null 即可  
62 - return null;  
63 - }  
64 - }  
65 -  
66 -}  
yudao-example/yudao-sso-demo-by-password/src/main/java/cn/iocoder/yudao/ssodemo/framework/core/handler/AccessDeniedHandlerImpl.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.framework.core.handler;  
2 -  
3 -import cn.iocoder.yudao.ssodemo.client.dto.CommonResult;  
4 -import cn.iocoder.yudao.ssodemo.framework.core.util.SecurityUtils;  
5 -import cn.iocoder.yudao.ssodemo.framework.core.util.ServletUtils;  
6 -import lombok.extern.slf4j.Slf4j;  
7 -import org.springframework.http.HttpStatus;  
8 -import org.springframework.security.access.AccessDeniedException;  
9 -import org.springframework.security.web.access.AccessDeniedHandler;  
10 -import org.springframework.security.web.access.ExceptionTranslationFilter;  
11 -import org.springframework.stereotype.Component;  
12 -  
13 -import jakarta.servlet.FilterChain;  
14 -import jakarta.servlet.ServletException;  
15 -import jakarta.servlet.http.HttpServletRequest;  
16 -import jakarta.servlet.http.HttpServletResponse;  
17 -import java.io.IOException;  
18 -  
19 -/**  
20 - * 访问一个需要认证的 URL 资源，已经认证（登录）但是没有权限的情况下，返回 {@link GlobalErrorCodeConstants#FORBIDDEN} 错误码。  
21 - *  
22 - * 补充：Spring Security 通过 {@link ExceptionTranslationFilter#handleAccessDeniedException(HttpServletRequest, HttpServletResponse, FilterChain, AccessDeniedException)} 方法，调用当前类  
23 - *  
24 - * @author 芋道源码  
25 - */  
26 -@Component  
27 -@SuppressWarnings("JavadocReference")  
28 -@Slf4j  
29 -public class AccessDeniedHandlerImpl implements AccessDeniedHandler {  
30 -  
31 - @Override  
32 - public void handle(HttpServletRequest request, HttpServletResponse response, AccessDeniedException e)  
33 - throws IOException, ServletException {  
34 - // 打印 warn 的原因是，不定期合并 warn，看看有没恶意破坏  
35 - log.warn("[commence][访问 URL({}) 时，用户({}) 权限不够]", request.getRequestURI(),  
36 - SecurityUtils.getLoginUserId(), e);  
37 - // 返回 403  
38 - CommonResult<Object> result = new CommonResult<>();  
39 - result.setCode(HttpStatus.FORBIDDEN.value());  
40 - result.setMsg("没有该操作权限");  
41 - ServletUtils.writeJSON(response, result);  
42 - }  
43 -  
44 -}  
yudao-example/yudao-sso-demo-by-password/src/main/java/cn/iocoder/yudao/ssodemo/framework/core/handler/AuthenticationEntryPointImpl.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.framework.core.handler;  
2 -  
3 -import cn.iocoder.yudao.ssodemo.client.dto.CommonResult;  
4 -import cn.iocoder.yudao.ssodemo.framework.core.util.ServletUtils;  
5 -import lombok.extern.slf4j.Slf4j;  
6 -import org.springframework.http.HttpStatus;  
7 -import org.springframework.security.core.AuthenticationException;  
8 -import org.springframework.security.web.AuthenticationEntryPoint;  
9 -import org.springframework.security.web.access.ExceptionTranslationFilter;  
10 -import org.springframework.stereotype.Component;  
11 -  
12 -import jakarta.servlet.FilterChain;  
13 -import jakarta.servlet.http.HttpServletRequest;  
14 -import jakarta.servlet.http.HttpServletResponse;  
15 -  
16 -/**  
17 - * 访问一个需要认证的 URL 资源，但是此时自己尚未认证（登录）的情况下，返回 {@link GlobalErrorCodeConstants#UNAUTHORIZED} 错误码，从而使前端重定向到登录页  
18 - *  
19 - * 补充：Spring Security 通过 {@link ExceptionTranslationFilter#sendStartAuthentication(HttpServletRequest, HttpServletResponse, FilterChain, AuthenticationException)} 方法，调用当前类  
20 - */  
21 -@Component  
22 -@Slf4j  
23 -@SuppressWarnings("JavadocReference") // 忽略文档引用报错  
24 -public class AuthenticationEntryPointImpl implements AuthenticationEntryPoint {  
25 -  
26 - @Override  
27 - public void commence(HttpServletRequest request, HttpServletResponse response, AuthenticationException e) {  
28 - log.debug("[commence][访问 URL({}) 时，没有登录]", request.getRequestURI(), e);  
29 - // 返回 401  
30 - CommonResult<Object> result = new CommonResult<>();  
31 - result.setCode(HttpStatus.UNAUTHORIZED.value());  
