// 全局守卫，微信授权
router.beforeEach((to, from, next) => {// 路由发生变化修改页面titleif (to.meta.title) {document.title = to.meta.title}if (process.env.NODE_ENV !== 'development') {const token = window.localStorage.getItem('token')if (token) {if (to.path === '/author') {next({path: '/'})} else {next()}} else {if (to.path !== '/author') {// 保存用户进入的urlwindow.localStorage.setItem('authUrl', to.fullPath)// 跳转到微信授权页面window.location.href = process.env.BASE_URL + '/wx/OAuth2/index'} else {next()}}} else {window.localStorage.setItem('token', 'eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJvUUFFYndSSU5VVlhPLVZoOWhEcDUzX3RNeEgwIn0.eShRG4fVFFv4w2gHnkyh7QDdVpG1meOHSZXOrbq-psE')}next()
})

<template><div>授权中</div>
</template><script>
export default {name: 'Author', data () { return { user: null } }, created () { // url中获取参数token  const wxToken = this.$route.query.token // url中获取参数code  const code = this.$route.query.code // 后端重定向获取参数，判断是否处理成功 200：成功 if (wxToken && Number(code) === 200) { // 将token放入本地缓存  window.localStorage.setItem('token', wxToken) // 从本地缓存中获取用户第一次请求页面URL  const historyUrl = window.localStorage.getItem('authUrl') // 跳转页面 this.$router.push(historyUrl) } else { // 没有拿到后台访问微信返回的token // 清空本地缓存  window.localStorage.removeItem('token') window.localStorage.removeItem('authUrl') } } } </script> <style scoped> </style>

/*** 微信授权 --- OATH2 -- 第一种方式（推荐）* 第一步：前端请求-/wx/oAth2/index* 第二步：重定向-微信服务器*/@PassToken@GetMapping(value = "/wx/OAuth2/index")public void OAth2(HttpServletResponse response) throws IOException{response.sendRedirect(wxMpService.oauth2buildAuthorizationUrl(baseUrl + "/wx/OAuth2/redirect",WxConsts.OAuth2Scope.SNSAPI_USERINFO, null));}/*** 微信授权 -- 微信回调* 第一步：获取code* 第二步：通过code获取用户信息* 第三步：Jwt生成Token令牌* 第四步：重定向 --> 前端页面*/ @PassToken @GetMapping(value = "/wx/OAuth2/redirect") public void OAth2Return(HttpServletRequest request, HttpServletResponse response) throws IOException,WxErrorException{ String code = request.getParameter("code"); // 获取用户信息 WxMpUser wxMpUser = wxMpService.oauth2getUserInfo(wxMpService.oauth2getAccessToken(code), null); log.info("[微信授权]--------拉取用户信息详细如下:{}",wxMpUser); //将微信用户信息入库  wxUserInfoService.insertWxUser(wxMpUser); //生成token令牌 String token = JWT.create().withAudience(wxMpUser.getOpenId()).sign(Algorithm.HMAC256(jwtSecret)); //重定向地址 String redirectUrl = frontUrl + "/#/author" + "?token=" + token + "&code=200"; response.sendRedirect(redirectUrl); }

// 请求拦截器
axios.interceptors.request.use(function (config) {config.headers['Content-Type'] = 'application/json;charset=UTF-8'// 判断本地缓存是否存在token，如果存在的话，则每个http header都加上tokenif (window.localStorage.getItem('token')) {config.headers.authorization = window.localStorage.getItem('token')}return config
}, function (error) {return Promise.reject(error)
})

public boolean preHandle(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object object) throws Exception {// 从 http 请求头中取出 tokenString token = httpServletRequest.getHeader("Authorization");// 如果不是映射到方法直接通过if(!(object instanceof HandlerMethod)){return true;}HandlerMethod handlerMethod=(HandlerMethod)object;Method method=handlerMethod.getMethod(); // OPTIONS请求类型直接返回不处理 if ("OPTIONS".equals(httpServletRequest.getMethod())){ return false; } //检查是否有passToken注释，有则跳过认证 if (method.isAnnotationPresent(PassToken.class)) { PassToken passToken = method.getAnnotation(PassToken.class); if (passToken.required()) { return true; } } //校验token，并且将openId放入request中 if (StrUtil.isNotEmpty(token)){ // 验证 token JWTVerifier jwtVerifier = JWT.require(Algorithm.HMAC256(jwtSecret)).build(); try { jwtVerifier.verify(token); } catch (JWTVerificationException e) { logger.info("token校验未通过"); httpServletResponse.getWriter().println(JSONUtil.toJsonStr(Result.need2BLogged())); return false; } // 获取 token 中的 openId  String openId; try { openId = JWT.decode(token).getAudience().get(0); httpServletRequest.setAttribute("openId",openId); } catch (JWTDecodeException j) { throw new RuntimeException("401"); } } //检查有没有需要用户权限的注解 if (method.isAnnotationPresent(UserLoginToken.class)) { UserLoginToken userLoginToken = method.getAnnotation(UserLoginToken.class); if (userLoginToken.required()) { // 执行认证 if (token == null) { throw new RuntimeException("无token，请重新登录"); } // 获取 token 中的 openId  String openId; try { openId = JWT.decode(token).getAudience().get(0); } catch (JWTDecodeException j) { throw new RuntimeException("401"); } // 通过 openId 查询用户是否绑定手机号 if (objectRedisTemplate.hasKey(userIdKey + openId)) { logger.info("通过FRDIES用户拦截器"); return true; } else { logger.info("REDIS:{Redis has no user information}"); //根据 openId 查询该用户的信息 BaseUserInfo userInfo = baseController.getUserInfo(httpServletRequest, httpServletResponse); if (userInfo != null && StrUtil.isNotEmpty(userInfo.getPhone())){ logger.info("通过用户拦截器"); return true; }else{ // 未绑定手机用户返回  httpServletResponse.getWriter().println(JSONUtil.toJsonStr(Result.need2BLogged())); return false; } } } } return true; }

package com.yhzy.zytx.jwt.annotation;import java.lang.annotation.ElementType;
import java.lang.annotation.Retention;
import java.lang.annotation.RetentionPolicy;
import java.lang.annotation.Target;/*** @ClassName PassToken* @Description 自定义注解（跳过验证Token）* @Author 天生傲骨、怎能屈服* @Date 2019/5/22 13:38* @Version 1.0*/ @Target({ElementType.METHOD, ElementType.TYPE}) @Retention(RetentionPolicy.RUNTIME) public @interface PassToken { boolean required() default true; }