springboot整合jwt(二)

短命女 2021-12-20 14:27 655阅读 0赞

**原文地址：[http://blog.marcosbarbero.com/centralized-authorization-jwt-spring-boot2/][http_blog.marcosbarbero.com_centralized-authorization-jwt-spring-boot2]**

**Bcrypt参考地址：[https://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/\#pe-dpe][https_docs.spring.io_spring-security_site_docs_current_reference_htmlsingle_pe-dpe]**

### 一、创建项目 ###

**1.分别创建一个maven父项目springboot-jwt，以及两个子项目springboot-jwt-resource-server、springboot-jwt-authorization-server**

**2. 父项目的pom文件内容如下**

<?xml version="1.0" encoding="UTF-8"?>
    <project xmlns="http://maven.apache.org/POM/4.0.0"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
        <modelVersion>4.0.0</modelVersion>
    
        <groupId>com.hegret</groupId>
        <artifactId>springboot-jwt</artifactId>
        <version>1.0-SNAPSHOT</version>
        <modules>
            <module>springboot-jwt-resource-server</module>
            <module>springboot-jwt-authorization-server</module>
        </modules>
        <packaging>pom</packaging>
    
        <properties>
            <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
            <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
            <java.version>1.8</java.version>
        </properties>
    
        <parent>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-parent</artifactId>
            <version>2.1.4.RELEASE</version>
            <relativePath />
        </parent>
    
    </project>

### 二、认证服务器 ###

**1. pom文件依赖**

<project xmlns="http://maven.apache.org/POM/4.0.0"
    	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
    	<modelVersion>4.0.0</modelVersion>
    	<parent>
    		<groupId>com.hegret</groupId>
    		<artifactId>springboot-jwt</artifactId>
    		<version>0.0.1-SNAPSHOT</version>
    	</parent>
    	<artifactId>springboot-jwt-authorization-server</artifactId>
    	<properties>
    		
    		<junit-jupiter.version>5.4.2</junit-jupiter.version>
    		<hikaricp.version>3.3.1</hikaricp.version>
    		<spring-security-oauth2-autoconfigure.version>2.1.4.RELEASE</spring-security-oauth2-autoconfigure.version>
    	</properties>
    	<dependencies>
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-web</artifactId>
    		</dependency>
    
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-security</artifactId>
    		</dependency>
    		<dependency>
    			<groupId>org.springframework.security.oauth.boot</groupId>
    			<artifactId>spring-security-oauth2-autoconfigure</artifactId>
    			<version>${spring-security-oauth2-autoconfigure.version}</version>
    		</dependency>
    
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-jdbc</artifactId>
    		</dependency>
    
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-configuration-processor</artifactId>
    			<optional>true</optional>
    		</dependency>
    		
    		<dependency>
    			<groupId>org.junit.platform</groupId>
    			<artifactId>junit-platform-launcher</artifactId>
    			<scope>test</scope>
    		</dependency>
    		<dependency>
    			<groupId>org.junit.jupiter</groupId>
    			<artifactId>junit-jupiter-engine</artifactId>
    			<scope>test</scope>
    		</dependency>
    		
    		<dependency>
    			<groupId>mysql</groupId>
    			<artifactId>mysql-connector-java</artifactId>
    			<scope>runtime</scope>
    		</dependency>
    		
    		<dependency>
    			<groupId>com.zaxxer</groupId>
    			<artifactId>HikariCP</artifactId>
    		</dependency>
    	</dependencies>
    	<build>
            <plugins>
                <plugin>
                    <groupId>org.springframework.boot</groupId>
                    <artifactId>spring-boot-maven-plugin</artifactId>
                </plugin>
            </plugins>
        </build>
    </project>

**2. 创建OAuth2相关数据表**

CREATE TABLE IF NOT EXISTS oauth_client_details (
      client_id VARCHAR(256) PRIMARY KEY,
      resource_ids VARCHAR(256),
      client_secret VARCHAR(256) NOT NULL,
      scope VARCHAR(256),
      authorized_grant_types VARCHAR(256),
      web_server_redirect_uri VARCHAR(256),
      authorities VARCHAR(256),
      access_token_validity INTEGER,
      refresh_token_validity INTEGER,
      additional_information VARCHAR(4000),
      autoapprove VARCHAR(256)
    );
    
    CREATE TABLE IF NOT EXISTS oauth_client_token (
      token_id VARCHAR(256),
      token BLOB,
      authentication_id VARCHAR(256) PRIMARY KEY,
      user_name VARCHAR(256),
      client_id VARCHAR(256)
    );
    
    CREATE TABLE IF NOT EXISTS oauth_access_token (
      token_id VARCHAR(256),
      token BLOB,
      authentication_id VARCHAR(256),
      user_name VARCHAR(256),
      client_id VARCHAR(256),
      authentication BLOB,
      refresh_token VARCHAR(256)
    );
    
    CREATE TABLE IF NOT EXISTS oauth_refresh_token (
      token_id VARCHAR(256),
      token BLOB,
      authentication BLOB
    );
    
    CREATE TABLE IF NOT EXISTS oauth_code (
      code VARCHAR(256), authentication BLOB
    );

**3. 向oauth2相关表插入数据**

-- The encrypted client_secret it `secret`
    INSERT INTO oauth_client_details (client_id, client_secret, scope, authorized_grant_types, authorities, access_token_validity)
      VALUES ('clientId', '{bcrypt}$2a$10$vCXMWCn7fDZWOcLnIEhmK.74dvK1Eh8ae2WrWlhr2ETPLoxQctN4.', 'read,write', 'password,refresh_token,client_credentials', 'ROLE_CLIENT', 300);

