Spring Cloud Gateway使用Token验证详解

<dependencymanagement>
  <dependencies>
    <dependency>
      <groupid>org.springframework.cloud</groupid>
      <artifactid>spring-cloud-dependencies</artifactid>
      <version>${spring-cloud.version}</version>
      <type>pom</type>
      <scope>import</scope>
    </dependency>
  </dependencies>
</dependencymanagement>

<dependencies>
  <dependency>
    <groupid>org.springframework.cloud</groupid>
    <artifactid>spring-cloud-starter-gateway</artifactid>
  </dependency>
</dependencies>

import org.springframework.cloud.gateway.filter.gatewayfilter;
import org.springframework.cloud.gateway.filter.factory.abstractgatewayfilterfactory;
import org.springframework.http.httpstatus;
import org.springframework.http.server.reactive.serverhttpresponse;
import org.springframework.stereotype.component;

@component
public class authgatewayfilterfactory extends abstractgatewayfilterfactory<authgatewayfilterfactory.config> {

  public authgatewayfilterfactory() {
    super(config.class);
  }

  @override
  public gatewayfilter apply(config config) {
    return (exchange, chain) -> {
      system.out.println("welcome to authfilter.");
      string token = exchange.getrequest().getheaders().getfirst("sign");
      if (config.secret.equals(token)) {
        return chain.filter(exchange);
      }
      serverhttpresponse response = exchange.getresponse();
      response.setstatuscode(httpstatus.unauthorized);
      return response.setcomplete();
    };
  }

  static class config {
    static string secret = "1234";
  }
}

spring:
 cloud:
  gateway:
   routes:
   - id: service2_route
    uri: http://127.0.0.1:8082
    predicates:
    - path=/s2/**
    filters:
    - stripprefix=1 # 去掉路径的 n 个前缀
    - auth=true # 输入过滤器类的名称前缀

import org.springframework.cloud.gateway.filter.gatewayfilterchain;
import org.springframework.cloud.gateway.filter.globalfilter;
import org.springframework.core.ordered;
import org.springframework.http.httpstatus;
import org.springframework.http.server.reactive.serverhttprequest;
import org.springframework.http.server.reactive.serverhttpresponse;
import org.springframework.stereotype.component;
import org.springframework.web.server.serverwebexchange;
import reactor.core.publisher.mono;

@component
public class authglobalfilter implements globalfilter, ordered {
  @override
  public mono<void> filter(serverwebexchange exchange, gatewayfilterchain chain) {
    system.out.println("welcome to authglobalfilter.");
    serverhttprequest request = exchange.getrequest();
    string sign = request.getheaders().get("sign").get(0);
    string token = "1234";
    if(token.equals(sign)) {
      return chain.filter(exchange);
    }
    serverhttpresponse response = exchange.getresponse();
    response.setstatuscode(httpstatus.unauthorized);
    return response.setcomplete();
  }

  @override
  public int getorder() {
    return 0;
  }
}