├── .gitattributes
├── .gitignore
├── README.md
├── pom.xml
└── src
    └── main
        ├── java
            └── com
            │   └── scienjus
            │       ├── controller
            │           └── TokenController.java
            │       ├── domain
            │           └── User.java
            │       ├── model
            │           ├── ResultModel.java
            │           └── ResultStatus.java
            │       └── repository
            │           └── UserRepository.java
        ├── resources
            ├── config.properties
            └── spring.xml
        └── webapp
            ├── WEB-INF
                └── web.xml
            └── index.jsp


/.gitattributes:
--------------------------------------------------------------------------------
 1 | # Auto detect text files and perform LF normalization
 2 | * text=auto
 3 | 
 4 | # Custom for Visual Studio
 5 | *.cs     diff=csharp
 6 | 
 7 | # Standard to msysgit
 8 | *.doc	 diff=astextplain
 9 | *.DOC	 diff=astextplain
10 | *.docx diff=astextplain
11 | *.DOCX diff=astextplain
12 | *.dot  diff=astextplain
13 | *.DOT  diff=astextplain
14 | *.pdf  diff=astextplain
15 | *.PDF	 diff=astextplain
16 | *.rtf	 diff=astextplain
17 | *.RTF	 diff=astextplain
18 | 


--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
 1 | # Windows image file caches
 2 | Thumbs.db
 3 | ehthumbs.db
 4 | 
 5 | # Folder config file
 6 | Desktop.ini
 7 | 
 8 | # Recycle Bin used on file shares
 9 | $RECYCLE.BIN/
10 | 
11 | # Windows Installer files
12 | *.cab
13 | *.msi
14 | *.msm
15 | *.msp
16 | 
17 | # Windows shortcuts
18 | *.lnk
19 | 
20 | # =========================
21 | # Operating System Files
22 | # =========================
23 | 
24 | # OSX
25 | # =========================
26 | 
27 | .DS_Store
28 | .AppleDouble
29 | .LSOverride
30 | 
31 | # Thumbnails
32 | ._*
33 | 
34 | # Files that might appear on external disk
35 | .Spotlight-V100
36 | .Trashes
37 | 
38 | # Directories potentially created on remote AFP share
39 | .AppleDB
40 | .AppleDesktop
41 | Network Trash Folder
42 | Temporary Items
43 | .apdisk
44 | SpringAuthorizationManagerDemo.iml
45 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # spring-authorization-manager-demo
 2 | https://github.com/ScienJus/spring-authorization-manager 的Demo
 3 | 
 4 | 使用方法：
 5 | 
 6 | 需要首先下载`spring-authorization-manager`，将这个jar添加到你的maven私服或本地仓库。
 7 | 
 8 | 下载该项目，并运行。
 9 | 
10 | ###演示正常情况
11 | 
12 | 输入用户名，点击登录，获取 Token。
13 | 
14 | 输入 Token，点击查看登录用户名，会显示刚才输入的用户名。
15 | 
16 | 输入 Token，点击退出登录，会显示退出登录成功。
17 | 
18 | 输入 Token，点击查看登录用户名，会显示未登录。
19 | 
20 | 输入 Token，点击退出登录，会显示未登录。
21 | 
22 | ###演示多用户登录同一账号
23 | 
24 | 输入用户名，点击登录，获取 Token1。
25 | 
26 | 输入同一用户名，点击登录，获取 Token2。
27 | 
28 | 输入 Token2，点击查看登录用户名，会显示刚才输入的用户名。
29 | 
30 | 输入 Token1，点击查看登录用户名，会显示未登录。
31 | 