**4. 创建用户表和权限表**

CREATE TABLE IF NOT EXISTS users (
      id INT AUTO_INCREMENT PRIMARY KEY,
      username VARCHAR(256) NOT NULL,
      password VARCHAR(256) NOT NULL,
      enabled TINYINT(1),
      UNIQUE KEY unique_username(username)
    );
    
    CREATE TABLE IF NOT EXISTS authorities (
      username VARCHAR(256) NOT NULL,
      authority VARCHAR(256) NOT NULL,
      PRIMARY KEY(username, authority)
    );

**5. 向用户表和权限表插入数据**

-- The encrypted password is `pass`
    INSERT INTO users (id, username, password, enabled) VALUES (1, 'user', '{bcrypt}$2a$10$cyf5NfobcruKQ8XGjUJkEegr9ZWFqaea6vjpXWEaSqTa2xL9wjgQC', 1);
    INSERT INTO authorities (username, authority) VALUES ('user', 'ROLE_USER');

**6. 添加配置类WebSecurityConfiguration.java**

package com.hegret.config;
    
    import org.springframework.context.annotation.Bean;
    import org.springframework.security.authentication.AuthenticationManager;
    import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
    import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
    import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
    import org.springframework.security.core.userdetails.UserDetailsService;
    import org.springframework.security.core.userdetails.jdbc.JdbcDaoImpl;
    import org.springframework.security.crypto.factory.PasswordEncoderFactories;
    import org.springframework.security.crypto.password.PasswordEncoder;
    
    import javax.sql.DataSource;
    
    @EnableWebSecurity
    public class WebSecurityConfiguration extends WebSecurityConfigurerAdapter {
    
        private final DataSource dataSource;
    
        private PasswordEncoder passwordEncoder;
        private UserDetailsService userDetailsService;
    
        public WebSecurityConfiguration(final DataSource dataSource) {
            this.dataSource = dataSource;
        }
    
        @Override
        protected void configure(final AuthenticationManagerBuilder auth) throws Exception {
            auth.userDetailsService(userDetailsService())
                    .passwordEncoder(passwordEncoder());
        }
    
        @Bean
        @Override
        public AuthenticationManager authenticationManagerBean() throws Exception {
            return super.authenticationManagerBean();
        }
    
        @Bean
        public PasswordEncoder passwordEncoder() {
            if (passwordEncoder == null) {
                passwordEncoder = PasswordEncoderFactories.createDelegatingPasswordEncoder();
            }
            return passwordEncoder;
        }
    
        @Bean
        public UserDetailsService userDetailsService() {
            if (userDetailsService == null) {
                userDetailsService = new JdbcDaoImpl();
                ((JdbcDaoImpl) userDetailsService).setDataSource(dataSource);
            }
            return userDetailsService;
        }
    
    }

**7. 授权服务配置**

**7.1 SecurityProperties.java**

package com.hegret.properties;
    
    import org.springframework.boot.context.properties.ConfigurationProperties;
    import org.springframework.core.io.Resource;
    
    @ConfigurationProperties("security")
    public class SecurityProperties {
    
        private JwtProperties jwt;
    
        public JwtProperties getJwt() {
            return jwt;
        }
    
        public void setJwt(JwtProperties jwt) {
            this.jwt = jwt;
        }
    
        public static class JwtProperties {
    
            private Resource keyStore;
            private String keyStorePassword;
            private String keyPairAlias;
            private String keyPairPassword;
    
            public Resource getKeyStore() {
                return keyStore;
            }
    
            public void setKeyStore(Resource keyStore) {
                this.keyStore = keyStore;
            }
    
            public String getKeyStorePassword() {
                return keyStorePassword;
            }
    
            public void setKeyStorePassword(String keyStorePassword) {
                this.keyStorePassword = keyStorePassword;
            }
    
            public String getKeyPairAlias() {
                return keyPairAlias;
            }
    
            public void setKeyPairAlias(String keyPairAlias) {
                this.keyPairAlias = keyPairAlias;
            }
    
            public String getKeyPairPassword() {
                return keyPairPassword;
            }
    
            public void setKeyPairPassword(String keyPairPassword) {
                this.keyPairPassword = keyPairPassword;
            }
        }
    }

**7.2 AuthorizationServerConfiguration.java**

package com.hegret.config;
    
    import com.hegret.properties.SecurityProperties;
    import org.springframework.boot.context.properties.EnableConfigurationProperties;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.security.authentication.AuthenticationManager;
    import org.springframework.security.crypto.password.PasswordEncoder;
    import org.springframework.security.oauth2.config.annotation.configurers.ClientDetailsServiceConfigurer;
    import org.springframework.security.oauth2.config.annotation.web.configuration.AuthorizationServerConfigurerAdapter;
    import org.springframework.security.oauth2.config.annotation.web.configuration.EnableAuthorizationServer;
    import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerEndpointsConfigurer;
    import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerSecurityConfigurer;
    import org.springframework.security.oauth2.provider.ClientDetailsService;
    import org.springframework.security.oauth2.provider.token.DefaultTokenServices;
    import org.springframework.security.oauth2.provider.token.TokenStore;
    import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter;
    import org.springframework.security.oauth2.provider.token.store.JwtTokenStore;
    import org.springframework.security.oauth2.provider.token.store.KeyStoreKeyFactory;
    
    import javax.sql.DataSource;
    import java.security.KeyPair;
    
    @Configuration
    @EnableAuthorizationServer
    @EnableConfigurationProperties(SecurityProperties.class)
    public class AuthorizationServerConfiguration extends AuthorizationServerConfigurerAdapter {
    
        private final DataSource dataSource;
        private final PasswordEncoder passwordEncoder;
        private final AuthenticationManager authenticationManager;
        private final SecurityProperties securityProperties;
    
        private JwtAccessTokenConverter jwtAccessTokenConverter;
        private TokenStore tokenStore;
    
        public AuthorizationServerConfiguration(final DataSource dataSource, final PasswordEncoder passwordEncoder,
                                                final AuthenticationManager authenticationManager, final SecurityProperties securityProperties) {
            this.dataSource = dataSource;
            this.passwordEncoder = passwordEncoder;
            this.authenticationManager = authenticationManager;
            this.securityProperties = securityProperties;
        }
    
