完成jwt拦截器和从token中获取当前登录的用户id

目前除登录以外的所有操作都会经过拦截器，可以在WebConfig中设置拦截器忽略的接口
获取用户id不需要手动输入了，直接通过UserContext获取当前登录的用户id
为动态删除，动态修改等我负责的功能添加身份验证，用户id不匹配则会跳出异常
增加token过期验证

src/main/java/com/bao/dating/config/WebConfig.java

@@ -0,0 +1,31 @@
+package com.bao.dating.config;
+
+
+import com.bao.dating.interceptor.TokenInterceptor;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+
+@Configuration
+public class WebConfig implements WebMvcConfigurer {
+
+    @Autowired
+    private TokenInterceptor tokenInterceptor;
+
+    /**
+     * 添加拦截器到Spring MVC配置中
+     * @param registry 拦截器注册中心
+     */
+    @Override
+    public void addInterceptors(InterceptorRegistry registry) {
+        //注册自定义拦截器对象
+        registry.addInterceptor(tokenInterceptor)
+                // 拦截所有请求
+                .addPathPatterns("/**")
+                // 忽略的接口
+                .excludePathPatterns(
+                        "/user/login"
+                );
+    }
+}

src/main/java/com/bao/dating/context/UserContext.java

@@ -0,0 +1,33 @@
+package com.bao.dating.context;
+
+/**
+ * 用户上下文类
+ * @author lenovo
+ */
+public class UserContext {
+
+    private static final ThreadLocal<Long> userHolder = new ThreadLocal<>();
+
+    /**
+     * 设置当前线程的用户ID
+     * @param userId 用户ID
+     */
+    public static void setUserId(Long userId) {
+        userHolder.set(userId);
+    }
+
+    /**
+     * 获取当前线程的用户ID
+     * @return 当前用户ID，如果未设置则返回null
+     */
+    public static Long getUserId() {
+        return userHolder.get();
+    }
+
+    /**
+     * 清除当前线程的用户ID
+     */
+    public static void clear() {
+        userHolder.remove();
+    }
+}

src/main/java/com/bao/dating/controller/PostController.java

@@ -34,13 +34,12 @@ public class PostController {
     /**
      * 发布动态接口 - JSON格式请求
      * @param postDTO 动态信息
-     * @param userId 用户ID
      * @return 发布的动态对象
      */
     @PostMapping(consumes = "application/json")
-    public Result<Post> createPostJson(@RequestBody PostRequestDTO postDTO, @RequestParam Long userId) {
+    public Result<Post> createPostJson(@RequestBody PostRequestDTO postDTO) {
         // 调用 Service 层处理发布动态业务逻辑
-        Post result = postService.createPost(userId, postDTO);
+        Post result = postService.createPost(postDTO);
         return Result.success(ResultCode.SUCCESS_REVIEW, "动态发布成功，等待审核。", result);
     }
 

src/main/java/com/bao/dating/controller/UserController.java

@@ -1,9 +1,12 @@
 package com.bao.dating.controller;
 
+import com.bao.dating.common.Result;
+import com.bao.dating.common.ResultCode;
+import com.bao.dating.pojo.dto.UserLoginDTO;
+import com.bao.dating.pojo.vo.UserLoginVO;
 import com.bao.dating.service.UserService;
 import org.springframework.beans.factory.annotation.Autowired;
-import org.springframework.web.bind.annotation.RequestMapping;
-import org.springframework.web.bind.annotation.RestController;
+import org.springframework.web.bind.annotation.*;
 
 @RestController
 @RequestMapping("/user")
@@ -11,4 +14,14 @@ public class UserController {
 
     @Autowired
     private UserService userService;
+
+    /**
+     * 登录
+     * @param userLoginDTO 登录参数
+     */
+    @PostMapping("/login")
+    public Result<UserLoginVO> login(@RequestBody UserLoginDTO userLoginDTO) {
+        UserLoginVO userloginVO = userService.userLogin(userLoginDTO);
+        return Result.success(ResultCode.SUCCESS, "登录成功", userloginVO);
+    }
 }