--------------------------------------------------------------------------------
/pom.xml:
--------------------------------------------------------------------------------
 1 | <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 2 |   xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
 3 |   <modelVersion>4.0.0</modelVersion>
 4 |   <groupId>com.scienjus</groupId>
 5 |   <artifactId>spring-authorization-manager-demo</artifactId>
 6 |   <packaging>war</packaging>
 7 |   <version>1.0-SNAPSHOT</version>
 8 |   <name>spring-authorization-manager-demo</name>
 9 |   <url>http://maven.apache.org</url>
10 | 
11 |   <dependencies>
12 |     <dependency>
13 |     <groupId>com.scienjus</groupId>
14 |     <artifactId>spring-authorization-manager</artifactId>
15 |     <version>1.0-SNAPSHOT</version>
16 |     </dependency>
17 |     <!--Spring MVC依赖-->
18 |     <dependency>
19 |       <groupId>org.springframework</groupId>
20 |       <artifactId>spring-webmvc</artifactId>
21 |       <version>4.2.2.RELEASE</version>
22 |     </dependency>
23 |     <dependency>
24 |       <groupId>org.springframework</groupId>
25 |       <artifactId>spring-context</artifactId>
26 |       <version>4.2.2.RELEASE</version>
27 |     </dependency>
28 |     <dependency>
29 |       <groupId>com.fasterxml.jackson.core</groupId>
30 |       <artifactId>jackson-core</artifactId>
31 |       <version>2.6.3</version>
32 |     </dependency>
33 |     <dependency>
34 |       <groupId>com.fasterxml.jackson.core</groupId>
35 |       <artifactId>jackson-databind</artifactId>
36 |       <version>2.6.3</version>
37 |     </dependency>
38 |     <dependency>
39 |       <groupId>javax.servlet</groupId>
40 |       <artifactId>javax.servlet-api</artifactId>
41 |       <version>3.1.0</version>
42 |     </dependency>
43 |     <!--Redis依赖，只有在使用RedisTokenManager时才需要-->
44 |     <dependency>
45 |       <groupId>redis.clients</groupId>
46 |       <artifactId>jedis</artifactId>
47 |       <version>2.7.3</version>
48 |     </dependency>
49 |   </dependencies>
50 | 
51 |   <build>
52 |     <finalName>${project.artifactId}</finalName>
53 |     <plugins>
54 |       <plugin>
55 |         <groupId>org.apache.maven.plugins</groupId>
56 |         <artifactId>maven-compiler-plugin</artifactId>
57 |         <configuration>
58 |           <source>1.7</source>
59 |           <target>1.7</target>
60 |         </configuration>
61 |       </plugin>
62 |     </plugins>
63 |   </build>
64 | 
65 | </project>
66 | 


--------------------------------------------------------------------------------
/src/main/java/com/scienjus/controller/TokenController.java:
--------------------------------------------------------------------------------
 1 | package com.scienjus.controller;
 2 | 
 3 | import com.scienjus.authorization.annotation.Authorization;
 4 | import com.scienjus.authorization.annotation.CurrentUser;
 5 | import com.scienjus.authorization.manager.TokenManager;
 6 | import com.scienjus.domain.User;
 7 | import com.scienjus.model.ResultModel;
 8 | import org.springframework.beans.factory.annotation.Autowired;
 9 | import org.springframework.http.HttpStatus;
10 | import org.springframework.http.ResponseEntity;
11 | import org.springframework.web.bind.annotation.RequestMapping;
12 | import org.springframework.web.bind.annotation.RequestMethod;
13 | import org.springframework.web.bind.annotation.RequestParam;
14 | import org.springframework.web.bind.annotation.RestController;
15 | 
16 | import java.util.UUID;
17 | 
18 | /**
19 |  * 获取和删除token的请求地址，在Restful设计中其实就对应着登录和退出登录的资源映射
20 |  * @author ScienJus
21 |  * @date 2015/7/30.
22 |  */
23 | @RestController
24 | @RequestMapping("/tokens")
25 | public class TokenController {
26 | 
27 |     @Autowired
28 |     private TokenManager tokenManager;
29 | 
30 |     @RequestMapping(method = RequestMethod.POST)
31 |     public ResponseEntity<ResultModel> createToken(@RequestParam String username) {
32 |         //生成一个token
33 |         String token = UUID.randomUUID().toString();
34 |         tokenManager.createRelationship(username, token);
35 |         return new ResponseEntity<>(ResultModel.ok(token), HttpStatus.OK);
36 |     }
37 | 
38 |     @RequestMapping(method = RequestMethod.GET)
39 |     @Authorization
40 |     public ResponseEntity<ResultModel> getUsername(@CurrentUser User user) {
41 |         //生成一个token
42 |         return new ResponseEntity<>(ResultModel.ok(user.getUsername()), HttpStatus.OK);
43 |     }
44 | 
45 |     @RequestMapping(method = RequestMethod.DELETE)
46 |     @Authorization
47 |     public ResponseEntity<ResultModel> logout(@CurrentUser User user) {
48 |         tokenManager.delRelationshipByKey(user.getUsername());
49 |         return new ResponseEntity<>(ResultModel.ok(), HttpStatus.OK);
50 |     }
51 | 
52 | }
53 | 


