Redis实战系列（1）：短信登录

public class User {
    private String name;
    private String phone;
    private String password;
}

public class UserDto {
    private String name;
    private String phone;
}

public class LoginFormDto {
    private String phone;
    private String code;
}

public class Result {
    private Boolean success;
    private String errorMsg;
    private Object data;
    private Long total;
    
    public static Result ok() {
        return new Result(true, null, null, null);
    }

    public static Result ok(Object data) {
        return new Result(true, null, data, null);
    }

    public static Result ok(List<?> data, Long total) {
        return new Result(true, null, data, total);
    }

    public static Result fail(String errorMsg) {
        return new Result(false, errorMsg, null, null);
    }
}

public Result sendCode(String phone) {

    // 生成验证码
    String code = RandomUtil.randomNumbers(6);

    // 验证码存在Redis中，并设置过期时间
    stringRedisTemplate.opsForValue().set("login:code:" + phone, code);
    stringRedisTemplate.expire("login:code:" + phone, 5, TimeUnit.MINUTES);

    log.info("模拟发送短信：{}", code);

    return Result.ok();
}

public Result login(LoginFormDto loginForm) {

    // 获取手机号
    String phone = loginForm.getPhone();

    // 判断用户上传的验证码，和Redis中缓存的验证码是否一致
    String cacheCode = stringRedisTemplate.opsForValue().get("login:code:" + phone);
    if (cacheCode == null || !cacheCode.equals(loginForm.getCode())) {
        return Result.fail("验证码错误");
    }

    // 从数据库中查询用户是否存在，存在就直接获取
    // 如果不存在，数据库创建新用户
    User user = new User("xdy", phone, "123456");

    // 随机生成token，作为登录令牌
    String token = UUID.randomUUID().toString();
    String tokenKey = "login:token:" + token;

    // 将User转换为UserDto, 再转化为HashMap
    UserDto userDto = BeanUtil.copyProperties(user, UserDto.class);
    Map<String, Object> userMap = BeanUtil.beanToMap(userDto, false, false);

    // 将用户信息存在redis中，并设置token有效期
    stringRedisTemplate.opsForHash().putAll(tokenKey, userMap);
    stringRedisTemplate.expire(tokenKey, 10, TimeUnit.DAYS);

    // 返回token
    return Result.ok(token);
}

public class UserHolder {
    private static final ThreadLocal<UserDto> tl = new ThreadLocal<>();

    public static void saveUser(UserDto user){
        tl.set(user);
    }

    public static UserDto getUser(){
        return tl.get();
    }

    public static void removeUser(){
        tl.remove();
    }
}

public class RefreshTokenInterceptor implements HandlerInterceptor {
    private final StringRedisTemplate stringRedisTemplate;

    public RefreshTokenInterceptor(StringRedisTemplate stringRedisTemplate) {
        this.stringRedisTemplate = stringRedisTemplate;
    }

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) {
        String token = request.getHeader("authorization");

        if (Strings.isBlank(token)) {
            return true;
        }

        // 若有token，从redis中获取userMap
        String tokenKey = "login:token:" + token;
        Map<Object, Object> userMap = stringRedisTemplate.opsForHash().entries(tokenKey);

        // 如果用户存在，保存信息到ThreadLocal
        if (userMap.isEmpty()) {
            return true;
        }
        UserDto userDto = BeanUtil.fillBeanWithMap(userMap, new UserDto(), false);
        UserHolder.saveUser(userDto);

        // 刷新token有效期
        stringRedisTemplate.expire(tokenKey, 10, TimeUnit.DAYS);

        return true;
    }
}

public class LoginInterceptor implements HandlerInterceptor {
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) {
        // 登录才放行
        if (UserHolder.getUser() == null) {
            response.setStatus(401);
            return false;
        }
        return true;
    }
}

@Configuration
public class WebConfig implements WebMvcConfigurer {

    @Resource
    StringRedisTemplate stringRedisTemplate;
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        var loginInterceptor = new LoginInterceptor();
        var refreshTokenInterceptor = new RefreshTokenInterceptor(stringRedisTemplate);
        
        // 先注册refreshTokenInterceptor，后注册loginInterceptor
        registry.addInterceptor(refreshTokenInterceptor).addPathPatterns("/**");
        registry.addInterceptor(loginInterceptor)
                .addPathPatterns("/**")
                .excludePathPatterns("/login", "/sendCode");

    }
}

@RestController
public class UserController {

    @Resource
    UserService userService;

    @PostMapping("/sendCode")
    public Result sendCode(@RequestParam String phone) {
        return userService.sendCode(phone);
    }

    @PostMapping("/login")
    public Result login(LoginFormDto loginFormDto) {
        return userService.login(loginFormDto);
    }

    @GetMapping("/test")
    public Result test() {
        return Result.ok();
    }
}