        @Bean
        public TokenStore tokenStore() {
            if (tokenStore == null) {
                tokenStore = new JwtTokenStore(jwtAccessTokenConverter());
            }
            return tokenStore;
        }
    
        @Bean
        public DefaultTokenServices tokenServices(final TokenStore tokenStore,
                                                  final ClientDetailsService clientDetailsService) {
            DefaultTokenServices tokenServices = new DefaultTokenServices();
            tokenServices.setSupportRefreshToken(true);
            tokenServices.setTokenStore(tokenStore);
            tokenServices.setClientDetailsService(clientDetailsService);
            tokenServices.setAuthenticationManager(this.authenticationManager);
            return tokenServices;
        }
    
        @Bean
        public JwtAccessTokenConverter jwtAccessTokenConverter() {
            if (jwtAccessTokenConverter != null) {
                return jwtAccessTokenConverter;
            }
    
            SecurityProperties.JwtProperties jwtProperties = securityProperties.getJwt();
            KeyPair keyPair = keyPair(jwtProperties, keyStoreKeyFactory(jwtProperties));
    
            jwtAccessTokenConverter = new JwtAccessTokenConverter();
            jwtAccessTokenConverter.setKeyPair(keyPair);
            return jwtAccessTokenConverter;
        }
    
        @Override
        public void configure(final ClientDetailsServiceConfigurer clients) throws Exception {
            clients.jdbc(this.dataSource);
        }
    
        @Override
        public void configure(final AuthorizationServerEndpointsConfigurer endpoints) {
            endpoints.authenticationManager(this.authenticationManager)
                    .accessTokenConverter(jwtAccessTokenConverter())
                    .tokenStore(tokenStore());
        }
    
        @Override
        public void configure(final AuthorizationServerSecurityConfigurer oauthServer) {
            oauthServer.passwordEncoder(this.passwordEncoder).tokenKeyAccess("permitAll()")
                    .checkTokenAccess("isAuthenticated()");
        }
    
        private KeyPair keyPair(SecurityProperties.JwtProperties jwtProperties, KeyStoreKeyFactory keyStoreKeyFactory) {
            return keyStoreKeyFactory.getKeyPair(jwtProperties.getKeyPairAlias(), jwtProperties.getKeyPairPassword().toCharArray());
        }
    
        private KeyStoreKeyFactory keyStoreKeyFactory(SecurityProperties.JwtProperties jwtProperties) {
            return new KeyStoreKeyFactory(jwtProperties.getKeyStore(), jwtProperties.getKeyStorePassword().toCharArray());
        }
    }

**8. 配置application.yml文件**

server:
      port: 8080
    spring:
      datasource:
        username: root
        password: 1234
        # 如果自定义 hikari DataSource，url要改为jdbc-url
        url: jdbc:mysql://127.0.0.1:3306/jwt?useUnicode=true&characterEncoding=UTF-8&serverTimezone=UTC
        driver-class-name: com.mysql.cj.jdbc.Driver
        type: com.zaxxer.hikari.HikariDataSource
        hikari:
          maximum-pool-size: 20
          max-lifetime: 1800000
          idle-timeout: 30000
          data-source-properties:
            prepStmtCacheSize: 250
            prepStmtCacheSqlLimit: 2048
            cachePrepStmts: true
            useServerPrepStmts: true
    security:
      jwt:
        key-store: classpath:keystore.jks
        key-store-password: 123456
        key-pair-alias: servercert
        key-pair-password: 123456

**9. 将keystore.jks文件添加到资源目录下src\\main\\resources下，keystore.jks生成方式参考“[创建自签名证书][Link 1]”**

**10. 创建启动引导类AuthorizationServerApplication.java**

package com.hegret;
    
    import org.springframework.boot.SpringApplication;
    import org.springframework.boot.autoconfigure.SpringBootApplication;
    
    @SpringBootApplication
    public class AuthorizationServerApplication {
    
        public static void main(String[] args) {
            SpringApplication.run(AuthorizationServerApplication.class, args);
        }
    }