--------------------------------------------------------------------------------
/src/main/java/com/scienjus/domain/User.java:
--------------------------------------------------------------------------------
 1 | package com.scienjus.domain;
 2 | 
 3 | /**
 4 |  * 用户
 5 |  * @author ScienJus
 6 |  * @date 2015/7/31.
 7 |  */
 8 | public class User {
 9 |     //用户名
10 |     private String username;
11 | 
12 |     public String getUsername() {
13 |         return username;
14 |     }
15 | 
16 |     public void setUsername(String username) {
17 |         this.username = username;
18 |     }
19 | 
20 | }
21 | 


--------------------------------------------------------------------------------
/src/main/java/com/scienjus/model/ResultModel.java:
--------------------------------------------------------------------------------
 1 | package com.scienjus.model;
 2 | 
 3 | /**
 4 |  * 自定义返回结果
 5 |  * @author XieEnlong
 6 |  * @date 2015/7/14.
 7 |  */
 8 | public class ResultModel {
 9 | 
10 |     /**
11 |      * 返回码
12 |      */
13 |     private int code;
14 | 
15 |     /**
16 |      * 返回结果描述
17 |      */
18 |     private String message;
19 | 
20 |     /**
21 |      * 返回内容
22 |      */
23 |     private Object content;
24 | 
25 |     public int getCode() {
26 |         return code;
27 |     }
28 | 
29 |     public void setCode(int code) {
30 |         this.code = code;
31 |     }
32 | 
33 |     public String getMessage() {
34 |         return message;
35 |     }
36 | 
37 |     public void setMessage(String message) {
38 |         this.message = message;
39 |     }
40 | 
41 |     public Object getContent() {
42 |         return content;
43 |     }
44 | 
45 |     public void setContent(Object content) {
46 |         this.content = content;
47 |     }
48 | 
49 |     public ResultModel(ResultStatus status) {
50 |         this.code = status.getCode();
51 |         this.message = status.getMessage();
52 |         this.content = "";
53 |     }
54 | 
55 |     public ResultModel(ResultStatus status, Object content) {
56 |         this.code = status.getCode();
57 |         this.message = status.getMessage();
58 |         this.content = content;
59 |     }
60 | 
61 |     public static ResultModel ok(Object content) {
62 |         return new ResultModel(ResultStatus.SUCCESS, content);
63 |     }
64 | 
65 |     public static ResultModel ok() {
66 |         return new ResultModel(ResultStatus.SUCCESS);
67 |     }
68 | 
69 | }
70 | 


--------------------------------------------------------------------------------
/src/main/java/com/scienjus/model/ResultStatus.java:
--------------------------------------------------------------------------------
 1 | package com.scienjus.model;
 2 | 
 3 | /**
 4 |  * 自定义请求状态码
 5 |  * @author ScienJus
 6 |  * @date 2015/7/15.
 7 |  */
 8 | public enum ResultStatus {
 9 |     SUCCESS(100, "成功");
10 | 
11 |     /**
12 |      * 返回码
13 |      */
14 |     private int code;
15 | 
16 |     /**
17 |      * 返回结果描述
18 |      */
19 |     private String message;
20 | 
21 |     ResultStatus(int code, String message) {
22 |         this.code = code;
23 |         this.message = message;
24 |     }
25 | 
26 |     public int getCode() {
27 |         return code;
28 |     }
29 | 
30 |     public String getMessage() {
31 |         return message;
32 |     }
33 | 
34 | }
35 | 


--------------------------------------------------------------------------------
/src/main/java/com/scienjus/repository/UserRepository.java:
--------------------------------------------------------------------------------
 1 | package com.scienjus.repository;
 2 | 
 3 | import com.scienjus.authorization.repository.UserModelRepository;
 4 | import com.scienjus.domain.User;
 5 | 
 6 | /**
 7 |  * @author XieEnlong
 8 |  * @date 2015/10/26.
 9 |  */
10 | public class UserRepository implements UserModelRepository {
11 |     @Override
12 |     public Object getCurrentUser(String key) {
13 |         User user = new User();
14 |         user.setUsername(key);
15 |         return user;
16 |     }
17 | }
18 | 


