基于SpringBoot实现用户身份验证工具

<!-- 设置session失效，单位分 --> <session-config>   <session-timeout>1</session-timeout> </session-config>

server.session.cookie.http-only= ＃是否开启HttpOnly server.session.timeout = ＃会话超时（秒） 

import org.springframework.beans.factory.annotation.Autowired; import org.springframework.boot.web.servlet.ServletComponentScan; import org.springframework.context.ApplicationContext; import org.springframework.stereotype.Component; import org.springframework.web.context.support.WebApplicationContextUtils; import javax.servlet.*; import javax.servlet.annotation.WebFilter; import javax.servlet.http.HttpServletRequest; import java.io.IOException; @Component @ServletComponentScan//让@WebFilter起作用 @WebFilter(urlPatterns = "/*") public class MyFilter implements Filter{   @Autowired   private SessionKeyConfigProperties sessionKeyConfigProperties;   @Override   public void init(FilterConfig filterConfig) throws ServletException {   }   @Override   public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain)       throws IOException, ServletException {     HttpServletRequest httpServletRequest = (HttpServletRequest) servletRequest;     System.out.println(sessionKeyConfigProperties.getUserTypeKey());     //通过session获取身份信息     AuthenticationUtil authenticationUtil = new AuthenticationUtil(sessionKeyConfigProperties);     UserTypeEnum userType = authenticationUtil.getUserAuthentication(httpServletRequest.getSession());     //进行认证     //认证失败     if(userType == null){       //...     }     //用户不是管理员     if(userType != UserTypeEnum.ADMIN){       //...     }     filterChain.doFilter(servletRequest,servletResponse);   }   @Override   public void destroy() {   } } 

import org.apache.shiro.web.session.HttpServletSession; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpSession; public class AuthenticationUtil {   private SessionKeyConfigProperties configProperties;   public AuthenticationUtil(SessionKeyConfigProperties configProperties) {     this.configProperties = configProperties;   }   /**    * 从session中获取用户的身份类型    * @param session    * @return 身份类型    */   public UserTypeEnum getUserAuthentication(HttpSession session){     //获取session中的用户信息记录     Object userType = session.getAttribute(configProperties.getUserTypeKey());     //获取session中记录的用户类型     if(userType != null && userType instanceof UserTypeEnum) {       return (UserTypeEnum)userType;     }     return null;   }   /**    * 将用户的身份写入session中    * @param session    * @param userType    */   public void setUserAuthentication(HttpSession session,UserTypeEnum userType){     session.setAttribute(configProperties.getUserTypeKey(),userType);   } } 

import org.springframework.beans.factory.annotation.Value; import org.springframework.context.annotation.Configuration;import org.springframework.context.annotation.PropertySource; import org.springframework.stereotype.Component; @Configuration @PropertySource("classpath:config/SessiionKeyConfig.properties") @Component public class SessionKeyConfigProperties {   @Value("${user_type_key}")   private String userTypeKey;   public String getUserTypeKey() {     return userTypeKey;   }   public void setUserTypeKey(String userTypeKey) {     this.userTypeKey = userTypeKey;   } } 

public enum UserTypeEnum {   ADMIN,   USER }