**11. 启动引导类**

H:\JDK\jdk1.8.0_171\bin\java.exe -XX:TieredStopAtLevel=1 -noverify -Dspring.output.ansi.enabled=always -Dcom.sun.management.jmxremote -Dspring.jmx.enabled=true -Dspring.liveBeansView.mbeanDomain -Dspring.application.admin.enabled=true "-javaagent:H:\JetBrains\IntelliJ IDEA 2019.1.3\lib\idea_rt.jar=64908:H:\JetBrains\IntelliJ IDEA 2019.1.3\bin" -Dfile.encoding=UTF-8 -classpath H:\JDK\jdk1.8.0_171\jre\lib\charsets.jar;H:\JDK\jdk1.8.0_171\jre\lib\deploy.jar;H:\JDK\jdk1.8.0_171\jre\lib\ext\access-bridge-64.jar;H:\JDK\jdk1.8.0_171\jre\lib\ext\cldrdata.jar;H:\JDK\jdk1.8.0_171\jre\lib\ext\dnsns.jar;H:\JDK\jdk1.8.0_171\jre\lib\ext\jaccess.jar;H:\JDK\jdk1.8.0_171\jre\lib\ext\jfxrt.jar;H:\JDK\jdk1.8.0_171\jre\lib\ext\localedata.jar;H:\JDK\jdk1.8.0_171\jre\lib\ext\nashorn.jar;H:\JDK\jdk1.8.0_171\jre\lib\ext\sunec.jar;H:\JDK\jdk1.8.0_171\jre\lib\ext\sunjce_provider.jar;H:\JDK\jdk1.8.0_171\jre\lib\ext\sunmscapi.jar;H:\JDK\jdk1.8.0_171\jre\lib\ext\sunpkcs11.jar;H:\JDK\jdk1.8.0_171\jre\lib\ext\zipfs.jar;H:\JDK\jdk1.8.0_171\jre\lib\javaws.jar;H:\JDK\jdk1.8.0_171\jre\lib\jce.jar;H:\JDK\jdk1.8.0_171\jre\lib\jfr.jar;H:\JDK\jdk1.8.0_171\jre\lib\jfxswt.jar;H:\JDK\jdk1.8.0_171\jre\lib\jsse.jar;H:\JDK\jdk1.8.0_171\jre\lib\management-agent.jar;H:\JDK\jdk1.8.0_171\jre\lib\plugin.jar;H:\JDK\jdk1.8.0_171\jre\lib\resources.jar;H:\JDK\jdk1.8.0_171\jre\lib\rt.jar;F:\IdeaProjects\springbootjwt\springboot-jwt-authorization-server\target\classes;E:\maven\repository\org\springframework\boot\spring-boot-starter-web\2.1.4.RELEASE\spring-boot-starter-web-2.1.4.RELEASE.jar;E:\maven\repository\org\springframework\boot\spring-boot-starter\2.1.4.RELEASE\spring-boot-starter-2.1.4.RELEASE.jar;E:\maven\repository\org\springframework\boot\spring-boot-starter-logging\2.1.4.RELEASE\spring-boot-starter-logging-2.1.4.RELEASE.jar;E:\maven\repository\ch\qos\logback\logback-classic\1.2.3\logback-classic-1.2.3.jar;E:\maven\repository\ch\qos\logback\logback-core\1.2.3\logback-core-1.2.3.jar;E:\maven\repository\org\apache\logging\log4j\log4j-to-slf4j\2.11.2\log4j-to-slf4j-2.11.2.jar;E:\maven\repository\org\apache\logging\log4j\log4j-api\2.11.2\log4j-api-2.11.2.jar;E:\maven\repository\org\slf4j\jul-to-slf4j\1.7.26\jul-to-slf4j-1.7.26.jar;E:\maven\repository\javax\annotation\javax.annotation-api\1.3.2\javax.annotation-api-1.3.2.jar;E:\maven\repository\org\springframework\spring-core\5.1.6.RELEASE\spring-core-5.1.6.RELEASE.jar;E:\maven\repository\org\springframework\spring-jcl\5.1.6.RELEASE\spring-jcl-5.1.6.RELEASE.jar;E:\maven\repository\org\yaml\snakeyaml\1.23\snakeyaml-1.23.jar;E:\maven\repository\org\springframework\boot\spring-boot-starter-json\2.1.4.RELEASE\spring-boot-starter-json-2.1.4.RELEASE.jar;E:\maven\repository\com\fasterxml\jackson\datatype\jackson-datatype-jdk8\2.9.8\jackson-datatype-jdk8-2.9.8.jar;E:\maven\repository\com\fasterxml\jackson\datatype\jackson-datatype-jsr310\2.9.8\jackson-datatype-jsr310-2.9.8.jar;E:\maven\repository\com\fasterxml\jackson\module\jackson-module-parameter-names\2.9.8\jackson-module-parameter-names-2.9.8.jar;E:\maven\repository\org\springframework\boot\spring-boot-starter-tomcat\2.1.4.RELEASE\spring-boot-starter-tomcat-2.1.4.RELEASE.jar;E:\maven\repository\org\apache\tomcat\embed\tomcat-embed-core\9.0.17\tomcat-embed-core-9.0.17.jar;E:\maven\repository\org\apache\tomcat\embed\tomcat-embed-el\9.0.17\tomcat-embed-el-9.0.17.jar;E:\maven\repository\org\apache\tomcat\embed\tomcat-embed-websocket\9.0.17\tomcat-embed-websocket-9.0.17.jar;E:\maven\repository\org\hibernate\validator\hibernate-validator\6.0.16.Final\hibernate-validator-6.0.16.Final.jar;E:\maven\repository\javax\validation\validation-api\2.0.1.Final\validation-api-2.0.1