SpringBoot、jwt、security、Result重置密码请求具体代码

这里是一个使用SpringBoot、jwt、security、Result的重置密码请求的例子： 1. 在User实体类中添加一个resetToken字段用于保存重置密码的token： ```java @Entity public class User { // other fields private String resetToken; // getters and setters } ``` 2. 创建一个ResetPasswordRequest对象来接收重置密码的请求： ```java public class ResetPasswordRequest { private String token; private String password; // getters and setters } ``` 3. 创建一个ResetPasswordController类来处理重置密码的请求： ```java @RestController @RequestMapping("/api") public class ResetPasswordController { @Autowired private UserService userService; @PostMapping("/reset-password") public Result resetPassword(@RequestBody ResetPasswordRequest request) { String token = request.getToken(); String password = request.getPassword(); User user = userService.findByResetToken(token); if (user == null) { return Result.fail("Invalid token"); } user.setPassword(password); user.setResetToken(null); userService.save(user); return Result.success("Password reset successfully"); } } ``` 4. 在UserService中添加findByResetToken方法来根据resetToken查找用户： ```java @Service public class UserServiceImpl implements UserService { // other methods @Override public User findByResetToken(String resetToken) { return userRepository.findByResetToken(resetToken); } } ``` 5. 在SecurityConfig中配置JwtAuthenticationFilter和JwtAuthorizationFilter： ```java @Configuration @EnableWebSecurity public class SecurityConfig extends WebSecurityConfigurerAdapter { // other configurations @Override protected void configure(HttpSecurity http) throws Exception { http.csrf().disable().authorizeRequests() .antMatchers(HttpMethod.POST, "/api/reset-password").permitAll() .anyRequest().authenticated() .and() .addFilter(new JwtAuthenticationFilter(authenticationManager())) .addFilter(new JwtAuthorizationFilter(authenticationManager())) .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS); } } ``` 6. 在JwtAuthenticationFilter中解析token并设置authentication： ```java public class JwtAuthenticationFilter extends UsernamePasswordAuthenticationFilter { // other configurations @Override public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response) throws AuthenticationException { try { String token = getTokenFromRequest(request); if (token != null && jwtUtil.validateToken(token)) { String username = jwtUtil.getUsernameFromToken(token); UserDetails userDetails = userDetailsService.loadUserByUsername(username); UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(userDetails, null, userDetails.getAuthorities()); authenticationToken.setDetails(new WebAuthenticationDetailsSource().buildDetails(request)); SecurityContextHolder.getContext().setAuthentication(authenticationToken); } } catch (Exception e) { logger.error("Could not set user authentication in security context", e); throw new JwtAuthenticationException("JWT authentication failed", e); } return super.attemptAuthentication(request, response); } // other methods } ``` 7. 在JwtAuthorizationFilter中获取token并验证： ```java public class JwtAuthorizationFilter extends BasicAuthenticationFilter { // other configurations @Override protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain chain) throws IOException, ServletException { String token = getTokenFromRequest(request); if (token != null && jwtUtil.validateToken(token)) { String username = jwtUtil.getUsernameFromToken(token); UserDetails userDetails = userDetailsService.loadUserByUsername(username); UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(userDetails, null, userDetails.getAuthorities()); authenticationToken.setDetails(new WebAuthenticationDetailsSource().buildDetails(request)); SecurityContextHolder.getContext().setAuthentication(authenticationToken); } chain.doFilter(request, response); } // other methods } ``` 8. 最后，在ResetPasswordController中生成重置密码的token并发送邮件给用户： ```java @RestController @RequestMapping("/api") public class ResetPasswordController { @Autowired private UserService userService; @Autowired private EmailService emailService; @PostMapping("/forgot-password") public Result forgotPassword(@RequestParam("email") String email) { User user = userService.findByEmail(email); if (user == null) { return Result.fail("User not found"); } String token = jwtUtil.generateToken(user.getUsername()); user.setResetToken(token); userService.save(user); String subject = "Reset your password"; String message = "Please click the link below to reset your password:\n\n"; String link = "http://localhost:8080/reset-password?token=" + token; message += link; emailService.sendMail(email, subject, message); return Result.success("Reset password link sent to your email"); } // other methods } ``` 这样，当用户点击重置密码链接时，就会调用ResetPasswordController中的resetPassword方法来重置密码。