32 - result.setMsg("账号未登录");  
33 - ServletUtils.writeJSON(response, result);  
34 - }  
35 -  
36 -}  
yudao-example/yudao-sso-demo-by-password/src/main/java/cn/iocoder/yudao/ssodemo/framework/core/util/SecurityUtils.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.framework.core.util;  
2 -  
3 -import cn.iocoder.yudao.ssodemo.framework.core.LoginUser;  
4 -import org.springframework.lang.Nullable;  
5 -import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;  
6 -import org.springframework.security.core.Authentication;  
7 -import org.springframework.security.core.context.SecurityContext;  
8 -import org.springframework.security.core.context.SecurityContextHolder;  
9 -import org.springframework.security.web.authentication.WebAuthenticationDetailsSource;  
10 -import org.springframework.util.StringUtils;  
11 -  
12 -import jakarta.servlet.http.HttpServletRequest;  
13 -import java.util.Collections;  
14 -  
15 -/**  
16 - * 安全服务工具类  
17 - *  
18 - * @author 芋道源码  
19 - */  
20 -public class SecurityUtils {  
21 -  
22 - public static final String AUTHORIZATION_BEARER = "Bearer";  
23 -  
24 - private SecurityUtils() {}  
25 -  
26 - /**  
27 - * 从请求中，获得认证 Token  
28 - *  
29 - * @param request 请求  
30 - * @param header 认证 Token 对应的 Header 名字  
31 - * @return 认证 Token  
32 - */  
33 - public static String obtainAuthorization(HttpServletRequest request, String header) {  
34 - String authorization = request.getHeader(header);  
35 - if (!StringUtils.hasText(authorization)) {  
36 - return null;  
37 - }  
38 - int index = authorization.indexOf(AUTHORIZATION_BEARER + " ");  
39 - if (index == -1) { // 未找到  
40 - return null;  
41 - }  
42 - return authorization.substring(index + 7).trim();  
43 - }  
44 -  
45 - /**  
46 - * 获得当前认证信息  
47 - *  
48 - * @return 认证信息  
49 - */  
50 - public static Authentication getAuthentication() {  
51 - SecurityContext context = SecurityContextHolder.getContext();  
52 - if (context == null) {  
53 - return null;  
54 - }  
55 - return context.getAuthentication();  
56 - }  
57 -  
58 - /**  
59 - * 获取当前用户  
60 - *  
61 - * @return 当前用户  
62 - */  
63 - @Nullable  
64 - public static LoginUser getLoginUser() {  
65 - Authentication authentication = getAuthentication();  
66 - if (authentication == null) {  
67 - return null;  
68 - }  
69 - return authentication.getPrincipal() instanceof LoginUser ? (LoginUser) authentication.getPrincipal() : null;  
70 - }  
71 -  
72 - /**  
73 - * 获得当前用户的编号，从上下文中  
74 - *  
75 - * @return 用户编号  
76 - */  
77 - @Nullable  
78 - public static Long getLoginUserId() {  
79 - LoginUser loginUser = getLoginUser();  
80 - return loginUser != null ? loginUser.getId() : null;  
81 - }  
82 -  
83 - /**  
84 - * 设置当前用户  
85 - *  
86 - * @param loginUser 登录用户  
87 - * @param request 请求  
88 - */  
89 - public static void setLoginUser(LoginUser loginUser, HttpServletRequest request) {  
90 - // 创建 Authentication，并设置到上下文  
91 - Authentication authentication = buildAuthentication(loginUser, request);  
92 - SecurityContextHolder.getContext().setAuthentication(authentication);  
93 - }  
94 -  
95 - private static Authentication buildAuthentication(LoginUser loginUser, HttpServletRequest request) {  
96 - // 创建 UsernamePasswordAuthenticationToken 对象  
97 - UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(  
98 - loginUser, null, Collections.emptyList());  
99 - authenticationToken.setDetails(new WebAuthenticationDetailsSource().buildDetails(request));  
100 - return authenticationToken;  
101 - }  
102 -  
103 -}  
yudao-example/yudao-sso-demo-by-password/src/main/java/cn/iocoder/yudao/ssodemo/framework/core/util/ServletUtils.java deleted
View file @1d00261
1 -package cn.iocoder.yudao.ssodemo.framework.core.util;  
2 -  
3 -import cn.hutool.extra.servlet.JakartaServletUtil;  