.Final.jar;E:\maven\repository\org\jboss\logging\jboss-logging\3.3.2.Final\jboss-logging-3.3.2.Final.jar;E:\maven\repository\com\fasterxml\classmate\1.4.0\classmate-1.4.0.jar;E:\maven\repository\org\springframework\spring-web\5.1.6.RELEASE\spring-web-5.1.6.RELEASE.jar;E:\maven\repository\org\springframework\spring-beans\5.1.6.RELEASE\spring-beans-5.1.6.RELEASE.jar;E:\maven\repository\org\springframework\spring-webmvc\5.1.6.RELEASE\spring-webmvc-5.1.6.RELEASE.jar;E:\maven\repository\org\springframework\spring-context\5.1.6.RELEASE\spring-context-5.1.6.RELEASE.jar;E:\maven\repository\org\springframework\spring-expression\5.1.6.RELEASE\spring-expression-5.1.6.RELEASE.jar;E:\maven\repository\org\springframework\boot\spring-boot-starter-security\2.1.4.RELEASE\spring-boot-starter-security-2.1.4.RELEASE.jar;E:\maven\repository\org\springframework\spring-aop\5.1.6.RELEASE\spring-aop-5.1.6.RELEASE.jar;E:\maven\repository\org\springframework\security\spring-security-config\5.1.5.RELEASE\spring-security-config-5.1.5.RELEASE.jar;E:\maven\repository\org\springframework\security\spring-security-core\5.1.5.RELEASE\spring-security-core-5.1.5.RELEASE.jar;E:\maven\repository\org\springframework\security\spring-security-web\5.1.5.RELEASE\spring-security-web-5.1.5.RELEASE.jar;E:\maven\repository\org\springframework\security\oauth\boot\spring-security-oauth2-autoconfigure\2.1.4.RELEASE\spring-security-oauth2-autoconfigure-2.1.4.RELEASE.jar;E:\maven\repository\com\fasterxml\jackson\core\jackson-annotations\2.9.0\jackson-annotations-2.9.0.jar;E:\maven\repository\com\fasterxml\jackson\core\jackson-databind\2.9.8\jackson-databind-2.9.8.jar;E:\maven\repository\com\fasterxml\jackson\core\jackson-core\2.9.8\jackson-core-2.9.8.jar;E:\maven\repository\com\sun\xml\bind\jaxb-core\2.3.0.1\jaxb-core-2.3.0.1.jar;E:\maven\repository\com\sun\xml\bind\jaxb-impl\2.3.0.1\jaxb-impl-2.3.0.1.jar;E:\maven\repository\javax\xml\bind\jaxb-api\2.3.1\jaxb-api-2.3.1.jar;E:\maven\repository\javax\activation\javax.activation-api\1.2.0\javax.activation-api-1.2.0.jar;E:\maven\repository\org\springframework\boot\spring-boot\2.1.4.RELEASE\spring-boot-2.1.4.RELEASE.jar;E:\maven\repository\org\springframework\boot\spring-boot-autoconfigure\2.1.4.RELEASE\spring-boot-autoconfigure-2.1.4.RELEASE.jar;E:\maven\repository\org\springframework\security\oauth\spring-security-oauth2\2.3.5.RELEASE\spring-security-oauth2-2.3.5.RELEASE.jar;E:\maven\repository\commons-codec\commons-codec\1.11\commons-codec-1.11.jar;E:\maven\repository\org\codehaus\jackson\jackson-mapper-asl\1.9.13\jackson-mapper-asl-1.9.13.jar;E:\maven\repository\org\codehaus\jackson\jackson-core-asl\1.9.13\jackson-core-asl-1.9.13.jar;E:\maven\repository\org\springframework\security\spring-security-jwt\1.0.10.RELEASE\spring-security-jwt-1.0.10.RELEASE.jar;E:\maven\repository\org\bouncycastle\bcpkix-jdk15on\1.60\bcpkix-jdk15on-1.60.jar;E:\maven\repository\org\bouncycastle\bcprov-jdk15on\1.60\bcprov-jdk15on-1.60.jar;E:\maven\repository\org\springframework\boot\spring-boot-starter-jdbc\2.1.4.RELEASE\spring-boot-starter-jdbc-2.1.4.RELEASE.jar;E:\maven\repository\org\springframework\spring-jdbc\5.1.6.RELEASE\spring-jdbc-5.1.6.RELEASE.jar;E:\maven\repository\org\springframework\spring-tx\5.1.6.RELEASE\spring-tx-5.1.6.RELEASE.jar;E:\maven\repository\org\springframework\boot\spring-boot-configuration-processor\2.1.4.RELEASE\spring-boot-configuration-processor-2.1.4.RELEASE.jar;E:\maven\repository\mysql\mysql-connector-java\8.0.15\mysql-connector-java-8.0.15.jar;E:\maven\repository\com\zaxxer\HikariCP\3.3.1\HikariCP-3.3.1.jar;E:\maven\repository\org\slf4j\slf4j-api\1.7.26\slf4j-api-1.7.26.jar com.hegret.AuthorizationServerApplication
    