src/main/java/com/bao/dating/interceptor/TokenInterceptor.java

@@ -0,0 +1,79 @@
+package com.bao.dating.interceptor;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+
+import com.bao.dating.context.UserContext;
+import com.bao.dating.util.JwtUtil;
+import io.jsonwebtoken.Claims;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Component;
+import org.springframework.web.method.HandlerMethod;
+import org.springframework.web.servlet.HandlerInterceptor;
+
+/**
+ * HttpToken拦截器类
+ * 用于拦截请求并验证JWT token的有效性，同时从token中解析用户信息
+ */
+@Slf4j
+@Component
+public class TokenInterceptor implements HandlerInterceptor {
+    /**
+     * 在请求处理之前进行拦截
+     * 从请求头或URL参数中获取token，验证其有效性，并将用户ID保存到ThreadLocal中
+     * @param request HTTP请求对象
+     * @param response HTTP响应对象
+     * @param handler 处理器
+     * @return 验证通过返回true，否则返回false
+     * @throws Exception 异常
+     */
+    @Override
+    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
+
+        //判断当前拦截到的是Controller的方法还是其他资源
+        if (!(handler instanceof HandlerMethod)) {
+            //当前拦截到的不是动态方法，直接放行
+            return true;
+        }
+        // 从 header 获取 token
+        String token = request.getHeader("token");
+        
+        try {
+            log.info("jwt校验: {}", token);
+            
+            // 验证 token 是否有效（包括是否过期）
+            if (!JwtUtil.validateToken(token)) {
+                log.error("Token 无效或已过期");
+                response.setStatus(401);
+                return false;
+            }
+            
+            // 解析 token
+            String userId = JwtUtil.getSubjectFromToken(token);
+            log.info("用户: {}", userId);
+            
+            // 保存 userId 到 ThreadLocal
+            UserContext.setUserId(Long.valueOf(userId));
+            return true;
+        } catch (Exception e) {
+            log.error("Token 校验失败: {}", e.getMessage());
+            response.setStatus(401);
+            return false;
+        }
+    }
+
+    /**
+     * 在请求完成之后执行清理工作
+     * 清除保存在ThreadLocal中的用户ID，防止内存泄漏
+     * @param request HTTP请求对象
+     * @param response HTTP响应对象
+     * @param handler 处理器
+     * @param ex 异常对象
+     * @throws Exception 异常
+     */
+    @Override
+    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
+        UserContext.clear();
+    }
+
+}

src/main/java/com/bao/dating/mapper/UserMapper.java

@@ -1,7 +1,16 @@
 package com.bao.dating.mapper;
 
+import com.bao.dating.pojo.entity.User;
 import org.apache.ibatis.annotations.Mapper;
 
 @Mapper
 public interface UserMapper {
+
+    /**
+     * 根据用户名查询用户
+     *
+     * @param username 用户名
+     * @return 用户
+     */
+    User getByUsername(String username);
 }

src/main/java/com/bao/dating/pojo/dto/UserLoginDTO.java

@@ -0,0 +1,14 @@
+package com.bao.dating.pojo.dto;
+
+import lombok.Data;
+
+import java.io.Serializable;
+
+/**
+ * 用户登录数据传输对象
+ */
+@Data
+public class UserLoginDTO implements Serializable {
+    private String username;
+    private String password;
+}

src/main/java/com/bao/dating/service/PostService.java

@@ -17,11 +17,10 @@ public interface PostService {
 
     /**
      * 创建动态
-     * @param userId 用户ID
      * @param postRequestDTO 动态数据传输对象
      * @return 创建的动态对象
      */
-    Post createPost(Long userId, PostRequestDTO postRequestDTO);
+    Post createPost(PostRequestDTO postRequestDTO);
 
     /**
      * 批量删除动态

src/main/java/com/bao/dating/service/UserService.java

@@ -1,4 +1,13 @@
 package com.bao.dating.service;
 
+import com.bao.dating.pojo.dto.UserLoginDTO;
+import com.bao.dating.pojo.vo.UserLoginVO;
+
 public interface UserService {
+    /**
+     * 登录
+     * @param userLoginDTO 登录参数
+     * @return 登录结果
+     */
+    UserLoginVO userLogin(UserLoginDTO userLoginDTO);
 }

src/main/java/com/bao/dating/service/impl/PostServiceImpl.java

@@ -2,6 +2,7 @@ package com.bao.dating.service.impl;
 
 import com.bao.dating.common.aliyun.GreenImageScan;
 import com.bao.dating.common.aliyun.GreenTextScan;
+import com.bao.dating.context.UserContext;
 import com.bao.dating.mapper.PostMapper;
 import com.bao.dating.pojo.dto.PostRequestDTO;
 import com.bao.dating.pojo.entity.Post;
@@ -85,15 +86,15 @@ public class PostServiceImpl implements PostService {
     /**
      * 创建动态
      *
-     * @param userId 用户ID
      * @param postRequestDTO 动态数据传输对象
      * @return 创建的动态对象
      */
     @Override
-    public Post createPost(Long userId, PostRequestDTO postRequestDTO) {
+    public Post createPost(PostRequestDTO postRequestDTO) {
 