--------------------------------------------------------------------------------
/src/main/resources/config.properties:
--------------------------------------------------------------------------------
1 | redis.host = 192.168.1.222
2 | redis.port = 6379
3 | redis.timeout = 100000
4 | redis.password = 123
5 | 


--------------------------------------------------------------------------------
/src/main/resources/spring.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <beans xmlns="http://www.springframework.org/schema/beans"
 3 |        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 4 |        xmlns:mvc="http://www.springframework.org/schema/mvc" xmlns:context="http://www.springframework.org/schema/context"
 5 |        xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
 6 |                             http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.0.xsd
 7 |                             http://www.springframework.org/schema/mvc http://www.springframework.org/schema/mvc/spring-mvc.xsd">
 8 | 
 9 |        <context:component-scan base-package="com.scienjus" />
10 | 
11 |        <bean class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer">
12 |               <property name="locations">
13 |                      <list>
14 |                             <value>classpath:config.properties</value>
15 |                      </list>
16 |               </property>
17 |        </bean>
18 | 
19 |        <mvc:annotation-driven>
20 |               <mvc:argument-resolvers>
21 |                      <!--配置注入登录用户的解析器-->
22 |                      <bean id="currentUserMethodArgumentResolver" class="com.scienjus.authorization.resolvers.CurrentUserMethodArgumentResolver">
23 |                             <!--需要解析的用户类-->
24 |                             <property name="userModelClass" value="com.scienjus.domain.User" />
25 |                             <!--查询用户的bean-->
26 |                             <property name="userModelRepository" ref="userRepository" />
27 |                      </bean>
28 |               </mvc:argument-resolvers>
29 |        </mvc:annotation-driven>
30 | 
31 |        <!--通过Key获得对应用户的bean-->
32 |        <bean id="userRepository" class="com.scienjus.repository.UserRepository" />
33 | 
34 | 
35 |        <mvc:interceptors>
36 |               <!--身份验证的拦截器-->
37 |               <bean id="authorizationInterceptor" class="com.scienjus.authorization.interceptor.AuthorizationInterceptor">
38 |                      <!--验证信息存储的Http头-->
39 |                      <property name="httpHeaderName" value="authorization" />
40 |                      <!--验证信息通用前缀，例如Bearer-->
41 |                      <property name="httpHeaderPrefix" value="" />
42 |                      <!--验证失败时的错误信息-->
43 |                      <property name="unauthorizedErrorMessage" value="令牌失效，请重新登录" />
44 |                      <!--管理验证信息的bean-->
45 |                      <property name="manager" ref="tokenManager" />
46 |               </bean>
47 |        </mvc:interceptors>
48 | 
49 |        <!--Redis配置-->
50 |        <bean id="jedisPoolConfig" class="redis.clients.jedis.JedisPoolConfig">
51 |        </bean>
52 | 
53 |        <!--Redis连接池-->
54 |        <bean id = "jedisPool" class="redis.clients.jedis.JedisPool">
55 |               <constructor-arg index="0" ref="jedisPoolConfig"/>
56 |               <constructor-arg index="1" value="${redis.host}"/>
57 |               <constructor-arg index="2" value="${redis.port}" type="int"/>
58 |               <constructor-arg index="3" value="${redis.timeout}" type="int"/>
59 |               <constructor-arg index="4" value="${redis.password}"/>
60 |        </bean>
61 | 
62 |        <!--管理验证信息的bean-->
63 |        <bean id="tokenManager" class="com.scienjus.authorization.manager.impl.RedisTokenManager">
64 |               <!--Token失效时间-->
65 |               <property name="tokenExpireSeconds" value="3600" />
66 |               <!--Redis客户端-->
67 |               <property name="jedisPool" ref="jedisPool" />
68 |        </bean>
69 | </beans>