      .   ____          _            __ _ _
     /\\ / ___'_ __ _ _(_)_ __  __ _ \ \ \ \
    ( ( )\___ | '_ | '_| | '_ \/ _` | \ \ \ \
     \\/  ___)| |_)| | | | | || (_| |  ) ) ) )
      '  |____| .__|_| |_|_| |_\__, | / / / /
     =========|_|==============|___/=/_/_/_/
     :: Spring Boot ::        (v2.1.4.RELEASE)
    
    2019-06-30 23:08:12.292  INFO 12224 --- [           main] c.hegret.AuthorizationServerApplication  : Starting AuthorizationServerApplication on zsx with PID 12224 (F:\IdeaProjects\springbootjwt\springboot-jwt-authorization-server\target\classes started by admin in F:\IdeaProjects\springbootjwt)
    2019-06-30 23:08:12.295  INFO 12224 --- [           main] c.hegret.AuthorizationServerApplication  : No active profile set, falling back to default profiles: default
    2019-06-30 23:08:15.604  INFO 12224 --- [           main] o.s.b.w.embedded.tomcat.TomcatWebServer  : Tomcat initialized with port(s): 8080 (http)
    2019-06-30 23:08:15.635  INFO 12224 --- [           main] o.apache.catalina.core.StandardService   : Starting service [Tomcat]
    2019-06-30 23:08:15.636  INFO 12224 --- [           main] org.apache.catalina.core.StandardEngine  : Starting Servlet engine: [Apache Tomcat/9.0.17]
    2019-06-30 23:08:15.647  INFO 12224 --- [           main] o.a.catalina.core.AprLifecycleListener   : An older version [1.2.16] of the APR based Apache Tomcat Native library is installed, while Tomcat recommends a minimum version of [1.2.21]
    2019-06-30 23:08:15.648  INFO 12224 --- [           main] o.a.catalina.core.AprLifecycleListener   : Loaded APR based Apache Tomcat Native library [1.2.16] using APR version [1.6.3].
    2019-06-30 23:08:15.649  INFO 12224 --- [           main] o.a.catalina.core.AprLifecycleListener   : APR capabilities: IPv6 [true], sendfile [true], accept filters [false], random [true].
    2019-06-30 23:08:15.649  INFO 12224 --- [           main] o.a.catalina.core.AprLifecycleListener   : APR/OpenSSL configuration: useAprConnector [false], useOpenSSL [true]
    2019-06-30 23:08:16.733  INFO 12224 --- [           main] o.a.catalina.core.AprLifecycleListener   : OpenSSL successfully initialized [OpenSSL 1.0.2m  2 Nov 2017]
    2019-06-30 23:08:17.042  INFO 12224 --- [           main] o.a.c.c.C.[Tomcat].[localhost].[/]       : Initializing Spring embedded WebApplicationContext
    2019-06-30 23:08:17.042  INFO 12224 --- [           main] o.s.web.context.ContextLoader            : Root WebApplicationContext: initialization completed in 4449 ms
    2019-06-30 23:08:18.837  INFO 12224 --- [           main] o.s.s.web.DefaultSecurityFilterChain     : Creating filter chain: OrRequestMatcher [requestMatchers=[Ant [pattern='/oauth/token'], Ant [pattern='/oauth/token_key'], Ant [pattern='/oauth/check_token']]], [org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter@3d5790ea, org.springframework.security.web.context.SecurityContextPersistenceFilter@149debbb, org.springframework.security.web.header.HeaderWriterFilter@222afc67, org.springframework.security.web.authentication.logout.LogoutFilter@5d5160e6, org.springframework.security.web.authentication.www.BasicAuthenticationFilter@4fc142ec, org.springframework.security.web.savedrequest.RequestCacheAwareFilter@5477a1ca, org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter@42c28305, org.springframework.security.web.authentication.AnonymousAuthenticationFilter@1dd7796b, org.springframework.security.web.session.SessionManagementFilter@54f4a7f0, org.springframework.security.web.access.ExceptionTranslationFilter@1de0a46c, org.springframework.security.web.access.intercept.FilterSecurityInterceptor@43d38654]
    2019-06-30 23:08:18.849  INFO 12224 --- [           main] o.s.s.web.DefaultSecurityFilterChain     : Creating filter chain: any request, [org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter@6c6366cf, org.springframework.security.web.context.SecurityContextPersistenceFilter@42714a7, org.springframework.security.web.header.HeaderWriterFilter@75fa1be3, org.springframework.security.web.csrf.CsrfFilter@3936df72, org.springframework.security.web.authentication.logout.LogoutFilter@3ee69ad8, org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter@1daf3b44, org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter@2d82408, org.springframework.security.web.authentication.ui.DefaultLogoutPageGeneratingFilter@55a88417, org.springframework.security.web.authentication.www.BasicAuthenticationFilter@8f2098e, org.springframework.security.web.savedrequest.RequestCacheAwareFilter@19650aa6, org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter@3ce53f6a, org.springframework.security.web.authentication.AnonymousAuthenticationFilter@18acfe88, org.springframework.security.web.session.SessionManagementFilter@7a389761, org.springframework.security.web.access.ExceptionTranslationFilter@12d1f1d4, org.springframework.security.web.access.intercept.FilterSecurityInterceptor@53ed09e8]
    2019-06-30 23:08:19.103  INFO 12224 --- [           main] o.s.s.concurrent.ThreadPoolTaskExecutor  : Initializing ExecutorService 'applicationTaskExecutor'
    2019-06-30 23:08:19.433  INFO 12224 --- [           main] o.s.b.w.embedded.tomcat.TomcatWebServer  : Tomcat started on port(s): 8080 (http) with context path ''
    2019-06-30 23:08:19.436  INFO 12224 --- [           main] c.hegret.AuthorizationServerApplication  : Started AuthorizationServerApplication in 8.987 seconds (JVM running for 11.525)

**12.查看请求**

**12.1 curl方式**

curl -u "clientId:123456" -X POST "http://localhost:8080/oauth/token" -d "grant_type=password&username=admin&password=123456"

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70][]

**12.2 postman方式**

**打开postman，查看请求localhost:8080/oauth/token**

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70 1][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70 2][]

###  三、资源服务器 ###

**1. pom文件内容**

<project xmlns="http://maven.apache.org/POM/4.0.0"
    	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
    	<modelVersion>4.0.0</modelVersion>
    	<parent>
    		<groupId>com.hegret</groupId>
    		<artifactId>springboot-jwt</artifactId>
    		<version>0.0.1-SNAPSHOT</version>
    	</parent>
    	<artifactId>springboot-jwt-resource-server</artifactId>
    	<properties>
            <spring-security-oauth2-autoconfigure.version>2.1.4.RELEASE</spring-security-oauth2-autoconfigure.version>
            <commons-io.version>2.6</commons-io.version>
        </properties>
    	<dependencies>
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-web</artifactId>
    		</dependency>
    
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-security</artifactId>
    		</dependency>
    		<dependency>
    			<groupId>org.springframework.security.oauth.boot</groupId>
    			<artifactId>spring-security-oauth2-autoconfigure</artifactId>
    			<version>${spring-security-oauth2-autoconfigure.version}</version>
    		</dependency>
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-configuration-processor</artifactId>
    			<optional>true</optional>
    		</dependency>
    		<dependency>
    			<groupId>commons-io</groupId>
    			<artifactId>commons-io</artifactId>
    			<version>${commons-io.version}</version>
    		</dependency>
    	</dependencies>
    	<build>
            <plugins>
                <plugin>
                    <groupId>org.springframework.boot</groupId>
                    <artifactId>spring-boot-maven-plugin</artifactId>
                </plugin>
            </plugins>
        </build>
    </project>

