使用jersey实现jwt认证

package cc.vinny.jersey;

import io.jsonwebtoken.Jwts;
import io.jsonwebtoken.SignatureAlgorithm;
import javax.ws.rs.POST;
import javax.ws.rs.Path;
import javax.ws.rs.Produces;
import javax.ws.rs.core.MediaType;
import javax.ws.rs.core.Response;
import java.util.Date;

@Path("authentication")
public class AuthenticationResource {

    @POST
    @Path("/login")
    @Produces(MediaType.APPLICATION_JSON)
    public Response authLogin(User user) {
        String username = user.getUsername();
        String password = user.getPassword();

        // TODO 进行授权登录验证操作，这里做示例
        if ("admin".equals(username) && "admin".equals(password)) {
            long currentTimeMillis = System.currentTimeMillis();
            Date now = new Date(currentTimeMillis);
            Date expireTime = new Date(currentTimeMillis + 86400000);   // 失效时间24小时后
            System.out.println(now + " ~ " + expireTime);

            String jwt = Jwts.builder()
                    .setId("1") // 设置版本
                    .setAudience("user")    // 设置角色
                    .signWith(SignatureAlgorithm.HS256, "THIS_SECURITY_KEY")    // 设置加密类型及密钥
                    .setSubject(username)   // 设置标题
                    .setIssuedAt(now)       // 设置签发时间
                    .setExpiration(expireTime)  // 设置过期时间
                    .claim("email", "[email protected]")    // 可以自定义属性
                    .compact();

            return Response.status(Response.Status.CREATED).entity("{\"jwt\":\"" + jwt + "\"}").build();
        }

        return Response.status(Response.Status.UNAUTHORIZED).build();
    }
}

package cc.vinny.jersey;

import io.jsonwebtoken.Claims;
import io.jsonwebtoken.ExpiredJwtException;
import io.jsonwebtoken.Jwts;
import org.glassfish.jersey.server.ContainerRequest;

import javax.annotation.Priority;
import javax.ws.rs.Priorities;
import javax.ws.rs.container.ContainerRequestContext;
import javax.ws.rs.container.ContainerRequestFilter;
import javax.ws.rs.core.Response;
import javax.ws.rs.ext.Provider;

@Provider
@Priority(Priorities.AUTHENTICATION)    // 过滤器的最高优先级
public class ResourceFilter implements ContainerRequestFilter {

    public void filter(ContainerRequestContext ctx) {
        String method = ctx.getMethod().toLowerCase();
        String path = ((ContainerRequest) ctx).getPath(true).toLowerCase();
        // 过滤非验证资源，如授权登录、注册等静态资源
        if ("post".equals(method) && "authentication/login".equals(path)) {
            // ctx.setSecurityContext(new SecurityContextAuthorizer(uriInfo,new AuthorPricinple(name), new String[]{"user"}));
            return;
        }

        Response response = null;
        final String authHeader = ctx.getHeaderString("Authorization");
        if (authHeader == null || !authHeader.startsWith("Bearer ")) {
            response = Response.status(Response.Status.UNAUTHORIZED)
                    .entity("Missing or invalid Authorization header").build();
        } else {
            final String token = authHeader.substring(7);
            try {
                Claims jwts = Jwts.parser()
                        .setSigningKey("THIS_SECURITY_KEY")
                        .parseClaimsJws(token)
                        .getBody();

                // 根据username查询是否存在此用户
                // String username = jwts.getSubject();
                // 判断token版本是否一致
                // String version = jwts.getId();
            } catch (ExpiredJwtException e) {
                response = Response.status(Response.Status.FORBIDDEN).entity("Token is expired").build();
            } catch (Exception e) {
                response = Response.status(Response.Status.FORBIDDEN).entity("Token is invalid").build();
            }
        }

        ctx.abortWith(response);
    }
}

package cc.vinny.jersey;

import javax.ws.rs.*;
import javax.ws.rs.core.MediaType;
import java.util.Arrays;
import java.util.List;

@Path("user")
public class UserResource {

    @GET
    @Path("/list")
    @Produces(MediaType.APPLICATION_JSON)
    public List<User> listUsers() {
        User [] users = new User[] {
            new User(1, "john", "123321"),
            new User(2, "smith", "000000")
        };
        return Arrays.asList(users);
    }

    @DELETE
    @Path("/{userId}")
    @Produces(MediaType.APPLICATION_JSON)
    public String deleteUser(@PathParam("userId") String userId) { //localhost:8080/web/rest/user/1
        System.out.println(userId);
        return "{\"status\":0}";
    }

    @GET
    @Path("/{userId}")
    @Produces(MediaType.APPLICATION_JSON)
    public User getUser(@PathParam("userId") int userId) { //localhost:8080/web/rest/user/1
        return new User(userId, "john", "123321");
    }

    @POST
    @Path("/create")
    @Produces(MediaType.APPLICATION_JSON)
    public User createUser(User user) {
        return new User(user.getUserId(), user.getUsername(), user.getPassword());
    }

    @PUT
    @Path("/update")
    @Produces(MediaType.APPLICATION_JSON)
    public User updateUser(User user) {
        return new User(user.getUserId(), user.getUsername(), user.getPassword());
    }
}