         // 创建动态对象
         Post post = new Post();
+        Long userId = UserContext.getUserId();
         post.setUserId(userId);
         post.setContent(postRequestDTO.getContent());
         post.setTags(postRequestDTO.getTags());
@@ -165,6 +166,20 @@ public class PostServiceImpl implements PostService {
     @Override
     @Transactional(rollbackFor = Exception.class)
     public int deletePostById(List<Long> postIds) {
+        // 判断用户权限
+        Long userId = UserContext.getUserId();
+
+        // 遍历所有要删除的帖子ID，验证权限
+        for (Long postId : postIds) {
+            Post post = postMapper.selectById(postId);
+            if (post == null) {
+                throw new RuntimeException("动态不存在");
+            }
+            // 验证用户权限
+            if (post.getUserId() == null || !post.getUserId().equals(userId)) {
+                throw new RuntimeException("无权限删除此动态");
+            }
+        }
         // 批量删除动态
         return postMapper.deletePostByIds(postIds);
     }
@@ -177,11 +192,15 @@ public class PostServiceImpl implements PostService {
      */
     @Override
     public PostEditVO getPostForEdit(Long postId) {
-
         Post post = postMapper.selectById(postId);
         if (post == null) {
             throw new RuntimeException("动态不存在");
         }
+        // 判断用户权限
+        Long userId = UserContext.getUserId();
+        if (post.getUserId() == null || !post.getUserId().equals(userId)){
+            throw new RuntimeException("无权限查看此动态");
+        }
         PostEditVO postEditVO = new PostEditVO();
         BeanUtils.copyProperties(post, postEditVO);
         return postEditVO;
@@ -200,6 +219,11 @@ public class PostServiceImpl implements PostService {
         if (post == null) {
             throw new RuntimeException("动态不存在");
         }
+        // 判断用户权限
+        Long userId = UserContext.getUserId();
+        if (post.getUserId() == null || !post.getUserId().equals(userId)){
+            throw new RuntimeException("无权限修改此动态");
+        }
         post.setContent(postRequestDTO.getContent());
         if (postRequestDTO.getMediaOssKeys() != null && !postRequestDTO.getMediaOssKeys().isEmpty()) {
             post.setMediaOssKeys(postRequestDTO.getMediaOssKeys());

src/main/java/com/bao/dating/service/impl/UserServiceImpl.java

@@ -1,7 +1,12 @@
 package com.bao.dating.service.impl;
 
 import com.bao.dating.mapper.UserMapper;
+import com.bao.dating.pojo.dto.UserLoginDTO;
+import com.bao.dating.pojo.entity.User;
+import com.bao.dating.pojo.vo.UserLoginVO;
 import com.bao.dating.service.UserService;
+import com.bao.dating.util.JwtUtil;
+import com.bao.dating.util.MD5Util;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Service;
 
@@ -10,4 +15,34 @@ public class UserServiceImpl implements UserService {
 
     @Autowired
     private UserMapper userMapper;
+
+    @Override
+    public UserLoginVO userLogin(UserLoginDTO userLoginDTO) {
+        // 参数校验
+        if (userLoginDTO == null || userLoginDTO.getUsername() == null || userLoginDTO.getPassword() == null) {
+            throw new RuntimeException("用户名或密码不能为空");
+        }
+        // 查询用户
+        User user = userMapper.getByUsername(userLoginDTO.getUsername());
+        if (user == null){
+            throw new RuntimeException("用户不存在");
+        }
+        // 密码校验
+        boolean match = MD5Util.verifyWithSalt(
+                userLoginDTO.getPassword(),
+                user.getSalt(),
+                user.getPasswordHash()
+        );
+        if (!match){
+            throw new RuntimeException("密码错误");
+        }
+        // 生成token
+        String token = JwtUtil.generateToken(String.valueOf(user.getUserId()));
+        // 封装返回
+        UserLoginVO userLoginVO = new UserLoginVO();
+        userLoginVO.setUserId(user.getUserId());
+        userLoginVO.setNickname(user.getNickname());
+        userLoginVO.setToken(token);
+        return userLoginVO;
+    }
 }

src/main/resources/com/bao/dating/mapper/UserMapper.xml

@@ -4,5 +4,8 @@
 
 <mapper namespace="com.bao.dating.mapper.UserMapper">
 
+     <select id="getByUsername" resultType="com.bao.dating.pojo.entity.User">
+        SELECT * FROM user WHERE user_name = #{userName}
+    </select>
 
 </mapper>