**2. 定义API**

package com.hegret.api.controller;
    
    import org.springframework.http.ResponseEntity;
    import org.springframework.security.access.prepost.PreAuthorize;
    import org.springframework.web.bind.annotation.GetMapping;
    import org.springframework.web.bind.annotation.RequestMapping;
    import org.springframework.web.bind.annotation.RestController;
    
    import java.security.Principal;
    
    @RestController
    @RequestMapping("/user")
    public class UserController {
    
        @GetMapping
        @PreAuthorize("hasRole('ROLE_USER')")
        public ResponseEntity<Principal> get(final Principal principal) {
            return ResponseEntity.ok(principal);
        }
    
    }

**3. 添加安全配置类WebSecurityConfiguration.java**

import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
    
    @EnableGlobalMethodSecurity(prePostEnabled = true)
    public class WebSecurityConfiguration {
    
    }

**4. 资源服务配置**

**添加安全配置类SecurityProperties.java**

**5.   导出keystore.jks文件的公钥到文件src\\main\\resources下文件public key**

$ keytool -list -rfc --keystore keystore.jks | openssl x509 -inform pem -pubkey -noout

![2019070100055141.png][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70 3][]

**6. 配置application.yml文件**

server:
      port: 8088
    security:
      jwt:
        public-key: classpath:public.txt

**7. 添加spring关于资源服务的配置ResourceServerConfiguration.java**

package com.hegret.config;
    
    import com.hegret.properties.SecurityProperties;
    import org.apache.commons.io.IOUtils;
    import org.springframework.boot.context.properties.EnableConfigurationProperties;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.http.HttpMethod;
    import org.springframework.security.config.annotation.web.builders.HttpSecurity;
    import org.springframework.security.oauth2.config.annotation.web.configuration.EnableResourceServer;
    import org.springframework.security.oauth2.config.annotation.web.configuration.ResourceServerConfigurerAdapter;
    import org.springframework.security.oauth2.config.annotation.web.configurers.ResourceServerSecurityConfigurer;
    import org.springframework.security.oauth2.provider.token.DefaultTokenServices;
    import org.springframework.security.oauth2.provider.token.TokenStore;
    import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter;
    import org.springframework.security.oauth2.provider.token.store.JwtTokenStore;
    
    import java.io.IOException;
    
    import static java.nio.charset.StandardCharsets.UTF_8;
    
    @Configuration
    @EnableResourceServer
    @EnableConfigurationProperties(SecurityProperties.class)
    public class ResourceServerConfiguration extends ResourceServerConfigurerAdapter {
    
        private static final String ROOT_PATTERN = "/**";
    
        private final SecurityProperties securityProperties;
    
        private TokenStore tokenStore;
    
        public ResourceServerConfiguration(final SecurityProperties securityProperties) {
            this.securityProperties = securityProperties;
        }
    
        @Override
        public void configure(final ResourceServerSecurityConfigurer resources) {
            resources.tokenStore(tokenStore());
        }
    
        @Override
        public void configure(HttpSecurity http) throws Exception {
            http.authorizeRequests()
                    .antMatchers(HttpMethod.GET, ROOT_PATTERN).access("#oauth2.hasScope('read')")
                    .antMatchers(HttpMethod.POST, ROOT_PATTERN).access("#oauth2.hasScope('write')")
                    .antMatchers(HttpMethod.PATCH, ROOT_PATTERN).access("#oauth2.hasScope('write')")
                    .antMatchers(HttpMethod.PUT, ROOT_PATTERN).access("#oauth2.hasScope('write')")
                    .antMatchers(HttpMethod.DELETE, ROOT_PATTERN).access("#oauth2.hasScope('write')");
        }
    
        @Bean
        public DefaultTokenServices tokenServices(final TokenStore tokenStore) {
            DefaultTokenServices tokenServices = new DefaultTokenServices();
            tokenServices.setTokenStore(tokenStore);
            return tokenServices;
        }
    
        @Bean
        public TokenStore tokenStore() {
            if (tokenStore == null) {
                tokenStore = new JwtTokenStore(jwtAccessTokenConverter());
            }
            return tokenStore;
        }
    
        @Bean
        public JwtAccessTokenConverter jwtAccessTokenConverter() {
            JwtAccessTokenConverter converter = new JwtAccessTokenConverter();
            converter.setVerifierKey(getPublicKeyAsString());
            return converter;
        }
    
        private String getPublicKeyAsString() {
            try {
                return IOUtils.toString(securityProperties.getJwt().getPublicKey().getInputStream(), UTF_8);
            } catch (IOException e) {
                throw new RuntimeException(e);
            }
        }
    
    }

**8. 添加资源启动器引导类ResourceServerApplication.java**

package com.hegret;
    
    import org.springframework.boot.SpringApplication;
    import org.springframework.boot.autoconfigure.SpringBootApplication;
    
    @SpringBootApplication
    public class ResourceServerApplication {
        
        public static void main(String[] args) {
            SpringApplication.run(ResourceServerApplication.class, args);
        }
    }

**9. 启动引导类**

.   ____          _            __ _ _
     /\\ / ___'_ __ _ _(_)_ __  __ _ \ \ \ \
    ( ( )\___ | '_ | '_| | '_ \/ _` | \ \ \ \
     \\/  ___)| |_)| | | | | || (_| |  ) ) ) )
      '  |____| .__|_| |_|_| |_\__, | / / / /
     =========|_|==============|___/=/_/_/_/
     :: Spring Boot ::        (v2.1.4.RELEASE)
    