4 -import cn.hutool.extra.servlet.ServletUtil;  
5 -import cn.hutool.json.JSONUtil;  
6 -import org.springframework.http.MediaType;  
7 -  
8 -import jakarta.servlet.http.HttpServletResponse;  
9 -  
10 -/**  
11 - * 客户端工具类  
12 - *  
13 - * @author 芋道源码  
14 - */  
15 -public class ServletUtils {  
16 -  
17 - /**  
18 - * 返回 JSON 字符串  
19 - *  
20 - * @param response 响应  
21 - * @param object 对象，会序列化成 JSON 字符串  
22 - */  
23 - @SuppressWarnings("deprecation") // 必须使用 APPLICATION_JSON_UTF8_VALUE，否则会乱码  
24 - public static void writeJSON(HttpServletResponse response, Object object) {  
25 - String content = JSONUtil.toJsonStr(object);  
26 - JakartaServletUtil.write(response, content, MediaType.APPLICATION_JSON_UTF8_VALUE);  
27 - }  
28 -  
29 - public static void write(HttpServletResponse response, String text, String contentType) {  
30 - JakartaServletUtil.write(response, text, contentType);  
31 - }  
32 -  
33 -}  
yudao-example/yudao-sso-demo-by-password/src/main/resources/application.yaml deleted
View file @1d00261
1 -server:  
2 - port: 18080  
yudao-example/yudao-sso-demo-by-password/src/main/resources/static/index.html deleted
View file @1d00261
1 -<!DOCTYPE html>  
2 -<html lang="en">  
3 -<head>  
4 - <meta charset="UTF-8">  
5 - <title>首页</title>  
6 - <!-- jQuery：操作 dom、发起请求等 -->  
7 - <script src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/2.1.2/jquery.min.js" type="application/javascript"></script>  
8 -  
9 - <script type="application/javascript">  
10 -  
11 - /**  
12 - * 跳转单点登录  
13 - */  
14 - function passwordLogin() {  
15 - window.location.href = '/login.html'  
16 - }  
17 -  
18 - /**  
19 - * 修改昵称  
20 - */  
21 - function updateNickname() {  
22 - const nickname = prompt("请输入新的昵称", "");  
23 - if (!nickname) {  
24 - return;  
25 - }  
26 - // 更新用户的昵称  
27 - const accessToken = localStorage.getItem('ACCESS-TOKEN');  
28 - $.ajax({  
29 - url: "http://127.0.0.1:18080/user/update?nickname=" + nickname,  
30 - method: 'PUT',  
31 - headers: {  
32 - 'Authorization': 'Bearer ' + accessToken  
33 - },  
34 - success: function (result) {  
35 - if (result.code !== 0) {  
36 - alert('更新昵称失败，原因：' + result.msg)  
37 - return;  
38 - }  
39 - alert('更新昵称成功！');  
40 - $('#nicknameSpan').html(nickname);  
41 - }  
42 - });  
43 - }  
44 -  
45 - /**  
46 - * 刷新令牌  
47 - */  
48 - function refreshToken() {  
49 - const refreshToken = localStorage.getItem('REFRESH-TOKEN');  
50 - if (!refreshToken) {  
51 - alert("获取不到刷新令牌");  
52 - return;  
53 - }  
54 - $.ajax({  
55 - url: "http://127.0.0.1:18080/auth/refresh-token?refreshToken=" + refreshToken,  
56 - method: 'POST',  
57 - success: function (result) {  
58 - if (result.code !== 0) {  
59 - alert('刷新访问令牌失败，原因：' + result.msg)  
60 - return;  
61 - }  
62 - alert('更新访问令牌成功！');  
63 - $('#accessTokenSpan').html(result.data.access_token);  
64 -  
65 - // 设置到 localStorage 中  
66 - localStorage.setItem('ACCESS-TOKEN', result.data.access_token);  
67 - localStorage.setItem('REFRESH-TOKEN', result.data.refresh_token);  
68 - }  
69 - });  
70 - }  
71 -  
72 - /**  
73 - * 登出，删除访问令牌  
74 - */  
75 - function logout() {  
76 - const accessToken = localStorage.getItem('ACCESS-TOKEN');  
77 - if (!accessToken) {  
78 - location.reload();  
79 - return;  
80 - }  
81 - $.ajax({  
82 - url: "http://127.0.0.1:18080/auth/logout",  
83 - method: 'POST',  
84 - headers: {  
85 - 'Authorization': 'Bearer ' + accessToken  
86 - },  
87 - success: function (result) {  
88 - if (result.code !== 0) {  
89 - alert('退出登录失败，原因：' + result.msg)  
90 - return;  
91 - }  
92 - alert('退出登录成功！');  
93 - // 删除 localStorage 中  
94 - localStorage.removeItem('ACCESS-TOKEN');  
95 - localStorage.removeItem('REFRESH-TOKEN');  
96 -  
97 - location.reload();  
98 - }  
99 - });  
100 - }  
101 -  
102 - $(function () {  