--------------------------------------------------------------------------------
/src/main/webapp/WEB-INF/web.xml:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE web-app PUBLIC
 2 |  "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
 3 |  "http://java.sun.com/dtd/web-app_2_3.dtd" >
 4 | 
 5 | <web-app>
 6 |     <display-name>Archetype Created Web Application</display-name>
 7 | 
 8 |     <context-param>
 9 |         <param-name>contextConfigLocation</param-name>
10 |         <param-value>classpath:spring.xml</param-value>
11 |     </context-param>
12 | 
13 |     <listener>
14 |         <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
15 |     </listener>
16 | 
17 |     <servlet>
18 |         <servlet-name>demo</servlet-name>
19 |         <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
20 |         <init-param>
21 |             <param-name>contextConfigLocation</param-name>
22 |             <param-value>classpath:spring.xml</param-value>
23 |         </init-param>
24 |     </servlet>
25 | 
26 |     <servlet-mapping>
27 |         <servlet-name>demo</servlet-name>
28 |         <url-pattern>/</url-pattern>
29 |     </servlet-mapping>
30 | 
31 |     <welcome-file-list>
32 |         <welcome-file>index.jsp</welcome-file>
33 |         <welcome-file>index.html</welcome-file>
34 |     </welcome-file-list>
35 | </web-app>
36 | 


--------------------------------------------------------------------------------
/src/main/webapp/index.jsp:
--------------------------------------------------------------------------------
 1 | <%@ page contentType="text/html;charset=UTF-8" language="java" %>
 2 | <html>
 3 | <head>
 4 |     <title>Spring Authorization Manager Demo</title>
 5 |     <script src="http://lib.sinaapp.com/js/jquery/1.9.1/jquery-1.9.1.min.js"></script>
 6 | </head>
 7 | <body>
 8 | 
 9 | 用户名：<input type="text" id="username"><br />
10 | 令牌：<input type="text" id="token"><br />
11 | <input type="button" value="登录" id="login" />
12 | <input type="button" value="查看登录用户名" id="show" />
13 | <input type="button" value="退出登录" id="logout" /><br />
14 | 
15 | 结果：
16 | <p id="result" style="color:red;"></p>
17 | 
18 | 演示方式：<br />
19 | <ol>
20 |   <li>点击[查看登录用户名]按钮，提示"未登录"。</li>
21 |   <li>在[用户名]输入框中填入用户名，点击[登录]按钮（用户名可随意填写），得到令牌。</li>
22 |   <li>在[令牌]输入框中填入刚才获得的令牌，点击[查看登录用户名]按钮，会出现刚才输入的用户名。</li>
23 |   <li>在[令牌]输入框中填入刚才获得的令牌，点击[退出登录]按钮，提示"退出登录成功"。</li>
24 |   <li>在[令牌]输入框中填入刚才获得的令牌，点击[查看登录用户名]按钮，提示"未登录"。</li>
25 | </ol>
26 | 
27 | </body>
28 | <script>
29 |   $(document).ready(function(){
30 |     $("#show").click(function() {
31 |       var token = $("#token").val();
32 |       $.ajax({
33 |         type: 'GET',
34 |         url: 'tokens' ,
35 |         success: function(data) {
36 |           $("#result").text(data.content);
37 |           $("#username").val('');
38 |           $("#token").val('');
39 |         },
40 |         error: function() {
41 |           $("#result").text("未登录");
42 |           $("#username").val('');
43 |           $("#token").val('');
44 |         },
45 |         headers: {
46 |           "authorization" : token
47 |         }
48 |       });
49 |     });
50 |     $("#logout").click(function() {
51 |       var token = $("#token").val();
52 |       $.ajax({
53 |         type: 'DELETE',
54 |         url: 'tokens' ,
55 |         success: function() {
56 |           $("#result").text("退出登录成功");
57 |           $("#username").val('');
58 |           $("#token").val('');
59 |         },
60 |         error: function() {
61 |           $("#result").text("未登录");
62 |           $("#username").val('');
63 |           $("#token").val('');
64 |         },
65 |         headers: {
66 |           "authorization" : token
67 |         }
68 |       });
69 |     });
70 |     $("#login").click(function() {
71 |       var username = $("#username").val();
72 |       if (!username) {
73 |         alert("请输入用户名");
74 |         return;
75 |       }
76 |       $.ajax({
77 |         type: 'POST',
78 |         url: 'tokens' ,
79 |         data: "username=" + username,
80 |         success: function(data) {
81 |           $("#result").text(data.content);
82 |           $("#username").val('');
83 |           $("#token").val('');
84 |         }
85 |       });
86 |     });
87 |   });
88 | </script>
89 | </html>
90 | 


--------------------------------------------------------------------------------