    2019-07-01 00:26:02.152  INFO 4836 --- [           main] com.hegret.ResourceServerApplication     : Starting ResourceServerApplication on zsx with PID 4836 (F:\workspace-test\springboot-jwt\springboot-jwt-resource-server\target\classes started by zhang in F:\workspace-test\springboot-jwt\springboot-jwt-resource-server)
    2019-07-01 00:26:02.154  INFO 4836 --- [           main] com.hegret.ResourceServerApplication     : No active profile set, falling back to default profiles: default
    2019-07-01 00:26:02.731  INFO 4836 --- [           main] o.s.b.w.embedded.tomcat.TomcatWebServer  : Tomcat initialized with port(s): 8088 (http)
    2019-07-01 00:26:02.742  INFO 4836 --- [           main] o.apache.catalina.core.StandardService   : Starting service [Tomcat]
    2019-07-01 00:26:02.743  INFO 4836 --- [           main] org.apache.catalina.core.StandardEngine  : Starting Servlet engine: [Apache Tomcat/9.0.17]
    2019-07-01 00:26:02.800  INFO 4836 --- [           main] o.a.c.c.C.[Tomcat].[localhost].[/]       : Initializing Spring embedded WebApplicationContext
    2019-07-01 00:26:02.800  INFO 4836 --- [           main] o.s.web.context.ContextLoader            : Root WebApplicationContext: initialization completed in 628 ms
    2019-07-01 00:26:02.994  INFO 4836 --- [           main] o.s.s.concurrent.ThreadPoolTaskExecutor  : Initializing ExecutorService 'applicationTaskExecutor'
    2019-07-01 00:26:03.082  INFO 4836 --- [           main] .s.s.UserDetailsServiceAutoConfiguration : 
    
    Using generated security password: 1c5dd217-1725-4e46-a7a0-6f4646dd6a8d
    
    2019-07-01 00:26:03.214  INFO 4836 --- [           main] o.s.s.web.DefaultSecurityFilterChain     : Creating filter chain: any request, [org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter@7cb8437d, org.springframework.security.web.context.SecurityContextPersistenceFilter@b2f4ece, org.springframework.security.web.header.HeaderWriterFilter@446c3920, org.springframework.security.web.authentication.logout.LogoutFilter@39008c9f, org.springframework.security.oauth2.provider.authentication.OAuth2AuthenticationProcessingFilter@e48bf9a, org.springframework.security.web.savedrequest.RequestCacheAwareFilter@7dff6d05, org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter@3bae64d0, org.springframework.security.web.authentication.AnonymousAuthenticationFilter@62a4417, org.springframework.security.web.session.SessionManagementFilter@6d2dc9d2, org.springframework.security.web.access.ExceptionTranslationFilter@53dad875, org.springframework.security.web.access.intercept.FilterSecurityInterceptor@56078cea]
    2019-07-01 00:26:03.250  INFO 4836 --- [           main] o.s.b.w.embedded.tomcat.TomcatWebServer  : Tomcat started on port(s): 8088 (http) with context path ''
    2019-07-01 00:26:03.252  INFO 4836 --- [           main] com.hegret.ResourceServerApplication     : Started ResourceServerApplication in 1.269 seconds (JVM running for 1.67)

**10. 验证资源（认证服务器必须开启）**

**10.1 curl方式**

curl "http://localhost:8088/user" -H "Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE1NjE5NTQzNDUsInVzZXJfbmFtZSI6ImFkbWluIiwiYXV0aG9yaXRpZXMiOlsiUk9MRV9VU0VSIl0sImp0aSI6IjBkNzM3MjM5LTc5ODktNDgwNy05M2JkLTgwMWJiMjdmODQ4NyIsImNsaWVudF9pZCI6ImNsaWVudElkIiwic2NvcGUiOlsicmVhZCIsIndyaXRlIl19.SuEAhBhWAeJrXai-Gpg0Q5Yc9UoNrxin7Onpn5OONtfmabhlPj_BZcmWtereWdaIt6-31Keyt_Gnkbz1B5So8F8t3autrSfN_8gS7WmnaLuuwiDcflLNKkVq8SEimi4_WqLKiTmrLm9OODAnrx2N0OPVV8AmU-toH8Q79b-XbKWGHOU5u8cmQ7D07T5oaNasXm1lKpTrXYF-8FU4STUZzCMbhbx1VLyhNNGmEt291IkToVTpGydCySF4vroqKq--DrGWw9ygB_eTgrjz8iWy7KxSLEqkXYqUo0Hz2KoYASrgfxetz8Er6zH0bZgIIdIbCQwKEIzk-r5vbZ_HlO7Hjg"

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70 4][]

**10.2 postman方式****，查看请求[http://localhost:8088/user][http_localhost_8088_user]**

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70 5][]

**到此整合结束 **

[http_blog.marcosbarbero.com_centralized-authorization-jwt-spring-boot2]: http://blog.marcosbarbero.com/centralized-authorization-jwt-spring-boot2/
[https_docs.spring.io_spring-security_site_docs_current_reference_htmlsingle_pe-dpe]: https://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/#pe-dpe
[Link 1]: https://blog.csdn.net/zsx18273117003/article/details/93969511
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70]: /images/20211220/24866d91e981413cae3a9db46a22488d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70 1]: /images/20211220/1dbb8a0c451d4cd2a3b432fd1b2b3f61.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70 2]: /images/20211220/cd870f2dc3e949dfbeee65494bccda13.png
[2019070100055141.png]: /images/20211220/3747aa7309a440bba22412064857b5d2.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70 3]: /images/20211220/3a8955c0eb334608b1a30a0975fad794.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70 4]: /images/20211220/225085af98304d319ece20deae65b6ed.png
[http_localhost_8088_user]: http://localhost:8088/user
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pzeDE4MjczMTE3MDAz_size_16_color_FFFFFF_t_70 5]: /images/20211220/ded10583c12b421f9dd08d105b5b2c63.png