103 - const accessToken = localStorage.getItem('ACCESS-TOKEN');  
104 - // 情况一：未登录  
105 - if (!accessToken) {  
106 - $('#noLoginDiv').css("display", "block");  
107 - return;  
108 - }  
109 -  
110 - // 情况二：已登录  
111 - $('#yesLoginDiv').css("display", "block");  
112 - $('#accessTokenSpan').html(accessToken);  
113 - // 获得登录用户的信息  
114 - $.ajax({  
115 - url: "http://127.0.0.1:18080/user/get",  
116 - method: 'GET',  
117 - headers: {  
118 - 'Authorization': 'Bearer ' + accessToken  
119 - },  
120 - success: function (result) {  
121 - if (result.code !== 0) {  
122 - alert('获得个人信息失败，原因：' + result.msg)  
123 - return;  
124 - }  
125 - $('#nicknameSpan').html(result.data.nickname);  
126 - }  
127 - });  
128 - })  
129 - </script>  
130 -</head>  
131 -<body>  
132 -<!-- 情况一：未登录：1）跳转 ruoyi-vue-pro 的 SSO 登录页 -->  
133 -<div id="noLoginDiv" style="display: none">  
134 - 您未登录，点击 <a href="#" onclick="passwordLogin()">跳转 </a> 账号密码登录  
135 -</div>  
136 -  
137 -<!-- 情况二：已登录：1）展示用户信息；2）刷新访问令牌；3）退出登录 -->  
138 -<div id="yesLoginDiv" style="display: none">  
139 - 您已登录！<button onclick="logout()">退出登录</button> <br />  
140 - 昵称：<span id="nicknameSpan"> 加载中... </span> <button onclick="updateNickname()">修改昵称</button> <br />  
141 - 访问令牌：<span id="accessTokenSpan"> 加载中... </span> <button onclick="refreshToken()">刷新令牌</button> <br />  
142 -</div>  
143 -</body>  
144 -<style>  
145 - body { /** 页面居中 */  
146 - border-radius: 20px;  
147 - height: 350px;  
148 - position: absolute;  
149 - left: 50%;  
150 - top: 50%;  
151 - transform: translate(-50%,-50%);  
152 - }  
153 -</style>  
154 -</html>  
yudao-example/yudao-sso-demo-by-password/src/main/resources/static/login.html deleted
View file @1d00261
1 -<!DOCTYPE html>  
2 -<html lang="en">  
3 -<head>  
4 - <meta charset="UTF-8">  
5 - <title>登录</title>  
6 - <!-- jQuery：操作 dom、发起请求等 -->  
7 - <script src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/2.1.2/jquery.min.js" type="application/javascript"></script>  
8 -  
9 - <script type="application/javascript">  
10 -  
11 - /**  
12 - * 账号密码登录  
13 - */  
14 - function login() {  
15 - const clientId = 'yudao-sso-demo-by-password'; // 可以改写成，你的 clientId  
16 - const clientSecret = 'test'; // 可以改写成，你的 clientSecret  
17 - const grantType = 'password'; // 密码模式  
18 -  
19 - // 账号 + 密码  
20 - const username = $('#username').val();  
21 - const password = $('#password').val();  
22 - if (username.length === 0 || password.length === 0) {  
23 - alert('账号或密码未输入');  
24 - return;  
25 - }  
26 -  
27 - // 发起请求  
28 - $.ajax({  
29 - url: "http://127.0.0.1:48080/admin-api/system/oauth2/token?"  
30 - // 客户端  
31 - + "client_id=" + clientId  
32 - + "&client_secret=" + clientSecret  
33 - // 密码模式的参数  
34 - + "&grant_type=" + grantType  
35 - + "&username=" + username  
36 - + "&password=" + password  
37 - + '&scope=user.read user.write',  
38 - method: 'POST',  
39 - headers: {  
40 - 'tenant-id': '1', // 多租户编号，写死  
41 - },  
42 - success: function (result) {  
43 - if (result.code !== 0) {  
44 - alert('登录失败，原因：' + result.msg)  
45 - return;  
46 - }  
47 - // 设置到 localStorage 中  
48 - localStorage.setItem('ACCESS-TOKEN', result.data.access_token);  
49 - localStorage.setItem('REFRESH-TOKEN', result.data.refresh_token);  
50 -  
51 - // 提示登录成功  
52 - alert('登录成功！点击确认，跳转回首页');  
53 - window.location.href = '/index.html';  
54 - }  
55 - });  
56 - }  
57 - </script>  
58 -</head>  
59 -<body>  
60 -账号：<input id="username" value="admin" /> <br />  
61 -密码：<input id="password" value="admin123" > <br />  
62 -<button style="float: right; margin-top: 5px;" onclick="login()">登录</button>  
63 -</body>  
64 -<style>  
65 - body { /** 页面居中 */  
66 - border-radius: 20px;  
67 - height: 350px;  
68 - position: absolute;  
69 - left: 50%;  
70 - top: 50%;  
71 - transform: translate(-50%,-50%);  
72 - }  
73 -</style>  
74 -</html>